> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Guy Harris
> Sent: giovedi 1 luglio 2004 8.25
> To: [EMAIL PROTECTED]
> Subject: Re: [tcpdump-workers] text format stability
>
>
> On Thu, Jul 01, 2004 at 07:34:44AM +0200, Fulvio Risso wrote:
> > Ethereal is able to prodice PDML output (altough it uses a
> slightly modified
> > dialectn of PDML).
>
> What are the modifications?
As far as I remember, in Ethereal:
- field names include the protocol name
- there are some additional fields in the "packet header" section
> (Note that one problem is that PDML's field
> names come from the NetPDL specification for the protocol - this means
> that either
>
> 1) a different NetPDL spec for the protocol
>
> or
>
> 2) a dissector not using NetPDL - for example, created before
> NetPDL existed
>
> might result in different field names.
This is correct, but it does not lead to a different format for the PDML
file.
It does only affects the full compatibility between PDML files generated by
Ethereal when read by Analyzer.
fulvio
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.
