> When do you expect the new format will be available?
I don't think we have a date yet. I think we'd like to finish up the specification soon; it'll take longer to implement APIs to use all the capabilities, although we could probably add the ability to read those files - or, at least, files in that format that don't have captures from more than one network interface - sooner than that, with the existing APIs (which won't show all the data available in the file).
> If I can help, let me know.
The current specification for the new format can be found at
http://www.tcpdump.org/pcap/pcap.html
or
http://www.tcpdump.org/pcap/pcap.txt
Send any suggestions you have to the list.
I note this draft is due to expire at the end of August, is there a repository of changes made since the draft was published?
Is this list the primary discussion forum for this draft? I see a reference to 'Network Working Group', is this an IETF body?
Regards, Stephen. -- ----------------------------------------------------------------------- Stephen Donnelly BCMS PhD email: [EMAIL PROTECTED] Endace Technology Ltd phone: +64 7 839 0540 Hamilton, New Zealand cell: +64 21 1104378 ----------------------------------------------------------------------- - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.