On Tue, Apr 05, 2005 at 10:36:59AM -0700, Shyam Kumar wrote: | | [1] Data Representation is handled by tcpdump code only or both by | tcpdump code & libpcap code??
if by data-representation you mean dissecting protocols then this is done by tcpdump; | [2] which *.c & *.h files deals with data representation in tcpdump & | libpcap code ?? pretty much each protocol has its own print-<protocol-name>.c file | [3] Can the data representation part be easily segregated from parsing & | filtering mechanism?? not easy doable ... after the tpcdump 3.9 release we will start working on getting the parsing part independent from the display output; the goal is to render the display output based on a generic datastructure in every target format that users are interested (xml etc.) without ever tweaking the parsing code again; /hannes - This is the tcpdump-workers list. Visit https://lists.sandelman.ca/ to unsubscribe.
