Wireshark-dev: Re: [Wireshark-dev] [ntar-workers] Extending Wireshark libpcap format support, o
Date Index · Thread Index · Other Months · All Mailing Lists
Date Prev · Date Next · Thread Prev · Thread Next
From: Gerald Combs <gerald@xxxxxxxxxxxxx>
Date: Thu, 27 Sep 2007 11:23:36 -0700
Pekka Pietikainen wrote:
> Oh. If you add a new DLT_ value, having it in a way that is extensible
> + has a way of saying "Here's the raw packet data. It's plain old
> DLT_EN10MB". And the next one might be 802.11 and the next one 802.11 with 
> a radiotap header. 

The Per-Packet Information header (PPI) does exactly that:
http://www.cacetech.com/documents/.