Discussion:
[tcpdump] timestamps: make possible to request high precision timestamps (#377)
Michael Richardson
2014-05-03 18:55:48 UTC
Permalink
-k Print the comment field from the libpcap packet header. Apple
modification.
so it's getopt_long() time. (I think "comment field from the libpcap
packet header" means "comment option from the pcap-ng packet block".)
Yes. My notion was to rid tcpdump.c of all code not related to option
parsing, and then introduce a pktdump.c interface that that could start
fresh in the short-option parsing space. Could toggle on $0/argv[0].
I've got a version of tcpdump that uses getopt_long(); I'll work on
making it work right when the OS doesn't have getopt_long(), and check
it in.
okay... !

--
] Never tell me the odds! | ipv6 mesh networks [
] Michael Richardson, Sandelman Software Works | network architect [
] ***@sandelman.ca http://www.sandelman.ca/ | ruby on rails [
Guy Harris
2014-05-03 19:18:21 UTC
Permalink
Post by Michael Richardson
Yes. My notion was to rid tcpdump.c of all code not related to option
parsing, and then introduce a pktdump.c interface that that could start
fresh in the short-option parsing space. Could toggle on $0/argv[0].
Unless pktdump goes down the Wireshark path of having dissectors register preferences by name, with a generic option such as "-o" allowing options to be set by name (which would allow -b, -E, -H, -K, -m, -M, -R, and -S to be absorbed into that option), it might still run the risk of running out of single-letter options.
Michael Richardson
2014-05-03 20:00:43 UTC
Permalink
Post by Guy Harris
Post by Michael Richardson
Yes. My notion was to rid tcpdump.c of all code not related to option
parsing, and then introduce a pktdump.c interface that that could
start fresh in the short-option parsing space. Could toggle on
$0/argv[0].
Unless pktdump goes down the Wireshark path of having dissectors
register preferences by name, with a generic option such as "-o"
allowing options to be set by name (which would allow -b, -E, -H, -K,
-m, -M, -R, and -S to be absorbed into that option), it might still run
the risk of running out of single-letter options.
I don't think that I'd want to let specific dissectors capture single letter
options, period. So, yes, -o sounds right, or just use long options for
that.

--
] Never tell me the odds! | ipv6 mesh networks [
] Michael Richardson, Sandelman Software Works | network architect [
] ***@sandelman.ca http://www.sandelman.ca/ | ruby on rails [
Continue reading on narkive:
Search results for '[tcpdump] timestamps: make possible to request high precision timestamps (#377)' (Questions and Answers)
3
replies
information on Oracle Pl/Sql?
started 2008-06-06 02:07:11 UTC
software
Loading...