Changes between Version 9 and Version 10 of SupportedTraceFormats


Ignore:
Timestamp:
11/02/07 11:35:03 (15 years ago)
Author:
perry
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • SupportedTraceFormats

    v9 v10  
    6060== Per format notes ==
    6161
     62=== DAG capture card (dag:) ===
     63 * Requires the Dag API from endace.
     64
    6265=== ERF Trace file (erf:) ===
    6366 * Supports a maximum of 4 interfaces, by convention 0 for outgoing, 1 for incoming, 2 for other, and 3 is unused.
    6467 * There is at least one traceset which is known to have an ERF type of "0", just to be annoying, libtrace attempts to account for this.
     68 * Does ''NOT'' require the dag API to read erf (and compressed erf) traces.
    6569
    6670=== Native Linux interface (int:) ===
    6771 * Currently supports a fast way of retrieving the timestamp of the packet from kernel space using ancillary data.
    68  * Doesn't support uploading bpf filters to the kernel (yet)
     72 * Supports uploading bpf filters into the kernel since 3.0.5+
    6973 * Supports only incoming and outgoing direction, attempts to set other directions will fail. (3.0.3+)
    7074