Changes between Version 9 and Version 10 of SupportedTraceFormats
- Timestamp:
- 11/02/07 11:35:03 (15 years ago)
Legend:
- Unmodified
- Added
- Removed
- Modified
-
SupportedTraceFormats
v9 v10 60 60 == Per format notes == 61 61 62 === DAG capture card (dag:) === 63 * Requires the Dag API from endace. 64 62 65 === ERF Trace file (erf:) === 63 66 * Supports a maximum of 4 interfaces, by convention 0 for outgoing, 1 for incoming, 2 for other, and 3 is unused. 64 67 * There is at least one traceset which is known to have an ERF type of "0", just to be annoying, libtrace attempts to account for this. 68 * Does ''NOT'' require the dag API to read erf (and compressed erf) traces. 65 69 66 70 === Native Linux interface (int:) === 67 71 * Currently supports a fast way of retrieving the timestamp of the packet from kernel space using ancillary data. 68 * Doesn't support uploading bpf filters to the kernel (yet)72 * Supports uploading bpf filters into the kernel since 3.0.5+ 69 73 * Supports only incoming and outgoing direction, attempts to set other directions will fail. (3.0.3+) 70 74