Changes between Version 6 and Version 7 of SupportedTraceFormats


Ignore:
Timestamp:
09/05/07 12:55:36 (14 years ago)
Author:
perry
Comment:

--

Legend:

Unmodified
Added
Removed
Modified
  • SupportedTraceFormats

    v6 v7  
    6262 
    6363URI's that include a filename usually accept '-' to represent stdin, e.g. {{{erf:-}}} will read ERF records from stdin.
     64
     65== Per format notes ==
     66
     67=== ERF Trace file (erf:) ===
     68 * Supports a maximum of 4 interfaces, by convention 0 for outgoing, 1 for incoming, 2 for other, and 3 is unused.
     69 * There is at least one traceset which is known to have an ERF type of "0", just to be annoying, libtrace attempts to account for this.
     70
     71=== Native Linux interface (int:) ===
     72 * Currently supports a fast way of retrieving the timestamp of the packet from kernel space using ancillary data.
     73 * Doesn't support uploading bpf filters to the kernel (yet)
     74 * Supports only incoming and outgoing direction, attempts to set other directions will fail. (3.0.3+)