Changes between Version 9 and Version 10 of SupportedTraceFormats


Ignore:
Timestamp:
11/02/07 11:35:03 (6 years ago)
Author:
perry
Comment:

--

Legend:

Unmodified
Added
Removed
Modified

  • SupportedTraceFormats

    v9 v10  
    6060== Per format notes == 
    6161 
     62=== DAG capture card (dag:) === 
     63 * Requires the Dag API from endace. 
     64 
    6265=== ERF Trace file (erf:) === 
    6366 * Supports a maximum of 4 interfaces, by convention 0 for outgoing, 1 for incoming, 2 for other, and 3 is unused. 
    6467 * There is at least one traceset which is known to have an ERF type of "0", just to be annoying, libtrace attempts to account for this. 
     68 * Does ''NOT'' require the dag API to read erf (and compressed erf) traces. 
    6569 
    6670=== Native Linux interface (int:) === 
    6771 * Currently supports a fast way of retrieving the timestamp of the packet from kernel space using ancillary data. 
    68  * Doesn't support uploading bpf filters to the kernel (yet) 
     72 * Supports uploading bpf filters into the kernel since 3.0.5+ 
    6973 * Supports only incoming and outgoing direction, attempts to set other directions will fail. (3.0.3+) 
    7074