| | 64 | |
| | 65 | == Per format notes == |
| | 66 | |
| | 67 | === ERF Trace file (erf:) === |
| | 68 | * Supports a maximum of 4 interfaces, by convention 0 for outgoing, 1 for incoming, 2 for other, and 3 is unused. |
| | 69 | * There is at least one traceset which is known to have an ERF type of "0", just to be annoying, libtrace attempts to account for this. |
| | 70 | |
| | 71 | === Native Linux interface (int:) === |
| | 72 | * Currently supports a fast way of retrieving the timestamp of the packet from kernel space using ancillary data. |
| | 73 | * Doesn't support uploading bpf filters to the kernel (yet) |
| | 74 | * Supports only incoming and outgoing direction, attempts to set other directions will fail. (3.0.3+) |
