Re: Proposal for nic_tap component

2018-04-13 Thread Martijn Verschoor
Hi Emery, Thanks for your suggestion to log the intercepted network packets in a pcap(ng) file. This could be a valuable extension to the nic_tap component. I would recommend to use the proposed nic_tap component to deal with the interception and implement the pcap(ng) implementation in a dedicat

Re: Proposal for nic_tap component

2018-04-07 Thread Emery Hemingway
Hi Martijn, I had considered doing this, but didn't find enought time. I did some research though. The 'pcapng' is the file format to use if you want compatibility with wireshark. It is also the same format that QEMU outputs when used with the '-nic dump,file=...' option. The spec is pretty easy t