Skip to content

Commit 30e32f0

Browse files
committed
Give a more detailed explanation of the use of 0xa1b2c3d4 by rpcap. [skip ci]
0xa1b2c3d4 is used in the rpcap protocol - and, yes, I chose it because it was already being used as a byte-order indication - but it doesn't indicate any time between microsecond-time-resolution pcap format and rpcap; any future changes to rpcap to support higher-resolution time stamps, or pcapng-like capabilities, won't involve a change to the byte-order indication value.
1 parent 29faf77 commit 30e32f0

File tree

1 file changed

+4
-1
lines changed

1 file changed

+4
-1
lines changed

sf-pcap.c

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -71,7 +71,10 @@
7171

7272
/*
7373
* Standard libpcap format.
74-
* rpcapd can too use this number in its network protocol to tell endianness.
74+
*
75+
* The same value is used in the rpcap protocol as an indication of
76+
* the server byte order, to let the client know whether it needs to
77+
* byte-swap some host-byte-order metadata.
7578
*/
7679
#define TCPDUMP_MAGIC 0xa1b2c3d4
7780

0 commit comments

Comments
 (0)