["Fulvio Risso" <fulvio.risso@xxxxxxxxx>]

Hi Michael.

> -----Original Message-----
> From: Michael Tuexen [mailto:Michael.Tuexen@xxxxxxxxxxxxxxxxx]
> Sent: sabato 10 gennaio 2004 10.00
> To: Fulvio Risso
> Cc: Ethereal; Hartmut Mueller; Carsten Buchenau
> Subject: Re: [Ethereal-dev] hethereal: HTML output & control /
> client-serverissue....
>
>
> Fulvio,
>
> which protocol are you using between the network probe and the
> collector?

I defined a new protocol. Currently, there are no publications about it,
just because it was an experimental protocol and my intention was to try to
standardize it through the IETF PSAMP working group.
Then, the working group decided to adopt a Netflow-like approach, so my
protocol is not going to be a standard.
However, they plan to specify only a protocol that carries data, not
commands. They want to send commands (i.e. "start capture", etc) through
SNMP or something like that (even the CLI in routers). I believe this
approach does not work when talking about host-based packet capture.
So, we'll see in the future; probably there is still need of my protocol,
maybe upgrated to version "1" (currently it is "0"), taking into account the
errors I made in this first version. I believe the situation will be much
more clear in mid 2004.


> Where are they specified?
Although there are no draft / papers about this proto, the implementation is
public and it has a BSD licence.
You can find sources in WinPcap 3.01 alpha.

Cheers,

	fulvio