From leres@ee.lbl.gov  Thu Oct  2 21:32:52 1997
Received: from ell.ee.lbl.gov (ell.ee.lbl.gov [131.243.1.20])
          by hub.freebsd.org (8.8.7/8.8.7) with ESMTP id VAA15662
          for <FreeBSD-gnats-submit@freebsd.org>; Thu, 2 Oct 1997 21:32:51 -0700 (PDT)
Received: by ell.ee.lbl.gov (8.8.7/8.8.5)
	id VAA27803; Thu, 2 Oct 1997 21:32:50 -0700 (PDT)
Message-Id: <199710030432.VAA27803@ell.ee.lbl.gov>
Date: Thu, 02 Oct 97 21:32:50 PDT
From: Craig Leres <leres@ee.lbl.gov>
To: FreeBSD-gnats-submit@freebsd.org
Subject: magic file entries for tcpdump save files
X-Send-Pr-Version: 3.2

>Number:         4682
>Category:       misc
>Synopsis:       magic file entries for tcpdump save files
>Confidential:   no
>Severity:       non-critical
>Priority:       low
>Responsible:    freebsd-bugs
>State:          closed
>Quarter:        
>Keywords:       
>Date-Required:  
>Class:          change-request
>Submitter-Id:   current-users
>Arrival-Date:   Thu Oct  2 21:40:01 PDT 1997
>Closed-Date:    Sun Apr 26 10:54:22 PDT 1998
>Last-Modified:  Sun Apr 26 10:54:38 PDT 1998
>Originator:     Craig Leres
>Release:        FreeBSD 2.2.2-RELEASE i386
>Organization:
Lawrence Berkeley National Laboratory
>Environment:

	<Relevant environment information (multiple lines)>

>Description:

	Here are some entries for /usr/share/misc/magic that
	identify the two kinds of tcpdump save files.

>How-To-Repeat:



>Fix:

# 
# libpcap/tcpdump packet capture savefiles
#
0       lelong          0xa1b2c3d4      tcpdump save file
>Release-Note:
>Audit-Trail:
State-Changed-From-To: open->closed 
State-Changed-By: phk 
State-Changed-When: Sun Apr 26 10:54:22 PDT 1998 
State-Changed-Why:  
different change is in current 
>Unformatted:
 >4      leshort         x               (v%d
 >6      leshort         x               \b.%d, little-endian)
 0       belong          0xa1b2c3d4      tcpdump save file
 >4      beshort         x               (v%d
 >6      beshort         x               \b.%d, big-endian)
