On Mon, May 8, 2017 at 12:38 PM, Brian Kantor Brian@ucsd.edu wrote:
(Please trim inclusions from previous messages) _______________________________________________ If your gateway appears in the pkterrors.txt file, the packets which caused that error to be logged and the packet to be dropped are now available in a file you can retrieve with your web browser. They are binary log files, so you'll need a program to interpret them. The URL for a typical file is
https://gw.ampr.org/private/errors/67.164.64.8.bin
where of course the IP address part changes to whatever your gateway address is. The files are removed and start fresh at midnight Pacific time (GMT-7 or -8). For some error-prone sites, they get large-ish.
The format of each file is /*
- 2 bytes error number (unsigned short)
- 2 bytes packet length (unsigned short)
- 4 bytes time (seconds since epoch)
- 4 bytes fractional seconds (microseconds)
- n bytes (packetlen) encapped IP packet in network byte order
*/
Brian,
This is a neat feature!
Would you consider changing the format to pcap or pcapng? This would allow viewing the packets in Wireshark. The format isn't much more complicated than the format you've chosen:
https://wiki.wireshark.org/Development/LibpcapFileFormat
Tom KD7LXL