Re: Proposed new pcap format

[Darren Reed <darrenr () reed wattle id au>]

In some email I received from Guy Harris, sie wrote:
> On Sat, Apr 10, 2004 at 04:39:41AM +1000, Darren Reed wrote:
> > I'll agree that this, as part of the per-packet header, would be a useful
> > addition to the pcap format.  No need for chained hashing, just per-record.
>
> Part of the packet block header, or an option in the packet block?  I'd
> vote for the latter.

Yes, I think the latter too.  You could easily have different checksum
functions eligable for use here.

Darren
-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.