[pcap-ng-format] TODO in pcap-ng specifications

[Guy Harris]

On Jul 24, 2012, at 7:28 AM, Anders Broman wrote:

> Hi,
> One comment after a quick read trough
> if_IPv4addr				multiple
> if_IPv6addr				multiple
> 
> Is the IP address(es) of the capturing interface of any interest?
> If the capture is of a span/mirror port or of a tap I guess not, we have an SIP user traffic
> Generator which have > 13 0000 virtual IP addresses assigned to a interface that'd mess up
> Any representation of IP addresses badly I think.

"Mess up" in the sense that you'd have an IDB with > 13000 options, I guess, but not "mess up" in the sense that you'd need a single option with 13000 addresses in it.

In any case, they're called "options", so a program writing out a pcap-ng file is under no obligation to list any of the addresses.

And, in any case, the spec already says

> This option can be repeated multiple times within the same Interface Description Block when multiple IPv4 addresses are assigned to the interface.

for if_IPv4addr and

> This option can be repeated multiple times within the same Interface Description Block when multiple IPv6 addresses are assigned to the interface.

for if_IPv6addr, so it *already* says there can be more than one of them.