[pcap-ng-format] Comments for unknown blocks [was Re: opsarea presentation?]

[Marc Petit-Huguenin]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On 07/23/2014 11:21 AM, Michael Tuexen wrote:
> On 23 Jul 2014, at 13:16, Michael Richardson <mcr at sandelman.ca> wrote:
> 
>> 
>> So, was pcap-ng well receives by opsarea WG this morning?
> There were a couple of people willing to review and contribute. I also got
> or will get contacts within Apple, Google, Microsoft and hopefully others.
> The WG chairs will talk to the AD if it is OK to work on that within the
> OPSAWG. I guess we mostly need concrete names of people who are willing to
> (and actually will) contribute and review. And then move the discussion to
> the WG mailing list.
> 

I was one of the persons who volunteered on reviewing this draft.

One issue I found in the pcapng format is that it is not possible to add a
comment (which is generic to all block formats) in an unknown block because
there is no way to know where the options starts without knowing the size of
the content of a block.  A related problem is that it is not possible to
allocate new generic options, as all specific options starts at codepoint 2.

Thanks.

- -- 
Marc Petit-Huguenin
Email: marc at petit-huguenin.org
Blog: http://blog.marc.petit-huguenin.org
Profile: http://www.linkedin.com/in/petithug
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=nnvL
-----END PGP SIGNATURE-----