[pcap-ng-format] The record length in the Name Resolution Block appears to be a record *value* length

[Jasper Bongertz]

Hello Guy,

Friday, May 30, 2014, 12:41:12 AM, you wrote:


> On May 10, 2012, at 11:24 AM, Guy Harris <guy at alum.mit.edu> wrote:

>> In section 3.6 "Name Resolution Block (optional)" of the pcap-NG spec, it says:
>> 
>>               ...
>> 
>>       Each Record Value is aligned to a 32-bit boundary. The corresponding Record Length reflects the actual length of the Record Value.
>> 
>> From "reflects the actual length of the Record Value", and from the end_of_recs record having a length 0f 0, that sounds as if the Record Length does *NOT* include the Record Type and Record Length fields.  The spec should perhaps say that a bit more explicitly, or perhaps rename that field to "Record Value Length".

> Done, including renaming the field.

Nice work, Guy, but it looks like the web page at winpcap.org does not
reflect  any  of  the changes yet. I did a couple of changes some time
ago,  too,  and  they  don't  show up. AFAIK there is a manual process
involved to update the page from the subversion repository.

Cheers,
Jasper
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3708 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://www.winpcap.org/pipermail/pcap-ng-format/attachments/20140530/0ab4cd25/attachment.bin>