[pcap-ng-format] Pcap-ng file with no IDBs

Hadriel Kaplan the.real.hadriel at gmail.com
Thu Aug 20 13:04:15 UTC 2015


Howdy,
the current draft states in several places that a Pcap-ng file must
have at least one IDB in the file, but does anyone object to changing
this to instead allow a file to have no IDB if it has no packet blocks
or any block which requires an IDB (e.g., an ISB)?

This topic came up in a bug discussion for wireshark.

-hadriel


More information about the pcap-ng-format mailing list