[pcap-ng-format] Pcap-ng file with no IDBs

Jasper Bongertz jasper at packet-foo.com
Thu Aug 20 22:42:59 UTC 2015


I'm fine with the change. I guess SysDig may be writing PCAPng files
without IDBs already. Let's enforce IDBs having to be in the file only
if they are referenced to, e.g. by packet blocks and ISBs.

Thursday, August 20, 2015, 3:04:15 PM, Hadriel Kaplan wrote:

> Howdy,
> the current draft states in several places that a Pcap-ng file must
> have at least one IDB in the file, but does anyone object to changing
> this to instead allow a file to have no IDB if it has no packet blocks
> or any block which requires an IDB (e.g., an ISB)?



-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 3681 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://www.winpcap.org/pipermail/pcap-ng-format/attachments/20150821/bca736bd/attachment.bin>


More information about the pcap-ng-format mailing list