[pcap-ng-format] Multiple SHBs in a file

[Michael Richardson]

Hadriel Kaplan <the.real.hadriel at gmail.com> wrote:
    > Is there an actual, practical, use-case for having multiple Section
    > Header Blocks in a single PCAP-NG file?

    > It makes read-processing a file far more complicated, and I don't see
    > any real benefit in return - except maybe for a dumb "file merger"
    > which just concatenates SHB sections from separate files into one file
    > - but I'm not sure why we should complicate the file format for that
    > one action.

I thought one of the points of being able to insert SHBs anywhere is that one
can merge *in real time* data from multiple sources.

Can you explain why the read-processing becomes harder?  Probably I'm just
lacking implementation experience here.

--
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        | network architect  [
]     mcr at sandelman.ca  http://www.sandelman.ca/        |   ruby on rails    [

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 481 bytes
Desc: not available
URL: <http://www.winpcap.org/pipermail/pcap-ng-format/attachments/20150824/b1b93b77/attachment.pgp>