[pcap-ng-format] Issue #32: Is an empty option/record string valid?

Guy Harris guy at alum.mit.edu
Wed Aug 26 18:34:41 UTC 2015


On Aug 26, 2015, at 10:43 AM, Hadriel Kaplan <the.real.hadriel at gmail.com> wrote:

> For example just a zero byte for the nrb_record_ipv4/v6 name string
> portions; or not even a zero byte for something like opt_comment or
> if_description.
> 
> my 2 cents: I would argue they are valid.

Yes.

They might be *pointless* - a zero-length if_description would be equivalent to not *having* an if_description - but "pointless" doesn't imply "invalid".

Is an NRB record with a zero-length host name just an indication that the capturing host doesn't know the host name, or should it be treated as an indication that a program reading the file shouldn't try to resolve the IP address in question?


More information about the pcap-ng-format mailing list