[pcap-ng-format] Issue #32: Is an empty option/record string valid?
Guy Harris
guy at alum.mit.edu
Wed Aug 26 18:34:41 UTC 2015
On Aug 26, 2015, at 10:43 AM, Hadriel Kaplan <the.real.hadriel at gmail.com> wrote:
> For example just a zero byte for the nrb_record_ipv4/v6 name string
> portions; or not even a zero byte for something like opt_comment or
> if_description.
>
> my 2 cents: I would argue they are valid.
Yes.
They might be *pointless* - a zero-length if_description would be equivalent to not *having* an if_description - but "pointless" doesn't imply "invalid".
Is an NRB record with a zero-length host name just an indication that the capturing host doesn't know the host name, or should it be treated as an indication that a program reading the file shouldn't try to resolve the IP address in question?
More information about the pcap-ng-format
mailing list