[pcap-ng-format] Section length in the SHB

[Hadriel Kaplan]

On Wed, Aug 26, 2015 at 5:51 PM, Jasper Bongertz <jasper at packet-foo.com> wrote:
> Agree, let's go for signed 64-bit here.

Did you mean *unsigned* 64-bit?


> BTW, I have never seen a pcapng file actually using a value other than
> 0xFFFFFFFFFFFFFFFF, because total length is usually yet unknown while
> starting to write the file (and no program seems to bother to update
> it after writing the final byte :-))

Same here - I've only seen it in test files, from a program I wrote to
generate pcapng test files.

-hadriel