[pcap-ng-format] Validating a multi-session implementation

[Guy Harris]

On Apr 14, 2016, at 8:21 AM, Emery Hemingway <emery at vfemail.net> wrote:

> I'm working on a tcpdump like utility and I would like 
> some advice on how to validate the dump file.
> 
> This one is a bit novel, its for a microkernel like 
> environment so it can be attached directly to a driver or 
> an application. The utility is aware of the application 
> attaching or detaching from the network (almost always 
> one attachment per process-liftetime), so it seemed 
> natural to split these session into pcapng sessions.

By "sessions" you mean "sections", right?