[pcap-ng-format] Proposed new Alternative Packet Block

[Serge Aleynikov]

Guy,

I have a question on your comment:

>    apb_capt_len  0x82  -       no         Packet's Captured Length
>
> Wouldn't that be redundant, just as it is for the Simple Packet Block?
> You have to figure out how many bytes of option there are before you can
> find the beginning of the packet data and, at that point, the original size
> of the packet is min(snapshot length, bytes left in the block).
>

​In the absence of this option, since the Packet Data may be padded to the
32-bit ​boundary, how would one determine the actual packet size WITHOUT
padding?

Serge
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://www.winpcap.org/pipermail/pcap-ng-format/attachments/20160816/cad2a566/attachment.html>