[pcap-ng-format] representing checksum offload in pcapng

Stephen Hemminger stephen at networkplumber.org
Tue Oct 15 17:02:58 UTC 2019


Is there any proposed option for representing checksum offload
in an enhanced packet block?  This matters when packet is truncated
by snap length.

Maybe something that has ability to indicate good and bad checksum
for TCP, UDP, and SCTP. Could even do inner/outer checksums.
The default should be that if option is not present, that
means no checksum offload information is available and
the checksum status is unknown.


More information about the pcap-ng-format mailing list