On Feb 4, 2011, at 1:59 AM, Schemmel, Hans-Christoph wrote: > Guy Harris <guy <at> alum.mit.edu> writes: > >> >> OK, so it's: >> >> Header_Size: 1 octet >> >> A sequence of zero or more instances of: >> >> Msg_ID: 2 octets >> >> Freq_ID: 2 octets >> >> Start_Pos: 1 octet >> >> End_Pos: 1 octet >> >> Flag: 1 octet >> >> Direction: 1 octet >> >> MUX_Frame: the rest of the packet >> > > Yes, that´s correct.
Start_Pos and End_Pos are relative to the beginning of MUX_Frame, right? I.e., a 4-byte chunk starting at the beginning of MUX_Frame would have a Start_POS of 0? Would End_POS be 3 (meaning that it's the offset of the last byte of the chunk) or 4 (meaning that it's the offset one byte *after* the last byte of the chunk)? - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.