--- Begin Message ---
Thank you for explaining in such a great detail.

> It's about either 1) saying "slicing is forbidden" or 2) saying "here's how 
> you do slicing".

I would rather not introduce the limitation if not really necessary. The way 
you described earlier made sense to me so I am fine with that.


> Perhaps that's an indication that Wireshark needs to do a better job of 
> distinguishing between metadata headers and packet data, then.
> (I already think so, as 1) counting metadata headers as data means, for 
> example, that you get bogus bytes/second values and 2) separating
> them may make it more straightforward to implement transformation from, for 
> example,

This sounds like a good approach to the problem.

> I'm not sure there *are* any currently cases where a given LINKTYPE_ value 
> specifies a metadata trailer.

So to me it seems there is currently no mechanism relying on the meta data to 
be in form of a header. I would like to go on with the footer structure if you 
are OK with that.


Hilscher Gesellschaft für Systemautomation mbH   |  Rheinstrasse 15  |  65795 
Hattersheim  |  Germany  |  www.hilscher.com<http://www.hilscher.com>
Sitz der Gesellschaft / place of business: Hattersheim  |  Geschäftsführer / 
managing director: Sebastian Hilscher, Hans-Jürgen Hilscher
Handelsregister / commercial register: Frankfurt B 26873  |  Ust. Idnr. / VAT 
No.: DE113852715
Registergericht / register court: Amtsgericht Frankfurt/Main

Important Information:
This e-mail message including its attachments contains confidential and legally 
protected information solely intended for the addressee. If you are not the 
intended addressee of this message, please contact the addresser immediately 
and delete this message including its attachments. The unauthorized 
dissemination, copying and change of this e-mail are strictly forbidden. The 
addresser shall not be liable for the content of such changed e-mails.

Wichtiger Hinweis:
Diese E-Mail einschließlich ihrer Anhänge enthält vertrauliche und rechtlich 
geschützte Informationen, die nur für den Adressaten bestimmt sind. Sollten Sie 
nicht der bezeichnete Adressat sein, so teilen Sie dies bitte dem Absender 
umgehend mit und löschen Sie diese Nachricht und ihre Anhänge. Die unbefugte 
Weitergabe, das Anfertigen von Kopien und jede Veränderung der E-Mail ist 
untersagt. Der Absender haftet nicht für Inhalte von veränderten E-Mails.

--- End Message ---
_______________________________________________
tcpdump-workers mailing list
tcpdump-workers@lists.tcpdump.org
https://lists.sandelman.ca/mailman/listinfo/tcpdump-workers

Reply via email to