Re: Proposed new pcap format

[Jefferson Ogata <Jefferson.Ogata () noaa gov>]

Guy Harris wrote:
> That might not require us to choose a default, however, as long as the 
> kernel can tell libpcap which hash value it's providing (if any).  It 
> might, however, mean that we should choose a hash value that, for kernel 
> hashing, is considered "adequate", and recommend that capture mechanisms 
> implement it.

Maybe I missed something, but why does the kernel have to generate the 
hash? Are we actually worried that the packet data will be corrupted 
between the kernel and userland?

Also, why is the list setting Reply-to: to 
<tcpdump-workers () lists sandelman ca>, rather than 
<tcpdump-workers () lists tcpdump org>, which is the advertised address of 
the list?

--
Jefferson Ogata <Jefferson.Ogata () noaa gov>
NOAA Computer Incident Response Team (N-CIRT) <ncirt () noaa gov>

-
This is the tcpdump-workers list.
Visit https://lists.sandelman.ca/ to unsubscribe.