Re: pcap-savefile(5) in libpcap-1.10

[Denis Ovsienko <denis () ovsienko info>]

On Fri, 10 May 2024 17:20:30 -0700
Guy Harris <gharris () sonic net> wrote:

> > As far as I understand, this translates into the following 5-bit
> > value space (P-FCSlen):
> >
> > 0-0000: FCS length is unknown.
> > 0-0001: 2-octet FCS is absent. <-- ???  
>
>       ...
>
> > This looks redundant, unless the case "FCS length is unknown" is not
> > the same as "FCS is absent".  
>
> They're not the same.

[...]

It took me quite some time to comprehend the meaning of this encoding.
Perhaps the wording in the man page could be something such as:

P (1 bit): If set, indicates that the Frame Check Sequence (FCS) length
in this file is known and the "FCS len" below contains the length.  If
not set, it indicates that the FCS length in this file is unknown, and
the value stored in "FCS len" does not mean anything.

-- 
    Denis Ovsienko
_______________________________________________
tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org
To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s