Michael Tuexen <Michael.Tuexen@...> writes:

> On Jan 2, 2012, at 3:53 AM, Guy Harris wrote:
> > I'll send the spec maintainers a note asking about this, and suggesting that
the spec indicate that all
> strings are counted (but shouldn't contain a null byte).
> Hmm, I wouldn't mind if they are 0-terminiated, I even thought they are.
However, it would be great
> if it would be described explicitly in the spec.

In section 3.6[1], there is specific mention of the dns entries being
zero-terminated in Table 2.  While not part of the options[2] section, it could
lead one to believe that other strings should be zero-terminated as well. 
Should the mention of the dns entries being zero-terminated be changed as well?

And although the strings are counted, should that necessarily mean that strings
shouldn't be null-terminated, or only that they need not be null-terminated?

[1]: http://www.winpcap.org/ntar/draft/PCAP-DumpFileFormat.html#sectionnrb
[2]: http://www.winpcap.org/ntar/draft/PCAP-DumpFileFormat.html#sectionopt


___________________________________________________________________________
Sent via:    Wireshark-dev mailing list <wireshark-dev@wireshark.org>
Archives:    http://www.wireshark.org/lists/wireshark-dev
Unsubscribe: https://wireshark.org/mailman/options/wireshark-dev
             mailto:wireshark-dev-requ...@wireshark.org?subject=unsubscribe

Reply via email to