Hi Olivier,
Thanks for the patch. While this patch is useful to find/filter truncated
frames, I also need:
- A field in the packet_info structure to indicate a truncated frame.
This would be used to detect if reassembly must be attempted at all.
- Allow other protocols to set this truncated bit. For example, it maybe
that a frame is truncated by the upstream device such as a MDS port
analyzer adapter and not by libpcap.
If there is agreement that this is acceptable, uf you'd like to add this, that
is fine or I can do it as well.
Dinesh
Biot Olivier writes:
> See attached patch: defines frame.truncated (FT_BOOLEAN) only if frame is
> truncated.
>
> Please review and commit.
>
> Regards,
>
> Olivier
--
I am not young enough to know everything. - Oscar Wilde
