[pcap-ng-format] Issue #32: Is an empty option/record string valid?

[Hadriel Kaplan]

On Wed, Aug 26, 2015 at 2:34 PM, Guy Harris <guy at alum.mit.edu> wrote:
>
>
> Is an NRB record with a zero-length host name just an indication that the capturing host doesn't know the host name, or should it be treated as an indication that a program reading the file shouldn't try to resolve the IP address in question?

I think it should just mean "don't know the name". I don't think the
latter concept belongs in the file format spec - it's too
application-specific to certain types of pcapng readers and too
usage-specific.

-hadriel

p.s. For Wireshark, I have no doubt we'll eventually create a custom
block for some/all of our user preference and other settings to be
encoded in the file, including whether to resolve host names and such.