Wireshark · Ethereal-dev: Re: [Ethereal-dev] Incorrect TCP checksums

["Guy Harris" <gharris@xxxxxxxxx>]

Glen Turner said:
> If there room in the libpcap format for a "TCP offloaded" flag?

No.  There's no room for any per-interface or per-packet flags.

That's one of the goals for the next-generation libpcap format (it'd have
provisions for information about the interfaces on which the capture is
done, which could include a "checksums offloaded" flag if available, and
for per-packet information including the direction of the packet, if
available, so that transmitted packets on interfaces doing checksum
offloading could have their checksums not checked).