- Assumed a max of two addresses for an interface
- The arp hardware type and operation are coming through as hex in the show values from tshark, not decimal as expected
- There's a wireshark bug which messes up the show values for AddressPrespecified timestamps. They come out with an additional timestamp value instead of an address/value pair.
- The Records field query needs non-null concatables