#block #file-format #pcapng #capture #standard #draft #version

pcapng-writer

An implementation of the pcapng capture file format encoding

1 unstable release

0.1.0 Jan 23, 2021

#2011 in Parser implementations

MIT license

73KB
1.5K SLoC

Tests

pcapng-writer

An implementation of the pcapng capture file format encoding.

This library is based on the draft standard version 02 (draft-tuexen-opsawg-pcapng-02).

Example

For an example of how to use the library, see the integration test.

Supported block types

Block Type Supported?
Section Header Block Yes
Interface Description Block Yes
Enhanced Packet Block Yes
Simple Packet Block Yes
Name Resolution Block No
Interface Statistics Block Yes
systemd Journal Export Block No
Decryption Secrets Block No
Custom Block No

Supported option types

Block Type Option Supported?
Common opt_endofopt Yes
Common opt_comment Yes
Common opt_custom No
Section Header Block shb_hardware No
Section Header Block shb_os No
Section Header Block shb_userappl No
Interface Description Block if_name Yes
Interface Description Block if_description Yes
Interface Description Block if_IPv4addr Yes
Interface Description Block if_IPv6addr Yes
Interface Description Block if_MACaddr Yes
Interface Description Block if_EUIaddr No
Interface Description Block if_speed No
Interface Description Block if_tsresol Yes
Interface Description Block if_tzone No
Interface Description Block if_filter No
Interface Description Block if_os No
Interface Description Block if_fcslen No
Interface Description Block if_tsoffset No
Interface Description Block if_hardware No
Enhanced Packet Block epb_flags Yes
Enhanced Packet Block epb_hash No
Enhanced Packet Block epb_dropcount No
Name Resolution Block ns_dnsname No
Name Resolution Block ns_dnsIP4addr No
Name Resolution Block ns_dnsIP6addr No
Interface Statistics Block isb_starttime No
Interface Statistics Block isb_endtime No
Interface Statistics Block isb_ifrecv No
Interface Statistics Block isb_ifdrop No
Interface Statistics Block isb_filteraccept No
Interface Statistics Block isb_osdrop No
Interface Statistics Block isb_usrdeliv No

License

This project is licensed under the MIT license.

See LICENSE-MIT for details.

Dependencies

~115KB