1 unstable release
| 0.1.0 | Jan 23, 2021 |
|---|
#1619 in Parser implementations
73KB
1.5K
SLoC
pcapng-writer
An implementation of the pcapng capture file format encoding.
This library is based on the draft standard version 02 (draft-tuexen-opsawg-pcapng-02).
Example
For an example of how to use the library, see the integration test.
Supported block types
| Block Type | Supported? |
|---|---|
| Section Header Block | Yes |
| Interface Description Block | Yes |
| Enhanced Packet Block | Yes |
| Simple Packet Block | Yes |
| Name Resolution Block | No |
| Interface Statistics Block | Yes |
| systemd Journal Export Block | No |
| Decryption Secrets Block | No |
| Custom Block | No |
Supported option types
| Block Type | Option | Supported? |
|---|---|---|
| Common | opt_endofopt |
Yes |
| Common | opt_comment |
Yes |
| Common | opt_custom |
No |
| Section Header Block | shb_hardware |
No |
| Section Header Block | shb_os |
No |
| Section Header Block | shb_userappl |
No |
| Interface Description Block | if_name |
Yes |
| Interface Description Block | if_description |
Yes |
| Interface Description Block | if_IPv4addr |
Yes |
| Interface Description Block | if_IPv6addr |
Yes |
| Interface Description Block | if_MACaddr |
Yes |
| Interface Description Block | if_EUIaddr |
No |
| Interface Description Block | if_speed |
No |
| Interface Description Block | if_tsresol |
Yes |
| Interface Description Block | if_tzone |
No |
| Interface Description Block | if_filter |
No |
| Interface Description Block | if_os |
No |
| Interface Description Block | if_fcslen |
No |
| Interface Description Block | if_tsoffset |
No |
| Interface Description Block | if_hardware |
No |
| Enhanced Packet Block | epb_flags |
Yes |
| Enhanced Packet Block | epb_hash |
No |
| Enhanced Packet Block | epb_dropcount |
No |
| Name Resolution Block | ns_dnsname |
No |
| Name Resolution Block | ns_dnsIP4addr |
No |
| Name Resolution Block | ns_dnsIP6addr |
No |
| Interface Statistics Block | isb_starttime |
No |
| Interface Statistics Block | isb_endtime |
No |
| Interface Statistics Block | isb_ifrecv |
No |
| Interface Statistics Block | isb_ifdrop |
No |
| Interface Statistics Block | isb_filteraccept |
No |
| Interface Statistics Block | isb_osdrop |
No |
| Interface Statistics Block | isb_usrdeliv |
No |
License
This project is licensed under the MIT license.
See LICENSE-MIT for details.
Dependencies
~120KB