Struct pcap_parser::pcap::PcapHeader

pub struct PcapHeader {
    pub magic_number: u32,
    pub version_major: u16,
    pub version_minor: u16,
    pub thiszone: i32,
    pub sigfigs: u32,
    pub snaplen: u32,
    pub network: i32,
}

PCAP global header

Fields

magic_number: u32

File format and byte ordering. If equal to 0xa1b2c3d4 then the rest of the file uses native byte ordering. If 0xd4c3b2a1 (swapped), then all following fields will have to be swapped too.

version_major: u16

Version major number (currently 2)

version_minor: u16

Version minor number (currently 4)

thiszone: i32

The correction time in seconds between GMT (UTC) and the local timezone of the following packet header timestamps

sigfigs: u32

In theory, the accuracy of time stamps in the capture; in practice, all tools set it to 0

snaplen: u32

max len of captured packets, in octets

network: i32

Data link type

Methods

impl PcapHeader

pub fn new() -> PcapHeader

pub fn is_bigendian(&self) -> bool

pub fn to_string(&self) -> Vec<u8>

Trait Implementations

impl PartialEq<PcapHeader> for PcapHeader

fn eq(&self, other: &PcapHeader) -> bool

This method tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &PcapHeader) -> bool

This method tests for !=.

impl Debug for PcapHeader

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.