[][src]Module pcarp::block

Block definitions. Not meant for consumption.

Standard caveat: Internals are exposed for the sake of interest only. The API may change in a patch bump. The user may need to enforce invariants. The documentation may be inaccurate.

If you want to get an idea of how the pcap-ng format works, take a look at Block.

All documentation in this module is taken from the pcap-ng spec. It is copyright (c) 2018 IETF Trust and the persons identified as the authors of the linked document. All rights reserved.

Structs

EnhancedPacket

Contains a single captured packet, or a portion of it. It represents an evolution of the original, now obsolete, Packet Block. If this appears in a file, an Interface Description Block is also required, before this block.

InterfaceDescription

Defines the most important characteristics of the interface(s) used for capturing traffic. This block is required in certain cases, as described later.

InterfaceStatistics

Defines how to store some statistical data (e.g. packet dropped, etc) which can be useful to understand the conditions in which the capture has been made. If this appears in a file, an Interface Description Block is also required, before this block.

NameResolution

Defines the mapping from numeric addresses present in the packet capture and the canonical name counterpart.

ObsoletePacket

Contains a single captured packet, or a portion of it. It is OBSOLETE, and superseded by the Enhanced Packet Block.

SectionHeader

Defines the most important characteristics of the capture file.

SimplePacket

Contains a single captured packet, or a portion of it, with only a minimal set of information about it. If this appears in a file, an Interface Description Block is also required, before this block.

Enums

Block