pcarp 2.0.0

A pure-Rust library for reading pcap-ng files
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

use pcarp::*;

fn main() {
    env_logger::init();
    let path = std::path::PathBuf::from(std::env::args().nth(1).unwrap());
    let file = std::fs::File::open(&path).unwrap();
    let pcap = Capture::new(file);
    let process = |pkt: Result<Packet, Error>| -> Result<(), Box<dyn std::error::Error>> {
        let pkt = pkt?;
        let ts = pkt.timestamp.ok_or("No timestamp")?;
        println!(
            "{}\t{:x}",
            humantime::Timestamp::from(ts),
            md5::compute(&pkt.data),
        );
        Ok(())
    };
    for pkt in pcap {
        if let Err(e) = process(pkt) {
            eprintln!("{e}");
        }
    }
}