pkttap 0.1.0

Cross-platform packet capture with pktbaffle filter expressions
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39

use std::time::{Duration, SystemTime, UNIX_EPOCH};

pub use pktbaffle::codegen::LinkType;

/// An owned captured packet.
#[derive(Debug, Clone)]
pub struct Packet {
    /// Raw packet bytes (up to snaplen).
    pub data: Vec<u8>,
    /// Capture timestamp.
    pub timestamp: SystemTime,
    /// On-wire length before any snaplen truncation.
    pub orig_len: u32,
    /// Link-layer framing of the capture source.
    pub link_type: LinkType,
}

impl Packet {
    pub(crate) fn new(
        data: Vec<u8>,
        ts_sec: u64,
        ts_nsec: u32,
        orig_len: u32,
        link_type: LinkType,
    ) -> Self {
        let timestamp = UNIX_EPOCH + Duration::new(ts_sec, ts_nsec);
        Self {
            data,
            timestamp,
            orig_len,
            link_type,
        }
    }

    /// Returns true if the packet was truncated by snaplen.
    pub fn is_truncated(&self) -> bool {
        self.data.len() < self.orig_len as usize
    }
}