Struct pcap_file::PcapParser

pub struct PcapParser { /* fields omitted */ }

Parser for a Pcap formated stream.

Examples

use pcap_file::pcap::PcapParser;
use pcap_file::PcapError;

let pcap = vec![0_u8; 0];
let mut src = &pcap[..];

// Creates a new parser and parse the pcap header
let (rem, pcap_parser) = PcapParser::new(&pcap[..]).unwrap();
src = rem;

loop {

    match pcap_parser.next_packet(src) {
        Ok((rem, packet)) => {
            // Do something

            // Don't forget to update src
            src = rem;

            // No more data, if no more incoming either then this is the end of the file
            if rem.is_empty() {
                break;
            }
        },
        Err(PcapError::IncompleteBuffer(needed)) => {},// Load more data into src
        Err(_) => {}// Parsing error
    }
}

Methods

impl PcapParser

pub fn new(slice: &[u8]) -> Result<(&[u8], PcapParser), PcapError>

Creates a new PcapParser. Returns the parser and the remainder.

pub fn next_packet<'a>(
    &self,
    slice: &'a [u8]
) -> Result<(&'a [u8], Packet<'a>), PcapError>

Returns the next packet and the remainder.

Trait Implementations

impl Debug for PcapParser

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.