Struct pcap_parser::pcap::PcapHeader

pub struct PcapHeader {
    pub magic_number: u32,
    pub version_major: u16,
    pub version_minor: u16,
    pub thiszone: i32,
    pub sigfigs: u32,
    pub snaplen: u32,
    pub network: Linktype,
}

PCAP global header

Fields

magic_number: u32

File format and byte ordering. If equal to 0xa1b2c3d4 or 0xa1b23c4d then the rest of the file uses native byte ordering. If 0xd4c3b2a1 or 0x4d3cb2a1 (swapped), then all following fields will have to be swapped too.

version_major: u16

Version major number (currently 2)

version_minor: u16

Version minor number (currently 4)

thiszone: i32

The correction time in seconds between GMT (UTC) and the local timezone of the following packet header timestamps

sigfigs: u32

In theory, the accuracy of time stamps in the capture; in practice, all tools set it to 0

snaplen: u32

max len of captured packets, in octets

network: Linktype

Data link type

Implementations

impl PcapHeader

pub fn new() -> PcapHeader

pub const fn size(&self) -> usize

pub fn is_bigendian(&self) -> bool

pub fn is_nanosecond_precision(&self) -> bool

Trait Implementations

impl Clone for PcapHeader

fn clone(&self) -> PcapHeader

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PcapHeader

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl Default for PcapHeader

fn default() -> Self

Returns the “default value” for a type.

impl<'a> From<&'a PcapHeader> for PcapBlock<'a>

fn from(b: &'a PcapHeader) -> PcapBlock<'a>

Converts to this type from the input type.

impl<'a> From<PcapHeader> for PcapBlockOwned<'a>

fn from(b: PcapHeader) -> PcapBlockOwned<'a>

Converts to this type from the input type.

impl ToVec for PcapHeader

Available on crate feature serialize only.

fn to_vec_raw(&self) -> Result<Vec<u8>, GenError>

Serialize to bytes representation (little-endian). Do not check values

fn to_vec(&mut self) -> Result<Vec<u8>, GenError>

Serialize to bytes representation (little-endian). Check values and fix all fields before serializing.

fn fix(&mut self)

Check and correct all fields: use magic, fix lengths fields and other values if possible.