Struct pcap_parser::pcapng::SimplePacketBlock

pub struct SimplePacketBlock<'a> {
    pub block_type: u32,
    pub block_len1: u32,
    pub origlen: u32,
    pub data: &'a [u8],
    pub block_len2: u32,
}

The Simple Packet Block (SPB) is a lightweight container for storing the packets coming from the network.

This struct is a thin abstraction layer, and stores the raw block data. For ex the data field is stored with the padding. It implements the PcapNGPacketBlock trait, which provides helper functions.

Fields

block_type: u32

Block type (little endian)

block_len1: u32

origlen: u32

Original packet length

data: &'a [u8]

block_len2: u32

Trait Implementations

impl<'a> Debug for SimplePacketBlock<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> PcapNGPacketBlock for SimplePacketBlock<'a>

fn big_endian(&self) -> bool

Return true if block is encoded as big-endian

fn truncated(&self) -> bool

Return true if block data was truncated (typically when snaplen < origlen)

fn orig_len(&self) -> u32

Return the original length of the packet

fn raw_packet_data(&self) -> &[u8]

Return the raw captured packet data, with padding if present, and eventually truncated.

fn packet_data(&self) -> &[u8]

Return the captured packet data without padding

impl<'a> ToVec for SimplePacketBlock<'a>

Available on crate feature serialize only.

fn fix(&mut self)

Check and correct all fields: use magic, fix lengths fields and other values if possible.

fn to_vec_raw(&self) -> Result<Vec<u8>, GenError>

Serialize to bytes representation (little-endian). Do not check values

fn to_vec(&mut self) -> Result<Vec<u8>, GenError>

Serialize to bytes representation (little-endian). Check values and fix all fields before serializing.