Struct pcap_parser::traits::LegacyPcapBlock

pub struct LegacyPcapBlock<'a> { /* fields omitted */ }

Container for network data in legacy Pcap files

Methods

impl<'a> LegacyPcapBlock<'a>

pub fn new(data: &[u8], big_endian: bool) -> Option<LegacyPcapBlock>

pub fn origlen(&self) -> u32

The length of the packet as it appeared on the network when it was captured. If cap_len and len differ, the actually saved packet size was limited by snaplen.

pub fn caplen(&self) -> u32

The number of bytes of packet data actually captured and saved in the file.

pub fn ts_sec(&self) -> u32

The date and time when this packet was captured (seconds since epoch).

pub fn ts_usec(&self) -> u32

The date and time when this packet was captured (microseconds part).

pub fn ts(&self) -> (u32, u32, u64)

The date and time when this packet was captured (full resolution). Returns the seconds, fractional part value and unit (in number per second)

pub fn raw_data(&self) -> &[u8]

Raw packet data (including header)

pub fn raw_header(&self) -> &[u8]

Raw packet header

pub fn data(&self) -> &[u8]

Network packet data. Can be shorter than caplen if packet does not contain enough data

Trait Implementations

impl<'a> From<LegacyPcapBlock<'a>> for PcapBlockOwned<'a>

fn from(b: LegacyPcapBlock<'a>) -> PcapBlockOwned<'a>

Performs the conversion.

impl<'a> From<&'a LegacyPcapBlock<'a>> for PcapBlock<'a>

fn from(b: &'a LegacyPcapBlock) -> PcapBlock<'a>

Performs the conversion.