Struct pcap_parser::pcap::PcapHeader

pub struct PcapHeader {
    pub magic_number: u32,
    pub version_major: u16,
    pub version_minor: u16,
    pub thiszone: i32,
    pub sigfigs: u32,
    pub snaplen: u32,
    pub network: Linktype,
}

PCAP global header

Fields

magic_number: u32

File format and byte ordering. If equal to 0xa1b2c3d4 then the rest of the file uses native byte ordering. If 0xd4c3b2a1 (swapped), then all following fields will have to be swapped too.

version_major: u16

Version major number (currently 2)

version_minor: u16

Version minor number (currently 4)

thiszone: i32

The correction time in seconds between GMT (UTC) and the local timezone of the following packet header timestamps

sigfigs: u32

In theory, the accuracy of time stamps in the capture; in practice, all tools set it to 0

snaplen: u32

max len of captured packets, in octets

network: Linktype

Data link type

Methods

impl PcapHeader

pub fn new() -> PcapHeader

pub const fn size(&self) -> usize

pub fn is_bigendian(&self) -> bool

Trait Implementations

impl ToVec for PcapHeader

fn to_vec_raw(&self) -> Result<Vec<u8>, GenError>

Serialize to bytes representation (little-endian). Do not check values

fn to_vec(&mut self) -> Result<Vec<u8>, GenError>

Serialize to bytes representation (little-endian). Check values and fix all fields before serializing.

fn fix(&mut self)

Check and correct all fields: use magic, fix lengths fields and aother values if possible.

impl<'a> From<PcapHeader> for PcapBlockOwned<'a>

fn from(b: PcapHeader) -> PcapBlockOwned<'a>

Performs the conversion.

impl<'a> From<&'a PcapHeader> for PcapBlock<'a>

fn from(b: &'a PcapHeader) -> PcapBlock<'a>

Performs the conversion.

impl Clone for PcapHeader

fn clone(&self) -> PcapHeader

Returns a copy of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PcapHeader

fn fmt(&self, f: &mut Formatter) -> Result

Formats the value using the given formatter.