Struct PcapNGOption

pub struct PcapNGOption<'a> {
    pub code: OptionCode,
    pub len: u16,
    pub value: Cow<'a, [u8]>,
}

A PcapNG option

Fields

code: OptionCode

The numeric code for the option

Note that codes are relative to the block type, and same codes are used for different things (for ex 2 is shb_hardware if the block is a SHB, but 2 is if_name for an IDB)

len: u16

The declared length for the option

Note that value.len() can be greater than len, because data is padded to a 32-bit boundary

value: Cow<'a, [u8]>

The raw value (including padding) of the option

See PcapNGOption::as_bytes to get the value truncated to len.

Implementations

impl PcapNGOption<'_>

pub fn value(&self) -> &[u8]

Return a reference to the option value, as raw bytes (not related to the len field)

pub fn as_bytes(&self) -> Result<&[u8], PcapNGOptionError>

Return a reference to the option value, using the len field to limit it, or None if length is invalid

pub fn as_str(&self) -> Result<&str, PcapNGOptionError>

Return the option value interpreted as string

Returns an error if the length of the option is invalid, or if the value is not valid UTF-8.

pub fn as_i32_le(&self) -> Result<i32, PcapNGOptionError>

Return the option value interpreted as i32, or an error

Option data length and declared must be exactly 4 bytes

pub fn as_u32_le(&self) -> Result<u32, PcapNGOptionError>

Return the option value interpreted as u32, or an error

Option data length and declared must be exactly 4 bytes

pub fn as_i64_le(&self) -> Result<i64, PcapNGOptionError>

Return the option value interpreted as i64, or an error

Option data length and declared must be exactly 8 bytes

pub fn as_u64_le(&self) -> Result<u64, PcapNGOptionError>

Return the option value interpreted as u64, or an error

Option data length and declared must be exactly 8 bytes

Trait Implementations

impl<'a> Debug for PcapNGOption<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl ToVec for PcapNGOption<'_>

Available on crate feature serialize only.

fn to_vec_raw(&self) -> Result<Vec<u8>, GenError>

Serialize to bytes representation (little-endian). Do not check values

fn to_vec(&mut self) -> Result<Vec<u8>, GenError>

Serialize to bytes representation (little-endian). Check values and fix all fields before serializing.

fn fix(&mut self)

Check and correct all fields: use magic, fix lengths fields and other values if possible.