Struct CapHeader 

pub struct CapHeader {
    pub version_major: u32,
    pub version_minor: u32,
    pub start_time: u32,
    pub nframes: u32,
    pub start_offset: u32,
    pub end_offset: u32,
    pub datalink: DataLink,
    pub network_plus: u8,
    pub captype: u8,
    pub endianness: Endianness,
}

NetXRay file header (minus magic number).

As field usages are identified, please revise as needed Please do not use netxray_hdr xxx… names in the code (Placeholder names for all ‘unknown’ fields are of form xxx_x<hex_hdr_offset> where <hex_hdr_offset> includes the magic number)

Fields

version_major: u32

Major version number

version_minor: u32

Minor version number

start_time: u32

UNIX [UTC] time when capture started

nframes: u32

number of packets

start_offset: u32

start offset

end_offset: u32

end offset

datalink: DataLink

datalink type u8

network_plus: u8

[See code]

captype: u8

capture type

endianness: Endianness

Endianness of the cap (excluding the packet data)

Implementations

impl CapHeader

pub fn from_slice(slice: &[u8]) -> PcapResult<(&[u8], CapHeader)>

Creates a new CapHeader from a slice of bytes.

Returns an error if the reader doesn’t contain a valid pcap or if there is a reading error.

PcapError::IncompleteBuffer indicates that there is not enough data in the buffer.

pub async fn async_from_slice(slice: &[u8]) -> PcapResult<(&[u8], CapHeader)>

Asynchronously creates a new CapHeader from a slice of bytes.

Returns an error if the reader doesn’t contain a valid pcap or if there is a reading error.

PcapError::IncompleteBuffer indicates that there is not enough data in the buffer.

Trait Implementations

impl Clone for CapHeader

fn clone(&self) -> CapHeader

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for CapHeader

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for CapHeader

fn eq(&self, other: &CapHeader) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for CapHeader

impl Eq for CapHeader

impl StructuralPartialEq for CapHeader