Enum PcapFormat 

pub enum PcapFormat {
    LegacyLeMicro,
    LegacyBeMicro,
    LegacyLeNano,
    LegacyBeNano,
    PcapNg,
}

Format of the PCAP file.

Variants

LegacyLeMicro

Classic PCAP (little-endian, microseconds)

LegacyBeMicro

Classic PCAP (big-endian, microseconds)

LegacyLeNano

Classic PCAP (little-endian, nanoseconds)

LegacyBeNano

Classic PCAP (big-endian, nanoseconds)

PcapNg

PCAPNG format

Implementations

impl PcapFormat

pub fn detect(data: &[u8]) -> Result<Self, Error>

Detect PCAP format from magic bytes.

pub fn is_pcapng(&self) -> bool

Whether this is a PCAPNG format.

pub fn is_legacy(&self) -> bool

Whether this is a legacy PCAP format.

pub fn is_little_endian(&self) -> bool

Whether this format uses little-endian byte order.

This is relevant for parsing header fields like link_type. For PCAPNG, the section header defines endianness, but we assume little-endian as it’s the most common case.

Trait Implementations

impl Clone for PcapFormat

fn clone(&self) -> PcapFormat

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl Debug for PcapFormat

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl PartialEq for PcapFormat

fn eq(&self, other: &PcapFormat) -> bool

Tests for self and other values to be equal, and is used by ==.

fn ne(&self, other: &Rhs) -> bool

Tests for !=. The default implementation is almost always sufficient, and should not be overridden without very good reason.

impl Copy for PcapFormat

impl Eq for PcapFormat

impl StructuralPartialEq for PcapFormat