Struct PacketRef 

pub struct PacketRef<'a> {
    pub frame_number: u64,
    pub timestamp_us: i64,
    pub captured_len: u32,
    pub original_len: u32,
    pub link_type: u16,
    pub data: &'a [u8],
}

Borrowed packet reference - zero-copy view into pcap_parser buffer.

This struct is passed to callbacks in process_packets(). The data is only valid for the duration of the callback - it must be processed (parsed, copied to Arrow buffers, etc.) before the callback returns.

Fields

frame_number: u64

Frame number (1-indexed, matching Wireshark)

timestamp_us: i64

Timestamp in microseconds since Unix epoch

captured_len: u32

Captured length (may be less than original)

original_len: u32

Original packet length on the wire

link_type: u16

Link layer type (e.g., 1 = Ethernet)

data: &'a [u8]

Packet data (borrowed from pcap_parser buffer)

Implementations

impl<'a> PacketRef<'a>

pub fn is_truncated(&self) -> bool

Check if the packet was truncated during capture.

Trait Implementations

impl<'a> Clone for PacketRef<'a>

fn clone(&self) -> PacketRef<'a>

Returns a duplicate of the value.

fn clone_from(&mut self, source: &Self)

Performs copy-assignment from source.

impl<'a> Debug for PacketRef<'a>

fn fmt(&self, f: &mut Formatter<'_>) -> Result

Formats the value using the given formatter.

impl<'a> Copy for PacketRef<'a>