table of contents
| dnsjit.core.object.pcap(3) | Library Functions Manual | dnsjit.core.object.pcap(3) |
NAME¶
dnsjit.core.object.pcap - Container of a packet found in a PCAP
DESCRIPTION¶
Container of a PCAP packet which contains information both from the PCAP itself and the pcap_pkthdr object receied for each packet in the PCAP.
Attributes¶
- snaplen
- Max length saved portion of each packet.
- linktype
- Data link type for the PCAP.
- ts
- Time stamp of this packet.
- caplen
- Length of portion present.
- len
- Length of this packet (off wire).
- bytes
- A pointer to the packet.
- is_swapped
- Indicate if the byte order of the PCAP is different then the host. This is used in, for example, the Layer filter to correctly parse null objects since they are stored in the capturers host byte order.
Functions¶
- Pcap:type()
- Return the textual type of the object.
- Pcap:prev()
- Return the previous object.
- Pcap:cast()
- Cast the object to the underlining object module and return it.
- Pcap:uncast()
- Cast the object to the generic object module and return it.
- Pcap:copy()
- Make a copy of the object and return it.
- Pcap:free()
- Free the object, should only be used on copies or otherwise allocated.
SEE ALSO¶
dnsjit.core.object(3), dnsjit.input.pcap(3), dnsjit.input.fpcap(3), dnsjit.input.mmpcap(3), dnsjit.filter.layer(3), dnsjit.output.pcap(3)
AUTHORS and CONTRIBUTORS¶
Jerry Lundström (DNS-OARC), Tomáš Křížek (CZ.NIC), Petr Špaček (ISC)
Maintained by DNS-OARC
BUGS¶
For issues and feature requests please use:
For question and help please use:
admin@dns-oarc.net
| 1.2.3 | dnsjit |