package pcap-format

  1. Overview
  2. Docs
package pcap-format
Legend:
Page
Library
Module
Module type
Parameter
Class
Class type
Source

Module PcapSource

PCAP encoding and encoding

v0.6.0 - homepage

Sourceval major_version : int

Major version of the pcap format which we understand

Sourceval minor_version : int

Minor version of the pcap format which we understand

Sourcetype endian =
  1. | Big
    (*

    Big endian (pcap headers)

    *)
  2. | Little
    (*

    Little endian (pcap headers)

    *)
Sourceval string_of_endian : endian -> string
Sourceval sizeof_pcap_header : int

The size of the initial pcap header in bytes

Sourceval sizeof_pcap_packet : int

The size of the per-packet pcap headers in bytes

Sourceval magic_number : int32

The magic number which identifies a pcap file (and endian-ness)

Sourcemodule Network : sig ... end

Type of outermost network protocol within the captured frames

Sourcemodule LE : sig ... end
Sourcemodule BE : sig ... end
Sourcemodule type HDR = sig ... end

Functions to read/write pcap header fields of a particular endian-ness

Sourceval detect : Cstruct.t -> (module HDR) option

detect buf returns a module capable of reading the pcap header fields, or None if the buffer doesn't contain pcap data.

Sourceval packets : (module HDR) -> Cstruct.t -> (Cstruct.t * Cstruct.t) Cstruct.iter

packets hdr buf returns a Cstruct.iter (sequence) containing (pcap header, pcap body) pairs.