Module: PacketGen::PcapNG

Defined in:

lib/packetgen/pcapng.rb,
lib/packetgen/pcapng/epb.rb,
lib/packetgen/pcapng/idb.rb,
lib/packetgen/pcapng/shb.rb,
lib/packetgen/pcapng/spb.rb,
lib/packetgen/pcapng/file.rb,
lib/packetgen/pcapng/block.rb,
lib/packetgen/pcapng/unknown_block.rb

Overview

Module to handle PCAP-NG file format. See xml2rfc.tools.ietf.org/cgi-bin/xml2rfc.cgi?url=https://raw.githubusercontent.com/pcapng/pcapng/master/draft-tuexen-opsawg-pcapng.xml&modeAsFormat=html/ascii&type=ascii

Author:

• Sylvain Daubert

Defined Under Namespace

Classes: Block, EPB, Error, File, IDB, InvalidFileError, SHB, SPB, UnknownBlock

Constant Summary

SHB_TYPE =

Section Header Block type number

Types::Int32.new(0x0A0D0D0A, :little).freeze

IDB_TYPE =

Interface Description Block type number

Types::Int32.new(1, :little).freeze

SPB_TYPE =

Simple Packet Block type number

Types::Int32.new(3, :little).freeze

EPB_TYPE =

Enhanced Packet Block type number

Types::Int32.new(6, :little).freeze

LINKTYPE_ETHERNET =

IEEE 802.3 Ethernet (10Mb, 100Mb, 1000Mb, and up)

1

LINKTYPE_RAW =

Raw IP; the packet begins with an IPv4 or IPv6 header, with the “version” field of the header indicating whether it’s an IPv4 or IPv6 header.

101

LINKTYPE_IEEE802_11 =

IEEE 802.11 wireless LAN

105

LINKTYPE_IEEE802_11_RADIOTAP =

RadioTap link layer informations + IEEE 802.11 wireless LAN

127

LINKTYPE_PPI =

Per-Packet Information information, as specified by the Per-Packet Information Header Specification, followed by a packet with the LINKTYPE_ value specified by the pph_dlt field of that header.

192

LINKTYPE_IPV4 =

Raw IPv4; the packet begins with an IPv4 header.

228

LINKTYPE_IPV6 =

Raw IPv6; the packet begins with an IPv6 header.

229