Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

the pcap header in the library doesn't seem to conform the pcap header standard (IEC-240) #453

Closed
2 tasks done
emaayan opened this issue Dec 6, 2024 · 0 comments
Closed
2 tasks done

Comments

@emaayan
Copy link

emaayan commented Dec 6, 2024

Answers checklist.

  • I have read the documentation of the component in question and the issue is not addressed there.
  • I have searched the issue tracker for a similar issue and not found a similar issue.

General issue report

according to https://wiki.wireshark.org/Development/LibpcapFileFormat#global-header the pcap header should be:

 typedef struct pcap_hdr_s {
            guint32 magic_number;   /* magic number */
            guint16 version_major;  /* major version number */
            guint16 version_minor;  /* minor version number */
            gint32  thiszone;       /* GMT to local correction */
            guint32 sigfigs;        /* accuracy of timestamps */
            guint32 snaplen;        /* max length of captured packets, in octets */
            guint32 network;        /* data link type */
    } pcap_hdr_t;

but the header specified here:


doesn't include the magic number sigfigs, snaplen. ..

@github-actions github-actions bot changed the title the pcap header in the library doesn't seem to conform the pcap header standard the pcap header in the library doesn't seem to conform the pcap header standard (IEC-240) Dec 6, 2024
@emaayan emaayan closed this as completed Dec 6, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

2 participants