Skip to content

PCap: pcap-ng support + live capture #123

@benaadams

Description

@benaadams

Problem

The PCap module should support the modern pcap-ng format and optionally live capture via libpcap.

Sub-tasks

  • pcap-ng reader support (Section Header Block, Interface Description Block, Enhanced Packet Block)
  • Nanosecond timestamp resolution
  • (Stretch) Live capture via libpcap P/Invoke: pcap_open_live, pcap_next_ex, pcap_compile, pcap_setfilter
  • Tests for pcap-ng format

Dependencies

Depends on: #112
Unlocks: useful for debugging/testing all other components

Phase

Phase 2 (Platform Backends & Samples)

Metadata

Metadata

Labels

P2Nice to haveenhancementNew featurephase-2Platform backends

Type

No type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions