- Tutorials
- API Examples
- User Guide
- Ch 1 - The Basics
- Ch 2 - libpcap
- 2.1 - The Main libpcap API Overview
- 2.2 - Getting a List of Interfaces
- 2.3 - Opening a Network Interface for Capture
- 2.4 - Opening offline capture
- 2.5 - Setting a packet filter
- 2.6 - Reading one packet at a time
- 2.7 - Reading multiple packets with dispatch loops
- 2.8 - Dumping captured packet to an offline file
- 2.9 - Transmitting packets
- 2.10 - Close Pcap and PcapDumper handles
- Ch 3 - Packet Decoding
- Ch 4 - Internals
- Ch 5 - Protocols
- Ch 6 - Native API
Pcap packets, the ones that were retrieved using libpcap library, also maintain a reference to a separate PcapHeader class. The baseclass JPacket abstracts that information away using a JCaptureHeader interface, but it is also possible to work directly with the PcapHeader class. It is peered with native C structure defined in libpcap library itself struct pcap_pkthdr. It provides information such as packet captured length, original length and capture timestamp.
Most user's do not need to deal with this detail and is sufficient to work with JCaptureHeader interface.
»
Printer-friendly- Login or register to post comments
Send via Email
PDF Convert