search

StamusNetworks / gophercap

Accurate, modular, scalable PCAP manipulation tool written in Go.
GNU General Public License v3.0
84 stars 12 forks source link

Feature Request - pcapng support #5

Open zoomequipd opened 2 years ago

zoomequipd commented 2 years ago

Currently when reading a pcapng formatted file, gophercap errors out

ERRO[0000] infile open: Unknown magic a0d0d0a

Is it possible to add support for pcapng formatted files?

markuskont commented 2 years ago

Hmm, tested pcapgo.NgReader without much success. Trying to create a reader with a0d0d0a file magic sample just gave me EOF error. Other sample captures I tried to produce game me other file magics entirely.

Need to do more research on pcapng file formats as I don't normally use them. Would it be possible to provide a small sample file to test with?