search

aboutsip / pkts

Pure java based pcap library capable of reading and writing to/from pcaps.
Other
198 stars 92 forks source link

support for pcap-ng format #86

Open bavardage opened 6 years ago

bavardage commented 6 years ago

The PcapGlobalHeader includes the header for the ng format @ https://github.com/aboutsip/pkts/blob/master/pkts-core/src/main/java/io/pkts/frame/PcapGlobalHeader.java#L34

Does the library support this format?

jonbo372 commented 6 years ago

Not sure actually. Don't think I've tried it but please do and let me know if it doesn't work.

aboutsip commented 6 years ago

I tried to open a pcap-ng and it does indeed not work (I would have been surprised if it did). At the moment, I do not have any plans to add support for pcap-ng since I don't have any need for it myself but if anyone is interested, the IETF draft to implement is: tuexen-opsawg-pcapng.

bavardage commented 6 years ago

I ended up using https://github.com/kaitoy/pcap4j which does support pcapng