pcap-ng format not supported

kunklejr / node-pcap-parser

Packet capture (pcap) file parser written in pure javascript for Node.js

MIT License

85 stars 16 forks source link

Open waywardmonkeys opened 10 years ago

waywardmonkeys commented 10 years ago

On Mac OS X at least, tcpdump uses pcap-ng format by default (unless you specify an interface).

Are there plans or is there any interest in adding pcap-ng support to this library?

kunklejr commented 10 years ago

There are no plans but I'd be happy to accept a pull request to support the format. :)

waywardmonkeys commented 10 years ago

I'll give it some thought. I have a blog post about doing this sort of stuff with Node coming up and this came up while researching it.

If I do this project, I'm using https://github.com/keichi/binary-parser which greatly simplifies things for parsing ethernet frames, IP, TCP, etc.

kunklejr commented 10 years ago

That's fine with me. Seems like a nice library to retrofit the existing code with too.

megastef commented 9 years ago

Did anybody work on pcap-ng?

kunklejr commented 9 years ago

Not that I'm aware of. @waywardmonkeys talked about looking into it but I don't know if he's had a chance to do it.