picty / parsifal

Parsifal : an OCaml-based parsing engine
Other
61 stars 8 forks source link

Support for pcapng #32

Open pictyeye opened 10 years ago

pictyeye commented 10 years ago

The current (partial) pcap implementation corresponds to the old format.

It would be nice to handle pcapng files directly, and even nicer to have a meta pcap type able to work on both formats smoothly.

pictyeye commented 10 years ago

The format description seems to be available here: http://www.winpcap.org/ntar/draft/PCAP-DumpFileFormat.html