NewEthernetHandle implements pcap.OpenLive for network devices.

NewNgReader initializes a new reader, reads the first section header, and if necessary according to the options the first interface.

NewNgWriter initializes and returns a new writer.

NewNgWriterInterface initializes and returns a new writer.

NewReader returns a new reader object, for reading packet data from the given reader.

NewSnoopReader returns a new SnoopReader object, for reading packet data from the given SnoopReader.

NewWriter returns a new writer object, for writing packet data out to the given writer.

NewWriterNanos returns a new writer object, for writing packet data out to the given writer.

SSH Key Log */.

TLS Key Log */.

WireGuard Key Log */.

Zigbee APS Key */.

Zigbee NWK Key */.

01 = inbound.

bits 0-1.

10 = outbound.

00 = information not available.

bits 5-8.

0000 if this information is not available.

Bit 24 = CRC error.

Bit 27 = wrong Inter Frame Gap error.

bits 16-31.

Bit 25 = packet too long error.

Bit 26 = packet too short error.

Bit 30 = preamble error.

Bit 29 = Start Frame Delimiter error.

Bit 31 = symbol error.

Bit 28 = unaligned frame error.

011 = broadcast.

bits 2-4.

010 = multicast.

000 = not specified.

100 = promiscuous.

001 = unicast.

2s complement (algorithm octet = 0, size = XXX).

CRC32 (algorithm octet = 2, size = 4).

MD-5 (algorithm octet = 3, size = 16).

SHA-1 (algorithm octet = 4, size = 20).

Toeplitz (algorithm octet = 5, size = 4).

XOR (algorithm octet = 1, size=XXX).

Hardware (type octet = 0, size = variable).

Linux_eBPF_TC (type octet = 1, size = 8 (64-bit unsigned integer).

Linux_eBPF_XDP (type octet = 2, size = 8 (64-bit unsigned integer).

NgNoValue64 is a placeholder for an empty numeric 64 bit value.

block type + block total length.

Secrets type + Secrets length.

DefaultNgInterface contains default interface options used by NewWriter.

DefaultNgReaderOptions provides sane defaults for a pcapng reader.

DefaultNgWriterOptions contain defaults for a pcapng writer used by NewWriter.

ErrNgLinkTypeMismatch gets returned if the link type of an interface is not the same as the link type from the first interface.

ErrNgVersionMismatch gets returned for unknown pcapng section versions.

define error types for DSB.

EthernetHandle holds shared buffers and file descriptor of af_packet socket.

NgInterface holds all the information of a pcapng interface.

NgInterfaceStatistics hold the statistic for an interface at a single point in time.

NgPacketOptions contains additional information of a pcapng packet.

NgReader wraps an underlying bufio.NgReader to read packet data in pcapng.

NgReaderOptions holds options for reading a pcapng file.

NgSectionInfo contains additional information of a pcapng section.

NgWriter holds the internal state of a pcapng file writer.

NgWriterOptions holds options for creating a pcapng file.

Reader wraps an underlying io.Reader to read packet data in PCAP format.

SnoopReader wraps an underlying io.SnoopReader to read packet data in SNOOP format.

Writer wraps an underlying io.Writer to write packet data in PCAP format.

NgEpbFlag Enhanced Packet Block Flags Word.

NgResolution represents a pcapng timestamp resolution.