Skip to content
DFDL Schemas for PCAP Packet Capture
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
project
src
.classpath
.gitignore
.project
.travis.yml
README.md
build.sbt

README.md

PCAP

DFDL Schemas for PCAP Packet Capture

Based on PCAP 2.4 as described at http://wiki.wireshark.org/Development/LibpcapFileFormat, with support for IPv4 (UDP, TCP, ICMP) and IPv6 (TCP, UDP) packet types and protocols.

It works with Daffodil, but not with IBM DFDL as the latter does not yet support the dfdl:inputValueCalc and dfdl:hiddenGroupRef properties.

Notes:

You must bind the external variable dfdl:byteOrder (defaults to "bigEndian") if you want to parse a littleEndian pcap file and write it out littleEndian. It will parse fine, but when writing out will use bigEndian by default, unless you bind the external variable.

You can’t perform that action at this time.