Skip to content

DFDL Schemas for PCAP Packet Capture

Notifications You must be signed in to change notification settings

stevedlawrence/PCAP

 
 

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

42 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

PCAP

DFDL Schemas for PCAP Packet Capture

Based on PCAP 2.4 as described at http:https://wiki.wireshark.org/Development/LibpcapFileFormat, with support for IPv4 (UDP, TCP, ICMP) and IPv6 (TCP, UDP) packet types and protocols.

It works with Daffodil, but not with IBM DFDL as the latter does not yet support the dfdl:inputValueCalc and dfdl:hiddenGroupRef properties.

Notes:

You must bind the external variable dfdl:byteOrder (defaults to "bigEndian") if you want to parse a littleEndian pcap file and write it out littleEndian. It will parse fine, but when writing out will use bigEndian by default, unless you bind the external variable.

About

DFDL Schemas for PCAP Packet Capture

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Scala 100.0%