Skip to content

stumpyfr/pcaphelper

Repository files navigation

pcaphelper

pcaphelper is a small package to get some information about pcap file.

the goals are performance(WIP) and no dependencies (no need of libpcap)

Currently focus on pcap only (pcap nano is supported for the detection), pcap-ng is not supported

functions

IsPcap(filename string) (PcapType, Endianness, error)
GetVersion(filename string) (major, minor, error)
GetStartTimestamp(filename string) (*time.Time, error)
GetEndTimestamp(filename string) (*time.Time, error)
GetMD5(filename string) (string, error)
GetSHA1(filename string) (string, error)
GetDataLink(filename string) (DataLink, error)

you can find the full documentation here: https://godoc.org/github.com/stumpyfr/pcaphelper

Roadmap

  • pcap-ng support
  • GetDataLink
  • GetNumberOfPacket
    • need improve performance
  • GetDuration
    • need improve performance
  • GetStartTimestamp
  • GetEndTimestamp
    • need improve performance

About

pcaphelper is a small package to get some information about pcap file

Resources

License

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages