erf_phdr Struct Reference

Pseudo-header for Endace ERF (Extensible Record Format) capture files carrying timestamp and record metadata. More...

#include <wtap.h>

Public Attributes
uint64_t	ts
uint8_t	type
uint8_t	flags
uint16_t	rlen
uint16_t	lctr
uint16_t	wlen

Detailed Description

Pseudo-header for Endace ERF (Extensible Record Format) capture files carrying timestamp and record metadata.

Member Data Documentation

flags

uint8_t erf_phdr::flags

Bitmask of ERF flags describing capture conditions such as RX/TX direction and loss indicators.

lctr

uint16_t erf_phdr::lctr

Loss counter; incremented by the capture hardware each time one or more records are dropped.

rlen

uint16_t erf_phdr::rlen

Record length in bytes including this header, extension headers, any subheader, and the payload.

ts

uint64_t erf_phdr::ts

ERF timestamp in Endace's 64-bit fixed-point format: upper 32 bits are seconds since 1970-01-01, lower 32 bits are fractional seconds.

type

uint8_t erf_phdr::type

ERF record type identifying the physical medium and encapsulation of this record.

wlen

uint16_t erf_phdr::wlen

Wire length in bytes of the original packet as observed on the network.

---

The documentation for this struct was generated from the following file:

• /builds/wireshark/wireshark/wiretap/wtap.h