|
Wireshark 4.7.0
The Wireshark network protocol analyzer
|
Pseudo-header metadata for packets captured in NetMon (Network Monitor) files. More...
#include <wtap.h>
Classes | |
| union | sub_wtap_pseudo_header |
| Protocol-specific subheader union. More... | |
Public Attributes | |
| uint8_t * | title |
| uint32_t | descLength |
| uint8_t * | description |
| unsigned | sub_encap |
| union netmon_phdr::sub_wtap_pseudo_header | subheader |
Pseudo-header metadata for packets captured in NetMon (Network Monitor) files.
This structure provides supplemental information for each packet in a NetMon capture, including user-defined comments and protocol-specific subheaders. It is used to enrich packet display and analysis in tools that support NetMon format.
| uint32_t netmon_phdr::descLength |
Length in bytes of the comment description.
| uint8_t* netmon_phdr::description |
Comment description, formatted in ASCII RTF.
| unsigned netmon_phdr::sub_encap |
Actual encapsulation type used for the packet (e.g., Ethernet, ATM).
| uint8_t* netmon_phdr::title |
Comment title, stored as a null-terminated UTF-8 string.