Packets are parsed, validated, and the data packet is sent out. The PCAPng application processes the data depending on the packet type that contains a combination of the blocks mentioned above: Note: Only one EPB in a PCAPng file is supported. The block data is parsed to find the start and end offset of the valid packets and the packet is sent out to the next application. The actual packets are present in the Enhanced Packet Block. The PCAPng file contains the following blocks: The PCAPng application is a GigaSMART parser application that reads the various blocks in the received PCAPng files and validates the blocks to be sent to the destination application or to the tools.
0 kommentar(er)
