It appears that it's BlockType (4 Bytes) + BlockTotalLength (4 bytes) + Byte Order Magic (4 Bytes) + Mahor and Minor Version (4 bytes total, 2 bytes each) + Section Length (4 bytes) + Options (Variable) + Block Total length (again, 4 bytes). Made up of a Section Header Block - This is the start of every Pcapng file.I've read the 40+ page whitepaper and I'm still scratching my head and sweating.
0 Comments
Leave a Reply. |