caizhengxin/python-libpcap

Byte offset

Closed this issue · 4 comments

is it possible to get byte offset of each package with python-libpcap?, as it is proposed in this link

is it possible to get byte offset of each package with python-libpcap?, as it is proposed in this link

Hi, I don't quite understand what it means,packet length?

No, byte offset means the position in bytes of each package inside the binary file. Having this a user can open the file and point to any package without iterating again and again.

No, byte offset means the position in bytes of each package inside the binary file. Having this a user can open the file and point to any package without iterating again and again.

Since pcap has specifications, byte offset is not easy to calculate, you can decompose the pcap file

Yes, that was what i did, but it would be a great if the function (for len, t, pkt in rpcap("tests/dns.pcap")) would have byte offset as attribute.

Thanks for your time and your answer. @caizhengxin