Ask Your Question
0

Full pcapng file

asked 2021-04-25 09:03:33 +0000

Raz Luvaton gravatar image

Is there a pcapng file sample with all possible options and data (I’m building a pcapng parser and I’m searching for a file to test)? Haven’t found at SampleCaptures

edit retag flag offensive close merge delete

Comments

Which protocol? There are required and optional fields. Also, not all combinations are valid.

BigFatCat gravatar imageBigFatCat ( 2021-04-25 09:39:57 +0000 )edit

The protocol doesn’t matter, and I know that there are some combination that are invalid, but I’m trying to get as much as options as data as possible

Raz Luvaton gravatar imageRaz Luvaton ( 2021-04-25 09:57:06 +0000 )edit

It appears www.pcapr.net is shutdown. It had 1000s of sample pcap files. There are several web sites with sample files. Chris sanders has some good ones, link texthttps://github.com/chrissanders/packets Laura Chappell has good captures too. I haven't found any web sites with packet captures emerging protocols.

BigFatCat gravatar imageBigFatCat ( 2021-04-26 03:09:07 +0000 )edit

1 Answer

Sort by » oldest newest most voted
1

answered 2021-04-25 10:26:10 +0000

SYN-bit gravatar image

I just created a pcapng example file with:

  • Packets from two interfaces with different link-layer type
  • A file comment
  • Several packet comments
  • A name server block
  • A TLS session key block

This should get you on your way. But please note there are other (experimental) block types and there might be more in the future.

The file is uploaded to SampleCaptures under captures in specific file formats

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Question Tools

Stats

Asked: 2021-04-25 09:03:33 +0000

Seen: 1,072 times

Last updated: Apr 25 '21