dnsjit.input.mmpcap(3)

💖 dnsjit.input.mmpcap — the manual page, but make it cute ✨

okay so bestie, welcome to dnsjit.input.mmpcap(3) — section 3 of the dnsjit library functions manual, and she is iconic. this is the one that reads input from a PCAP file using mmap(). no cap. let's get into it 🫶

---

✨ NAME ✨

dnsjit.input.mmpcap — read input from a PCAP file using mmap(). that's it, that's the whole vibe. 💅

---

🌸 SYNOPSIS 🌸

local input = require("dnsjit.input.fpcap").new()
input:open("file.pcap")
input:receiver(filter_or_output)
input:run()

literally copy that exactly as it is, mwah 🎀

---

🦋 DESCRIPTION 🦋

so what she does is: she reads input from a PCAP file by mapping the whole file to memory using mmap(), and then she parses the PCAP without libpcap. no libpcap needed, she's self-sufficient like that. 💅

and the way that she works is — after you open a file and she reads the PCAP header, the attributes get populated. that's the moment. main character energy honestly. ✨

👑 Attributes

• is_swapped — says whether the byte order in the PCAP is in reverse order of the host. i.e. is it backwards bestie 🙈
• is_nanosec — tells you if the time stamps are in nanoseconds or not. nano or not nano, that is the question ⭐
• magic_number — the magic number. yes, magic. ✨
• version_major — the major version number.
• version_minor — the minor version number.
• thiszone — GMT to local correction.
• sigfigs — accuracy of timestamps.
• snaplen — max length of captured packets, in octets.
• network — the link type found in the PCAP header, see https://www.tcpdump.org/linktypes.html. go look it up, i'll wait 💜
• linktype — the data link type, mapped from network.

🧚 Functions

• Mmpcap.new() — create a new Mmpcap input. birth of a legend, honestly 🌈
• Mmpcap:log() — return the Log object so you can control logging of this instance or module. for when you need to gossip about what she's doing 👀
• Mmpcap:receiver(o) — set the receiver to pass objects to.
• Mmpcap:produce() — return the C functions and context for producing objects. very low-level, very cunt 💅
• Mmpcap:open(file) — open a PCAP file for processing and read the PCAP header. returns 0 on success. 🎀
• Mmpcap:run() — start processing packets and send each packet read to the receiver. returns 0 if all packets was read successfully. slay 🔥
• Mmpcap:packets() — return the number of packets seen. the receipts 📊

---

💖 AUTHORS and CONTRIBUTORS 💖

the girlies and guys who made this happen:

• Jerry Lundström (DNS-OARC)
• Tomáš Křížek (CZ.NIC)
• Petr Špaček (ISC)

maintained by DNS-OARC — go say hi, they're doing the lord's work:

https://www.dns-oarc.net/

---

💀 BUGS 💀

found a problem? want a feature? bestie, don't suffer in silence, for issues and feature requests please use:

https://codeberg.org/DNS-OARC/dnsjit/issues

and for questions and help please use:

admin@dns-oarc.net

fr fr, they want to hear from you. no gatekeeping 🙈

---

and that's the whole page, bestie! 🫶 this was dnsjit version 1.5.1, from the dnsjit.input.mmpcap(3) manual — tysm for reading, you ate that, periodt. 💅✨🎀🦋