Describe the format of libpcap records a little better - no, it's not

valid C89, but it's more accurate (and lets you know that the packet
data has only caplen bytes).

Fix up a list.

svn path=/trunk/; revision=27925
This commit is contained in:
Guy Harris 2009-04-01 20:52:53 +00:00
parent 4ba5d2f92b
commit 96812ede55
1 changed files with 3 additions and 1 deletions

View File

@ -42,7 +42,7 @@ matches the pcap_pkthdr struct and packet data used in libpcap.
uint32_t ts_usec; /* Time stamp (microseconds) */
uint32_t caplen; /* Length of the packet buffer */
uint32_t len; /* "On the wire" length of the packet */
uint8_t *data; /* Packet data */
uint8_t data[caplen]; /* Packet data */
};
=head1 OUTPUT
@ -179,7 +179,9 @@ are supported:
=over 4
B<%D> Field name or description, e.g. "Type" for dns.qry.type
B<%N> Base 10 numeric value of the field.
B<%S> String value of the field.
=back