struct

Filament::Capture::PacketMetadata

Inherits Struct < Value < Object

Carries additional context about a packet that doesn't fit in the core RawPacket struct. This is optional metadata that's nice to have for display purposes but isn't needed for protocol dissection.

We keep this separate from RawPacket to avoid bloating the struct that gets copied around millions of times. Only packets that need annotation get a metadata object allocated for them.

Constructors

new(filename : String | Nil = nil, packet_number : UInt64 = 0_u64, comment : String | Nil = nil, source : CaptureSource = CaptureSource::File, annotation : String | Nil = nil)
Source

Instance methods

annotation

Optional verdict or annotation added during analysis

Source
annotation=(annotation : String | Nil)

Optional verdict or annotation added during analysis

Source
comment

Optional comment attached to the packet (supported in pcapng)

Source
filename

Name of the file this packet came from (nil for live captures)

Source
packet_number

Sequential packet number within the capture (1-based, because that's what Wireshark uses and everyone's used to it)

Source
source

Where this packet came from

Source
to_s(io : IO) : Nil

Returns a compact string representation for log output.

Source