diff options
author | Guy Harris <guy@alum.mit.edu> | 2009-04-01 20:52:53 +0000 |
---|---|---|
committer | Guy Harris <guy@alum.mit.edu> | 2009-04-01 20:52:53 +0000 |
commit | 96812ede55cd7058a69e9e8f4d38dcf4f058f9e2 (patch) | |
tree | 78f690d73f63c80e2fa77b084ba883a70dc42163 | |
parent | 4ba5d2f92ba094653a66433a568b1dbfa6b9ee7c (diff) |
Describe the format of libpcap records a little better - no, it's not
valid C89, but it's more accurate (and lets you know that the packet
data has only caplen bytes).
Fix up a list.
svn path=/trunk/; revision=27925
-rw-r--r-- | doc/rawshark.pod | 4 |
1 files changed, 3 insertions, 1 deletions
diff --git a/doc/rawshark.pod b/doc/rawshark.pod index 8d8db1d8c7..439c88ddbf 100644 --- a/doc/rawshark.pod +++ b/doc/rawshark.pod @@ -42,7 +42,7 @@ matches the pcap_pkthdr struct and packet data used in libpcap. uint32_t ts_usec; /* Time stamp (microseconds) */ uint32_t caplen; /* Length of the packet buffer */ uint32_t len; /* "On the wire" length of the packet */ - uint8_t *data; /* Packet data */ + uint8_t data[caplen]; /* Packet data */ }; =head1 OUTPUT @@ -179,7 +179,9 @@ are supported: =over 4 B<%D> Field name or description, e.g. "Type" for dns.qry.type + B<%N> Base 10 numeric value of the field. + B<%S> String value of the field. =back |