pcapng: add support for custom blocks

1 files changed, 8 insertions, 0 deletions

diff --git a/wiretap/wtap.h b/wiretap/wtap.h
index e79aa5ff84..70a4a219b0 100644
--- a/wiretap/wtap.h
+++ b/wiretap/wtap.h
@@ -1212,6 +1212,7 @@ union wtap_pseudo_header {
 #define REC_TYPE_FT_SPECIFIC_REPORT   2    /**< file-type-specific report */
 #define REC_TYPE_SYSCALL              3    /**< system call */
 #define REC_TYPE_SYSTEMD_JOURNAL      4    /**< systemd journal entry */
+#define REC_TYPE_CUSTOM_BLOCK         5    /**< pcapng custom block */
 
 typedef struct {
     guint32   caplen;           /* data length in the file */
@@ -1324,6 +1325,12 @@ typedef struct {
 } wtap_systemd_journal_header;
 
 typedef struct {
+    guint32   length;           /* length of the record */
+    guint32   pen;              /* private enterprise number */
+    gboolean  copy_allowed;     /* CB can be written */
+} wtap_custom_block_header;
+
+typedef struct {
     guint     rec_type;         /* what type of record is this? */
     guint32   presence_flags;   /* what stuff do we have? */
     nstime_t  ts;               /* time stamp */
@@ -1333,6 +1340,7 @@ typedef struct {
         wtap_ft_specific_header ft_specific_header;
         wtap_syscall_header syscall_header;
         wtap_systemd_journal_header systemd_journal_header;
+        wtap_custom_block_header custom_block_header;
     } rec_header;
     /*
      * XXX - this should become a full set of options.