PCAPNG Constant Enumerations

This module contains all constant enumerations of PCAPNG implementations. Available enumerations include:

PCAPNG_BlockType	Block Types [*]
PCAPNG_OptionType	Option Types [†]
PCAPNG_HashAlgorithm	Hash Algorithms [‡]
PCAPNG_VerdictType	Verdict Types [§]
PCAPNG_RecordType	Record Types [¶]
PCAPNG_SecretsType	Secrets Types [#]
PCAPNG_FilterType	Filter Types [♠]

Block Types

This module contains the constant enumeration for Block Types, which is automatically generated from pcapkit.vendor.pcapng.block_type.BlockType.

class pcapkit.const.pcapng.block_type.BlockType(value=<no_arg>, names=None, module=None, qualname=None, type=None, start=1, boundary=None)

Bases: IntEnum

[BlockType] Block Types

Reserved_0x00000000 = 0

Reserved ???

Interface_Description_Block = 1

Interface Description Block ( Section 4.2 )

Packet_Block = 2

Packet Block ( Appendix A )

Simple_Packet_Block = 3

Simple Packet Block ( Section 4.4 )

Name_Resolution_Block = 4

Name Resolution Block ( Section 4.5 )

Interface_Statistics_Block = 5

Interface Statistics Block ( Section 4.6 )

Enhanced_Packet_Block = 6

Enhanced Packet Block ( Section 4.3 )

IRIG_Timestamp_Block = 7

IRIG Timestamp Block (requested by Gianluca Varenni <gianluca.varenni@cacetech.com>, CACE Technologies LLC); code also used for Socket Aggregation Event Block

ARINC_429_in_AFDX_Encapsulation_Information_Block = 8

ARINC 429 in AFDX Encapsulation Information Block (requested by Gianluca Varenni <gianluca.varenni@cacetech.com>, CACE Technologies LLC)

systemd_Journal_Export_Block = 9

systemd Journal Export Block ( Section 4.7 )

Decryption_Secrets_Block = 10

Decryption Secrets Block ( Section 4.8 )

Hone_Project_Machine_Info_Block = 257

Hone Project Machine Info Block (see also Google version )

Hone_Project_Connection_Event_Block = 258

Hone Project Connection Event Block (see also Google version )

Sysdig_Machine_Info_Block = 513

Sysdig Machine Info Block

Sysdig_Process_Info_Block_version_1 = 514

Sysdig Process Info Block, version 1

Sysdig_FD_List_Block = 515

Sysdig FD List Block

Sysdig_Event_Block = 516

Sysdig Event Block

Sysdig_Interface_List_Block = 517

Sysdig Interface List Block

Sysdig_User_List_Block = 518

Sysdig User List Block

Sysdig_Process_Info_Block_version_2 = 519

Sysdig Process Info Block, version 2

Sysdig_Event_Block_with_flags = 520

Sysdig Event Block with flags

Sysdig_Process_Info_Block_version_3 = 521

Sysdig Process Info Block, version 3

Sysdig_Process_Info_Block_version_4 = 528

Sysdig Process Info Block, version 4

Sysdig_Process_Info_Block_version_5 = 529

Sysdig Process Info Block, version 5

Sysdig_Process_Info_Block_version_6 = 530

Sysdig Process Info Block, version 6

Sysdig_Process_Info_Block_version_7 = 531

Sysdig Process Info Block, version 7

Custom_Block_that_rewriters_can_copy_into_new_files = 2989

Custom Block that rewriters can copy into new files ( Section 4.9 )

Custom_Block_that_rewriters_should_not_copy_into_new_files = 1073744813

Custom Block that rewriters should not copy into new files ( Section 4.9 )

Section_Header_Block = 168627466

Section Header Block ( Section 4.1 )

classmethod _missing_(value)

Lookup function used when value is not found.

Parameters:

value (int) – Value to get enum item.

Return type:

BlockType

Hash Algorithms

This module contains the constant enumeration for Hash Algorithms, which is automatically generated from pcapkit.vendor.pcapng.hash_algorithm.HashAlgorithm.

class pcapkit.const.pcapng.hash_algorithm.HashAlgorithm(value=<no_arg>, names=None, module=None, qualname=None, type=None, start=1, boundary=None)

Bases: IntEnum

[HashAlgorithm] Hash Algorithms

two_s_complement = 0

XOR = 1

CRC32 = 2

MD_5 = 3

SHA_1 = 4

Toeplitz = 5

classmethod _missing_(value)

Lookup function used when value is not found.

Parameters:

value (int) – Value to get enum item.

Return type:

HashAlgorithm

Option Types

This module contains the constant enumeration for Option Types, which is automatically generated from pcapkit.vendor.pcapng.option_type.OptionType.

class pcapkit.const.pcapng.option_type.OptionType(value=<no_arg>, names=None, module=None, qualname=None, type=None, start=1, boundary=None)

Bases: StrEnum

[OptionType] Option Types

opt_name: str

Short name of the option type.

opt_value: int

Numeric value of the option type.

opt_endofopt: OptionType = 'opt_endofopt [0]'

opt_endofopt

opt_comment: OptionType = 'opt_comment [1]'

opt_comment

opt_custom_2988: OptionType = 'opt_custom [2988]'

opt_custom

opt_custom_2989: OptionType = 'opt_custom [2989]'

opt_custom

opt_custom_19372: OptionType = 'opt_custom [19372]'

opt_custom

opt_custom_19373: OptionType = 'opt_custom [19373]'

opt_custom

if_name: OptionType = 'if_name [2]'

if_name

if_description: OptionType = 'if_description [3]'

if_description

if_IPv4addr: OptionType = 'if_IPv4addr [4]'

if_IPv4addr

if_IPv6addr: OptionType = 'if_IPv6addr [5]'

if_IPv6addr

if_MACaddr: OptionType = 'if_MACaddr [6]'

if_MACaddr

if_EUIaddr: OptionType = 'if_EUIaddr [7]'

if_EUIaddr

if_speed: OptionType = 'if_speed [8]'

if_speed

if_tsresol: OptionType = 'if_tsresol [9]'

if_tsresol

if_tzone: OptionType = 'if_tzone [10]'

if_tzone

if_filter: OptionType = 'if_filter [11]'

if_filter

if_os: OptionType = 'if_os [12]'

if_os

if_fcslen: OptionType = 'if_fcslen [13]'

if_fcslen

if_tsoffset: OptionType = 'if_tsoffset [14]'

if_tsoffset

if_hardware: OptionType = 'if_hardware [15]'

if_hardware

if_txspeed: OptionType = 'if_txspeed [16]'

if_txspeed

if_rxspeed: OptionType = 'if_rxspeed [17]'

if_rxspeed

epb_flags: OptionType = 'epb_flags [2]'

epb_flags

epb_hash: OptionType = 'epb_hash [3]'

epb_hash

epb_dropcount: OptionType = 'epb_dropcount [4]'

epb_dropcount

epb_packetid: OptionType = 'epb_packetid [5]'

epb_packetid

epb_queue: OptionType = 'epb_queue [6]'

epb_queue

epb_verdict: OptionType = 'epb_verdict [7]'

epb_verdict

ns_dnsname: OptionType = 'ns_dnsname [2]'

ns_dnsname

ns_dnsIP4addr: OptionType = 'ns_dnsIP4addr [3]'

ns_dnsIP4addr

ns_dnsIP6addr: OptionType = 'ns_dnsIP6addr [4]'

ns_dnsIP6addr

isb_starttime: OptionType = 'isb_starttime [2]'

isb_starttime

isb_endtime: OptionType = 'isb_endtime [3]'

isb_endtime

isb_ifrecv: OptionType = 'isb_ifrecv [4]'

isb_ifrecv

isb_ifdrop: OptionType = 'isb_ifdrop [5]'

isb_ifdrop

isb_filteraccept: OptionType = 'isb_filteraccept [6]'

isb_filteraccept

isb_osdrop: OptionType = 'isb_osdrop [7]'

isb_osdrop

isb_usrdeliv: OptionType = 'isb_usrdeliv [8]'

isb_usrdeliv

pack_flags: OptionType = 'pack_flags [2]'

pack_flags

pack_hash: OptionType = 'pack_hash [3]'

pack_hash

classmethod _missing_(value)

Lookup function used when value is not found.

Parameters:

value (int) – Value to get enum item.

Return type:

OptionType

Record Types

This module contains the constant enumeration for Record Types, which is automatically generated from pcapkit.vendor.pcapng.record_type.RecordType.

class pcapkit.const.pcapng.record_type.RecordType(value=<no_arg>, names=None, module=None, qualname=None, type=None, start=1, boundary=None)

Bases: IntEnum

[RecordType] Record Types

nrb_record_end = 0

nrb_record_end

nrb_record_ipv4 = 1

nrb_record_ipv4

nrb_record_ipv6 = 2

nrb_record_ipv6

classmethod _missing_(value)

Lookup function used when value is not found.

Parameters:

value (int) – Value to get enum item.

Return type:

RecordType

Secrets Types

This module contains the constant enumeration for Secrets Types, which is automatically generated from pcapkit.vendor.pcapng.secrets_type.SecretsType.

class pcapkit.const.pcapng.secrets_type.SecretsType(value=<no_arg>, names=None, module=None, qualname=None, type=None, start=1, boundary=None)

Bases: IntEnum

[SecretsType] Secrets Types

TLS_Key_Log = 1414288203

WireGuard_Key_Log = 1464290124

ZigBee_NWK_Key = 1515083595

ZigBee_APS_Key = 1514229843

classmethod _missing_(value)

Lookup function used when value is not found.

Parameters:

value (int) – Value to get enum item.

Return type:

SecretsType

Verdict Types

This module contains the constant enumeration for Verdict Types, which is automatically generated from pcapkit.vendor.pcapng.verdict_type.VerdictType.

class pcapkit.const.pcapng.verdict_type.VerdictType(value=<no_arg>, names=None, module=None, qualname=None, type=None, start=1, boundary=None)

Bases: IntEnum

[VerdictType] Verdict Types

Hardware = 0

Linux_eBPF_TC = 1

Linux_eBPF_XDP = 2

classmethod _missing_(value)

Lookup function used when value is not found.

Parameters:

value (int) – Value to get enum item.

Return type:

VerdictType

Filter Types

This module contains the constant enumeration for Filter Types, which is automatically generated from pcapkit.vendor.pcapng.filter_type.FilterType.

class pcapkit.const.pcapng.filter_type.FilterType(value=<no_arg>, names=None, module=None, qualname=None, type=None, start=1, boundary=None)

Bases: IntEnum

[FilterType] Filter Types

classmethod _missing_(value)

Lookup function used when value is not found.

Parameters:

value (int) – Value to get enum item.

Return type:

FilterType

Unassigned_0 = 0

[*]

https://www.ietf.org/staging/draft-tuexen-opsawg-pcapng-02.html#name-standardized-block-type-cod

[†]

https://www.ietf.org/staging/draft-tuexen-opsawg-pcapng-02.html#name-options

[‡]

https://www.ietf.org/staging/draft-tuexen-opsawg-pcapng-02.html#name-enhanced-packet-block-flags

[§]

https://www.ietf.org/staging/draft-tuexen-opsawg-pcapng-02.html#name-enhanced-packet-block

[¶]

https://www.ietf.org/staging/draft-tuexen-opsawg-pcapng-02.html#name-name-resolution-block

[#]

https://www.ietf.org/staging/draft-tuexen-opsawg-pcapng-02.html#name-decryption-secrets-block

[♠]

https://www.ietf.org/staging/draft-tuexen-opsawg-pcapng-02.html#name-interface-description-block