| Wireshark 4.7.3 The Wireshark network protocol analyzer

Loading...
Searching...
No Matches
Public Attributes | List of all members
erf_phdr Struct Reference

Pseudo-header for Endace ERF (Extensible Record Format) capture files carrying timestamp and record metadata. More...

`#include <wtap.h>`

## Public Attributes
uint64_t | ts
uint8_t | type
uint8_t | flags
uint16_t | rlen
uint16_t | lctr
uint16_t | wlen

## Detailed Description

Pseudo-header for Endace ERF (Extensible Record Format) capture files carrying timestamp and record metadata.

## Member Data Documentation

## ◆ flags

uint8_t erf_phdr::flags

Bitmask of ERF flags describing capture conditions such as RX/TX direction and loss indicators.

## ◆ lctr

uint16_t erf_phdr::lctr

Loss counter; incremented by the capture hardware each time one or more records are dropped.

## ◆ rlen

uint16_t erf_phdr::rlen

Record length in bytes including this header, extension headers, any subheader, and the payload.

## ◆ ts

uint64_t erf_phdr::ts

ERF timestamp in Endace's 64-bit fixed-point format: upper 32 bits are seconds since 1970-01-01, lower 32 bits are fractional seconds.

## ◆ type

uint8_t erf_phdr::type

ERF record type identifying the physical medium and encapsulation of this record.

## ◆ wlen

uint16_t erf_phdr::wlen

Wire length in bytes of the original packet as observed on the network.

The documentation for this struct was generated from the following file:

- /builds/wireshark/wireshark/wiretap/wtap.h