The latest release of jNetStream (3.0a) is a pure java library that allows reading of various capture files in pcap and snoop formats. jNetStream's strength is super clean API, and very powerful editing capabilities. There is a separate module being developed, based on http://jnetpcap.com, to allow capture of packets from a live network, but that is currently still under development. There is also no protocol-header decoding as that is also being developed under the http://jnetpcap.com project.
This section defines in detail all the operations that are possible on a
region and its effects on the internal structure of region and resulting
segments. The section is extremely detailed since regions are such an
important component of any editing implementations. The region behaviour
is extensively documented in this document so that all results can be
very predictable and testable for expected outcome.
Region is an arbitrary sequence of elements. It is not defined what the
I was messing around with how we could combine jnetstream with packet decoding capabilities of jnetpcap. Here is a little routine that does exactly that.
package org.jnetstream.example; import java.io.File; import java.io.IOException; import java.nio.ByteBuffer; import org.jnetpcap.packet.JMemoryPacket; import org.jnetpcap.packet.PeeringException; import org.jnetpcap.protocol.JProtocol; import org.jnetstream.capture.Captures; import org.jnetstream.capture.FileFormatException; import org.jnetstream.capture.FileMode;