Questions tagged [pcapplusplus]

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. Use the "pcapplusplus" tag for any question related to this project.

PcapPlusPlus is a multiplatform C++ library for capturing, parsing and crafting of network packets. It is designed to be efficient, powerful and easy to use.

PcapPlusPlus enables decoding and forging capabilities for a large variety of network protocols. It also provides easy to use C++ wrappers for the most popular packet processing engines such as libpcap, WinPcap, Npcap (WinPcap’s successor), DPDK and PF_RING.

35 questions
0
votes
0 answers

getting Segmentation fault on PcapNgFileReaderDevice::close()

**#0 0x000000000049344c in light_pcapng_close () #1 0x0000000000480cbe in pcpp::PcapNgFileReaderDevice::close() () ** i am getting this error on my setup. how can i resolve this error .
0
votes
0 answers

Entry Point Not Found wpcap.dll not found by starting the PcapPrinter

I test actually with PcapPlusPlus. It is checked out and added to my Visual Studio Pro 2022. The batch files in ci are executed and the npcap sdk is installed. In parallel Wireshark and Winpcap are installed. The targit is set to x64_debug. The…
0
votes
0 answers

Which rpm i need to download for pcapplusplus library?

getting error fatal error: SystemUtils.h: No such file or directory #include "SystemUtils.h" ^~~~~~~~~~~~~~~ Packet.h: No such file or directory #include "Packet.h" ^~~~~~~~~~ these are the rpm installed on my…
0
votes
0 answers

how to get sctp layer from the packet using pcapplusplus library?

// let's get the TCP layer pcpp::TcpLayer* tcpLayer = parsedPacket.getLayerOfType(); if (tcpLayer == NULL) { cout << "NO TCP LAYER" << endl; } else { // change source port tcpLayer->getTcpHeader()->portSrc =…
0
votes
0 answers

I get an empty device list when using PcapPlusPlus

At the moment, I am interested in networking and in order to learn more, I decided to use the PcapPlusPlus library to capture packets on my local network. My goal is to understand how packets are structured, position and content of the different…
vekoze
  • 1
  • 1
  • 1
0
votes
0 answers

How can I get the E2AP packet details and printed it using PcapPlusPlus?

I am trying to implement PcapPlusPlus and print E2AP packet details.
0
votes
0 answers

PcapPlusPlus Example- DPDKFilterTraffic not performing like I would expect, do I have something misconfigured?

I am working on an application that uses DPDK to write packet payloads to file and am investigating whether or not PcapPlusPlus could be used for this purpose. My setup is as follows: I am using a Mellanox ConnectX-5 NIC, Ubuntu 22.04.01, and the…
adastra
  • 47
  • 1
  • 1
  • 9
0
votes
0 answers

Parse L2TP in PCAP++

I need to parse difficult traffic with Layer 2 Tunneling Protocol: Eth->IP->UDP->L2TP->PTPP->IP->TCP->... .. and get inner and outer IP addresses. I use loop over layer->getNextLayer()) and it stops after first UDP. Is there any BestPractise to cope…
AlekseyLeb
  • 13
  • 2
0
votes
1 answer

Including Pcap++ in a CMake project

I am building a Qt application (with CMake) that will capture and analyze some network packets. Since I am using C++ all over the project, it would be convenient for me to use Pcap++ in my application rather than using lower lever C APIs provided by…
caffeine
  • 435
  • 7
  • 26
0
votes
1 answer

pcapplusplus port filter fails to find packets in trace files

I have an application that displays stats about packets in a pcap file. Here is a partial output from a run I did without filters: 192.168.42.4:5082-17.253.27.205:20480 88:66:5a:04:e0:76 00:80:ae:b2:1e:92 S.SA.A I then ran again with a port…
scottjr155
  • 11
  • 2
0
votes
1 answer

Pcapplusplus equivalent for listening to all interfaces/devices

In libpcap, we're able to listen to all devices by simply doing pcap_t * handle = pcap_open_live(NULL , INT_MAX , 0 , 500 , errbuf); if (handle == NULL) { exit(1); } //Put the device…
0
votes
0 answers

LINK2019 when using PCAP++

I am trying to use the pcap++ library. I have downloaded the libraries for the VS2017, I linked the libraries and also the header files. The libraries are: Common++.lib Packet++.lib Pcap++.lib and I made sure I am using the right release…
0
votes
1 answer

How to configure pcapplusplus so it doesn't ignore packets which are greater than MTU size on PcapLiveDevice?

I am using pcapplusplus library for tcp packet processing in c++. When i am receiving packets greater than MTU size, which is 1500 bytes, my program stops further processing as TcpReassembly is not processing that packet. Due to this…
rdx
  • 101
  • 1
  • 7
0
votes
1 answer

Example how to use TCPReassembly in pcapplusplus?

I have to write TCP Reassembly code in c++. Can somebody please suggest me what is the most suitable library I can use with enough documentation. I tried [pcapplusplus][1] but in this library, I can't find documentation how to implement TCP…
rdx
  • 101
  • 1
  • 7
0
votes
1 answer

PfRingDevice for lo interface

I'm using PF_RING and PCAP++ to capture and analyze net traffic. Sometimes usefull to use lo interface (loopback): for tests and regression analyze. By the way, there is constant silence in the loopback until you break it by your command. PF_RING…
AlekseyLeb
  • 13
  • 2