wader/fq
1
1
Fork 0
mirror of https://github.com/wader/fq.git synced 2024-09-11 20:07:11 +03:00
Code Issues Projects Releases Wiki Activity

Merge pull request #860 from wader/pcapnp-all-section-header-cleanup

Browse Source 
pcapng: Decode all section headers
This commit is contained in:
Mattias Wadman 2024-02-06 01:26:49 +01:00 committed by GitHub
commit 8999c84e6c
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
5 changed files with 145 additions and 152 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
format/inet/testdata/tls12-ipv4-linkframe-keylog.pcapng.fqtest vendored
View File

@ -1,7 +1,7 @@
# tls12-dsb.pcapng from https://gitlab.com/wireshark/wireshark/-/tree/master/test/captures
$ fq 'first(grep_by(.type=="enhanced_packet")), .[0].tcp_connections | dv' tls12-ipv4-linkframe-keylog.pcapng
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.[0].blocks[3]{}: block 0x12c-0x268 (316)
0x120| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x12c-0x130 (4)
0x120| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x12c-0x130 (4)
0x130|3c 01 00 00 |<... | length: 316 0x130-0x134 (4)
0x130| 00 00 00 00 | .... | interface_id: 0 0x134-0x138 (4)
0x130| dd 7a 05 00 | .z.. | timestamp_high: 359133 0x138-0x13c (4)

81
format/pcap/pcapng.go
View File

@ -53,12 +53,12 @@ const (
// from https://pcapng.github.io/pcapng/draft-ietf-opsawg-pcapng.html#section_block_code_registry
var blockTypeMap = scalar.UintMap{
blockTypeInterfaceDescription: {Sym: "interface_description", Description: "Interface Description Block"},
blockTypeInterfaceDescription: {Sym: "interface_description"},
0x00000002: {Description: "Packet Block"},
0x00000003: {Description: "Simple Packet Block"},
blockTypeNameResolution: {Sym: "name_resolution", Description: "Name Resolution Block"},
blockTypeInterfaceStatistics: {Sym: "interface_statistics", Description: "Interface Statistics Block"},
blockTypeEnhancedPacketBlock: {Sym: "enhanced_packet", Description: "Enhanced Packet Block"},
blockTypeNameResolution: {Sym: "name_resolution"},
blockTypeInterfaceStatistics: {Sym: "interface_statistics"},
blockTypeEnhancedPacketBlock: {Sym: "enhanced_packet"},
0x00000007: {Description: "IRIG Timestamp Block"},
0x00000008: {Description: "ARINC 429 in AFDX Encapsulation Information Block"},
0x00000009: {Description: "systemd Journal Export Block"},
@ -80,7 +80,7 @@ var blockTypeMap = scalar.UintMap{
0x00000213: {Description: "Sysdig Process Info Block, version 7"},
0x00000bad: {Description: "Custom Block that rewriters can copy into new files"},
0x40000bad: {Description: "Custom Block that rewriters should not copy into new files"},
blockTypeSectionHeader: {Sym: "section_header", Description: "Section Header Block"},
blockTypeSectionHeader: {Sym: "section_header"},
}
const (
@ -216,6 +216,15 @@ var mapUToIPv4Sym = scalar.UintFn(func(s scalar.Uint) (scalar.Uint, error) {
var blockFns = map[uint64]func(d *decode.D, dc *decodeContext){
// TODO: SimplePacket
// TODO: Packet
blockTypeSectionHeader: func(d *decode.D, dc *decodeContext) {
d.FieldU32BE("byte_order_magic", ngEndianMap, scalar.UintHex)
d.FieldU16("major_version")
d.FieldU16("minor_version")
dc.sectionLength = d.FieldS64("section_length")
d.FieldArray("options", func(d *decode.D) { decoodeOptions(d, sectionHeaderOptionsMap) })
dc.sectionHeaderFound = true
},
blockTypeInterfaceDescription: func(d *decode.D, dc *decodeContext) {
typ := d.FieldU16("link_type", format.LinkTypeMap)
d.FieldU16("reserved")
@ -293,7 +302,24 @@ var blockFns = map[uint64]func(d *decode.D, dc *decodeContext){
}
func decodeBlock(d *decode.D, dc *decodeContext) {
d.Endian = dc.endian
typ := d.FieldU32("type", blockTypeMap, scalar.UintHex)
// section header is special as it stores byte order marker
if typ == blockTypeSectionHeader {
d.SeekRel(32) // skip length
endian := d.U32BE() // force BE
switch endian {
case ngBigEndian:
dc.endian = decode.BigEndian
case ngLittleEndian:
dc.endian = decode.LittleEndian
default:
d.Fatalf("unknown endian %d", endian)
}
d.Endian = dc.endian
d.SeekRel(-64)
}
length := d.FieldU32("length") - 8
const footerLengthSize = 32
blockLen := int64(length)*8 - footerLengthSize
@ -312,51 +338,19 @@ func decodeBlock(d *decode.D, dc *decodeContext) {
func decodeSection(d *decode.D, dc *decodeContext) {
d.FieldArray("blocks", func(d *decode.D) {
sectionLength := int64(-1)
sectionD := d
sectionStart := d.Pos()
// treat header block differently as it has endian info
d.FieldStruct("block", func(d *decode.D) {
d.FieldU32("type", d.UintAssert(blockTypeSectionHeader), blockTypeMap, scalar.UintHex)
d.SeekRel(32)
endian := d.FieldU32("byte_order_magic", ngEndianMap, scalar.UintHex)
// peeks length and byte-order magic and marks away length
switch endian {
case ngBigEndian:
d.Endian = decode.BigEndian
case ngLittleEndian:
d.Endian = decode.LittleEndian
default:
d.Fatalf("unknown endian %d", endian)
}
sectionD.Endian = d.Endian
d.SeekRel(-64)
length := d.FieldU32("length") - 8 - 4
d.SeekRel(32)
d.FramedFn(int64(length)*8, func(d *decode.D) {
d.FieldU16("major_version")
d.FieldU16("minor_version")
sectionLength = d.FieldS64("section_length")
d.FramedFn(d.BitsLeft()-32, func(d *decode.D) {
d.FieldArray("options", func(d *decode.D) { decoodeOptions(d, sectionHeaderOptionsMap) })
})
d.FieldU32("footer_total_length")
})
dc.sectionHeaderFound = true
})
for (sectionLength == -1 && !d.End()) ||
(sectionLength != -1 && d.Pos()-sectionStart < sectionLength*8) {
// assume and read first section header
d.FieldStruct("block", func(d *decode.D) { decodeBlock(d, dc) })
for (dc.sectionLength == -1 && !d.End()) ||
(dc.sectionLength != -1 && d.Pos()-sectionStart < dc.sectionLength*8) {
d.FieldStruct("block", func(d *decode.D) { decodeBlock(d, dc) })
}
})
}
type decodeContext struct {
endian decode.Endian
sectionLength int64
sectionHeaderFound bool
interfaceTypes map[int]int
flowDecoder *flowsdecoder.Decoder
@ -378,7 +372,6 @@ func decodePcapng(d *decode.D) any {
})
if dc.sectionHeaderFound {
sectionHeaders++
}
}

16
format/pcap/testdata/dhcp_big_endian.fqtest vendored
View File

@ -4,16 +4,16 @@ $ fq -d pcapng dv dhcp_big_endian.pcapng
| | | [0]{}: section 0x0-0x5fc (1532)
| | | blocks[0:7]: 0x0-0x5fc (1532)
| | | [0]{}: block 0x0-0x1c (28)
0x000|0a 0d 0d 0a |.... | type: "section_header" (0xa0d0d0a) (Section Header Block) 0x0-0x4 (4)
0x000|0a 0d 0d 0a |.... | type: "section_header" (0xa0d0d0a) 0x0-0x4 (4)
0x000| 00 00 00 1c | .... | length: 28 0x4-0x8 (4)
0x000| 1a 2b 3c 4d | .+<M | byte_order_magic: "big_endian" (0x1a2b3c4d) 0x8-0xc (4)
0x000| 00 01 | .. | major_version: 1 0xc-0xe (2)
0x000| 00 00| ..| minor_version: 0 0xe-0x10 (2)
0x010|ff ff ff ff ff ff ff ff |........ | section_length: -1 0x10-0x18 (8)
| | | options[0:0]: 0x18-0x18 (0)
0x010| 00 00 00 1c | .... | footer_total_length: 28 0x18-0x1c (4)
0x010| 00 00 00 1c | .... | footer_length: 28 0x18-0x1c (4)
| | | [1]{}: block 0x1c-0x30 (20)
0x010| 00 00 00 01| ....| type: "interface_description" (0x1) (Interface Description Block) 0x1c-0x20 (4)
0x010| 00 00 00 01| ....| type: "interface_description" (0x1) 0x1c-0x20 (4)
0x020|00 00 00 14 |.... | length: 20 0x20-0x24 (4)
0x020| 00 01 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x24-0x26 (2)
0x020| 00 00 | .. | reserved: 0 0x26-0x28 (2)
@ -21,7 +21,7 @@ $ fq -d pcapng dv dhcp_big_endian.pcapng
| | | options[0:0]: 0x2c-0x2c (0)
0x020| 00 00 00 14| ....| footer_length: 20 0x2c-0x30 (4)
| | | [2]{}: block 0x30-0x54 (36)
0x030|00 00 00 04 |.... | type: "name_resolution" (0x4) (Name Resolution Block) 0x30-0x34 (4)
0x030|00 00 00 04 |.... | type: "name_resolution" (0x4) 0x30-0x34 (4)
0x030| 00 00 00 24 | ...$ | length: 36 0x34-0x38 (4)
| | | records[0:2]: 0x38-0x50 (24)
| | | [0]{}: record 0x38-0x4c (20)
@ -37,7 +37,7 @@ $ fq -d pcapng dv dhcp_big_endian.pcapng
| | | options[0:0]: 0x50-0x50 (0)
0x050|00 00 00 24 |...$ | footer_length: 36 0x50-0x54 (4)
| | | [3]{}: block 0x54-0x1b0 (348)
0x050| 00 00 00 06 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x54-0x58 (4)
0x050| 00 00 00 06 | .... | type: "enhanced_packet" (0x6) 0x54-0x58 (4)
0x050| 00 00 01 5c | ...\ | length: 348 0x58-0x5c (4)
0x050| 00 00 00 00| ....| interface_id: 0 0x5c-0x60 (4)
0x060|41 b3 5e 88 |A.^. | timestamp_high: 1102274184 0x60-0x64 (4)
@ -77,7 +77,7 @@ $ fq -d pcapng dv dhcp_big_endian.pcapng
| | | options[0:0]: 0x1ac-0x1ac (0)
0x1a0| 00 00 01 5c| ...\| footer_length: 348 0x1ac-0x1b0 (4)
| | | [4]{}: block 0x1b0-0x328 (376)
0x1b0|00 00 00 06 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1b0-0x1b4 (4)
0x1b0|00 00 00 06 |.... | type: "enhanced_packet" (0x6) 0x1b0-0x1b4 (4)
0x1b0| 00 00 01 78 | ...x | length: 376 0x1b4-0x1b8 (4)
0x1b0| 00 00 00 00 | .... | interface_id: 0 0x1b8-0x1bc (4)
0x1b0| 41 b3 5e 88| A.^.| timestamp_high: 1102274184 0x1bc-0x1c0 (4)
@ -117,7 +117,7 @@ $ fq -d pcapng dv dhcp_big_endian.pcapng
| | | options[0:0]: 0x324-0x324 (0)
0x320| 00 00 01 78 | ...x | footer_length: 376 0x324-0x328 (4)
| | | [5]{}: block 0x328-0x484 (348)
0x320| 00 00 00 06 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x328-0x32c (4)
0x320| 00 00 00 06 | .... | type: "enhanced_packet" (0x6) 0x328-0x32c (4)
0x320| 00 00 01 5c| ...\| length: 348 0x32c-0x330 (4)
0x330|00 00 00 00 |.... | interface_id: 0 0x330-0x334 (4)
0x330| 41 b3 5e 88 | A.^. | timestamp_high: 1102274184 0x334-0x338 (4)
@ -157,7 +157,7 @@ $ fq -d pcapng dv dhcp_big_endian.pcapng
| | | options[0:0]: 0x480-0x480 (0)
0x480|00 00 01 5c |...\ | footer_length: 348 0x480-0x484 (4)
| | | [6]{}: block 0x484-0x5fc (376)
0x480| 00 00 00 06 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x484-0x488 (4)
0x480| 00 00 00 06 | .... | type: "enhanced_packet" (0x6) 0x484-0x488 (4)
0x480| 00 00 01 78 | ...x | length: 376 0x488-0x48c (4)
0x480| 00 00 00 00| ....| interface_id: 0 0x48c-0x490 (4)
0x490|41 b3 5e 88 |A.^. | timestamp_high: 1102274184 0x490-0x494 (4)

20
format/pcap/testdata/dhcp_little_endian.fqtest vendored
View File

@ -2,29 +2,29 @@
# TODO: move once we can have decode value tests somehow
$ fq '.[0].blocks[0]' dhcp_little_endian.pcapng
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.[0].blocks[0]{}: block
0x00|0a 0d 0d 0a |.... | type: "section_header" (0xa0d0d0a) (Section Header Block)
0x00|0a 0d 0d 0a |.... | type: "section_header" (0xa0d0d0a)
0x00| 1c 00 00 00 | .... | length: 28
0x00| 4d 3c 2b 1a | M<+. | byte_order_magic: "little_endian" (0x4d3c2b1a)
0x00| 01 00 | .. | major_version: 1
0x00| 00 00| ..| minor_version: 0
0x10|ff ff ff ff ff ff ff ff |........ | section_length: -1
| | | options[0:0]:
0x10| 1c 00 00 00 | .... | footer_total_length: 28
0x10| 1c 00 00 00 | .... | footer_length: 28
$ fq dv dhcp_little_endian.pcapng
|00 01 02 03 04 05 06 07 08 09 0a 0b 0c 0d 0e 0f|0123456789abcdef|.[0:1]: dhcp_little_endian.pcapng (pcapng) 0x0-0x5fc (1532)
| | | [0]{}: section 0x0-0x5fc (1532)
| | | blocks[0:7]: 0x0-0x5fc (1532)
| | | [0]{}: block 0x0-0x1c (28)
0x000|0a 0d 0d 0a |.... | type: "section_header" (0xa0d0d0a) (Section Header Block) 0x0-0x4 (4)
0x000|0a 0d 0d 0a |.... | type: "section_header" (0xa0d0d0a) 0x0-0x4 (4)
0x000| 1c 00 00 00 | .... | length: 28 0x4-0x8 (4)
0x000| 4d 3c 2b 1a | M<+. | byte_order_magic: "little_endian" (0x4d3c2b1a) 0x8-0xc (4)
0x000| 01 00 | .. | major_version: 1 0xc-0xe (2)
0x000| 00 00| ..| minor_version: 0 0xe-0x10 (2)
0x010|ff ff ff ff ff ff ff ff |........ | section_length: -1 0x10-0x18 (8)
| | | options[0:0]: 0x18-0x18 (0)
0x010| 1c 00 00 00 | .... | footer_total_length: 28 0x18-0x1c (4)
0x010| 1c 00 00 00 | .... | footer_length: 28 0x18-0x1c (4)
| | | [1]{}: block 0x1c-0x30 (20)
0x010| 01 00 00 00| ....| type: "interface_description" (0x1) (Interface Description Block) 0x1c-0x20 (4)
0x010| 01 00 00 00| ....| type: "interface_description" (0x1) 0x1c-0x20 (4)
0x020|14 00 00 00 |.... | length: 20 0x20-0x24 (4)
0x020| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x24-0x26 (2)
0x020| 00 00 | .. | reserved: 0 0x26-0x28 (2)
@ -32,7 +32,7 @@ $ fq dv dhcp_little_endian.pcapng
| | | options[0:0]: 0x2c-0x2c (0)
0x020| 14 00 00 00| ....| footer_length: 20 0x2c-0x30 (4)
| | | [2]{}: block 0x30-0x54 (36)
0x030|04 00 00 00 |.... | type: "name_resolution" (0x4) (Name Resolution Block) 0x30-0x34 (4)
0x030|04 00 00 00 |.... | type: "name_resolution" (0x4) 0x30-0x34 (4)
0x030| 24 00 00 00 | $... | length: 36 0x34-0x38 (4)
| | | records[0:2]: 0x38-0x50 (24)
| | | [0]{}: record 0x38-0x4c (20)
@ -48,7 +48,7 @@ $ fq dv dhcp_little_endian.pcapng
| | | options[0:0]: 0x50-0x50 (0)
0x050|24 00 00 00 |$... | footer_length: 36 0x50-0x54 (4)
| | | [3]{}: block 0x54-0x1b0 (348)
0x050| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x54-0x58 (4)
0x050| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x54-0x58 (4)
0x050| 5c 01 00 00 | \... | length: 348 0x58-0x5c (4)
0x050| 00 00 00 00| ....| interface_id: 0 0x5c-0x60 (4)
0x060|88 5e b3 41 |.^.A | timestamp_high: 1102274184 0x60-0x64 (4)
@ -88,7 +88,7 @@ $ fq dv dhcp_little_endian.pcapng
| | | options[0:0]: 0x1ac-0x1ac (0)
0x1a0| 5c 01 00 00| \...| footer_length: 348 0x1ac-0x1b0 (4)
| | | [4]{}: block 0x1b0-0x328 (376)
0x1b0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1b0-0x1b4 (4)
0x1b0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x1b0-0x1b4 (4)
0x1b0| 78 01 00 00 | x... | length: 376 0x1b4-0x1b8 (4)
0x1b0| 00 00 00 00 | .... | interface_id: 0 0x1b8-0x1bc (4)
0x1b0| 88 5e b3 41| .^.A| timestamp_high: 1102274184 0x1bc-0x1c0 (4)
@ -128,7 +128,7 @@ $ fq dv dhcp_little_endian.pcapng
| | | options[0:0]: 0x324-0x324 (0)
0x320| 78 01 00 00 | x... | footer_length: 376 0x324-0x328 (4)
| | | [5]{}: block 0x328-0x484 (348)
0x320| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x328-0x32c (4)
0x320| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x328-0x32c (4)
0x320| 5c 01 00 00| \...| length: 348 0x32c-0x330 (4)
0x330|00 00 00 00 |.... | interface_id: 0 0x330-0x334 (4)
0x330| 88 5e b3 41 | .^.A | timestamp_high: 1102274184 0x334-0x338 (4)
@ -168,7 +168,7 @@ $ fq dv dhcp_little_endian.pcapng
| | | options[0:0]: 0x480-0x480 (0)
0x480|5c 01 00 00 |\... | footer_length: 348 0x480-0x484 (4)
| | | [6]{}: block 0x484-0x5fc (376)
0x480| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x484-0x488 (4)
0x480| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x484-0x488 (4)
0x480| 78 01 00 00 | x... | length: 376 0x488-0x48c (4)
0x480| 00 00 00 00| ....| interface_id: 0 0x48c-0x490 (4)
0x490|88 5e b3 41 |.^.A | timestamp_high: 1102274184 0x490-0x494 (4)

178
format/pcap/testdata/many_interfaces.fqtest vendored
View File

@ -4,7 +4,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | [0]{}: section 0x0-0x51b8 (20920)
| | | blocks[0:88]: 0x0-0x51b8 (20920)
| | | [0]{}: block 0x0-0x8c (140)
0x00000|0a 0d 0d 0a |.... | type: "section_header" (0xa0d0d0a) (Section Header Block) 0x0-0x4 (4)
0x00000|0a 0d 0d 0a |.... | type: "section_header" (0xa0d0d0a) 0x0-0x4 (4)
0x00000| 8c 00 00 00 | .... | length: 140 0x4-0x8 (4)
0x00000| 4d 3c 2b 1a | M<+. | byte_order_magic: "little_endian" (0x4d3c2b1a) 0x8-0xc (4)
0x00000| 01 00 | .. | major_version: 1 0xc-0xe (2)
@ -27,9 +27,9 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | [2]{}: option 0x84-0x88 (4)
0x00080| 00 00 | .. | code: "end" (0) (End of options) 0x84-0x86 (2)
0x00080| 00 00 | .. | length: 0 0x86-0x88 (2)
0x00080| 8c 00 00 00 | .... | footer_total_length: 140 0x88-0x8c (4)
0x00080| 8c 00 00 00 | .... | footer_length: 140 0x88-0x8c (4)
| | | [1]{}: block 0x8c-0x100 (116)
0x00080| 01 00 00 00| ....| type: "interface_description" (0x1) (Interface Description Block) 0x8c-0x90 (4)
0x00080| 01 00 00 00| ....| type: "interface_description" (0x1) 0x8c-0x90 (4)
0x00090|74 00 00 00 |t... | length: 116 0x90-0x94 (4)
0x00090| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x94-0x96 (2)
0x00090| 00 00 | .. | reserved: 0 0x96-0x98 (2)
@ -63,7 +63,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x000f0| 00 00 | .. | length: 0 0xfa-0xfc (2)
0x000f0| 74 00 00 00| t...| footer_length: 116 0xfc-0x100 (4)
| | | [2]{}: block 0x100-0x178 (120)
0x00100|01 00 00 00 |.... | type: "interface_description" (0x1) (Interface Description Block) 0x100-0x104 (4)
0x00100|01 00 00 00 |.... | type: "interface_description" (0x1) 0x100-0x104 (4)
0x00100| 78 00 00 00 | x... | length: 120 0x104-0x108 (4)
0x00100| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x108-0x10a (2)
0x00100| 00 00 | .. | reserved: 0 0x10a-0x10c (2)
@ -96,7 +96,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00170| 00 00 | .. | length: 0 0x172-0x174 (2)
0x00170| 78 00 00 00 | x... | footer_length: 120 0x174-0x178 (4)
| | | [3]{}: block 0x178-0x1f0 (120)
0x00170| 01 00 00 00 | .... | type: "interface_description" (0x1) (Interface Description Block) 0x178-0x17c (4)
0x00170| 01 00 00 00 | .... | type: "interface_description" (0x1) 0x178-0x17c (4)
0x00170| 78 00 00 00| x...| length: 120 0x17c-0x180 (4)
0x00180|01 00 |.. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x180-0x182 (2)
0x00180| 00 00 | .. | reserved: 0 0x182-0x184 (2)
@ -131,7 +131,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x001e0| 00 00 | .. | length: 0 0x1ea-0x1ec (2)
0x001e0| 78 00 00 00| x...| footer_length: 120 0x1ec-0x1f0 (4)
| | | [4]{}: block 0x1f0-0x268 (120)
0x001f0|01 00 00 00 |.... | type: "interface_description" (0x1) (Interface Description Block) 0x1f0-0x1f4 (4)
0x001f0|01 00 00 00 |.... | type: "interface_description" (0x1) 0x1f0-0x1f4 (4)
0x001f0| 78 00 00 00 | x... | length: 120 0x1f4-0x1f8 (4)
0x001f0| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x1f8-0x1fa (2)
0x001f0| 00 00 | .. | reserved: 0 0x1fa-0x1fc (2)
@ -164,7 +164,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00260| 00 00 | .. | length: 0 0x262-0x264 (2)
0x00260| 78 00 00 00 | x... | footer_length: 120 0x264-0x268 (4)
| | | [5]{}: block 0x268-0x2e0 (120)
0x00260| 01 00 00 00 | .... | type: "interface_description" (0x1) (Interface Description Block) 0x268-0x26c (4)
0x00260| 01 00 00 00 | .... | type: "interface_description" (0x1) 0x268-0x26c (4)
0x00260| 78 00 00 00| x...| length: 120 0x26c-0x270 (4)
0x00270|00 00 |.. | link_type: "null" (0) (BSD loopback encapsulation) 0x270-0x272 (2)
0x00270| 00 00 | .. | reserved: 0 0x272-0x274 (2)
@ -199,7 +199,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x002d0| 00 00 | .. | length: 0 0x2da-0x2dc (2)
0x002d0| 78 00 00 00| x...| footer_length: 120 0x2dc-0x2e0 (4)
| | | [6]{}: block 0x2e0-0x354 (116)
0x002e0|01 00 00 00 |.... | type: "interface_description" (0x1) (Interface Description Block) 0x2e0-0x2e4 (4)
0x002e0|01 00 00 00 |.... | type: "interface_description" (0x1) 0x2e0-0x2e4 (4)
0x002e0| 74 00 00 00 | t... | length: 116 0x2e4-0x2e8 (4)
0x002e0| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x2e8-0x2ea (2)
0x002e0| 00 00 | .. | reserved: 0 0x2ea-0x2ec (2)
@ -233,7 +233,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00340| 00 00| ..| length: 0 0x34e-0x350 (2)
0x00350|74 00 00 00 |t... | footer_length: 116 0x350-0x354 (4)
| | | [7]{}: block 0x354-0x3cc (120)
0x00350| 01 00 00 00 | .... | type: "interface_description" (0x1) (Interface Description Block) 0x354-0x358 (4)
0x00350| 01 00 00 00 | .... | type: "interface_description" (0x1) 0x354-0x358 (4)
0x00350| 78 00 00 00 | x... | length: 120 0x358-0x35c (4)
0x00350| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x35c-0x35e (2)
0x00350| 00 00| ..| reserved: 0 0x35e-0x360 (2)
@ -267,7 +267,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x003c0| 00 00 | .. | length: 0 0x3c6-0x3c8 (2)
0x003c0| 78 00 00 00 | x... | footer_length: 120 0x3c8-0x3cc (4)
| | | [8]{}: block 0x3cc-0x440 (116)
0x003c0| 01 00 00 00| ....| type: "interface_description" (0x1) (Interface Description Block) 0x3cc-0x3d0 (4)
0x003c0| 01 00 00 00| ....| type: "interface_description" (0x1) 0x3cc-0x3d0 (4)
0x003d0|74 00 00 00 |t... | length: 116 0x3d0-0x3d4 (4)
0x003d0| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x3d4-0x3d6 (2)
0x003d0| 00 00 | .. | reserved: 0 0x3d6-0x3d8 (2)
@ -301,7 +301,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00430| 00 00 | .. | length: 0 0x43a-0x43c (2)
0x00430| 74 00 00 00| t...| footer_length: 116 0x43c-0x440 (4)
| | | [9]{}: block 0x440-0x4b4 (116)
0x00440|01 00 00 00 |.... | type: "interface_description" (0x1) (Interface Description Block) 0x440-0x444 (4)
0x00440|01 00 00 00 |.... | type: "interface_description" (0x1) 0x440-0x444 (4)
0x00440| 74 00 00 00 | t... | length: 116 0x444-0x448 (4)
0x00440| 0c 00 | .. | link_type: 12 0x448-0x44a (2)
0x00440| 00 00 | .. | reserved: 0 0x44a-0x44c (2)
@ -335,7 +335,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x004a0| 00 00| ..| length: 0 0x4ae-0x4b0 (2)
0x004b0|74 00 00 00 |t... | footer_length: 116 0x4b0-0x4b4 (4)
| | | [10]{}: block 0x4b4-0x52c (120)
0x004b0| 01 00 00 00 | .... | type: "interface_description" (0x1) (Interface Description Block) 0x4b4-0x4b8 (4)
0x004b0| 01 00 00 00 | .... | type: "interface_description" (0x1) 0x4b4-0x4b8 (4)
0x004b0| 78 00 00 00 | x... | length: 120 0x4b8-0x4bc (4)
0x004b0| 01 00 | .. | link_type: "ethernet" (1) (IEEE 802.3 Ethernet) 0x4bc-0x4be (2)
0x004b0| 00 00| ..| reserved: 0 0x4be-0x4c0 (2)
@ -369,7 +369,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00520| 00 00 | .. | length: 0 0x526-0x528 (2)
0x00520| 78 00 00 00 | x... | footer_length: 120 0x528-0x52c (4)
| | | [11]{}: block 0x52c-0x5a0 (116)
0x00520| 01 00 00 00| ....| type: "interface_description" (0x1) (Interface Description Block) 0x52c-0x530 (4)
0x00520| 01 00 00 00| ....| type: "interface_description" (0x1) 0x52c-0x530 (4)
0x00530|74 00 00 00 |t... | length: 116 0x530-0x534 (4)
0x00530| 00 00 | .. | link_type: "null" (0) (BSD loopback encapsulation) 0x534-0x536 (2)
0x00530| 00 00 | .. | reserved: 0 0x536-0x538 (2)
@ -403,7 +403,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x00590| 00 00 | .. | length: 0 0x59a-0x59c (2)
0x00590| 74 00 00 00| t...| footer_length: 116 0x59c-0x5a0 (4)
| | | [12]{}: block 0x5a0-0x674 (212)
0x005a0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x5a0-0x5a4 (4)
0x005a0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x5a0-0x5a4 (4)
0x005a0| d4 00 00 00 | .... | length: 212 0x5a4-0x5a8 (4)
0x005a0| 00 00 00 00 | .... | interface_id: 0 0x5a8-0x5ac (4)
0x005a0| 72 1d 05 00| r...| timestamp_high: 335218 0x5ac-0x5b0 (4)
@ -443,7 +443,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x670-0x670 (0)
0x00670|d4 00 00 00 |.... | footer_length: 212 0x670-0x674 (4)
| | | [13]{}: block 0x674-0x748 (212)
0x00670| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x674-0x678 (4)
0x00670| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x674-0x678 (4)
0x00670| d4 00 00 00 | .... | length: 212 0x678-0x67c (4)
0x00670| 00 00 00 00| ....| interface_id: 0 0x67c-0x680 (4)
0x00680|72 1d 05 00 |r... | timestamp_high: 335218 0x680-0x684 (4)
@ -483,7 +483,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x744-0x744 (0)
0x00740| d4 00 00 00 | .... | footer_length: 212 0x744-0x748 (4)
| | | [14]{}: block 0x748-0x810 (200)
0x00740| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x748-0x74c (4)
0x00740| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x748-0x74c (4)
0x00740| c8 00 00 00| ....| length: 200 0x74c-0x750 (4)
0x00750|0a 00 00 00 |.... | interface_id: 10 0x750-0x754 (4)
0x00750| 72 1d 05 00 | r... | timestamp_high: 335218 0x754-0x758 (4)
@ -520,7 +520,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x80c-0x80c (0)
0x00800| c8 00 00 00| ....| footer_length: 200 0x80c-0x810 (4)
| | | [15]{}: block 0x810-0x8d8 (200)
0x00810|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x810-0x814 (4)
0x00810|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x810-0x814 (4)
0x00810| c8 00 00 00 | .... | length: 200 0x814-0x818 (4)
0x00810| 0a 00 00 00 | .... | interface_id: 10 0x818-0x81c (4)
0x00810| 72 1d 05 00| r...| timestamp_high: 335218 0x81c-0x820 (4)
@ -557,7 +557,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x8d4-0x8d4 (0)
0x008d0| c8 00 00 00 | .... | footer_length: 200 0x8d4-0x8d8 (4)
| | | [16]{}: block 0x8d8-0x950 (120)
0x008d0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x8d8-0x8dc (4)
0x008d0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x8d8-0x8dc (4)
0x008d0| 78 00 00 00| x...| length: 120 0x8dc-0x8e0 (4)
0x008e0|00 00 00 00 |.... | interface_id: 0 0x8e0-0x8e4 (4)
0x008e0| 72 1d 05 00 | r... | timestamp_high: 335218 0x8e4-0x8e8 (4)
@ -639,7 +639,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x94c-0x94c (0)
0x00940| 78 00 00 00| x...| footer_length: 120 0x94c-0x950 (4)
| | | [17]{}: block 0x950-0x9cc (124)
0x00950|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x950-0x954 (4)
0x00950|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x950-0x954 (4)
0x00950| 7c 00 00 00 | |... | length: 124 0x954-0x958 (4)
0x00950| 00 00 00 00 | .... | interface_id: 0 0x958-0x95c (4)
0x00950| 72 1d 05 00| r...| timestamp_high: 335218 0x95c-0x960 (4)
@ -679,7 +679,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x9c8-0x9c8 (0)
0x009c0| 7c 00 00 00 | |... | footer_length: 124 0x9c8-0x9cc (4)
| | | [18]{}: block 0x9cc-0xa5c (144)
0x009c0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x9cc-0x9d0 (4)
0x009c0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x9cc-0x9d0 (4)
0x009d0|90 00 00 00 |.... | length: 144 0x9d0-0x9d4 (4)
0x009d0| 00 00 00 00 | .... | interface_id: 0 0x9d4-0x9d8 (4)
0x009d0| 72 1d 05 00 | r... | timestamp_high: 335218 0x9d8-0x9dc (4)
@ -804,7 +804,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xa58-0xa58 (0)
0x00a50| 90 00 00 00 | .... | footer_length: 144 0xa58-0xa5c (4)
| | | [19]{}: block 0xa5c-0xad4 (120)
0x00a50| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xa5c-0xa60 (4)
0x00a50| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0xa5c-0xa60 (4)
0x00a60|78 00 00 00 |x... | length: 120 0xa60-0xa64 (4)
0x00a60| 00 00 00 00 | .... | interface_id: 0 0xa64-0xa68 (4)
0x00a60| 72 1d 05 00 | r... | timestamp_high: 335218 0xa68-0xa6c (4)
@ -888,7 +888,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xad0-0xad0 (0)
0x00ad0|78 00 00 00 |x... | footer_length: 120 0xad0-0xad4 (4)
| | | [20]{}: block 0xad4-0xb8c (184)
0x00ad0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xad4-0xad8 (4)
0x00ad0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0xad4-0xad8 (4)
0x00ad0| b8 00 00 00 | .... | length: 184 0xad8-0xadc (4)
0x00ad0| 00 00 00 00| ....| interface_id: 0 0xadc-0xae0 (4)
0x00ae0|72 1d 05 00 |r... | timestamp_high: 335218 0xae0-0xae4 (4)
@ -1036,7 +1036,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xb88-0xb88 (0)
0x00b80| b8 00 00 00 | .... | footer_length: 184 0xb88-0xb8c (4)
| | | [21]{}: block 0xb8c-0xc04 (120)
0x00b80| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xb8c-0xb90 (4)
0x00b80| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0xb8c-0xb90 (4)
0x00b90|78 00 00 00 |x... | length: 120 0xb90-0xb94 (4)
0x00b90| 00 00 00 00 | .... | interface_id: 0 0xb94-0xb98 (4)
0x00b90| 72 1d 05 00 | r... | timestamp_high: 335218 0xb98-0xb9c (4)
@ -1120,7 +1120,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xc00-0xc00 (0)
0x00c00|78 00 00 00 |x... | footer_length: 120 0xc00-0xc04 (4)
| | | [22]{}: block 0xc04-0xc80 (124)
0x00c00| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xc04-0xc08 (4)
0x00c00| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0xc04-0xc08 (4)
0x00c00| 7c 00 00 00 | |... | length: 124 0xc08-0xc0c (4)
0x00c00| 00 00 00 00| ....| interface_id: 0 0xc0c-0xc10 (4)
0x00c10|72 1d 05 00 |r... | timestamp_high: 335218 0xc10-0xc14 (4)
@ -1160,7 +1160,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xc7c-0xc7c (0)
0x00c70| 7c 00 00 00| |...| footer_length: 124 0xc7c-0xc80 (4)
| | | [23]{}: block 0xc80-0xcf8 (120)
0x00c80|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xc80-0xc84 (4)
0x00c80|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0xc80-0xc84 (4)
0x00c80| 78 00 00 00 | x... | length: 120 0xc84-0xc88 (4)
0x00c80| 00 00 00 00 | .... | interface_id: 0 0xc88-0xc8c (4)
0x00c80| 72 1d 05 00| r...| timestamp_high: 335218 0xc8c-0xc90 (4)
@ -1242,7 +1242,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xcf4-0xcf4 (0)
0x00cf0| 78 00 00 00 | x... | footer_length: 120 0xcf4-0xcf8 (4)
| | | [24]{}: block 0xcf8-0xd6c (116)
0x00cf0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xcf8-0xcfc (4)
0x00cf0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0xcf8-0xcfc (4)
0x00cf0| 74 00 00 00| t...| length: 116 0xcfc-0xd00 (4)
0x00d00|00 00 00 00 |.... | interface_id: 0 0xd00-0xd04 (4)
0x00d00| 72 1d 05 00 | r... | timestamp_high: 335218 0xd04-0xd08 (4)
@ -1282,7 +1282,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xd68-0xd68 (0)
0x00d60| 74 00 00 00 | t... | footer_length: 116 0xd68-0xd6c (4)
| | | [25]{}: block 0xd6c-0xde4 (120)
0x00d60| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xd6c-0xd70 (4)
0x00d60| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0xd6c-0xd70 (4)
0x00d70|78 00 00 00 |x... | length: 120 0xd70-0xd74 (4)
0x00d70| 00 00 00 00 | .... | interface_id: 0 0xd74-0xd78 (4)
0x00d70| 72 1d 05 00 | r... | timestamp_high: 335218 0xd78-0xd7c (4)
@ -1366,7 +1366,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xde0-0xde0 (0)
0x00de0|78 00 00 00 |x... | footer_length: 120 0xde0-0xde4 (4)
| | | [26]{}: block 0xde4-0xe58 (116)
0x00de0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xde4-0xde8 (4)
0x00de0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0xde4-0xde8 (4)
0x00de0| 74 00 00 00 | t... | length: 116 0xde8-0xdec (4)
0x00de0| 00 00 00 00| ....| interface_id: 0 0xdec-0xdf0 (4)
0x00df0|72 1d 05 00 |r... | timestamp_high: 335218 0xdf0-0xdf4 (4)
@ -1406,7 +1406,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xe54-0xe54 (0)
0x00e50| 74 00 00 00 | t... | footer_length: 116 0xe54-0xe58 (4)
| | | [27]{}: block 0xe58-0xed0 (120)
0x00e50| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xe58-0xe5c (4)
0x00e50| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0xe58-0xe5c (4)
0x00e50| 78 00 00 00| x...| length: 120 0xe5c-0xe60 (4)
0x00e60|00 00 00 00 |.... | interface_id: 0 0xe60-0xe64 (4)
0x00e60| 72 1d 05 00 | r... | timestamp_high: 335218 0xe64-0xe68 (4)
@ -1446,7 +1446,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xecc-0xecc (0)
0x00ec0| 78 00 00 00| x...| footer_length: 120 0xecc-0xed0 (4)
| | | [28]{}: block 0xed0-0xf88 (184)
0x00ed0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xed0-0xed4 (4)
0x00ed0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0xed0-0xed4 (4)
0x00ed0| b8 00 00 00 | .... | length: 184 0xed4-0xed8 (4)
0x00ed0| 00 00 00 00 | .... | interface_id: 0 0xed8-0xedc (4)
0x00ed0| 72 1d 05 00| r...| timestamp_high: 335218 0xedc-0xee0 (4)
@ -1621,7 +1621,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xf84-0xf84 (0)
0x00f80| b8 00 00 00 | .... | footer_length: 184 0xf84-0xf88 (4)
| | | [29]{}: block 0xf88-0xffc (116)
0x00f80| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xf88-0xf8c (4)
0x00f80| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0xf88-0xf8c (4)
0x00f80| 74 00 00 00| t...| length: 116 0xf8c-0xf90 (4)
0x00f90|00 00 00 00 |.... | interface_id: 0 0xf90-0xf94 (4)
0x00f90| 72 1d 05 00 | r... | timestamp_high: 335218 0xf94-0xf98 (4)
@ -1705,7 +1705,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0xff8-0xff8 (0)
0x00ff0| 74 00 00 00 | t... | footer_length: 116 0xff8-0xffc (4)
| | | [30]{}: block 0xffc-0x1088 (140)
0x00ff0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0xffc-0x1000 (4)
0x00ff0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0xffc-0x1000 (4)
0x01000|8c 00 00 00 |.... | length: 140 0x1000-0x1004 (4)
0x01000| 00 00 00 00 | .... | interface_id: 0 0x1004-0x1008 (4)
0x01000| 72 1d 05 00 | r... | timestamp_high: 335218 0x1008-0x100c (4)
@ -1827,7 +1827,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x1084-0x1084 (0)
0x01080| 8c 00 00 00 | .... | footer_length: 140 0x1084-0x1088 (4)
| | | [31]{}: block 0x1088-0x1100 (120)
0x01080| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1088-0x108c (4)
0x01080| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x1088-0x108c (4)
0x01080| 78 00 00 00| x...| length: 120 0x108c-0x1090 (4)
0x01090|00 00 00 00 |.... | interface_id: 0 0x1090-0x1094 (4)
0x01090| 72 1d 05 00 | r... | timestamp_high: 335218 0x1094-0x1098 (4)
@ -1911,7 +1911,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x10fc-0x10fc (0)
0x010f0| 78 00 00 00| x...| footer_length: 120 0x10fc-0x1100 (4)
| | | [32]{}: block 0x1100-0x119c (156)
0x01100|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1100-0x1104 (4)
0x01100|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x1100-0x1104 (4)
0x01100| 9c 00 00 00 | .... | length: 156 0x1104-0x1108 (4)
0x01100| 00 00 00 00 | .... | interface_id: 0 0x1108-0x110c (4)
0x01100| 72 1d 05 00| r...| timestamp_high: 335218 0x110c-0x1110 (4)
@ -2040,7 +2040,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x1198-0x1198 (0)
0x01190| 9c 00 00 00 | .... | footer_length: 156 0x1198-0x119c (4)
| | | [33]{}: block 0x119c-0x120c (112)
0x01190| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x119c-0x11a0 (4)
0x01190| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x119c-0x11a0 (4)
0x011a0|70 00 00 00 |p... | length: 112 0x11a0-0x11a4 (4)
0x011a0| 00 00 00 00 | .... | interface_id: 0 0x11a4-0x11a8 (4)
0x011a0| 72 1d 05 00 | r... | timestamp_high: 335218 0x11a8-0x11ac (4)
@ -2115,7 +2115,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x1208-0x1208 (0)
0x01200| 70 00 00 00 | p... | footer_length: 112 0x1208-0x120c (4)
| | | [34]{}: block 0x120c-0x1344 (312)
0x01200| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x120c-0x1210 (4)
0x01200| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x120c-0x1210 (4)
0x01210|38 01 00 00 |8... | length: 312 0x1210-0x1214 (4)
0x01210| 00 00 00 00 | .... | interface_id: 0 0x1214-0x1218 (4)
0x01210| 72 1d 05 00 | r... | timestamp_high: 335218 0x1218-0x121c (4)
@ -2553,7 +2553,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x1340-0x1340 (0)
0x01340|38 01 00 00 |8... | footer_length: 312 0x1340-0x1344 (4)
| | | [35]{}: block 0x1344-0x13b4 (112)
0x01340| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1344-0x1348 (4)
0x01340| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x1344-0x1348 (4)
0x01340| 70 00 00 00 | p... | length: 112 0x1348-0x134c (4)
0x01340| 00 00 00 00| ....| interface_id: 0 0x134c-0x1350 (4)
0x01350|72 1d 05 00 |r... | timestamp_high: 335218 0x1350-0x1354 (4)
@ -2632,7 +2632,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x13b0-0x13b0 (0)
0x013b0|70 00 00 00 |p... | footer_length: 112 0x13b0-0x13b4 (4)
| | | [36]{}: block 0x13b4-0x1420 (108)
0x013b0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x13b4-0x13b8 (4)
0x013b0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x13b4-0x13b8 (4)
0x013b0| 6c 00 00 00 | l... | length: 108 0x13b8-0x13bc (4)
0x013b0| 00 00 00 00| ....| interface_id: 0 0x13bc-0x13c0 (4)
0x013c0|72 1d 05 00 |r... | timestamp_high: 335218 0x13c0-0x13c4 (4)
@ -2704,7 +2704,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x141c-0x141c (0)
0x01410| 6c 00 00 00| l...| footer_length: 108 0x141c-0x1420 (4)
| | | [37]{}: block 0x1420-0x1484 (100)
0x01420|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1420-0x1424 (4)
0x01420|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x1420-0x1424 (4)
0x01420| 64 00 00 00 | d... | length: 100 0x1424-0x1428 (4)
0x01420| 00 00 00 00 | .... | interface_id: 0 0x1428-0x142c (4)
0x01420| 72 1d 05 00| r...| timestamp_high: 335218 0x142c-0x1430 (4)
@ -2766,7 +2766,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x1480-0x1480 (0)
0x01480|64 00 00 00 |d... | footer_length: 100 0x1480-0x1484 (4)
| | | [38]{}: block 0x1484-0x16ec (616)
0x01480| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1484-0x1488 (4)
0x01480| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x1484-0x1488 (4)
0x01480| 68 02 00 00 | h... | length: 616 0x1488-0x148c (4)
0x01480| 00 00 00 00| ....| interface_id: 0 0x148c-0x1490 (4)
0x01490|72 1d 05 00 |r... | timestamp_high: 335218 0x1490-0x1494 (4)
@ -2831,7 +2831,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x16e8-0x16e8 (0)
0x016e0| 68 02 00 00 | h... | footer_length: 616 0x16e8-0x16ec (4)
| | | [39]{}: block 0x16ec-0x1750 (100)
0x016e0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x16ec-0x16f0 (4)
0x016e0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x16ec-0x16f0 (4)
0x016f0|64 00 00 00 |d... | length: 100 0x16f0-0x16f4 (4)
0x016f0| 00 00 00 00 | .... | interface_id: 0 0x16f4-0x16f8 (4)
0x016f0| 72 1d 05 00 | r... | timestamp_high: 335218 0x16f8-0x16fc (4)
@ -2894,7 +2894,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x174c-0x174c (0)
0x01740| 64 00 00 00| d...| footer_length: 100 0x174c-0x1750 (4)
| | | [40]{}: block 0x1750-0x1844 (244)
0x01750|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1750-0x1754 (4)
0x01750|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x1750-0x1754 (4)
0x01750| f4 00 00 00 | .... | length: 244 0x1754-0x1758 (4)
0x01750| 00 00 00 00 | .... | interface_id: 0 0x1758-0x175c (4)
0x01750| 72 1d 05 00| r...| timestamp_high: 335218 0x175c-0x1760 (4)
@ -2958,7 +2958,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x1840-0x1840 (0)
0x01840|f4 00 00 00 |.... | footer_length: 244 0x1840-0x1844 (4)
| | | [41]{}: block 0x1844-0x18a8 (100)
0x01840| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1844-0x1848 (4)
0x01840| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x1844-0x1848 (4)
0x01840| 64 00 00 00 | d... | length: 100 0x1848-0x184c (4)
0x01840| 00 00 00 00| ....| interface_id: 0 0x184c-0x1850 (4)
0x01850|72 1d 05 00 |r... | timestamp_high: 335218 0x1850-0x1854 (4)
@ -3021,7 +3021,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x18a4-0x18a4 (0)
0x018a0| 64 00 00 00 | d... | footer_length: 100 0x18a4-0x18a8 (4)
| | | [42]{}: block 0x18a8-0x1940 (152)
0x018a0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x18a8-0x18ac (4)
0x018a0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x18a8-0x18ac (4)
0x018a0| 98 00 00 00| ....| length: 152 0x18ac-0x18b0 (4)
0x018b0|00 00 00 00 |.... | interface_id: 0 0x18b0-0x18b4 (4)
0x018b0| 72 1d 05 00 | r... | timestamp_high: 335218 0x18b4-0x18b8 (4)
@ -3087,7 +3087,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x193c-0x193c (0)
0x01930| 98 00 00 00| ....| footer_length: 152 0x193c-0x1940 (4)
| | | [43]{}: block 0x1940-0x19d8 (152)
0x01940|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1940-0x1944 (4)
0x01940|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x1940-0x1944 (4)
0x01940| 98 00 00 00 | .... | length: 152 0x1944-0x1948 (4)
0x01940| 00 00 00 00 | .... | interface_id: 0 0x1948-0x194c (4)
0x01940| 72 1d 05 00| r...| timestamp_high: 335218 0x194c-0x1950 (4)
@ -3151,7 +3151,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x19d4-0x19d4 (0)
0x019d0| 98 00 00 00 | .... | footer_length: 152 0x19d4-0x19d8 (4)
| | | [44]{}: block 0x19d8-0x1a6c (148)
0x019d0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x19d8-0x19dc (4)
0x019d0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x19d8-0x19dc (4)
0x019d0| 94 00 00 00| ....| length: 148 0x19dc-0x19e0 (4)
0x019e0|00 00 00 00 |.... | interface_id: 0 0x19e0-0x19e4 (4)
0x019e0| 72 1d 05 00 | r... | timestamp_high: 335218 0x19e4-0x19e8 (4)
@ -3217,7 +3217,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x1a68-0x1a68 (0)
0x01a60| 94 00 00 00 | .... | footer_length: 148 0x1a68-0x1a6c (4)
| | | [45]{}: block 0x1a6c-0x1af8 (140)
0x01a60| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1a6c-0x1a70 (4)
0x01a60| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x1a6c-0x1a70 (4)
0x01a70|8c 00 00 00 |.... | length: 140 0x1a70-0x1a74 (4)
0x01a70| 00 00 00 00 | .... | interface_id: 0 0x1a74-0x1a78 (4)
0x01a70| 72 1d 05 00 | r... | timestamp_high: 335218 0x1a78-0x1a7c (4)
@ -3282,7 +3282,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x1af4-0x1af4 (0)
0x01af0| 8c 00 00 00 | .... | footer_length: 140 0x1af4-0x1af8 (4)
| | | [46]{}: block 0x1af8-0x1ff0 (1272)
0x01af0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1af8-0x1afc (4)
0x01af0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x1af8-0x1afc (4)
0x01af0| f8 04 00 00| ....| length: 1272 0x1afc-0x1b00 (4)
0x01b00|00 00 00 00 |.... | interface_id: 0 0x1b00-0x1b04 (4)
0x01b00| 72 1d 05 00 | r... | timestamp_high: 335218 0x1b04-0x1b08 (4)
@ -3348,7 +3348,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x1fec-0x1fec (0)
0x01fe0| f8 04 00 00| ....| footer_length: 1272 0x1fec-0x1ff0 (4)
| | | [47]{}: block 0x1ff0-0x2054 (100)
0x01ff0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x1ff0-0x1ff4 (4)
0x01ff0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x1ff0-0x1ff4 (4)
0x01ff0| 64 00 00 00 | d... | length: 100 0x1ff4-0x1ff8 (4)
0x01ff0| 00 00 00 00 | .... | interface_id: 0 0x1ff8-0x1ffc (4)
0x01ff0| 72 1d 05 00| r...| timestamp_high: 335218 0x1ffc-0x2000 (4)
@ -3410,7 +3410,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x2050-0x2050 (0)
0x02050|64 00 00 00 |d... | footer_length: 100 0x2050-0x2054 (4)
| | | [48]{}: block 0x2054-0x20f0 (156)
0x02050| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2054-0x2058 (4)
0x02050| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x2054-0x2058 (4)
0x02050| 9c 00 00 00 | .... | length: 156 0x2058-0x205c (4)
0x02050| 00 00 00 00| ....| interface_id: 0 0x205c-0x2060 (4)
0x02060|72 1d 05 00 |r... | timestamp_high: 335218 0x2060-0x2064 (4)
@ -3475,7 +3475,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x20ec-0x20ec (0)
0x020e0| 9c 00 00 00| ....| footer_length: 156 0x20ec-0x20f0 (4)
| | | [49]{}: block 0x20f0-0x217c (140)
0x020f0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x20f0-0x20f4 (4)
0x020f0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x20f0-0x20f4 (4)
0x020f0| 8c 00 00 00 | .... | length: 140 0x20f4-0x20f8 (4)
0x020f0| 00 00 00 00 | .... | interface_id: 0 0x20f8-0x20fc (4)
0x020f0| 72 1d 05 00| r...| timestamp_high: 335218 0x20fc-0x2100 (4)
@ -3539,7 +3539,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x2178-0x2178 (0)
0x02170| 8c 00 00 00 | .... | footer_length: 140 0x2178-0x217c (4)
| | | [50]{}: block 0x217c-0x2204 (136)
0x02170| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x217c-0x2180 (4)
0x02170| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x217c-0x2180 (4)
0x02180|88 00 00 00 |.... | length: 136 0x2180-0x2184 (4)
0x02180| 00 00 00 00 | .... | interface_id: 0 0x2184-0x2188 (4)
0x02180| 72 1d 05 00 | r... | timestamp_high: 335218 0x2188-0x218c (4)
@ -3604,7 +3604,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x2200-0x2200 (0)
0x02200|88 00 00 00 |.... | footer_length: 136 0x2200-0x2204 (4)
| | | [51]{}: block 0x2204-0x2268 (100)
0x02200| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2204-0x2208 (4)
0x02200| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x2204-0x2208 (4)
0x02200| 64 00 00 00 | d... | length: 100 0x2208-0x220c (4)
0x02200| 00 00 00 00| ....| interface_id: 0 0x220c-0x2210 (4)
0x02210|72 1d 05 00 |r... | timestamp_high: 335218 0x2210-0x2214 (4)
@ -3667,7 +3667,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x2264-0x2264 (0)
0x02260| 64 00 00 00 | d... | footer_length: 100 0x2264-0x2268 (4)
| | | [52]{}: block 0x2268-0x22cc (100)
0x02260| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2268-0x226c (4)
0x02260| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x2268-0x226c (4)
0x02260| 64 00 00 00| d...| length: 100 0x226c-0x2270 (4)
0x02270|00 00 00 00 |.... | interface_id: 0 0x2270-0x2274 (4)
0x02270| 72 1d 05 00 | r... | timestamp_high: 335218 0x2274-0x2278 (4)
@ -3731,7 +3731,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x22c8-0x22c8 (0)
0x022c0| 64 00 00 00 | d... | footer_length: 100 0x22c8-0x22cc (4)
| | | [53]{}: block 0x22cc-0x2330 (100)
0x022c0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x22cc-0x22d0 (4)
0x022c0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x22cc-0x22d0 (4)
0x022d0|64 00 00 00 |d... | length: 100 0x22d0-0x22d4 (4)
0x022d0| 00 00 00 00 | .... | interface_id: 0 0x22d4-0x22d8 (4)
0x022d0| 72 1d 05 00 | r... | timestamp_high: 335218 0x22d8-0x22dc (4)
@ -3794,7 +3794,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x232c-0x232c (0)
0x02320| 64 00 00 00| d...| footer_length: 100 0x232c-0x2330 (4)
| | | [54]{}: block 0x2330-0x23b8 (136)
0x02330|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2330-0x2334 (4)
0x02330|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x2330-0x2334 (4)
0x02330| 88 00 00 00 | .... | length: 136 0x2334-0x2338 (4)
0x02330| 00 00 00 00 | .... | interface_id: 0 0x2338-0x233c (4)
0x02330| 72 1d 05 00| r...| timestamp_high: 335218 0x233c-0x2340 (4)
@ -3858,7 +3858,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x23b4-0x23b4 (0)
0x023b0| 88 00 00 00 | .... | footer_length: 136 0x23b4-0x23b8 (4)
| | | [55]{}: block 0x23b8-0x2608 (592)
0x023b0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x23b8-0x23bc (4)
0x023b0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x23b8-0x23bc (4)
0x023b0| 50 02 00 00| P...| length: 592 0x23bc-0x23c0 (4)
0x023c0|00 00 00 00 |.... | interface_id: 0 0x23c0-0x23c4 (4)
0x023c0| 72 1d 05 00 | r... | timestamp_high: 335218 0x23c4-0x23c8 (4)
@ -3924,7 +3924,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x2604-0x2604 (0)
0x02600| 50 02 00 00 | P... | footer_length: 592 0x2604-0x2608 (4)
| | | [56]{}: block 0x2608-0x2690 (136)
0x02600| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2608-0x260c (4)
0x02600| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x2608-0x260c (4)
0x02600| 88 00 00 00| ....| length: 136 0x260c-0x2610 (4)
0x02610|00 00 00 00 |.... | interface_id: 0 0x2610-0x2614 (4)
0x02610| 72 1d 05 00 | r... | timestamp_high: 335218 0x2614-0x2618 (4)
@ -3990,7 +3990,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x268c-0x268c (0)
0x02680| 88 00 00 00| ....| footer_length: 136 0x268c-0x2690 (4)
| | | [57]{}: block 0x2690-0x2720 (144)
0x02690|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2690-0x2694 (4)
0x02690|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x2690-0x2694 (4)
0x02690| 90 00 00 00 | .... | length: 144 0x2694-0x2698 (4)
0x02690| 00 00 00 00 | .... | interface_id: 0 0x2698-0x269c (4)
0x02690| 72 1d 05 00| r...| timestamp_high: 335218 0x269c-0x26a0 (4)
@ -4054,7 +4054,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x271c-0x271c (0)
0x02710| 90 00 00 00| ....| footer_length: 144 0x271c-0x2720 (4)
| | | [58]{}: block 0x2720-0x2784 (100)
0x02720|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2720-0x2724 (4)
0x02720|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x2720-0x2724 (4)
0x02720| 64 00 00 00 | d... | length: 100 0x2724-0x2728 (4)
0x02720| 00 00 00 00 | .... | interface_id: 0 0x2728-0x272c (4)
0x02720| 72 1d 05 00| r...| timestamp_high: 335218 0x272c-0x2730 (4)
@ -4116,7 +4116,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x2780-0x2780 (0)
0x02780|64 00 00 00 |d... | footer_length: 100 0x2780-0x2784 (4)
| | | [59]{}: block 0x2784-0x27e8 (100)
0x02780| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2784-0x2788 (4)
0x02780| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x2784-0x2788 (4)
0x02780| 64 00 00 00 | d... | length: 100 0x2788-0x278c (4)
0x02780| 00 00 00 00| ....| interface_id: 0 0x278c-0x2790 (4)
0x02790|72 1d 05 00 |r... | timestamp_high: 335218 0x2790-0x2794 (4)
@ -4179,7 +4179,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x27e4-0x27e4 (0)
0x027e0| 64 00 00 00 | d... | footer_length: 100 0x27e4-0x27e8 (4)
| | | [60]{}: block 0x27e8-0x284c (100)
0x027e0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x27e8-0x27ec (4)
0x027e0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x27e8-0x27ec (4)
0x027e0| 64 00 00 00| d...| length: 100 0x27ec-0x27f0 (4)
0x027f0|00 00 00 00 |.... | interface_id: 0 0x27f0-0x27f4 (4)
0x027f0| 72 1d 05 00 | r... | timestamp_high: 335218 0x27f4-0x27f8 (4)
@ -4243,7 +4243,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x2848-0x2848 (0)
0x02840| 64 00 00 00 | d... | footer_length: 100 0x2848-0x284c (4)
| | | [61]{}: block 0x284c-0x28dc (144)
0x02840| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x284c-0x2850 (4)
0x02840| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x284c-0x2850 (4)
0x02850|90 00 00 00 |.... | length: 144 0x2850-0x2854 (4)
0x02850| 00 00 00 00 | .... | interface_id: 0 0x2854-0x2858 (4)
0x02850| 72 1d 05 00 | r... | timestamp_high: 335218 0x2858-0x285c (4)
@ -4308,7 +4308,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x28d8-0x28d8 (0)
0x028d0| 90 00 00 00 | .... | footer_length: 144 0x28d8-0x28dc (4)
| | | [62]{}: block 0x28dc-0x2e6c (1424)
0x028d0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x28dc-0x28e0 (4)
0x028d0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x28dc-0x28e0 (4)
0x028e0|90 05 00 00 |.... | length: 1424 0x28e0-0x28e4 (4)
0x028e0| 00 00 00 00 | .... | interface_id: 0 0x28e4-0x28e8 (4)
0x028e0| 72 1d 05 00 | r... | timestamp_high: 335218 0x28e8-0x28ec (4)
@ -4348,7 +4348,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x2e68-0x2e68 (0)
0x02e60| 90 05 00 00 | .... | footer_length: 1424 0x2e68-0x2e6c (4)
| | | [63]{}: block 0x2e6c-0x2edc (112)
0x02e60| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2e6c-0x2e70 (4)
0x02e60| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x2e6c-0x2e70 (4)
0x02e70|70 00 00 00 |p... | length: 112 0x2e70-0x2e74 (4)
0x02e70| 00 00 00 00 | .... | interface_id: 0 0x2e74-0x2e78 (4)
0x02e70| 72 1d 05 00 | r... | timestamp_high: 335218 0x2e78-0x2e7c (4)
@ -4429,7 +4429,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x2ed8-0x2ed8 (0)
0x02ed0| 70 00 00 00 | p... | footer_length: 112 0x2ed8-0x2edc (4)
| | | [64]{}: block 0x2edc-0x2f40 (100)
0x02ed0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2edc-0x2ee0 (4)
0x02ed0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x2edc-0x2ee0 (4)
0x02ee0|64 00 00 00 |d... | length: 100 0x2ee0-0x2ee4 (4)
0x02ee0| 00 00 00 00 | .... | interface_id: 0 0x2ee4-0x2ee8 (4)
0x02ee0| 72 1d 05 00 | r... | timestamp_high: 335218 0x2ee8-0x2eec (4)
@ -4492,7 +4492,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x2f3c-0x2f3c (0)
0x02f30| 64 00 00 00| d...| footer_length: 100 0x2f3c-0x2f40 (4)
| | | [65]{}: block 0x2f40-0x2fac (108)
0x02f40|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2f40-0x2f44 (4)
0x02f40|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x2f40-0x2f44 (4)
0x02f40| 6c 00 00 00 | l... | length: 108 0x2f44-0x2f48 (4)
0x02f40| 00 00 00 00 | .... | interface_id: 0 0x2f48-0x2f4c (4)
0x02f40| 72 1d 05 00| r...| timestamp_high: 335218 0x2f4c-0x2f50 (4)
@ -4564,7 +4564,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x2fa8-0x2fa8 (0)
0x02fa0| 6c 00 00 00 | l... | footer_length: 108 0x2fa8-0x2fac (4)
| | | [66]{}: block 0x2fac-0x3010 (100)
0x02fa0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x2fac-0x2fb0 (4)
0x02fa0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x2fac-0x2fb0 (4)
0x02fb0|64 00 00 00 |d... | length: 100 0x2fb0-0x2fb4 (4)
0x02fb0| 00 00 00 00 | .... | interface_id: 0 0x2fb4-0x2fb8 (4)
0x02fb0| 72 1d 05 00 | r... | timestamp_high: 335218 0x2fb8-0x2fbc (4)
@ -4627,7 +4627,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x300c-0x300c (0)
0x03000| 64 00 00 00| d...| footer_length: 100 0x300c-0x3010 (4)
| | | [67]{}: block 0x3010-0x314c (316)
0x03010|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x3010-0x3014 (4)
0x03010|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x3010-0x3014 (4)
0x03010| 3c 01 00 00 | <... | length: 316 0x3014-0x3018 (4)
0x03010| 00 00 00 00 | .... | interface_id: 0 0x3018-0x301c (4)
0x03010| 72 1d 05 00| r...| timestamp_high: 335218 0x301c-0x3020 (4)
@ -4691,7 +4691,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x3148-0x3148 (0)
0x03140| 3c 01 00 00 | <... | footer_length: 316 0x3148-0x314c (4)
| | | [68]{}: block 0x314c-0x36dc (1424)
0x03140| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x314c-0x3150 (4)
0x03140| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x314c-0x3150 (4)
0x03150|90 05 00 00 |.... | length: 1424 0x3150-0x3154 (4)
0x03150| 00 00 00 00 | .... | interface_id: 0 0x3154-0x3158 (4)
0x03150| 72 1d 05 00 | r... | timestamp_high: 335218 0x3158-0x315c (4)
@ -4731,7 +4731,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x36d8-0x36d8 (0)
0x036d0| 90 05 00 00 | .... | footer_length: 1424 0x36d8-0x36dc (4)
| | | [69]{}: block 0x36dc-0x3740 (100)
0x036d0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x36dc-0x36e0 (4)
0x036d0| 06 00 00 00| ....| type: "enhanced_packet" (0x6) 0x36dc-0x36e0 (4)
0x036e0|64 00 00 00 |d... | length: 100 0x36e0-0x36e4 (4)
0x036e0| 00 00 00 00 | .... | interface_id: 0 0x36e4-0x36e8 (4)
0x036e0| 72 1d 05 00 | r... | timestamp_high: 335218 0x36e8-0x36ec (4)
@ -4770,7 +4770,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x373c-0x373c (0)
0x03730| 64 00 00 00| d...| footer_length: 100 0x373c-0x3740 (4)
| | | [70]{}: block 0x3740-0x3cd0 (1424)
0x03740|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x3740-0x3744 (4)
0x03740|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x3740-0x3744 (4)
0x03740| 90 05 00 00 | .... | length: 1424 0x3744-0x3748 (4)
0x03740| 00 00 00 00 | .... | interface_id: 0 0x3748-0x374c (4)
0x03740| 72 1d 05 00| r...| timestamp_high: 335218 0x374c-0x3750 (4)
@ -4810,7 +4810,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x3ccc-0x3ccc (0)
0x03cc0| 90 05 00 00| ....| footer_length: 1424 0x3ccc-0x3cd0 (4)
| | | [71]{}: block 0x3cd0-0x4260 (1424)
0x03cd0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x3cd0-0x3cd4 (4)
0x03cd0|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x3cd0-0x3cd4 (4)
0x03cd0| 90 05 00 00 | .... | length: 1424 0x3cd4-0x3cd8 (4)
0x03cd0| 00 00 00 00 | .... | interface_id: 0 0x3cd8-0x3cdc (4)
0x03cd0| 72 1d 05 00| r...| timestamp_high: 335218 0x3cdc-0x3ce0 (4)
@ -4850,7 +4850,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x425c-0x425c (0)
0x04250| 90 05 00 00| ....| footer_length: 1424 0x425c-0x4260 (4)
| | | [72]{}: block 0x4260-0x42d4 (116)
0x04260|06 00 00 00 |.... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x4260-0x4264 (4)
0x04260|06 00 00 00 |.... | type: "enhanced_packet" (0x6) 0x4260-0x4264 (4)
0x04260| 74 00 00 00 | t... | length: 116 0x4264-0x4268 (4)
0x04260| 00 00 00 00 | .... | interface_id: 0 0x4268-0x426c (4)
0x04260| 72 1d 05 00| r...| timestamp_high: 335218 0x426c-0x4270 (4)
@ -4890,7 +4890,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x42d0-0x42d0 (0)
0x042d0|74 00 00 00 |t... | footer_length: 116 0x42d0-0x42d4 (4)
| | | [73]{}: block 0x42d4-0x4864 (1424)
0x042d0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x42d4-0x42d8 (4)
0x042d0| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x42d4-0x42d8 (4)
0x042d0| 90 05 00 00 | .... | length: 1424 0x42d8-0x42dc (4)
0x042d0| 00 00 00 00| ....| interface_id: 0 0x42dc-0x42e0 (4)
0x042e0|72 1d 05 00 |r... | timestamp_high: 335218 0x42e0-0x42e4 (4)
@ -4930,7 +4930,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x4860-0x4860 (0)
0x04860|90 05 00 00 |.... | footer_length: 1424 0x4860-0x4864 (4)
| | | [74]{}: block 0x4864-0x4b58 (756)
0x04860| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x4864-0x4868 (4)
0x04860| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x4864-0x4868 (4)
0x04860| f4 02 00 00 | .... | length: 756 0x4868-0x486c (4)
0x04860| 00 00 00 00| ....| interface_id: 0 0x486c-0x4870 (4)
0x04870|72 1d 05 00 |r... | timestamp_high: 335218 0x4870-0x4874 (4)
@ -4970,7 +4970,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x4b54-0x4b54 (0)
0x04b50| f4 02 00 00 | .... | footer_length: 756 0x4b54-0x4b58 (4)
| | | [75]{}: block 0x4b58-0x4c3c (228)
0x04b50| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) (Enhanced Packet Block) 0x4b58-0x4b5c (4)
0x04b50| 06 00 00 00 | .... | type: "enhanced_packet" (0x6) 0x4b58-0x4b5c (4)
0x04b50| e4 00 00 00| ....| length: 228 0x4b5c-0x4b60 (4)
0x04b60|00 00 00 00 |.... | interface_id: 0 0x4b60-0x4b64 (4)
0x04b60| 72 1d 05 00 | r... | timestamp_high: 335218 0x4b64-0x4b68 (4)
@ -5010,7 +5010,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x4c38-0x4c38 (0)
0x04c30| e4 00 00 00 | .... | footer_length: 228 0x4c38-0x4c3c (4)
| | | [76]{}: block 0x4c3c-0x4d14 (216)
0x04c30| 04 00 00 00| ....| type: "name_resolution" (0x4) (Name Resolution Block) 0x4c3c-0x4c40 (4)
0x04c30| 04 00 00 00| ....| type: "name_resolution" (0x4) 0x4c3c-0x4c40 (4)
0x04c40|d8 00 00 00 |.... | length: 216 0x4c40-0x4c44 (4)
| | | records[0:8]: 0x4c44-0x4d10 (204)
| | | [0]{}: record 0x4c44-0x4c64 (32)
@ -5078,7 +5078,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
| | | options[0:0]: 0x4d10-0x4d10 (0)
0x04d10|d8 00 00 00 |.... | footer_length: 216 0x4d10-0x4d14 (4)
| | | [77]{}: block 0x4d14-0x4d80 (108)
0x04d10| 05 00 00 00 | .... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4d14-0x4d18 (4)
0x04d10| 05 00 00 00 | .... | type: "interface_statistics" (0x5) 0x4d14-0x4d18 (4)
0x04d10| 6c 00 00 00 | l... | length: 108 0x4d18-0x4d1c (4)
0x04d10| 00 00 00 00| ....| interface_id: 0 0x4d1c-0x4d20 (4)
0x04d20|72 1d 05 00 |r... | timestamp_high: 335218 0x4d20-0x4d24 (4)
@ -5118,7 +5118,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x04d70| 00 00 | .. | length: 0 0x4d7a-0x4d7c (2)
0x04d70| 6c 00 00 00| l...| footer_length: 108 0x4d7c-0x4d80 (4)
| | | [78]{}: block 0x4d80-0x4dec (108)
0x04d80|05 00 00 00 |.... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4d80-0x4d84 (4)
0x04d80|05 00 00 00 |.... | type: "interface_statistics" (0x5) 0x4d80-0x4d84 (4)
0x04d80| 6c 00 00 00 | l... | length: 108 0x4d84-0x4d88 (4)
0x04d80| 01 00 00 00 | .... | interface_id: 1 0x4d88-0x4d8c (4)
0x04d80| 72 1d 05 00| r...| timestamp_high: 335218 0x4d8c-0x4d90 (4)
@ -5158,7 +5158,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x04de0| 00 00 | .. | length: 0 0x4de6-0x4de8 (2)
0x04de0| 6c 00 00 00 | l... | footer_length: 108 0x4de8-0x4dec (4)
| | | [79]{}: block 0x4dec-0x4e58 (108)
0x04de0| 05 00 00 00| ....| type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4dec-0x4df0 (4)
0x04de0| 05 00 00 00| ....| type: "interface_statistics" (0x5) 0x4dec-0x4df0 (4)
0x04df0|6c 00 00 00 |l... | length: 108 0x4df0-0x4df4 (4)
0x04df0| 02 00 00 00 | .... | interface_id: 2 0x4df4-0x4df8 (4)
0x04df0| 72 1d 05 00 | r... | timestamp_high: 335218 0x4df8-0x4dfc (4)
@ -5197,7 +5197,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x04e50| 00 00 | .. | length: 0 0x4e52-0x4e54 (2)
0x04e50| 6c 00 00 00 | l... | footer_length: 108 0x4e54-0x4e58 (4)
| | | [80]{}: block 0x4e58-0x4ec4 (108)
0x04e50| 05 00 00 00 | .... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4e58-0x4e5c (4)
0x04e50| 05 00 00 00 | .... | type: "interface_statistics" (0x5) 0x4e58-0x4e5c (4)
0x04e50| 6c 00 00 00| l...| length: 108 0x4e5c-0x4e60 (4)
0x04e60|03 00 00 00 |.... | interface_id: 3 0x4e60-0x4e64 (4)
0x04e60| 72 1d 05 00 | r... | timestamp_high: 335218 0x4e64-0x4e68 (4)
@ -5236,7 +5236,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x04eb0| 00 00| ..| length: 0 0x4ebe-0x4ec0 (2)
0x04ec0|6c 00 00 00 |l... | footer_length: 108 0x4ec0-0x4ec4 (4)
| | | [81]{}: block 0x4ec4-0x4f30 (108)
0x04ec0| 05 00 00 00 | .... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4ec4-0x4ec8 (4)
0x04ec0| 05 00 00 00 | .... | type: "interface_statistics" (0x5) 0x4ec4-0x4ec8 (4)
0x04ec0| 6c 00 00 00 | l... | length: 108 0x4ec8-0x4ecc (4)
0x04ec0| 04 00 00 00| ....| interface_id: 4 0x4ecc-0x4ed0 (4)
0x04ed0|72 1d 05 00 |r... | timestamp_high: 335218 0x4ed0-0x4ed4 (4)
@ -5276,7 +5276,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x04f20| 00 00 | .. | length: 0 0x4f2a-0x4f2c (2)
0x04f20| 6c 00 00 00| l...| footer_length: 108 0x4f2c-0x4f30 (4)
| | | [82]{}: block 0x4f30-0x4f9c (108)
0x04f30|05 00 00 00 |.... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4f30-0x4f34 (4)
0x04f30|05 00 00 00 |.... | type: "interface_statistics" (0x5) 0x4f30-0x4f34 (4)
0x04f30| 6c 00 00 00 | l... | length: 108 0x4f34-0x4f38 (4)
0x04f30| 05 00 00 00 | .... | interface_id: 5 0x4f38-0x4f3c (4)
0x04f30| 72 1d 05 00| r...| timestamp_high: 335218 0x4f3c-0x4f40 (4)
@ -5316,7 +5316,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x04f90| 00 00 | .. | length: 0 0x4f96-0x4f98 (2)
0x04f90| 6c 00 00 00 | l... | footer_length: 108 0x4f98-0x4f9c (4)
| | | [83]{}: block 0x4f9c-0x5008 (108)
0x04f90| 05 00 00 00| ....| type: "interface_statistics" (0x5) (Interface Statistics Block) 0x4f9c-0x4fa0 (4)
0x04f90| 05 00 00 00| ....| type: "interface_statistics" (0x5) 0x4f9c-0x4fa0 (4)
0x04fa0|6c 00 00 00 |l... | length: 108 0x4fa0-0x4fa4 (4)
0x04fa0| 06 00 00 00 | .... | interface_id: 6 0x4fa4-0x4fa8 (4)
0x04fa0| 72 1d 05 00 | r... | timestamp_high: 335218 0x4fa8-0x4fac (4)
@ -5355,7 +5355,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x05000| 00 00 | .. | length: 0 0x5002-0x5004 (2)
0x05000| 6c 00 00 00 | l... | footer_length: 108 0x5004-0x5008 (4)
| | | [84]{}: block 0x5008-0x5074 (108)
0x05000| 05 00 00 00 | .... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x5008-0x500c (4)
0x05000| 05 00 00 00 | .... | type: "interface_statistics" (0x5) 0x5008-0x500c (4)
0x05000| 6c 00 00 00| l...| length: 108 0x500c-0x5010 (4)
0x05010|07 00 00 00 |.... | interface_id: 7 0x5010-0x5014 (4)
0x05010| 72 1d 05 00 | r... | timestamp_high: 335218 0x5014-0x5018 (4)
@ -5394,7 +5394,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x05060| 00 00| ..| length: 0 0x506e-0x5070 (2)
0x05070|6c 00 00 00 |l... | footer_length: 108 0x5070-0x5074 (4)
| | | [85]{}: block 0x5074-0x50e0 (108)
0x05070| 05 00 00 00 | .... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x5074-0x5078 (4)
0x05070| 05 00 00 00 | .... | type: "interface_statistics" (0x5) 0x5074-0x5078 (4)
0x05070| 6c 00 00 00 | l... | length: 108 0x5078-0x507c (4)
0x05070| 08 00 00 00| ....| interface_id: 8 0x507c-0x5080 (4)
0x05080|72 1d 05 00 |r... | timestamp_high: 335218 0x5080-0x5084 (4)
@ -5434,7 +5434,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x050d0| 00 00 | .. | length: 0 0x50da-0x50dc (2)
0x050d0| 6c 00 00 00| l...| footer_length: 108 0x50dc-0x50e0 (4)
| | | [86]{}: block 0x50e0-0x514c (108)
0x050e0|05 00 00 00 |.... | type: "interface_statistics" (0x5) (Interface Statistics Block) 0x50e0-0x50e4 (4)
0x050e0|05 00 00 00 |.... | type: "interface_statistics" (0x5) 0x50e0-0x50e4 (4)
0x050e0| 6c 00 00 00 | l... | length: 108 0x50e4-0x50e8 (4)
0x050e0| 09 00 00 00 | .... | interface_id: 9 0x50e8-0x50ec (4)
0x050e0| 72 1d 05 00| r...| timestamp_high: 335218 0x50ec-0x50f0 (4)
@ -5474,7 +5474,7 @@ $ fq -d pcapng dv many_interfaces.pcapng
0x05140| 00 00 | .. | length: 0 0x5146-0x5148 (2)
0x05140| 6c 00 00 00 | l... | footer_length: 108 0x5148-0x514c (4)
| | | [87]{}: block 0x514c-0x51b8 (108)
0x05140| 05 00 00 00| ....| type: "interface_statistics" (0x5) (Interface Statistics Block) 0x514c-0x5150 (4)
0x05140| 05 00 00 00| ....| type: "interface_statistics" (0x5) 0x514c-0x5150 (4)
0x05150|6c 00 00 00 |l... | length: 108 0x5150-0x5154 (4)
0x05150| 0a 00 00 00 | .... | interface_id: 10 0x5154-0x5158 (4)
0x05150| 72 1d 05 00 | r... | timestamp_high: 335218 0x5158-0x515c (4)