You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Currently the PCAPdroid trailer is not supported with the pcapng dump format.
Contrary to PCAP, the pcapng format is extensible so it's not needed to add fake ethernet header and trailer to it. Instead, it's possible to define some custom blocks.
One block type, for example, could contain the uid -> package_name mappings, which would save a lot of space in the capture (currently the package name takes 20 bytes per packet). Another block could then specify just the UID for a given connection (just 4 bytes).
The text was updated successfully, but these errors were encountered:
Currently the PCAPdroid trailer is not supported with the pcapng dump format.
Contrary to PCAP, the pcapng format is extensible so it's not needed to add fake ethernet header and trailer to it. Instead, it's possible to define some custom blocks.
One block type, for example, could contain the uid -> package_name mappings, which would save a lot of space in the capture (currently the package name takes 20 bytes per packet). Another block could then specify just the UID for a given connection (just 4 bytes).
The text was updated successfully, but these errors were encountered: