The PCAP File Format

References

• https://wiki.wireshark.org/Development/LibpcapFileFormat PCAP Format
• https://gitlab.com/wireshark/wireshark/-/wikis/Development/LibpcapFileFormat Newer docs on PCAP format
• https://pcapng.github.io/pcapng/draft-tuexen-opsawg-pcapng.html PCAPNG Format

Basic layout of a PCAP file

A pcapng file. Basically everything is a “block” and there’s all this extra metadata