fix(pcap,pcapng): building a packet longer than the snaplen clips the declared length but writes every octet

Describe the bug
incl_len/captured_len is min(len, snaplen) (pcapkit/protocols/misc/pcap/frame.py:362, pcapkit/protocols/misc/pcapng.py:3768, plus the SPB and PB makers), but the payload is not clipped.

To Reproduce

Frame(num=1, header=Header(snaplen=8).info, packet=b'A'*16)
# incl_len=8, orig_len=16, 16 octets follow (record is 32 octets, want 24)

EPB, PB and SPB built with snaplen 8 also write 16 data octets.

Expected behavior
The payload is clipped to the declared captured length.

Found by the misc round-trip audit (#1202). The repro was re-checked by an independent verifier, and I re-ran it on main at 11ae68ebf.

Blocked until the PCAP-NG K1-K5 PR (#1267-#1271) merges.

Unblocked: #1339 merged at 20:42Z. Back to pending.

fix(pcapng): rebuilt blocks keep their lengths and padding (#1276, #1279

Navigation Menu

Repository navigation

fix(pcap,pcapng): building a packet longer than the snaplen clips the declared length but writes every octet #1283

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

fix(pcap,pcapng): building a packet longer than the snaplen clips the declared length but writes every octet #1283

Description

Activity

JarryShaw commented on Oct 7, 2026

JarryShaw commented on Oct 7, 2026

Metadata

Metadata

Assignees

Labels

Projects

Milestone

Relationships

Development

Issue actions