Namespace

Every Layer (and NetStream) has a namespace such as ::Ethernet::IPv4.
It describes the position of the layer in the network protocol stack.

Additionally, it can contain the name of the higher protocol layer (like ::Ethernet::IPv4::<TCP>).

Dripcap uses layer’s namespace to choose dissectors.
If there are no more dissector can handle the namespace, the dissection process will complete.

Examples

::<Ethernet>             Raw Frame contains Ethernet Frame
::Ethernet               Ethernet Frame
::Ethernet::IPv6::UDP    UDP on IPv6 on Ethernet
::Ethernet::IPv4::<TCP>  IPv4 on Ethernet contains TCP Segment

Syntax

namespace    = layer , { layer } | { layer } , higher layer
layer        = “::” , name
higher layer = “::<” , name , “>”
name         = char , { char }
char         = white space and any printable character without ‘:<>’