summaryrefslogtreecommitdiffstats
path: root/test/captures
diff options
context:
space:
mode:
Diffstat (limited to 'test/captures')
-rw-r--r--test/captures/arp.pcapbin0 -> 70 bytes
-rw-r--r--test/captures/c1222_std_example8.pcapbin0 -> 319 bytes
-rw-r--r--test/captures/challenge01_ooo_stream.pcapng.gzbin0 -> 1522510 bytes
-rw-r--r--test/captures/communityid.pcap.gzbin0 -> 3117 bytes
-rw-r--r--test/captures/cose_encrypt0_tagged.cbordiag12
-rw-r--r--test/captures/cose_encrypt0_tagged.pcapbin0 -> 255 bytes
-rw-r--r--test/captures/cose_encrypt_tagged.cbordiag24
-rw-r--r--test/captures/cose_encrypt_tagged.pcapbin0 -> 294 bytes
-rw-r--r--test/captures/cose_keyset.cbordiag19
-rw-r--r--test/captures/cose_keyset.pcapbin0 -> 439 bytes
-rw-r--r--test/captures/cose_mac0_tagged.cbordiag10
-rw-r--r--test/captures/cose_mac0_tagged.pcapbin0 -> 240 bytes
-rw-r--r--test/captures/cose_mac_tagged.cbordiag40
-rw-r--r--test/captures/cose_mac_tagged.pcapbin0 -> 513 bytes
-rw-r--r--test/captures/cose_sign1_tagged.cbordiag14
-rw-r--r--test/captures/cose_sign1_tagged.pcapbin0 -> 301 bytes
-rw-r--r--test/captures/cose_sign_tagged.cbordiag39
-rw-r--r--test/captures/cose_sign_tagged.pcapbin0 -> 503 bytes
-rw-r--r--test/captures/data-utf8.pcapbin0 -> 125 bytes
-rw-r--r--test/captures/dhcp-nanosecond.pcapbin0 -> 1400 bytes
-rw-r--r--test/captures/dhcp-nanosecond.pcapngbin0 -> 1640 bytes
-rw-r--r--test/captures/dhcp.pcapbin0 -> 1400 bytes
-rw-r--r--test/captures/dhcp.pcapngbin0 -> 1508 bytes
-rw-r--r--test/captures/dhe1.pcapng.gzbin0 -> 1180 bytes
-rw-r--r--test/captures/dmgr.pcapngbin0 -> 20452 bytes
-rw-r--r--test/captures/dns+icmp.pcapng.gzbin0 -> 1588 bytes
-rw-r--r--test/captures/dns-mdns.pcapbin0 -> 72858 bytes
-rw-r--r--test/captures/dns-ooo.pcapbin0 -> 418 bytes
-rw-r--r--test/captures/dns_port.pcapbin0 -> 1318 bytes
-rw-r--r--test/captures/dtls12-aes128ccm8-dsb.pcapngbin0 -> 2044 bytes
-rw-r--r--test/captures/dtls12-aes128ccm8.pcapbin0 -> 1535 bytes
-rw-r--r--test/captures/dtn_tcpclv3_bpv6_transfer.pcapngbin0 -> 4768 bytes
-rw-r--r--test/captures/dtn_tcpclv4_bpv7_transfer.pcapngbin0 -> 3960 bytes
-rw-r--r--test/captures/dtn_udpcl_bpv7_bpsec_bcb_admin.cbordiag7
-rw-r--r--test/captures/dtn_udpcl_bpv7_bpsec_bcb_admin.pcapngbin0 -> 656 bytes
-rw-r--r--test/captures/dtn_udpcl_bpv7_bpsec_bib_admin.cbordiag7
-rw-r--r--test/captures/dtn_udpcl_bpv7_bpsec_bib_admin.pcapngbin0 -> 652 bytes
-rw-r--r--test/captures/dvb-ci_UV1_0000.pcapbin0 -> 101 bytes
-rw-r--r--test/captures/empty.pcapbin0 -> 24 bytes
-rw-r--r--test/captures/esp-bug-12671.pcapng.gzbin0 -> 1136 bytes
-rw-r--r--test/captures/gitOverTCP.pcapbin0 -> 582 bytes
-rw-r--r--test/captures/grpc_person_search_json_with_image.pcapng.gzbin0 -> 1573 bytes
-rw-r--r--test/captures/grpc_person_search_protobuf_with_image-missing_headers.pcapng.gzbin0 -> 746 bytes
-rw-r--r--test/captures/grpc_person_search_protobuf_with_image.pcapng.gzbin0 -> 1433 bytes
-rw-r--r--test/captures/grpc_stream_reassembly_sample.pcapng.gzbin0 -> 6642 bytes
-rw-r--r--test/captures/grpc_web.pcapng.gzbin0 -> 19366 bytes
-rw-r--r--test/captures/http-brotli.pcapngbin0 -> 1840 bytes
-rw-r--r--test/captures/http-ooo-fuzzed.pcapngbin0 -> 1584 bytes
-rw-r--r--test/captures/http-ooo.pcapbin0 -> 1209 bytes
-rw-r--r--test/captures/http-ooo2.pcapbin0 -> 536 bytes
-rw-r--r--test/captures/http.pcapbin0 -> 247 bytes
-rw-r--r--test/captures/http2-brotli.pcapngbin0 -> 6484 bytes
-rw-r--r--test/captures/http2-data-reassembly.pcapbin0 -> 82151 bytes
-rw-r--r--test/captures/http2_follow_multistream.pcapngbin0 -> 247716 bytes
-rw-r--r--test/captures/http3-qpack-reassembly-anon.pcapngbin0 -> 5988 bytes
-rw-r--r--test/captures/icmp.pcapng.gzbin0 -> 313 bytes
-rw-r--r--test/captures/ieee802.3cb-ping.pcapng.gzbin0 -> 850 bytes
-rw-r--r--test/captures/ikev1-bug-12610.pcapng.gzbin0 -> 2921 bytes
-rw-r--r--test/captures/ikev1-bug-12620.pcapng.gzbin0 -> 2011 bytes
-rw-r--r--test/captures/ikev1-certs.pcapbin0 -> 6015 bytes
-rw-r--r--test/captures/ikev2-decrypt-3des-sha1_160.pcapbin0 -> 1860 bytes
-rw-r--r--test/captures/ikev2-decrypt-aes128ccm12-2.pcapbin0 -> 1416 bytes
-rw-r--r--test/captures/ikev2-decrypt-aes128ccm12.pcapbin0 -> 1432 bytes
-rw-r--r--test/captures/ikev2-decrypt-aes192ctr.pcapbin0 -> 1512 bytes
-rw-r--r--test/captures/ikev2-decrypt-aes256cbc.pcapngbin0 -> 1792 bytes
-rw-r--r--test/captures/ikev2-decrypt-aes256ccm16.pcapngbin0 -> 1728 bytes
-rw-r--r--test/captures/ikev2-decrypt-aes256gcm16.pcapbin0 -> 1448 bytes
-rw-r--r--test/captures/ikev2-decrypt-aes256gcm8.pcapbin0 -> 1400 bytes
-rw-r--r--test/captures/ipoipoip.pcapbin0 -> 204 bytes
-rw-r--r--test/captures/ipv6.pcapbin0 -> 126 bytes
-rw-r--r--test/captures/ipx_rip.pcapbin0 -> 100 bytes
-rw-r--r--test/captures/knxip_DataSec.pcapbin0 -> 125 bytes
-rw-r--r--test/captures/knxip_SecureWrapper.pcapbin0 -> 137 bytes
-rw-r--r--test/captures/knxip_TimerNotify.pcapbin0 -> 118 bytes
-rw-r--r--test/captures/krb-816.pcap.gzbin0 -> 21013 bytes
-rw-r--r--test/captures/logistics_multicast.pcapngbin0 -> 139980 bytes
-rw-r--r--test/captures/many_interfaces.pcapng.1bin0 -> 20888 bytes
-rw-r--r--test/captures/many_interfaces.pcapng.2bin0 -> 3392 bytes
-rw-r--r--test/captures/many_interfaces.pcapng.3bin0 -> 3704 bytes
-rw-r--r--test/captures/mongo-zstd.pcapngbin0 -> 568 bytes
-rw-r--r--test/captures/netperfmeter.pcapng.gzbin0 -> 120209 bytes
-rw-r--r--test/captures/nfs.pcapbin0 -> 418 bytes
-rw-r--r--test/captures/ntp.pcapbin0 -> 130 bytes
-rw-r--r--test/captures/owe.pcapng.gzbin0 -> 5634 bytes
-rw-r--r--test/captures/packet-h2-14_headers.pcapngbin0 -> 25280 bytes
-rw-r--r--test/captures/protobuf_tcp_addressbook.pcapng.gzbin0 -> 927 bytes
-rw-r--r--test/captures/protobuf_test_default_value.pcapngbin0 -> 476 bytes
-rw-r--r--test/captures/protobuf_test_leading_dot.pcapngbin0 -> 584 bytes
-rw-r--r--test/captures/protobuf_test_map_and_oneof_types.pcapngbin0 -> 616 bytes
-rw-r--r--test/captures/protobuf_udp_addressbook_with_image_ts.pcapngbin0 -> 736 bytes
-rw-r--r--test/captures/protohier-with-comments.pcapngbin0 -> 26188 bytes
-rw-r--r--test/captures/protohier-without-comments.pcapngbin0 -> 26136 bytes
-rw-r--r--test/captures/quic-fragmented-handshakes.pcapng.gzbin0 -> 32804 bytes
-rw-r--r--test/captures/quic_follow_multistream.pcapngbin0 -> 982848 bytes
-rw-r--r--test/captures/retrans-tls.pcapbin0 -> 158 bytes
-rw-r--r--test/captures/rsa-p-lt-q.pcapbin0 -> 2111 bytes
-rw-r--r--test/captures/rsasnakeoil2.pcapbin0 -> 25057 bytes
-rw-r--r--test/captures/s7comm-fuzz.pcapng.gzbin0 -> 235 bytes
-rw-r--r--test/captures/sample_control4_2012-03-24.pcapbin0 -> 10949 bytes
-rw-r--r--test/captures/segmented_fpm.pcapbin0 -> 33144 bytes
-rw-r--r--test/captures/sip-rtp.pcapngbin0 -> 144300 bytes
-rw-r--r--test/captures/sip.pcapngbin0 -> 3636 bytes
-rw-r--r--test/captures/sipmsg.log136
-rw-r--r--test/captures/smb300-aes-128-ccm.pcap.gzbin0 -> 1235 bytes
-rw-r--r--test/captures/smb311-aes-128-ccm.pcap.gzbin0 -> 1327 bytes
-rw-r--r--test/captures/smb311-aes-128-gcm.pcap.gzbin0 -> 1380 bytes
-rw-r--r--test/captures/smb311-aes-256-ccm.pcap.gzbin0 -> 1526 bytes
-rw-r--r--test/captures/smb311-aes-256-gcm.pcap.gzbin0 -> 1527 bytes
-rw-r--r--test/captures/smb311-chained-patternv1-lznt1.pcapng.gzbin0 -> 717 bytes
-rw-r--r--test/captures/smb311-lz77-lz77huff-lznt1.pcap.gzbin0 -> 446 bytes
-rw-r--r--test/captures/snakeoil-dtls.pcapbin0 -> 2327 bytes
-rw-r--r--test/captures/tcp-badsegments.pcapbin0 -> 1732 bytes
-rw-r--r--test/captures/tcp-exp-option-tarr.pcap.gzbin0 -> 682 bytes
-rw-r--r--test/captures/text2pcap_hash_eol.txt10
-rw-r--r--test/captures/tftp.pcapbin0 -> 117 bytes
-rw-r--r--test/captures/tls-fragmented-handshakes.pcap.gzbin0 -> 16911 bytes
-rw-r--r--test/captures/tls-fragmented-over-tcp-segmented.pcapng.gzbin0 -> 22304 bytes
-rw-r--r--test/captures/tls-over-tls.pcapng.gzbin0 -> 31628 bytes
-rw-r--r--test/captures/tls-renegotiation.pcapbin0 -> 12935 bytes
-rw-r--r--test/captures/tls12-aes128ccm.pcapbin0 -> 2057 bytes
-rw-r--r--test/captures/tls12-aes256gcm.pcapbin0 -> 2064 bytes
-rw-r--r--test/captures/tls12-chacha20poly1305.pcapbin0 -> 43693 bytes
-rw-r--r--test/captures/tls12-dsb.pcapngbin0 -> 10260 bytes
-rw-r--r--test/captures/tls13-20-chacha20poly1305.pcapbin0 -> 10336 bytes
-rw-r--r--test/captures/tls13-rfc8446.pcapbin0 -> 4158 bytes
-rw-r--r--test/captures/trunc.pcapbin0 -> 995 bytes
-rw-r--r--test/captures/udt-dtls.pcapng.gzbin0 -> 16379 bytes
-rw-r--r--test/captures/websocket-compressed-fragmented.pcapng.gzbin0 -> 2023 bytes
-rw-r--r--test/captures/websocket-compressed.pcapng.gzbin0 -> 1583 bytes
-rw-r--r--test/captures/websocket-fragmented.pcapng.gzbin0 -> 1810 bytes
-rw-r--r--test/captures/websocket.pcapng.gzbin0 -> 1388 bytes
-rw-r--r--test/captures/wep.pcapng.gzbin0 -> 3147 bytes
-rw-r--r--test/captures/wireguard-ping-tcp-dsb.pcapngbin0 -> 5912 bytes
-rw-r--r--test/captures/wireguard-ping-tcp.pcapbin0 -> 5120 bytes
-rw-r--r--test/captures/wireguard-psk.pcapbin0 -> 736 bytes
-rw-r--r--test/captures/wpa-Induction.pcap.gzbin0 -> 77052 bytes
-rw-r--r--test/captures/wpa-ccmp-256.pcapng.gzbin0 -> 5261 bytes
-rw-r--r--test/captures/wpa-eap-tls.pcap.gzbin0 -> 25629 bytes
-rw-r--r--test/captures/wpa-gcmp-256.pcapng.gzbin0 -> 5079 bytes
-rw-r--r--test/captures/wpa-gcmp.pcapng.gzbin0 -> 5584 bytes
-rw-r--r--test/captures/wpa-test-decode-mgmt.pcap.gzbin0 -> 903 bytes
-rw-r--r--test/captures/wpa-test-decode-tdls.pcap.gzbin0 -> 3423 bytes
-rw-r--r--test/captures/wpa-test-decode.pcap.gzbin0 -> 167294 bytes
-rw-r--r--test/captures/wpa1-gtk-rekey.pcapng.gzbin0 -> 7114 bytes
-rw-r--r--test/captures/wpa2-ft-eap.pcapng.gzbin0 -> 4927 bytes
-rw-r--r--test/captures/wpa2-ft-psk.pcapng.gzbin0 -> 5074 bytes
-rw-r--r--test/captures/wpa2-psk-mfp.pcapng.gzbin0 -> 3128 bytes
-rw-r--r--test/captures/wpa3-sae.pcapng.gzbin0 -> 5981 bytes
-rw-r--r--test/captures/wpa3-suiteb-192.pcapng.gzbin0 -> 5109 bytes
-rw-r--r--test/captures/wpa_ptk_extended_key_id.pcap.gzbin0 -> 20462 bytes
150 files changed, 318 insertions, 0 deletions
diff --git a/test/captures/arp.pcap b/test/captures/arp.pcap
new file mode 100644
index 00000000..f9fca0c1
--- /dev/null
+++ b/test/captures/arp.pcap
Binary files differ
diff --git a/test/captures/c1222_std_example8.pcap b/test/captures/c1222_std_example8.pcap
new file mode 100644
index 00000000..ad517f04
--- /dev/null
+++ b/test/captures/c1222_std_example8.pcap
Binary files differ
diff --git a/test/captures/challenge01_ooo_stream.pcapng.gz b/test/captures/challenge01_ooo_stream.pcapng.gz
new file mode 100644
index 00000000..aa96da0d
--- /dev/null
+++ b/test/captures/challenge01_ooo_stream.pcapng.gz
Binary files differ
diff --git a/test/captures/communityid.pcap.gz b/test/captures/communityid.pcap.gz
new file mode 100644
index 00000000..a7ecc4eb
--- /dev/null
+++ b/test/captures/communityid.pcap.gz
Binary files differ
diff --git a/test/captures/cose_encrypt0_tagged.cbordiag b/test/captures/cose_encrypt0_tagged.cbordiag
new file mode 100644
index 00000000..36b9d62e
--- /dev/null
+++ b/test/captures/cose_encrypt0_tagged.cbordiag
@@ -0,0 +1,12 @@
+16(
+ [
+ / protected h'a1010a' / << {
+ / alg / 1:10 / AES-CCM-16-64-128 /
+ } >> ,
+ / unprotected / {
+ / iv / 5:h'89f52f65a1c580933b5261a78c'
+ },
+ / ciphertext / h'5974e1b99a3a4cc09a659aa2e9e7fff161d38ce71cb45ce
+460ffb569'
+ ]
+)
diff --git a/test/captures/cose_encrypt0_tagged.pcap b/test/captures/cose_encrypt0_tagged.pcap
new file mode 100644
index 00000000..51d1cbf6
--- /dev/null
+++ b/test/captures/cose_encrypt0_tagged.pcap
Binary files differ
diff --git a/test/captures/cose_encrypt_tagged.cbordiag b/test/captures/cose_encrypt_tagged.cbordiag
new file mode 100644
index 00000000..30767f9d
--- /dev/null
+++ b/test/captures/cose_encrypt_tagged.cbordiag
@@ -0,0 +1,24 @@
+96(
+ [
+ / protected h'a1010a' / << {
+ / alg / 1:10 / AES-CCM-16-64-128 /
+ } >>,
+ / unprotected / {
+ / iv / 5:h'89f52f65a1c580933b5261a76c'
+ },
+ / ciphertext / h'753548a19b1307084ca7b2056924ed95f2e3b17006dfe93
+1b687b847',
+ / recipients / [
+ [
+ / protected h'a10129' / << {
+ / alg / 1:-10
+ } >>,
+ / unprotected / {
+ / salt / -20:'aabbccddeeffgghh',
+ / kid / 4:'our-secret'
+ },
+ / ciphertext / h''
+ ]
+ ]
+ ]
+)
diff --git a/test/captures/cose_encrypt_tagged.pcap b/test/captures/cose_encrypt_tagged.pcap
new file mode 100644
index 00000000..71f5ad8c
--- /dev/null
+++ b/test/captures/cose_encrypt_tagged.pcap
Binary files differ
diff --git a/test/captures/cose_keyset.cbordiag b/test/captures/cose_keyset.cbordiag
new file mode 100644
index 00000000..11b1df36
--- /dev/null
+++ b/test/captures/cose_keyset.cbordiag
@@ -0,0 +1,19 @@
+[
+ {
+ 1:2,
+ 2:'meriadoc.brandybuck@buckland.example',
+ -1:1,
+ -2:h'65eda5a12577c2bae829437fe338701a10aaa375e1bb5b5de108de439c0
+8551d',
+ -3:h'1e52ed75701163f7f9e40ddf9f341b3dc9ba860af7e0ca7ca7e9eecd008
+4d19c',
+ -4:h'aff907c99f9ad3aae6c4cdf21122bce2bd68b5283e6907154ad911840fa
+208cf'
+ },
+ {
+ 1:4,
+ 2:'018c0ae5-4d9b-471b-bfd6-eef314bc7037',
+ -1:h'849b57219dae48de646d07dbb533566e976686457c1491be3a76dcea6c4
+27188'
+ }
+]
diff --git a/test/captures/cose_keyset.pcap b/test/captures/cose_keyset.pcap
new file mode 100644
index 00000000..5b98d31a
--- /dev/null
+++ b/test/captures/cose_keyset.pcap
Binary files differ
diff --git a/test/captures/cose_mac0_tagged.cbordiag b/test/captures/cose_mac0_tagged.cbordiag
new file mode 100644
index 00000000..ead2910d
--- /dev/null
+++ b/test/captures/cose_mac0_tagged.cbordiag
@@ -0,0 +1,10 @@
+17(
+ [
+ / protected h'a1010f' / << {
+ / alg / 1:15 / AES-CBC-MAC-256//64 /
+ } >> ,
+ / unprotected / {},
+ / payload / 'This is the content.',
+ / tag / h'726043745027214f'
+ ]
+)
diff --git a/test/captures/cose_mac0_tagged.pcap b/test/captures/cose_mac0_tagged.pcap
new file mode 100644
index 00000000..0454b19c
--- /dev/null
+++ b/test/captures/cose_mac0_tagged.pcap
Binary files differ
diff --git a/test/captures/cose_mac_tagged.cbordiag b/test/captures/cose_mac_tagged.cbordiag
new file mode 100644
index 00000000..91d9b89b
--- /dev/null
+++ b/test/captures/cose_mac_tagged.cbordiag
@@ -0,0 +1,40 @@
+97(
+ [
+ / protected h'a10105' / << {
+ / alg / 1:5 / HMAC 256//256 /
+ } >> ,
+ / unprotected / {},
+ / payload / 'This is the content.',
+ / tag / h'bf48235e809b5c42e995f2b7d5fa13620e7ed834e337f6aa43df16
+1e49e9323e',
+ / recipients / [
+ [
+ / protected h'a101381c' / << {
+ / alg / 1:-29 / ECHD-ES+A128KW /
+ } >> ,
+ / unprotected / {
+ / ephemeral / -1:{
+ / kty / 1:2,
+ / crv / -1:3,
+ / x / -2:h'0043b12669acac3fd27898ffba0bcd2e6c366d53bc4db
+71f909a759304acfb5e18cdc7ba0b13ff8c7636271a6924b1ac63c02688075b55ef2
+d613574e7dc242f79c3',
+ / y / -3:true
+ },
+ / kid / 4:'bilbo.baggins@hobbiton.example'
+ },
+ / ciphertext / h'339bc4f79984cdc6b3e6ce5f315a4c7d2b0ac466fce
+a69e8c07dfbca5bb1f661bc5f8e0df9e3eff5'
+ ],
+ [
+ / protected / h'',
+ / unprotected / {
+ / alg / 1:-5 / A256KW /,
+ / kid / 4:'018c0ae5-4d9b-471b-bfd6-eef314bc7037'
+ },
+ / ciphertext / h'0b2c7cfce04e98276342d6476a7723c090dfdd15f9a
+518e7736549e998370695e6d6a83b4ae507bb'
+ ]
+ ]
+ ]
+)
diff --git a/test/captures/cose_mac_tagged.pcap b/test/captures/cose_mac_tagged.pcap
new file mode 100644
index 00000000..3c685b29
--- /dev/null
+++ b/test/captures/cose_mac_tagged.pcap
Binary files differ
diff --git a/test/captures/cose_sign1_tagged.cbordiag b/test/captures/cose_sign1_tagged.cbordiag
new file mode 100644
index 00000000..64063320
--- /dev/null
+++ b/test/captures/cose_sign1_tagged.cbordiag
@@ -0,0 +1,14 @@
+18(
+ [
+ / protected h'a10126' / << {
+ / alg / 1:-7 / ECDSA 256 /
+ } >>,
+ / unprotected / {
+ / kid / 4:'11'
+ },
+ / payload / 'This is the content.',
+ / signature / h'8eb33e4ca31d1c465ab05aac34cc6b23d58fef5c083106c4
+d25a91aef0b0117e2af9a291aa32e14ab834dc56ed2a223444547e01f11d3b0916e5
+a4c345cacb36'
+ ]
+)
diff --git a/test/captures/cose_sign1_tagged.pcap b/test/captures/cose_sign1_tagged.pcap
new file mode 100644
index 00000000..f3c84401
--- /dev/null
+++ b/test/captures/cose_sign1_tagged.pcap
Binary files differ
diff --git a/test/captures/cose_sign_tagged.cbordiag b/test/captures/cose_sign_tagged.cbordiag
new file mode 100644
index 00000000..92003a4c
--- /dev/null
+++ b/test/captures/cose_sign_tagged.cbordiag
@@ -0,0 +1,39 @@
+98(
+ [
+ / protected h'a2687265736572766564f40281687265736572766564' /
+ << {
+ "reserved":false,
+ / crit / 2:[
+ "reserved"
+ ]
+ } >>,
+ / unprotected / {},
+ / payload / 'This is the content.',
+ / signatures / [
+ [
+ / protected h'a10126' / << {
+ / alg / 1:-7 / ECDSA 256 /
+ } >>,
+ / unprotected / {
+ / kid / 4:'11'
+ },
+ / signature / h'e2aeafd40d69d19dfe6e52077c5d7ff4e408282cbefb
+5d06cbf414af2e19d982ac45ac98b8544c908b4507de1e90b717c3d34816fe926a2b
+98f53afd2fa0f30a'
+ ],
+ [
+ / protected h'a1013823' / << {
+ / alg / 1:-36 / ECDSA 521 /
+ } >> ,
+ / unprotected / {
+ / kid / 4:'bilbo.baggins@hobbiton.example'
+ },
+ / signature / h'00a2d28a7c2bdb1587877420f65adf7d0b9a06635dd1
+de64bb62974c863f0b160dd2163734034e6ac003b01e8705524c5c4ca479a952f024
+7ee8cb0b4fb7397ba08d009e0c8bf482270cc5771aa143966e5a469a09f613488030
+c5b07ec6d722e3835adb5b2d8c44e95ffb13877dd2582866883535de3bb03d01753f
+83ab87bb4f7a0297'
+ ]
+ ]
+ ]
+)
diff --git a/test/captures/cose_sign_tagged.pcap b/test/captures/cose_sign_tagged.pcap
new file mode 100644
index 00000000..428acb9a
--- /dev/null
+++ b/test/captures/cose_sign_tagged.pcap
Binary files differ
diff --git a/test/captures/data-utf8.pcap b/test/captures/data-utf8.pcap
new file mode 100644
index 00000000..286acab9
--- /dev/null
+++ b/test/captures/data-utf8.pcap
Binary files differ
diff --git a/test/captures/dhcp-nanosecond.pcap b/test/captures/dhcp-nanosecond.pcap
new file mode 100644
index 00000000..7c932068
--- /dev/null
+++ b/test/captures/dhcp-nanosecond.pcap
Binary files differ
diff --git a/test/captures/dhcp-nanosecond.pcapng b/test/captures/dhcp-nanosecond.pcapng
new file mode 100644
index 00000000..3a65e4ef
--- /dev/null
+++ b/test/captures/dhcp-nanosecond.pcapng
Binary files differ
diff --git a/test/captures/dhcp.pcap b/test/captures/dhcp.pcap
new file mode 100644
index 00000000..a42d6102
--- /dev/null
+++ b/test/captures/dhcp.pcap
Binary files differ
diff --git a/test/captures/dhcp.pcapng b/test/captures/dhcp.pcapng
new file mode 100644
index 00000000..530c64ce
--- /dev/null
+++ b/test/captures/dhcp.pcapng
Binary files differ
diff --git a/test/captures/dhe1.pcapng.gz b/test/captures/dhe1.pcapng.gz
new file mode 100644
index 00000000..38112576
--- /dev/null
+++ b/test/captures/dhe1.pcapng.gz
Binary files differ
diff --git a/test/captures/dmgr.pcapng b/test/captures/dmgr.pcapng
new file mode 100644
index 00000000..10eb29d4
--- /dev/null
+++ b/test/captures/dmgr.pcapng
Binary files differ
diff --git a/test/captures/dns+icmp.pcapng.gz b/test/captures/dns+icmp.pcapng.gz
new file mode 100644
index 00000000..ddd09fa1
--- /dev/null
+++ b/test/captures/dns+icmp.pcapng.gz
Binary files differ
diff --git a/test/captures/dns-mdns.pcap b/test/captures/dns-mdns.pcap
new file mode 100644
index 00000000..7410b1e7
--- /dev/null
+++ b/test/captures/dns-mdns.pcap
Binary files differ
diff --git a/test/captures/dns-ooo.pcap b/test/captures/dns-ooo.pcap
new file mode 100644
index 00000000..594b925f
--- /dev/null
+++ b/test/captures/dns-ooo.pcap
Binary files differ
diff --git a/test/captures/dns_port.pcap b/test/captures/dns_port.pcap
new file mode 100644
index 00000000..6974505a
--- /dev/null
+++ b/test/captures/dns_port.pcap
Binary files differ
diff --git a/test/captures/dtls12-aes128ccm8-dsb.pcapng b/test/captures/dtls12-aes128ccm8-dsb.pcapng
new file mode 100644
index 00000000..9a9bf4e5
--- /dev/null
+++ b/test/captures/dtls12-aes128ccm8-dsb.pcapng
Binary files differ
diff --git a/test/captures/dtls12-aes128ccm8.pcap b/test/captures/dtls12-aes128ccm8.pcap
new file mode 100644
index 00000000..3e293c14
--- /dev/null
+++ b/test/captures/dtls12-aes128ccm8.pcap
Binary files differ
diff --git a/test/captures/dtn_tcpclv3_bpv6_transfer.pcapng b/test/captures/dtn_tcpclv3_bpv6_transfer.pcapng
new file mode 100644
index 00000000..d8e07646
--- /dev/null
+++ b/test/captures/dtn_tcpclv3_bpv6_transfer.pcapng
Binary files differ
diff --git a/test/captures/dtn_tcpclv4_bpv7_transfer.pcapng b/test/captures/dtn_tcpclv4_bpv7_transfer.pcapng
new file mode 100644
index 00000000..4bdf152f
--- /dev/null
+++ b/test/captures/dtn_tcpclv4_bpv7_transfer.pcapng
Binary files differ
diff --git a/test/captures/dtn_udpcl_bpv7_bpsec_bcb_admin.cbordiag b/test/captures/dtn_udpcl_bpv7_bpsec_bcb_admin.cbordiag
new file mode 100644
index 00000000..4b55f652
--- /dev/null
+++ b/test/captures/dtn_udpcl_bpv7_bpsec_bcb_admin.cbordiag
@@ -0,0 +1,7 @@
+[_
+ [7, 11094, 1, [2, [26622, 12070]], [2, [5279, 7390]], [2, [4785, 1111]], [81089243, 993], 52532350140, 1646, 2047, h'55E4'],
+ [7, 7, 175, 0, 24(h'1B000000013075CD37')],
+ [10, 5, 89, 0, 24(h'820007')],
+ [12, 25, 162, 0, 63(h'8101 02 01 82028219149f191cde 84 8201426869 820205 8203426869 820407 8181 8201457468657265')],
+ [1, 1, 3, 0, 24(h'8201848482F41B000000018BA3F02382F41A3027AC8782F41B000000018DFAF97381F503820282185D18B9821A533D733D190119')]
+]
diff --git a/test/captures/dtn_udpcl_bpv7_bpsec_bcb_admin.pcapng b/test/captures/dtn_udpcl_bpv7_bpsec_bcb_admin.pcapng
new file mode 100644
index 00000000..1625c19c
--- /dev/null
+++ b/test/captures/dtn_udpcl_bpv7_bpsec_bcb_admin.pcapng
Binary files differ
diff --git a/test/captures/dtn_udpcl_bpv7_bpsec_bib_admin.cbordiag b/test/captures/dtn_udpcl_bpv7_bpsec_bib_admin.cbordiag
new file mode 100644
index 00000000..fdb4ade2
--- /dev/null
+++ b/test/captures/dtn_udpcl_bpv7_bpsec_bib_admin.cbordiag
@@ -0,0 +1,7 @@
+[_
+ [7, 11094, 1, [2, [26622, 12070]], [2, [5279, 7390]], [2, [4785, 1111]], [81089243, 993], 52532350140, 1646, 2047, h'55E4'],
+ [7, 7, 175, 0, 24(h'1B000000013075CD37')],
+ [10, 5, 89, 0, 24(h'820007')],
+ [11, 25, 162, 0, 63(h'8101 01 01 82028219149f191cde 83 820105 8202426869 820307 8181 8201457468657265')],
+ [1, 1, 3, 0, 24(h'8201848482F41B000000018BA3F02382F41A3027AC8782F41B000000018DFAF97381F503820282185D18B9821A533D733D190119')]
+]
diff --git a/test/captures/dtn_udpcl_bpv7_bpsec_bib_admin.pcapng b/test/captures/dtn_udpcl_bpv7_bpsec_bib_admin.pcapng
new file mode 100644
index 00000000..245fecaf
--- /dev/null
+++ b/test/captures/dtn_udpcl_bpv7_bpsec_bib_admin.pcapng
Binary files differ
diff --git a/test/captures/dvb-ci_UV1_0000.pcap b/test/captures/dvb-ci_UV1_0000.pcap
new file mode 100644
index 00000000..aa192ca0
--- /dev/null
+++ b/test/captures/dvb-ci_UV1_0000.pcap
Binary files differ
diff --git a/test/captures/empty.pcap b/test/captures/empty.pcap
new file mode 100644
index 00000000..a3243045
--- /dev/null
+++ b/test/captures/empty.pcap
Binary files differ
diff --git a/test/captures/esp-bug-12671.pcapng.gz b/test/captures/esp-bug-12671.pcapng.gz
new file mode 100644
index 00000000..a31e8c54
--- /dev/null
+++ b/test/captures/esp-bug-12671.pcapng.gz
Binary files differ
diff --git a/test/captures/gitOverTCP.pcap b/test/captures/gitOverTCP.pcap
new file mode 100644
index 00000000..e2c33f46
--- /dev/null
+++ b/test/captures/gitOverTCP.pcap
Binary files differ
diff --git a/test/captures/grpc_person_search_json_with_image.pcapng.gz b/test/captures/grpc_person_search_json_with_image.pcapng.gz
new file mode 100644
index 00000000..4de8621c
--- /dev/null
+++ b/test/captures/grpc_person_search_json_with_image.pcapng.gz
Binary files differ
diff --git a/test/captures/grpc_person_search_protobuf_with_image-missing_headers.pcapng.gz b/test/captures/grpc_person_search_protobuf_with_image-missing_headers.pcapng.gz
new file mode 100644
index 00000000..c128bb37
--- /dev/null
+++ b/test/captures/grpc_person_search_protobuf_with_image-missing_headers.pcapng.gz
Binary files differ
diff --git a/test/captures/grpc_person_search_protobuf_with_image.pcapng.gz b/test/captures/grpc_person_search_protobuf_with_image.pcapng.gz
new file mode 100644
index 00000000..076c7bc6
--- /dev/null
+++ b/test/captures/grpc_person_search_protobuf_with_image.pcapng.gz
Binary files differ
diff --git a/test/captures/grpc_stream_reassembly_sample.pcapng.gz b/test/captures/grpc_stream_reassembly_sample.pcapng.gz
new file mode 100644
index 00000000..f5e22e0b
--- /dev/null
+++ b/test/captures/grpc_stream_reassembly_sample.pcapng.gz
Binary files differ
diff --git a/test/captures/grpc_web.pcapng.gz b/test/captures/grpc_web.pcapng.gz
new file mode 100644
index 00000000..5d527147
--- /dev/null
+++ b/test/captures/grpc_web.pcapng.gz
Binary files differ
diff --git a/test/captures/http-brotli.pcapng b/test/captures/http-brotli.pcapng
new file mode 100644
index 00000000..5d7a499d
--- /dev/null
+++ b/test/captures/http-brotli.pcapng
Binary files differ
diff --git a/test/captures/http-ooo-fuzzed.pcapng b/test/captures/http-ooo-fuzzed.pcapng
new file mode 100644
index 00000000..7cb871c3
--- /dev/null
+++ b/test/captures/http-ooo-fuzzed.pcapng
Binary files differ
diff --git a/test/captures/http-ooo.pcap b/test/captures/http-ooo.pcap
new file mode 100644
index 00000000..be0b5d2f
--- /dev/null
+++ b/test/captures/http-ooo.pcap
Binary files differ
diff --git a/test/captures/http-ooo2.pcap b/test/captures/http-ooo2.pcap
new file mode 100644
index 00000000..8cab45c9
--- /dev/null
+++ b/test/captures/http-ooo2.pcap
Binary files differ
diff --git a/test/captures/http.pcap b/test/captures/http.pcap
new file mode 100644
index 00000000..145c2b05
--- /dev/null
+++ b/test/captures/http.pcap
Binary files differ
diff --git a/test/captures/http2-brotli.pcapng b/test/captures/http2-brotli.pcapng
new file mode 100644
index 00000000..7e07e857
--- /dev/null
+++ b/test/captures/http2-brotli.pcapng
Binary files differ
diff --git a/test/captures/http2-data-reassembly.pcap b/test/captures/http2-data-reassembly.pcap
new file mode 100644
index 00000000..b0f15ee9
--- /dev/null
+++ b/test/captures/http2-data-reassembly.pcap
Binary files differ
diff --git a/test/captures/http2_follow_multistream.pcapng b/test/captures/http2_follow_multistream.pcapng
new file mode 100644
index 00000000..afba90e3
--- /dev/null
+++ b/test/captures/http2_follow_multistream.pcapng
Binary files differ
diff --git a/test/captures/http3-qpack-reassembly-anon.pcapng b/test/captures/http3-qpack-reassembly-anon.pcapng
new file mode 100644
index 00000000..4a7e02d2
--- /dev/null
+++ b/test/captures/http3-qpack-reassembly-anon.pcapng
Binary files differ
diff --git a/test/captures/icmp.pcapng.gz b/test/captures/icmp.pcapng.gz
new file mode 100644
index 00000000..653b9e5f
--- /dev/null
+++ b/test/captures/icmp.pcapng.gz
Binary files differ
diff --git a/test/captures/ieee802.3cb-ping.pcapng.gz b/test/captures/ieee802.3cb-ping.pcapng.gz
new file mode 100644
index 00000000..71b4beb3
--- /dev/null
+++ b/test/captures/ieee802.3cb-ping.pcapng.gz
Binary files differ
diff --git a/test/captures/ikev1-bug-12610.pcapng.gz b/test/captures/ikev1-bug-12610.pcapng.gz
new file mode 100644
index 00000000..b4d6be6c
--- /dev/null
+++ b/test/captures/ikev1-bug-12610.pcapng.gz
Binary files differ
diff --git a/test/captures/ikev1-bug-12620.pcapng.gz b/test/captures/ikev1-bug-12620.pcapng.gz
new file mode 100644
index 00000000..14724fcd
--- /dev/null
+++ b/test/captures/ikev1-bug-12620.pcapng.gz
Binary files differ
diff --git a/test/captures/ikev1-certs.pcap b/test/captures/ikev1-certs.pcap
new file mode 100644
index 00000000..6922aa37
--- /dev/null
+++ b/test/captures/ikev1-certs.pcap
Binary files differ
diff --git a/test/captures/ikev2-decrypt-3des-sha1_160.pcap b/test/captures/ikev2-decrypt-3des-sha1_160.pcap
new file mode 100644
index 00000000..ffdc7b51
--- /dev/null
+++ b/test/captures/ikev2-decrypt-3des-sha1_160.pcap
Binary files differ
diff --git a/test/captures/ikev2-decrypt-aes128ccm12-2.pcap b/test/captures/ikev2-decrypt-aes128ccm12-2.pcap
new file mode 100644
index 00000000..5ffecbee
--- /dev/null
+++ b/test/captures/ikev2-decrypt-aes128ccm12-2.pcap
Binary files differ
diff --git a/test/captures/ikev2-decrypt-aes128ccm12.pcap b/test/captures/ikev2-decrypt-aes128ccm12.pcap
new file mode 100644
index 00000000..66dabfe6
--- /dev/null
+++ b/test/captures/ikev2-decrypt-aes128ccm12.pcap
Binary files differ
diff --git a/test/captures/ikev2-decrypt-aes192ctr.pcap b/test/captures/ikev2-decrypt-aes192ctr.pcap
new file mode 100644
index 00000000..31f16cb9
--- /dev/null
+++ b/test/captures/ikev2-decrypt-aes192ctr.pcap
Binary files differ
diff --git a/test/captures/ikev2-decrypt-aes256cbc.pcapng b/test/captures/ikev2-decrypt-aes256cbc.pcapng
new file mode 100644
index 00000000..ce3d247c
--- /dev/null
+++ b/test/captures/ikev2-decrypt-aes256cbc.pcapng
Binary files differ
diff --git a/test/captures/ikev2-decrypt-aes256ccm16.pcapng b/test/captures/ikev2-decrypt-aes256ccm16.pcapng
new file mode 100644
index 00000000..78874618
--- /dev/null
+++ b/test/captures/ikev2-decrypt-aes256ccm16.pcapng
Binary files differ
diff --git a/test/captures/ikev2-decrypt-aes256gcm16.pcap b/test/captures/ikev2-decrypt-aes256gcm16.pcap
new file mode 100644
index 00000000..1e77424e
--- /dev/null
+++ b/test/captures/ikev2-decrypt-aes256gcm16.pcap
Binary files differ
diff --git a/test/captures/ikev2-decrypt-aes256gcm8.pcap b/test/captures/ikev2-decrypt-aes256gcm8.pcap
new file mode 100644
index 00000000..a0d74de8
--- /dev/null
+++ b/test/captures/ikev2-decrypt-aes256gcm8.pcap
Binary files differ
diff --git a/test/captures/ipoipoip.pcap b/test/captures/ipoipoip.pcap
new file mode 100644
index 00000000..4c15e1a2
--- /dev/null
+++ b/test/captures/ipoipoip.pcap
Binary files differ
diff --git a/test/captures/ipv6.pcap b/test/captures/ipv6.pcap
new file mode 100644
index 00000000..bdfb72ce
--- /dev/null
+++ b/test/captures/ipv6.pcap
Binary files differ
diff --git a/test/captures/ipx_rip.pcap b/test/captures/ipx_rip.pcap
new file mode 100644
index 00000000..89533cb1
--- /dev/null
+++ b/test/captures/ipx_rip.pcap
Binary files differ
diff --git a/test/captures/knxip_DataSec.pcap b/test/captures/knxip_DataSec.pcap
new file mode 100644
index 00000000..7e28cd40
--- /dev/null
+++ b/test/captures/knxip_DataSec.pcap
Binary files differ
diff --git a/test/captures/knxip_SecureWrapper.pcap b/test/captures/knxip_SecureWrapper.pcap
new file mode 100644
index 00000000..0be64d8c
--- /dev/null
+++ b/test/captures/knxip_SecureWrapper.pcap
Binary files differ
diff --git a/test/captures/knxip_TimerNotify.pcap b/test/captures/knxip_TimerNotify.pcap
new file mode 100644
index 00000000..4e7ae378
--- /dev/null
+++ b/test/captures/knxip_TimerNotify.pcap
Binary files differ
diff --git a/test/captures/krb-816.pcap.gz b/test/captures/krb-816.pcap.gz
new file mode 100644
index 00000000..59002a62
--- /dev/null
+++ b/test/captures/krb-816.pcap.gz
Binary files differ
diff --git a/test/captures/logistics_multicast.pcapng b/test/captures/logistics_multicast.pcapng
new file mode 100644
index 00000000..10684805
--- /dev/null
+++ b/test/captures/logistics_multicast.pcapng
Binary files differ
diff --git a/test/captures/many_interfaces.pcapng.1 b/test/captures/many_interfaces.pcapng.1
new file mode 100644
index 00000000..960e35d9
--- /dev/null
+++ b/test/captures/many_interfaces.pcapng.1
Binary files differ
diff --git a/test/captures/many_interfaces.pcapng.2 b/test/captures/many_interfaces.pcapng.2
new file mode 100644
index 00000000..7056f46c
--- /dev/null
+++ b/test/captures/many_interfaces.pcapng.2
Binary files differ
diff --git a/test/captures/many_interfaces.pcapng.3 b/test/captures/many_interfaces.pcapng.3
new file mode 100644
index 00000000..48367c0a
--- /dev/null
+++ b/test/captures/many_interfaces.pcapng.3
Binary files differ
diff --git a/test/captures/mongo-zstd.pcapng b/test/captures/mongo-zstd.pcapng
new file mode 100644
index 00000000..565815ff
--- /dev/null
+++ b/test/captures/mongo-zstd.pcapng
Binary files differ
diff --git a/test/captures/netperfmeter.pcapng.gz b/test/captures/netperfmeter.pcapng.gz
new file mode 100644
index 00000000..b62386a3
--- /dev/null
+++ b/test/captures/netperfmeter.pcapng.gz
Binary files differ
diff --git a/test/captures/nfs.pcap b/test/captures/nfs.pcap
new file mode 100644
index 00000000..e71d80be
--- /dev/null
+++ b/test/captures/nfs.pcap
Binary files differ
diff --git a/test/captures/ntp.pcap b/test/captures/ntp.pcap
new file mode 100644
index 00000000..815ed719
--- /dev/null
+++ b/test/captures/ntp.pcap
Binary files differ
diff --git a/test/captures/owe.pcapng.gz b/test/captures/owe.pcapng.gz
new file mode 100644
index 00000000..930d6bc5
--- /dev/null
+++ b/test/captures/owe.pcapng.gz
Binary files differ
diff --git a/test/captures/packet-h2-14_headers.pcapng b/test/captures/packet-h2-14_headers.pcapng
new file mode 100644
index 00000000..5f4f0e5d
--- /dev/null
+++ b/test/captures/packet-h2-14_headers.pcapng
Binary files differ
diff --git a/test/captures/protobuf_tcp_addressbook.pcapng.gz b/test/captures/protobuf_tcp_addressbook.pcapng.gz
new file mode 100644
index 00000000..7c985c3a
--- /dev/null
+++ b/test/captures/protobuf_tcp_addressbook.pcapng.gz
Binary files differ
diff --git a/test/captures/protobuf_test_default_value.pcapng b/test/captures/protobuf_test_default_value.pcapng
new file mode 100644
index 00000000..37144ee7
--- /dev/null
+++ b/test/captures/protobuf_test_default_value.pcapng
Binary files differ
diff --git a/test/captures/protobuf_test_leading_dot.pcapng b/test/captures/protobuf_test_leading_dot.pcapng
new file mode 100644
index 00000000..1ec0dcc7
--- /dev/null
+++ b/test/captures/protobuf_test_leading_dot.pcapng
Binary files differ
diff --git a/test/captures/protobuf_test_map_and_oneof_types.pcapng b/test/captures/protobuf_test_map_and_oneof_types.pcapng
new file mode 100644
index 00000000..fa1b298b
--- /dev/null
+++ b/test/captures/protobuf_test_map_and_oneof_types.pcapng
Binary files differ
diff --git a/test/captures/protobuf_udp_addressbook_with_image_ts.pcapng b/test/captures/protobuf_udp_addressbook_with_image_ts.pcapng
new file mode 100644
index 00000000..d6cc8645
--- /dev/null
+++ b/test/captures/protobuf_udp_addressbook_with_image_ts.pcapng
Binary files differ
diff --git a/test/captures/protohier-with-comments.pcapng b/test/captures/protohier-with-comments.pcapng
new file mode 100644
index 00000000..4a4d78e4
--- /dev/null
+++ b/test/captures/protohier-with-comments.pcapng
Binary files differ
diff --git a/test/captures/protohier-without-comments.pcapng b/test/captures/protohier-without-comments.pcapng
new file mode 100644
index 00000000..942e9202
--- /dev/null
+++ b/test/captures/protohier-without-comments.pcapng
Binary files differ
diff --git a/test/captures/quic-fragmented-handshakes.pcapng.gz b/test/captures/quic-fragmented-handshakes.pcapng.gz
new file mode 100644
index 00000000..f029a46f
--- /dev/null
+++ b/test/captures/quic-fragmented-handshakes.pcapng.gz
Binary files differ
diff --git a/test/captures/quic_follow_multistream.pcapng b/test/captures/quic_follow_multistream.pcapng
new file mode 100644
index 00000000..10d98b5d
--- /dev/null
+++ b/test/captures/quic_follow_multistream.pcapng
Binary files differ
diff --git a/test/captures/retrans-tls.pcap b/test/captures/retrans-tls.pcap
new file mode 100644
index 00000000..90be0de7
--- /dev/null
+++ b/test/captures/retrans-tls.pcap
Binary files differ
diff --git a/test/captures/rsa-p-lt-q.pcap b/test/captures/rsa-p-lt-q.pcap
new file mode 100644
index 00000000..2d2a33ff
--- /dev/null
+++ b/test/captures/rsa-p-lt-q.pcap
Binary files differ
diff --git a/test/captures/rsasnakeoil2.pcap b/test/captures/rsasnakeoil2.pcap
new file mode 100644
index 00000000..a1c6bd4f
--- /dev/null
+++ b/test/captures/rsasnakeoil2.pcap
Binary files differ
diff --git a/test/captures/s7comm-fuzz.pcapng.gz b/test/captures/s7comm-fuzz.pcapng.gz
new file mode 100644
index 00000000..5eaa4251
--- /dev/null
+++ b/test/captures/s7comm-fuzz.pcapng.gz
Binary files differ
diff --git a/test/captures/sample_control4_2012-03-24.pcap b/test/captures/sample_control4_2012-03-24.pcap
new file mode 100644
index 00000000..cd33b1cd
--- /dev/null
+++ b/test/captures/sample_control4_2012-03-24.pcap
Binary files differ
diff --git a/test/captures/segmented_fpm.pcap b/test/captures/segmented_fpm.pcap
new file mode 100644
index 00000000..f86e1038
--- /dev/null
+++ b/test/captures/segmented_fpm.pcap
Binary files differ
diff --git a/test/captures/sip-rtp.pcapng b/test/captures/sip-rtp.pcapng
new file mode 100644
index 00000000..5ea96eef
--- /dev/null
+++ b/test/captures/sip-rtp.pcapng
Binary files differ
diff --git a/test/captures/sip.pcapng b/test/captures/sip.pcapng
new file mode 100644
index 00000000..7d1f6f29
--- /dev/null
+++ b/test/captures/sip.pcapng
Binary files differ
diff --git a/test/captures/sipmsg.log b/test/captures/sipmsg.log
new file mode 100644
index 00000000..d69c99c0
--- /dev/null
+++ b/test/captures/sipmsg.log
@@ -0,0 +1,136 @@
+File opened.
+Mar 6 13:34:22.599 UDP[3:0]10.102.131.194:5060 OPENED
+Mar 6 13:34:22.616 UDP[6:0]10.102.130.185:5060 OPENED
+Mar 6 13:34:49.416 On [6:0]10.102.130.185:5060 received from 10.102.130.150:5060
+REGISTER sip:csp.noklab.net SIP/2.0
+Via: SIP/2.0/UDP 192.168.1.100:5060;branch=z9hG4bK26b7a48d
+From: sip:34903@csp.noklab.net
+To: sip:34903@csp.noklab.net
+Call-ID: 003094c3-a0160002-23aa7e86-29e5808d@192.168.1.100
+CSeq: 144 REGISTER
+User-Agent: CSCO/7
+Contact: <sip:34903@192.168.1.100:5060>
+Content-Length: 0
+Expires: 3600
+
+
+----------------------------------------
+Mar 6 13:34:49.516 On [6:0]10.102.130.185:5060 sent to 10.102.130.150:5060
+SIP/2.0 200 OK
+Via: SIP/2.0/UDP 192.168.1.100:5060;received=10.102.130.150;branch=z9hG4bK26b7a48d;rport=5060
+From: sip:34903@csp.noklab.net
+To: sip:34903@csp.noklab.net
+Call-ID: 003094c3-a0160002-23aa7e86-29e5808d@192.168.1.100
+CSeq: 144 REGISTER
+Contact: <sip:34903@192.168.1.100:5060>;expires=34
+
+
+----------------------------------------
+Mar 6 13:39:06.100 On 127.0.0.1:5060 received from 127.0.0.1:5070
+INVITE sip:17324201111@135.25.31.10:5060;acme_realm=cpea8500 SIP/2.0
+Via: SIP/2.0/UDP 127.0.0.1:5070;branch=z9hG4bKIWFuqpq6n00c0o1eckfm741;acme_irealm=public;acme_sa=192.168.109.112
+Contact: "B5-2C23-052 Blu"<sip:7323685154@127.0.0.1:5070>
+GenericID: 117318834600008@0008250123d0
+Supported: 100rel
+From: "B5-2C23-052 Blu"<sip:7323685154@127.25.29.135:5060>;tag=0000047b000ce0e0
+To: <sip:17324201111@135.25.31.10:5060>
+Call-ID: 7f00000113ce0000047b000cd140@127.0.0.1
+CSeq: 2 INVITE
+P-Asserted-Identity: "B5-2C23-052 Blu"<sip:7323685154@127.25.29.135:5060>
+Content-Length: 187
+Content-Type: application/sdp
+
+v=0
+o=IWF 10 10 IN IP4 192.168.109.113
+s=H323 Call
+c=IN IP4 192.168.109.113
+t=0 0
+m=audio 29156 RTP/AVP 18 0
+a=rtpmap:18 G729/8000/1
+a=fmtp:18 annexb=yes
+a=rtpmap:0 PCMU/8000/1
+
+----------------------------------------
+Mar 6 13:39:06.104 On 127.0.0.1:5060 sent to 127.0.0.1:5070
+SIP/2.0 100 Trying
+Via: SIP/2.0/UDP 127.0.0.1:5070;branch=z9hG4bKIWFuqpq6n00c0o1eckfm741
+From: "B5-2C23-052 Blu"<sip:7323685154@127.0.0.1:5060>;tag=0000047b000ce0e0
+To: <sip:17324201111@127.0.0.1:5060>
+Call-ID: 7f00000113ce0000047b000cd140@127.0.0.1
+CSeq: 2 INVITE
+
+
+----------------------------------------
+Mar 6 13:39:06.122 On 127.0.0.1:2945 sent to 127.0.0.1:2944
+ 0000: ac 3e fd 01 00 07 89 d9 00 fc 10 00 00 00 02 00 .>..............
+ 0010: 00 00 00 00 f1 21 00 00 00 02 00 6d 30 00 6a 8c .....!.....m0.j.
+ 0020: 00 02 20 01 80 00 06 70 75 62 6c 69 63 83 00 05 .. ....public...
+ 0030: 24 57 45 53 54 84 00 08 63 70 65 61 38 35 30 30 $WEST...cpea8500
+ 0040: 86 00 05 24 45 41 53 54 88 00 01 01 8b 00 01 00 ...$EAST........
+ 0050: 89 00 02 00 02 8a 00 04 00 00 00 00 98 00 04 00 ................
+ 0060: 00 00 00 99 00 04 00 00 00 00 9a 00 04 00 00 00 ................
+ 0070: 00 94 00 04 87 19 1f 0a 96 00 01 01 a7 00 01 00 ................
+ 0080: a8 00 01 00 a9 00 02 00 00 21 00 00 00 02 00 76 .........!.....v
+ 0090: 30 00 73 8c 00 02 10 01 80 00 08 63 70 65 61 38 0.s........cpea8
+ 00a0: 35 30 30 83 00 05 24 45 41 53 54 84 00 06 70 75 500...$EAST...pu
+ 00b0: 62 6c 69 63 86 00 05 24 57 45 53 54 87 00 06 c0 blic...$WEST....
+ 00c0: a8 6d 71 71 e4 88 00 01 01 8b 00 01 01 89 00 02 .mqq............
+ 00d0: 00 02 8a 00 04 00 00 00 00 98 00 04 00 00 00 00 ................
+ 00e0: 99 00 04 00 00 00 00 9a 00 04 00 00 00 00 94 00 ................
+ 00f0: 04 7f 00 00 01 96 00 01 01 a7 00 01 00 a8 00 01 ................
+ 0100: 00 a9 00 02 00 00 ......
+Transaction = 494041 {
+ Context = $ {
+ Add = $ {
+ Flow {
+ index=1E
+ irealm=public
+ idest=$WEST
+ erealm=cpea8500
+ esource=$EAST
+ media=audio
+ trans=UDP
+ mode=off
+ num=2
+ bw=0
+ peakr=0
+ avgr=0
+ mbs=0
+ subscr=135.25.31.10
+ }
+ },
+ Add = $ {
+ Flow {
+ index=1W
+ irealm=cpea8500
+ idest=$EAST
+ erealm=public
+ esource=$WEST
+ edest=192.168.109.113:29156
+ media=audio
+ trans=UDP
+ mode=1way
+ num=2
+ bw=0
+ peakr=0
+ avgr=0
+ mbs=0
+ subscr=127.0.0.1
+ }
+ }
+ }
+}
+----------------------------------------
+Mar 6 13:39:06.127 On 127.0.0.1:5060 sent to 127.0.0.1:5070
+SIP/2.0 181 Call Is Being Forwarded
+Via: SIP/2.0/UDP 127.0.0.1:5070;branch=z9hG4bKIWFuqpq6n00c0o1eckfm741;acme_iwf_2833_preferred=101
+From: "B5-2C23-052 Blu"<sip:7323685154@127.25.29.135:5060>;tag=0000047b000ce0e0
+To: <sip:17324201111@135.25.31.10:5060>
+Call-ID: 7f00000113ce0000047b000cd140@127.0.0.1
+CSeq: 2 INVITE
+
+
+----------------------------------------
+Jun 8 14:35:50.233 UDP[3:0]10.102.131.194:5060 CLOSED
+Jun 8 14:35:50.233 UDP[6:0]10.102.130.185:5060 CLOSED
+File closed.
diff --git a/test/captures/smb300-aes-128-ccm.pcap.gz b/test/captures/smb300-aes-128-ccm.pcap.gz
new file mode 100644
index 00000000..6f0c8d76
--- /dev/null
+++ b/test/captures/smb300-aes-128-ccm.pcap.gz
Binary files differ
diff --git a/test/captures/smb311-aes-128-ccm.pcap.gz b/test/captures/smb311-aes-128-ccm.pcap.gz
new file mode 100644
index 00000000..fa4e1969
--- /dev/null
+++ b/test/captures/smb311-aes-128-ccm.pcap.gz
Binary files differ
diff --git a/test/captures/smb311-aes-128-gcm.pcap.gz b/test/captures/smb311-aes-128-gcm.pcap.gz
new file mode 100644
index 00000000..02e34a90
--- /dev/null
+++ b/test/captures/smb311-aes-128-gcm.pcap.gz
Binary files differ
diff --git a/test/captures/smb311-aes-256-ccm.pcap.gz b/test/captures/smb311-aes-256-ccm.pcap.gz
new file mode 100644
index 00000000..cfc71eb1
--- /dev/null
+++ b/test/captures/smb311-aes-256-ccm.pcap.gz
Binary files differ
diff --git a/test/captures/smb311-aes-256-gcm.pcap.gz b/test/captures/smb311-aes-256-gcm.pcap.gz
new file mode 100644
index 00000000..c7e1b1a3
--- /dev/null
+++ b/test/captures/smb311-aes-256-gcm.pcap.gz
Binary files differ
diff --git a/test/captures/smb311-chained-patternv1-lznt1.pcapng.gz b/test/captures/smb311-chained-patternv1-lznt1.pcapng.gz
new file mode 100644
index 00000000..92e5a044
--- /dev/null
+++ b/test/captures/smb311-chained-patternv1-lznt1.pcapng.gz
Binary files differ
diff --git a/test/captures/smb311-lz77-lz77huff-lznt1.pcap.gz b/test/captures/smb311-lz77-lz77huff-lznt1.pcap.gz
new file mode 100644
index 00000000..f14bfbaf
--- /dev/null
+++ b/test/captures/smb311-lz77-lz77huff-lznt1.pcap.gz
Binary files differ
diff --git a/test/captures/snakeoil-dtls.pcap b/test/captures/snakeoil-dtls.pcap
new file mode 100644
index 00000000..ef5fd211
--- /dev/null
+++ b/test/captures/snakeoil-dtls.pcap
Binary files differ
diff --git a/test/captures/tcp-badsegments.pcap b/test/captures/tcp-badsegments.pcap
new file mode 100644
index 00000000..a48b9164
--- /dev/null
+++ b/test/captures/tcp-badsegments.pcap
Binary files differ
diff --git a/test/captures/tcp-exp-option-tarr.pcap.gz b/test/captures/tcp-exp-option-tarr.pcap.gz
new file mode 100644
index 00000000..12f5ec36
--- /dev/null
+++ b/test/captures/tcp-exp-option-tarr.pcap.gz
Binary files differ
diff --git a/test/captures/text2pcap_hash_eol.txt b/test/captures/text2pcap_hash_eol.txt
new file mode 100644
index 00000000..b7c6d2f6
--- /dev/null
+++ b/test/captures/text2pcap_hash_eol.txt
@@ -0,0 +1,10 @@
+2015-10-01 21:16:24.317453 127.0.0.1 -> 127.0.0.1 UDP 96 Source port: 36887 Destination port: 36888
+
+0000 00 00 00 00 00 00 00 00 00 00 00 00 08 00 45 00 ..............E.
+0010 00 3e 3b f2 40 00 40 11 00 bb 7f 00 00 01 7f 00 .>;.@.@.........
+0020 00 01 90 17 90 18 00 2a 00 00 00 00 01 00 00 01 .......*........
+0030 00 00 00 00 00 00 01 01 01 01 01 01 01 01 20 23 .............. #
+0040 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 01 ................
+0050 01 01 01 01 01 01 01 01 01 01 01 01 2f cc 9c e4 ............/...
+
+#TEXT2PCAP test_directive
diff --git a/test/captures/tftp.pcap b/test/captures/tftp.pcap
new file mode 100644
index 00000000..f88c22a0
--- /dev/null
+++ b/test/captures/tftp.pcap
Binary files differ
diff --git a/test/captures/tls-fragmented-handshakes.pcap.gz b/test/captures/tls-fragmented-handshakes.pcap.gz
new file mode 100644
index 00000000..9f97664d
--- /dev/null
+++ b/test/captures/tls-fragmented-handshakes.pcap.gz
Binary files differ
diff --git a/test/captures/tls-fragmented-over-tcp-segmented.pcapng.gz b/test/captures/tls-fragmented-over-tcp-segmented.pcapng.gz
new file mode 100644
index 00000000..ed9e96fb
--- /dev/null
+++ b/test/captures/tls-fragmented-over-tcp-segmented.pcapng.gz
Binary files differ
diff --git a/test/captures/tls-over-tls.pcapng.gz b/test/captures/tls-over-tls.pcapng.gz
new file mode 100644
index 00000000..1192bc69
--- /dev/null
+++ b/test/captures/tls-over-tls.pcapng.gz
Binary files differ
diff --git a/test/captures/tls-renegotiation.pcap b/test/captures/tls-renegotiation.pcap
new file mode 100644
index 00000000..7d772a58
--- /dev/null
+++ b/test/captures/tls-renegotiation.pcap
Binary files differ
diff --git a/test/captures/tls12-aes128ccm.pcap b/test/captures/tls12-aes128ccm.pcap
new file mode 100644
index 00000000..6f032a70
--- /dev/null
+++ b/test/captures/tls12-aes128ccm.pcap
Binary files differ
diff --git a/test/captures/tls12-aes256gcm.pcap b/test/captures/tls12-aes256gcm.pcap
new file mode 100644
index 00000000..576739c8
--- /dev/null
+++ b/test/captures/tls12-aes256gcm.pcap
Binary files differ
diff --git a/test/captures/tls12-chacha20poly1305.pcap b/test/captures/tls12-chacha20poly1305.pcap
new file mode 100644
index 00000000..1eaa8542
--- /dev/null
+++ b/test/captures/tls12-chacha20poly1305.pcap
Binary files differ
diff --git a/test/captures/tls12-dsb.pcapng b/test/captures/tls12-dsb.pcapng
new file mode 100644
index 00000000..d9bf1ab5
--- /dev/null
+++ b/test/captures/tls12-dsb.pcapng
Binary files differ
diff --git a/test/captures/tls13-20-chacha20poly1305.pcap b/test/captures/tls13-20-chacha20poly1305.pcap
new file mode 100644
index 00000000..da2246d6
--- /dev/null
+++ b/test/captures/tls13-20-chacha20poly1305.pcap
Binary files differ
diff --git a/test/captures/tls13-rfc8446.pcap b/test/captures/tls13-rfc8446.pcap
new file mode 100644
index 00000000..4500f593
--- /dev/null
+++ b/test/captures/tls13-rfc8446.pcap
Binary files differ
diff --git a/test/captures/trunc.pcap b/test/captures/trunc.pcap
new file mode 100644
index 00000000..8dd75ed5
--- /dev/null
+++ b/test/captures/trunc.pcap
Binary files differ
diff --git a/test/captures/udt-dtls.pcapng.gz b/test/captures/udt-dtls.pcapng.gz
new file mode 100644
index 00000000..67750f37
--- /dev/null
+++ b/test/captures/udt-dtls.pcapng.gz
Binary files differ
diff --git a/test/captures/websocket-compressed-fragmented.pcapng.gz b/test/captures/websocket-compressed-fragmented.pcapng.gz
new file mode 100644
index 00000000..001a8915
--- /dev/null
+++ b/test/captures/websocket-compressed-fragmented.pcapng.gz
Binary files differ
diff --git a/test/captures/websocket-compressed.pcapng.gz b/test/captures/websocket-compressed.pcapng.gz
new file mode 100644
index 00000000..8276c066
--- /dev/null
+++ b/test/captures/websocket-compressed.pcapng.gz
Binary files differ
diff --git a/test/captures/websocket-fragmented.pcapng.gz b/test/captures/websocket-fragmented.pcapng.gz
new file mode 100644
index 00000000..99078b53
--- /dev/null
+++ b/test/captures/websocket-fragmented.pcapng.gz
Binary files differ
diff --git a/test/captures/websocket.pcapng.gz b/test/captures/websocket.pcapng.gz
new file mode 100644
index 00000000..b83981fd
--- /dev/null
+++ b/test/captures/websocket.pcapng.gz
Binary files differ
diff --git a/test/captures/wep.pcapng.gz b/test/captures/wep.pcapng.gz
new file mode 100644
index 00000000..e41f688e
--- /dev/null
+++ b/test/captures/wep.pcapng.gz
Binary files differ
diff --git a/test/captures/wireguard-ping-tcp-dsb.pcapng b/test/captures/wireguard-ping-tcp-dsb.pcapng
new file mode 100644
index 00000000..d15790f3
--- /dev/null
+++ b/test/captures/wireguard-ping-tcp-dsb.pcapng
Binary files differ
diff --git a/test/captures/wireguard-ping-tcp.pcap b/test/captures/wireguard-ping-tcp.pcap
new file mode 100644
index 00000000..79255edb
--- /dev/null
+++ b/test/captures/wireguard-ping-tcp.pcap
Binary files differ
diff --git a/test/captures/wireguard-psk.pcap b/test/captures/wireguard-psk.pcap
new file mode 100644
index 00000000..a38088b7
--- /dev/null
+++ b/test/captures/wireguard-psk.pcap
Binary files differ
diff --git a/test/captures/wpa-Induction.pcap.gz b/test/captures/wpa-Induction.pcap.gz
new file mode 100644
index 00000000..27e36703
--- /dev/null
+++ b/test/captures/wpa-Induction.pcap.gz
Binary files differ
diff --git a/test/captures/wpa-ccmp-256.pcapng.gz b/test/captures/wpa-ccmp-256.pcapng.gz
new file mode 100644
index 00000000..d65bb1ee
--- /dev/null
+++ b/test/captures/wpa-ccmp-256.pcapng.gz
Binary files differ
diff --git a/test/captures/wpa-eap-tls.pcap.gz b/test/captures/wpa-eap-tls.pcap.gz
new file mode 100644
index 00000000..307e5fad
--- /dev/null
+++ b/test/captures/wpa-eap-tls.pcap.gz
Binary files differ
diff --git a/test/captures/wpa-gcmp-256.pcapng.gz b/test/captures/wpa-gcmp-256.pcapng.gz
new file mode 100644
index 00000000..83ece8e1
--- /dev/null
+++ b/test/captures/wpa-gcmp-256.pcapng.gz
Binary files differ
diff --git a/test/captures/wpa-gcmp.pcapng.gz b/test/captures/wpa-gcmp.pcapng.gz
new file mode 100644
index 00000000..e3b799b7
--- /dev/null
+++ b/test/captures/wpa-gcmp.pcapng.gz
Binary files differ
diff --git a/test/captures/wpa-test-decode-mgmt.pcap.gz b/test/captures/wpa-test-decode-mgmt.pcap.gz
new file mode 100644
index 00000000..b4e04d21
--- /dev/null
+++ b/test/captures/wpa-test-decode-mgmt.pcap.gz
Binary files differ
diff --git a/test/captures/wpa-test-decode-tdls.pcap.gz b/test/captures/wpa-test-decode-tdls.pcap.gz
new file mode 100644
index 00000000..f166dda3
--- /dev/null
+++ b/test/captures/wpa-test-decode-tdls.pcap.gz
Binary files differ
diff --git a/test/captures/wpa-test-decode.pcap.gz b/test/captures/wpa-test-decode.pcap.gz
new file mode 100644
index 00000000..050f94ec
--- /dev/null
+++ b/test/captures/wpa-test-decode.pcap.gz
Binary files differ
diff --git a/test/captures/wpa1-gtk-rekey.pcapng.gz b/test/captures/wpa1-gtk-rekey.pcapng.gz
new file mode 100644
index 00000000..88e4c067
--- /dev/null
+++ b/test/captures/wpa1-gtk-rekey.pcapng.gz
Binary files differ
diff --git a/test/captures/wpa2-ft-eap.pcapng.gz b/test/captures/wpa2-ft-eap.pcapng.gz
new file mode 100644
index 00000000..5ec811a3
--- /dev/null
+++ b/test/captures/wpa2-ft-eap.pcapng.gz
Binary files differ
diff --git a/test/captures/wpa2-ft-psk.pcapng.gz b/test/captures/wpa2-ft-psk.pcapng.gz
new file mode 100644
index 00000000..15793144
--- /dev/null
+++ b/test/captures/wpa2-ft-psk.pcapng.gz
Binary files differ
diff --git a/test/captures/wpa2-psk-mfp.pcapng.gz b/test/captures/wpa2-psk-mfp.pcapng.gz
new file mode 100644
index 00000000..da445aec
--- /dev/null
+++ b/test/captures/wpa2-psk-mfp.pcapng.gz
Binary files differ
diff --git a/test/captures/wpa3-sae.pcapng.gz b/test/captures/wpa3-sae.pcapng.gz
new file mode 100644
index 00000000..75582706
--- /dev/null
+++ b/test/captures/wpa3-sae.pcapng.gz
Binary files differ
diff --git a/test/captures/wpa3-suiteb-192.pcapng.gz b/test/captures/wpa3-suiteb-192.pcapng.gz
new file mode 100644
index 00000000..663dee91
--- /dev/null
+++ b/test/captures/wpa3-suiteb-192.pcapng.gz
Binary files differ
diff --git a/test/captures/wpa_ptk_extended_key_id.pcap.gz b/test/captures/wpa_ptk_extended_key_id.pcap.gz
new file mode 100644
index 00000000..c093018f
--- /dev/null
+++ b/test/captures/wpa_ptk_extended_key_id.pcap.gz
Binary files differ