[JarryShaw]

Please follow the guide below

• Searched for similar pull requests
• Followed the coding style (make pylint, make mypy, make isort) — not run; comments and docstrings only
• make test passes, and a test case covers the change — tests/project only (389 passed, 1 skipped)
• Added a changelog entry — N/A, added centrally

What is the purpose of your pull request?

• docs — documentation only

---

Description of your pull request and other information

Part of #1103: the foundation-docs slice of the post-wave prose sweep.

• Extractor._open_output: only the PCAP engine passes header fields; PCAP-NG passes none. run() and PCAPNG.run() now list the PCAP-output-on-PCAP-NG FormatError (probed).
• _ofile comment, PCAPIO **kwargs, and the JSON-key NOTE (\ escapes, " closes) brought in line with the code; timed context cut from all.py.
• Docs: _open_output/_flag_o documented on the extraction page; the engine gap table gains the PCAP-output rows; the ext.rst PoC engine calls record_header as the real Scapy engine does.
• pep.rst, process.rst, httpv2.rst, ospf.rst, tcp.rst checked against origin/main: no change needed.

Sphinx -b dummy -n, fresh dirs, warnings on these files: main 117, branch 116, none new.

File	AST equal
pcapkit/all.py	True
pcapkit/dumpkit/common.py	True
pcapkit/dumpkit/pcap.py	True
pcapkit/foundation/engines/pcapng.py	True
pcapkit/foundation/extraction.py	True

[github-actions]

Coverage: 88.89% (unit tier, Python 3.14, 8dd8106a2, Unit Tests run success)

Package	Statements	Missed	Branches	Partial	Cover
pcapkit (top level)	104	4	20	4	93.55%
pcapkit/const	18757	1034	2342	845	90.24%
pcapkit/corekit	1878	91	580	22	94.34%
pcapkit/dumpkit	142	0	42	0	100.00%
pcapkit/foundation	2442	102	852	39	94.38%
pcapkit/interface	112	7	40	5	92.11%
pcapkit/protocols	15707	188	3974	163	98.19%
pcapkit/toolkit	487	65	144	1	85.42%
pcapkit/utilities	429	4	122	4	98.55%
pcapkit/vendor	4409	2359	1006	158	42.84%

Per-file detail: the coverage-html artifact of this run.

[JarryShaw]

Cross-review verdict on 8dd8106a2: GOOD TO GO (ran on Sonnet; author Opus). Labelled review: good-to-go.

• _open_output: a spy on a real Extractor shows the default engine on PCAP input passing all six header fields, and PCAP-NG passing none. dpkt and scapy reach the same call through record_header().
• run() Raises: PCAP output from a PCAP-NG input raises FormatError. dpkt and scapy fall back to json with a FormatWarning on either input. Both the docstring and the gap-table rows match this.
• _ofile comment: _ofile holds the writer class, then a DictDumper instance, or a functools.partial under split mode.
• JSON note: against raw dictdumper.JSON, a " breaks the parse and a \ escapes the next character. make_dumper round-trips all three cases.
• ext.rst: the call matches scapy.py:178, ext.record_header() with no arguments, which I re-read myself.
• Docs build: the new directives resolve, and a -n build emits no warning for them. _flag_o sits beside siblings that are already documented.
• Code unchanged: the AST is identical to base for all five .py files once docstrings are blanked. The PR's True should be read as meaning docstring-stripped.
• all.py: the reason for fix(all): pcapkit.all.__all__ omits names its packages export #1136's ruling is kept; only the timed context is cut.
• Tests: tests/project, seven extraction modules, the engine runtime tests and five dumpkit modules all pass.