libpcap.h

Go to the documentation of this file.

 
#ifndef __W_LIBPCAP_H__
#define __W_LIBPCAP_H__
 
#include <wiretap/wtap.h>
 
/* Magic numbers in "libpcap" files.
 
   "libpcap" file records are written in the byte order of the host that
   writes them, and the reader is expected to fix this up.
 
   PCAP_MAGIC is the magic number, in host byte order; PCAP_SWAPPED_MAGIC
   is a byte-swapped version of that.
 
   PCAP_MODIFIED_MAGIC is for Alexey Kuznetsov's modified "libpcap"
   format, as generated on Linux systems that have a "libpcap" with
   his patches, at
 
    http://ftp.sunet.se/pub/os/Linux/ip-routing/lbl-tools/
 
   applied; PCAP_SWAPPED_MODIFIED_MAGIC is the byte-swapped version.
 
   PCAP_IXIAMODIFIED_MAGIC is used by IXIA's lcap file format. It adds
   a length field at the end of the file header (size of all records).
   PCAP_SWAPPED_IXIAMODIFIED_MAGIC is the byte-swapped version.
 
   PCAP_NSEC_MAGIC is for Ulf Lamping's modified "libpcap" format,
   which uses the same common file format as PCAP_MAGIC, but the
   timestamps are saved in nanosecond resolution instead of microseconds.
   PCAP_SWAPPED_NSEC_MAGIC is a byte-swapped version of that. */
#define PCAP_MAGIC          0xa1b2c3d4
#define PCAP_SWAPPED_MAGIC      0xd4c3b2a1
#define PCAP_MODIFIED_MAGIC     0xa1b2cd34
#define PCAP_SWAPPED_MODIFIED_MAGIC 0x34cdb2a1
#define PCAP_IXIAHW_MAGIC       0x1c0001ac
#define PCAP_SWAPPED_IXIAHW_MAGIC   0xac01001c
#define PCAP_IXIASW_MAGIC       0x1c0001ab
#define PCAP_SWAPPED_IXIASW_MAGIC   0xab01001c
#define PCAP_NSEC_MAGIC         0xa1b23c4d
#define PCAP_SWAPPED_NSEC_MAGIC     0x4d3cb2a1

struct pcap_hdr {
    uint16_t version_major; 
    uint16_t version_minor; 
    int32_t  thiszone;      
    uint32_t sigfigs;       
    uint32_t snaplen;       
    uint32_t network;       
};

struct pcaprec_hdr {
    uint32_t ts_sec;   
    uint32_t ts_usec;  
    uint32_t incl_len; 
    uint32_t orig_len; 
};

struct pcaprec_modified_hdr {
    struct pcaprec_hdr hdr; 
    uint32_t ifindex;       
    uint16_t protocol;      
    uint8_t  pkt_type;      
    uint8_t  pad;           
};

struct pcaprec_ss990915_hdr {
    struct pcaprec_hdr hdr; 
    uint32_t ifindex;       
    uint16_t protocol;      
    uint8_t  pkt_type;      
    uint8_t  cpu1;          
    uint8_t  cpu2;          
    uint8_t  pad[3];        
};

struct pcaprec_nokia_hdr {
    struct pcaprec_hdr hdr; 
    uint8_t stuff[4];       
};

wtap_open_return_val libpcap_open(wtap *wth, int *err, char **err_info);
 
#endif