pcapio.h

Go to the documentation of this file.

 
#pragma once
 
#include <wsutil/file_compressed.h>
#include <wsutil/process_lookup.h>
 
/* Writing pcap files */

extern bool
libpcap_write_file_header(ws_cwstream* pfile, int linktype, int snaplen,
                          bool ts_nsecs, uint64_t *bytes_written, int *err);

extern bool
libpcap_write_packet(ws_cwstream* pfile,
                     time_t sec, uint32_t usec,
                     uint32_t caplen, uint32_t len,
                     const uint8_t *pd,
                     uint64_t *bytes_written, int *err);
 
/* Writing pcapng files */

extern bool
pcapng_write_block(ws_cwstream* pfile,
                   const uint8_t *data,
                   uint32_t block_total_length,
                   uint64_t *bytes_written,
                   int *err);

extern bool
pcapng_write_section_header_block(ws_cwstream* pfile,  
                                  GPtrArray *comments,  
                                  const char *hw,       
                                  const char *os,       
                                  const char *appname,  
                                  uint64_t section_length, 
                                  uint64_t *bytes_written, 
                                  int *err 
                                  );

extern bool
pcapng_write_interface_description_block(ws_cwstream* pfile,
                                         const char *comment,  /* OPT_COMMENT           1 */
                                         const char *name,     /* IDB_NAME              2 */
                                         const char *descr,    /* IDB_DESCRIPTION       3 */
                                         const char *filter,   /* IDB_FILTER           11 */
                                         const char *os,       /* IDB_OS               12 */
                                         const char *hardware, /* IDB_HARDWARE         15 */
                                         int link_type,
                                         int snap_len,
                                         uint64_t *bytes_written,
                                         uint64_t if_speed,     /* IDB_IF_SPEED          8 */
                                         uint8_t tsresol,       /* IDB_TSRESOL           9 */
                                         int *err);

extern bool
pcapng_write_interface_statistics_block(ws_cwstream* pfile,
                                        uint32_t interface_id,
                                        uint64_t *bytes_written,
                                        const char *comment,   /* OPT_COMMENT           1 */
                                        uint64_t isb_starttime, /* ISB_STARTTIME         2 */
                                        uint64_t isb_endtime,   /* ISB_ENDTIME           3 */
                                        uint64_t isb_ifrecv,    /* ISB_IFRECV            4 */
                                        uint64_t isb_ifdrop,    /* ISB_IFDROP            5 */
                                        int *err);

extern bool
pcapng_write_enhanced_packet_block(ws_cwstream* pfile,
                                   const char *comment,
                                   time_t sec, uint32_t usec,
                                   uint32_t caplen, uint32_t len,
                                   uint32_t interface_id,
                                   unsigned ts_mul,
                                   const uint8_t *pd,
                                   uint32_t flags,
                                   const uint32_t *process_ids,
                                   unsigned num_process_ids,
                                   uint64_t *bytes_written,
                                   int *err);

extern bool
pcapng_write_process_information_block(ws_cwstream* pfile,
                                       const ws_process_info_t *process,
                                       uint64_t *bytes_written,
                                       int *err);