5 * Wireshark Protocol Analyzer Library
7 * Copyright (c) 2001 by Gerald Combs <gerald@wireshark.org>
9 * This program is free software; you can redistribute it and/or
10 * modify it under the terms of the GNU General Public License
11 * as published by the Free Software Foundation; either version 2
12 * of the License, or (at your option) any later version.
14 * This program is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 * GNU General Public License for more details.
19 * You should have received a copy of the GNU General Public License
20 * along with this program; if not, write to the Free Software
21 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
29 #endif /* __cplusplus */
32 #include "frame_data.h"
33 #include "column_info.h"
35 #include "ws_symbol_export.h"
37 typedef struct _epan_dissect_t epan_dissect_t;
39 #include "dfilter/dfilter.h"
42 @mainpage Wireshark EPAN the packet analyzing engine. Source code can be found in the epan directory
54 Ethereal Packet ANalyzer (XXX - is this correct?) the packet analyzing engine. Source code can be found in the epan directory.
56 Protocol-Tree - Keep data of the capture file protocol information.
58 Dissectors - The various protocol dissectors in epan/dissectors.
60 Plugins - Some of the protocol dissectors are implemented as plugins. Source code can be found at plugins.
62 Display-Filters - the display filter engine at epan/dfilter
66 Ref2 for further edits - delete when done
69 This document describes the data structures and the functions exported by the CACE Technologies AirPcap library.
70 The AirPcap library provides low-level access to the AirPcap driver including advanced capabilities such as channel setting,
71 link type control and WEP configuration.<br>
72 This manual includes the following sections:
74 \note throughout this documentation, \e device refers to a physical USB AirPcap device, while \e adapter is an open API
75 instance. Most of the AirPcap API operations are adapter-specific but some of them, like setting the channel, are
76 per-device and will be reflected on all the open adapters. These functions will have "Device" in their name, e.g.
77 AirpcapSetDeviceChannel().
85 /** init the whole epan module, this is used to be called only once in a program */
87 void epan_init(void (*register_all_protocols_func)(register_cb cb, gpointer client_data),
88 void (*register_all_handoffs_func)(register_cb cb, gpointer client_data),
91 void (*report_failure_fcn_p)(const char *, va_list),
92 void (*report_open_failure_fcn_p)(const char *, int, gboolean),
93 void (*report_read_failure_fcn_p)(const char *, int),
94 void (*report_write_failure_fcn_p)(const char *, int));
96 /** cleanup the whole epan module, this is used to be called only once in a program */
98 void epan_cleanup(void);
101 * Initialize the table of conversations. Conversations are identified by
102 * their endpoints; they are used for protocols such as IP, TCP, and UDP,
103 * where packets contain endpoint information but don't contain a single
104 * value indicating to which flow the packet belongs.
106 void epan_conversation_init(void);
107 void epan_conversation_cleanup(void);
110 * Initialize the table of circuits. Circuits are identified by a
111 * circuit ID; they are used for protocols where packets *do* contain
112 * a circuit ID value indicating to which flow the packet belongs.
114 * We might want to make a superclass for both endpoint-specified
115 * conversations and circuit ID-specified circuits, so we can attach
116 * information either to a circuit or a conversation with common
119 void epan_circuit_init(void);
120 void epan_circuit_cleanup(void);
122 /** A client will create one epan_t for an entire dissection session.
123 * A single epan_t will be used to analyze the entire sequence of packets,
124 * sequentially, in a single session. A session corresponds to a single
125 * packet trace file. The reaons epan_t exists is that some packets in
126 * some protocols cannot be decoded without knowledge of previous packets.
127 * This inter-packet "state" is stored in the epan_t.
129 /* XXX - NOTE: epan_t, epan_new and epan_free are currently unused! */
130 typedef struct epan_session epan_t;
138 WS_DLL_PUBLIC const gchar*
139 epan_get_version(void);
141 /** initialize an existing single packet dissection */
144 epan_dissect_init(epan_dissect_t *edt, const gboolean create_proto_tree, const gboolean proto_tree_visible);
146 /** get a new single packet dissection
147 * should be freed using epan_dissect_free() after packet dissection completed
151 epan_dissect_new(const gboolean create_proto_tree, const gboolean proto_tree_visible);
153 /** Indicate whether we should fake protocols or not */
156 epan_dissect_fake_protocols(epan_dissect_t *edt, const gboolean fake_protocols);
158 /** run a single packet dissection */
161 epan_dissect_run(epan_dissect_t *edt, struct wtap_pkthdr *phdr,
162 const guint8* data, frame_data *fd, column_info *cinfo);
166 epan_dissect_run_with_taps(epan_dissect_t *edt, struct wtap_pkthdr *phdr,
167 const guint8* data, frame_data *fd, column_info *cinfo);
169 /** Prime a proto_tree using the fields/protocols used in a dfilter. */
172 epan_dissect_prime_dfilter(epan_dissect_t *edt, const dfilter_t *dfcode);
174 /** fill the dissect run output into the packet list columns */
177 epan_dissect_fill_in_columns(epan_dissect_t *edt, const gboolean fill_col_exprs, const gboolean fill_fd_colums);
179 /** releases resources attached to the packet dissection. DOES NOT free the actual pointer */
182 epan_dissect_cleanup(epan_dissect_t* edt);
184 /** free a single packet dissection */
187 epan_dissect_free(epan_dissect_t* edt);
189 /** Sets custom column */
191 epan_custom_set(epan_dissect_t *edt, int id, gint occurrence,
192 gchar *result, gchar *expr, const int size);
195 * Get compile-time information for libraries used by libwireshark.
199 epan_get_compiled_version_info(GString *str);
202 * Get runtime information for libraries used by libwireshark.
206 epan_get_runtime_version_info(GString *str);
210 #endif /* __cplusplus */
212 #endif /* __EPAN_H__ */