2 * capture_file definition & GUI-independent manipulation
6 * Wireshark - Network traffic analyzer
7 * By Gerald Combs <gerald@wireshark.org>
8 * Copyright 1998 Gerald Combs
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License
12 * as published by the Free Software Foundation; either version 2
13 * of the License, or (at your option) any later version.
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
20 * You should have received a copy of the GNU General Public License
21 * along with this program; if not, write to the Free Software
22 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
28 /* Current state of file. */
30 FILE_CLOSED, /* No file open */
31 FILE_READ_IN_PROGRESS, /* Reading a file we've opened */
32 FILE_READ_ABORTED, /* Read aborted by user */
33 FILE_READ_DONE /* Read completed */
36 /* Character set for text search. */
38 SCS_ASCII_AND_UNICODE,
41 /* add EBCDIC when it's implemented */
44 typedef struct _capture_file {
45 file_state state; /* Current state of capture file */
46 gchar *filename; /* Name of capture file */
47 gboolean is_tempfile; /* Is capture file a temporary file? */
48 gboolean user_saved;/* If capture file is temporary, has it been saved by user yet? */
49 gint64 f_datalen; /* Size of capture file data (uncompressed) */
50 guint16 cd_t; /* File type of capture file */
51 int lnk_t; /* Link-layer type with which to save capture */
52 guint32 vers; /* Version. For tcpdump minor is appended to major */
53 int count; /* Total number of frames */
54 int displayed_count; /* Number of displayed frames */
55 int marked_count; /* Number of marked frames */
56 gboolean drops_known; /* TRUE if we know how many packets were dropped */
57 guint32 drops; /* Dropped packets */
58 nstime_t elapsed_time;/* Elapsed time */
59 gboolean has_snap; /* TRUE if maximum capture packet length is known */
60 int snap; /* Maximum captured packet length */
61 wtap *wth; /* Wiretap session */
62 dfilter_t *rfcode; /* Compiled read (display) filter program */
63 gchar *dfilter; /* Display filter string */
65 gchar *sfilter; /* Search filter string */
66 gboolean sbackward; /* TRUE if search is backward, FALSE if forward */
67 gboolean hex; /* TRUE is raw data search is being performed */
68 gboolean string; /* TRUE is text search is being performed */
69 guint32 search_pos; /* Position of last character found in search */
70 search_charset_t scs_type; /* Character set for text search */
71 gboolean case_type; /* TRUE if case-insensitive text search */
72 gboolean decode_data; /* TRUE if searching protocol tree text */
73 gboolean summary_data; /* TRUE if searching Info column text */
75 union wtap_pseudo_header pseudo_header; /* Packet pseudo_header */
76 guint8 pd[WTAP_MAX_PACKET_SIZE]; /* Packet data */
77 GMemChunk *plist_chunk; /* Memory chunk for frame_data structures */
78 frame_data *plist; /* Packet list */
79 frame_data *plist_end; /* Last packet in list */
80 frame_data *first_displayed; /* First frame displayed */
81 frame_data *last_displayed; /* Last frame displayed */
82 column_info cinfo; /* Column formatting information */
83 frame_data *current_frame; /* Frame data for current frame */
84 epan_dissect_t *edt; /* Protocol dissection for currently selected packet */
85 field_info *finfo_selected; /* Field info for currently selected field */
86 struct ph_stats_s* pstats; /* accumulated stats (reset on redisplay in GUI)*/
89 void init_cap_file(capture_file *);