/* file.h
* Definitions for file structures and routines
*
- * $Id: file.h,v 1.12 1999/04/06 16:24:49 gram Exp $
+ * $Id: file.h,v 1.78 2000/10/20 04:26:38 gram Exp $
*
* Ethereal - Network traffic analyzer
* By Gerald Combs <gerald@zing.org>
#ifndef __FILE_H__
#define __FILE_H__
+#ifdef HAVE_SYS_TYPES_H
#include <sys/types.h>
-#include <sys/time.h>
-
-#ifdef WITH_WIRETAP
- #include <wtap.h>
- #include <pcap.h>
-#else
- #include <pcap.h>
-
- /* Data file formats */
- #define CD_UNKNOWN 0
- #define CD_WIRE 1
- #define CD_SNOOP 2
- #define CD_PCAP_BE 3
- #define CD_PCAP_LE 4
- #define CD_NA_UNCOMPR 5
-
- /* Data file magic info */
- #define SNOOP_MAGIC_1 0x736e6f6f /* 'snoop' in ASCII */
- #define SNOOP_MAGIC_2 0x70000000
- #define PCAP_MAGIC 0xa1b2c3d4
-
- /* Data file format versions we can handle */
- #define SNOOP_MIN_VERSION 2
- #define SNOOP_MAX_VERSION 2
-
- /* Link types (removed in favor of the DLT_* defines from bpf.h */
#endif
+#include "wiretap/wtap.h"
+
+#ifdef HAVE_LIBPCAP
+#include <pcap.h>
+#endif
+
+#include "dfilter.h"
+#include "print.h"
+
+#include <errno.h>
+
+#include <epan.h>
+
+#ifdef HAVE_LIBZ
+#include "zlib.h"
+#define FILE_T gzFile
+#define file_open gzopen
+#define filed_open gzdopen
+#define file_close gzclose
+#else /* No zLib */
+#define FILE_T FILE *
+#define file_open fopen
+#define filed_open fdopen
+#define file_close fclose
+#endif /* HAVE_LIBZ */
+
typedef struct bpf_program bpf_prog;
+/* Current state of file. */
+typedef enum {
+ FILE_CLOSED, /* No file open */
+ FILE_READ_IN_PROGRESS, /* Reading a file we've opened */
+ FILE_READ_ABORTED, /* Read aborted by user */
+ FILE_READ_DONE /* Read completed */
+} file_state;
+
typedef struct _capture_file {
- FILE *fh; /* Capture file */
- gchar *filename; /* filename */
- long f_len; /* File length */
-#ifndef WITH_WIRETAP
- int swap; /* Swap data bytes? */
-#endif
- guint16 cd_t; /* Capture data type */
- guint32 vers; /* Version. For tcpdump minor is appended to major */
-#ifndef WITH_WIRETAP
- guint32 lnk_t; /* Network link type */
+ file_state state; /* Current state of capture file */
+ int filed; /* File descriptor of capture file */
+ gchar *filename; /* Name of capture file */
+ gboolean is_tempfile; /* Is capture file a temporary file? */
+ gboolean user_saved;/* If capture file is temporary, has it been saved by user yet? */
+ long f_len; /* Length of capture file */
+ guint16 cd_t; /* File type of capture file */
+ int lnk_t; /* Link-layer type with which to save capture */
+ guint32 vers; /* Version. For tcpdump minor is appended to major */
+ guint32 count; /* Packet count */
+ guint32 drops; /* Dropped packets */
+ guint32 esec; /* Elapsed seconds */
+ guint32 eusec; /* Elapsed microseconds */
+ guint32 snap; /* Captured packet length */
+ long progbar_quantum; /* Number of bytes read per progress bar update */
+ long progbar_nextstep; /* Next point at which to update progress bar */
+ gchar *iface; /* Interface */
+ gchar *save_file; /* File that user saved capture to */
+ int save_file_fd; /* File descriptor for saved file */
+ wtap *wth; /* Wiretap session */
+ dfilter *rfcode; /* Compiled read filter program */
+ gchar *dfilter; /* Display filter string */
+ struct _colfilter *colors; /* Colors for colorizing packet window */
+ dfilter *dfcode; /* Compiled display filter program */
+#ifdef HAVE_LIBPCAP
+ gchar *cfilter; /* Capture filter string */
+ bpf_prog fcode; /* Compiled capture filter program */
#endif
- guint32 count; /* Packet count */
- guint32 drops; /* Dropped packets */
- guint32 esec; /* Elapsed seconds */
- guint32 eusec; /* Elapsed microseconds */
- guint32 snap; /* Captured packet length */
- gchar *iface; /* Interface */
- gchar *save_file; /* File that user saved capture to */
- gint user_saved;/* Was capture file saved by user yet? */
-#ifdef WITH_WIRETAP
- wtap *wth; /* Wiretap session */
-#else
- pcap_t *pfh; /* Pcap session */
-#endif
- gchar *dfilter; /* Display filter string */
- gchar *cfilter; /* Capture filter string */
- bpf_prog fcode; /* Compiled filter program */
- /* XXX - I'm cheating for now. I'll hardcode 65536 here until I re-arrange
- * more header files so that ethereal.h is split up into two files, a
- * generic header and a gtk+-speficic header (or the gtk+ definitions are
- * moved to different header files) --gilbert
- */
- /*guint8 pd[MAX_PACKET_SIZE];*/ /* Packet data */
- guint8 pd[65536]; /* Packet data */
- GList *plist; /* Packet list */
- frame_data *cur; /* Current list item */
+ gchar *sfilter; /* Search filter string */
+ gboolean sbackward; /* TRUE if search is backward, FALSE if forward */
+ union wtap_pseudo_header pseudo_header; /* Packet pseudo_header */
+ guint8 pd[WTAP_MAX_PACKET_SIZE]; /* Packet data */
+ GMemChunk *plist_chunk; /* Memory chunk for frame_data structures */
+ frame_data *plist; /* Packet list */
+ frame_data *plist_end; /* Last packet in list */
+ frame_data *first_displayed; /* First frame displayed */
+ frame_data *last_displayed; /* Last frame displayed */
column_info cinfo; /* Column formatting information */
+ frame_data *current_frame; /* Frame data for current frame */
+ proto_tree *protocol_tree; /* Protocol tree for currently selected packet */
+ epan_dissect_t *edt; /* Protocol dissection fo rcurrently selected packet */
+ FILE *print_fh; /* File we're printing to */
} capture_file;
-/* Taken from RFC 1761 */
-
-#ifndef WITH_WIRETAP
-typedef struct _snoop_file_hdr {
- guint32 magic1;
- guint32 magic2;
- guint32 vers;
- guint32 s_lnk_t;
-} snoop_file_hdr;
-
-typedef struct _snoop_frame_hdr {
- guint32 orig_len;
- guint32 inc_len;
- guint32 pr_len;
- guint32 drops;
- guint32 secs;
- guint32 usecs;
-} snoop_frame_hdr;
-#endif
+/* Return values from "read_cap_file()", "continue_tail_cap_file()",
+ and "finish_tail_cap_file()". */
+typedef enum {
+ READ_SUCCESS, /* read succeeded */
+ READ_ERROR, /* read got an error */
+ READ_ABORTED /* read aborted by user */
+} read_status_t;
-int open_cap_file(char *, capture_file *);
-void close_cap_file(capture_file *, void *, guint);
-int load_cap_file(char *, capture_file *);
+int open_cap_file(char *, gboolean, capture_file *);
+void close_cap_file(capture_file *, void *);
+read_status_t read_cap_file(capture_file *, int *);
+int start_tail_cap_file(char *, gboolean, capture_file *);
+read_status_t continue_tail_cap_file(capture_file *, int, int *);
+read_status_t finish_tail_cap_file(capture_file *, int *);
/* size_t read_frame_header(capture_file *); */
+int save_cap_file(char *, capture_file *, gboolean, gboolean, guint);
+
+int filter_packets(capture_file *cf, gchar *dfilter);
+void colorize_packets(capture_file *);
+void redissect_packets(capture_file *cf);
+int print_packets(capture_file *cf, print_args_t *print_args);
+void change_time_formats(capture_file *);
+gboolean find_packet(capture_file *cf, dfilter *sfcode);
+
+typedef enum {
+ FOUND_FRAME, /* found the frame */
+ NO_SUCH_FRAME, /* no frame with that number */
+ FRAME_NOT_DISPLAYED /* frame with that number isn't displayed */
+} goto_result_t;
+goto_result_t goto_frame(capture_file *cf, guint fnumber);
+
+void select_packet(capture_file *, int);
+void unselect_packet(capture_file *);
+
+/* Moves or copies a file. Returns 0 on failure, 1 on success */
+int file_mv(char *from, char *to);
+
+/* Copies a file. Returns 0 on failure, 1 on success */
+int file_cp(char *from, char *to);
+
+char *file_open_error_message(int, gboolean);
+char *file_read_error_message(int);
+char *file_write_error_message(int);
#endif /* file.h */