/* file.h
* Definitions for file structures and routines
*
- * $Id: file.h,v 1.5 1998/11/12 00:06:21 gram Exp $
+ * $Id: file.h,v 1.92 2002/02/24 09:25:34 guy Exp $
*
* Ethereal - Network traffic analyzer
- * By Gerald Combs <gerald@zing.org>
+ * By Gerald Combs <gerald@ethereal.com>
* Copyright 1998 Gerald Combs
- *
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
#ifndef __FILE_H__
#define __FILE_H__
+#ifdef HAVE_SYS_TYPES_H
#include <sys/types.h>
-#include <sys/time.h>
-
-#ifdef WITH_WIRETAP
- #include <wtap.h>
-#else
- #include <pcap.h>
#endif
-/* Data file formats */
-#define CD_UNKNOWN 0
-#define CD_WIRE 1
-#define CD_SNOOP 2
-#define CD_PCAP_BE 3
-#define CD_PCAP_LE 4
-#define CD_NA_UNCOMPR 5
-
-/* Data file magic info */
-#define SNOOP_MAGIC_1 0x736e6f6f /* 'snoop' in ASCII */
-#define SNOOP_MAGIC_2 0x70000000
-#define PCAP_MAGIC 0xa1b2c3d4
-
-/* Data file format versions we can handle */
-#define SNOOP_MIN_VERSION 2
-#define SNOOP_MAX_VERSION 2
-
-/* Link types (removed in favor of the DLT_* defines from bpf.h */
+#include "wiretap/wtap.h"
+#include <epan/dfilter/dfilter.h>
+#include "print.h"
+#include <errno.h>
+#include <epan/epan.h>
-typedef struct bpf_program bpf_prog;
+/* Current state of file. */
+typedef enum {
+ FILE_CLOSED, /* No file open */
+ FILE_READ_IN_PROGRESS, /* Reading a file we've opened */
+ FILE_READ_ABORTED, /* Read aborted by user */
+ FILE_READ_DONE /* Read completed */
+} file_state;
typedef struct _capture_file {
- FILE *fh; /* Capture file */
- gchar *filename; /* filename */
- long f_len; /* File length */
- int swap; /* Swap data bytes? */
- guint16 cd_t; /* Capture data type */
- guint32 vers; /* Version. For tcpdump minor is appended to major */
- guint32 lnk_t; /* Network link type */
- guint32 count; /* Packet count */
- guint32 drops; /* Dropped packets */
- guint32 esec; /* Elapsed seconds */
- guint32 eusec; /* Elapsed microseconds */
- guint32 snap; /* Captured packet length */
- gchar *iface; /* Interface */
- gchar *save_file; /* File to write capture data */
-#ifdef WITH_WIRETAP
- wtap *wth; /* Wiretap session */
-#else
- pcap_t *pfh; /* Pcap session */
+ file_state state; /* Current state of capture file */
+ int filed; /* File descriptor of capture file */
+ gchar *filename; /* Name of capture file */
+ gboolean is_tempfile; /* Is capture file a temporary file? */
+ gboolean user_saved;/* If capture file is temporary, has it been saved by user yet? */
+ long f_len; /* Length of capture file */
+ guint16 cd_t; /* File type of capture file */
+ int lnk_t; /* Link-layer type with which to save capture */
+ guint32 vers; /* Version. For tcpdump minor is appended to major */
+ int count; /* Total number of frames */
+ int marked_count; /* Number of marked frames */
+ gboolean drops_known; /* TRUE if we know how many packets were dropped */
+ guint32 drops; /* Dropped packets */
+ guint32 esec; /* Elapsed seconds */
+ guint32 eusec; /* Elapsed microseconds */
+ gboolean has_snap; /* TRUE if maximum capture packet length is known */
+ int snap; /* Maximum captured packet length */
+ long progbar_quantum; /* Number of bytes read per progress bar update */
+ long progbar_nextstep; /* Next point at which to update progress bar */
+ gchar *iface; /* Interface */
+ gchar *save_file; /* File that user saved capture to */
+ int save_file_fd; /* File descriptor for saved file */
+ wtap *wth; /* Wiretap session */
+ dfilter_t *rfcode; /* Compiled read filter program */
+ gchar *dfilter; /* Display filter string */
+ struct _colfilter *colors; /* Colors for colorizing packet window */
+ dfilter_t *dfcode; /* Compiled display filter program */
+#ifdef HAVE_LIBPCAP
+ gchar *cfilter; /* Capture filter string */
#endif
- gchar *dfilter; /* Display filter string */
- gchar *cfilter; /* Capture filter string */
- bpf_prog fcode; /* Compiled filter program */
- guint8 pd[4096]; /* Packet data */
- GList *plist; /* Packet list */
- frame_data *cur; /* Current list item */
+ gchar *sfilter; /* Search filter string */
+ gboolean sbackward; /* TRUE if search is backward, FALSE if forward */
+ union wtap_pseudo_header pseudo_header; /* Packet pseudo_header */
+ guint8 pd[WTAP_MAX_PACKET_SIZE]; /* Packet data */
+ GMemChunk *plist_chunk; /* Memory chunk for frame_data structures */
+ frame_data *plist; /* Packet list */
+ frame_data *plist_end; /* Last packet in list */
+ frame_data *first_displayed; /* First frame displayed */
+ frame_data *last_displayed; /* Last frame displayed */
+ column_info cinfo; /* Column formatting information */
+ frame_data *current_frame; /* Frame data for current frame */
+ epan_dissect_t *edt; /* Protocol dissection fo rcurrently selected packet */
+ FILE *print_fh; /* File we're printing to */
} capture_file;
-/* Taken from RFC 1761 */
-
-typedef struct _snoop_file_hdr {
- guint32 magic1;
- guint32 magic2;
- guint32 vers;
- guint32 s_lnk_t;
-} snoop_file_hdr;
-
-typedef struct _snoop_frame_hdr {
- guint32 orig_len;
- guint32 inc_len;
- guint32 pr_len;
- guint32 drops;
- guint32 secs;
- guint32 usecs;
-} snoop_frame_hdr;
-
-int open_cap_file(char *, capture_file *);
-void close_cap_file(capture_file *, GtkWidget *, guint);
-int load_cap_file(char *, capture_file *);
-#ifdef WITH_WIRETAP
-void wtap_dispatch_cb(u_char *, const struct wtap_pkthdr *, const u_char *);
-#else
-void pcap_dispatch_cb(u_char *, const struct pcap_pkthdr *, const u_char *);
-#endif
+/* Return values from "read_cap_file()", "continue_tail_cap_file()",
+ and "finish_tail_cap_file()". */
+typedef enum {
+ READ_SUCCESS, /* read succeeded */
+ READ_ERROR, /* read got an error */
+ READ_ABORTED /* read aborted by user */
+} read_status_t;
+
+int open_cap_file(char *, gboolean, capture_file *);
+void close_cap_file(capture_file *);
+read_status_t read_cap_file(capture_file *, int *);
+int start_tail_cap_file(char *, gboolean, capture_file *);
+read_status_t continue_tail_cap_file(capture_file *, int, int *);
+read_status_t finish_tail_cap_file(capture_file *, int *);
/* size_t read_frame_header(capture_file *); */
+int save_cap_file(char *, capture_file *, gboolean, gboolean, guint);
+
+int filter_packets(capture_file *cf, gchar *dfilter);
+void colorize_packets(capture_file *);
+void redissect_packets(capture_file *cf);
+int print_packets(capture_file *cf, print_args_t *print_args);
+void change_time_formats(capture_file *);
+gboolean find_packet(capture_file *cf, dfilter_t *sfcode);
+
+typedef enum {
+ FOUND_FRAME, /* found the frame */
+ NO_SUCH_FRAME, /* no frame with that number */
+ FRAME_NOT_DISPLAYED /* frame with that number isn't displayed */
+} goto_result_t;
+goto_result_t goto_frame(capture_file *cf, guint fnumber);
+
+void select_packet(capture_file *, int);
+void unselect_packet(capture_file *);
+
+void unselect_field(void);
+
+/*
+ * Mark a particular frame in a particular capture.
+ */
+void mark_frame(capture_file *, frame_data *);
+
+/*
+ * Unmark a particular frame in a particular capture.
+ */
+void unmark_frame(capture_file *, frame_data *);
+
+/* Moves or copies a file. Returns 0 on failure, 1 on success */
+int file_mv(char *from, char *to);
+
+/* Copies a file. Returns 0 on failure, 1 on success */
+int file_cp(char *from, char *to);
+
+char *file_open_error_message(int, gboolean);
+char *file_read_error_message(int);
+char *file_write_error_message(int);
#endif /* file.h */