*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
- * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
*/
#ifndef __WTAP_H__
#include <sys/time.h>
#endif
-#ifdef HAVE_WINSOCK2_H
-# include <winsock2.h>
-#endif
-
#include <glib.h>
-#include <stdio.h>
+#include <time.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif /* __cplusplus */
/* Encapsulation types. Choose names that truly reflect
* what is contained in the packet trace file.
* what older versions of "libpcap" on Linux turn the Ethernet
* header for loopback interfaces into (0.6.0 and later versions
* leave the Ethernet header alone and make it DLT_EN10MB). */
-#define WTAP_ENCAP_PER_PACKET -1
-#define WTAP_ENCAP_UNKNOWN 0
-#define WTAP_ENCAP_ETHERNET 1
-#define WTAP_ENCAP_TOKEN_RING 2
-#define WTAP_ENCAP_SLIP 3
-#define WTAP_ENCAP_PPP 4
-#define WTAP_ENCAP_FDDI 5
-#define WTAP_ENCAP_FDDI_BITSWAPPED 6
-#define WTAP_ENCAP_RAW_IP 7
-#define WTAP_ENCAP_ARCNET 8
-#define WTAP_ENCAP_ARCNET_LINUX 9
-#define WTAP_ENCAP_ATM_RFC1483 10
-#define WTAP_ENCAP_LINUX_ATM_CLIP 11
-#define WTAP_ENCAP_LAPB 12
-#define WTAP_ENCAP_ATM_PDUS 13
-#define WTAP_ENCAP_ATM_PDUS_UNTRUNCATED 14
-#define WTAP_ENCAP_NULL 15
-#define WTAP_ENCAP_ASCEND 16
-#define WTAP_ENCAP_ISDN 17
-#define WTAP_ENCAP_IP_OVER_FC 18
-#define WTAP_ENCAP_PPP_WITH_PHDR 19
-#define WTAP_ENCAP_IEEE_802_11 20
-#define WTAP_ENCAP_PRISM_HEADER 21
-#define WTAP_ENCAP_IEEE_802_11_WITH_RADIO 22
-#define WTAP_ENCAP_IEEE_802_11_WLAN_RADIOTAP 23
-#define WTAP_ENCAP_IEEE_802_11_WLAN_AVS 24
-#define WTAP_ENCAP_SLL 25
-#define WTAP_ENCAP_FRELAY 26
-#define WTAP_ENCAP_FRELAY_WITH_PHDR 27
-#define WTAP_ENCAP_CHDLC 28
-#define WTAP_ENCAP_CISCO_IOS 29
-#define WTAP_ENCAP_LOCALTALK 30
-#define WTAP_ENCAP_OLD_PFLOG 31
-#define WTAP_ENCAP_HHDLC 32
-#define WTAP_ENCAP_DOCSIS 33
-#define WTAP_ENCAP_COSINE 34
-#define WTAP_ENCAP_WFLEET_HDLC 35
-#define WTAP_ENCAP_SDLC 36
-#define WTAP_ENCAP_TZSP 37
-#define WTAP_ENCAP_ENC 38
-#define WTAP_ENCAP_PFLOG 39
-#define WTAP_ENCAP_CHDLC_WITH_PHDR 40
-#define WTAP_ENCAP_BLUETOOTH_H4 41
-#define WTAP_ENCAP_MTP2 42
-#define WTAP_ENCAP_MTP3 43
-#define WTAP_ENCAP_IRDA 44
-#define WTAP_ENCAP_USER0 45
-#define WTAP_ENCAP_USER1 46
-#define WTAP_ENCAP_USER2 47
-#define WTAP_ENCAP_USER3 48
-#define WTAP_ENCAP_USER4 49
-#define WTAP_ENCAP_USER5 50
-#define WTAP_ENCAP_USER6 51
-#define WTAP_ENCAP_USER7 52
-#define WTAP_ENCAP_USER8 53
-#define WTAP_ENCAP_USER9 54
-#define WTAP_ENCAP_USER10 55
-#define WTAP_ENCAP_USER11 56
-#define WTAP_ENCAP_USER12 57
-#define WTAP_ENCAP_USER13 58
-#define WTAP_ENCAP_USER14 59
-#define WTAP_ENCAP_USER15 60
-#define WTAP_ENCAP_SYMANTEC 61
-#define WTAP_ENCAP_APPLE_IP_OVER_IEEE1394 62
-#define WTAP_ENCAP_BACNET_MS_TP 63
-#define WTAP_ENCAP_NETTL_RAW_ICMP 64
-#define WTAP_ENCAP_NETTL_RAW_ICMPV6 65
-#define WTAP_ENCAP_GPRS_LLC 67
-#define WTAP_ENCAP_JUNIPER_ATM1 68
-#define WTAP_ENCAP_JUNIPER_ATM2 69
-#define WTAP_ENCAP_REDBACK 70
-#define WTAP_ENCAP_NETTL_RAW_IP 71
-#define WTAP_ENCAP_NETTL_ETHERNET 72
-#define WTAP_ENCAP_NETTL_TOKEN_RING 73
-#define WTAP_ENCAP_NETTL_FDDI 74
-#define WTAP_ENCAP_NETTL_UNKNOWN 75
-#define WTAP_ENCAP_MTP2_WITH_PHDR 76
-#define WTAP_ENCAP_JUNIPER_PPPOE 77
-#define WTAP_GCOM_TIE1 78
-#define WTAP_GCOM_SERIAL 79
-#define WTAP_ENCAP_NETTL_X25 80
-#define WTAP_ENCAP_K12 81
-/* last WTAP_ENCAP_ value + 1 */
-#define WTAP_NUM_ENCAP_TYPES 82
+#define WTAP_ENCAP_PER_PACKET -1
+#define WTAP_ENCAP_UNKNOWN 0
+#define WTAP_ENCAP_ETHERNET 1
+#define WTAP_ENCAP_TOKEN_RING 2
+#define WTAP_ENCAP_SLIP 3
+#define WTAP_ENCAP_PPP 4
+#define WTAP_ENCAP_FDDI 5
+#define WTAP_ENCAP_FDDI_BITSWAPPED 6
+#define WTAP_ENCAP_RAW_IP 7
+#define WTAP_ENCAP_ARCNET 8
+#define WTAP_ENCAP_ARCNET_LINUX 9
+#define WTAP_ENCAP_ATM_RFC1483 10
+#define WTAP_ENCAP_LINUX_ATM_CLIP 11
+#define WTAP_ENCAP_LAPB 12
+#define WTAP_ENCAP_ATM_PDUS 13
+#define WTAP_ENCAP_ATM_PDUS_UNTRUNCATED 14
+#define WTAP_ENCAP_NULL 15
+#define WTAP_ENCAP_ASCEND 16
+#define WTAP_ENCAP_ISDN 17
+#define WTAP_ENCAP_IP_OVER_FC 18
+#define WTAP_ENCAP_PPP_WITH_PHDR 19
+#define WTAP_ENCAP_IEEE_802_11 20
+#define WTAP_ENCAP_PRISM_HEADER 21
+#define WTAP_ENCAP_IEEE_802_11_WITH_RADIO 22
+#define WTAP_ENCAP_IEEE_802_11_WLAN_RADIOTAP 23
+#define WTAP_ENCAP_IEEE_802_11_WLAN_AVS 24
+#define WTAP_ENCAP_SLL 25
+#define WTAP_ENCAP_FRELAY 26
+#define WTAP_ENCAP_FRELAY_WITH_PHDR 27
+#define WTAP_ENCAP_CHDLC 28
+#define WTAP_ENCAP_CISCO_IOS 29
+#define WTAP_ENCAP_LOCALTALK 30
+#define WTAP_ENCAP_OLD_PFLOG 31
+#define WTAP_ENCAP_HHDLC 32
+#define WTAP_ENCAP_DOCSIS 33
+#define WTAP_ENCAP_COSINE 34
+#define WTAP_ENCAP_WFLEET_HDLC 35
+#define WTAP_ENCAP_SDLC 36
+#define WTAP_ENCAP_TZSP 37
+#define WTAP_ENCAP_ENC 38
+#define WTAP_ENCAP_PFLOG 39
+#define WTAP_ENCAP_CHDLC_WITH_PHDR 40
+#define WTAP_ENCAP_BLUETOOTH_H4 41
+#define WTAP_ENCAP_MTP2 42
+#define WTAP_ENCAP_MTP3 43
+#define WTAP_ENCAP_IRDA 44
+#define WTAP_ENCAP_USER0 45
+#define WTAP_ENCAP_USER1 46
+#define WTAP_ENCAP_USER2 47
+#define WTAP_ENCAP_USER3 48
+#define WTAP_ENCAP_USER4 49
+#define WTAP_ENCAP_USER5 50
+#define WTAP_ENCAP_USER6 51
+#define WTAP_ENCAP_USER7 52
+#define WTAP_ENCAP_USER8 53
+#define WTAP_ENCAP_USER9 54
+#define WTAP_ENCAP_USER10 55
+#define WTAP_ENCAP_USER11 56
+#define WTAP_ENCAP_USER12 57
+#define WTAP_ENCAP_USER13 58
+#define WTAP_ENCAP_USER14 59
+#define WTAP_ENCAP_USER15 60
+#define WTAP_ENCAP_SYMANTEC 61
+#define WTAP_ENCAP_APPLE_IP_OVER_IEEE1394 62
+#define WTAP_ENCAP_BACNET_MS_TP 63
+#define WTAP_ENCAP_NETTL_RAW_ICMP 64
+#define WTAP_ENCAP_NETTL_RAW_ICMPV6 65
+#define WTAP_ENCAP_GPRS_LLC 66
+#define WTAP_ENCAP_JUNIPER_ATM1 67
+#define WTAP_ENCAP_JUNIPER_ATM2 68
+#define WTAP_ENCAP_REDBACK 69
+#define WTAP_ENCAP_NETTL_RAW_IP 70
+#define WTAP_ENCAP_NETTL_ETHERNET 71
+#define WTAP_ENCAP_NETTL_TOKEN_RING 72
+#define WTAP_ENCAP_NETTL_FDDI 73
+#define WTAP_ENCAP_NETTL_UNKNOWN 74
+#define WTAP_ENCAP_MTP2_WITH_PHDR 75
+#define WTAP_ENCAP_JUNIPER_PPPOE 76
+#define WTAP_ENCAP_GCOM_TIE1 77
+#define WTAP_ENCAP_GCOM_SERIAL 78
+#define WTAP_ENCAP_NETTL_X25 79
+#define WTAP_ENCAP_K12 80
+#define WTAP_ENCAP_JUNIPER_MLPPP 81
+#define WTAP_ENCAP_JUNIPER_MLFR 82
+#define WTAP_ENCAP_JUNIPER_ETHER 83
+#define WTAP_ENCAP_JUNIPER_PPP 84
+#define WTAP_ENCAP_JUNIPER_FRELAY 85
+#define WTAP_ENCAP_JUNIPER_CHDLC 86
+#define WTAP_ENCAP_JUNIPER_GGSN 87
+#define WTAP_ENCAP_LINUX_LAPD 88
+#define WTAP_ENCAP_CATAPULT_DCT2000 89
+#define WTAP_ENCAP_BER 90
+#define WTAP_ENCAP_JUNIPER_VP 91
+#define WTAP_ENCAP_USB 92
+#define WTAP_ENCAP_IEEE802_16_MAC_CPS 93
+#define WTAP_ENCAP_NETTL_RAW_TELNET 94
+#define WTAP_ENCAP_USB_LINUX 95
+#define WTAP_ENCAP_MPEG 96
+#define WTAP_ENCAP_PPI 97
+#define WTAP_ENCAP_ERF 98
+#define WTAP_ENCAP_BLUETOOTH_H4_WITH_PHDR 99
+#define WTAP_ENCAP_SITA 100
+#define WTAP_ENCAP_SCCP 101
+#define WTAP_ENCAP_BLUETOOTH_HCI 102 /*raw packets without a transport layer header e.g. H4*/
+#define WTAP_ENCAP_IPMB 103
+#define WTAP_ENCAP_IEEE802_15_4 104
+#define WTAP_ENCAP_X2E_XORAYA 105
+#define WTAP_ENCAP_FLEXRAY 106
+#define WTAP_ENCAP_LIN 107
+#define WTAP_ENCAP_MOST 108
+#define WTAP_ENCAP_CAN20B 109
+#define WTAP_ENCAP_LAYER1_EVENT 110
+#define WTAP_ENCAP_X2E_SERIAL 111
+#define WTAP_ENCAP_I2C 112
+#define WTAP_ENCAP_IEEE802_15_4_NONASK_PHY 113
+#define WTAP_ENCAP_TNEF 114
+#define WTAP_ENCAP_USB_LINUX_MMAPPED 115
+#define WTAP_ENCAP_GSM_UM 116
+#define WTAP_ENCAP_DPNSS 117
+#define WTAP_ENCAP_PACKETLOGGER 118
+#define WTAP_ENCAP_NSTRACE_1_0 119
+#define WTAP_ENCAP_NSTRACE_2_0 120
+#define WTAP_ENCAP_FIBRE_CHANNEL_FC2 121
+#define WTAP_ENCAP_FIBRE_CHANNEL_FC2_WITH_FRAME_DELIMS 122
+#define WTAP_ENCAP_JPEG_JFIF 123
+#define WTAP_ENCAP_IPNET 124
+#define WTAP_ENCAP_SOCKETCAN 125
+#define WTAP_ENCAP_IEEE802_11_NETMON_RADIO 126
+#define WTAP_ENCAP_IEEE802_15_4_NOFCS 127
+#define WTAP_ENCAP_RAW_IPFIX 128
+#define WTAP_ENCAP_RAW_IP4 129
+#define WTAP_ENCAP_RAW_IP6 130
+#define WTAP_ENCAP_LAPD 131
+#define WTAP_ENCAP_DVBCI 132
+
+#define WTAP_NUM_ENCAP_TYPES wtap_get_num_encap_types()
/* File types that can be read by wiretap.
We support writing some many of these file types, too, so we
distinguish between different versions of them. */
-#define WTAP_FILE_UNKNOWN 0
-#define WTAP_FILE_WTAP 1
-#define WTAP_FILE_PCAP 2
-#define WTAP_FILE_PCAP_SS990417 3
-#define WTAP_FILE_PCAP_SS990915 4
-#define WTAP_FILE_PCAP_SS991029 5
-#define WTAP_FILE_PCAP_NOKIA 6
-#define WTAP_FILE_PCAP_AIX 7
-#define WTAP_FILE_LANALYZER 8
-#define WTAP_FILE_NGSNIFFER_UNCOMPRESSED 9
-#define WTAP_FILE_NGSNIFFER_COMPRESSED 10
-#define WTAP_FILE_SNOOP 11
-#define WTAP_FILE_SHOMITI 12
-#define WTAP_FILE_IPTRACE_1_0 13
-#define WTAP_FILE_IPTRACE_2_0 14
-#define WTAP_FILE_NETMON_1_x 15
-#define WTAP_FILE_NETMON_2_x 16
-#define WTAP_FILE_NETXRAY_OLD 17
-#define WTAP_FILE_NETXRAY_1_0 18
-#define WTAP_FILE_NETXRAY_1_1 19
-#define WTAP_FILE_NETXRAY_2_00x 20
-#define WTAP_FILE_RADCOM 21
-#define WTAP_FILE_ASCEND 22
-#define WTAP_FILE_NETTL 23
-#define WTAP_FILE_TOSHIBA 24
-#define WTAP_FILE_I4BTRACE 25
-#define WTAP_FILE_CSIDS 26
-#define WTAP_FILE_PPPDUMP 27
-#define WTAP_FILE_ETHERPEEK_V56 28
-#define WTAP_FILE_ETHERPEEK_V7 29
-#define WTAP_FILE_VMS 30
-#define WTAP_FILE_DBS_ETHERWATCH 31
-#define WTAP_FILE_VISUAL_NETWORKS 32
-#define WTAP_FILE_COSINE 33
-#define WTAP_FILE_5VIEWS 34
-#define WTAP_FILE_ERF 35
-#define WTAP_FILE_HCIDUMP 36
-#define WTAP_FILE_NETWORK_INSTRUMENTS_V9 37
-#define WTAP_FILE_AIROPEEK_V9 38
-#define WTAP_FILE_EYESDN 39
-#define WTAP_FILE_K12 40
-
-/* last WTAP_FILE_ value + 1 */
-#define WTAP_NUM_FILE_TYPES 41
+#define WTAP_FILE_UNKNOWN 0
+#define WTAP_FILE_WTAP 1
+#define WTAP_FILE_PCAP 2
+#define WTAP_FILE_PCAP_NSEC 3
+#define WTAP_FILE_PCAP_AIX 4
+#define WTAP_FILE_PCAP_SS991029 5
+#define WTAP_FILE_PCAP_NOKIA 6
+#define WTAP_FILE_PCAP_SS990417 7
+#define WTAP_FILE_PCAP_SS990915 8
+#define WTAP_FILE_5VIEWS 9
+#define WTAP_FILE_IPTRACE_1_0 10
+#define WTAP_FILE_IPTRACE_2_0 11
+#define WTAP_FILE_BER 12
+#define WTAP_FILE_HCIDUMP 13
+#define WTAP_FILE_CATAPULT_DCT2000 14
+#define WTAP_FILE_NETXRAY_OLD 15
+#define WTAP_FILE_NETXRAY_1_0 16
+#define WTAP_FILE_COSINE 17
+#define WTAP_FILE_CSIDS 18
+#define WTAP_FILE_DBS_ETHERWATCH 19
+#define WTAP_FILE_ERF 20
+#define WTAP_FILE_EYESDN 21
+#define WTAP_FILE_NETTL 22
+#define WTAP_FILE_ISERIES 23
+#define WTAP_FILE_ISERIES_UNICODE 24
+#define WTAP_FILE_I4BTRACE 25
+#define WTAP_FILE_ASCEND 26
+#define WTAP_FILE_NETMON_1_x 27
+#define WTAP_FILE_NETMON_2_x 28
+#define WTAP_FILE_NGSNIFFER_UNCOMPRESSED 29
+#define WTAP_FILE_NGSNIFFER_COMPRESSED 30
+#define WTAP_FILE_NETXRAY_1_1 31
+#define WTAP_FILE_NETXRAY_2_00x 32
+#define WTAP_FILE_NETWORK_INSTRUMENTS_V9 33
+#define WTAP_FILE_LANALYZER 34
+#define WTAP_FILE_PPPDUMP 35
+#define WTAP_FILE_RADCOM 36
+#define WTAP_FILE_SNOOP 37
+#define WTAP_FILE_SHOMITI 38
+#define WTAP_FILE_VMS 39
+#define WTAP_FILE_K12 40
+#define WTAP_FILE_TOSHIBA 41
+#define WTAP_FILE_VISUAL_NETWORKS 42
+#define WTAP_FILE_ETHERPEEK_V56 43
+#define WTAP_FILE_ETHERPEEK_V7 44
+#define WTAP_FILE_AIROPEEK_V9 45
+#define WTAP_FILE_MPEG 46
+#define WTAP_FILE_K12TEXT 47
+#define WTAP_FILE_NETSCREEN 48
+#define WTAP_FILE_COMMVIEW 49
+#define WTAP_FILE_PCAPNG 50
+#define WTAP_FILE_BTSNOOP 51
+#define WTAP_FILE_X2E_XORAYA 52
+#define WTAP_FILE_TNEF 53
+#define WTAP_FILE_DCT3TRACE 54
+#define WTAP_FILE_PACKETLOGGER 55
+#define WTAP_FILE_DAINTREE_SNA 56
+#define WTAP_FILE_NETSCALER_1_0 57
+#define WTAP_FILE_NETSCALER_2_0 58
+#define WTAP_FILE_JPEG_JFIF 59
+#define WTAP_FILE_IPFIX 60
+
+#define WTAP_NUM_FILE_TYPES wtap_get_num_file_types()
+
+/* timestamp precision (currently only these values are supported) */
+#define WTAP_FILE_TSPREC_SEC 0
+#define WTAP_FILE_TSPREC_DSEC 1
+#define WTAP_FILE_TSPREC_CSEC 2
+#define WTAP_FILE_TSPREC_MSEC 3
+#define WTAP_FILE_TSPREC_USEC 6
+#define WTAP_FILE_TSPREC_NSEC 9
/*
* Maximum packet size we'll support.
- * It must be at least 65535.
+ * 65535 is the largest snapshot length that libpcap supports, so we
+ * use that.
*/
#define WTAP_MAX_PACKET_SIZE 65535
* of that.
*/
+
+struct nstr_phdr {
+ gint64 rec_offset;
+ gint32 rec_len;
+ guint8 nicno_offset;
+ guint8 nicno_len;
+ guint8 dir_offset;
+ guint8 dir_len;
+ guint8 eth_offset;
+ guint8 pcb_offset;
+ guint8 l_pcb_offset;
+ guint8 rec_type;
+ guint8 vlantag_offset;
+ guint8 coreid_offset;
+};
+
/* Packet "pseudo-header" information for Ethernet capture files. */
struct eth_phdr {
gint fcs_len; /* Number of bytes of FCS - -1 means "unknown" */
* Status bits.
*/
#define ATM_RAW_CELL 0x01 /* TRUE if the packet is a single cell */
+#define ATM_NO_HEC 0x02 /* TRUE if the cell has HEC stripped out */
+#define ATM_AAL2_NOPHDR 0x04 /* TRUE if the AAL2 PDU has no pseudo-header */
/*
* AAL types.
#define TRAF_FR 5 /* Frame Relay */
#define TRAF_SPANS 6 /* FORE SPANS */
#define TRAF_IPSILON 7 /* Ipsilon */
+#define TRAF_UMTS_FP 8 /* UMTS Frame Protocol */
/*
* Traffic subtypes.
guint8 subtype; /* traffic subtype */
guint16 vpi; /* virtual path identifier */
guint16 vci; /* virtual circuit identifier */
+ guint8 aal2_cid; /* channel id */
guint16 channel; /* link: 0 for DTE->DCE, 1 for DCE->DTE */
guint16 cells; /* number of cells */
guint16 aal5t_u2u; /* user-to-user indicator */
guint32 task; /* Task number */
};
+/* Also defined in epan/packet_info.h */
+#define P2P_DIR_UNKNOWN -1
+#define P2P_DIR_SENT 0
+#define P2P_DIR_RECV 1
+
/* Packet "pseudo-header" for point-to-point links with direction flags. */
struct p2p_phdr {
- gboolean sent; /* TRUE=sent, FALSE=received */
+ int sent; /* TRUE=sent, FALSE=received, -1=unknown*/
};
-/* Packet "pseudo-header" information for 802.11
- Radio information is only present for WTAP_ENCAP_IEEE_802_11_WITH_RADIO. */
+/*
+ * Packet "pseudo-header" information for 802.11.
+ * Radio information is only present for WTAP_ENCAP_IEEE_802_11_WITH_RADIO.
+ *
+ * Signal strength, etc. information:
+ *
+ * Raw signal strength can be measured in milliwatts.
+ * It can also be represented as dBm, which is 10 times the log base 10
+ * of the signal strength in mW.
+ *
+ * The Receive Signal Strength Indicator is an integer in the range 0 to 255.
+ * The actual RSSI value for a given signal strength is dependent on the
+ * vendor (and perhaps on the adapter). The maximum possible RSSI value
+ * is also dependent on the vendor and perhaps the adapter.
+ *
+ * The signal strength can be represented as a percentage, which is 100
+ * times the ratio of the RSSI and the maximum RSSI.
+ */
struct ieee_802_11_phdr {
gint fcs_len; /* Number of bytes of FCS - -1 means "unknown" */
guint8 channel; /* Channel number */
guint32 devid;
guint32 kind;
gint32 pid;
- gint16 uid;
+ guint16 uid;
};
/* Packet "pseudo-header" for MTP2 files. */
+#define MTP2_ANNEX_A_NOT_USED 0
+#define MTP2_ANNEX_A_USED 1
+#define MTP2_ANNEX_A_USED_UNKNOWN 2
+
struct mtp2_phdr {
- guint8 sent;
- guint8 annex_a_used;
- guint16 link_number;
+ guint8 sent;
+ guint8 annex_a_used;
+ guint16 link_number;
};
/* Packet "pseudo-header" for K12 files. */
+typedef union {
+ struct {
+ guint16 vp;
+ guint16 vc;
+ guint16 cid;
+ } atm;
+
+ guint32 ds0mask;
+} k12_input_info_t;
+
struct k12_phdr {
- guint32 src_id;
- gchar* src_name;
- gchar* stack_file;
+ guint32 input;
+ const gchar* input_name;
+ const gchar* stack_file;
+ guint32 input_type;
+ k12_input_info_t input_info;
+ guchar* extra_info;
+ guint32 extra_length;
+ void* stuff;
+};
+
+#define K12_PORT_DS0S 0x00010008
+#define K12_PORT_DS1 0x00100008
+#define K12_PORT_ATMPVC 0x01020000
+
+struct lapd_phdr {
+ guint16 pkttype; /* packet type */
+ guint8 we_network;
+};
+
+struct wtap;
+struct catapult_dct2000_phdr
+{
+ union
+ {
+ struct isdn_phdr isdn;
+ struct atm_phdr atm;
+ struct p2p_phdr p2p;
+ } inner_pseudo_header;
+ gint64 seek_off;
+ struct wtap *wth;
+};
+
+#define LIBPCAP_BT_PHDR_SENT 0
+#define LIBPCAP_BT_PHDR_RECV 1
+
+/*
+ * Header prepended by libpcap to each bluetooth hci h:4 frame.
+ * Values in network byte order
+ */
+struct libpcap_bt_phdr {
+ guint32 direction; /* Bit 0 hold the frame direction. */
+};
+
+#define LIBPCAP_PPP_PHDR_RECV 0
+#define LIBPCAP_PPP_PHDR_SENT 1
+
+/*
+ * Header prepended by libpcap to each ppp frame.
+ */
+struct libpcap_ppp_phdr {
+ guint8 direction;
+};
+
+/*
+ * Endace Record Format pseudo header
+ */
+struct erf_phdr {
+ guint64 ts; /* Time stamp */
+ guint8 type;
+ guint8 flags;
+ guint16 rlen;
+ guint16 lctr;
+ guint16 wlen;
+};
+
+struct erf_ehdr {
+ guint64 ehdr;
+};
+
+/*
+ * ERF pseudo header with optional subheader
+ * (Multichannel or Ethernet)
+ */
+struct erf_mc_phdr {
+ struct erf_phdr phdr;
+ struct erf_ehdr ehdr_list[8];
+ union
+ {
+ guint16 eth_hdr;
+ guint32 mc_hdr;
+ } subhdr;
+};
+
+#define SITA_FRAME_DIR_TXED (0x00) /* values of sita_phdr.flags */
+#define SITA_FRAME_DIR_RXED (0x01)
+#define SITA_FRAME_DIR (0x01) /* mask */
+#define SITA_ERROR_NO_BUFFER (0x80)
+
+#define SITA_SIG_DSR (0x01) /* values of sita_phdr.signals */
+#define SITA_SIG_DTR (0x02)
+#define SITA_SIG_CTS (0x04)
+#define SITA_SIG_RTS (0x08)
+#define SITA_SIG_DCD (0x10)
+#define SITA_SIG_UNDEF1 (0x20)
+#define SITA_SIG_UNDEF2 (0x40)
+#define SITA_SIG_UNDEF3 (0x80)
+
+#define SITA_ERROR_TX_UNDERRUN (0x01) /* values of sita_phdr.errors2 (if SITA_FRAME_DIR_TXED) */
+#define SITA_ERROR_TX_CTS_LOST (0x02)
+#define SITA_ERROR_TX_UART_ERROR (0x04)
+#define SITA_ERROR_TX_RETX_LIMIT (0x08)
+#define SITA_ERROR_TX_UNDEF1 (0x10)
+#define SITA_ERROR_TX_UNDEF2 (0x20)
+#define SITA_ERROR_TX_UNDEF3 (0x40)
+#define SITA_ERROR_TX_UNDEF4 (0x80)
+
+#define SITA_ERROR_RX_FRAMING (0x01) /* values of sita_phdr.errors1 (if SITA_FRAME_DIR_RXED) */
+#define SITA_ERROR_RX_PARITY (0x02)
+#define SITA_ERROR_RX_COLLISION (0x04)
+#define SITA_ERROR_RX_FRAME_LONG (0x08)
+#define SITA_ERROR_RX_FRAME_SHORT (0x10)
+#define SITA_ERROR_RX_UNDEF1 (0x20)
+#define SITA_ERROR_RX_UNDEF2 (0x40)
+#define SITA_ERROR_RX_UNDEF3 (0x80)
+
+#define SITA_ERROR_RX_NONOCTET_ALIGNED (0x01) /* values of sita_phdr.errors2 (if SITA_FRAME_DIR_RXED) */
+#define SITA_ERROR_RX_ABORT (0x02)
+#define SITA_ERROR_RX_CD_LOST (0x04)
+#define SITA_ERROR_RX_DPLL (0x08)
+#define SITA_ERROR_RX_OVERRUN (0x10)
+#define SITA_ERROR_RX_FRAME_LEN_VIOL (0x20)
+#define SITA_ERROR_RX_CRC (0x40)
+#define SITA_ERROR_RX_BREAK (0x80)
+
+#define SITA_PROTO_UNUSED (0x00) /* values of sita_phdr.proto */
+#define SITA_PROTO_BOP_LAPB (0x01)
+#define SITA_PROTO_ETHERNET (0x02)
+#define SITA_PROTO_ASYNC_INTIO (0x03)
+#define SITA_PROTO_ASYNC_BLKIO (0x04)
+#define SITA_PROTO_ALC (0x05)
+#define SITA_PROTO_UTS (0x06)
+#define SITA_PROTO_PPP_HDLC (0x07)
+#define SITA_PROTO_SDLC (0x08)
+#define SITA_PROTO_TOKENRING (0x09)
+#define SITA_PROTO_I2C (0x10)
+#define SITA_PROTO_DPM_LINK (0x11)
+#define SITA_PROTO_BOP_FRL (0x12)
+
+struct sita_phdr {
+ guint8 flags;
+ guint8 signals;
+ guint8 errors1;
+ guint8 errors2;
+ guint8 proto;
+};
+
+/*pseudo header for Bluetooth HCI*/
+struct bthci_phdr {
+ gboolean sent;
+ guint8 channel;
+};
+
+#define BTHCI_CHANNEL_COMMAND 1
+#define BTHCI_CHANNEL_ACL 2
+#define BTHCI_CHANNEL_SCO 3
+#define BTHCI_CHANNEL_EVENT 4
+
+/* pseudo header for WTAP_ENCAP_LAYER1_EVENT */
+struct l1event_phdr {
+ gboolean uton;
+};
+
+/* * I2C pseudo header */
+struct i2c_phdr {
+ guint8 is_event;
+ guint8 bus;
+ guint32 flags;
+};
+
+/* pseudo header for WTAP_ENCAP_GSM_UM */
+struct gsm_um_phdr {
+ gboolean uplink;
+ guint8 channel;
+ /* The following are only populated for downlink */
+ guint8 bsic;
+ guint16 arfcn;
+ guint32 tdma_frame;
+ guint8 error;
+ guint16 timeshift;
};
+#define GSM_UM_CHANNEL_UNKNOWN 0
+#define GSM_UM_CHANNEL_BCCH 1
+#define GSM_UM_CHANNEL_SDCCH 2
+#define GSM_UM_CHANNEL_SACCH 3
+#define GSM_UM_CHANNEL_FACCH 4
+#define GSM_UM_CHANNEL_CCCH 5
+#define GSM_UM_CHANNEL_RACH 6
+#define GSM_UM_CHANNEL_AGCH 7
+#define GSM_UM_CHANNEL_PCH 8
+
union wtap_pseudo_header {
struct eth_phdr eth;
struct x25_phdr x25;
struct cosine_phdr cosine;
struct irda_phdr irda;
struct nettl_phdr nettl;
- struct mtp2_phdr mtp2;
+ struct mtp2_phdr mtp2;
struct k12_phdr k12;
+ struct lapd_phdr lapd;
+ struct catapult_dct2000_phdr dct2000;
+ struct erf_mc_phdr erf;
+ struct sita_phdr sita;
+ struct bthci_phdr bthci;
+ struct l1event_phdr l1event;
+ struct i2c_phdr i2c;
+ struct gsm_um_phdr gsm_um;
+ struct nstr_phdr nstr;
+};
+
+struct wtap_nstime {
+ time_t secs;
+ int nsecs;
};
struct wtap_pkthdr {
- struct timeval ts;
+ struct wtap_nstime ts;
guint32 caplen;
guint32 len;
int pkt_encap;
};
-struct wtap;
struct Buffer;
struct wtap_dumper;
typedef struct wtap wtap;
typedef struct wtap_dumper wtap_dumper;
+/* XXX Should this be moved to wtap-int.h? It appears to be internal to wtap.c. */
+struct file_type_info {
+ /* the file type name */
+ /* should be NULL for all "pseudo" types that are only internally used and not read/writeable */
+ const char *name;
+
+ /* the file type short name, used as a shortcut for the command line tools */
+ /* should be NULL for all "pseudo" types that are only internally used and not read/writeable */
+ const char *short_name;
+
+ /* the common file extensions for this type (seperated by semicolon) */
+ /* should be *.* if no common extension is applicable */
+ const char *file_extensions;
+
+ /* the default file extension, used to save this type */
+ /* should be NULL if no default extension is known */
+ const char *file_extension_default;
+
+ /* can this type be compressed with gzip? */
+ gboolean can_compress;
+
+ /* does this type support name resolution records? */
+ /* should be NULL is this file type doesn't have write support */
+ gboolean has_name_resolution;
+
+ /* can this type write this encapsulation format? */
+ /* should be NULL is this file type doesn't have write support */
+ int (*can_write_encap)(int);
+
+ /* the function to open the capture file for writing */
+ /* should be NULL is this file type don't have write support */
+ int (*dump_open)(wtap_dumper *, gboolean, int *);
+};
+
+
+typedef int (*wtap_open_routine_t)(struct wtap*, int *, char **);
+
+
/*
* On failure, "wtap_open_offline()" returns NULL, and puts into the
* "int" pointed to by its second argument:
*
* a positive "errno" value if the capture file can't be opened;
- *
* a negative number, indicating the type of error, on other failures.
*/
struct wtap* wtap_open_offline(const char *filename, int *err,
gchar **err_info, gboolean do_random);
+/*
+ * If we were compiled with zlib and we're at EOF, unset EOF so that
+ * wtap_read/gzread has a chance to succeed. This is necessary if
+ * we're tailing a file.
+ */
+void wtap_cleareof(wtap *wth);
+
+/*
+ * Set callback functions to add new hostnames. Currently pcapng-only.
+ * MUST match add_ipv4_name and add_ipv6_name in addr_resolv.c.
+ */
+typedef void (*wtap_new_ipv4_callback_t) (const guint addr, const gchar *name);
+void wtap_set_cb_new_ipv4(wtap *wth, wtap_new_ipv4_callback_t add_new_ipv4);
+
+typedef void (*wtap_new_ipv6_callback_t) (const void *addrp, const gchar *name);
+void wtap_set_cb_new_ipv6(wtap *wth, wtap_new_ipv6_callback_t add_new_ipv6);
+
/* Returns TRUE if read was successful. FALSE if failure. data_offset is
- * set the the offset in the file where the data for the read packet is
+ * set to the offset in the file where the data for the read packet is
* located. */
gboolean wtap_read(wtap *wth, int *err, gchar **err_info,
- long *data_offset);
+ gint64 *data_offset);
+
+gboolean wtap_seek_read (wtap *wth, gint64 seek_off,
+ union wtap_pseudo_header *pseudo_header, guint8 *pd, int len,
+ int *err, gchar **err_info);
+/*** get various information snippets about the current packet ***/
struct wtap_pkthdr *wtap_phdr(wtap *wth);
union wtap_pseudo_header *wtap_pseudoheader(wtap *wth);
guint8 *wtap_buf_ptr(wtap *wth);
-int wtap_fd(wtap *wth);
+/*** get various information snippets about the current file ***/
+
+/* Return an approximation of the amount of data we've read sequentially
+ * from the file so far. */
+gint64 wtap_read_so_far(wtap *wth, int *err);
+gint64 wtap_file_size(wtap *wth, int *err);
int wtap_snapshot_length(wtap *wth); /* per file */
int wtap_file_type(wtap *wth);
int wtap_file_encap(wtap *wth);
+int wtap_file_tsprecision(wtap *wth);
-const char *wtap_file_type_string(int filetype);
-const char *wtap_file_type_short_string(int filetype);
-int wtap_short_string_to_file_type(const char *short_name);
-
-const char *wtap_encap_string(int encap);
-const char *wtap_encap_short_string(int encap);
-int wtap_short_string_to_encap(const char *short_name);
-
-const char *wtap_strerror(int err);
+/*** close the current file ***/
void wtap_sequential_close(wtap *wth);
void wtap_close(wtap *wth);
-gboolean wtap_seek_read (wtap *wth, long seek_off,
- union wtap_pseudo_header *pseudo_header, guint8 *pd, int len,
- int *err, gchar **err_info);
+/*** dump packets into a capture file ***/
gboolean wtap_dump_can_open(int filetype);
gboolean wtap_dump_can_write_encap(int filetype, int encap);
+gboolean wtap_dump_can_compress(int filetype);
wtap_dumper* wtap_dump_open(const char *filename, int filetype, int encap,
- int snaplen, int *err);
+ int snaplen, gboolean compressed, int *err);
wtap_dumper* wtap_dump_fdopen(int fd, int filetype, int encap, int snaplen,
- int *err);
+ gboolean compressed, int *err);
gboolean wtap_dump(wtap_dumper *, const struct wtap_pkthdr *,
const union wtap_pseudo_header *pseudo_header, const guchar *, int *err);
-FILE* wtap_dump_file(wtap_dumper *);
+void wtap_dump_flush(wtap_dumper *);
+gint64 wtap_get_bytes_dumped(wtap_dumper *);
+void wtap_set_bytes_dumped(wtap_dumper *wdh, gint64 bytes_dumped);
+struct addrinfo;
+gboolean wtap_dump_set_addrinfo_list(wtap_dumper *wdh, struct addrinfo *addrinfo_list);
gboolean wtap_dump_close(wtap_dumper *, int *);
-long wtap_get_bytes_dumped(wtap_dumper *);
-void wtap_set_bytes_dumped(wtap_dumper *wdh, long bytes_dumped);
+
+/*** various string converter functions ***/
+const char *wtap_file_type_string(int filetype);
+const char *wtap_file_type_short_string(int filetype);
+int wtap_short_string_to_file_type(const char *short_name);
+
+const char *wtap_file_extensions_string(int filetype);
+const char *wtap_file_extension_default_string(int filetype);
+
+const char *wtap_encap_string(int encap);
+const char *wtap_encap_short_string(int encap);
+int wtap_short_string_to_encap(const char *short_name);
+
+const char *wtap_strerror(int err);
+
+/*** get available number of file types and encapsulations ***/
+int wtap_get_num_encap_types(void);
+int wtap_get_num_file_types(void);
+
+/*** dynamically register new file types and encapsulations ***/
+void wtap_register_open_routine(wtap_open_routine_t, gboolean has_magic);
+int wtap_register_file_type(const struct file_type_info* fi);
+int wtap_register_encap_type(char* name, char* short_name);
+
/*
* Wiretap error codes.
/* LZ77 compressed data has bad offset to string */
#define WTAP_ERR_RANDOM_OPEN_STDIN -18
/* We're trying to open the standard input for random access */
+#define WTAP_ERR_COMPRESSION_NOT_SUPPORTED -19
+ /* The filetype doesn't support output compression */
+#define WTAP_ERR_CANT_SEEK -20
+ /* An attempt to seek failed, reason unknown */
/* Errors from zlib; zlib error Z_xxx turns into Wiretap error
WTAP_ERR_ZLIB + Z_xxx.
#define WTAP_ERR_ZLIB_MAX -100
#define WTAP_ERR_ZLIB_MIN -300
+#ifdef __cplusplus
+}
+#endif /* __cplusplus */
#endif /* __WTAP_H__ */
git.samba.org / obnox / wireshark / wip.git / blobdiff