/* wtap.h
*
- * $Id: wtap.h,v 1.155 2004/06/07 20:28:51 guy Exp $
+ * $Id$
*
* Wiretap Library
* Copyright (c) 1998 by Gilbert Ramirez <gram@alumni.rice.edu>
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
- * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
+ * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
*/
#ifndef __WTAP_H__
#include <sys/time.h>
#endif
-#ifdef HAVE_WINSOCK2_H
-# include <winsock2.h>
-#endif
-
#include <glib.h>
#include <stdio.h>
+#include <time.h>
+
+#ifdef __cplusplus
+extern "C" {
+#endif /* __cplusplus */
/* Encapsulation types. Choose names that truly reflect
* what is contained in the packet trace file.
* what older versions of "libpcap" on Linux turn the Ethernet
* header for loopback interfaces into (0.6.0 and later versions
* leave the Ethernet header alone and make it DLT_EN10MB). */
-#define WTAP_ENCAP_PER_PACKET -1
-#define WTAP_ENCAP_UNKNOWN 0
-#define WTAP_ENCAP_ETHERNET 1
-#define WTAP_ENCAP_TOKEN_RING 2
-#define WTAP_ENCAP_SLIP 3
-#define WTAP_ENCAP_PPP 4
-#define WTAP_ENCAP_FDDI 5
-#define WTAP_ENCAP_FDDI_BITSWAPPED 6
-#define WTAP_ENCAP_RAW_IP 7
-#define WTAP_ENCAP_ARCNET 8
-#define WTAP_ENCAP_ARCNET_LINUX 9
-#define WTAP_ENCAP_ATM_RFC1483 10
-#define WTAP_ENCAP_LINUX_ATM_CLIP 11
-#define WTAP_ENCAP_LAPB 12
-#define WTAP_ENCAP_ATM_PDUS 13
-#define WTAP_ENCAP_ATM_PDUS_UNTRUNCATED 14
-#define WTAP_ENCAP_NULL 15
-#define WTAP_ENCAP_ASCEND 16
-#define WTAP_ENCAP_ISDN 17
-#define WTAP_ENCAP_IP_OVER_FC 18
-#define WTAP_ENCAP_PPP_WITH_PHDR 19
-#define WTAP_ENCAP_IEEE_802_11 20
-#define WTAP_ENCAP_PRISM_HEADER 21
-#define WTAP_ENCAP_IEEE_802_11_WITH_RADIO 22
-#define WTAP_ENCAP_IEEE_802_11_WLAN_BSD 23
-#define WTAP_ENCAP_IEEE_802_11_WLAN_AVS 24
-#define WTAP_ENCAP_SLL 25
-#define WTAP_ENCAP_FRELAY 26
-#define WTAP_ENCAP_FRELAY_WITH_PHDR 27
-#define WTAP_ENCAP_CHDLC 28
-#define WTAP_ENCAP_CISCO_IOS 29
-#define WTAP_ENCAP_LOCALTALK 30
-#define WTAP_ENCAP_OLD_PFLOG 31
-#define WTAP_ENCAP_HHDLC 32
-#define WTAP_ENCAP_DOCSIS 33
-#define WTAP_ENCAP_COSINE 34
-#define WTAP_ENCAP_WFLEET_HDLC 35
-#define WTAP_ENCAP_SDLC 36
-#define WTAP_ENCAP_TZSP 37
-#define WTAP_ENCAP_ENC 38
-#define WTAP_ENCAP_PFLOG 39
-#define WTAP_ENCAP_CHDLC_WITH_PHDR 40
-#define WTAP_ENCAP_BLUETOOTH_H4 41
-#define WTAP_ENCAP_MTP2 42
-#define WTAP_ENCAP_MTP3 43
-#define WTAP_ENCAP_IRDA 44
-#define WTAP_ENCAP_USER0 45
-#define WTAP_ENCAP_USER1 46
-#define WTAP_ENCAP_USER2 47
-#define WTAP_ENCAP_USER3 48
-#define WTAP_ENCAP_USER4 49
-#define WTAP_ENCAP_USER5 50
-#define WTAP_ENCAP_USER6 51
-#define WTAP_ENCAP_USER7 52
-#define WTAP_ENCAP_USER8 53
-#define WTAP_ENCAP_USER9 54
-#define WTAP_ENCAP_USER10 55
-#define WTAP_ENCAP_USER11 56
-#define WTAP_ENCAP_USER12 57
-#define WTAP_ENCAP_USER13 58
-#define WTAP_ENCAP_USER14 59
-#define WTAP_ENCAP_USER15 60
-#define WTAP_ENCAP_SYMANTEC 61
-#define WTAP_ENCAP_APPLE_IP_OVER_IEEE1394 62
-#define WTAP_ENCAP_BACNET_MS_TP 63
-
-/* last WTAP_ENCAP_ value + 1 */
-#define WTAP_NUM_ENCAP_TYPES 64
+#define WTAP_ENCAP_PER_PACKET -1
+#define WTAP_ENCAP_UNKNOWN 0
+#define WTAP_ENCAP_ETHERNET 1
+#define WTAP_ENCAP_TOKEN_RING 2
+#define WTAP_ENCAP_SLIP 3
+#define WTAP_ENCAP_PPP 4
+#define WTAP_ENCAP_FDDI 5
+#define WTAP_ENCAP_FDDI_BITSWAPPED 6
+#define WTAP_ENCAP_RAW_IP 7
+#define WTAP_ENCAP_ARCNET 8
+#define WTAP_ENCAP_ARCNET_LINUX 9
+#define WTAP_ENCAP_ATM_RFC1483 10
+#define WTAP_ENCAP_LINUX_ATM_CLIP 11
+#define WTAP_ENCAP_LAPB 12
+#define WTAP_ENCAP_ATM_PDUS 13
+#define WTAP_ENCAP_ATM_PDUS_UNTRUNCATED 14
+#define WTAP_ENCAP_NULL 15
+#define WTAP_ENCAP_ASCEND 16
+#define WTAP_ENCAP_ISDN 17
+#define WTAP_ENCAP_IP_OVER_FC 18
+#define WTAP_ENCAP_PPP_WITH_PHDR 19
+#define WTAP_ENCAP_IEEE_802_11 20
+#define WTAP_ENCAP_PRISM_HEADER 21
+#define WTAP_ENCAP_IEEE_802_11_WITH_RADIO 22
+#define WTAP_ENCAP_IEEE_802_11_WLAN_RADIOTAP 23
+#define WTAP_ENCAP_IEEE_802_11_WLAN_AVS 24
+#define WTAP_ENCAP_SLL 25
+#define WTAP_ENCAP_FRELAY 26
+#define WTAP_ENCAP_FRELAY_WITH_PHDR 27
+#define WTAP_ENCAP_CHDLC 28
+#define WTAP_ENCAP_CISCO_IOS 29
+#define WTAP_ENCAP_LOCALTALK 30
+#define WTAP_ENCAP_OLD_PFLOG 31
+#define WTAP_ENCAP_HHDLC 32
+#define WTAP_ENCAP_DOCSIS 33
+#define WTAP_ENCAP_COSINE 34
+#define WTAP_ENCAP_WFLEET_HDLC 35
+#define WTAP_ENCAP_SDLC 36
+#define WTAP_ENCAP_TZSP 37
+#define WTAP_ENCAP_ENC 38
+#define WTAP_ENCAP_PFLOG 39
+#define WTAP_ENCAP_CHDLC_WITH_PHDR 40
+#define WTAP_ENCAP_BLUETOOTH_H4 41
+#define WTAP_ENCAP_MTP2 42
+#define WTAP_ENCAP_MTP3 43
+#define WTAP_ENCAP_IRDA 44
+#define WTAP_ENCAP_USER0 45
+#define WTAP_ENCAP_USER1 46
+#define WTAP_ENCAP_USER2 47
+#define WTAP_ENCAP_USER3 48
+#define WTAP_ENCAP_USER4 49
+#define WTAP_ENCAP_USER5 50
+#define WTAP_ENCAP_USER6 51
+#define WTAP_ENCAP_USER7 52
+#define WTAP_ENCAP_USER8 53
+#define WTAP_ENCAP_USER9 54
+#define WTAP_ENCAP_USER10 55
+#define WTAP_ENCAP_USER11 56
+#define WTAP_ENCAP_USER12 57
+#define WTAP_ENCAP_USER13 58
+#define WTAP_ENCAP_USER14 59
+#define WTAP_ENCAP_USER15 60
+#define WTAP_ENCAP_SYMANTEC 61
+#define WTAP_ENCAP_APPLE_IP_OVER_IEEE1394 62
+#define WTAP_ENCAP_BACNET_MS_TP 63
+#define WTAP_ENCAP_NETTL_RAW_ICMP 64
+#define WTAP_ENCAP_NETTL_RAW_ICMPV6 65
+#define WTAP_ENCAP_GPRS_LLC 66
+#define WTAP_ENCAP_JUNIPER_ATM1 67
+#define WTAP_ENCAP_JUNIPER_ATM2 68
+#define WTAP_ENCAP_REDBACK 69
+#define WTAP_ENCAP_NETTL_RAW_IP 70
+#define WTAP_ENCAP_NETTL_ETHERNET 71
+#define WTAP_ENCAP_NETTL_TOKEN_RING 72
+#define WTAP_ENCAP_NETTL_FDDI 73
+#define WTAP_ENCAP_NETTL_UNKNOWN 74
+#define WTAP_ENCAP_MTP2_WITH_PHDR 75
+#define WTAP_ENCAP_JUNIPER_PPPOE 76
+#define WTAP_GCOM_TIE1 77
+#define WTAP_GCOM_SERIAL 78
+#define WTAP_ENCAP_NETTL_X25 79
+#define WTAP_ENCAP_K12 80
+#define WTAP_ENCAP_JUNIPER_MLPPP 81
+#define WTAP_ENCAP_JUNIPER_MLFR 82
+#define WTAP_ENCAP_JUNIPER_ETHER 83
+#define WTAP_ENCAP_JUNIPER_PPP 84
+#define WTAP_ENCAP_JUNIPER_FRELAY 85
+#define WTAP_ENCAP_JUNIPER_CHDLC 86
+#define WTAP_ENCAP_JUNIPER_GGSN 87
+#define WTAP_ENCAP_LINUX_LAPD 88
+#define WTAP_ENCAP_CATAPULT_DCT2000 89
+#define WTAP_ENCAP_BER 90
+#define WTAP_ENCAP_JUNIPER_VP 91
+#define WTAP_ENCAP_USB 92
+#define WTAP_ENCAP_IEEE802_16_MAC_CPS 93
+#define WTAP_ENCAP_NETTL_RAW_TELNET 94
+#define WTAP_ENCAP_USB_LINUX 95
+#define WTAP_ENCAP_MPEG 96
+#define WTAP_ENCAP_PPI 97
+#define WTAP_ENCAP_ERF 98
+#define WTAP_ENCAP_BLUETOOTH_H4_WITH_PHDR 99
+#define WTAP_ENCAP_SITA 100
+#define WTAP_ENCAP_SCCP 101
+#define WTAP_ENCAP_BLUETOOTH_HCI 102 /*raw packets without a transport layer header e.g. H4*/
+#define WTAP_ENCAP_IPMB 103
+#define WTAP_ENCAP_IEEE802_15_4 104
+#define WTAP_ENCAP_X2E_XORAYA 105
+#define WTAP_ENCAP_FLEXRAY 106
+#define WTAP_ENCAP_LIN 107
+#define WTAP_ENCAP_MOST 108
+#define WTAP_ENCAP_CAN20B 109
+#define WTAP_ENCAP_LAYER1_EVENT 110
+#define WTAP_ENCAP_X2E_SERIAL 111
+#define WTAP_ENCAP_I2C 112
+#define WTAP_ENCAP_IEEE802_15_4_NONASK_PHY 113
+#define WTAP_ENCAP_TNEF 114
+#define WTAP_ENCAP_USB_LINUX_MMAPPED 115
+#define WTAP_ENCAP_GSM_UM 116
+
+#define WTAP_NUM_ENCAP_TYPES wtap_get_num_encap_types()
/* File types that can be read by wiretap.
We support writing some many of these file types, too, so we
distinguish between different versions of them. */
-#define WTAP_FILE_UNKNOWN 0
-#define WTAP_FILE_WTAP 1
-#define WTAP_FILE_PCAP 2
-#define WTAP_FILE_PCAP_SS990417 3
-#define WTAP_FILE_PCAP_SS990915 4
-#define WTAP_FILE_PCAP_SS991029 5
-#define WTAP_FILE_PCAP_NOKIA 6
-#define WTAP_FILE_PCAP_AIX 7
-#define WTAP_FILE_LANALYZER 8
-#define WTAP_FILE_NGSNIFFER_UNCOMPRESSED 9
-#define WTAP_FILE_NGSNIFFER_COMPRESSED 10
-#define WTAP_FILE_SNOOP 11
-#define WTAP_FILE_SHOMITI 12
-#define WTAP_FILE_IPTRACE_1_0 13
-#define WTAP_FILE_IPTRACE_2_0 14
-#define WTAP_FILE_NETMON_1_x 15
-#define WTAP_FILE_NETMON_2_x 16
-#define WTAP_FILE_NETXRAY_OLD 17
-#define WTAP_FILE_NETXRAY_1_0 18
-#define WTAP_FILE_NETXRAY_1_1 19
-#define WTAP_FILE_NETXRAY_2_00x 20
-#define WTAP_FILE_RADCOM 21
-#define WTAP_FILE_ASCEND 22
-#define WTAP_FILE_NETTL 23
-#define WTAP_FILE_TOSHIBA 24
-#define WTAP_FILE_I4BTRACE 25
-#define WTAP_FILE_CSIDS 26
-#define WTAP_FILE_PPPDUMP 27
-#define WTAP_FILE_ETHERPEEK_V56 28
-#define WTAP_FILE_ETHERPEEK_V7 29
-#define WTAP_FILE_VMS 30
-#define WTAP_FILE_DBS_ETHERWATCH 31
-#define WTAP_FILE_VISUAL_NETWORKS 32
-#define WTAP_FILE_COSINE 33
-#define WTAP_FILE_5VIEWS 34
-#define WTAP_FILE_ERF 35
-#define WTAP_FILE_HCIDUMP 36
-#define WTAP_FILE_NETWORK_INSTRUMENTS_V9 37
-#define WTAP_FILE_AIROPEEK_V9 38
-#define WTAP_FILE_EYESDN 39
-
-/* last WTAP_FILE_ value + 1 */
-#define WTAP_NUM_FILE_TYPES 40
+#define WTAP_FILE_UNKNOWN 0
+#define WTAP_FILE_WTAP 1
+#define WTAP_FILE_PCAP 2
+#define WTAP_FILE_PCAP_NSEC 3
+#define WTAP_FILE_PCAP_AIX 4
+#define WTAP_FILE_PCAP_SS991029 5
+#define WTAP_FILE_PCAP_NOKIA 6
+#define WTAP_FILE_PCAP_SS990417 7
+#define WTAP_FILE_PCAP_SS990915 8
+#define WTAP_FILE_5VIEWS 9
+#define WTAP_FILE_IPTRACE_1_0 10
+#define WTAP_FILE_IPTRACE_2_0 11
+#define WTAP_FILE_BER 12
+#define WTAP_FILE_HCIDUMP 13
+#define WTAP_FILE_CATAPULT_DCT2000 14
+#define WTAP_FILE_NETXRAY_OLD 15
+#define WTAP_FILE_NETXRAY_1_0 16
+#define WTAP_FILE_COSINE 17
+#define WTAP_FILE_CSIDS 18
+#define WTAP_FILE_DBS_ETHERWATCH 19
+#define WTAP_FILE_ERF 20
+#define WTAP_FILE_EYESDN 21
+#define WTAP_FILE_NETTL 22
+#define WTAP_FILE_ISERIES 23
+#define WTAP_FILE_ISERIES_UNICODE 24
+#define WTAP_FILE_I4BTRACE 25
+#define WTAP_FILE_ASCEND 26
+#define WTAP_FILE_NETMON_1_x 27
+#define WTAP_FILE_NETMON_2_x 28
+#define WTAP_FILE_NGSNIFFER_UNCOMPRESSED 29
+#define WTAP_FILE_NGSNIFFER_COMPRESSED 30
+#define WTAP_FILE_NETXRAY_1_1 31
+#define WTAP_FILE_NETXRAY_2_00x 32
+#define WTAP_FILE_NETWORK_INSTRUMENTS_V9 33
+#define WTAP_FILE_LANALYZER 34
+#define WTAP_FILE_PPPDUMP 35
+#define WTAP_FILE_RADCOM 36
+#define WTAP_FILE_SNOOP 37
+#define WTAP_FILE_SHOMITI 38
+#define WTAP_FILE_VMS 39
+#define WTAP_FILE_K12 40
+#define WTAP_FILE_TOSHIBA 41
+#define WTAP_FILE_VISUAL_NETWORKS 42
+#define WTAP_FILE_ETHERPEEK_V56 43
+#define WTAP_FILE_ETHERPEEK_V7 44
+#define WTAP_FILE_AIROPEEK_V9 45
+#define WTAP_FILE_MPEG 46
+#define WTAP_FILE_K12TEXT 47
+#define WTAP_FILE_NETSCREEN 48
+#define WTAP_FILE_COMMVIEW 49
+#define WTAP_FILE_PCAPNG 50
+#define WTAP_FILE_BTSNOOP 51
+#define WTAP_FILE_X2E_XORAYA 52
+#define WTAP_FILE_TNEF 53
+#define WTAP_FILE_DCT3TRACE 54
+
+#define WTAP_NUM_FILE_TYPES wtap_get_num_file_types()
+
+/* timestamp precision (currently only these values are supported) */
+#define WTAP_FILE_TSPREC_SEC 0
+#define WTAP_FILE_TSPREC_DSEC 1
+#define WTAP_FILE_TSPREC_CSEC 2
+#define WTAP_FILE_TSPREC_MSEC 3
+#define WTAP_FILE_TSPREC_USEC 6
+#define WTAP_FILE_TSPREC_NSEC 9
/*
* Maximum packet size we'll support.
#define TRAF_FR 5 /* Frame Relay */
#define TRAF_SPANS 6 /* FORE SPANS */
#define TRAF_IPSILON 7 /* Ipsilon */
+#define TRAF_UMTS_FP 8 /* UMTS Frame Protocol */
/*
* Traffic subtypes.
guint8 subtype; /* traffic subtype */
guint16 vpi; /* virtual path identifier */
guint16 vci; /* virtual circuit identifier */
+ guint8 aal2_cid; /* channel id */
guint16 channel; /* link: 0 for DTE->DCE, 1 for DCE->DTE */
guint16 cells; /* number of cells */
guint16 aal5t_u2u; /* user-to-user indicator */
#define ASCEND_PFX_WDS_X 1
#define ASCEND_PFX_WDS_R 2
#define ASCEND_PFX_WDD 3
+#define ASCEND_PFX_ISDN_X 4
+#define ASCEND_PFX_ISDN_R 5
+#define ASCEND_PFX_ETHER 6
struct ascend_phdr {
guint16 type; /* ASCEND_PFX_*, as defined above */
gboolean sent; /* TRUE=sent, FALSE=received */
};
-/* Packet "pseudo-header" information for 802.11
- Radio information is only present for WTAP_ENCAP_IEEE_802_11_WITH_RADIO. */
+/*
+ * Packet "pseudo-header" information for 802.11.
+ * Radio information is only present for WTAP_ENCAP_IEEE_802_11_WITH_RADIO.
+ *
+ * Signal strength, etc. information:
+ *
+ * Raw signal strength can be measured in milliwatts.
+ * It can also be represented as dBm, which is 10 times the log base 10
+ * of the signal strength in mW.
+ *
+ * The Receive Signal Strength Indicator is an integer in the range 0 to 255.
+ * The actual RSSI value for a given signal strength is dependent on the
+ * vendor (and perhaps on the adapter). The maximum possible RSSI value
+ * is also dependent on the vendor and perhaps the adapter.
+ *
+ * The signal strength can be represented as a percentage, which is 100
+ * times the ratio of the RSSI and the maximum RSSI.
+ */
struct ieee_802_11_phdr {
gint fcs_len; /* Number of bytes of FCS - -1 means "unknown" */
guint8 channel; /* Channel number */
guint16 pkttype; /* packet type */
};
+/* Packet "pseudo-header" for nettl (HP-UX) capture files. */
+
+struct nettl_phdr {
+ guint16 subsys;
+ guint32 devid;
+ guint32 kind;
+ gint32 pid;
+ guint16 uid;
+};
+
+/* Packet "pseudo-header" for MTP2 files. */
+
+#define MTP2_ANNEX_A_NOT_USED 0
+#define MTP2_ANNEX_A_USED 1
+#define MTP2_ANNEX_A_USED_UNKNOWN 2
+
+struct mtp2_phdr {
+ guint8 sent;
+ guint8 annex_a_used;
+ guint16 link_number;
+};
+
+/* Packet "pseudo-header" for K12 files. */
+
+typedef union {
+ struct {
+ guint16 vp;
+ guint16 vc;
+ guint16 cid;
+ } atm;
+
+ guint32 ds0mask;
+} k12_input_info_t;
+
+struct k12_phdr {
+ guint32 input;
+ const gchar* input_name;
+ const gchar* stack_file;
+ guint32 input_type;
+ k12_input_info_t input_info;
+ guchar* extra_info;
+ guint32 extra_length;
+ void* stuff;
+};
+
+#define K12_PORT_DS0S 0x00010008
+#define K12_PORT_DS1 0x00100008
+#define K12_PORT_ATMPVC 0x01020000
+
+struct lapd_phdr {
+ guint16 pkttype; /* packet type */
+ guint8 we_network;
+};
+
+struct wtap;
+struct catapult_dct2000_phdr
+{
+ union
+ {
+ struct isdn_phdr isdn;
+ struct atm_phdr atm;
+ struct p2p_phdr p2p;
+ } inner_pseudo_header;
+ gint64 seek_off;
+ struct wtap *wth;
+};
+
+/*
+ * possible event type
+ */
+#define URB_SUBMIT 'S'
+#define URB_COMPLETE 'C'
+#define URB_ERROR 'E'
+
+/*
+ * possible transfer mode
+ */
+#define URB_ISOCHRONOUS 0x0
+#define URB_INTERRUPT 0x1
+#define URB_CONTROL 0x2
+#define URB_BULK 0x3
+
+#define URB_TRANSFER_IN 0x80 /* to host */
+
+/*
+ * USB setup header as defined in USB specification
+ * See usb_20.pdf, Chapter 9.3 'USB Device Requests' for details.
+ */
+struct usb_device_setup_hdr {
+ gint8 bmRequestType;
+ guint8 bRequest;
+ guint16 wValue;
+ guint16 wIndex;
+ guint16 wLength;
+};
+
+/*
+ * Header prepended by Linux kernel to each USB event.
+ * Always followed by a struct usb_device_setup_hdr, although that header
+ * is valid only if setup_flag is 0; otherwise it's 8 bytes of junk.
+ * (Setup flag is '-', 'D', 'Z', or 0. Data flag is '<', '>', 'Z', or 0.)
+ * See linux/Documentation/usb/usbmon.txt and libpcap/pcap/usb.h for details.
+ *
+ * We present this as a pseudo-header; the values are in host byte order.
+ */
+struct linux_usb_phdr {
+ guint64 id; /* urb id, to link submission and completion events */
+ guint8 event_type; /* Submit ('S'), Completed ('C'), Error ('E') */
+ guint8 transfer_type; /* ISO (0), Intr, Control, Bulk (3) */
+ guint8 endpoint_number; /* Endpoint number (0-15) and transfer direction */
+ guint8 device_address; /* 0-127 */
+ guint16 bus_id;
+ gint8 setup_flag; /* 0, if the urb setup header is present */
+ gint8 data_flag; /* 0, if urb data is present */
+ gint64 ts_sec;
+ gint32 ts_usec;
+ gint32 status;
+ guint32 urb_len; /* whole len of urb this event refers to */
+ guint32 data_len; /* amount of urb data really present in this event */
+};
+
+/*
+ * Header prepended by libpcap to each bluetooth hci h:4 frame.
+ * Values in network byte order
+ */
+struct libpcap_bt_phdr {
+ guint32 direction; /* Bit 0 hold the frame direction. */
+};
+
+/*
+ * Endace Record Format pseudo header
+ */
+struct erf_phdr {
+ guint64 ts; /* Time stamp */
+ guint8 type;
+ guint8 flags;
+ guint16 rlen;
+ guint16 lctr;
+ guint16 wlen;
+};
+
+struct erf_ehdr {
+ guint64 ehdr;
+};
+
+/*
+ * ERF pseudo header with optional subheader
+ * (Multichannel or Ethernet)
+ */
+struct erf_mc_phdr {
+ struct erf_phdr phdr;
+ struct erf_ehdr ehdr_list[8];
+ union
+ {
+ guint16 eth_hdr;
+ guint32 mc_hdr;
+ } subhdr;
+};
+
+#define SITA_FRAME_DIR_TXED (0x00) /* values of sita_phdr.flags */
+#define SITA_FRAME_DIR_RXED (0x01)
+#define SITA_FRAME_DIR (0x01) /* mask */
+#define SITA_ERROR_NO_BUFFER (0x80)
+
+#define SITA_SIG_DSR (0x01) /* values of sita_phdr.signals */
+#define SITA_SIG_DTR (0x02)
+#define SITA_SIG_CTS (0x04)
+#define SITA_SIG_RTS (0x08)
+#define SITA_SIG_DCD (0x10)
+#define SITA_SIG_UNDEF1 (0x20)
+#define SITA_SIG_UNDEF2 (0x40)
+#define SITA_SIG_UNDEF3 (0x80)
+
+#define SITA_ERROR_TX_UNDERRUN (0x01) /* values of sita_phdr.errors2 (if SITA_FRAME_DIR_TXED) */
+#define SITA_ERROR_TX_CTS_LOST (0x02)
+#define SITA_ERROR_TX_UART_ERROR (0x04)
+#define SITA_ERROR_TX_RETX_LIMIT (0x08)
+#define SITA_ERROR_TX_UNDEF1 (0x10)
+#define SITA_ERROR_TX_UNDEF2 (0x20)
+#define SITA_ERROR_TX_UNDEF3 (0x40)
+#define SITA_ERROR_TX_UNDEF4 (0x80)
+
+#define SITA_ERROR_RX_FRAMING (0x01) /* values of sita_phdr.errors1 (if SITA_FRAME_DIR_RXED) */
+#define SITA_ERROR_RX_PARITY (0x02)
+#define SITA_ERROR_RX_COLLISION (0x04)
+#define SITA_ERROR_RX_FRAME_LONG (0x08)
+#define SITA_ERROR_RX_FRAME_SHORT (0x10)
+#define SITA_ERROR_RX_UNDEF1 (0x20)
+#define SITA_ERROR_RX_UNDEF2 (0x40)
+#define SITA_ERROR_RX_UNDEF3 (0x80)
+
+#define SITA_ERROR_RX_NONOCTET_ALIGNED (0x01) /* values of sita_phdr.errors2 (if SITA_FRAME_DIR_RXED) */
+#define SITA_ERROR_RX_ABORT (0x02)
+#define SITA_ERROR_RX_CD_LOST (0x04)
+#define SITA_ERROR_RX_DPLL (0x08)
+#define SITA_ERROR_RX_OVERRUN (0x10)
+#define SITA_ERROR_RX_FRAME_LEN_VIOL (0x20)
+#define SITA_ERROR_RX_CRC (0x40)
+#define SITA_ERROR_RX_BREAK (0x80)
+
+#define SITA_PROTO_UNUSED (0x00) /* values of sita_phdr.proto */
+#define SITA_PROTO_BOP_LAPB (0x01)
+#define SITA_PROTO_ETHERNET (0x02)
+#define SITA_PROTO_ASYNC_INTIO (0x03)
+#define SITA_PROTO_ASYNC_BLKIO (0x04)
+#define SITA_PROTO_ALC (0x05)
+#define SITA_PROTO_UTS (0x06)
+#define SITA_PROTO_PPP_HDLC (0x07)
+#define SITA_PROTO_SDLC (0x08)
+#define SITA_PROTO_TOKENRING (0x09)
+#define SITA_PROTO_I2C (0x10)
+#define SITA_PROTO_DPM_LINK (0x11)
+#define SITA_PROTO_BOP_FRL (0x12)
+
+struct sita_phdr {
+ guint8 flags;
+ guint8 signals;
+ guint8 errors1;
+ guint8 errors2;
+ guint8 proto;
+};
+
+/*pseudo header for Bluetooth HCI*/
+struct bthci_phdr {
+ gboolean sent;
+ guint8 channel;
+};
+
+#define BTHCI_CHANNEL_COMMAND 1
+#define BTHCI_CHANNEL_ACL 2
+#define BTHCI_CHANNEL_SCO 3
+#define BTHCI_CHANNEL_EVENT 4
+
+/* pseudo header for WTAP_ENCAP_LAYER1_EVENT */
+struct l1event_phdr {
+ gboolean uton;
+};
+
+/* * I2C pseudo header */
+struct i2c_phdr {
+ guint8 is_event;
+ guint8 bus;
+ guint32 flags;
+};
+
+/* pseudo header for WTAP_ENCAP_GSM_UM */
+struct gsm_um_phdr {
+ gboolean uplink;
+ guint8 channel;
+ /* The following are only populated for downlink */
+ guint8 bsic;
+ guint16 arfcn;
+ guint32 tdma_frame;
+ guint8 error;
+ guint16 timeshift;
+};
+
+#define GSM_UM_CHANNEL_UNKNOWN 0
+#define GSM_UM_CHANNEL_BCCH 1
+#define GSM_UM_CHANNEL_SDCCH 2
+#define GSM_UM_CHANNEL_SACCH 3
+#define GSM_UM_CHANNEL_FACCH 4
+#define GSM_UM_CHANNEL_CCCH 5
+#define GSM_UM_CHANNEL_RACH 6
+#define GSM_UM_CHANNEL_AGCH 7
+#define GSM_UM_CHANNEL_PCH 8
+
union wtap_pseudo_header {
struct eth_phdr eth;
struct x25_phdr x25;
struct ieee_802_11_phdr ieee_802_11;
struct cosine_phdr cosine;
struct irda_phdr irda;
+ struct nettl_phdr nettl;
+ struct mtp2_phdr mtp2;
+ struct k12_phdr k12;
+ struct lapd_phdr lapd;
+ struct catapult_dct2000_phdr dct2000;
+ struct linux_usb_phdr linux_usb;
+ struct erf_mc_phdr erf;
+ struct sita_phdr sita;
+ struct bthci_phdr bthci;
+ struct l1event_phdr l1event;
+ struct i2c_phdr i2c;
+ struct gsm_um_phdr gsm_um;
+};
+
+struct wtap_nstime {
+ time_t secs;
+ int nsecs;
};
struct wtap_pkthdr {
- struct timeval ts;
+ struct wtap_nstime ts;
guint32 caplen;
guint32 len;
int pkt_encap;
};
-typedef void (*wtap_handler)(guchar*, const struct wtap_pkthdr*,
- long, union wtap_pseudo_header *pseudo_header, const guchar *);
-
struct wtap;
struct Buffer;
struct wtap_dumper;
typedef struct wtap wtap;
typedef struct wtap_dumper wtap_dumper;
+struct file_type_info {
+ /* the file type name */
+ /* should be NULL for all "pseudo" types that are only internally used and not read/writeable */
+ const char *name;
+
+ /* the file type short name, used as a shortcut for the command line tools */
+ /* should be NULL for all "pseudo" types that are only internally used and not read/writeable */
+ const char *short_name;
+
+ /* the common file extensions for this type (seperated by semicolon) */
+ /* should be *.* if no common extension is applicable */
+ const char *file_extensions;
+
+ /* the default file extension, used to save this type */
+ /* should be NULL if no default extension is known */
+ const char *file_extension_default;
+
+ /* can this type be compressed with gzip? */
+ gboolean can_compress;
+
+ /* can this type write this encapsulation format? */
+ /* should be NULL is this file type don't have write support */
+ int (*can_write_encap)(int);
+
+ /* the function to open the capture file for writing */
+ /* should be NULL is this file type don't have write support */
+ int (*dump_open)(wtap_dumper *, gboolean, int *);
+};
+
+
+typedef int (*wtap_open_routine_t)(struct wtap*, int *, char **);
+
+
/*
* On failure, "wtap_open_offline()" returns NULL, and puts into the
* "int" pointed to by its second argument:
*
* a positive "errno" value if the capture file can't be opened;
- *
* a negative number, indicating the type of error, on other failures.
*/
struct wtap* wtap_open_offline(const char *filename, int *err,
gchar **err_info, gboolean do_random);
-/* Returns TRUE if entire loop-reading was successful. If read failure
- * happened, FALSE is returned and err is set. */
-gboolean wtap_loop(wtap *wth, int, wtap_handler, guchar*, int *err,
- gchar **err_info);
-
/* Returns TRUE if read was successful. FALSE if failure. data_offset is
- * set the the offset in the file where the data for the read packet is
+ * set to the offset in the file where the data for the read packet is
* located. */
gboolean wtap_read(wtap *wth, int *err, gchar **err_info,
- long *data_offset);
+ gint64 *data_offset);
+
+gboolean wtap_seek_read (wtap *wth, gint64 seek_off,
+ union wtap_pseudo_header *pseudo_header, guint8 *pd, int len,
+ int *err, gchar **err_info);
+/*** get various information snippets about the current packet ***/
struct wtap_pkthdr *wtap_phdr(wtap *wth);
union wtap_pseudo_header *wtap_pseudoheader(wtap *wth);
guint8 *wtap_buf_ptr(wtap *wth);
-int wtap_fd(wtap *wth);
+/*** get various information snippets about the current file ***/
+
+/* Return an approximation of the amount of data we've read sequentially
+ * from the file so far. */
+gint64 wtap_read_so_far(wtap *wth, int *err);
+gint64 wtap_file_size(wtap *wth, int *err);
int wtap_snapshot_length(wtap *wth); /* per file */
int wtap_file_type(wtap *wth);
int wtap_file_encap(wtap *wth);
+int wtap_file_tsprecision(wtap *wth);
-const char *wtap_file_type_string(int filetype);
-const char *wtap_file_type_short_string(int filetype);
-int wtap_short_string_to_file_type(const char *short_name);
-
-const char *wtap_encap_string(int encap);
-const char *wtap_encap_short_string(int encap);
-int wtap_short_string_to_encap(const char *short_name);
-
-const char *wtap_strerror(int err);
+/*** close the current file ***/
void wtap_sequential_close(wtap *wth);
void wtap_close(wtap *wth);
-gboolean wtap_seek_read (wtap *wth, long seek_off,
- union wtap_pseudo_header *pseudo_header, guint8 *pd, int len,
- int *err, gchar **err_info);
+/*** dump packets into a capture file ***/
gboolean wtap_dump_can_open(int filetype);
gboolean wtap_dump_can_write_encap(int filetype, int encap);
+gboolean wtap_dump_can_compress(int filetype);
wtap_dumper* wtap_dump_open(const char *filename, int filetype, int encap,
- int snaplen, int *err);
+ int snaplen, gboolean compressed, int *err);
wtap_dumper* wtap_dump_fdopen(int fd, int filetype, int encap, int snaplen,
- int *err);
+ gboolean compressed, int *err);
gboolean wtap_dump(wtap_dumper *, const struct wtap_pkthdr *,
const union wtap_pseudo_header *pseudo_header, const guchar *, int *err);
-FILE* wtap_dump_file(wtap_dumper *);
+void wtap_dump_flush(wtap_dumper *);
+gint64 wtap_get_bytes_dumped(wtap_dumper *);
+void wtap_set_bytes_dumped(wtap_dumper *wdh, gint64 bytes_dumped);
gboolean wtap_dump_close(wtap_dumper *, int *);
-long wtap_get_bytes_dumped(wtap_dumper *);
-void wtap_set_bytes_dumped(wtap_dumper *wdh, long bytes_dumped);
+
+/*** various string converter functions ***/
+const char *wtap_file_type_string(int filetype);
+const char *wtap_file_type_short_string(int filetype);
+int wtap_short_string_to_file_type(const char *short_name);
+
+const char *wtap_file_extensions_string(int filetype);
+const char *wtap_file_extension_default_string(int filetype);
+
+const char *wtap_encap_string(int encap);
+const char *wtap_encap_short_string(int encap);
+int wtap_short_string_to_encap(const char *short_name);
+
+const char *wtap_strerror(int err);
+
+/*** get available number of file types and encapsulations ***/
+int wtap_get_num_encap_types(void);
+int wtap_get_num_file_types(void);
+
+/*** dynamically register new file types and encapsulations ***/
+void wtap_register_open_routine(wtap_open_routine_t, gboolean has_magic);
+int wtap_register_file_type(const struct file_type_info* fi);
+int wtap_register_encap_type(char* name, char* short_name);
+
/*
* Wiretap error codes.
/* Uncompressing Sniffer data would overflow buffer */
#define WTAP_ERR_UNC_BAD_OFFSET -17
/* LZ77 compressed data has bad offset to string */
+#define WTAP_ERR_RANDOM_OPEN_STDIN -18
+ /* We're trying to open the standard input for random access */
+#define WTAP_ERR_COMPRESSION_NOT_SUPPORTED -19
+ /* The filetype doesn't support output compression */
/* Errors from zlib; zlib error Z_xxx turns into Wiretap error
WTAP_ERR_ZLIB + Z_xxx.
#define WTAP_ERR_ZLIB_MAX -100
#define WTAP_ERR_ZLIB_MIN -300
+#ifdef __cplusplus
+}
+#endif /* __cplusplus */
#endif /* __WTAP_H__ */
git.samba.org / obnox / wireshark / wip.git / blobdiff