summaryrefslogtreecommitdiffstats
path: root/src/pcap_manager.cc
diff options
context:
space:
mode:
Diffstat (limited to '')
-rw-r--r--src/pcap_manager.cc139
1 files changed, 139 insertions, 0 deletions
diff --git a/src/pcap_manager.cc b/src/pcap_manager.cc
new file mode 100644
index 0000000..dbe304a
--- /dev/null
+++ b/src/pcap_manager.cc
@@ -0,0 +1,139 @@
+/**
+ * Copyright (c) 2021, Timothy Stack
+ *
+ * All rights reserved.
+ *
+ * Redistribution and use in source and binary forms, with or without
+ * modification, are permitted provided that the following conditions are met:
+ *
+ * * Redistributions of source code must retain the above copyright notice, this
+ * list of conditions and the following disclaimer.
+ * * Redistributions in binary form must reproduce the above copyright notice,
+ * this list of conditions and the following disclaimer in the documentation
+ * and/or other materials provided with the distribution.
+ * * Neither the name of Timothy Stack nor the names of its contributors
+ * may be used to endorse or promote products derived from this software
+ * without specific prior written permission.
+ *
+ * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ''AS IS'' AND ANY
+ * EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
+ * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
+ * DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE FOR ANY
+ * DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
+ * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
+ * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
+ * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+ * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
+ * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+ *
+ * @file pcap_manager.cc
+ */
+
+#include <memory>
+#include <thread>
+#include <vector>
+
+#include "pcap_manager.hh"
+
+#include <unistd.h>
+
+#include "base/fs_util.hh"
+#include "config.h"
+#include "line_buffer.hh"
+
+namespace pcap_manager {
+
+Result<convert_result, std::string>
+convert(const std::string& filename)
+{
+ log_info("attempting to convert pcap file -- %s", filename.c_str());
+
+ auto outfile = TRY(lnav::filesystem::open_temp_file(
+ ghc::filesystem::temp_directory_path() / "lnav.pcap.XXXXXX"));
+ ghc::filesystem::remove(outfile.first);
+ auto err_pipe = TRY(auto_pipe::for_child_fd(STDERR_FILENO));
+ auto child = TRY(lnav::pid::from_fork());
+
+ err_pipe.after_fork(child.in());
+ if (child.in_child()) {
+ auto dev_null = open("/dev/null", O_RDONLY);
+
+ dup2(dev_null, STDIN_FILENO);
+ dup2(outfile.second.release(), STDOUT_FILENO);
+ setenv("TZ", "UTC", 1);
+
+ const char* args[] = {
+ "tshark",
+ "-T",
+ "ek",
+ "-P",
+ "-V",
+ "-t",
+ "ad",
+ "-r",
+ filename.c_str(),
+ nullptr,
+ };
+
+ execvp("tshark", (char**) args);
+ if (errno == ENOENT) {
+ fprintf(stderr,
+ "pcap support requires 'tshark' v3+ to be installed\n");
+ } else {
+ fprintf(
+ stderr, "failed to execute 'tshark' -- %s\n", strerror(errno));
+ }
+ _exit(EXIT_FAILURE);
+ }
+
+ auto error_queue = std::make_shared<std::vector<std::string>>();
+ std::thread err_reader([err = std::move(err_pipe.read_end()),
+ error_queue,
+ child_pid = child.in()]() mutable {
+ line_buffer lb;
+ file_range pipe_range;
+ bool done = false;
+
+ lb.set_fd(err);
+ while (!done) {
+ auto load_res = lb.load_next_line(pipe_range);
+
+ if (load_res.isErr()) {
+ done = true;
+ } else {
+ auto li = load_res.unwrap();
+
+ pipe_range = li.li_file_range;
+ if (li.li_file_range.empty()) {
+ done = true;
+ } else {
+ lb.read_range(li.li_file_range)
+ .then([error_queue, child_pid](auto sbr) {
+ auto line_str = string_fragment(
+ sbr.get_data(), 0, sbr.length())
+ .trim("\n");
+ if (error_queue->size() < 5) {
+ error_queue->emplace_back(line_str.to_string());
+ }
+
+ log_debug("pcap[%d]: %.*s",
+ child_pid,
+ line_str.length(),
+ line_str.data());
+ });
+ }
+ }
+ }
+ });
+ err_reader.detach();
+
+ log_info("started tshark %d to process file", child.in());
+
+ return Ok(convert_result{
+ std::move(child),
+ std::move(outfile.second),
+ error_queue,
+ });
+}
+
+} // namespace pcap_manager