diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-10 20:34:10 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-10 20:34:10 +0000 |
commit | e4ba6dbc3f1e76890b22773807ea37fe8fa2b1bc (patch) | |
tree | 68cb5ef9081156392f1dd62a00c6ccc1451b93df /text2pcap.c | |
parent | Initial commit. (diff) | |
download | wireshark-e4ba6dbc3f1e76890b22773807ea37fe8fa2b1bc.tar.xz wireshark-e4ba6dbc3f1e76890b22773807ea37fe8fa2b1bc.zip |
Adding upstream version 4.2.2.upstream/4.2.2
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'text2pcap.c')
-rw-r--r-- | text2pcap.c | 1080 |
1 files changed, 1080 insertions, 0 deletions
diff --git a/text2pcap.c b/text2pcap.c new file mode 100644 index 00000000..aa3a279f --- /dev/null +++ b/text2pcap.c @@ -0,0 +1,1080 @@ +/**-*-C-*-********************************************************************** + * + * text2pcap.c + * + * Utility to convert an ASCII hexdump into a libpcap-format capture file + * + * (c) Copyright 2001 Ashok Narayanan <ashokn@cisco.com> + * + * Wireshark - Network traffic analyzer + * By Gerald Combs <gerald@wireshark.org> + * Copyright 1998 Gerald Combs + * + * SPDX-License-Identifier: GPL-2.0-or-later + * + *******************************************************************************/ + +/******************************************************************************* + * + * This utility reads in an ASCII hexdump of this common format: + * + * 00000000 00 E0 1E A7 05 6F 00 10 5A A0 B9 12 08 00 46 00 .....o..Z.....F. + * 00000010 03 68 00 00 00 00 0A 2E EE 33 0F 19 08 7F 0F 19 .h.......3...... + * 00000020 03 80 94 04 00 00 10 01 16 A2 0A 00 03 50 00 0C .............P.. + * 00000030 01 01 0F 19 03 80 11 01 1E 61 00 0C 03 01 0F 19 .........a...... + * + * Each bytestring line consists of an offset, one or more bytes, and + * text at the end. An offset is defined as a hex string of more than + * two characters. A byte is defined as a hex string of exactly two + * characters. The text at the end is ignored, as is any text before + * the offset. Bytes read from a bytestring line are added to the + * current packet only if all the following conditions are satisfied: + * + * - No text appears between the offset and the bytes (any bytes appearing after + * such text would be ignored) + * + * - The offset must be arithmetically correct, i.e. if the offset is 00000020, + * then exactly 32 bytes must have been read into this packet before this. + * If the offset is wrong, the packet is immediately terminated + * + * A packet start is signaled by a zero offset. + * + * Lines starting with #TEXT2PCAP are directives. These allow the user + * to embed instructions into the capture file which allows text2pcap + * to take some actions (e.g. specifying the encapsulation + * etc.). Currently no directives are implemented. + * + * Lines beginning with # which are not directives are ignored as + * comments. Currently all non-hexdump text is ignored by text2pcap; + * in the future, text processing may be added, but lines prefixed + * with '#' will still be ignored. + * + * The output is a libpcap packet containing Ethernet frames by + * default. This program takes options which allow the user to add + * dummy Ethernet, IP and UDP, TCP or SCTP headers to the packets in order + * to allow dumps of L3 or higher protocols to be decoded. + * + * Considerable flexibility is built into this code to read hexdumps + * of slightly different formats. For example, any text prefixing the + * hexdump line is dropped (including mail forwarding '>'). The offset + * can be any hex number of four digits or greater. + * + * This converter cannot read a single packet greater than + * WTAP_MAX_PACKET_SIZE_STANDARD. The snapshot length is automatically + * set to WTAP_MAX_PACKET_SIZE_STANDARD. + */ + +#include <config.h> +#define WS_LOG_DOMAIN LOG_DOMAIN_MAIN + +#include <stdio.h> +#include <stdlib.h> +#include <string.h> +#include <wsutil/file_util.h> +#include <cli_main.h> +#include <wsutil/cmdarg_err.h> +#include <ui/text_import.h> +#include <wsutil/version_info.h> +#include <ui/failure_message.h> +#include <wsutil/report_message.h> +#include <wsutil/inet_addr.h> +#include <wsutil/cpu_info.h> +#include <wsutil/os_version_info.h> +#include <wsutil/privileges.h> +#include <wsutil/strtoi.h> + +#include <glib.h> + +#include <ws_exit_codes.h> +#include <wsutil/str_util.h> +#include <wsutil/strnatcmp.h> +#include <wsutil/wslog.h> +#include <wsutil/ws_getopt.h> + +#include <errno.h> + +#include "text2pcap.h" + +#include "wiretap/wtap.h" +#include "wiretap/pcap-encap.h" + +/*--- Options --------------------------------------------------------------------*/ + +/* Be quiet */ +static gboolean quiet = FALSE; + +/* Dummy Ethernet header */ +static gboolean hdr_ethernet = FALSE; +#if 0 +/* XXX: Maybe add custom Ethernet Address options? */ +static guint8 hdr_eth_dest_addr[6] = {0x0a, 0x02, 0x02, 0x02, 0x02, 0x02}; +static guint8 hdr_eth_src_addr[6] = {0x0a, 0x02, 0x02, 0x02, 0x02, 0x01}; +#endif +static guint32 hdr_ethernet_proto = 0; + +/* Dummy IP header */ +static gboolean hdr_ip = FALSE; +static gboolean hdr_ipv6 = FALSE; +static gboolean have_hdr_ip_proto = FALSE; +static guint8 hdr_ip_proto = 0; + +/* Destination and source addresses for IP header */ +static guint32 hdr_ip_dest_addr = 0; +static guint32 hdr_ip_src_addr = 0; +static ws_in6_addr hdr_ipv6_dest_addr = {{0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}}; +static ws_in6_addr hdr_ipv6_src_addr = {{0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}}; + +/* Dummy UDP header */ +static gboolean hdr_udp = FALSE; +static guint32 hdr_dest_port = 0; +static guint32 hdr_src_port = 0; + +/* Dummy TCP header */ +static gboolean hdr_tcp = FALSE; + +/* Dummy SCTP header */ +static gboolean hdr_sctp = FALSE; +static guint32 hdr_sctp_src = 0; +static guint32 hdr_sctp_dest = 0; +static guint32 hdr_sctp_tag = 0; + +/* Dummy DATA chunk header */ +static gboolean hdr_data_chunk = FALSE; +static guint32 hdr_data_chunk_tsn = 0; +static guint16 hdr_data_chunk_sid = 0; +static guint16 hdr_data_chunk_ssn = 0; +static guint32 hdr_data_chunk_ppid = 0; + +/* Export PDU */ +static gboolean hdr_export_pdu = FALSE; + +/*--- Local data -----------------------------------------------------------------*/ + +/* This is where we store the packet currently being built */ +static guint32 max_offset = WTAP_MAX_PACKET_SIZE_STANDARD; + +/* Time code of packet, derived from packet_preamble */ +static int ts_fmt_iso = 0; + +/* Input file */ +static char *input_filename; +static FILE *input_file = NULL; +/* Output file */ +static char *output_filename; + +static wtap_dumper* wdh; + +/*---------------------------------------------------------------------- + * Print usage string and exit + */ +static void +print_usage (FILE *output) +{ + fprintf(output, + "\n" + "Usage: text2pcap [options] <infile> <outfile>\n" + "\n" + "where <infile> specifies input filename (use - for standard input)\n" + " <outfile> specifies output filename (use - for standard output)\n" + "\n" + "Input:\n" + " -o hex|oct|dec|none parse offsets as (h)ex, (o)ctal, (d)ecimal, or (n)one;\n" + " default is hex.\n" + " -t <timefmt> treat the text before the packet as a date/time code;\n" + " <timefmt> is a format string supported by strptime,\n" + " with an optional %%f descriptor for fractional seconds.\n" + " Example: The time \"10:15:14.5476\" has the format code\n" + " \"%%H:%%M:%%S.%%f\"\n" + " The special format string ISO supports ISO-8601 times.\n" + " NOTE: Date/time fields from the current date/time are\n" + " used as the default for unspecified fields.\n" + " -D the text before the packet starts with an I or an O,\n" + " indicating that the packet is inbound or outbound.\n" + " This is used when generating dummy headers if the\n" + " output format supports it (e.g. pcapng).\n" + " -a enable ASCII text dump identification.\n" + " The start of the ASCII text dump can be identified\n" + " and excluded from the packet data, even if it looks\n" + " like a HEX dump.\n" + " NOTE: Do not enable it if the input file does not\n" + " contain the ASCII text dump.\n" + " -r <regex> enable regex mode. Scan the input using <regex>, a Perl\n" + " compatible regular expression matching a single packet.\n" + " Named capturing subgroups are used to identify fields:\n" + " <data> (mand.), and <time>, <dir>, and <seqno> (opt.)\n" + " The time field format is taken from the -t option\n" + " Example: -r '^(?<dir>[<>])\\s(?<time>\\d+:\\d\\d:\\d\\d.\\d+)\\s(?<data>[0-9a-fA-F]+)$'\n" + " could match a file with lines like\n" + " > 0:00:00.265620 a130368b000000080060\n" + " < 0:00:00.295459 a2010800000000000000000800000000\n" + " -b 2|8|16|64 encoding base (radix) of the packet data in regex mode\n" + " (def: 16: hexadecimal) No effect in hexdump mode.\n" + "\n" + "Output:\n" + " -F <capture type> set the output file type; default is pcapng.\n" + " an empty \"-F\" option will list the file types.\n" + " -E <encap type> set the output file encapsulation type; default is\n" + " ether (Ethernet). An empty \"-E\" option will list\n" + " the encapsulation types.\n" + " -l <typenum> set the output file encapsulation type via link-layer\n" + " type number; default is 1 (Ethernet). See\n" + " https://www.tcpdump.org/linktypes.html for a list of\n" + " numbers.\n" + " Example: -l 7 for ARCNet packets.\n" + " -m <max-packet> max packet length in output; default is %d\n" + " -N <intf-name> assign name to the interface in the pcapng file.\n" + "\n" + "Prepend dummy header:\n" + " -e <l3pid> prepend dummy Ethernet II header with specified L3PID\n" + " (in HEX).\n" + " Example: -e 0x806 to specify an ARP packet.\n" + " -i <proto> prepend dummy IP header with specified IP protocol\n" + " (in DECIMAL).\n" + " Automatically prepends Ethernet header as well if\n" + " link-layer type is Ethernet.\n" + " Example: -i 46\n" + " -4 <srcip>,<destip> prepend dummy IPv4 header with specified\n" + " dest and source address.\n" + " Example: -4 10.0.0.1,10.0.0.2\n" + " -6 <srcip>,<destip> prepend dummy IPv6 header with specified\n" + " dest and source address.\n" + " Example: -6 2001:db8::b3ff:fe1e:8329,2001:0db8:85a3::8a2e:0370:7334\n" + " -u <srcp>,<destp> prepend dummy UDP header with specified\n" + " source and destination ports (in DECIMAL).\n" + " Automatically prepends Ethernet & IP headers as well.\n" + " Example: -u 1000,69 to make the packets look like\n" + " TFTP/UDP packets.\n" + " -T <srcp>,<destp> prepend dummy TCP header with specified\n" + " source and destination ports (in DECIMAL).\n" + " Automatically prepends Ethernet & IP headers as well.\n" + " Example: -T 50,60\n" + " -s <srcp>,<dstp>,<tag> prepend dummy SCTP header with specified\n" + " source/dest ports and verification tag (in DECIMAL).\n" + " Automatically prepends Ethernet & IP headers as well.\n" + " Example: -s 30,40,34\n" + " -S <srcp>,<dstp>,<ppi> prepend dummy SCTP header with specified\n" + " source/dest ports and verification tag 0.\n" + " Automatically prepends a dummy SCTP DATA\n" + " chunk header with payload protocol identifier ppi.\n" + " Example: -S 30,40,34\n" + " -P <dissector> prepend EXPORTED_PDU header with specified dissector\n" + " as the payload DISSECTOR_NAME tag.\n" + " Automatically sets link type to Upper PDU Export.\n" + " EXPORTED_PDU payload defaults to \"data\" otherwise.\n" + "\n", + WTAP_MAX_PACKET_SIZE_STANDARD); + + ws_log_print_usage(output); + + fprintf(output, "\n" + "Miscellaneous:\n" + " -h, --help display this help and exit\n" + " -v, --version print version information and exit\n" + " -q don't report processed packet counts\n" + ""); +} + +/* + * Set the hdr_ip_proto parameter, and set the flag indicate that the + * parameter has been specified. + * + * XXX - catch the case where two different options set it differently? + */ +static void +set_hdr_ip_proto(guint8 ip_proto) +{ + have_hdr_ip_proto = TRUE; + hdr_ip_proto = ip_proto; +} + +static void +list_capture_types(void) { + GArray *writable_type_subtypes; + + cmdarg_err("The available capture file types for the \"-F\" flag are:\n"); + writable_type_subtypes = wtap_get_writable_file_types_subtypes(FT_SORT_BY_NAME); + for (guint i = 0; i < writable_type_subtypes->len; i++) { + int ft = g_array_index(writable_type_subtypes, int, i); + fprintf(stderr, " %s - %s\n", wtap_file_type_subtype_name(ft), + wtap_file_type_subtype_description(ft)); + } + g_array_free(writable_type_subtypes, TRUE); +} + +struct string_elem { + const char *sstr; /* The short string */ + const char *lstr; /* The long string */ +}; + +static gint +string_nat_compare(gconstpointer a, gconstpointer b) +{ + return ws_ascii_strnatcmp(((const struct string_elem *)a)->sstr, + ((const struct string_elem *)b)->sstr); +} + +static void +string_elem_print(gpointer data, gpointer stream_ptr) +{ + fprintf((FILE *) stream_ptr, " %s - %s\n", + ((struct string_elem *)data)->sstr, + ((struct string_elem *)data)->lstr); +} + +static void +list_encap_types(void) { + int i; + struct string_elem *encaps; + GSList *list = NULL; + + encaps = g_new(struct string_elem, wtap_get_num_encap_types()); + cmdarg_err("The available encapsulation types for the \"-E\" flag are:\n"); + for (i = 0; i < wtap_get_num_encap_types(); i++) { + /* Exclude wtap encapsulations that require a pseudo header, + * because we won't setup one from the text we import and + * wiretap doesn't allow us to write 'raw' frames + */ + if (!wtap_encap_requires_phdr(i)) { + encaps[i].sstr = wtap_encap_name(i); + if (encaps[i].sstr != NULL) { + encaps[i].lstr = wtap_encap_description(i); + list = g_slist_insert_sorted(list, &encaps[i], string_nat_compare); + } + } + } + g_slist_foreach(list, string_elem_print, stderr); + g_slist_free(list); + g_free(encaps); +} + +static void +cleanup_dump_params(wtap_dump_params *params) +{ + wtap_free_idb_info(params->idb_inf); + wtap_dump_params_cleanup(params); +} + +/*---------------------------------------------------------------------- + * Parse CLI options + */ +static int +parse_options(int argc, char *argv[], text_import_info_t * const info, wtap_dump_params * const params) +{ + int ret; + int c; + char *p; + static const struct ws_option long_options[] = { + {"help", ws_no_argument, NULL, 'h'}, + {"version", ws_no_argument, NULL, 'v'}, + {0, 0, 0, 0 } + }; + const char *interface_name = NULL; + /* Link-layer type; see https://www.tcpdump.org/linktypes.html for details */ + guint32 pcap_link_type = 1; /* Default is LINKTYPE_ETHERNET */ + int file_type_subtype = WTAP_FILE_TYPE_SUBTYPE_UNKNOWN; + int wtap_encap_type = WTAP_ENCAP_ETHERNET; + int err; + char* err_info; + GError* gerror = NULL; + GRegex* regex = NULL; + + info->mode = TEXT_IMPORT_HEXDUMP; + info->hexdump.offset_type = OFFSET_HEX; + info->regex.encoding = ENCODING_PLAIN_HEX; + info->payload = "data"; + + /* Initialize the version information. */ + ws_init_version_info("Text2pcap", NULL, NULL); + + /* Scan CLI parameters */ + while ((c = ws_getopt_long(argc, argv, "hqab:De:E:F:i:l:m:nN:o:u:P:r:s:S:t:T:v4:6:", long_options, NULL)) != -1) { + switch (c) { + case 'h': + show_help_header("Generate a capture file from an ASCII hexdump of packets."); + print_usage(stdout); + exit(0); + break; + case 'q': quiet = TRUE; break; + case 'a': info->hexdump.identify_ascii = TRUE; break; + case 'D': info->hexdump.has_direction = TRUE; break; + case 'l': + pcap_link_type = (guint32)strtol(ws_optarg, NULL, 0); + wtap_encap_type = wtap_pcap_encap_to_wtap_encap(pcap_link_type); + break; + case 'm': max_offset = (guint32)strtol(ws_optarg, NULL, 0); break; + case 'n': cmdarg_err("'-n' is deprecated; the output format already defaults to pcapng."); break; + case 'N': interface_name = ws_optarg; break; + case 'b': + { + guint8 radix; + if (!ws_strtou8(ws_optarg, NULL, &radix)) { + cmdarg_err("Bad argument for '-b': %s", ws_optarg); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + switch (radix) { + case 2: info->regex.encoding = ENCODING_PLAIN_BIN; break; + case 8: info->regex.encoding = ENCODING_PLAIN_OCT; break; + case 16: info->regex.encoding = ENCODING_PLAIN_HEX; break; + case 64: info->regex.encoding = ENCODING_BASE64; break; + default: + cmdarg_err("Bad argument for '-b': %s", ws_optarg); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + break; + } + + case 'o': + if (ws_optarg[0] != 'h' && ws_optarg[0] != 'o' && ws_optarg[0] != 'd' && ws_optarg[0] != 'n') { + cmdarg_err("Bad argument for '-o': %s", ws_optarg); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + switch (ws_optarg[0]) { + case 'o': info->hexdump.offset_type = OFFSET_OCT; break; + case 'h': info->hexdump.offset_type = OFFSET_HEX; break; + case 'd': info->hexdump.offset_type = OFFSET_DEC; break; + case 'n': info->hexdump.offset_type = OFFSET_NONE; break; + } + break; + + case 'e': + hdr_ethernet = TRUE; + if (sscanf(ws_optarg, "%x", &hdr_ethernet_proto) < 1) { + cmdarg_err("Bad argument for '-e': %s", ws_optarg); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + break; + + case 'E': + wtap_encap_type = wtap_name_to_encap(ws_optarg); + if (wtap_encap_type < 0) { + cmdarg_err("\"%s\" isn't a valid encapsulation type", ws_optarg); + list_encap_types(); + return WS_EXIT_INVALID_OPTION; + } + break; + + case 'F': + file_type_subtype = wtap_name_to_file_type_subtype(ws_optarg); + if (file_type_subtype < 0) { + cmdarg_err("\"%s\" isn't a valid capture file type", ws_optarg); + list_capture_types(); + return WS_EXIT_INVALID_OPTION; + } + break; + + case 'i': + { + guint8 ip_proto; + if (!ws_strtou8(ws_optarg, NULL, &ip_proto)) { + cmdarg_err("Bad argument for '-i': %s", ws_optarg); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + set_hdr_ip_proto(ip_proto); + break; + } + + case 'P': + hdr_export_pdu = TRUE; + info->payload = ws_optarg; + break; + + case 'r': + info->mode = TEXT_IMPORT_REGEX; + if (regex != NULL) { + /* XXX: Used the option twice. Should we warn? */ + g_regex_unref(regex); + } + regex = g_regex_new(ws_optarg, G_REGEX_DUPNAMES | G_REGEX_OPTIMIZE | G_REGEX_MULTILINE, G_REGEX_MATCH_NOTEMPTY, &gerror); + if (gerror) { + cmdarg_err("%s", gerror->message); + g_error_free(gerror); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } else { + if (g_regex_get_string_number(regex, "data") == -1) { + cmdarg_err("Regex missing capturing group data (use (?<data>(...)) )"); + g_regex_unref(regex); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + } + break; + + case 's': + hdr_sctp = TRUE; + hdr_data_chunk = FALSE; + hdr_tcp = FALSE; + hdr_udp = FALSE; + hdr_sctp_src = (guint32)strtol(ws_optarg, &p, 10); + if (p == ws_optarg || (*p != ',' && *p != '\0')) { + cmdarg_err("Bad src port for '-%c'", c); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + if (*p == '\0') { + cmdarg_err("No dest port specified for '-%c'", c); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + p++; + ws_optarg = p; + hdr_sctp_dest = (guint32)strtol(ws_optarg, &p, 10); + if (p == ws_optarg || (*p != ',' && *p != '\0')) { + cmdarg_err("Bad dest port for '-s'"); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + if (*p == '\0') { + cmdarg_err("No tag specified for '-%c'", c); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + p++; + ws_optarg = p; + hdr_sctp_tag = (guint32)strtol(ws_optarg, &p, 10); + if (p == ws_optarg || *p != '\0') { + cmdarg_err("Bad tag for '-%c'", c); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + + set_hdr_ip_proto(132); + break; + + case 'S': + hdr_sctp = TRUE; + hdr_data_chunk = TRUE; + hdr_tcp = FALSE; + hdr_udp = FALSE; + hdr_sctp_src = (guint32)strtol(ws_optarg, &p, 10); + if (p == ws_optarg || (*p != ',' && *p != '\0')) { + cmdarg_err("Bad src port for '-%c'", c); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + if (*p == '\0') { + cmdarg_err("No dest port specified for '-%c'", c); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + p++; + ws_optarg = p; + hdr_sctp_dest = (guint32)strtol(ws_optarg, &p, 10); + if (p == ws_optarg || (*p != ',' && *p != '\0')) { + cmdarg_err("Bad dest port for '-s'"); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + if (*p == '\0') { + cmdarg_err("No ppi specified for '-%c'", c); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + p++; + ws_optarg = p; + hdr_data_chunk_ppid = (guint32)strtoul(ws_optarg, &p, 10); + if (p == ws_optarg || *p != '\0') { + cmdarg_err("Bad ppi for '-%c'", c); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + + set_hdr_ip_proto(132); + break; + + case 't': + info->timestamp_format = ws_optarg; + if (!strcmp(ws_optarg, "ISO")) + ts_fmt_iso = 1; + break; + + case 'u': + hdr_udp = TRUE; + hdr_tcp = FALSE; + hdr_sctp = FALSE; + hdr_data_chunk = FALSE; + hdr_src_port = (guint32)strtol(ws_optarg, &p, 10); + if (p == ws_optarg || (*p != ',' && *p != '\0')) { + cmdarg_err("Bad src port for '-u'"); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + if (*p == '\0') { + cmdarg_err("No dest port specified for '-u'"); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + p++; + ws_optarg = p; + hdr_dest_port = (guint32)strtol(ws_optarg, &p, 10); + if (p == ws_optarg || *p != '\0') { + cmdarg_err("Bad dest port for '-u'"); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + set_hdr_ip_proto(17); + break; + + case 'T': + hdr_tcp = TRUE; + hdr_udp = FALSE; + hdr_sctp = FALSE; + hdr_data_chunk = FALSE; + hdr_src_port = (guint32)strtol(ws_optarg, &p, 10); + if (p == ws_optarg || (*p != ',' && *p != '\0')) { + cmdarg_err("Bad src port for '-T'"); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + if (*p == '\0') { + cmdarg_err("No dest port specified for '-u'"); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + p++; + ws_optarg = p; + hdr_dest_port = (guint32)strtol(ws_optarg, &p, 10); + if (p == ws_optarg || *p != '\0') { + cmdarg_err("Bad dest port for '-T'"); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + set_hdr_ip_proto(6); + break; + + case 'v': + show_version(); + exit(0); + break; + + case '4': + case '6': + p = strchr(ws_optarg, ','); + + if (!p) { + cmdarg_err("Bad source param addr for '-%c'", c); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + + *p = '\0'; + if (c == '6') + { + hdr_ipv6 = TRUE; + hdr_ip = FALSE; + } + else + { + hdr_ip = TRUE; + hdr_ipv6 = FALSE; + } + hdr_ethernet = TRUE; + + if (hdr_ipv6 == TRUE) { + if (!ws_inet_pton6(ws_optarg, &hdr_ipv6_src_addr)) { + cmdarg_err("Bad src addr -%c '%s'", c, p); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + } else { + if (!ws_inet_pton4(ws_optarg, &hdr_ip_src_addr)) { + cmdarg_err("Bad src addr -%c '%s'", c, p); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + } + + p++; + if (*p == '\0') { + cmdarg_err("No dest addr specified for '-%c'", c); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + + if (hdr_ipv6 == TRUE) { + if (!ws_inet_pton6(p, &hdr_ipv6_dest_addr)) { + cmdarg_err("Bad dest addr for -%c '%s'", c, p); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + } else { + if (!ws_inet_pton4(p, &hdr_ip_dest_addr)) { + cmdarg_err("Bad dest addr for -%c '%s'", c, p); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + } + break; + + + case '?': + switch(ws_optopt) { + case 'E': + list_encap_types(); + return WS_EXIT_INVALID_OPTION; + break; + case 'F': + list_capture_types(); + return WS_EXIT_INVALID_OPTION; + break; + } + /* FALLTHROUGH */ + + default: + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + } + + if (ws_optind >= argc || argc-ws_optind < 2) { + cmdarg_err("Must specify input and output filename"); + print_usage(stderr); + return WS_EXIT_INVALID_OPTION; + } + + if (max_offset > WTAP_MAX_PACKET_SIZE_STANDARD) { + cmdarg_err("Maximum packet length cannot be more than %d bytes", + WTAP_MAX_PACKET_SIZE_STANDARD); + return WS_EXIT_INVALID_OPTION; + } + + /* Some validation */ + + if (info->mode == TEXT_IMPORT_REGEX) { + info->regex.format = regex; + /* need option for data encoding */ + if (g_regex_get_string_number(regex, "dir") > -1) { + /* XXX: Add parameter(s?) to specify these? */ + info->regex.in_indication = "iI<"; + info->regex.out_indication = "oO>"; + } + if (g_regex_get_string_number(regex, "time") > -1 && info->timestamp_format == NULL) { + cmdarg_err("Regex with <time> capturing group requires time format (-t)"); + return WS_EXIT_INVALID_OPTION; + } + } + + if (have_hdr_ip_proto && !(hdr_ip || hdr_ipv6)) { + /* + * If we have an IP protocol to add to the header, but neither an + * IPv4 nor an IPv6 header was specified, add an IPv4 header. + */ + hdr_ip = TRUE; + } + + if (!have_hdr_ip_proto && (hdr_ip || hdr_ipv6)) { + /* if -4 or -6 option is specified without an IP protocol then fail */ + cmdarg_err("IP protocol requires a next layer protocol number"); + return WS_EXIT_INVALID_OPTION; + } + + if ((hdr_tcp || hdr_udp || hdr_sctp) && !(hdr_ip || hdr_ipv6)) { + /* + * If TCP (-T), UDP (-u) or SCTP (-s/-S) header options are specified + * but none of IPv4 (-4) or IPv6 (-6) options then add an IPv4 header + */ + hdr_ip = TRUE; + } + + if (hdr_export_pdu && wtap_encap_type != WTAP_ENCAP_WIRESHARK_UPPER_PDU) { + cmdarg_err("Export PDU (-P) requires WIRESHARK_UPPER_PDU link type (252)"); + return WS_EXIT_INVALID_OPTION; + } + + /* The other dummy headers require a IPv4 or IPv6 header. Allow + * encapsulation types of Ethernet (and add a Ethernet header in that + * case if we haven't already), or the appropriate raw IP types. + */ + if (hdr_ip) { + switch (wtap_encap_type) { + + case (WTAP_ENCAP_ETHERNET): + hdr_ethernet = TRUE; + hdr_ethernet_proto = 0x0800; + break; + + case (WTAP_ENCAP_RAW_IP): + case (WTAP_ENCAP_RAW_IP4): + break; + + default: + cmdarg_err("Dummy IPv4 header not supported with encapsulation %s (%s)", wtap_encap_description(wtap_encap_type), wtap_encap_name(wtap_encap_type)); + return WS_EXIT_INVALID_OPTION; + } + } else if (hdr_ipv6) { + switch (wtap_encap_type) { + + case (WTAP_ENCAP_ETHERNET): + hdr_ethernet = TRUE; + hdr_ethernet_proto = 0x86DD; + break; + + case (WTAP_ENCAP_RAW_IP): + case (WTAP_ENCAP_RAW_IP6): + break; + + default: + cmdarg_err("Dummy IPv6 header not supported with encapsulation %s (%s)", wtap_encap_description(wtap_encap_type), wtap_encap_name(wtap_encap_type)); + return WS_EXIT_INVALID_OPTION; + } + } + + if (strcmp(argv[ws_optind], "-") != 0) { + input_filename = argv[ws_optind]; + if (info->mode == TEXT_IMPORT_REGEX) { + info->regex.import_text_GMappedFile = g_mapped_file_new(input_filename, TRUE, &gerror); + if (gerror) { + cmdarg_err("%s", gerror->message); + g_error_free(gerror); + return WS_EXIT_OPEN_ERROR; + } + } else { + input_file = ws_fopen(input_filename, "rb"); + if (!input_file) { + open_failure_message(input_filename, errno, FALSE); + return WS_EXIT_OPEN_ERROR; + } + } + } else { + if (info->mode == TEXT_IMPORT_REGEX) { + /* text_import_regex requires a memory mapped file, so this likely + * won't work, unless the user has redirected a file (not a FIFO) + * to stdin, though that's pretty silly and unnecessary. + * XXX: We could read until EOF, write it to a temp file, and then + * mmap that (ugh)? + */ + info->regex.import_text_GMappedFile = g_mapped_file_new_from_fd(0, TRUE, &gerror); + if (gerror) { + cmdarg_err("%s", gerror->message); + cmdarg_err("regex import requires memory-mapped I/O and cannot be used with terminals or pipes"); + g_error_free(gerror); + return WS_EXIT_INVALID_OPTION; + } + } + input_filename = "Standard input"; + input_file = stdin; + } + + params->encap = wtap_encap_type; + params->snaplen = max_offset; + if (file_type_subtype == WTAP_FILE_TYPE_SUBTYPE_UNKNOWN) { + file_type_subtype = wtap_pcapng_file_type_subtype(); + } + /* Request nanosecond precision. Most file formats only support one time + * precision and ignore this parameter (and the related options in the + * generated IDB), but it affects pcapng. + */ + params->tsprec = WTAP_TSPREC_NSEC; + if ((ret = text_import_pre_open(params, file_type_subtype, input_filename, interface_name)) != EXIT_SUCCESS) { + cleanup_dump_params(params); + return ret; + } + + if (strcmp(argv[ws_optind+1], "-") != 0) { + /* Write to a file. Open the file. */ + output_filename = argv[ws_optind+1]; + wdh = wtap_dump_open(output_filename, file_type_subtype, WTAP_UNCOMPRESSED, params, &err, &err_info); + } else { + /* Write to the standard output. */ + output_filename = "Standard output"; + wdh = wtap_dump_open_stdout(file_type_subtype, WTAP_UNCOMPRESSED, params, &err, &err_info); + } + + if (!wdh) { + cfile_dump_open_failure_message(output_filename, err, err_info, + file_type_subtype); + cleanup_dump_params(params); + return WS_EXIT_OPEN_ERROR; + } + + info->import_text_filename = input_filename; + info->output_filename = output_filename; + info->hexdump.import_text_FILE = input_file; + + info->encapsulation = wtap_encap_type; + info->wdh = wdh; + + if (hdr_export_pdu) { + info->dummy_header_type = HEADER_EXPORT_PDU; + } else if (hdr_data_chunk) { + info->dummy_header_type = HEADER_SCTP_DATA; + } else if (hdr_sctp) { + info->dummy_header_type = HEADER_SCTP; + } else if (hdr_tcp) { + info->dummy_header_type = HEADER_TCP; + } else if (hdr_udp) { + info->dummy_header_type = HEADER_UDP; + } else if (hdr_ip) { + info->dummy_header_type = HEADER_IPV4; + } else if (hdr_ipv6) { + info->dummy_header_type = HEADER_IPV4; + } else if (hdr_ethernet) { + info->dummy_header_type = HEADER_ETH; + } else { + info->dummy_header_type = HEADER_NONE; + } + info->pid = hdr_ethernet_proto; + if (hdr_ip) { + info->ip_src_addr.ipv4 = hdr_ip_src_addr; + info->ip_dest_addr.ipv4 = hdr_ip_dest_addr; + } else if (hdr_ipv6) { + info->ipv6 = TRUE; + info->ip_src_addr.ipv6 = hdr_ipv6_src_addr; + info->ip_dest_addr.ipv6 = hdr_ipv6_dest_addr; + } + info->protocol = hdr_ip_proto; + if (hdr_sctp) { + info->src_port = hdr_sctp_src; + info->dst_port = hdr_sctp_dest; + } else { + info->src_port = hdr_src_port; + info->dst_port = hdr_dest_port; + } + info->tag = hdr_sctp_tag; + info->ppi = hdr_data_chunk_ppid; + + info->max_frame_length = max_offset; + + /* Display summary of our state */ + if (!quiet) { + fprintf(stderr, "Input from: %s\n", input_filename); + fprintf(stderr, "Output to: %s\n", output_filename); + fprintf(stderr, "Output format: %s\n", wtap_file_type_subtype_name(file_type_subtype)); + if (hdr_ethernet) fprintf(stderr, "Generate dummy Ethernet header: Protocol: 0x%0X\n", + hdr_ethernet_proto); + if (hdr_ip) fprintf(stderr, "Generate dummy IP header: Protocol: %u\n", + hdr_ip_proto); + if (hdr_ipv6) fprintf(stderr, "Generate dummy IPv6 header: Protocol: %u\n", + hdr_ip_proto); + if (hdr_udp) fprintf(stderr, "Generate dummy UDP header: Source port: %u. Dest port: %u\n", + hdr_src_port, hdr_dest_port); + if (hdr_tcp) fprintf(stderr, "Generate dummy TCP header: Source port: %u. Dest port: %u\n", + hdr_src_port, hdr_dest_port); + if (hdr_sctp) fprintf(stderr, "Generate dummy SCTP header: Source port: %u. Dest port: %u. Tag: %u\n", + hdr_sctp_src, hdr_sctp_dest, hdr_sctp_tag); + if (hdr_data_chunk) fprintf(stderr, "Generate dummy DATA chunk header: TSN: %u. SID: %u. SSN: %u. PPID: %u\n", + hdr_data_chunk_tsn, hdr_data_chunk_sid, hdr_data_chunk_ssn, hdr_data_chunk_ppid); + } + + return EXIT_SUCCESS; +} + +/* + * General errors and warnings are reported with an console message + * in text2pcap. + */ +static void +text2pcap_cmdarg_err(const char *msg_format, va_list ap) +{ + fprintf(stderr, "text2pcap: "); + vfprintf(stderr, msg_format, ap); + fprintf(stderr, "\n"); +} + +/* + * Report additional information for an error in command-line arguments. + */ +static void +text2pcap_cmdarg_err_cont(const char *msg_format, va_list ap) +{ + vfprintf(stderr, msg_format, ap); + fprintf(stderr, "\n"); +} + +int +main(int argc, char *argv[]) +{ + static const struct report_message_routines text2pcap_report_routines = { + failure_message, + failure_message, + open_failure_message, + read_failure_message, + write_failure_message, + cfile_open_failure_message, + cfile_dump_open_failure_message, + cfile_read_failure_message, + cfile_write_failure_message, + cfile_close_failure_message + }; + int ret = EXIT_SUCCESS; + text_import_info_t info; + wtap_dump_params params; + guint64 bytes_written; + + cmdarg_err_init(text2pcap_cmdarg_err, text2pcap_cmdarg_err_cont); + + /* Initialize log handler early so we can have proper logging during startup. */ + ws_log_init("text2pcap", vcmdarg_err); + + /* Early logging command-line initialization. */ + ws_log_parse_args(&argc, argv, vcmdarg_err, WS_EXIT_INVALID_OPTION); + + ws_noisy("Finished log init and parsing command line log arguments"); + +#ifdef _WIN32 + create_app_running_mutex(); +#endif /* _WIN32 */ + + init_process_policies(); + init_report_message("text2pcap", &text2pcap_report_routines); + wtap_init(TRUE); + + memset(&info, 0, sizeof(info)); + wtap_dump_params_init(¶ms, NULL); + if ((ret = parse_options(argc, argv, &info, ¶ms)) != EXIT_SUCCESS) { + goto clean_exit; + } + + ws_assert(input_file != NULL || info.regex.import_text_GMappedFile != NULL); + ws_assert(wdh != NULL); + + ret = text_import(&info); + + if (ws_log_get_level() >= LOG_LEVEL_DEBUG) + fprintf(stderr, "\n-------------------------\n"); + if (!quiet) { + bytes_written = wtap_get_bytes_dumped(wdh); + fprintf(stderr, "Read %u potential packet%s, wrote %u packet%s (%" PRIu64 " byte%s including overhead).\n", + info.num_packets_read, plurality(info.num_packets_read, "", "s"), + info.num_packets_written, plurality(info.num_packets_written, "", "s"), + bytes_written, plurality(bytes_written, "", "s")); + } +clean_exit: + if (input_file) { + fclose(input_file); + } + if (info.regex.import_text_GMappedFile) { + g_mapped_file_unref(info.regex.import_text_GMappedFile); + } + if (info.regex.format) { + g_regex_unref(info.regex.format); + } + if (wdh) { + int err; + char *err_info; + if (!wtap_dump_close(wdh, NULL, &err, &err_info)) { + cfile_close_failure_message(output_filename, err, err_info); + ret = 2; + } + } + cleanup_dump_params(¶ms); + return ret; +} + +/* + * Editor modelines - https://www.wireshark.org/tools/modelines.html + * + * Local variables: + * c-basic-offset: 4 + * tab-width: 8 + * indent-tabs-mode: nil + * End: + * + * vi: set shiftwidth=4 tabstop=8 expandtab: + * :indentSize=4:tabSize=8:noTabs=true: + */ |