1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
/** @file
*
* Utility definitions for packet capture
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#ifndef __CAPTURE_PCAP_UTIL_H__
#define __CAPTURE_PCAP_UTIL_H__
#include <wsutil/feature_list.h>
#ifdef HAVE_LIBPCAP
#include <pcap.h>
#include "capture_opts.h"
#endif
#ifdef __cplusplus
extern "C" {
#endif /* __cplusplus */
#ifdef HAVE_LIBPCAP
/*
* A snapshot length of 0 is useless - and libpcap/WinPcap/Npcap don't guarantee
* that a snapshot length of 0 will work, and, on some platforms, it won't
* (with BPF, for example, the kernel is told the snapshot length via the
* return value of the BPF program, and a return value of 0 means "drop
* the packet"), so the minimum packet size is 1 byte.
*/
#define MIN_PACKET_SIZE 1 /* minimum amount of packet data we can read */
GList *get_interface_list(int *err, char **err_str);
#ifdef HAVE_PCAP_REMOTE
GList *get_remote_interface_list(const char *hostname, const char *port,
int auth_type, const char *username,
const char *passwd, int *err, char **err_str);
#endif /* HAVE_PCAP_REMOTE */
const char *linktype_val_to_name(int dlt);
int linktype_name_to_val(const char *linktype);
int get_pcap_datalink(pcap_t *pch, const char *devicename);
bool set_pcap_datalink(pcap_t *pcap_h, int datalink, char *name,
char *errmsg, size_t errmsg_len,
char *secondary_errmsg, size_t secondary_errmsg_len);
#ifdef HAVE_PCAP_SET_TSTAMP_PRECISION
/*
* Return true if the pcap_t in question is set up for high-precision
* time stamps, false otherwise.
*/
bool have_high_resolution_timestamp(pcap_t *pcap_h);
#endif /* HAVE_PCAP_SET_TSTAMP_PRECISION */
/*
* Capture device open status values.
*/
typedef enum {
/* No error and no warning */
CAP_DEVICE_OPEN_NO_ERR,
/* Errors corresponding to libpcap errors */
CAP_DEVICE_OPEN_ERROR_NO_SUCH_DEVICE,
CAP_DEVICE_OPEN_ERROR_RFMON_NOTSUP,
CAP_DEVICE_OPEN_ERROR_PERM_DENIED,
CAP_DEVICE_OPEN_ERROR_IFACE_NOT_UP,
CAP_DEVICE_OPEN_ERROR_PROMISC_PERM_DENIED,
/* Error, none of the above */
CAP_DEVICE_OPEN_ERROR_OTHER,
/* Error from pcap_open_live() or pcap_open() rather than pcap_activate() */
CAP_DEVICE_OPEN_ERROR_GENERIC,
/* Warnings corresponding to libpcap warnings */
CAP_DEVICE_OPEN_WARNING_PROMISC_NOTSUP,
CAP_DEVICE_OPEN_WARNING_TSTAMP_TYPE_NOTSUP,
/* Warning, none of the above */
CAP_DEVICE_OPEN_WARNING_OTHER
} cap_device_open_status;
extern if_capabilities_t *get_if_capabilities(interface_options *interface_opts,
cap_device_open_status *status, char **status_str);
extern pcap_t *open_capture_device(capture_options *capture_opts,
interface_options *interface_opts,
int timeout, cap_device_open_status *open_status,
char (*open_status_str)[PCAP_ERRBUF_SIZE]);
#endif /* HAVE_LIBPCAP */
extern void gather_caplibs_compile_info(feature_list l);
/*
* Append to a GString an indication of the version of capture libraries
* with which we're running, or an indication that we're not running
* with capture libraries, if we were compiled with WinPcap or Npcap but
* WinPcap/Npcap wasn't loaded, or nothing, if we weren't compiled with
* libpcap/WinPcap/Npcap.
*/
extern void gather_caplibs_runtime_info(feature_list l);
#ifdef _WIN32
extern bool caplibs_have_npcap(void);
extern bool caplibs_get_npcap_version(unsigned int *major,
unsigned int *minor);
#endif
#ifdef __cplusplus
}
#endif /* __cplusplus */
#endif /* __CAPTURE_PCAP_UTIL_H__ */
|
