1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
|
/* file-pcapng.h
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#ifndef __FILE_PCAPNG_H__
#define __FILE_PCAPNG_H__
/*
* Structure to pass to block data dissectors.
*/
typedef struct {
proto_item *block_item;
proto_tree *block_tree;
struct info *info;
} block_data_arg;
/* Callback for local block data dissection */
typedef void (local_block_dissect_t)(proto_tree *tree, packet_info *pinfo, tvbuff_t *tvb, block_data_arg *argp);
/* Callback for local block option dissection function */
typedef void (local_block_option_dissect_t)(proto_tree *option_tree, proto_item *option_item,
packet_info *pinfo, tvbuff_t *tvb, int offset,
int unknown_option_hf,
guint32 option_code, guint32 option_length,
guint encoding);
typedef struct {
const char* name;
local_block_dissect_t *dissector;
int option_root_hf;
const value_string *option_vals;
local_block_option_dissect_t *option_dissector;
} local_block_callback_info_t;
/* Routine for a local block dissector to register with main pcapng dissector.
* For an in-tree example, please see file-pcapng-darwin.c */
void register_pcapng_local_block_dissector(guint32 block_number, local_block_callback_info_t *info);
/* Can be called by local block type dissectors block dissector callback */
gint dissect_options(proto_tree *tree, packet_info *pinfo,
guint32 block_type, tvbuff_t *tvb, int offset, guint encoding,
void *user_data);
/* Used by custom dissector */
/* File info */
struct info {
guint32 block_number;
guint32 section_number;
guint32 interface_number;
guint32 darwin_process_event_number;
guint32 frame_number;
guint encoding;
wmem_array_t *interfaces;
wmem_array_t *darwin_process_events;
};
struct interface_description {
guint32 link_type;
guint32 snap_len;
guint64 timestamp_resolution;
guint64 timestamp_offset;
};
struct darwin_process_event_description {
guint32 process_id;
};
/* Dissect one PCAPNG Block */
extern gint dissect_block(proto_tree *tree, packet_info *pinfo, tvbuff_t *tvb, struct info *info);
#endif
|
