capture-pcap-util.h

Go to the documentation of this file.

 
#ifndef __CAPTURE_PCAP_UTIL_H__
#define __CAPTURE_PCAP_UTIL_H__
 
#include <wsutil/feature_list.h>
 
#ifdef HAVE_LIBPCAP
 
#include <pcap/pcap.h>
 
#include "ui/capture_opts.h"
 
#endif
 
#ifdef __cplusplus
extern "C" {
#endif /* __cplusplus */
 
#ifdef HAVE_LIBPCAP
/*
 * A snapshot length of 0 is useless - and libpcap/WinPcap/Npcap don't guarantee
 * that a snapshot length of 0 will work, and, on some platforms, it won't
 * (with BPF, for example, the kernel is told the snapshot length via the
 * return value of the BPF program, and a return value of 0 means "drop
 * the packet"), so the minimum packet size is 1 byte.
 */
#define MIN_PACKET_SIZE 1   /* minimum amount of packet data we can read */
 
GList *get_interface_list(int *err, char **err_str);
#ifdef HAVE_PCAP_REMOTE
GList *get_remote_interface_list(const char *hostname, const char *port,
                                 int auth_type, const char *username,
                                 const char *passwd, int *err, char **err_str);
#endif /* HAVE_PCAP_REMOTE */
 
const char *linktype_val_to_name(int dlt);
int linktype_name_to_val(const char *linktype);
 
int get_pcap_datalink(pcap_t *pch, const char *devicename);
 
bool set_pcap_datalink(pcap_t *pcap_h, int datalink, char *name,
    char *errmsg, size_t errmsg_len,
    char *secondary_errmsg, size_t secondary_errmsg_len);
 
/*
 * Return true if the pcap_t in question is set up for high-precision
 * time stamps, false otherwise.
 */
bool have_high_resolution_timestamp(pcap_t *pcap_h);
 
/*
 * Capture device open status values.
 */
typedef enum {
    /* No error and no warning */
    CAP_DEVICE_OPEN_NO_ERR,
 
    /* Errors corresponding to libpcap errors */
    CAP_DEVICE_OPEN_ERROR_NO_SUCH_DEVICE,
    CAP_DEVICE_OPEN_ERROR_RFMON_NOTSUP,
    CAP_DEVICE_OPEN_ERROR_PERM_DENIED,
    CAP_DEVICE_OPEN_ERROR_IFACE_NOT_UP,
    CAP_DEVICE_OPEN_ERROR_PROMISC_PERM_DENIED,
 
    /* Error, none of the above */
    CAP_DEVICE_OPEN_ERROR_OTHER,
 
    /* Error from pcap_open_live() or pcap_open() rather than pcap_activate() */
    CAP_DEVICE_OPEN_ERROR_GENERIC,
 
    /* Warnings corresponding to libpcap warnings */
    CAP_DEVICE_OPEN_WARNING_PROMISC_NOTSUP,
    CAP_DEVICE_OPEN_WARNING_TSTAMP_TYPE_NOTSUP,
 
    /* Warning, none of the above */
    CAP_DEVICE_OPEN_WARNING_OTHER
} cap_device_open_status;
extern if_capabilities_t *get_if_capabilities(interface_options *interface_opts,
    cap_device_open_status *status, char **status_str);
extern pcap_t *open_capture_device(capture_options *capture_opts,
    interface_options *interface_opts,
    int timeout, cap_device_open_status *open_status,
    char (*open_status_str)[PCAP_ERRBUF_SIZE]);
 
#endif /* HAVE_LIBPCAP */
 
extern void gather_caplibs_compile_info(feature_list l);
 
/*
 * Append to a GString an indication of the version of capture libraries
 * with which we're running, or an indication that we're not running
 * with capture libraries, if we were compiled with WinPcap or Npcap but
 * WinPcap/Npcap wasn't loaded, or nothing, if we weren't compiled with
 * libpcap/WinPcap/Npcap.
 */
extern void gather_caplibs_runtime_info(feature_list l);
 
#ifdef _WIN32
extern bool caplibs_have_npcap(void);
extern bool caplibs_get_npcap_version(unsigned int *major,
    unsigned int *minor);
#endif
 
#ifdef __cplusplus
}
#endif /* __cplusplus */
 
#endif /* __CAPTURE_PCAP_UTIL_H__ */