capture_opts.h

Go to the documentation of this file.

/* capture_opts.h
 * Capture options (all parameters needed to do the actual capture)
 *
 * Wireshark - Network traffic analyzer
 * By Gerald Combs <[email protected]>
 * Copyright 1998 Gerald Combs
 *
 * SPDX-License-Identifier: GPL-2.0-or-later
 */
 
 
#ifndef __CAPTURE_OPTS_H__
#define __CAPTURE_OPTS_H__
 
#include <sys/types.h>     /* for gid_t */
 
#include <capture/capture_ifinfo.h>
#include "ringbuffer.h"
#include <wsutil/wslog.h>
#include <wsutil/filter_files.h>
 
#ifdef _WIN32
#include <windows.h>
#endif
 
#ifdef __cplusplus
extern "C" {
#endif /* __cplusplus */
 
/*
 * Long options.
 * We do not currently have long options corresponding to all short
 * options; we should probably pick appropriate option names for them.
 *
 * NOTE:
 * for tshark, we're using a leading - in the optstring to prevent getopt()
 * from permuting the argv[] entries, in this case, unknown argv[] entries
 * will be returned as parameters to a dummy-option 1.
 * In short: we must not use 1 here, which is another reason to use
 * values outside the range of ASCII graphic characters.
 */
#define LONGOPT_LIST_TSTAMP_TYPES LONGOPT_BASE_CAPTURE+1
#define LONGOPT_SET_TSTAMP_TYPE   LONGOPT_BASE_CAPTURE+2
#define LONGOPT_COMPRESS_TYPE     LONGOPT_BASE_CAPTURE+3
#define LONGOPT_CAPTURE_TMPDIR    LONGOPT_BASE_CAPTURE+4
#define LONGOPT_UPDATE_INTERVAL   LONGOPT_BASE_CAPTURE+5
 
/*
 * Options for capturing common to all capturing programs.
 */
#ifdef HAVE_PCAP_REMOTE
#define OPTSTRING_A "A:"
#else
#define OPTSTRING_A
#endif
 
#ifdef CAN_SET_CAPTURE_BUFFER_SIZE
#define LONGOPT_BUFFER_SIZE \
    {"buffer-size", ws_required_argument, NULL, 'B'},
#define OPTSTRING_B "B:"
#else
#define LONGOPT_BUFFER_SIZE
#define OPTSTRING_B
#endif
 
#ifdef HAVE_PCAP_CREATE
#define LONGOPT_MONITOR_MODE {"monitor-mode", ws_no_argument, NULL, 'I'},
#define OPTSTRING_I "I"
#else
#define LONGOPT_MONITOR_MODE
#define OPTSTRING_I
#endif
 
#define LONGOPT_CAPTURE_COMMON \
    {"autostop",              ws_required_argument, NULL, 'a'}, \
    {"ring-buffer",           ws_required_argument, NULL, 'b'}, \
    LONGOPT_BUFFER_SIZE \
    {"list-interfaces",       ws_no_argument,       NULL, 'D'}, \
    {"interface",             ws_required_argument, NULL, 'i'}, \
    LONGOPT_MONITOR_MODE \
    {"list-data-link-types",  ws_no_argument,       NULL, 'L'}, \
    {"no-promiscuous-mode",   ws_no_argument,       NULL, 'p'}, \
    {"snapshot-length",       ws_required_argument, NULL, 's'}, \
    {"linktype",              ws_required_argument, NULL, 'y'}, \
    {"list-time-stamp-types", ws_no_argument,       NULL, LONGOPT_LIST_TSTAMP_TYPES}, \
    {"time-stamp-type",       ws_required_argument, NULL, LONGOPT_SET_TSTAMP_TYPE}, \
    {"compress-type",         ws_required_argument, NULL, LONGOPT_COMPRESS_TYPE}, \
    {"temp-dir",              ws_required_argument, NULL, LONGOPT_CAPTURE_TMPDIR},\
    {"update-interval",       ws_required_argument, NULL, LONGOPT_UPDATE_INTERVAL},
 
 
#define OPTSTRING_CAPTURE_COMMON \
    "a:" OPTSTRING_A "b:" OPTSTRING_B "c:Df:F:i:" OPTSTRING_I "Lps:y:"
 
#ifdef HAVE_PCAP_REMOTE
/* Type of capture source */
typedef enum {
    CAPTURE_IFLOCAL,        
    CAPTURE_IFREMOTE        
} capture_source;
 
/* Type of RPCAPD Authentication */
typedef enum {
    CAPTURE_AUTH_NULL,      
    CAPTURE_AUTH_PWD        
} capture_auth;
#endif
#ifdef HAVE_PCAP_SETSAMPLING
typedef enum {
    CAPTURE_SAMP_NONE,      
    CAPTURE_SAMP_BY_COUNT,  
    CAPTURE_SAMP_BY_TIMER   
} capture_sampling;
#endif
 
#ifdef HAVE_PCAP_REMOTE
struct remote_host_info {
    char         *remote_host;      
    char         *remote_port;      
    capture_auth  auth_type;        
    char         *auth_username;    
    char         *auth_password;    
    bool          datatx_udp;
    bool          nocap_rpcap;
    bool          nocap_local;
};
 
struct remote_host {
    char         *r_host;           
    char         *remote_port;      
    capture_auth  auth_type;        
    char         *auth_username;    
    char         *auth_password;    
};
 
typedef struct remote_options_tag {
    capture_source src_type;
    struct remote_host_info remote_host_opts;
#ifdef HAVE_PCAP_SETSAMPLING
    capture_sampling sampling_method;
    int sampling_param;
#endif
} remote_options;
#endif /* HAVE_PCAP_REMOTE */
 
typedef struct interface_tag {
    char           *name;
    char           *display_name;
    char           *addresses;
    int             no_addresses;
    char           *cfilter;
    GList          *links;
    int             active_dlt;
    bool            pmode;
    bool            has_snaplen;
    int             snaplen;
    bool            local;
#ifdef CAN_SET_CAPTURE_BUFFER_SIZE
    int             buffer;
#endif
#ifdef HAVE_PCAP_CREATE
    bool            monitor_mode_enabled;
    bool            monitor_mode_supported;
#endif
#ifdef HAVE_PCAP_REMOTE
    remote_options  remote_opts;
#endif
    uint32_t        last_packets;
    uint32_t        packet_diff;
    if_info_t       if_info;
    bool            selected;
    bool            hidden;
    /* External capture cached data */
    GHashTable     *external_cap_args_settings;
    char           *timestamp_type;
} interface_t;
 
typedef struct link_row_tag {
    char *name;
    int dlt;
} link_row;
 
typedef struct interface_options_tag {
    char             *name;                 /* the name of the interface supplied to libpcap/WinPcap/Npcap to specify the interface */
    char             *descr;                /* a more user-friendly description of the interface; may be NULL if none */
    char             *hardware;             /* description of the hardware */
    char             *display_name;         /* the name displayed in the console and title bar */
    char             *ifname;               /* if not null, name to use instead of the interface naem in IDBs */
    char             *cfilter;
    bool              has_snaplen;
    int               snaplen;
    int               linktype;
    bool              promisc_mode;
    interface_type    if_type;
    char             *extcap;
    char             *extcap_fifo;
    GHashTable       *extcap_args;
    GPid              extcap_pid;           /* pid of running process or WS_INVALID_PID */
    void *            extcap_pipedata;
    GString          *extcap_stderr;
    unsigned          extcap_stdout_watch;
    unsigned          extcap_stderr_watch;
#ifdef _WIN32
    HANDLE            extcap_pipe_h;
    HANDLE            extcap_control_in_h;
    HANDLE            extcap_control_out_h;
#endif
    char             *extcap_control_in;
    char             *extcap_control_out;
#ifdef CAN_SET_CAPTURE_BUFFER_SIZE
    int               buffer_size;
#endif
    bool              monitor_mode;
#ifdef HAVE_PCAP_REMOTE
    capture_source    src_type;
    char             *remote_host;
    char             *remote_port;
    capture_auth      auth_type;
    char             *auth_username;
    char             *auth_password;
    bool              datatx_udp;
    bool              nocap_rpcap;
    bool              nocap_local;
#endif
#ifdef HAVE_PCAP_SETSAMPLING
    capture_sampling  sampling_method;
    int               sampling_param;
#endif
    char             *timestamp_type;       /* requested timestamp as string */
    int               timestamp_type_id;    /* Timestamp type to pass to pcap_set_tstamp_type.
                                               only valid if timestamp_type != NULL */
} interface_options;
 
typedef struct capture_options_tag {
    /* general */
    GList             *(*get_iface_list)(int *, char **);
    GArray            *ifaces;                
    GArray            *all_ifaces;            
    int                ifaces_err;            
    char              *ifaces_err_info;       
    unsigned           num_selected;
 
    /*
     * Options to be applied to all interfaces.
     *
     * Some of these can be set from the GUI, others can't; setting
     * the link-layer header type, for example, doesn't necessarily
     * make sense, as different interfaces may support different sets
     * of link-layer header types.
     *
     * Some that can't be set from the GUI can be set from the command
     * line, by specifying them before any interface is specified.
     * This includes the link-layer header type, so if somebody asks
     * for a link-layer header type that an interface on which they're
     * capturing doesn't support, we should report an error and fail
     * to capture.
     *
     * These can be overridden per-interface.
     */
    interface_options  default_options;
 
    bool               saving_to_file;        
    char              *save_file;             
    bool               group_read_access;     
    bool               use_pcapng;            
    unsigned           update_interval;       
    /* GUI related */
    bool               real_time_mode;        
    bool               show_info;             
    bool               restart;               
    char              *orig_save_file;        
    /* multiple files (and ringbuffer) */
    bool               multi_files_on;        
    bool               has_file_duration;     
    double             file_duration;         
    bool               has_file_interval;     
    int32_t            file_interval;         
    bool               has_file_packets;      
    int                file_packets;          
    bool               has_ring_num_files;    
    uint32_t           ring_num_files;        
    bool               has_nametimenum;       
    /* autostop conditions */
    bool               has_autostop_files;    
    int                autostop_files;        
    bool               has_autostop_packets;  
    int                autostop_packets;      
    bool               has_autostop_written_packets;  
    int                autostop_written_packets;      
    bool               has_autostop_filesize; 
    uint32_t           autostop_filesize;     
    bool               has_autostop_duration; 
    double             autostop_duration;     
    bool               print_file_names;      
    char              *print_name_to;         
    char              *temp_dir;              
    /* internally used (don't touch from outside) */
    bool               output_to_pipe;        
    bool               capture_child;         
    bool               stop_after_extcaps;    
    bool               wait_for_extcap_cbs;   
    char              *compress_type;         
    char              *closed_msg;            
    unsigned           extcap_terminate_id;   
    filter_list_t     *capture_filters_list;  
} capture_options;
 
/*
 * Initialize the capture_options with some reasonable values, and
 * provide a routine it can use to fetch a list of capture options
 * if it needs it.
 *
 * (Getting that list might involve running dumpcap, so we don't want
 * to waste time doing that if we don't have to.)
 */
extern void
capture_opts_init(capture_options *capture_opts, GList *(*get_iface_list)(int *, char **));
 
/* clean internal structures */
extern void
capture_opts_cleanup(capture_options *capture_opts);
 
/* set a command line option value */
extern int
capture_opts_add_opt(capture_options *capture_opts, int opt, const char *ws_optarg);
 
/* log content of capture_opts */
extern void
capture_opts_log(const char *domain, enum ws_log_level level, capture_options *capture_opts);
 
/* List supported file types for capturing. This is intentionally smaller
 * than the list supported by libwiretap (and dumpcap isn't linked with
 * libwiretap.) */
extern void
capture_opts_list_file_types(void);
 
enum caps_query {
    CAPS_QUERY_LINK_TYPES      = 0x1,
    CAPS_QUERY_TIMESTAMP_TYPES = 0x2
};
 
/* print interface capabilities, including link layer types */
extern int
capture_opts_print_if_capabilities(if_capabilities_t *caps,
                                   const interface_options *interface_opts,
                                   int queries);
 
/* print list of interfaces */
extern void
capture_opts_print_interfaces(GList *if_list);
 
/* trim the snaplen entry */
extern void
capture_opts_trim_snaplen(capture_options *capture_opts, int snaplen_min);
 
/* trim the ring_num_files entry */
extern void
capture_opts_trim_ring_num_files(capture_options *capture_opts);
 
/* pick default interface if none was specified */
extern int
capture_opts_default_iface_if_necessary(capture_options *capture_opts,
                                        const char *capture_device);
 
extern void
capture_opts_del_iface(capture_options *capture_opts, unsigned if_index);
 
extern void
interface_opts_free(interface_options *interface_opts);
 
extern interface_options*
interface_opts_from_if_info(capture_options *capture_opts, const if_info_t *if_info);
 
extern void
collect_ifaces(capture_options *capture_opts);
 
extern void
capture_opts_free_link_row(void *elem);
 
extern void
capture_opts_free_interface_t(interface_t *device);
 
/* Default capture buffer size in Mbytes. */
#define DEFAULT_CAPTURE_BUFFER_SIZE 2
 
/* Default update interval in milliseconds */
#define DEFAULT_UPDATE_INTERVAL 100
 
#ifdef __cplusplus
}
#endif /* __cplusplus */
 
#endif /* __CAPTURE_OPTS_H__ */
 
/*
 * Editor modelines  -  https://www.wireshark.org/tools/modelines.html
 *
 * Local variables:
 * c-basic-offset: 4
 * tab-width: 8
 * indent-tabs-mode: nil
 * End:
 *
 * vi: set shiftwidth=4 tabstop=8 expandtab:
 * :indentSize=4:tabSize=8:noTabs=true:
 */