pcapio.h

Go to the documentation of this file.

 
#pragma once
 
#include <wiretap/wtap.h>
 
typedef struct pcapio_writer pcapio_writer;
 
extern pcapio_writer*
writecap_fopen(const char *filename, wtap_compression_type ctype, int *err);
 
extern pcapio_writer*
writecap_fdopen(int fd, wtap_compression_type ctype, int *err);
 
extern pcapio_writer*
writecap_open_stdout(wtap_compression_type ctype, int *err);
 
extern bool
writecap_flush(pcapio_writer* pfile, int *err);
 
/* Close open file handles and frees memory associated with pfile.
 *
 * Return true on success, returns false and sets err (optional) on failure.
 * err can be NULL, e.g. if closing after some other failure that is more
 * relevant to report, or when exiting a program. */
extern bool
writecap_close(pcapio_writer* pfile, int *err);
 
/* Writing pcap files */
 
extern bool
libpcap_write_file_header(pcapio_writer* pfile, int linktype, int snaplen,
                          bool ts_nsecs, uint64_t *bytes_written, int *err);
 
extern bool
libpcap_write_packet(pcapio_writer* pfile,
                     time_t sec, uint32_t usec,
                     uint32_t caplen, uint32_t len,
                     const uint8_t *pd,
                     uint64_t *bytes_written, int *err);
 
/* Writing pcapng files */
 
/* Write a pre-formatted pcapng block */
extern bool
pcapng_write_block(pcapio_writer* pfile,
                   const uint8_t *data,
                   uint32_t block_total_length,
                   uint64_t *bytes_written,
                   int *err);
 
extern bool
pcapng_write_section_header_block(pcapio_writer* pfile,  
                                  GPtrArray *comments,  
                                  const char *hw,       
                                  const char *os,       
                                  const char *appname,  
                                  uint64_t section_length, 
                                  uint64_t *bytes_written, 
                                  int *err 
                                  );
 
extern bool
pcapng_write_interface_description_block(pcapio_writer* pfile,
                                         const char *comment,  /* OPT_COMMENT           1 */
                                         const char *name,     /* IDB_NAME              2 */
                                         const char *descr,    /* IDB_DESCRIPTION       3 */
                                         const char *filter,   /* IDB_FILTER           11 */
                                         const char *os,       /* IDB_OS               12 */
                                         const char *hardware, /* IDB_HARDWARE         15 */
                                         int link_type,
                                         int snap_len,
                                         uint64_t *bytes_written,
                                         uint64_t if_speed,     /* IDB_IF_SPEED          8 */
                                         uint8_t tsresol,       /* IDB_TSRESOL           9 */
                                         int *err);
 
extern bool
pcapng_write_interface_statistics_block(pcapio_writer* pfile,
                                        uint32_t interface_id,
                                        uint64_t *bytes_written,
                                        const char *comment,   /* OPT_COMMENT           1 */
                                        uint64_t isb_starttime, /* ISB_STARTTIME         2 */
                                        uint64_t isb_endtime,   /* ISB_ENDTIME           3 */
                                        uint64_t isb_ifrecv,    /* ISB_IFRECV            4 */
                                        uint64_t isb_ifdrop,    /* ISB_IFDROP            5 */
                                        int *err);
 
extern bool
pcapng_write_enhanced_packet_block(pcapio_writer* pfile,
                                   const char *comment,
                                   time_t sec, uint32_t usec,
                                   uint32_t caplen, uint32_t len,
                                   uint32_t interface_id,
                                   unsigned ts_mul,
                                   const uint8_t *pd,
                                   uint32_t flags,
                                   uint64_t *bytes_written,
                                   int *err);