pcapng.h

Go to the documentation of this file.

 
#ifndef __W_PCAPNG_H__
#define __W_PCAPNG_H__
 
#include <glib.h>
#include "wtap.h"
#include "ws_symbol_export.h"
 
#define PCAPNG_MAGIC         0x1A2B3C4D
#define PCAPNG_SWAPPED_MAGIC 0x4D3C2B1A
 
#define PCAPNG_MAJOR_VERSION 1
#define PCAPNG_MINOR_VERSION 0
 
/* pcapng: common block header file encoding for every block type */
typedef struct pcapng_block_header_s {
    uint32_t block_type;
    uint32_t block_total_length;
    /* x bytes block_body */
    /* uint32_t block_total_length */
} pcapng_block_header_t;
 
/* pcapng: section header block file encoding */
typedef struct pcapng_section_header_block_s {
    /* pcapng_block_header_t */
    uint32_t magic;
    uint16_t version_major;
    uint16_t version_minor;
    uint64_t section_length; /* might be -1 for unknown */
    /* ... Options ... */
} pcapng_section_header_block_t;
 
/* pcapng: interface description block file encoding */
typedef struct pcapng_interface_description_block_s {
    uint16_t linktype;
    uint16_t reserved;
    uint32_t snaplen;
    /* ... Options ... */
} pcapng_interface_description_block_t;
 
/* pcapng: interface statistics block file encoding */
typedef struct pcapng_interface_statistics_block_s {
    uint32_t interface_id;
    uint32_t timestamp_high;
    uint32_t timestamp_low;
    /* ... Options ... */
} pcapng_interface_statistics_block_t;
 
/* pcapng: Decryption Secrets Block file encoding */
typedef struct pcapng_decryption_secrets_block_s {
    uint32_t secrets_type;   /* Secrets Type, see secrets-types.h */
    uint32_t secrets_len;    /* Size of variable-length secrets data. */
    /* x bytes Secrets Data. */
    /* ... Options ... */
} pcapng_decryption_secrets_block_t;
 
struct pcapng_option_header {
    uint16_t type;
    uint16_t value_length;
};
 
/*
 * Minimum IDB size = minimum block size + size of fixed length portion of IDB.
 */
#define MIN_IDB_SIZE    ((uint32_t)(MIN_BLOCK_SIZE + sizeof(pcapng_interface_description_block_t)))
#define MIN_DSB_SIZE    ((uint32_t)(MIN_BLOCK_SIZE + sizeof(pcapng_decryption_secrets_block_t)))
 
wtap_open_return_val pcapng_open(wtap *wth, int *err, char **err_info);
 
#endif