123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382 |
- <?xml version='1.0' encoding='iso-8859-1'?>
- <!doctype html public '-//W3C//DTD XHTML 1.0 Strict//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd'>
- <html xmlns='http://www.w3c.org/1999/xhtml' lang='en-us'>
- <head>
- <title>
- Packet32.h
- </title>
- <meta http-equiv='content-type' content='text/html;iso-8859-1'/>
- <meta name='generator' content='motley-tools 1.9.4 13:40:33 Feb 18 2015'/>
- <meta name='author' content='cmaier@cmassoc.net'/>
- <meta name='robots' content='noindex,nofollow'/>
- <link href='toolkit.css' rel='stylesheet' type='text/css'/>
- </head>
- <body>
- <div class='headerlink'>
- [<a href='nvram.h.html' title=' nvram.h '>PREV</a>]
- [<a href='toolkit.html' title=' Index '>HOME</a>]
- [<a href='pcap-bpf.h.html' title=' pcap-bpf.h '>NEXT</a>]
- </div>
- <pre>
- /*
- * Copyright (c) 1999 - 2005 NetGroup, Politecnico di Torino (Italy)
- * Copyright (c) 2005 - 2007 CACE Technologies, Davis (California)
- * All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- *
- * 1. Redistributions of source code must retain the above copyright
- * notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- * notice, this list of conditions and the following disclaimer in the
- * documentation and/or other materials provided with the distribution.
- * 3. Neither the name of the Politecnico di Torino, CACE Technologies
- * nor the names of its contributors may be used to endorse or promote
- * products derived from this software without specific prior written
- * permission.
- *
- * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
- * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
- * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
- * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
- * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
- * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
- * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
- * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
- * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
- * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
- * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
- *
- */
- /** @ingroup packetapi
- * @{
- */
- /** @defgroup packet32h Packet.dll definitions and data structures
- * Packet32.h contains the data structures and the definitions used by packet.dll.
- * The file is used both by the Win9x and the WinNTx versions of packet.dll, and can be included
- * by the applications that use the functions of this library
- * @{
- */
- #ifndef __PACKET32
- #define __PACKET32
- #include <winsock2.h>
- #ifdef HAVE_AIRPCAP_API
- #include <airpcap.h>
- #else
- #if !defined(AIRPCAP_HANDLE__EAE405F5_0171_9592_B3C2_C19EC426AD34__DEFINED_)
- #define AIRPCAP_HANDLE__EAE405F5_0171_9592_B3C2_C19EC426AD34__DEFINED_
- typedef struct _AirpcapHandle *PAirpcapHandle;
- #endif /* AIRPCAP_HANDLE__EAE405F5_0171_9592_B3C2_C19EC426AD34__DEFINED_ */
- #endif /* HAVE_AIRPCAP_API */
- #ifdef HAVE_DAG_API
- #include <dagc.h>
- #endif /* HAVE_DAG_API */
- // Working modes
- #define PACKET_MODE_CAPT 0x0 ///< Capture mode
- #define PACKET_MODE_STAT 0x1 ///< Statistical mode
- #define PACKET_MODE_MON 0x2 ///< Monitoring mode
- #define PACKET_MODE_DUMP 0x10 ///< Dump mode
- #define PACKET_MODE_STAT_DUMP MODE_DUMP | MODE_STAT ///< Statistical dump Mode
- /// Alignment macro. Defines the alignment size.
- #define Packet_ALIGNMENT sizeof(int)
- /// Alignment macro. Rounds up to the next even multiple of Packet_ALIGNMENT.
- #define Packet_WORDALIGN(x) (((x)+(Packet_ALIGNMENT-1))&~(Packet_ALIGNMENT-1))
- #define NdisMediumNull -1 ///< Custom linktype: NDIS doesn't provide an equivalent
- #define NdisMediumCHDLC -2 ///< Custom linktype: NDIS doesn't provide an equivalent
- #define NdisMediumPPPSerial -3 ///< Custom linktype: NDIS doesn't provide an equivalent
- #define NdisMediumBare80211 -4 ///< Custom linktype: NDIS doesn't provide an equivalent
- #define NdisMediumRadio80211 -5 ///< Custom linktype: NDIS doesn't provide an equivalent
- #define NdisMediumPpi -6 ///< Custom linktype: NDIS doesn't provide an equivalent
- // Loopback behaviour definitions
- #define NPF_DISABLE_LOOPBACK 1 ///< Drop the packets sent by the NPF driver
- #define NPF_ENABLE_LOOPBACK 2 ///< Capture the packets sent by the NPF driver
- /*!
- \brief Network type structure.
- This structure is used by the PacketGetNetType() function to return information on the current adapter's type and speed.
- */
- typedef struct NetType
- {
- UINT LinkType; ///< The MAC of the current network adapter (see function PacketGetNetType() for more information)
- ULONGLONG LinkSpeed; ///< The speed of the network in bits per second
- }NetType;
- //some definitions stolen from libpcap
- #ifndef BPF_MAJOR_VERSION
- /*!
- \brief A BPF pseudo-assembly program.
- The program will be injected in the kernel by the PacketSetBPF() function and applied to every incoming packet.
- */
- struct bpf_program
- {
- UINT bf_len; ///< Indicates the number of instructions of the program, i.e. the number of struct bpf_insn that will follow.
- struct bpf_insn *bf_insns; ///< A pointer to the first instruction of the program.
- };
- /*!
- \brief A single BPF pseudo-instruction.
- bpf_insn contains a single instruction for the BPF register-machine. It is used to send a filter program to the driver.
- */
- struct bpf_insn
- {
- USHORT code; ///< Instruction type and addressing mode.
- UCHAR jt; ///< Jump if true
- UCHAR jf; ///< Jump if false
- int k; ///< Generic field used for various purposes.
- };
- /*!
- \brief Structure that contains a couple of statistics values on the current capture.
- It is used by packet.dll to return statistics about a capture session.
- */
- struct bpf_stat
- {
- UINT bs_recv; ///< Number of packets that the driver received from the network adapter
- ///< from the beginning of the current capture. This value includes the packets
- ///< lost by the driver.
- UINT bs_drop; ///< number of packets that the driver lost from the beginning of a capture.
- ///< Basically, a packet is lost when the the buffer of the driver is full.
- ///< In this situation the packet cannot be stored and the driver rejects it.
- UINT ps_ifdrop; ///< drops by interface. XXX not yet supported
- UINT bs_capt; ///< number of packets that pass the filter, find place in the kernel buffer and
- ///< thus reach the application.
- };
- /*!
- \brief Packet header.
- This structure defines the header associated with every packet delivered to the application.
- */
- struct bpf_hdr
- {
- struct timeval bh_tstamp; ///< The timestamp associated with the captured packet.
- ///< It is stored in a TimeVal structure.
- UINT bh_caplen; ///< Length of captured portion. The captured portion <b>can be different</b>
- ///< from the original packet, because it is possible (with a proper filter)
- ///< to instruct the driver to capture only a portion of the packets.
- UINT bh_datalen; ///< Original length of packet
- USHORT bh_hdrlen; ///< Length of bpf header (this struct plus alignment padding). In some cases,
- ///< a padding could be added between the end of this structure and the packet
- ///< data for performance reasons. This filed can be used to retrieve the actual data
- ///< of the packet.
- };
- /*!
- \brief Dump packet header.
- This structure defines the header associated with the packets in a buffer to be used with PacketSendPackets().
- It is simpler than the bpf_hdr, because it corresponds to the header associated by WinPcap and libpcap to a
- packet in a dump file. This makes straightforward sending WinPcap dump files to the network.
- */
- struct dump_bpf_hdr{
- struct timeval ts; ///< Time stamp of the packet
- UINT caplen; ///< Length of captured portion. The captured portion can smaller than the
- ///< the original packet, because it is possible (with a proper filter) to
- ///< instruct the driver to capture only a portion of the packets.
- UINT len; ///< Length of the original packet (off wire).
- };
- #endif
- struct bpf_stat;
- #define DOSNAMEPREFIX TEXT("Packet_") ///< Prefix added to the adapters device names to create the WinPcap devices
- #define MAX_LINK_NAME_LENGTH 64 //< Maximum length of the devices symbolic links
- #define NMAX_PACKET 65535
- /*!
- \brief Addresses of a network adapter.
- This structure is used by the PacketGetNetInfoEx() function to return the IP addresses associated with
- an adapter.
- */
- typedef struct npf_if_addr {
- struct sockaddr_storage IPAddress; ///< IP address.
- struct sockaddr_storage SubnetMask; ///< Netmask for that address.
- struct sockaddr_storage Broadcast; ///< Broadcast address.
- }npf_if_addr;
- #define ADAPTER_NAME_LENGTH 256 + 12 ///< Maximum length for the name of an adapter. The value is the same used by the IP Helper API.
- #define ADAPTER_DESC_LENGTH 128 ///< Maximum length for the description of an adapter. The value is the same used by the IP Helper API.
- #define MAX_MAC_ADDR_LENGTH 8 ///< Maximum length for the link layer address of an adapter. The value is the same used by the IP Helper API.
- #define MAX_NETWORK_ADDRESSES 16 ///< Maximum length for the link layer address of an adapter. The value is the same used by the IP Helper API.
- typedef struct WAN_ADAPTER_INT WAN_ADAPTER; ///< Describes an opened wan (dialup, VPN...) network adapter using the NetMon API
- typedef WAN_ADAPTER *PWAN_ADAPTER; ///< Describes an opened wan (dialup, VPN...) network adapter using the NetMon API
- #define INFO_FLAG_NDIS_ADAPTER 0 ///< Flag for ADAPTER_INFO: this is a traditional ndis adapter
- #define INFO_FLAG_NDISWAN_ADAPTER 1 ///< Flag for ADAPTER_INFO: this is a NdisWan adapter, and it's managed by WANPACKET
- #define INFO_FLAG_DAG_CARD 2 ///< Flag for ADAPTER_INFO: this is a DAG card
- #define INFO_FLAG_DAG_FILE 6 ///< Flag for ADAPTER_INFO: this is a DAG file
- #define INFO_FLAG_DONT_EXPORT 8 ///< Flag for ADAPTER_INFO: when this flag is set, the adapter will not be listed or openend by winpcap. This allows to prevent exporting broken network adapters, like for example FireWire ones.
- #define INFO_FLAG_AIRPCAP_CARD 16 ///< Flag for ADAPTER_INFO: this is an airpcap card
- #define INFO_FLAG_NPFIM_DEVICE 32
- /*!
- \brief Describes an opened network adapter.
- This structure is the most important for the functioning of packet.dll, but the great part of its fields
- should be ignored by the user, since the library offers functions that avoid to cope with low-level parameters
- */
- typedef struct _ADAPTER {
- HANDLE hFile; ///< \internal Handle to an open instance of the NPF driver.
- CHAR SymbolicLink[MAX_LINK_NAME_LENGTH]; ///< \internal A string containing the name of the network adapter currently opened.
- int NumWrites; ///< \internal Number of times a packets written on this adapter will be repeated
- ///< on the wire.
- HANDLE ReadEvent; ///< A notification event associated with the read calls on the adapter.
- ///< It can be passed to standard Win32 functions (like WaitForSingleObject
- ///< or WaitForMultipleObjects) to wait until the driver's buffer contains some
- ///< data. It is particularly useful in GUI applications that need to wait
- ///< concurrently on several events. In Windows NT/2000 the PacketSetMinToCopy()
- ///< function can be used to define the minimum amount of data in the kernel buffer
- ///< that will cause the event to be signalled.
-
- UINT ReadTimeOut; ///< \internal The amount of time after which a read on the driver will be released and
- ///< ReadEvent will be signaled, also if no packets were captured
- CHAR Name[ADAPTER_NAME_LENGTH];
- PWAN_ADAPTER pWanAdapter;
- UINT Flags; ///< Adapter's flags. Tell if this adapter must be treated in a different way, using the Netmon API or the dagc API.
- #ifdef HAVE_AIRPCAP_API
- PAirpcapHandle AirpcapAd;
- #endif // HAVE_AIRPCAP_API
- #ifdef HAVE_NPFIM_API
- void* NpfImHandle;
- #endif // HAVE_NPFIM_API
- #ifdef HAVE_DAG_API
- dagc_t *pDagCard; ///< Pointer to the dagc API adapter descriptor for this adapter
- PCHAR DagBuffer; ///< Pointer to the buffer with the packets that is received from the DAG card
- struct timeval DagReadTimeout; ///< Read timeout. The dagc API requires a timeval structure
- unsigned DagFcsLen; ///< Length of the frame check sequence attached to any packet by the card. Obtained from the registry
- DWORD DagFastProcess; ///< True if the user requests fast capture processing on this card. Higher level applications can use this value to provide a faster but possibly unprecise capture (for example, libpcap doesn't convert the timestamps).
- #endif // HAVE_DAG_API
- } ADAPTER, *LPADAPTER;
- /*!
- \brief Structure that contains a group of packets coming from the driver.
- This structure defines the header associated with every packet delivered to the application.
- */
- typedef struct _PACKET {
- HANDLE hEvent; ///< \deprecated Still present for compatibility with old applications.
- OVERLAPPED OverLapped; ///< \deprecated Still present for compatibility with old applications.
- PVOID Buffer; ///< Buffer with containing the packets. See the PacketReceivePacket() for
- ///< details about the organization of the data in this buffer
- UINT Length; ///< Length of the buffer
- DWORD ulBytesReceived; ///< Number of valid bytes present in the buffer, i.e. amount of data
- ///< received by the last call to PacketReceivePacket()
- BOOLEAN bIoComplete; ///< \deprecated Still present for compatibility with old applications.
- } PACKET, *LPPACKET;
- /*!
- \brief Structure containing an OID request.
- It is used by the PacketRequest() function to send an OID to the interface card driver.
- It can be used, for example, to retrieve the status of the error counters on the adapter, its MAC address,
- the list of the multicast groups defined on it, and so on.
- */
- struct _PACKET_OID_DATA {
- ULONG Oid; ///< OID code. See the Microsoft DDK documentation or the file ntddndis.h
- ///< for a complete list of valid codes.
- ULONG Length; ///< Length of the data field
- UCHAR Data[1]; ///< variable-lenght field that contains the information passed to or received
- ///< from the adapter.
- };
- typedef struct _PACKET_OID_DATA PACKET_OID_DATA, *PPACKET_OID_DATA;
- #ifdef __cplusplus
- extern "C" {
- #endif
- /**
- * @}
- */
- /*
- BOOLEAN QueryWinPcapRegistryStringA(CHAR *SubKeyName,
- CHAR *Value,
- UINT *pValueLen,
- CHAR *DefaultVal);
- BOOLEAN QueryWinPcapRegistryStringW(WCHAR *SubKeyName,
- WCHAR *Value,
- UINT *pValueLen,
- WCHAR *DefaultVal);
- */
-
- //---------------------------------------------------------------------------
- // EXPORTED FUNCTIONS
- //---------------------------------------------------------------------------
- PCHAR PacketGetVersion();
- PCHAR PacketGetDriverVersion();
- BOOLEAN PacketSetMinToCopy(LPADAPTER AdapterObject,int nbytes);
- BOOLEAN PacketSetNumWrites(LPADAPTER AdapterObject,int nwrites);
- BOOLEAN PacketSetMode(LPADAPTER AdapterObject,int mode);
- BOOLEAN PacketSetReadTimeout(LPADAPTER AdapterObject,int timeout);
- BOOLEAN PacketSetBpf(LPADAPTER AdapterObject,struct bpf_program *fp);
- BOOLEAN PacketSetLoopbackBehavior(LPADAPTER AdapterObject, UINT LoopbackBehavior);
- INT PacketSetSnapLen(LPADAPTER AdapterObject,int snaplen);
- BOOLEAN PacketGetStats(LPADAPTER AdapterObject,struct bpf_stat *s);
- BOOLEAN PacketGetStatsEx(LPADAPTER AdapterObject,struct bpf_stat *s);
- BOOLEAN PacketSetBuff(LPADAPTER AdapterObject,int dim);
- BOOLEAN PacketGetNetType (LPADAPTER AdapterObject,NetType *type);
- LPADAPTER PacketOpenAdapter(PCHAR AdapterName);
- BOOLEAN PacketSendPacket(LPADAPTER AdapterObject,LPPACKET pPacket,BOOLEAN Sync);
- INT PacketSendPackets(LPADAPTER AdapterObject,PVOID PacketBuff,ULONG Size, BOOLEAN Sync);
- LPPACKET PacketAllocatePacket(void);
- VOID PacketInitPacket(LPPACKET lpPacket,PVOID Buffer,UINT Length);
- VOID PacketFreePacket(LPPACKET lpPacket);
- BOOLEAN PacketReceivePacket(LPADAPTER AdapterObject,LPPACKET lpPacket,BOOLEAN Sync);
- BOOLEAN PacketSetHwFilter(LPADAPTER AdapterObject,ULONG Filter);
- BOOLEAN PacketGetAdapterNames(PTSTR pStr,PULONG BufferSize);
- BOOLEAN PacketGetNetInfoEx(PCHAR AdapterName, npf_if_addr* buffer, PLONG NEntries);
- BOOLEAN PacketRequest(LPADAPTER AdapterObject,BOOLEAN Set,PPACKET_OID_DATA OidData);
- HANDLE PacketGetReadEvent(LPADAPTER AdapterObject);
- BOOLEAN PacketSetDumpName(LPADAPTER AdapterObject, void *name, int len);
- BOOLEAN PacketSetDumpLimits(LPADAPTER AdapterObject, UINT maxfilesize, UINT maxnpacks);
- BOOLEAN PacketIsDumpEnded(LPADAPTER AdapterObject, BOOLEAN sync);
- BOOL PacketStopDriver();
- VOID PacketCloseAdapter(LPADAPTER lpAdapter);
- BOOLEAN PacketStartOem(PCHAR errorString, UINT errorStringLength);
- BOOLEAN PacketStartOemEx(PCHAR errorString, UINT errorStringLength, ULONG flags);
- PAirpcapHandle PacketGetAirPcapHandle(LPADAPTER AdapterObject);
- //
- // Used by PacketStartOemEx
- //
- #define PACKET_START_OEM_NO_NETMON 0x00000001
- #ifdef __cplusplus
- }
- #endif
- #endif //__PACKET32
- </pre>
- <div class='footerlink'>
- [<a href='nvram.h.html' title=' nvram.h '>PREV</a>]
- [<a href='toolkit.html' title=' Index '>HOME</a>]
- [<a href='pcap-bpf.h.html' title=' pcap-bpf.h '>NEXT</a>]
- </div>
- </body>
- </html>
|