123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582 |
- <?xml version='1.0' encoding='iso-8859-1'?>
- <!doctype html public '-//W3C//DTD XHTML 1.0 Strict//EN' 'http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd'>
- <html xmlns='http://www.w3c.org/1999/xhtml' lang='en-us'>
- <head>
- <title>
- pcap-int.h
- </title>
- <meta http-equiv='content-type' content='text/html;iso-8859-1'/>
- <meta name='generator' content='motley-tools 1.9.4 13:40:33 Feb 18 2015'/>
- <meta name='author' content='cmaier@cmassoc.net'/>
- <meta name='robots' content='noindex,nofollow'/>
- <link href='toolkit.css' rel='stylesheet' type='text/css'/>
- </head>
- <body>
- <div class='headerlink'>
- [<a href='pcap.h.html' title=' pcap.h '>PREV</a>]
- [<a href='toolkit.html' title=' Index '>HOME</a>]
- [<a href='pcap-stdinc.h.html' title=' pcap-stdinc.h '>NEXT</a>]
- </div>
- <pre>
- /*
- * Copyright (c) 1994, 1995, 1996
- * The Regents of the University of California. All rights reserved.
- *
- * Redistribution and use in source and binary forms, with or without
- * modification, are permitted provided that the following conditions
- * are met:
- * 1. Redistributions of source code must retain the above copyright
- * notice, this list of conditions and the following disclaimer.
- * 2. Redistributions in binary form must reproduce the above copyright
- * notice, this list of conditions and the following disclaimer in the
- * documentation and/or other materials provided with the distribution.
- * 3. All advertising materials mentioning features or use of this software
- * must display the following acknowledgement:
- * This product includes software developed by the Computer Systems
- * Engineering Group at Lawrence Berkeley Laboratory.
- * 4. Neither the name of the University nor of the Laboratory may be used
- * to endorse or promote products derived from this software without
- * specific prior written permission.
- *
- * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
- * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
- * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
- * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
- * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
- * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
- * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
- * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
- * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
- * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
- * SUCH DAMAGE.
- *
- * @(#) $Header: /home/cvs/plc-utils/VisualStudioNET/include/pcap-int.h,v 1.1.1.1 2011-08-27 15:30:16 cmaier Exp $ (LBL)
- */
- #ifndef pcap_int_h
- #define pcap_int_h
- #ifdef __cplusplus
- extern "C"
- {
- #endif
- #include <pcap.h>
- #ifdef WIN32
- #include <Packet32.h>
- #endif /* WIN32 */
- #ifdef MSDOS
- #include <fcntl.h>
- #include <io.h>
- #endif
- /*
- * Savefile
- */
- typedef enum
- {
- NOT_SWAPPED,
- SWAPPED,
- MAYBE_SWAPPED
- }
- swapped_type_t;
- struct pcap_sf
- {
- FILE *rfile;
- int swapped;
- int hdrsize;
- swapped_type_t lengths_swapped;
- int version_major;
- int version_minor;
- u_char *base;
- };
- struct pcap_md
- {
- struct pcap_stat stat;
- /*XXX*/
- int use_bpf;
- /* using kernel filter */
- u_long TotPkts;
- /* can't oflow for 79 hrs on ether */
- u_long TotAccepted;
- /* count accepted by filter */
- u_long TotDrops;
- /* count of dropped packets */
- long TotMissed;
- /* missed by i/f during this run */
- long OrigMissed;
- /* missed by i/f before this run */
- char *device;
- /* device name */
- #ifdef linux
- int sock_packet;
- /* using Linux 2.0 compatible interface */
- int timeout;
- /* timeout specified to pcap_open_live */
- int clear_promisc;
- /* must clear promiscuous mode when we close */
- int cooked;
- /* using SOCK_DGRAM rather than SOCK_RAW */
- int ifindex;
- /* interface index of device we're bound to */
- int lo_ifindex;
- /* interface index of the loopback device */
- struct pcap *next;
- /* list of open promiscuous sock_packet pcaps */
- u_int packets_read;
- /* count of packets read with recvfrom() */
- #endif
- #ifdef HAVE_DAG_API
- #ifdef HAVE_DAG_STREAMS_API
- u_char *dag_mem_bottom;
- /* DAG card current memory bottom pointer */
- u_char *dag_mem_top;
- /* DAG card current memory top pointer */
- #else
- void *dag_mem_base;
- /* DAG card memory base address */
- u_int dag_mem_bottom;
- /* DAG card current memory bottom offset */
- u_int dag_mem_top;
- /* DAG card current memory top offset */
- #endif /* HAVE_DAG_STREAMS_API */
- int dag_fcs_bits;
- /* Number of checksum bits from link layer */
- int dag_offset_flags;
- /* Flags to pass to dag_offset(). */
- int dag_stream;
- /* DAG stream number */
- int dag_timeout;
- /* timeout specified to pcap_open_live.
- * Same as in linux above, introduce
- * generally? */
- #endif /* HAVE_DAG_API */
- #ifdef HAVE_REMOTE
- /*!
- * There is really a mess with previous variables, and it seems to me that they are not used
- * (they are used in pcap_pf.c only). I think we have to start using them.
- * The meaning is the following:
- *
- * - TotPkts: the amount of packets received by the bpf filter, *before* applying the filter
- * - TotAccepted: the amount of packets that satisfies the filter
- * - TotDrops: the amount of packet that were dropped into the kernel buffer because of lack of space
- * - TotMissed: the amount of packets that were dropped by the physical interface; it is basically
- * the value of the hardware counter into the card. This number is never put to zero, so this number
- * takes into account the *total* number of interface drops starting from the interface power-on.
- * - OrigMissed: the amount of packets that were dropped by the interface *when the capture begins*.
- * This value is used to detect the number of packets dropped by the interface *during the present
- * capture*, so that (ps_ifdrops= TotMissed - OrigMissed).
- */
- unsigned int TotNetDrops;
- //!< keeps the number of packets that have been dropped by the network
- /*!
- * \brief It keeps the number of packets that have been received by the application.
- *
- * Packets dropped by the kernel buffer are not counted in this variable. The variable is always
- * equal to (TotAccepted - TotDrops), exept for the case of remote capture, in which we have also
- * packets in fligh, i.e. that have been transmitted by the remote host, but that have not been
- * received (yet) from the client. In this case, (TotAccepted - TotDrops - TotNetDrops) gives a
- * wrong result, since this number does not corresponds always to the number of packet received by
- * the application. For this reason, in the remote capture we need another variable that takes
- * into account of the number of packets actually received by the application.
- */
- unsigned int TotCapt;
- #endif /* HAVE_REMOTE */
- };
- /*
- * Ultrix, DEC OSF/1^H^H^H^H^H^H^H^H^HDigital UNIX^H^H^H^H^H^H^H^H^H^H^H^H
- * Tru64 UNIX, and NetBSD pad to make everything line up on a nice boundary.
- */
- #if defined(ultrix) || defined(__osf__) || (defined(__NetBSD__) && __NetBSD_Version__ > 106000000)
- #define PCAP_FDDIPAD 3
- #endif
- struct pcap
- {
- #ifdef WIN32
- ADAPTER *adapter;
- LPPACKET Packet;
- int timeout;
- int nonblock;
- #else
- int fd;
- int selectable_fd;
- int send_fd;
- #endif /* WIN32 */
- int snapshot;
- int linktype;
- int tzoff;
- /* timezone offset */
- int offset;
- /* offset for proper alignment */
- int break_loop;
- /* flag set to force break from packet-reading loop */
- #ifdef PCAP_FDDIPAD
- int fddipad;
- #endif
- #ifdef MSDOS
- int inter_packet_wait;
- /* offline: wait between packets */
- void (*wait_proc)(void);
- /* call proc while waiting */
- #endif
- struct pcap_sf sf;
- struct pcap_md md;
- /*
- * Read buffer.
- */
- int bufsize;
- u_char *buffer;
- u_char *bp;
- int cc;
- /*
- * Place holder for pcap_next().
- */
- u_char *pkt;
- /* We're accepting only packets in this direction/these directions. */
- pcap_direction_t direction;
- /*
- * Methods.
- */
- int (*read_op)(pcap_t *, int cnt, pcap_handler, u_char *);
- int (*inject_op)(pcap_t *, const void *, size_t);
- int (*setfilter_op)(pcap_t *, struct bpf_program *);
- int (*setdirection_op)(pcap_t *, pcap_direction_t);
- int (*set_datalink_op)(pcap_t *, int);
- int (*getnonblock_op)(pcap_t *, char *);
- int (*setnonblock_op)(pcap_t *, int, char *);
- int (*stats_op)(pcap_t *, struct pcap_stat *);
- void (*close_op)(pcap_t *);
- /*
- * Placeholder for filter code if bpf not in kernel.
- */
- struct bpf_program fcode;
- char errbuf [PCAP_ERRBUF_SIZE + 1];
- int dlt_count;
- u_int *dlt_list;
- struct pcap_pkthdr pcap_header;
- /* This is needed for the pcap_next_ex() to work */
- #ifdef HAVE_REMOTE
- #ifndef WIN32 // Win32 already defines 'timeout'
- int timeout;
- //!< timeout to be used in the pcap_open()
- #endif
- /*! \brief '1' if we're the network client; needed by several functions (like pcap_setfilter() ) to know if
- * they have to use the socket or they have to open the local adapter. */
- int rmt_clientside;
- SOCKET rmt_sockctrl;
- //!< socket ID of the socket used for the control connection
- SOCKET rmt_sockdata;
- //!< socket ID of the socket used for the data connection
- int rmt_flags;
- //!< we have to save flags, since they are passed by the pcap_open_live(), but they are used by the pcap_startcapture()
- int rmt_capstarted;
- //!< 'true' if the capture is already started (needed to knoe if we have to call the pcap_startcapture()
- struct pcap_samp rmt_samp;
- //!< Keeps the parameters related to the sampling process.
- char *currentfilter;
- //!< Pointer to a buffer (allocated at run-time) that stores the current filter. Needed when flag PCAP_OPENFLAG_NOCAPTURE_RPCAP is turned on.
- #endif /* HAVE_REMOTE */
- };
- /*
- * This is a timeval as stored in a savefile.
- * It has to use the same types everywhere, independent of the actual
- * `struct timeval'; `struct timeval' has 32-bit tv_sec values on some
- * platforms and 64-bit tv_sec values on other platforms, and writing
- * out native `struct timeval' values would mean files could only be
- * read on systems with the same tv_sec size as the system on which
- * the file was written.
- */
- struct pcap_timeval
- {
- bpf_int32 tv_sec;
- /* seconds */
- bpf_int32 tv_usec;
- /* microseconds */
- };
- /*
- * This is a `pcap_pkthdr' as actually stored in a savefile.
- *
- * Do not change the format of this structure, in any way (this includes
- * changes that only affect the length of fields in this structure),
- * and do not make the time stamp anything other than seconds and
- * microseconds (e.g., seconds and nanoseconds). Instead:
- *
- * introduce a new structure for the new format;
- *
- * send mail to "tcpdump-workers@tcpdump.org", requesting a new
- * magic number for your new capture file format, and, when
- * you get the new magic number, put it in "savefile.c";
- *
- * use that magic number for save files with the changed record
- * header;
- *
- * make the code in "savefile.c" capable of reading files with
- * the old record header as well as files with the new record header
- * (using the magic number to determine the header format).
- *
- * Then supply the changes to "patches@tcpdump.org", so that future
- * versions of libpcap and programs that use it (such as tcpdump) will
- * be able to read your new capture file format.
- */
- struct pcap_sf_pkthdr
- {
- struct pcap_timeval ts;
- /* time stamp */
- bpf_u_int32 caplen;
- /* length of portion present */
- bpf_u_int32 len;
- /* length this packet (off wire) */
- };
- /*
- * How a `pcap_pkthdr' is actually stored in savefiles written
- * by some patched versions of libpcap (e.g. the ones in Red
- * Hat Linux 6.1 and 6.2).
- *
- * Do not change the format of this structure, in any way (this includes
- * changes that only affect the length of fields in this structure).
- * Instead, introduce a new structure, as per the above.
- */
- struct pcap_sf_patched_pkthdr
- {
- struct pcap_timeval ts;
- /* time stamp */
- bpf_u_int32 caplen;
- /* length of portion present */
- bpf_u_int32 len;
- /* length this packet (off wire) */
- int index;
- unsigned short protocol;
- unsigned char pkt_type;
- };
- int yylex (void);
- #ifndef min
- #define min(a, b) ((a) > (b) ? (b) : (a))
- #endif
- /* XXX should these be in pcap.h? */
- int pcap_offline_read (pcap_t *, int, pcap_handler, u_char *);
- int pcap_read (pcap_t *, int cnt, pcap_handler, u_char *);
- #ifndef HAVE_STRLCPY
- #define strlcpy(x, y, z) \
- (strncpy ((x), (y), (z)), \ ((z) <= 0? 0: ((x)[(z) - 1] = '\0')), \ strlen ((y)))
- #endif
- #include <stdarg.h>
- #if !defined(HAVE_SNPRINTF)
- #define snprintf pcap_snprintf
- extern int snprintf (char *, size_t, const char *, ...);
- #endif
- #if !defined(HAVE_VSNPRINTF)
- #define vsnprintf pcap_vsnprintf
- extern int vsnprintf (char *, size_t, const char *, va_list ap);
- #endif
- /*
- * Routines that most pcap implementations can use for non-blocking mode.
- */
- #if !defined(WIN32) && !defined(MSDOS)
- int pcap_getnonblock_fd (pcap_t *, char *);
- int pcap_setnonblock_fd (pcap_t *p, int, char *);
- #endif
- void pcap_close_common (pcap_t *);
- /*
- * Internal interfaces for "pcap_findalldevs()".
- *
- * "pcap_platform_finddevs()" is a platform-dependent routine to
- * add devices not found by the "standard" mechanisms (SIOCGIFCONF,
- * "getifaddrs()", etc..
- *
- * "pcap_add_if()" adds an interface to the list of interfaces.
- */
- int pcap_platform_finddevs (pcap_if_t **, char *);
- int add_addr_to_iflist (pcap_if_t **, const char *, u_int, struct sockaddr *, size_t, struct sockaddr *, size_t, struct sockaddr *, size_t, struct sockaddr *, size_t, char *);
- int pcap_add_if (pcap_if_t **, const char *, u_int, const char *, char *);
- struct sockaddr *dup_sockaddr (struct sockaddr *, size_t);
- int add_or_find_if (pcap_if_t **, pcap_if_t **, const char *, u_int, const char *, char *);
- #ifdef WIN32
- char *pcap_win32strerror (void);
- #endif
- int install_bpf_program (pcap_t *, struct bpf_program *);
- int pcap_strcasecmp (const char *, const char *);
- #ifdef __cplusplus
- }
- #endif
- #endif
- </pre>
- <div class='footerlink'>
- [<a href='pcap.h.html' title=' pcap.h '>PREV</a>]
- [<a href='toolkit.html' title=' Index '>HOME</a>]
- [<a href='pcap-stdinc.h.html' title=' pcap-stdinc.h '>NEXT</a>]
- </div>
- </body>
- </html>
|