forked from osmocom/wireshark
7d95c27de2
wiretap/erf_record.h has declarations for records in ERF files and in LINKTYPE_ERF packets in pcap and pcapng files. wiretap/erf-common.h has declarations of routines to be called by pcap/pcapng reader code when processing LINKTYPE_ERF packets. wiretap/erf.h is what's left, for use by wiretap/erf.c and the code with the tables of file readers and writers. Change-Id: Ia982e79b14a025a80dcbc7c812fb3b2cdb9c6aaa Reviewed-on: https://code.wireshark.org/review/37021 Petri-Dish: Guy Harris <gharris@sonic.net> Tested-by: Petri Dish Buildbot Reviewed-by: Guy Harris <gharris@sonic.net>
61 lines
1.4 KiB
C
61 lines
1.4 KiB
C
/*
|
|
*
|
|
* Copyright (c) 2003 Endace Technology Ltd, Hamilton, New Zealand.
|
|
* All rights reserved.
|
|
*
|
|
* This software and documentation has been developed by Endace Technology Ltd.
|
|
* along with the DAG PCI network capture cards. For further information please
|
|
* visit https://www.endace.com/.
|
|
*
|
|
* SPDX-License-Identifier: BSD-3-Clause
|
|
*/
|
|
|
|
#ifndef __W_ERF_H__
|
|
#define __W_ERF_H__
|
|
|
|
#include <glib.h>
|
|
#include <wiretap/wtap.h>
|
|
#include "ws_symbol_export.h"
|
|
|
|
#define ERF_POPULATE_SUCCESS 1
|
|
#define ERF_POPULATE_ALREADY_POPULATED 0
|
|
#define ERF_POPULATE_FAILED -1
|
|
|
|
#define ERF_MAX_INTERFACES 4
|
|
|
|
/*
|
|
* Private data for ERF files and LINKTYPE_ERF packets in pcap and pcapng.
|
|
*/
|
|
struct erf_private {
|
|
GHashTable* if_map;
|
|
GHashTable* anchor_map;
|
|
guint64 implicit_host_id;
|
|
guint64 capture_gentime;
|
|
guint64 host_gentime;
|
|
};
|
|
|
|
#define MIN_RECORDS_FOR_ERF_CHECK 3
|
|
#define RECORDS_FOR_ERF_CHECK 20
|
|
#define FCS_BITS 32
|
|
/*Configurable through ERF_HOST_ID environment variable */
|
|
#define ERF_WS_DEFAULT_HOST_ID 0
|
|
|
|
wtap_open_return_val erf_open(wtap *wth, int *err, gchar **err_info);
|
|
int erf_dump_can_write_encap(int encap);
|
|
int erf_dump_open(wtap_dumper *wdh, int *err);
|
|
|
|
#endif /* __W_ERF_H__ */
|
|
|
|
/*
|
|
* Editor modelines - https://www.wireshark.org/tools/modelines.html
|
|
*
|
|
* Local variables:
|
|
* c-basic-offset: 8
|
|
* tab-width: 8
|
|
* indent-tabs-mode: t
|
|
* End:
|
|
*
|
|
* vi: set shiftwidth=8 tabstop=8 noexpandtab:
|
|
* :indentSize=8:tabSize=8:noTabs=false:
|
|
*/
|