forked from osmocom/wireshark
207a75388a
PARSED_RECORD if we got a packet; PARSED_NONRECORD if the parser succeeded but didn't see a packet; PARSE_FAILED if the parser failed. Treat anything other than PARSED_RECORD as a failure, for now; I'm not sure why we were treating "parser succeeded but didn't see a packet" as success, as that was causing us to recognize some non-Ascend-output text files as Ascend files and to return "records" with bogus caplen and len values. svn path=/trunk/; revision=32009
528 lines
17 KiB
Text
528 lines
17 KiB
Text
%{
|
|
/* ascend.y
|
|
*
|
|
* $Id$
|
|
*
|
|
* Wiretap Library
|
|
* Copyright (c) 1998 by Gilbert Ramirez <gram@alumni.rice.edu>
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*
|
|
*/
|
|
|
|
/*
|
|
Example 'pridisp' output data - one paragraph/frame:
|
|
|
|
PRI-XMIT-27: (task "l1Task" at 0x10216fe0, time: 560194.01) 4 octets @ 0x1027c5b0
|
|
[0000]: 00 01 01 a9 ....
|
|
PRI-RCV-27: (task "idle task" at 0x10123570, time: 560194.01) 4 octets @ 0x1027fb00
|
|
[0000]: 00 01 01 dd
|
|
|
|
Example 'pridisp' output data - two paragraphs/frame for XMIT case only:
|
|
|
|
PRI-XMIT-19/1: (task "l1Task" at 0x10216840, time: 274759.98) 4 octets @ 0x1027f230
|
|
[0000]: 00 01 30 d8 ..0.
|
|
PRI-XMIT-19/2 (task "l1Task" at 0x10216840, time: 274759.98) 11 octets @ 0x1027f234
|
|
[0000]: 08 02 8c bf 02 18 04 e9 82 83 8f ........ ...
|
|
|
|
Example 'ether-disp' output data:
|
|
|
|
ETHER3ND RECV: (task "_sarTask" at 0x802c6eb0, time: 259848.03) 775 octets @ 0xa8fb2020
|
|
[0000]: 00 d0 52 04 e7 1e 08 00 20 ae 51 b5 08 00 45 00 ..R..... .Q...E.
|
|
[0010]: 02 f9 05 e6 40 00 3f 11 6e 39 87 fe c4 95 3c 3c ....@.?. n9....<<
|
|
[0020]: 3c 05 13 c4 13 c4 02 e5 ef ed 49 4e 56 49 54 45 <....... ..INVITE
|
|
[0030]: 20 73 69 70 3a 35 32 30 37 33 40 36 30 2e 36 30 sip:520 73@60.60
|
|
[0040]: 2e 36 30 2e 35 20 53 49 50 2f 32 2e 30 0d 0a 56 .60.5 SI P/2.0..V
|
|
[0050]: 69 61 3a 20 53 49 50 2f 32 2e 30 2f 55 44 50 20 ia: SIP/ 2.0/UDP
|
|
[0060]: 31 33 35 2e 135.
|
|
|
|
Example 'wandsess' output data:
|
|
|
|
RECV-iguana:241:(task: B02614C0, time: 1975432.85) 49 octets @ 8003BD94
|
|
[0000]: FF 03 00 3D C0 06 CA 22 2F 45 00 00 28 6A 3B 40
|
|
[0010]: 00 3F 03 D7 37 CE 41 62 12 CF 00 FB 08 20 27 00
|
|
[0020]: 50 E4 08 DD D7 7C 4C 71 92 50 10 7D 78 67 C8 00
|
|
[0030]: 00
|
|
XMIT-iguana:241:(task: B04E12C0, time: 1975432.85) 53 octets @ 8009EB16
|
|
[0000]: FF 03 00 3D C0 09 1E 31 21 45 00 00 2C 2D BD 40
|
|
[0010]: 00 7A 06 D8 B1 CF 00 FB 08 CE 41 62 12 00 50 20
|
|
[0020]: 29 7C 4C 71 9C 9A 6A 93 A4 60 12 22 38 3F 10 00
|
|
[0030]: 00 02 04 05 B4
|
|
|
|
Example 'wdd' output data:
|
|
|
|
Date: 01/12/1990. Time: 12:22:33
|
|
Cause an attempt to place call to 14082750382
|
|
WD_DIALOUT_DISP: chunk 2515EE type IP.
|
|
(task: 251790, time: 994953.28) 44 octets @ 2782B8
|
|
[0000]: 00 C0 7B 71 45 6C 00 60 08 16 AA 51 08 00 45 00
|
|
[0010]: 00 2C 66 1C 40 00 80 06 53 F6 AC 14 00 18 CC 47
|
|
[0020]: C8 45 0A 31 00 50 3B D9 5B 75 00 00
|
|
|
|
The following output comes from a MAX with Software 7.2.3:
|
|
|
|
RECV-187:(task: B050B480, time: 18042248.03) 100 octets @ 800012C0
|
|
[0000]: FF 03 00 21 45 00 00 60 E3 49 00 00 7F 11 FD 7B
|
|
[0010]: C0 A8 F7 05 8A C8 18 51 00 89 00 89 00 4C C7 C1
|
|
[0020]: CC 8E 40 00 00 01 00 00 00 00 00 01 20 45 4A 45
|
|
[0030]: 42 45 43 45 48 43 4E 46 43 46 41 43 41 43 41 43
|
|
[0040]: 41 43 41 43 41 43 41 43 41 43 41 42 4E 00 00 20
|
|
[0050]: 00 01 C0 0C 00 20 00 01 00 04 93 E0 00 06 60 00
|
|
[0060]: C0 A8 F7 05
|
|
XMIT-187:(task: B0292CA0, time: 18042248.04) 60 octets @ 800AD576
|
|
[0000]: FF 03 00 21 45 00 00 38 D7 EE 00 00 0F 01 11 2B
|
|
[0010]: 0A FF FF FE C0 A8 F7 05 03 0D 33 D3 00 00 00 00
|
|
[0020]: 45 00 00 60 E3 49 00 00 7E 11 FE 7B C0 A8 F7 05
|
|
[0030]: 8A C8 18 51 00 89 00 89 00 4C C7 C1
|
|
RECV-187:(task: B0292CA0, time: 18042251.92) 16 octets @ 800018E8
|
|
[0000]: FF 03 C0 21 09 01 00 0C DE 61 96 4B 00 30 94 92
|
|
|
|
In TAOS 8.0, Lucent slightly changed the format as follows:
|
|
|
|
Example 'wandisp' output data (TAOS 8.0.3): (same format is used
|
|
for 'wanopen' and 'wannext' command)
|
|
|
|
RECV-14: (task "idle task" at 0xb05e6e00, time: 1279.01) 29 octets @ 0x8000e0fc
|
|
[0000]: ff 03 c0 21 01 01 00 19 01 04 05 f4 11 04 05 f4 ...!.... ........
|
|
[0010]: 13 09 03 00 c0 7b 9a 9f 2d 17 04 10 00 .....{.. -....
|
|
XMIT-14: (task "idle task" at 0xb05e6e00, time: 1279.02) 38 octets @ 0x8007fd56
|
|
[0000]: ff 03 c0 21 01 01 00 22 00 04 00 00 01 04 05 f4 ...!..." ........
|
|
[0010]: 03 05 c2 23 05 11 04 05 f4 13 09 03 00 c0 7b 80 ...#.... ......{.
|
|
[0020]: 7c ef 17 04 0e 00 |.....
|
|
XMIT-14: (task "idle task" at 0xb05e6e00, time: 1279.02) 29 octets @ 0x8007fa36
|
|
[0000]: ff 03 c0 21 02 01 00 19 01 04 05 f4 11 04 05 f4 ...!.... ........
|
|
[0010]: 13 09 03 00 c0 7b 9a 9f 2d 17 04 10 00 .....{.. -....
|
|
|
|
Example 'wandsess' output data (TAOS 8.0.3):
|
|
|
|
RECV-Max7:20: (task "_brouterControlTask" at 0xb094ac20, time: 1481.50) 20 octets @ 0x8000d198
|
|
[0000]: ff 03 00 3d c0 00 00 04 80 fd 02 01 00 0a 11 06 ...=.... ........
|
|
[0010]: 00 01 01 03 ....
|
|
XMIT-Max7:20: (task "_brouterControlTask" at 0xb094ac20, time: 1481.51) 26 octets @ 0x800806b6
|
|
[0000]: ff 03 00 3d c0 00 00 00 80 21 01 01 00 10 02 06 ...=.... .!......
|
|
[0010]: 00 2d 0f 01 03 06 89 64 03 08 .-.....d ..
|
|
XMIT-Max7:20: (task "_brouterControlTask" at 0xb094ac20, time: 1481.51) 20 octets @ 0x8007f716
|
|
[0000]: ff 03 00 3d c0 00 00 01 80 fd 01 01 00 0a 11 06 ...=.... ........
|
|
[0010]: 00 01 01 03 ....
|
|
|
|
The changes since TAOS 7.X are:
|
|
|
|
1) White space is added before "(task".
|
|
2) Task has a name, indicated by a subsequent string surrounded by a
|
|
double-quote.
|
|
3) Address expressed in hex number has a preceeding "0x".
|
|
4) Hex numbers are in lower case.
|
|
5) There is a character display corresponding to hex data in each line.
|
|
|
|
*/
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
#include "config.h"
|
|
#endif
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
#include "wtap-int.h"
|
|
#include "buffer.h"
|
|
#include "ascendtext.h"
|
|
#include "ascend-int.h"
|
|
#include "file_wrappers.h"
|
|
|
|
#define NO_USER "<none>"
|
|
|
|
int yyparse(void);
|
|
void yyerror(const char *);
|
|
|
|
const gchar *ascend_parse_error;
|
|
|
|
static unsigned int bcur;
|
|
static guint32 start_time, secs, usecs, caplen, wirelen;
|
|
static ascend_pkthdr *header;
|
|
struct ascend_phdr *pseudo_header;
|
|
static guint8 *pkt_data;
|
|
static gint64 first_hexbyte;
|
|
static FILE_T *fh_ptr;
|
|
|
|
%}
|
|
|
|
%union {
|
|
gchar *s;
|
|
guint32 d;
|
|
guint8 b;
|
|
}
|
|
|
|
%token <s> STRING KEYWORD WDD_DATE WDD_CHUNK COUNTER SLASH_SUFFIX
|
|
%token <d> WDS_PREFIX ISDN_PREFIX ETHER_PREFIX DECNUM HEXNUM
|
|
%token <b> HEXBYTE
|
|
|
|
%type <s> string dataln datagroup
|
|
%type <d> wds_prefix isdn_prefix ether_prefix decnum hexnum
|
|
%type <b> byte bytegroup
|
|
|
|
%%
|
|
|
|
data_packet:
|
|
| ether_hdr datagroup
|
|
| deferred_isdn_hdr datagroup deferred_isdn_hdr datagroup
|
|
| isdn_hdr datagroup
|
|
| wds_hdr datagroup
|
|
| wds8_hdr datagroup
|
|
| wdp7_hdr datagroup
|
|
| wdp8_hdr datagroup
|
|
| wdd_date wdd_hdr datagroup
|
|
| wdd_hdr datagroup
|
|
;
|
|
|
|
isdn_prefix: ISDN_PREFIX;
|
|
|
|
ether_prefix: ETHER_PREFIX;
|
|
|
|
wds_prefix: WDS_PREFIX;
|
|
|
|
string: STRING;
|
|
|
|
decnum: DECNUM;
|
|
|
|
hexnum: HEXNUM;
|
|
|
|
/*
|
|
pridisp special case - I-frame header printed separately from contents,
|
|
one frame across two messages.
|
|
|
|
PRI-XMIT-0/1: (task "l1Task" at 0x80152b20, time: 283529.65) 4 octets @
|
|
0x80128220
|
|
[0000]: 00 01 ae b2 ....
|
|
PRI-XMIT-0/2 (task "l1Task" at 0x80152b20, time: 283529.65) 10 octets @
|
|
0x80128224
|
|
[0000]: 08 02 d7 e3 02 18 03 a9 83 8a ........
|
|
|
|
*/
|
|
deferred_isdn_hdr: isdn_prefix decnum SLASH_SUFFIX KEYWORD string KEYWORD hexnum KEYWORD decnum decnum decnum KEYWORD HEXNUM {
|
|
wirelen += $11;
|
|
caplen += $11;
|
|
secs = $9;
|
|
usecs = $10;
|
|
if (pseudo_header != NULL) {
|
|
pseudo_header->type = $1;
|
|
pseudo_header->sess = $2;
|
|
pseudo_header->call_num[0] = '\0';
|
|
pseudo_header->chunk = 0;
|
|
pseudo_header->task = $7;
|
|
}
|
|
/* because we have two data groups */
|
|
first_hexbyte = 0;
|
|
}
|
|
;
|
|
|
|
/*
|
|
PRI-XMIT-19: (task "l1Task" at 0x10216840, time: 274758.67) 4 octets @ 0x1027c1c0
|
|
... or ...
|
|
PRI-RCV-27: (task "idle task" at 0x10123570, time: 560194.01) 4 octets @ 0x1027fb00
|
|
*/
|
|
isdn_hdr: isdn_prefix decnum KEYWORD string KEYWORD hexnum KEYWORD decnum decnum decnum KEYWORD HEXNUM {
|
|
wirelen = $10;
|
|
caplen = $10;
|
|
secs = $8;
|
|
usecs = $9;
|
|
if (pseudo_header != NULL) {
|
|
pseudo_header->type = $1;
|
|
pseudo_header->sess = $2;
|
|
pseudo_header->call_num[0] = '\0';
|
|
pseudo_header->chunk = 0;
|
|
pseudo_header->task = $6;
|
|
}
|
|
first_hexbyte = 0;
|
|
}
|
|
;
|
|
|
|
/*
|
|
ETHER3ND XMIT: (task "_sarTask" at 0x802c6eb0, time: 259848.11) 414 octets @ 0xa
|
|
885f80e
|
|
*/
|
|
ether_hdr: ether_prefix string KEYWORD string KEYWORD hexnum KEYWORD decnum decnum
|
|
decnum KEYWORD HEXNUM {
|
|
wirelen = $10;
|
|
caplen = $10;
|
|
secs = $8;
|
|
usecs = $9;
|
|
if (pseudo_header != NULL) {
|
|
pseudo_header->type = $1;
|
|
pseudo_header->call_num[0] = '\0';
|
|
pseudo_header->chunk = 0;
|
|
pseudo_header->task = $6;
|
|
}
|
|
}
|
|
;
|
|
|
|
/* RECV-iguana:241:(task: B02614C0, time: 1975432.85) 49 octets @ 8003BD94 */
|
|
/* 1 2 3 4 5 6 7 8 9 10 11 */
|
|
wds_hdr: wds_prefix string decnum KEYWORD hexnum KEYWORD decnum decnum decnum KEYWORD HEXNUM {
|
|
wirelen = $9;
|
|
caplen = $9;
|
|
secs = $7;
|
|
usecs = $8;
|
|
if (pseudo_header != NULL) {
|
|
/* pseudo_header->user is set in ascend_scanner.l */
|
|
pseudo_header->type = $1;
|
|
pseudo_header->sess = $3;
|
|
pseudo_header->call_num[0] = '\0';
|
|
pseudo_header->chunk = 0;
|
|
pseudo_header->task = $5;
|
|
}
|
|
}
|
|
;
|
|
|
|
/* RECV-Max7:20: (task "_brouterControlTask" at 0xb094ac20, time: 1481.50) 20 octets @ 0x8000d198 */
|
|
/* 1 2 3 4 5 6 7 8 9 10 11 12 13 */
|
|
wds8_hdr: wds_prefix string decnum KEYWORD string KEYWORD hexnum KEYWORD decnum decnum decnum KEYWORD HEXNUM {
|
|
wirelen = $11;
|
|
caplen = $11;
|
|
secs = $9;
|
|
usecs = $10;
|
|
if (pseudo_header != NULL) {
|
|
/* pseudo_header->user is set in ascend_scanner.l */
|
|
pseudo_header->type = $1;
|
|
pseudo_header->sess = $3;
|
|
pseudo_header->call_num[0] = '\0';
|
|
pseudo_header->chunk = 0;
|
|
pseudo_header->task = $7;
|
|
}
|
|
}
|
|
;
|
|
|
|
/* RECV-187:(task: B050B480, time: 18042248.03) 100 octets @ 800012C0 */
|
|
/* 1 2 3 4 5 6 7 8 9 10 */
|
|
wdp7_hdr: wds_prefix decnum KEYWORD hexnum KEYWORD decnum decnum decnum KEYWORD HEXNUM {
|
|
wirelen = $8;
|
|
caplen = $8;
|
|
secs = $6;
|
|
usecs = $7;
|
|
if (pseudo_header != NULL) {
|
|
/* pseudo_header->user is set in ascend_scanner.l */
|
|
pseudo_header->type = $1;
|
|
pseudo_header->sess = $2;
|
|
pseudo_header->call_num[0] = '\0';
|
|
pseudo_header->chunk = 0;
|
|
pseudo_header->task = $4;
|
|
}
|
|
}
|
|
;
|
|
|
|
/* XMIT-44: (task "freedm_task" at 0xe051fd10, time: 6258.66) 29 octets @ 0x606d1f00 */
|
|
/* 1 2 3 4 5 6 7 8 9 10 11 12 */
|
|
wdp8_hdr: wds_prefix decnum KEYWORD string KEYWORD hexnum KEYWORD decnum decnum decnum KEYWORD HEXNUM {
|
|
wirelen = $10;
|
|
caplen = $10;
|
|
secs = $8;
|
|
usecs = $9;
|
|
if (pseudo_header != NULL) {
|
|
/* pseudo_header->user is set in ascend_scanner.l */
|
|
pseudo_header->type = $1;
|
|
pseudo_header->sess = $2;
|
|
pseudo_header->call_num[0] = '\0';
|
|
pseudo_header->chunk = 0;
|
|
pseudo_header->task = $6;
|
|
}
|
|
}
|
|
;
|
|
|
|
/*
|
|
Date: 01/12/1990. Time: 12:22:33
|
|
Cause an attempt to place call to 14082750382
|
|
*/
|
|
/* 1 2 3 4 5 6 7 8 9 10*/
|
|
wdd_date: WDD_DATE decnum decnum decnum KEYWORD decnum decnum decnum KEYWORD string {
|
|
/*
|
|
* Supply the date/time value to the code above us; it will use the
|
|
* first date/time value supplied as the capture start date/time.
|
|
*/
|
|
struct tm wddt;
|
|
|
|
wddt.tm_sec = $8;
|
|
wddt.tm_min = $7;
|
|
wddt.tm_hour = $6;
|
|
wddt.tm_mday = $3;
|
|
wddt.tm_mon = $2 - 1;
|
|
wddt.tm_year = ($4 > 1970) ? $4 - 1900 : 70;
|
|
wddt.tm_isdst = -1;
|
|
|
|
start_time = (guint32) mktime(&wddt);
|
|
}
|
|
;
|
|
|
|
/*
|
|
WD_DIALOUT_DISP: chunk 2515EE type IP.
|
|
(task: 251790, time: 994953.28) 44 octets @ 2782B8
|
|
*/
|
|
/* 1 2 3 4 5 6 7 8 9 10 11*/
|
|
wdd_hdr: WDD_CHUNK hexnum KEYWORD KEYWORD hexnum KEYWORD decnum decnum decnum KEYWORD HEXNUM {
|
|
wirelen = $9;
|
|
caplen = $9;
|
|
secs = $7;
|
|
usecs = $8;
|
|
if (pseudo_header != NULL) {
|
|
/* pseudo_header->call_num is set in ascend_scanner.l */
|
|
pseudo_header->type = ASCEND_PFX_WDD;
|
|
pseudo_header->user[0] = '\0';
|
|
pseudo_header->sess = 0;
|
|
pseudo_header->chunk = $2;
|
|
pseudo_header->task = $5;
|
|
}
|
|
}
|
|
;
|
|
|
|
byte: HEXBYTE {
|
|
/* remember the position of the data group in the trace, to tip
|
|
off ascend_seek() as to where to look for the next header. */
|
|
if (first_hexbyte == 0)
|
|
first_hexbyte = file_tell(*fh_ptr);
|
|
|
|
if (bcur < caplen) {
|
|
pkt_data[bcur] = $1;
|
|
bcur++;
|
|
}
|
|
|
|
/* arbitrary safety maximum... */
|
|
if (bcur >= ASCEND_MAX_PKT_LEN)
|
|
YYACCEPT;
|
|
}
|
|
;
|
|
|
|
/* XXX There must be a better way to do this... */
|
|
bytegroup: byte
|
|
| byte byte
|
|
| byte byte byte
|
|
| byte byte byte byte
|
|
| byte byte byte byte byte
|
|
| byte byte byte byte byte byte
|
|
| byte byte byte byte byte byte byte
|
|
| byte byte byte byte byte byte byte byte
|
|
| byte byte byte byte byte byte byte byte byte
|
|
| byte byte byte byte byte byte byte byte byte byte
|
|
| byte byte byte byte byte byte byte byte byte byte byte
|
|
| byte byte byte byte byte byte byte byte byte byte byte byte
|
|
| byte byte byte byte byte byte byte byte byte byte byte byte byte
|
|
| byte byte byte byte byte byte byte byte byte byte byte byte byte byte
|
|
| byte byte byte byte byte byte byte byte byte byte byte byte byte byte byte
|
|
| byte byte byte byte byte byte byte byte byte byte byte byte byte byte byte byte
|
|
;
|
|
|
|
dataln: COUNTER bytegroup;
|
|
|
|
datagroup: dataln
|
|
| dataln dataln
|
|
| dataln dataln dataln
|
|
| dataln dataln dataln dataln
|
|
| dataln dataln dataln dataln dataln
|
|
| dataln dataln dataln dataln dataln dataln
|
|
| dataln dataln dataln dataln dataln dataln dataln
|
|
| dataln dataln dataln dataln dataln dataln dataln dataln
|
|
;
|
|
|
|
%%
|
|
|
|
void
|
|
init_parse_ascend()
|
|
{
|
|
at_eof = 0;
|
|
start_time = 0; /* we haven't see a date/time yet */
|
|
}
|
|
|
|
/* Parse the capture file.
|
|
Returns:
|
|
PARSED_RECORD if we got a packet
|
|
PARSED_NONRECORD if the parser succeeded but didn't see a packet
|
|
PARSE_FAILED if the parser failed. */
|
|
parse_t
|
|
parse_ascend(FILE_T fh, guint8 *pd, struct ascend_phdr *phdr,
|
|
ascend_pkthdr *hdr, gint64 *start_of_data)
|
|
{
|
|
/* yydebug = 1; */
|
|
int retval;
|
|
ascend_init_lexer(fh);
|
|
pkt_data = pd;
|
|
pseudo_header = phdr;
|
|
header = hdr;
|
|
fh_ptr = &fh;
|
|
|
|
bcur = 0;
|
|
first_hexbyte = 0;
|
|
wirelen = 0;
|
|
caplen = 0;
|
|
|
|
/*
|
|
* Not all packets in a "wdd" dump necessarily have a "Cause an
|
|
* attempt to place call to" header (I presume this can happen if
|
|
* there was a call in progress when the packet was sent or
|
|
* received), so we won't necessarily have the phone number for
|
|
* the packet.
|
|
*
|
|
* XXX - we could assume, in the sequential pass, that it's the
|
|
* phone number from the last call, and remember that for use
|
|
* when doing random access.
|
|
*/
|
|
pseudo_header->call_num[0] = '\0';
|
|
|
|
retval = yyparse();
|
|
|
|
caplen = bcur;
|
|
|
|
/* did we see any data (hex bytes)? if so, tip off ascend_seek()
|
|
as to where to look for the next packet, if any. If we didn't,
|
|
maybe this record was broken. Advance so we don't get into
|
|
an infinite loop reading a broken trace. */
|
|
if (first_hexbyte) {
|
|
*start_of_data = first_hexbyte;
|
|
} else {
|
|
/* Sometimes, a header will be printed but the data will be omitted, or
|
|
worse -- two headers will be printed, followed by the data for each.
|
|
Because of this, we need to be fairly tolerant of what we accept
|
|
here. If we didn't find any hex bytes, skip over what we've read so
|
|
far so we can try reading a new packet. */
|
|
*start_of_data = file_tell(*fh_ptr);
|
|
retval = 0;
|
|
}
|
|
|
|
/* if we got at least some data, return success even if the parser
|
|
reported an error. This is because the debug header gives the number
|
|
of bytes on the wire, not actually how many bytes are in the trace.
|
|
We won't know where the data ends until we run into the next packet. */
|
|
if (caplen) {
|
|
if (header) {
|
|
header->start_time = start_time;
|
|
header->secs = secs;
|
|
header->usecs = usecs;
|
|
header->caplen = caplen;
|
|
header->len = wirelen;
|
|
}
|
|
|
|
return PARSED_RECORD;
|
|
}
|
|
|
|
/* Didn't see any data. Still, perhaps the parser was happy. */
|
|
if (retval)
|
|
return PARSE_FAILED;
|
|
else
|
|
return PARSED_NONRECORD;
|
|
}
|
|
|
|
void
|
|
yyerror (const char *s)
|
|
{
|
|
ascend_parse_error = s;
|
|
}
|