2022-08-12 12:09:45 +00:00
|
|
|
/* file-pcapng.h
|
|
|
|
*
|
|
|
|
* Wireshark - Network traffic analyzer
|
|
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
|
|
* Copyright 1998 Gerald Combs
|
|
|
|
*
|
|
|
|
* SPDX-License-Identifier: GPL-2.0-or-later
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
|
|
#ifndef __FILE_PCAPNG_H__
|
|
|
|
#define __FILE_PCAPNG_H__
|
|
|
|
|
2023-02-08 13:10:48 +00:00
|
|
|
/*
|
|
|
|
* Structure to pass to block data dissectors.
|
|
|
|
*/
|
|
|
|
typedef struct {
|
|
|
|
proto_item *block_item;
|
|
|
|
proto_tree *block_tree;
|
|
|
|
struct info *info;
|
|
|
|
} block_data_arg;
|
|
|
|
|
|
|
|
|
|
|
|
/* Callback for local block data dissection */
|
|
|
|
typedef void (local_block_dissect_t)(proto_tree *tree, packet_info *pinfo, tvbuff_t *tvb, block_data_arg *argp);
|
|
|
|
|
|
|
|
/* Callback for local block option dissection function */
|
|
|
|
typedef void (local_block_option_dissect_t)(proto_tree *option_tree, proto_item *option_item,
|
|
|
|
packet_info *pinfo, tvbuff_t *tvb, int offset,
|
|
|
|
int unknown_option_hf,
|
|
|
|
guint32 option_code, guint32 option_length);
|
|
|
|
|
|
|
|
typedef struct {
|
|
|
|
const char* name;
|
|
|
|
local_block_dissect_t *dissector;
|
|
|
|
int option_root_hf;
|
|
|
|
const value_string *option_vals;
|
|
|
|
local_block_option_dissect_t *option_dissector;
|
|
|
|
} local_block_callback_info_t;
|
|
|
|
|
|
|
|
/* Routine for a local block dissector to register with main pcapng dissector.
|
|
|
|
* For an in-tree example, please see file-pcapng-darwin.c */
|
|
|
|
void register_pcapng_local_block_dissector(guint32 block_number, local_block_callback_info_t *info);
|
|
|
|
|
|
|
|
|
|
|
|
/* Can be called by local block type dissectors block dissector callback */
|
|
|
|
gint dissect_options(proto_tree *tree, packet_info *pinfo,
|
|
|
|
guint32 block_type, tvbuff_t *tvb, int offset, guint encoding,
|
|
|
|
void *user_data);
|
|
|
|
|
|
|
|
|
|
|
|
|
2022-08-12 12:09:45 +00:00
|
|
|
/* Used by custom dissector */
|
|
|
|
|
|
|
|
/* File info */
|
|
|
|
struct info {
|
|
|
|
guint32 section_number;
|
|
|
|
guint32 interface_number;
|
|
|
|
guint32 darwin_process_event_number;
|
|
|
|
guint32 frame_number;
|
|
|
|
guint encoding;
|
|
|
|
wmem_array_t *interfaces;
|
|
|
|
wmem_array_t *darwin_process_events;
|
|
|
|
};
|
|
|
|
|
|
|
|
struct interface_description {
|
|
|
|
guint32 link_type;
|
|
|
|
guint32 snap_len;
|
|
|
|
guint64 timestamp_resolution;
|
|
|
|
guint64 timestamp_offset;
|
|
|
|
};
|
|
|
|
|
|
|
|
struct darwin_process_event_description {
|
|
|
|
guint32 process_id;
|
|
|
|
};
|
|
|
|
|
|
|
|
/* Dissect one PCAPNG Block */
|
|
|
|
extern gint dissect_block(proto_tree *tree, packet_info *pinfo, tvbuff_t *tvb, struct info *info);
|
|
|
|
|
|
|
|
#endif
|