2003-07-29 19:42:01 +00:00
|
|
|
/* 5views.c
|
|
|
|
*
|
2004-07-18 00:24:25 +00:00
|
|
|
* $Id$
|
2003-07-29 19:42:01 +00:00
|
|
|
*
|
|
|
|
* Wiretap Library
|
|
|
|
* Copyright (c) 1998 by Gilbert Ramirez <gram@alumni.rice.edu>
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU General Public License
|
|
|
|
* as published by the Free Software Foundation; either version 2
|
|
|
|
* of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
* along with this program; if not, write to the Free Software
|
2012-06-28 22:56:06 +00:00
|
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
2003-07-29 19:42:01 +00:00
|
|
|
*/
|
|
|
|
|
|
|
|
#include "config.h"
|
|
|
|
#include <errno.h>
|
|
|
|
#include <string.h>
|
|
|
|
#include <time.h>
|
|
|
|
|
|
|
|
#include "wtap-int.h"
|
|
|
|
#include "file_wrappers.h"
|
|
|
|
#include "buffer.h"
|
2005-08-02 04:23:39 +00:00
|
|
|
#include "5views.h"
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
|
|
|
|
typedef struct
|
|
|
|
{
|
2003-07-29 20:26:34 +00:00
|
|
|
guint32 Signature;
|
|
|
|
guint32 Size; /* Total size of Header in bytes (included Signature) */
|
|
|
|
guint32 Version; /* Identify version and so the format of this record */
|
|
|
|
guint32 DataSize; /* Total size of data included in the Info Record (except the header size) */
|
|
|
|
guint32 FileType; /* Type of the file */
|
|
|
|
guint32 Reserved[3]; /* Reserved for future use */
|
2003-07-29 19:42:01 +00:00
|
|
|
}t_5VW_Info_Header;
|
|
|
|
|
|
|
|
typedef struct
|
|
|
|
{
|
2003-07-29 20:26:34 +00:00
|
|
|
guint32 Type; /* Id of the attribute */
|
|
|
|
guint16 Size; /* Size of the data part of the attribute (not including header size) */
|
|
|
|
guint16 Nb; /* Number of elements */
|
2003-07-29 19:42:01 +00:00
|
|
|
}t_5VW_Attributes_Header;
|
|
|
|
|
|
|
|
|
2008-02-09 23:35:28 +00:00
|
|
|
#define CST_5VW_INFO_HEADER_KEY 0xAAAAAAAAU /* signature */
|
2003-07-29 19:42:01 +00:00
|
|
|
|
2008-02-09 23:35:28 +00:00
|
|
|
#define CST_5VW_INFO_RECORD_VERSION 0x00010000U /* version */
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
#define CST_5VW_DECALE_FILE_TYPE 24
|
2008-02-09 23:35:28 +00:00
|
|
|
#define CST_5VW_SECTION_CAPTURES 0x08U
|
2003-07-29 19:42:01 +00:00
|
|
|
#define CST_5VW_CAPTURES_FILE (CST_5VW_SECTION_CAPTURES << CST_5VW_DECALE_FILE_TYPE) /* 0x08000000 */
|
2008-02-09 23:35:28 +00:00
|
|
|
#define CST_5VW_FLAT_FILE 0x10000000U
|
2003-07-29 19:42:01 +00:00
|
|
|
#define CST_5VW_CAPTURE_FILEID (CST_5VW_FLAT_FILE | CST_5VW_CAPTURES_FILE)
|
2008-02-09 23:35:28 +00:00
|
|
|
#define CST_5VW_FAMILY_CAP_ETH 0x01U
|
|
|
|
#define CST_5VW_FAMILY_CAP_WAN 0x02U
|
2003-07-29 19:42:01 +00:00
|
|
|
#define CST_5VW_DECALE_FILE_FAMILY 12
|
|
|
|
#define CST_5VW_CAP_ETH (CST_5VW_FAMILY_CAP_ETH << CST_5VW_DECALE_FILE_FAMILY) /* 0x00001000 */
|
|
|
|
#define CST_5VW_CAP_WAN (CST_5VW_FAMILY_CAP_WAN << CST_5VW_DECALE_FILE_FAMILY) /* 0x00002000 */
|
|
|
|
#define CST_5VW_CAPTURE_ETH_FILEID (CST_5VW_CAPTURE_FILEID | CST_5VW_CAP_ETH)
|
|
|
|
#define CST_5VW_CAPTURE_WAN_FILEID (CST_5VW_CAPTURE_FILEID | CST_5VW_CAP_WAN)
|
|
|
|
|
2008-02-09 23:35:28 +00:00
|
|
|
#define CST_5VW_CAPTURE_FILE_TYPE_MASK 0xFF000000U
|
2003-07-29 19:42:01 +00:00
|
|
|
|
2008-02-09 23:35:28 +00:00
|
|
|
#define CST_5VW_FRAME_RECORD 0x00000000U
|
|
|
|
#define CST_5VW_RECORDS_HEADER_KEY 0x3333EEEEU
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
typedef struct
|
|
|
|
{
|
|
|
|
t_5VW_Info_Header Info_Header;
|
|
|
|
t_5VW_Attributes_Header HeaderDateCreation;
|
2003-07-29 20:26:34 +00:00
|
|
|
guint32 Time;
|
2003-07-29 19:42:01 +00:00
|
|
|
t_5VW_Attributes_Header HeaderNbFrames;
|
2003-07-29 20:26:34 +00:00
|
|
|
guint32 TramesStockeesInFile;
|
2003-07-29 19:42:01 +00:00
|
|
|
}t_5VW_Capture_Header;
|
|
|
|
|
|
|
|
typedef struct
|
|
|
|
{
|
2003-07-29 20:26:34 +00:00
|
|
|
guint32 Key; /* 0x3333EEEE */
|
|
|
|
guint16 HeaderSize; /* Actual size of this header in bytes (32) */
|
|
|
|
guint16 HeaderType; /* Exact type of this header (0x4000) */
|
|
|
|
guint32 RecType; /* Type of record */
|
|
|
|
guint32 RecSubType; /* Subtype of record */
|
|
|
|
guint32 RecSize; /* Size of one record */
|
|
|
|
guint32 RecNb; /* Number of records */
|
|
|
|
guint32 Utc;
|
|
|
|
guint32 NanoSecondes;
|
|
|
|
guint32 RecInfo; /* Info about Alarm / Event / Frame captured */
|
2003-07-29 19:42:01 +00:00
|
|
|
}t_5VW_TimeStamped_Header;
|
|
|
|
|
|
|
|
|
2008-02-09 23:35:28 +00:00
|
|
|
#define CST_5VW_IA_CAP_INF_NB_TRAMES_STOCKEES 0x20000000U
|
|
|
|
#define CST_5VW_IA_DATE_CREATION 0x80000007U /* Struct t_Attrib_Date_Create */
|
|
|
|
#define CST_5VW_TIMESTAMPED_HEADER_TYPE 0x4000U
|
2003-07-29 19:42:01 +00:00
|
|
|
#define CST_5VW_CAPTURES_RECORD (CST_5VW_SECTION_CAPTURES << 28) /* 0x80000000 */
|
2008-02-09 23:35:28 +00:00
|
|
|
#define CST_5VW_SYSTEM_RECORD 0x00000000U
|
2003-07-29 19:42:01 +00:00
|
|
|
|
Have the Wiretap open, read, and seek-and-read routines return, in
addition to an error code, an error info string, for
WTAP_ERR_UNSUPPORTED, WTAP_ERR_UNSUPPORTED_ENCAP, and
WTAP_ERR_BAD_RECORD errors. Replace the error messages logged with
"g_message()" for those errors with g_strdup()ed or g_strdup_printf()ed
strings returned as the error info string, and change the callers of
those routines to, for those errors, put the info string into the
printed message or alert box for the error.
Add messages for cases where those errors were returned without printing
an additional message.
Nobody uses the error code from "cf_read()" - "cf_read()" puts up the
alert box itself for failures; get rid of the error code, so it just
returns a success/failure indication.
Rename "file_read_error_message()" to "cf_read_error_message()", as it
handles read errors from Wiretap, and have it take an error info string
as an argument. (That handles a lot of the work of putting the info
string into the error message.)
Make some variables in "ascend-grammar.y" static.
Check the return value of "erf_read_header()" in "erf_seek_read()".
Get rid of an unused #define in "i4btrace.c".
svn path=/trunk/; revision=9852
2004-01-25 21:55:17 +00:00
|
|
|
static gboolean _5views_read(wtap *wth, int *err, gchar **err_info,
|
2006-11-05 22:46:44 +00:00
|
|
|
gint64 *data_offset);
|
2011-09-01 09:43:10 +00:00
|
|
|
static gboolean _5views_read_rec_data(FILE_T fh, guint8 *pd, int length,
|
2011-04-21 09:41:52 +00:00
|
|
|
int *err, gchar **err_info);
|
Have the Wiretap open, read, and seek-and-read routines return, in
addition to an error code, an error info string, for
WTAP_ERR_UNSUPPORTED, WTAP_ERR_UNSUPPORTED_ENCAP, and
WTAP_ERR_BAD_RECORD errors. Replace the error messages logged with
"g_message()" for those errors with g_strdup()ed or g_strdup_printf()ed
strings returned as the error info string, and change the callers of
those routines to, for those errors, put the info string into the
printed message or alert box for the error.
Add messages for cases where those errors were returned without printing
an additional message.
Nobody uses the error code from "cf_read()" - "cf_read()" puts up the
alert box itself for failures; get rid of the error code, so it just
returns a success/failure indication.
Rename "file_read_error_message()" to "cf_read_error_message()", as it
handles read errors from Wiretap, and have it take an error info string
as an argument. (That handles a lot of the work of putting the info
string into the error message.)
Make some variables in "ascend-grammar.y" static.
Check the return value of "erf_read_header()" in "erf_seek_read()".
Get rid of an unused #define in "i4btrace.c".
svn path=/trunk/; revision=9852
2004-01-25 21:55:17 +00:00
|
|
|
static int _5views_read_header(wtap *wth, FILE_T fh,
|
2011-04-21 09:41:52 +00:00
|
|
|
t_5VW_TimeStamped_Header *hdr, int *err, gchar **err_info);
|
2006-11-05 22:46:44 +00:00
|
|
|
static gboolean _5views_seek_read(wtap *wth, gint64 seek_off,
|
2012-10-16 21:50:57 +00:00
|
|
|
struct wtap_pkthdr *phdr, guint8 *pd, int length,
|
Have the Wiretap open, read, and seek-and-read routines return, in
addition to an error code, an error info string, for
WTAP_ERR_UNSUPPORTED, WTAP_ERR_UNSUPPORTED_ENCAP, and
WTAP_ERR_BAD_RECORD errors. Replace the error messages logged with
"g_message()" for those errors with g_strdup()ed or g_strdup_printf()ed
strings returned as the error info string, and change the callers of
those routines to, for those errors, put the info string into the
printed message or alert box for the error.
Add messages for cases where those errors were returned without printing
an additional message.
Nobody uses the error code from "cf_read()" - "cf_read()" puts up the
alert box itself for failures; get rid of the error code, so it just
returns a success/failure indication.
Rename "file_read_error_message()" to "cf_read_error_message()", as it
handles read errors from Wiretap, and have it take an error info string
as an argument. (That handles a lot of the work of putting the info
string into the error message.)
Make some variables in "ascend-grammar.y" static.
Check the return value of "erf_read_header()" in "erf_seek_read()".
Get rid of an unused #define in "i4btrace.c".
svn path=/trunk/; revision=9852
2004-01-25 21:55:17 +00:00
|
|
|
int *err, gchar **err_info);
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
|
2012-10-16 21:50:57 +00:00
|
|
|
static gboolean _5views_dump(wtap_dumper *wdh, const struct wtap_pkthdr *phdr, const guint8 *pd, int *err);
|
2003-07-29 19:42:01 +00:00
|
|
|
static gboolean _5views_dump_close(wtap_dumper *wdh, int *err);
|
|
|
|
|
|
|
|
|
Have the Wiretap open, read, and seek-and-read routines return, in
addition to an error code, an error info string, for
WTAP_ERR_UNSUPPORTED, WTAP_ERR_UNSUPPORTED_ENCAP, and
WTAP_ERR_BAD_RECORD errors. Replace the error messages logged with
"g_message()" for those errors with g_strdup()ed or g_strdup_printf()ed
strings returned as the error info string, and change the callers of
those routines to, for those errors, put the info string into the
printed message or alert box for the error.
Add messages for cases where those errors were returned without printing
an additional message.
Nobody uses the error code from "cf_read()" - "cf_read()" puts up the
alert box itself for failures; get rid of the error code, so it just
returns a success/failure indication.
Rename "file_read_error_message()" to "cf_read_error_message()", as it
handles read errors from Wiretap, and have it take an error info string
as an argument. (That handles a lot of the work of putting the info
string into the error message.)
Make some variables in "ascend-grammar.y" static.
Check the return value of "erf_read_header()" in "erf_seek_read()".
Get rid of an unused #define in "i4btrace.c".
svn path=/trunk/; revision=9852
2004-01-25 21:55:17 +00:00
|
|
|
int _5views_open(wtap *wth, int *err, gchar **err_info)
|
2003-07-29 19:42:01 +00:00
|
|
|
{
|
|
|
|
int bytes_read;
|
|
|
|
t_5VW_Capture_Header Capture_Header;
|
|
|
|
int encap = WTAP_ENCAP_UNKNOWN;
|
|
|
|
|
|
|
|
errno = WTAP_ERR_CANT_READ;
|
2011-04-06 06:51:19 +00:00
|
|
|
bytes_read = file_read(&Capture_Header.Info_Header, sizeof(t_5VW_Info_Header), wth->fh);
|
2003-07-29 19:42:01 +00:00
|
|
|
if (bytes_read != sizeof(t_5VW_Info_Header)) {
|
2011-04-21 09:41:52 +00:00
|
|
|
*err = file_error(wth->fh, err_info);
|
Do not call wtap_file_read_unknown_bytes() or
wtap_file_read_expected_bytes() from an open routine - open routines are
supposed to return -1 on error, 0 if the file doesn't appear to be a
file of the specified type, or 1 if the file does appear to be a file of
the specified type, but those macros will cause the caller to return
FALSE on errors (so that, even if there's an I/O error, it reports "the
file isn't a file of the specified type" rather than "we got an error
trying to read the file").
When doing reads in an open routine before we've concluded that the file
is probably of the right type, return 0, rather than -1, if we get
WTAP_ERR_SHORT_READ - if we don't have enough data to check whether a
file is of a given type, we should keep trying other types, not give up.
For reads done *after* we've concluded the file is probably of the right
type, if a read doesn't return the number of bytes we asked for, but
returns an error of 0, return WTAP_ERR_SHORT_READ - the file is
apparently cut short.
For NetMon and NetXRay/Windows Sniffer files, use a #define for the
magic number size, and use that for both magic numbers.
svn path=/trunk/; revision=46803
2012-12-27 12:19:25 +00:00
|
|
|
if (*err != 0 && *err != WTAP_ERR_SHORT_READ)
|
2003-07-29 19:42:01 +00:00
|
|
|
return -1;
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Check whether that's 5Views format or not */
|
|
|
|
if(Capture_Header.Info_Header.Signature != CST_5VW_INFO_HEADER_KEY)
|
|
|
|
{
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Check Version */
|
2003-07-29 20:26:34 +00:00
|
|
|
Capture_Header.Info_Header.Version =
|
|
|
|
pletohl(&Capture_Header.Info_Header.Version);
|
2003-07-29 19:42:01 +00:00
|
|
|
switch (Capture_Header.Info_Header.Version) {
|
|
|
|
|
|
|
|
case CST_5VW_INFO_RECORD_VERSION:
|
|
|
|
break;
|
|
|
|
|
|
|
|
default:
|
|
|
|
*err = WTAP_ERR_UNSUPPORTED;
|
Have the Wiretap open, read, and seek-and-read routines return, in
addition to an error code, an error info string, for
WTAP_ERR_UNSUPPORTED, WTAP_ERR_UNSUPPORTED_ENCAP, and
WTAP_ERR_BAD_RECORD errors. Replace the error messages logged with
"g_message()" for those errors with g_strdup()ed or g_strdup_printf()ed
strings returned as the error info string, and change the callers of
those routines to, for those errors, put the info string into the
printed message or alert box for the error.
Add messages for cases where those errors were returned without printing
an additional message.
Nobody uses the error code from "cf_read()" - "cf_read()" puts up the
alert box itself for failures; get rid of the error code, so it just
returns a success/failure indication.
Rename "file_read_error_message()" to "cf_read_error_message()", as it
handles read errors from Wiretap, and have it take an error info string
as an argument. (That handles a lot of the work of putting the info
string into the error message.)
Make some variables in "ascend-grammar.y" static.
Check the return value of "erf_read_header()" in "erf_seek_read()".
Get rid of an unused #define in "i4btrace.c".
svn path=/trunk/; revision=9852
2004-01-25 21:55:17 +00:00
|
|
|
*err_info = g_strdup_printf("5views: header version %u unsupported", Capture_Header.Info_Header.Version);
|
2003-07-29 19:42:01 +00:00
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Check File Type */
|
2003-07-29 20:26:34 +00:00
|
|
|
Capture_Header.Info_Header.FileType =
|
|
|
|
pletohl(&Capture_Header.Info_Header.FileType);
|
2003-07-29 19:42:01 +00:00
|
|
|
if((Capture_Header.Info_Header.FileType & CST_5VW_CAPTURE_FILE_TYPE_MASK) != CST_5VW_CAPTURE_FILEID)
|
|
|
|
{
|
|
|
|
*err = WTAP_ERR_UNSUPPORTED;
|
Have the Wiretap open, read, and seek-and-read routines return, in
addition to an error code, an error info string, for
WTAP_ERR_UNSUPPORTED, WTAP_ERR_UNSUPPORTED_ENCAP, and
WTAP_ERR_BAD_RECORD errors. Replace the error messages logged with
"g_message()" for those errors with g_strdup()ed or g_strdup_printf()ed
strings returned as the error info string, and change the callers of
those routines to, for those errors, put the info string into the
printed message or alert box for the error.
Add messages for cases where those errors were returned without printing
an additional message.
Nobody uses the error code from "cf_read()" - "cf_read()" puts up the
alert box itself for failures; get rid of the error code, so it just
returns a success/failure indication.
Rename "file_read_error_message()" to "cf_read_error_message()", as it
handles read errors from Wiretap, and have it take an error info string
as an argument. (That handles a lot of the work of putting the info
string into the error message.)
Make some variables in "ascend-grammar.y" static.
Check the return value of "erf_read_header()" in "erf_seek_read()".
Get rid of an unused #define in "i4btrace.c".
svn path=/trunk/; revision=9852
2004-01-25 21:55:17 +00:00
|
|
|
*err_info = g_strdup_printf("5views: file is not a capture file (filetype is %u)", Capture_Header.Info_Header.Version);
|
2003-07-29 19:42:01 +00:00
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Check possible Encap */
|
|
|
|
switch (Capture_Header.Info_Header.FileType) {
|
|
|
|
case CST_5VW_CAPTURE_ETH_FILEID:
|
|
|
|
encap = WTAP_ENCAP_ETHERNET;
|
|
|
|
break;
|
|
|
|
/* case CST_5VW_CAPTURE_WAN_FILEID:
|
|
|
|
break;
|
|
|
|
*/
|
|
|
|
default:
|
|
|
|
*err = WTAP_ERR_UNSUPPORTED_ENCAP;
|
Have the Wiretap open, read, and seek-and-read routines return, in
addition to an error code, an error info string, for
WTAP_ERR_UNSUPPORTED, WTAP_ERR_UNSUPPORTED_ENCAP, and
WTAP_ERR_BAD_RECORD errors. Replace the error messages logged with
"g_message()" for those errors with g_strdup()ed or g_strdup_printf()ed
strings returned as the error info string, and change the callers of
those routines to, for those errors, put the info string into the
printed message or alert box for the error.
Add messages for cases where those errors were returned without printing
an additional message.
Nobody uses the error code from "cf_read()" - "cf_read()" puts up the
alert box itself for failures; get rid of the error code, so it just
returns a success/failure indication.
Rename "file_read_error_message()" to "cf_read_error_message()", as it
handles read errors from Wiretap, and have it take an error info string
as an argument. (That handles a lot of the work of putting the info
string into the error message.)
Make some variables in "ascend-grammar.y" static.
Check the return value of "erf_read_header()" in "erf_seek_read()".
Get rid of an unused #define in "i4btrace.c".
svn path=/trunk/; revision=9852
2004-01-25 21:55:17 +00:00
|
|
|
*err_info = g_strdup_printf("5views: network type %u unknown or unsupported",
|
|
|
|
Capture_Header.Info_Header.FileType);
|
2003-07-29 19:42:01 +00:00
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* read the remaining header information */
|
2011-04-06 06:51:19 +00:00
|
|
|
bytes_read = file_read(&Capture_Header.HeaderDateCreation, sizeof (t_5VW_Capture_Header) - sizeof(t_5VW_Info_Header), wth->fh);
|
2003-07-29 19:42:01 +00:00
|
|
|
if (bytes_read != sizeof (t_5VW_Capture_Header)- sizeof(t_5VW_Info_Header) ) {
|
2011-04-21 09:41:52 +00:00
|
|
|
*err = file_error(wth->fh, err_info);
|
Do not call wtap_file_read_unknown_bytes() or
wtap_file_read_expected_bytes() from an open routine - open routines are
supposed to return -1 on error, 0 if the file doesn't appear to be a
file of the specified type, or 1 if the file does appear to be a file of
the specified type, but those macros will cause the caller to return
FALSE on errors (so that, even if there's an I/O error, it reports "the
file isn't a file of the specified type" rather than "we got an error
trying to read the file").
When doing reads in an open routine before we've concluded that the file
is probably of the right type, return 0, rather than -1, if we get
WTAP_ERR_SHORT_READ - if we don't have enough data to check whether a
file is of a given type, we should keep trying other types, not give up.
For reads done *after* we've concluded the file is probably of the right
type, if a read doesn't return the number of bytes we asked for, but
returns an error of 0, return WTAP_ERR_SHORT_READ - the file is
apparently cut short.
For NetMon and NetXRay/Windows Sniffer files, use a #define for the
magic number size, and use that for both magic numbers.
svn path=/trunk/; revision=46803
2012-12-27 12:19:25 +00:00
|
|
|
if (*err == 0)
|
|
|
|
*err = WTAP_ERR_SHORT_READ;
|
|
|
|
return -1;
|
2003-07-29 19:42:01 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/* This is a 5views capture file */
|
|
|
|
wth->file_type = WTAP_FILE_5VIEWS;
|
|
|
|
wth->subtype_read = _5views_read;
|
|
|
|
wth->subtype_seek_read = _5views_seek_read;
|
|
|
|
wth->file_encap = encap;
|
|
|
|
wth->snapshot_length = 0; /* not available in header */
|
2005-08-25 21:29:54 +00:00
|
|
|
wth->tsprecision = WTAP_FILE_TSPREC_NSEC;
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
return 1;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Read the next packet */
|
|
|
|
static gboolean
|
2011-04-21 09:41:52 +00:00
|
|
|
_5views_read(wtap *wth, int *err, gchar **err_info, gint64 *data_offset)
|
2003-07-29 19:42:01 +00:00
|
|
|
{
|
|
|
|
t_5VW_TimeStamped_Header TimeStamped_Header;
|
|
|
|
int bytes_read;
|
|
|
|
guint packet_size;
|
|
|
|
guint orig_size;
|
|
|
|
|
|
|
|
do
|
|
|
|
{
|
2011-04-21 09:41:52 +00:00
|
|
|
bytes_read = _5views_read_header(wth, wth->fh, &TimeStamped_Header, err, err_info);
|
2003-07-29 19:42:01 +00:00
|
|
|
if (bytes_read == -1) {
|
|
|
|
/*
|
|
|
|
* We failed to read the header.
|
|
|
|
*/
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
|
2003-07-29 20:26:34 +00:00
|
|
|
TimeStamped_Header.Key = pletohl(&TimeStamped_Header.Key);
|
2012-04-18 02:48:23 +00:00
|
|
|
if(TimeStamped_Header.Key != CST_5VW_RECORDS_HEADER_KEY) {
|
|
|
|
*err = WTAP_ERR_BAD_FILE;
|
|
|
|
*err_info = g_strdup_printf("5views: Time-stamped header has bad key value 0x%08X",
|
|
|
|
TimeStamped_Header.Key);
|
2003-07-29 20:26:34 +00:00
|
|
|
return FALSE;
|
2012-04-18 02:48:23 +00:00
|
|
|
}
|
2003-07-29 19:42:01 +00:00
|
|
|
|
2003-07-29 20:26:34 +00:00
|
|
|
TimeStamped_Header.RecSubType =
|
|
|
|
pletohl(&TimeStamped_Header.RecSubType);
|
|
|
|
TimeStamped_Header.RecSize =
|
|
|
|
pletohl(&TimeStamped_Header.RecSize);
|
2003-07-29 19:42:01 +00:00
|
|
|
if(TimeStamped_Header.RecSubType != CST_5VW_FRAME_RECORD) {
|
2009-01-07 20:06:24 +00:00
|
|
|
if (file_seek(wth->fh, TimeStamped_Header.RecSize, SEEK_CUR, err) == -1)
|
2003-07-29 19:42:01 +00:00
|
|
|
return FALSE;
|
|
|
|
} else
|
|
|
|
break;
|
|
|
|
} while (1);
|
|
|
|
|
|
|
|
packet_size = TimeStamped_Header.RecSize;
|
|
|
|
orig_size = TimeStamped_Header.RecSize;
|
2011-12-13 00:57:09 +00:00
|
|
|
if (packet_size > WTAP_MAX_PACKET_SIZE) {
|
|
|
|
/*
|
|
|
|
* Probably a corrupt capture file; don't blow up trying
|
|
|
|
* to allocate space for an immensely-large packet.
|
|
|
|
*/
|
2011-12-13 09:53:50 +00:00
|
|
|
*err = WTAP_ERR_BAD_FILE;
|
2011-12-13 00:57:09 +00:00
|
|
|
*err_info = g_strdup_printf("5views: File has %u-byte packet, bigger than maximum of %u",
|
|
|
|
packet_size, WTAP_MAX_PACKET_SIZE);
|
|
|
|
return FALSE;
|
|
|
|
}
|
2003-07-29 19:42:01 +00:00
|
|
|
|
2012-05-04 16:56:18 +00:00
|
|
|
*data_offset = file_tell(wth->fh);
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
buffer_assure_space(wth->frame_buffer, packet_size);
|
|
|
|
if (!_5views_read_rec_data(wth->fh, buffer_start_ptr(wth->frame_buffer),
|
2011-04-21 09:41:52 +00:00
|
|
|
packet_size, err, err_info))
|
2003-07-29 19:42:01 +00:00
|
|
|
return FALSE; /* Read error */
|
|
|
|
|
2003-07-29 20:26:34 +00:00
|
|
|
TimeStamped_Header.Utc = pletohl(&TimeStamped_Header.Utc);
|
|
|
|
TimeStamped_Header.NanoSecondes =
|
|
|
|
pletohl(&TimeStamped_Header.NanoSecondes);
|
2012-02-25 23:24:34 +00:00
|
|
|
wth->phdr.presence_flags = WTAP_HAS_TS|WTAP_HAS_CAP_LEN;
|
2005-08-24 21:31:56 +00:00
|
|
|
wth->phdr.ts.secs = TimeStamped_Header.Utc;
|
|
|
|
wth->phdr.ts.nsecs = TimeStamped_Header.NanoSecondes;
|
2003-07-29 19:42:01 +00:00
|
|
|
wth->phdr.caplen = packet_size;
|
|
|
|
wth->phdr.len = orig_size;
|
|
|
|
|
2003-10-01 07:11:49 +00:00
|
|
|
switch (wth->file_encap) {
|
|
|
|
|
|
|
|
case WTAP_ENCAP_ETHERNET:
|
|
|
|
/* We assume there's no FCS in this frame. */
|
2012-10-16 21:50:57 +00:00
|
|
|
wth->phdr.pseudo_header.eth.fcs_len = 0;
|
2003-10-01 07:11:49 +00:00
|
|
|
break;
|
|
|
|
}
|
|
|
|
|
2003-07-29 19:42:01 +00:00
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
static gboolean
|
2011-09-01 09:43:10 +00:00
|
|
|
_5views_read_rec_data(FILE_T fh, guint8 *pd, int length, int *err,
|
2011-04-21 09:41:52 +00:00
|
|
|
gchar **err_info)
|
2003-07-29 19:42:01 +00:00
|
|
|
{
|
|
|
|
int bytes_read;
|
|
|
|
|
|
|
|
errno = WTAP_ERR_CANT_READ;
|
2011-04-06 06:51:19 +00:00
|
|
|
bytes_read = file_read(pd, length, fh);
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
if (bytes_read != length) {
|
2011-04-21 09:41:52 +00:00
|
|
|
*err = file_error(fh, err_info);
|
2003-07-29 19:42:01 +00:00
|
|
|
if (*err == 0)
|
|
|
|
*err = WTAP_ERR_SHORT_READ;
|
|
|
|
return FALSE;
|
|
|
|
}
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/* Read the header of the next packet; if "silent" is TRUE, don't complain
|
|
|
|
to the console, as we're testing to see if the file appears to be of a
|
|
|
|
particular type.
|
|
|
|
|
|
|
|
Return -1 on an error, or the number of bytes of header read on success. */
|
|
|
|
static int
|
2011-04-21 09:41:52 +00:00
|
|
|
_5views_read_header(wtap *wth _U_, FILE_T fh, t_5VW_TimeStamped_Header *hdr, int *err, gchar **err_info)
|
2003-07-29 19:42:01 +00:00
|
|
|
{
|
|
|
|
int bytes_read, bytes_to_read;
|
|
|
|
|
|
|
|
bytes_to_read = sizeof(t_5VW_TimeStamped_Header);
|
|
|
|
|
|
|
|
/* Read record header. */
|
2011-04-06 06:51:19 +00:00
|
|
|
bytes_read = file_read(hdr, bytes_to_read, fh);
|
2003-07-29 19:42:01 +00:00
|
|
|
if (bytes_read != bytes_to_read) {
|
2011-04-21 09:41:52 +00:00
|
|
|
*err = file_error(fh, err_info);
|
2003-07-29 19:42:01 +00:00
|
|
|
if (*err == 0 && bytes_read != 0) {
|
|
|
|
*err = WTAP_ERR_SHORT_READ;
|
|
|
|
}
|
|
|
|
return -1;
|
|
|
|
}
|
|
|
|
|
|
|
|
return bytes_read;
|
|
|
|
}
|
|
|
|
|
|
|
|
static gboolean
|
2006-11-05 22:46:44 +00:00
|
|
|
_5views_seek_read(wtap *wth, gint64 seek_off,
|
2012-10-16 21:50:57 +00:00
|
|
|
struct wtap_pkthdr *phdr, guint8 *pd, int length,
|
2011-04-21 09:41:52 +00:00
|
|
|
int *err, gchar **err_info)
|
2003-07-29 19:42:01 +00:00
|
|
|
{
|
2012-10-16 21:50:57 +00:00
|
|
|
union wtap_pseudo_header *pseudo_header = &phdr->pseudo_header;
|
2003-07-29 19:42:01 +00:00
|
|
|
if (file_seek(wth->random_fh, seek_off, SEEK_SET, err) == -1)
|
|
|
|
return FALSE;
|
|
|
|
/*
|
|
|
|
* Read the packet data.
|
|
|
|
*/
|
2011-04-21 09:41:52 +00:00
|
|
|
if (!_5views_read_rec_data(wth->random_fh, pd, length, err, err_info))
|
2003-07-29 19:42:01 +00:00
|
|
|
return FALSE;
|
|
|
|
|
2003-10-01 07:11:49 +00:00
|
|
|
switch (wth->file_encap) {
|
|
|
|
|
|
|
|
case WTAP_ENCAP_ETHERNET:
|
|
|
|
/* We assume there's no FCS in this frame. */
|
|
|
|
pseudo_header->eth.fcs_len = 0;
|
|
|
|
break;
|
|
|
|
}
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-02-26 07:59:54 +00:00
|
|
|
typedef struct {
|
|
|
|
guint32 nframes;
|
|
|
|
} _5views_dump_t;
|
|
|
|
|
2003-07-29 19:42:01 +00:00
|
|
|
static const int wtap_encap[] = {
|
|
|
|
-1, /* WTAP_ENCAP_UNKNOWN -> unsupported */
|
2011-12-22 09:22:35 +00:00
|
|
|
CST_5VW_CAPTURE_ETH_FILEID, /* WTAP_ENCAP_ETHERNET -> Ethernet */
|
2003-07-29 19:42:01 +00:00
|
|
|
};
|
|
|
|
#define NUM_WTAP_ENCAPS (sizeof wtap_encap / sizeof wtap_encap[0])
|
|
|
|
|
|
|
|
/* Returns 0 if we could write the specified encapsulation type,
|
|
|
|
an error indication otherwise. */
|
|
|
|
int _5views_dump_can_write_encap(int encap)
|
|
|
|
{
|
|
|
|
/* Per-packet encapsulations aren't supported. */
|
|
|
|
if (encap == WTAP_ENCAP_PER_PACKET)
|
|
|
|
return WTAP_ERR_ENCAP_PER_PACKET_UNSUPPORTED;
|
|
|
|
|
|
|
|
if (encap < 0 || (unsigned) encap >= NUM_WTAP_ENCAPS || wtap_encap[encap] == -1)
|
|
|
|
return WTAP_ERR_UNSUPPORTED_ENCAP;
|
|
|
|
|
|
|
|
return 0;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Returns TRUE on success, FALSE on failure; sets "*err" to an error code on
|
|
|
|
failure */
|
2011-04-12 00:44:44 +00:00
|
|
|
gboolean _5views_dump_open(wtap_dumper *wdh, int *err)
|
2003-07-29 19:42:01 +00:00
|
|
|
{
|
2010-02-26 07:59:54 +00:00
|
|
|
_5views_dump_t *_5views;
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
/* We can't fill in all the fields in the file header, as we
|
|
|
|
haven't yet written any packets. As we'll have to rewrite
|
|
|
|
the header when we've written out all the packets, we just
|
|
|
|
skip over the header for now. */
|
2013-03-17 09:20:13 +00:00
|
|
|
if (wtap_dump_file_seek(wdh, sizeof(t_5VW_Capture_Header), SEEK_SET, err) == -1)
|
2003-07-29 19:42:01 +00:00
|
|
|
return FALSE;
|
|
|
|
|
|
|
|
/* This is a 5Views file */
|
|
|
|
wdh->subtype_write = _5views_dump;
|
|
|
|
wdh->subtype_close = _5views_dump_close;
|
2010-02-26 07:59:54 +00:00
|
|
|
_5views = (_5views_dump_t *)g_malloc(sizeof(_5views_dump_t));
|
|
|
|
wdh->priv = (void *)_5views;
|
|
|
|
_5views->nframes = 0;
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
/* Write a record for a packet to a dump file.
|
|
|
|
Returns TRUE on success, FALSE on failure. */
|
|
|
|
static gboolean _5views_dump(wtap_dumper *wdh,
|
|
|
|
const struct wtap_pkthdr *phdr,
|
2011-09-01 09:43:10 +00:00
|
|
|
const guint8 *pd, int *err)
|
2003-07-29 19:42:01 +00:00
|
|
|
{
|
2010-02-26 07:59:54 +00:00
|
|
|
_5views_dump_t *_5views = (_5views_dump_t *)wdh->priv;
|
2003-07-29 19:42:01 +00:00
|
|
|
static t_5VW_TimeStamped_Header HeaderFrame;
|
|
|
|
|
|
|
|
/* Frame Header */
|
|
|
|
/* constant fields */
|
2003-07-29 20:26:34 +00:00
|
|
|
HeaderFrame.Key = htolel(CST_5VW_RECORDS_HEADER_KEY);
|
|
|
|
HeaderFrame.HeaderSize = htoles(sizeof(t_5VW_TimeStamped_Header));
|
|
|
|
HeaderFrame.HeaderType = htoles(CST_5VW_TIMESTAMPED_HEADER_TYPE);
|
|
|
|
HeaderFrame.RecType = htolel(CST_5VW_CAPTURES_RECORD | CST_5VW_SYSTEM_RECORD);
|
|
|
|
HeaderFrame.RecSubType = htolel(CST_5VW_FRAME_RECORD);
|
|
|
|
HeaderFrame.RecNb = htolel(1);
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
/* record-dependant fields */
|
2005-08-24 21:31:56 +00:00
|
|
|
HeaderFrame.Utc = htolel(phdr->ts.secs);
|
|
|
|
HeaderFrame.NanoSecondes = htolel(phdr->ts.nsecs);
|
2003-07-29 20:26:34 +00:00
|
|
|
HeaderFrame.RecSize = htolel(phdr->len);
|
|
|
|
HeaderFrame.RecInfo = htolel(0);
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
/* write the record header */
|
2010-06-06 22:19:30 +00:00
|
|
|
if (!wtap_dump_file_write(wdh, &HeaderFrame,
|
|
|
|
sizeof(t_5VW_TimeStamped_Header), err))
|
2003-07-29 19:42:01 +00:00
|
|
|
return FALSE;
|
|
|
|
|
|
|
|
/* write the data */
|
2010-06-06 22:19:30 +00:00
|
|
|
if (!wtap_dump_file_write(wdh, pd, phdr->caplen, err))
|
2003-07-29 19:42:01 +00:00
|
|
|
return FALSE;
|
|
|
|
|
2010-02-26 07:59:54 +00:00
|
|
|
_5views->nframes ++;
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|
|
|
|
|
|
|
|
static gboolean _5views_dump_close(wtap_dumper *wdh, int *err)
|
|
|
|
{
|
2010-02-26 07:59:54 +00:00
|
|
|
_5views_dump_t *_5views = (_5views_dump_t *)wdh->priv;
|
2003-07-29 19:42:01 +00:00
|
|
|
t_5VW_Capture_Header file_hdr;
|
|
|
|
|
2013-03-17 09:20:13 +00:00
|
|
|
if (wtap_dump_file_seek(wdh, 0, SEEK_SET, err) == -1)
|
2003-07-29 19:42:01 +00:00
|
|
|
return FALSE;
|
|
|
|
|
|
|
|
/* fill in the Info_Header */
|
2003-07-29 20:26:34 +00:00
|
|
|
file_hdr.Info_Header.Signature = htolel(CST_5VW_INFO_HEADER_KEY);
|
|
|
|
file_hdr.Info_Header.Size = htolel(sizeof(t_5VW_Info_Header)); /* Total size of Header in bytes (included Signature) */
|
|
|
|
file_hdr.Info_Header.Version = htolel(CST_5VW_INFO_RECORD_VERSION); /* Identify version and so the format of this record */
|
|
|
|
file_hdr.Info_Header.DataSize = htolel(sizeof(t_5VW_Attributes_Header)
|
|
|
|
+ sizeof(guint32)
|
|
|
|
+ sizeof(t_5VW_Attributes_Header)
|
|
|
|
+ sizeof(guint32));
|
|
|
|
/* Total size of data included in the Info Record (except the header size) */
|
|
|
|
file_hdr.Info_Header.FileType = htolel(wtap_encap[wdh->encap]); /* Type of the file */
|
|
|
|
file_hdr.Info_Header.Reserved[0] = 0; /* Reserved for future use */
|
|
|
|
file_hdr.Info_Header.Reserved[1] = 0; /* Reserved for future use */
|
|
|
|
file_hdr.Info_Header.Reserved[2] = 0; /* Reserved for future use */
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
/* fill in the HeaderDateCreation */
|
2003-07-29 20:26:34 +00:00
|
|
|
file_hdr.HeaderDateCreation.Type = htolel(CST_5VW_IA_DATE_CREATION); /* Id of the attribute */
|
|
|
|
file_hdr.HeaderDateCreation.Size = htoles(sizeof(guint32)); /* Size of the data part of the attribute (not including header size) */
|
|
|
|
file_hdr.HeaderDateCreation.Nb = htoles(1); /* Number of elements */
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
/* fill in the Time field */
|
|
|
|
#ifdef _WIN32
|
|
|
|
_tzset();
|
|
|
|
#endif
|
2003-07-29 20:26:34 +00:00
|
|
|
file_hdr.Time = htolel(time(NULL));
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
/* fill in the Time field */
|
2003-07-29 20:26:34 +00:00
|
|
|
file_hdr.HeaderNbFrames.Type = htolel(CST_5VW_IA_CAP_INF_NB_TRAMES_STOCKEES); /* Id of the attribute */
|
|
|
|
file_hdr.HeaderNbFrames.Size = htoles(sizeof(guint32)); /* Size of the data part of the attribute (not including header size) */
|
|
|
|
file_hdr.HeaderNbFrames.Nb = htoles(1); /* Number of elements */
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
/* fill in the number of frames saved */
|
2010-02-26 07:59:54 +00:00
|
|
|
file_hdr.TramesStockeesInFile = htolel(_5views->nframes);
|
2003-07-29 19:42:01 +00:00
|
|
|
|
|
|
|
/* Write the file header. */
|
2010-06-06 22:19:30 +00:00
|
|
|
if (!wtap_dump_file_write(wdh, &file_hdr, sizeof(t_5VW_Capture_Header),
|
|
|
|
err))
|
2003-07-29 19:42:01 +00:00
|
|
|
return FALSE;
|
|
|
|
|
|
|
|
return TRUE;
|
|
|
|
}
|