3070b797d5
when the new "Rotate capture file every n second(s)" checkbox or the -b <# of file>[:<duration>] argument are used, [t]ethereal will skip to the next ring buffer file if the specified duration has elapsed (even if the specified capture size is not reached). This is useful when you want to have separate capture files per hour or day for instance. I let the autostop filesize parameter mandatory (i.e. the "rotate capture file after n kilobytes") but this could be no longer strictly necessary when that new feature is used ... Another point: it might be interesting to really truncate the file at the switch and not the closure ... According to user comments and my own real case tests, I might plan to enhance this point and others (still ring buffer related) in the future. svn path=/trunk/; revision=7678
78 lines
2.7 KiB
C
78 lines
2.7 KiB
C
/* capture.h
|
|
* Definitions for packet capture windows
|
|
*
|
|
* $Id: capture.h,v 1.35 2003/05/15 13:33:53 deniel Exp $
|
|
*
|
|
* Ethereal - Network traffic analyzer
|
|
* By Gerald Combs <gerald@zing.org>
|
|
* Copyright 1998 Gerald Combs
|
|
*
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*/
|
|
|
|
#ifndef __CAPTURE_H__
|
|
#define __CAPTURE_H__
|
|
|
|
#ifdef HAVE_LIBPCAP
|
|
|
|
/* Name we give to the child process when doing a "-S" capture. */
|
|
#define CHILD_NAME "ethereal-capture"
|
|
|
|
typedef struct {
|
|
gboolean has_snaplen; /* TRUE if maximum capture packet
|
|
length is specified */
|
|
int snaplen; /* Maximum captured packet length */
|
|
int promisc_mode; /* Capture in promiscuous mode */
|
|
int sync_mode; /* Fork a child to do the capture,
|
|
and sync between them */
|
|
gboolean has_autostop_count; /* TRUE if maximum packet count is
|
|
specified */
|
|
int autostop_count; /* Maximum packet count */
|
|
gboolean has_autostop_duration; /* TRUE if maximum capture duration
|
|
is specified */
|
|
gint32 autostop_duration; /* Maximum capture duration */
|
|
gboolean has_autostop_filesize; /* TRUE if maximum capture file size
|
|
is specified */
|
|
gint32 autostop_filesize; /* Maximum capture file size */
|
|
gboolean ringbuffer_on; /* TRUE if ring buffer in use */
|
|
guint32 ringbuffer_num_files; /* Number of ring buffer files */
|
|
gboolean has_ring_duration; /* TRUE if ring duration specified */
|
|
gint32 ringbuffer_duration; /* Switch file after n seconds */
|
|
} capture_options;
|
|
|
|
extern capture_options capture_opts;
|
|
|
|
extern int quit_after_cap; /* Makes a "capture only mode". Implies -k */
|
|
extern gboolean capture_child; /* if this is the child for "-S" */
|
|
|
|
/* Open a specified file, or create a temporary file, and start a capture
|
|
to the file in question. */
|
|
void do_capture(const char *save_file);
|
|
|
|
/* Do the low-level work of a capture. */
|
|
int capture(gboolean *stats_known, struct pcap_stat *stats);
|
|
|
|
/* Stop a capture from a menu item. */
|
|
void capture_stop(void);
|
|
|
|
/* Terminate the capture child cleanly when exiting. */
|
|
void kill_capture_child(void);
|
|
|
|
#endif /* HAVE_LIBPCAP */
|
|
|
|
#define EMPTY_FILTER ""
|
|
#endif /* capture.h */
|