![Guy Harris](/assets/img/avatar_default.png)
from the frame table - Network Monitor 2.x, at least, doesn't always write frame N+1 right after frame N. To do that, we need to mallocate a big array to hold the frame table, and free it when we close the capture file; this requires that we have capture-file-type-specific close routines as well as capture-file-type-specific read routines - we let it the pointer to that routine be null if it's not needed. Given that, we might as well get rid of the switch statement in "wtap_close()", in favor of using capture-file-type-specific close routines, as per the comment before that switch statement. svn path=/trunk/; revision=1740
222 lines
7.2 KiB
C
222 lines
7.2 KiB
C
/* ascend.c
|
|
*
|
|
* $Id: ascend.c,v 1.13 2000/03/22 07:06:56 guy Exp $
|
|
*
|
|
* Wiretap Library
|
|
* Copyright (c) 1998 by Gilbert Ramirez <gram@xiexie.org>
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*
|
|
*/
|
|
#ifdef HAVE_CONFIG_H
|
|
#include "config.h"
|
|
#endif
|
|
#include "wtap.h"
|
|
#include "buffer.h"
|
|
#include "ascend.h"
|
|
#include "ascend-int.h"
|
|
#include "file_wrappers.h"
|
|
|
|
#include <sys/stat.h>
|
|
|
|
#ifdef HAVE_UNISTD_H
|
|
#include <unistd.h>
|
|
#endif
|
|
|
|
#include <ctype.h>
|
|
#include <string.h>
|
|
|
|
/* This module reads the output of the 'wandsession', 'wannext',
|
|
'wandisplay', and similar commands available on Lucent/Ascend access
|
|
equipment. The output is text, with a header line followed by the
|
|
packet data. Usage instructions for the commands can be found by
|
|
searching http://aos.ascend.com . Ascend likes to move their pages
|
|
around quite a bit, otherwise I'd put a more specific URL here.
|
|
|
|
Example 'wandsess' output data:
|
|
|
|
RECV-iguana:241:(task: B02614C0, time: 1975432.85) 49 octets @ 8003BD94
|
|
[0000]: FF 03 00 3D C0 06 CA 22 2F 45 00 00 28 6A 3B 40
|
|
[0010]: 00 3F 03 D7 37 CE 41 62 12 CF 00 FB 08 20 27 00
|
|
[0020]: 50 E4 08 DD D7 7C 4C 71 92 50 10 7D 78 67 C8 00
|
|
[0030]: 00
|
|
XMIT-iguana:241:(task: B04E12C0, time: 1975432.85) 53 octets @ 8009EB16
|
|
[0000]: FF 03 00 3D C0 09 1E 31 21 45 00 00 2C 2D BD 40
|
|
[0010]: 00 7A 06 D8 B1 CF 00 FB 08 CE 41 62 12 00 50 20
|
|
[0020]: 29 7C 4C 71 9C 9A 6A 93 A4 60 12 22 38 3F 10 00
|
|
[0030]: 00 02 04 05 B4
|
|
|
|
Note that a maximum of eight rows will be displayed (for a maximum of
|
|
128 bytes), no matter what the octet count is.
|
|
|
|
When reading a packet, the module prepends an ascend_pkt_hdr to the
|
|
data.
|
|
|
|
*/
|
|
|
|
/* How far into the file we should look for packet headers */
|
|
#define ASCEND_MAX_SEEK 100000
|
|
|
|
/* XXX Should we replace this with a more generalized array? */
|
|
/* Magic numbers for Ascend wandsession/wanopening/ether-display data */
|
|
static const char ascend_xmagic[] = { 'X', 'M', 'I', 'T', '-' };
|
|
static const char ascend_rmagic[] = { 'R', 'E', 'C', 'V', '-' };
|
|
static const char ascend_w1magic[] = { 'D', 'a', 't', 'e', ':', };
|
|
static const char ascend_w2magic[] = { 'W', 'D', '_', 'D', 'I', 'A', 'L', 'O', 'U', 'T', '_', 'D', 'I', 'S', 'P', ':' };
|
|
|
|
#define ASCEND_X_SIZE (sizeof ascend_xmagic / sizeof ascend_xmagic[0])
|
|
#define ASCEND_R_SIZE (sizeof ascend_rmagic / sizeof ascend_rmagic[0])
|
|
#define ASCEND_W1_SIZE (sizeof ascend_w1magic / sizeof ascend_w1magic[0])
|
|
#define ASCEND_W2_SIZE (sizeof ascend_w2magic / sizeof ascend_w2magic[0])
|
|
|
|
static int ascend_read(wtap *wth, int *err);
|
|
static void ascend_close(wtap *wth);
|
|
|
|
/* Seeks to the beginning of the next packet, and returns the
|
|
byte offset. Returns -1 on failure. A valid offset is 0; since
|
|
that causes problems with wtap_loop, offsets are incremented by one. */
|
|
/* XXX - Handle I/O errors. */
|
|
static int ascend_seek(wtap *wth, int max_seek)
|
|
{
|
|
int byte, bytes_read = 0, date_off = 0;
|
|
int x_level = 0, r_level = 0, w1_level = 0, w2_level = 0;
|
|
|
|
while (((byte = file_getc(wth->fh)) != EOF) && bytes_read < max_seek) {
|
|
if (byte == ascend_xmagic[x_level]) {
|
|
x_level++;
|
|
if (x_level >= ASCEND_X_SIZE) {
|
|
file_seek(wth->fh, -(ASCEND_X_SIZE), SEEK_CUR);
|
|
return file_tell(wth->fh) + 1;
|
|
}
|
|
} else {
|
|
x_level = 0;
|
|
}
|
|
if (byte == ascend_rmagic[r_level]) {
|
|
r_level++;
|
|
if (r_level >= ASCEND_R_SIZE) {
|
|
file_seek(wth->fh, -(ASCEND_R_SIZE), SEEK_CUR);
|
|
return file_tell(wth->fh) + 1;
|
|
}
|
|
} else {
|
|
r_level = 0;
|
|
}
|
|
if (byte == ascend_w1magic[w1_level]) {
|
|
w1_level++;
|
|
if (w1_level >= ASCEND_W1_SIZE) {
|
|
date_off = file_tell(wth->fh) - ASCEND_W1_SIZE + 1;
|
|
}
|
|
} else {
|
|
w1_level = 0;
|
|
}
|
|
if (byte == ascend_w2magic[w2_level]) {
|
|
w2_level++;
|
|
if (w2_level >= ASCEND_W2_SIZE && date_off) {
|
|
file_seek(wth->fh, date_off - 1, SEEK_SET);
|
|
return date_off;
|
|
}
|
|
} else {
|
|
w2_level = 0;
|
|
}
|
|
bytes_read++;
|
|
}
|
|
return -1;
|
|
}
|
|
|
|
/* XXX - return -1 on I/O error and actually do something with 'err'. */
|
|
int ascend_open(wtap *wth, int *err)
|
|
{
|
|
int offset;
|
|
|
|
file_seek(wth->fh, 0, SEEK_SET);
|
|
offset = ascend_seek(wth, ASCEND_MAX_SEEK);
|
|
if (offset < 1) {
|
|
return 0;
|
|
}
|
|
|
|
wth->data_offset = offset;
|
|
wth->file_encap = WTAP_ENCAP_ASCEND;
|
|
wth->file_type = WTAP_FILE_ASCEND;
|
|
wth->snapshot_length = ASCEND_MAX_PKT_LEN;
|
|
wth->subtype_read = ascend_read;
|
|
wth->subtype_close = ascend_close;
|
|
wth->capture.ascend = g_malloc(sizeof(ascend_t));
|
|
|
|
/* MAXen and Pipelines report the time since reboot. In order to keep
|
|
from reporting packet times near the epoch, we subtract the first
|
|
packet's timestamp from the capture file's ctime, which gives us an
|
|
offset that we can apply to each packet.
|
|
|
|
NOTE: Since we can't fstat a compressed file, assume that the first
|
|
packet time is 0 and other packets are relative to this.
|
|
*/
|
|
wth->capture.ascend->inittime = 0;
|
|
wth->capture.ascend->adjusted = 0;
|
|
wth->capture.ascend->seek_add = -1;
|
|
|
|
init_parse_ascend();
|
|
|
|
return 1;
|
|
}
|
|
|
|
/* Read the next packet; called from wtap_loop(). */
|
|
static int ascend_read(wtap *wth, int *err)
|
|
{
|
|
int offset;
|
|
guint8 *buf = buffer_start_ptr(wth->frame_buffer);
|
|
ascend_pkthdr header;
|
|
|
|
/* (f)lex reads large chunks of the file into memory, so file_tell() doesn't
|
|
give us the correct location of the packet. Instead, we seek to the
|
|
location of the last packet and try to find the next packet. In
|
|
addition, we fool around with the seek offset in case a valid packet
|
|
starts at the beginning of the file. */
|
|
file_seek(wth->fh, wth->data_offset + wth->capture.ascend->seek_add, SEEK_SET);
|
|
wth->capture.ascend->seek_add = 0;
|
|
offset = ascend_seek(wth, ASCEND_MAX_SEEK);
|
|
if (offset < 1) {
|
|
return 0;
|
|
}
|
|
if (! parse_ascend(wth->fh, buf, &wth->phdr.pseudo_header.ascend, &header, 0)) {
|
|
*err = WTAP_ERR_BAD_RECORD;
|
|
return -1;
|
|
}
|
|
|
|
buffer_assure_space(wth->frame_buffer, wth->snapshot_length);
|
|
|
|
if (! wth->capture.ascend->adjusted) {
|
|
wth->capture.ascend->adjusted = 1;
|
|
wth->capture.ascend->inittime = -header.secs;
|
|
}
|
|
wth->phdr.ts.tv_sec = header.secs + wth->capture.ascend->inittime;
|
|
wth->phdr.ts.tv_usec = header.usecs;
|
|
wth->phdr.caplen = header.caplen;
|
|
wth->phdr.len = header.len;
|
|
wth->phdr.pkt_encap = wth->file_encap;
|
|
wth->data_offset = offset;
|
|
|
|
return offset;
|
|
}
|
|
|
|
int ascend_seek_read (FILE *fh, int seek_off, guint8 *pd, int len)
|
|
{
|
|
file_seek(fh, seek_off - 1, SEEK_SET);
|
|
return parse_ascend(fh, pd, NULL, NULL, len);
|
|
}
|
|
|
|
static void ascend_close(wtap *wth)
|
|
{
|
|
g_free(wth->capture.ascend);
|
|
}
|