2 * netsniff-ng - the packet sniffing beast
3 * By Daniel Borkmann <daniel@netsniff-ng.org>
4 * Copyright 2009, 2010, 2011 Daniel Borkmann.
5 * Subject to the GPL, version 2.
20 static int pcap_rw_pull_file_header(int fd
)
23 struct pcap_filehdr hdr
;
25 ret
= read(fd
, &hdr
, sizeof(hdr
));
26 if (unlikely(ret
!= sizeof(hdr
)))
29 pcap_validate_header(&hdr
);
34 static int pcap_rw_push_file_header(int fd
)
37 struct pcap_filehdr hdr
;
39 memset(&hdr
, 0, sizeof(hdr
));
40 pcap_prepare_header(&hdr
, LINKTYPE_EN10MB
, 0,
41 PCAP_DEFAULT_SNAPSHOT_LEN
);
43 ret
= write_or_die(fd
, &hdr
, sizeof(hdr
));
44 if (unlikely(ret
!= sizeof(hdr
))) {
45 whine("Failed to write pkt file header!\n");
52 static ssize_t
pcap_rw_write_pcap_pkt(int fd
, struct pcap_pkthdr
*hdr
,
53 uint8_t *packet
, size_t len
)
55 ssize_t ret
= write_or_die(fd
, hdr
, sizeof(*hdr
));
56 if (unlikely(ret
!= sizeof(*hdr
))) {
57 whine("Failed to write pkt header!\n");
61 if (unlikely(hdr
->len
!= len
))
64 ret
= write_or_die(fd
, packet
, hdr
->len
);
65 if (unlikely(ret
!= hdr
->len
)) {
66 whine("Failed to write pkt payload!\n");
70 return sizeof(*hdr
) + hdr
->len
;
73 static ssize_t
pcap_rw_read_pcap_pkt(int fd
, struct pcap_pkthdr
*hdr
,
74 uint8_t *packet
, size_t len
)
76 ssize_t ret
= read(fd
, hdr
, sizeof(*hdr
));
77 if (unlikely(ret
!= sizeof(*hdr
)))
80 if (unlikely(hdr
->caplen
== 0 || hdr
->caplen
> len
))
81 return -EINVAL
; /* Bogus packet */
83 ret
= read(fd
, packet
, hdr
->caplen
);
84 if (unlikely(ret
!= hdr
->caplen
))
87 return sizeof(*hdr
) + hdr
->caplen
;
90 static void pcap_rw_fsync_pcap(int fd
)
95 static int pcap_rw_prepare_writing_pcap(int fd
)
101 static int pcap_rw_prepare_reading_pcap(int fd
)
107 struct pcap_file_ops pcap_rw_ops __read_mostly
= {
108 .name
= "read-write",
109 .pull_file_header
= pcap_rw_pull_file_header
,
110 .push_file_header
= pcap_rw_push_file_header
,
111 .write_pcap_pkt
= pcap_rw_write_pcap_pkt
,
112 .read_pcap_pkt
= pcap_rw_read_pcap_pkt
,
113 .fsync_pcap
= pcap_rw_fsync_pcap
,
114 .prepare_writing_pcap
= pcap_rw_prepare_writing_pcap
,
115 .prepare_reading_pcap
= pcap_rw_prepare_reading_pcap
,
118 int init_pcap_rw(int jumbo_support
)
120 return pcap_ops_group_register(&pcap_rw_ops
, PCAP_OPS_RW
);
123 void cleanup_pcap_rw(void)
125 pcap_ops_group_unregister(PCAP_OPS_RW
);