1 /* Reorder the frames from an input dump file, and write to output dump file.
2 * Martin Mathieson and Jakub Jawadzki
4 * Wireshark - Network traffic analyzer
5 * By Gerald Combs <gerald@wireshark.org>
6 * Copyright 1998 Gerald Combs
8 * SPDX-License-Identifier: GPL-2.0-or-later
12 #define WS_LOG_DOMAIN LOG_DOMAIN_MAIN
19 #include <ws_exit_codes.h>
20 #include <wsutil/ws_getopt.h>
22 #include <wiretap/wtap.h>
24 #include <wsutil/cmdarg_err.h>
25 #include <wsutil/filesystem.h>
26 #include <wsutil/file_util.h>
27 #include <wsutil/privileges.h>
29 #include <wsutil/version_info.h>
30 #include <wiretap/wtap_opttypes.h>
33 #include <wsutil/plugins.h>
36 #include <wsutil/wslog.h>
38 #include "ui/failure_message.h"
40 /* Additional exit codes */
41 #define OUTPUT_FILE_ERROR 1
43 /* Show command-line usage */
45 print_usage(FILE *output
)
47 fprintf(output
, "\n");
48 fprintf(output
, "Usage: reordercap [options] <infile> <outfile>\n");
49 fprintf(output
, "\n");
50 fprintf(output
, "Options:\n");
51 fprintf(output
, " -n don't write to output file if the input file is ordered.\n");
52 fprintf(output
, " -h, --help display this help and exit.\n");
53 fprintf(output
, " -v, --version print version information and exit.\n");
56 /* Remember where this frame was in the file */
57 typedef struct FrameRecord_t
{
65 /**************************************************/
68 /* Enable this symbol to see debug output */
69 /* #define REORDER_DEBUG */
72 #define DEBUG_PRINT printf
74 #define DEBUG_PRINT(...)
76 /**************************************************/
80 frame_write(FrameRecord_t
*frame
, wtap
*wth
, wtap_dumper
*pdh
,
81 wtap_rec
*rec
, Buffer
*buf
, const char *infile
,
87 DEBUG_PRINT("\nDumping frame (offset=%" PRIu64
")\n",
91 /* Re-read the frame from the stored location */
92 if (!wtap_seek_read(wth
, frame
->offset
, rec
, buf
, &err
, &err_info
)) {
94 /* Print a message noting that the read failed somewhere along the line. */
96 "reordercap: An error occurred while re-reading \"%s\".\n",
98 cfile_read_failure_message(infile
, err
, err_info
);
103 /* Copy, and set length and timestamp from item. */
104 /* TODO: remove when wtap_seek_read() fills in rec,
105 including time stamps, for all file types */
106 rec
->ts
= frame
->frame_time
;
108 /* Dump frame to outfile */
109 if (!wtap_dump(pdh
, rec
, ws_buffer_start_ptr(buf
), &err
, &err_info
)) {
110 cfile_write_failure_message(infile
, outfile
, err
, err_info
, frame
->num
,
111 wtap_file_type_subtype(wth
));
117 /* Comparing timestamps between 2 frames.
118 negative if (t1 < t2)
120 positive if (t1 > t2)
123 frames_compare(const void *a
, const void *b
)
125 const FrameRecord_t
*frame1
= *(const FrameRecord_t
*const *) a
;
126 const FrameRecord_t
*frame2
= *(const FrameRecord_t
*const *) b
;
128 const nstime_t
*time1
= &frame1
->frame_time
;
129 const nstime_t
*time2
= &frame2
->frame_time
;
131 return nstime_cmp(time1
, time2
);
135 * General errors and warnings are reported with an console message
139 reordercap_cmdarg_err(const char *msg_format
, va_list ap
)
141 fprintf(stderr
, "reordercap: ");
142 vfprintf(stderr
, msg_format
, ap
);
143 fprintf(stderr
, "\n");
147 * Report additional information for an error in command-line arguments.
150 reordercap_cmdarg_err_cont(const char *msg_format
, va_list ap
)
152 vfprintf(stderr
, msg_format
, ap
);
153 fprintf(stderr
, "\n");
156 /********************************************************************/
158 /********************************************************************/
160 main(int argc
, char *argv
[])
162 char *configuration_init_error
;
164 wtap_dumper
*pdh
= NULL
;
170 unsigned wrong_order_count
= 0;
171 bool write_output_regardless
= true;
173 wtap_dump_params params
;
174 int ret
= EXIT_SUCCESS
;
177 FrameRecord_t
*prevFrame
= NULL
;
180 static const struct ws_option long_options
[] = {
181 {"help", ws_no_argument
, NULL
, 'h'},
182 {"version", ws_no_argument
, NULL
, 'v'},
189 cmdarg_err_init(reordercap_cmdarg_err
, reordercap_cmdarg_err_cont
);
191 /* Initialize log handler early so we can have proper logging during startup. */
192 ws_log_init("reordercap", vcmdarg_err
);
194 /* Early logging command-line initialization. */
195 ws_log_parse_args(&argc
, argv
, vcmdarg_err
, WS_EXIT_INVALID_OPTION
);
197 ws_noisy("Finished log init and parsing command line log arguments");
199 /* Initialize the version information. */
200 ws_init_version_info("Reordercap", NULL
, NULL
);
203 * Get credential information for later use.
205 init_process_policies();
208 * Attempt to get the pathname of the directory containing the
211 configuration_init_error
= configuration_init(argv
[0], NULL
);
212 if (configuration_init_error
!= NULL
) {
214 "reordercap: Can't get pathname of directory containing the reordercap program: %s.\n",
215 configuration_init_error
);
216 g_free(configuration_init_error
);
219 init_report_failure_message("reordercap");
223 /* Process the options first */
224 while ((opt
= ws_getopt_long(argc
, argv
, "hnv", long_options
, NULL
)) != -1) {
227 write_output_regardless
= false;
230 show_help_header("Reorder timestamps of input file frames into output file.");
238 ret
= WS_EXIT_INVALID_OPTION
;
243 /* Remaining args are file names */
244 file_count
= argc
- ws_optind
;
245 if (file_count
== 2) {
246 infile
= argv
[ws_optind
];
247 outfile
= argv
[ws_optind
+1];
251 ret
= WS_EXIT_INVALID_OPTION
;
256 /* TODO: if reordercap is ever changed to give the user a choice of which
257 open_routine reader to use, then the following needs to change. */
258 wth
= wtap_open_offline(infile
, WTAP_TYPE_AUTO
, &err
, &err_info
, true);
260 cfile_open_failure_message(infile
, err
, err_info
);
261 ret
= WS_EXIT_OPEN_ERROR
;
264 DEBUG_PRINT("file_type_subtype is %d\n", wtap_file_type_subtype(wth
));
266 /* Allocate the array of frame pointers. */
267 frames
= g_ptr_array_new();
269 /* Read each frame from infile */
271 ws_buffer_init(&buf
, 1514);
272 while (wtap_read(wth
, &rec
, &buf
, &err
, &err_info
, &data_offset
)) {
273 FrameRecord_t
*newFrameRecord
;
275 newFrameRecord
= g_slice_new(FrameRecord_t
);
276 newFrameRecord
->num
= frames
->len
+ 1;
277 newFrameRecord
->offset
= data_offset
;
278 if (rec
.presence_flags
& WTAP_HAS_TS
) {
279 newFrameRecord
->frame_time
= rec
.ts
;
281 nstime_set_unset(&newFrameRecord
->frame_time
);
284 if (prevFrame
&& frames_compare(&newFrameRecord
, &prevFrame
) < 0) {
288 g_ptr_array_add(frames
, newFrameRecord
);
289 prevFrame
= newFrameRecord
;
290 wtap_rec_reset(&rec
);
292 wtap_rec_cleanup(&rec
);
293 ws_buffer_free(&buf
);
295 /* Print a message noting that the read failed somewhere along the line. */
296 cfile_read_failure_message(infile
, err
, err_info
);
299 printf("%u frames, %u out of order\n", frames
->len
, wrong_order_count
);
301 wtap_dump_params_init(¶ms
, wth
);
303 /* Sort the frames */
304 /* XXX - Does this handle multiple SHBs correctly? */
305 if (wrong_order_count
> 0) {
306 g_ptr_array_sort(frames
, frames_compare
);
310 /* Avoid writing if already sorted and configured to */
311 if (write_output_regardless
|| (wrong_order_count
> 0)) {
312 /* Open outfile (same filetype/encap as input file) */
313 if (strcmp(outfile
, "-") == 0) {
314 pdh
= wtap_dump_open_stdout(wtap_file_type_subtype(wth
),
315 WTAP_UNCOMPRESSED
, ¶ms
, &err
, &err_info
);
317 pdh
= wtap_dump_open(outfile
, wtap_file_type_subtype(wth
),
318 WTAP_UNCOMPRESSED
, ¶ms
, &err
, &err_info
);
320 g_free(params
.idb_inf
);
321 params
.idb_inf
= NULL
;
324 cfile_dump_open_failure_message(outfile
, err
, err_info
,
325 wtap_file_type_subtype(wth
));
326 wtap_dump_params_cleanup(¶ms
);
327 ret
= OUTPUT_FILE_ERROR
;
332 /* Write out each sorted frame in turn */
334 ws_buffer_init(&buf
, 1514);
335 for (i
= 0; i
< frames
->len
; i
++) {
336 FrameRecord_t
*frame
= (FrameRecord_t
*)frames
->pdata
[i
];
338 frame_write(frame
, wth
, pdh
, &rec
, &buf
, infile
, outfile
);
340 g_slice_free(FrameRecord_t
, frame
);
343 wtap_rec_cleanup(&rec
);
344 ws_buffer_free(&buf
);
349 if (!wtap_dump_close(pdh
, NULL
, &err
, &err_info
)) {
350 cfile_close_failure_message(outfile
, err
, err_info
);
351 wtap_dump_params_cleanup(¶ms
);
352 ret
= OUTPUT_FILE_ERROR
;
356 printf("Not writing output file because input file is already in order.\n");
358 /* Free frame memory */
359 for (i
= 0; i
< frames
->len
; i
++) {
360 FrameRecord_t
*frame
= (FrameRecord_t
*)frames
->pdata
[i
];
362 g_slice_free(FrameRecord_t
, frame
);
367 /* Free the whole array */
368 g_ptr_array_free(frames
, TRUE
);
370 wtap_dump_params_cleanup(¶ms
);
372 /* Finally, close infile and release resources. */
382 * Editor modelines - https://www.wireshark.org/tools/modelines.html
387 * indent-tabs-mode: nil
390 * vi: set shiftwidth=4 tabstop=8 expandtab:
391 * :indentSize=4:tabSize=8:noTabs=true: