1berry/wireshark
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
wireshark/ui/capture_opts.h

424 lines
17 KiB
C
Raw Permalink Normal View History

split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
/* capture_opts.h
* Capture options (all parameters needed to do the actual capture)
*
name change svn path=/trunk/; revision=18197
2006-05-21 05:12:17 +00:00
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
* Copyright 1998 Gerald Combs
*
replace SPDX identifier GPL-2.0+ with GPL-2.0-or-later. The first is deprecated, as per https://spdx.org/licenses/. Change-Id: I8e21e1d32d09b8b94b93a2dc9fbdde5ffeba6bed Reviewed-on: https://code.wireshark.org/review/25661 Petri-Dish: Anders Broman <a.broman58@gmail.com> Petri-Dish: Dario Lombardo <lomato@gmail.com> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-02-07 12:26:45 +01:00
* SPDX-License-Identifier: GPL-2.0-or-later
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
*/
/** @file
One more step in privilege separation. Add a capture_interface_list(), which works similar to get_interface_list() except that it forks dumpcap instead of calling the pcap routines directly. Use it in the GUI. Add a "-I" flag to dumpcap, which prints out verbose interface information. Tested under Windows and Linux. svn path=/trunk/; revision=22071
2007-06-11 03:58:58 +00:00
*
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
* Capture options (all parameters needed to do the actual capture)
*
*/
#ifndef __CAPTURE_OPTS_H__
#define __CAPTURE_OPTS_H__
Eliminate some unneeded header checks. sys/stat.h and sys/types.h date back to V7 UNIX, so they should be present on all UN*Xes, and we're assuming they're available on Windows, so, unless and until we ever support platforms that are neither UN*Xes nor Windows, we don't need to check for them. Remove the CMake checks for them, remove the HAVE_ values from cmakeconfig.h.in, and remove all tests for the HAVE_ values. Change-Id: I90bb2aab37958553673b03b52f4931d3b304b9d0 Reviewed-on: https://code.wireshark.org/review/27603 Petri-Dish: Guy Harris <guy@alum.mit.edu> Tested-by: Petri Dish Buildbot Reviewed-by: Guy Harris <guy@alum.mit.edu>
2018-05-16 12:51:45 -07:00
#include <sys/types.h> /* for gid_t */
Add gtk/capture_globals.h, to declare global_capture_opts, so files that don't need global_capture_opts don't need to have it declared and thus don't need capture_options defined. Include gtk/capture_globals in the files in question. Change some more capture_opts references to refer to global_capture_opts. Change some global_capture_opts references in routines with a capture_opts argument to refer to capture_opts. The structure type is capture_options, not capture_opts; fix some references. Include <sys/types.h>, if it's present, in capture_opts.h, so we get gid_t defined. Clean up indentation. svn path=/trunk/; revision=25574
2008-06-24 03:38:15 +00:00
Merge the caputils/ and capchild/ directories The distinction between the different kinds of capture utility may not warrant a special subfolfer for each, and sometimes the distinction is not be clear or some functions could stradle multiple "categories" (like capture_ifinfo.[ch]). Simplify by having only a generic 'capture' subfolder. The separate CMake libraries are kept as a way to reuse object code efficiently.
2021-03-24 22:09:19 +00:00
#include <capture/capture_ifinfo.h>
Refactor our logging and extend the wslog API Experience has shown that: 1. The current logging methods are not very reliable or practical. A logging bitmask makes little sense as the user-facing interface (who would want debug but not crtical messages for example?); it's computer-friendly and user-unfriendly. More importantly the console log level preference is initialized too late in the startup process to be used for the logging subsystem and that fact raises a number of annoying and hard-to-fix usability issues. 2. Coding around G_MESSAGES_DEBUG to comply with our log level mask and not clobber the user's settings or not create unexpected log misses is unworkable and generally follows the principle of most surprise. The fact that G_MESSAGES_DEBUG="all" can leak to other programs using GLib is also annoying. 3. The non-structured GLib logging API is very opinionated and lacks configurability beyond replacing the log handler. 4. Windows GUI has some special code to attach to a console, but it would be nice to abstract away the rest under a single interface. 5. Using this logger seems to be noticeably faster. Deprecate the console log level preference and extend our API to implement a log handler in wsutil/wslog.h to provide easy-to-use, flexible and dependable logging during all execution phases. Log levels have a hierarchy, from most verbose to least verbose (debug to error). When a given level is set everything above that is also enabled. The log level can be set with an environment variable or a command line option (parsed as soon as possible but still later than the environment). The default log level is "message". Dissector logging is not included because it is not clear what log domain they should use. An explosion to thousands of domains is not desirable and putting everything in a single domain is probably too coarse and noisy. For now I think it makes sense to let them do their own thing using g_log_default_handler() and continue using the G_MESSAGES_DEBUG mechanism with specific domains for each individual dissector. In the future a mechanism may be added to selectively enable these domains at runtime while trying to avoid the problems introduced by G_MESSAGES_DEBUG.
2021-06-08 02:46:52 +01:00
#include <wsutil/wslog.h>
wsutil: Make filter lists dynamic and on-demand Do not read the capture filter list unless needed. Do not use a static list because the capture filter list can change during program execution and we want to be able to read multiple copies whenever. Improve the public API function names.
2023-11-07 19:09:01 +00:00
#include <wsutil/filter_files.h>
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
extcap: Create unique pipe names for each interface On Windows the pipe names does not get random characters appended. Add the interface name and pipe type to make it unique. This partly fixes the issue with capturing from multiple extcap interfaces on Windows. Ping-Bug: 13653 Ping-Bug: 13833 Change-Id: I4290b37cf789bf77608993682a803aca29513d28 Reviewed-on: https://code.wireshark.org/review/23158 Petri-Dish: Stig Bjørlykke <stig@bjorlykke.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-08-19 23:39:21 +02:00
#ifdef _WIN32
#include <windows.h>
#endif
Add 'extern "C"' wrappers and #include guards to various header files. svn path=/trunk/; revision=40321
2011-12-29 00:08:47 +00:00
#ifdef __cplusplus
extern "C" {
#endif /* __cplusplus */
Add --help and --version long options. Also, make the convention for long-only options be that their case-statement values start at 128, so they avoid colliding with any ASCII code points, including control characters. Make the tables of long options "static const" while we're at it, and get rid of unnecessary casts. Change-Id: I55702a85e9bc078b1cd0f2803ebb68a710405bab Reviewed-on: https://code.wireshark.org/review/2491 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 12:18:48 -07:00
/*
* Long options.
* We do not currently have long options corresponding to all short
* options; we should probably pick appropriate option names for them.
*
* NOTE:
* for tshark, we're using a leading - in the optstring to prevent getopt()
* from permuting the argv[] entries, in this case, unknown argv[] entries
* will be returned as parameters to a dummy-option 1.
* In short: we must not use 1 here, which is another reason to use
* values outside the range of ASCII graphic characters.
*/
Clean up handling of --capture-comment. Don't store the comments in a capture_options structure, because that's available only if we're being built with capture support, and --capture-comment can be used in TShark when reading a capture file and writing another capture file, with no live capture taking place. This means we don't handle that option in capture_opts_add_opt(); handle it in the programs that support it. Support writing multiple comments in dumpcap when capturing. These changes also fix builds without pcap, and makes --capture-comment work in Wireshark when a capture is started from the command line with -k. Update the help messages to indicate that --capture-comment adds a capture comment, it doesn't change any comment (much less "the" comment, as there isn't necessarily a single comment). Update the man pages: - not to presume that only pcapng files support file comments (even if that's true now, it might not be true in the future); - to note that multiple instances of --capture-comment are supported, and that multiple comments will be written, whether capturing or reading one file and writing another; - clarify that Wireshark doesn't *discard* SHB comments other than the first one, even though it only displays the first one;
2021-07-14 22:16:30 -07:00
#define LONGOPT_LIST_TSTAMP_TYPES LONGOPT_BASE_CAPTURE+1
#define LONGOPT_SET_TSTAMP_TYPE LONGOPT_BASE_CAPTURE+2
#define LONGOPT_COMPRESS_TYPE LONGOPT_BASE_CAPTURE+3
Specify directory for temporary captures
2022-02-09 14:32:28 +00:00
#define LONGOPT_CAPTURE_TMPDIR LONGOPT_BASE_CAPTURE+4
capture: Set update interval in capture opts, default to 100ms Reduce the default update interval for dumpcap to notify its parent of new packets (or to check if we've met file duration, etc.) from 500 ms to 100 ms, and put in the capture options. This makes the GUI appear to update more in real time rather than in visible batches of packets. This also reduces the amount of ring buffer space needed in cases where we're doing dissection, and dissection is able to keep up, but the files can be deleted before tshark gets to them because of the notification lag. (See #1650.)
2023-03-08 22:15:21 -05:00
#define LONGOPT_UPDATE_INTERVAL LONGOPT_BASE_CAPTURE+5
add --capture-comment to tshark make sure that getopt() does not permute tshark's argv[] array svn path=/trunk/; revision=51089
2013-08-01 20:57:47 +00:00
Add some long options for capture short options. The names match tcpdump trunk's names for the corresponding options. Also have capture_opts.h provide a #define for the part of the short option string that corresponds to the capture short options that all our programs that take capture short options take (those are largely the ones we have in common with tcpdump). Change-Id: Ia209425959c801725850b56a7d63441ee99b5001 Reviewed-on: https://code.wireshark.org/review/2492 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 13:59:45 -07:00
/*
Also define LONGOPT_CAPTURE_COMMON as nothing if we don't have pcap. While we're at it, simplify the #ifdefs and #defines in capture_opts.h - don't do the same tests twice. Change-Id: I2079167f31789470ef77120054d769d5914745e3 Reviewed-on: https://code.wireshark.org/review/2496 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 14:38:39 -07:00
* Options for capturing common to all capturing programs.
Add some long options for capture short options. The names match tcpdump trunk's names for the corresponding options. Also have capture_opts.h provide a #define for the part of the short option string that corresponds to the capture short options that all our programs that take capture short options take (those are largely the ones we have in common with tcpdump). Change-Id: Ia209425959c801725850b56a7d63441ee99b5001 Reviewed-on: https://code.wireshark.org/review/2492 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 13:59:45 -07:00
*/
Also define LONGOPT_CAPTURE_COMMON as nothing if we don't have pcap. While we're at it, simplify the #ifdefs and #defines in capture_opts.h - don't do the same tests twice. Change-Id: I2079167f31789470ef77120054d769d5914745e3 Reviewed-on: https://code.wireshark.org/review/2496 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 14:38:39 -07:00
#ifdef HAVE_PCAP_REMOTE
#define OPTSTRING_A "A:"
#else
cmdline: cleanup option string definitions Option string composition has grown organically over time and is depending on compilation options also. This results in somewhat complex macro definitions and the use of the string concatenation feature of the C compiler. This change tries to clean up some of this magic by removing definitions of empty strings and merging of adjacent strings. Change-Id: I968449ea9b564915bee468a0cac0e114983ceebe Reviewed-on: https://code.wireshark.org/review/35429 Reviewed-by: Jaap Keuter <jaap.keuter@xs4all.nl> Petri-Dish: Jaap Keuter <jaap.keuter@xs4all.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org>
2019-12-13 13:13:32 +01:00
#define OPTSTRING_A
Also define LONGOPT_CAPTURE_COMMON as nothing if we don't have pcap. While we're at it, simplify the #ifdefs and #defines in capture_opts.h - don't do the same tests twice. Change-Id: I2079167f31789470ef77120054d769d5914745e3 Reviewed-on: https://code.wireshark.org/review/2496 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 14:38:39 -07:00
#endif
#define OPTSTRING_B "B:"
Add some long options for capture short options. The names match tcpdump trunk's names for the corresponding options. Also have capture_opts.h provide a #define for the part of the short option string that corresponds to the capture short options that all our programs that take capture short options take (those are largely the ones we have in common with tcpdump). Change-Id: Ia209425959c801725850b56a7d63441ee99b5001 Reviewed-on: https://code.wireshark.org/review/2492 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 13:59:45 -07:00
Also define LONGOPT_CAPTURE_COMMON as nothing if we don't have pcap. While we're at it, simplify the #ifdefs and #defines in capture_opts.h - don't do the same tests twice. Change-Id: I2079167f31789470ef77120054d769d5914745e3 Reviewed-on: https://code.wireshark.org/review/2496 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 14:38:39 -07:00
#define OPTSTRING_I "I"
Add some long options for capture short options. The names match tcpdump trunk's names for the corresponding options. Also have capture_opts.h provide a #define for the part of the short option string that corresponds to the capture short options that all our programs that take capture short options take (those are largely the ones we have in common with tcpdump). Change-Id: Ia209425959c801725850b56a7d63441ee99b5001 Reviewed-on: https://code.wireshark.org/review/2492 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 13:59:45 -07:00
UI+docs: Fix Wiresharkisms in Stratoshark's help and man page Make the output of `stratoshark --help` more specific to Stratoshark. Update the Stratoshark man page to match. Fixes #20229
2025-02-18 13:21:59 -08:00
// "interface" and "source" work for both Wireshark and Stratoshark flavors
// but we only advertise the appropriate one in each application.
Add some long options for capture short options. The names match tcpdump trunk's names for the corresponding options. Also have capture_opts.h provide a #define for the part of the short option string that corresponds to the capture short options that all our programs that take capture short options take (those are largely the ones we have in common with tcpdump). Change-Id: Ia209425959c801725850b56a7d63441ee99b5001 Reviewed-on: https://code.wireshark.org/review/2492 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 13:59:45 -07:00
#define LONGOPT_CAPTURE_COMMON \
ws_getopt: Rename struct and macros This is part of the API and should also be renamed to avoid conflicts.
2021-09-29 18:32:28 +01:00
{"autostop", ws_required_argument, NULL, 'a'}, \
{"ring-buffer", ws_required_argument, NULL, 'b'}, \
Drop support for pre-1.0 libpcap on non-Windows Require pcap_create(). That first appeared in libpcap 1.0, which was released 2008-10-17. That also ensures that the entire libpcap 1.0 and earlier API is present, so we can remove some checks and ifdefs. On Windows the compile time checks have always been skipped and the functions checked for at run time, so this really just removes all the ifdefs but the run time checks are still there. A subsequent commit could remove the run time checks and just refuse to load the dll if pcap_create and other 1.0 APIs are not present. Note WinPcap 4.1.3 fails to export three functions (pcap_statustostr(), pcap_can_set_rfmon(), and pcap_set_rfmon()), so even if we do require the rest of the libpcap 1.0 APIs on Windows, we might still want to mark those as optional in Windows and work around their absence. Ping #20261
2025-01-02 17:24:03 -05:00
{"buffer-size", ws_required_argument, NULL, 'B'}, \
ws_getopt: Rename struct and macros This is part of the API and should also be renamed to avoid conflicts.
2021-09-29 18:32:28 +01:00
{"list-interfaces", ws_no_argument, NULL, 'D'}, \
UI+docs: Fix Wiresharkisms in Stratoshark's help and man page Make the output of `stratoshark --help` more specific to Stratoshark. Update the Stratoshark man page to match. Fixes #20229
2025-02-18 13:21:59 -08:00
{"list-sources", ws_no_argument, NULL, 'D'}, \
ws_getopt: Rename struct and macros This is part of the API and should also be renamed to avoid conflicts.
2021-09-29 18:32:28 +01:00
{"interface", ws_required_argument, NULL, 'i'}, \
UI+docs: Fix Wiresharkisms in Stratoshark's help and man page Make the output of `stratoshark --help` more specific to Stratoshark. Update the Stratoshark man page to match. Fixes #20229
2025-02-18 13:21:59 -08:00
{"source", ws_required_argument, NULL, 'i'}, \
Drop support for pre-1.0 libpcap on non-Windows Require pcap_create(). That first appeared in libpcap 1.0, which was released 2008-10-17. That also ensures that the entire libpcap 1.0 and earlier API is present, so we can remove some checks and ifdefs. On Windows the compile time checks have always been skipped and the functions checked for at run time, so this really just removes all the ifdefs but the run time checks are still there. A subsequent commit could remove the run time checks and just refuse to load the dll if pcap_create and other 1.0 APIs are not present. Note WinPcap 4.1.3 fails to export three functions (pcap_statustostr(), pcap_can_set_rfmon(), and pcap_set_rfmon()), so even if we do require the rest of the libpcap 1.0 APIs on Windows, we might still want to mark those as optional in Windows and work around their absence. Ping #20261
2025-01-02 17:24:03 -05:00
{"monitor-mode", ws_no_argument, NULL, 'I'}, \
ws_getopt: Rename struct and macros This is part of the API and should also be renamed to avoid conflicts.
2021-09-29 18:32:28 +01:00
{"list-data-link-types", ws_no_argument, NULL, 'L'}, \
{"no-promiscuous-mode", ws_no_argument, NULL, 'p'}, \
{"snapshot-length", ws_required_argument, NULL, 's'}, \
{"linktype", ws_required_argument, NULL, 'y'}, \
{"list-time-stamp-types", ws_no_argument, NULL, LONGOPT_LIST_TSTAMP_TYPES}, \
{"time-stamp-type", ws_required_argument, NULL, LONGOPT_SET_TSTAMP_TYPE}, \
Specify directory for temporary captures
2022-02-09 14:32:28 +00:00
{"compress-type", ws_required_argument, NULL, LONGOPT_COMPRESS_TYPE}, \
capture: Set update interval in capture opts, default to 100ms Reduce the default update interval for dumpcap to notify its parent of new packets (or to check if we've met file duration, etc.) from 500 ms to 100 ms, and put in the capture options. This makes the GUI appear to update more in real time rather than in visible batches of packets. This also reduces the amount of ring buffer space needed in cases where we're doing dissection, and dissection is able to keep up, but the files can be deleted before tshark gets to them because of the notification lag. (See #1650.)
2023-03-08 22:15:21 -05:00
{"temp-dir", ws_required_argument, NULL, LONGOPT_CAPTURE_TMPDIR},\
{"update-interval", ws_required_argument, NULL, LONGOPT_UPDATE_INTERVAL},
Add hardware timestamping support pcap provides a pcap_set_tstamp_type function, which can be used to request hardware timestamps from a supporting kernel. This patch adds support for aforementioned function as well as two new command line options to dumpcap, wireshark and tshark: --list-time-stamp-types List time stamp types supported for the interface --time-stamp-type <type> Change the interface's timestamp method Name choice mimics those used by tcpdump(1), which already supports this feature. However, unlike tcpdump, we provide both options unconditionally. If Wireshark was configured without pcap_set_tstamp_type being available, --list-time-stamp-types reports an empty list. Change-Id: I418a4b2b84cb01949cd262aad0ad8427f5ac0652 Signed-off-by: Ahmad Fatoum <ahmad.fatoum@siemens.com> Reviewed-on: https://code.wireshark.org/review/23113 Petri-Dish: Guy Harris <guy@alum.mit.edu> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-08-07 16:38:52 +02:00
Add some long options for capture short options. The names match tcpdump trunk's names for the corresponding options. Also have capture_opts.h provide a #define for the part of the short option string that corresponds to the capture short options that all our programs that take capture short options take (those are largely the ones we have in common with tcpdump). Change-Id: Ia209425959c801725850b56a7d63441ee99b5001 Reviewed-on: https://code.wireshark.org/review/2492 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 13:59:45 -07:00
#define OPTSTRING_CAPTURE_COMMON \
capture: Support the -F option, request nanosecond time stamp for pcap Support the -F option from the command line for dumpcap and wireshark, only supporting pcapng and pcap. Deprecate the -n and -P options. Make the output resemble that from libwiretap, but implement it separately because dumpcap intentionally does not link to libwiretap. Request nanosecond time stamps for the pcap format as well; we believe the vast majority of programs should be able to handle them at this point. The Internet Draft of the pcap format specification treats them as the same format: https://datatracker.ietf.org/doc/html/draft-ietf-opsawg-pcap For now libwiretap still treats them as different formats, which allows converting explicitly between them; this can be used as a workaround if someone needs to convert to the microsecond time stamp pcap format. If someone requests nanosecond time resolution to tshark using the -F flag, allow it. Update the documentation. Fix #18009
2024-06-06 10:56:10 -04:00
"a:" OPTSTRING_A "b:" OPTSTRING_B "c:Df:F:i:" OPTSTRING_I "Lps:y:"
Add some long options for capture short options. The names match tcpdump trunk's names for the corresponding options. Also have capture_opts.h provide a #define for the part of the short option string that corresponds to the capture short options that all our programs that take capture short options take (those are largely the ones we have in common with tcpdump). Change-Id: Ia209425959c801725850b56a7d63441ee99b5001 Reviewed-on: https://code.wireshark.org/review/2492 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2014-06-20 13:59:45 -07:00
Support for RPCAP features in GUI (from Boris Misenov, see Bug 1366) - retrieving the list of remote PCAP interfaces - password authentication support - UDP data fransfer - packet sampling (available in WinPcap 4.x) etc. fix problem if non-default rpcap port is used svn path=/trunk/; revision=23750
2007-12-04 11:19:29 +00:00
#ifdef HAVE_PCAP_REMOTE
/* Type of capture source */
typedef enum {
CAPTURE_IFLOCAL, /**< Local network interface */
CAPTURE_IFREMOTE /**< Remote network interface */
} capture_source;
/* Type of RPCAPD Authentication */
typedef enum {
CAPTURE_AUTH_NULL, /**< No authentication */
CAPTURE_AUTH_PWD /**< User/password authentication */
} capture_auth;
Make HAVE_PCAP_REMOTE and HAVE_PCAP_SETSAMPLING independent as in other places of the code. Such that this is consistently used. While there, clean up some whitespaces. This fix was provided by Irene Ruengeler which testing remote capturing (with multiple interfaces). svn path=/trunk/; revision=36112
2011-03-01 17:29:09 +00:00
#endif
Support for RPCAP features in GUI (from Boris Misenov, see Bug 1366) - retrieving the list of remote PCAP interfaces - password authentication support - UDP data fransfer - packet sampling (available in WinPcap 4.x) etc. fix problem if non-default rpcap port is used svn path=/trunk/; revision=23750
2007-12-04 11:19:29 +00:00
#ifdef HAVE_PCAP_SETSAMPLING
/**
* Method of packet sampling (dropping some captured packets),
* may require additional integer parameter, marked here as N
*/
typedef enum {
CAPTURE_SAMP_NONE, /**< No sampling - capture all packets */
CAPTURE_SAMP_BY_COUNT, /**< Counter-based sampling -
capture 1 packet from every N */
CAPTURE_SAMP_BY_TIMER /**< Timer-based sampling -
capture no more than 1 packet
in N milliseconds */
} capture_sampling;
#endif
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
Third try. This time pipes and stdin are supported and the test scripts are passed. Use a global list containing all interfaces and only change properties of the entries when changes are made in the GUI. Do not misuse the list of interfaces specified on the command line anymore. This patch does not provide any new functionality, it just provides the base for future extensions like removing remote interface, mulitple airpcap devices and multiple pipes. This patch was provided by Irene Ruengeler. svn path=/trunk/; revision=40715
2012-01-25 13:04:32 +00:00
#ifdef HAVE_PCAP_REMOTE
Fix error when building QtShark: ...\capture_opts.h(94) : error C2461: 'remote_host' : constructor syntax missing formal parameters svn path=/trunk/; revision=40723
2012-01-25 18:03:50 +00:00
struct remote_host_info {
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *remote_host; /**< Host name or network address for remote capturing */
char *remote_port; /**< TCP port of remote RPCAP server */
Fix various compile warnings turning error on Linux with gcc6 when compiling with HAVE_PCAP_REMOTE (and ENABLE_ECHLD) Change-Id: If5524f2d3dcacca9c82a46167480c8436dd8b1b2 Reviewed-on: https://code.wireshark.org/review/20615 Petri-Dish: Jörg Mayer <jmayer@loplof.de> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2017-03-19 12:26:28 +01:00
capture_auth auth_type; /**< Authentication type */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *auth_username; /**< Remote authentication parameters */
char *auth_password; /**< Remote authentication parameters */
bool datatx_udp;
bool nocap_rpcap;
bool nocap_local;
Third try. This time pipes and stdin are supported and the test scripts are passed. Use a global list containing all interfaces and only change properties of the entries when changes are made in the GUI. Do not misuse the list of interfaces specified on the command line anymore. This patch does not provide any new functionality, it just provides the base for future extensions like removing remote interface, mulitple airpcap devices and multiple pipes. This patch was provided by Irene Ruengeler. svn path=/trunk/; revision=40715
2012-01-25 13:04:32 +00:00
};
GTK Remote Capturing Move the GTK files necessary for managing the recnet remote host from capture_dlg.c to recent.c in order to use them in QT, too. Change-Id: I3f3fd31ce928162de08c6db7309ef2a9b1e97760 Reviewed-on: https://code.wireshark.org/review/2955 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2014-07-09 13:50:11 +02:00
struct remote_host {
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *r_host; /**< Host name or network address for remote capturing */
char *remote_port; /**< TCP port of remote RPCAP server */
Fix various compile warnings turning error on Linux with gcc6 when compiling with HAVE_PCAP_REMOTE (and ENABLE_ECHLD) Change-Id: If5524f2d3dcacca9c82a46167480c8436dd8b1b2 Reviewed-on: https://code.wireshark.org/review/20615 Petri-Dish: Jörg Mayer <jmayer@loplof.de> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Jörg Mayer <jmayer@loplof.de>
2017-03-19 12:26:28 +01:00
capture_auth auth_type; /**< Authentication type */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *auth_username; /**< Remote authentication parameters */
char *auth_password; /**< Remote authentication parameters */
GTK Remote Capturing Move the GTK files necessary for managing the recnet remote host from capture_dlg.c to recent.c in order to use them in QT, too. Change-Id: I3f3fd31ce928162de08c6db7309ef2a9b1e97760 Reviewed-on: https://code.wireshark.org/review/2955 Reviewed-by: Anders Broman <a.broman58@gmail.com>
2014-07-09 13:50:11 +02:00
};
Third try. This time pipes and stdin are supported and the test scripts are passed. Use a global list containing all interfaces and only change properties of the entries when changes are made in the GUI. Do not misuse the list of interfaces specified on the command line anymore. This patch does not provide any new functionality, it just provides the base for future extensions like removing remote interface, mulitple airpcap devices and multiple pipes. This patch was provided by Irene Ruengeler. svn path=/trunk/; revision=40715
2012-01-25 13:04:32 +00:00
typedef struct remote_options_tag {
capture_source src_type;
Fix error when building QtShark: ...\capture_opts.h(94) : error C2461: 'remote_host' : constructor syntax missing formal parameters svn path=/trunk/; revision=40723
2012-01-25 18:03:50 +00:00
struct remote_host_info remote_host_opts;
Third try. This time pipes and stdin are supported and the test scripts are passed. Use a global list containing all interfaces and only change properties of the entries when changes are made in the GUI. Do not misuse the list of interfaces specified on the command line anymore. This patch does not provide any new functionality, it just provides the base for future extensions like removing remote interface, mulitple airpcap devices and multiple pipes. This patch was provided by Irene Ruengeler. svn path=/trunk/; revision=40715
2012-01-25 13:04:32 +00:00
#ifdef HAVE_PCAP_SETSAMPLING
capture_sampling sampling_method;
int sampling_param;
#endif
} remote_options;
#endif /* HAVE_PCAP_REMOTE */
typedef struct interface_tag {
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *name;
char *display_name;
char *addresses;
int no_addresses;
char *cfilter;
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
GList *links;
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
int active_dlt;
ui: Convert capture_ui_utils to C99 types Ping #19116
2024-03-29 17:36:35 -07:00
bool pmode;
bool has_snaplen;
Make the snapshot-length member of interface_t an int. That matches what it is in other structures, and eliminates a compiler warning. While we're at it, remove an empty if statement revealed by that change. Change-Id: I5e8c8f92fdb3567e75800c729443737032a1bcc7 Reviewed-on: https://code.wireshark.org/review/7752 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2015-03-18 23:38:12 -07:00
int snaplen;
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool local;
int buffer;
bool monitor_mode_enabled;
bool monitor_mode_supported;
Third try. This time pipes and stdin are supported and the test scripts are passed. Use a global list containing all interfaces and only change properties of the entries when changes are made in the GUI. Do not misuse the list of interfaces specified on the command line anymore. This patch does not provide any new functionality, it just provides the base for future extensions like removing remote interface, mulitple airpcap devices and multiple pipes. This patch was provided by Irene Ruengeler. svn path=/trunk/; revision=40715
2012-01-25 13:04:32 +00:00
#ifdef HAVE_PCAP_REMOTE
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
remote_options remote_opts;
Third try. This time pipes and stdin are supported and the test scripts are passed. Use a global list containing all interfaces and only change properties of the entries when changes are made in the GUI. Do not misuse the list of interfaces specified on the command line anymore. This patch does not provide any new functionality, it just provides the base for future extensions like removing remote interface, mulitple airpcap devices and multiple pipes. This patch was provided by Irene Ruengeler. svn path=/trunk/; revision=40715
2012-01-25 13:04:32 +00:00
#endif
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
uint32_t last_packets;
uint32_t packet_diff;
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
if_info_t if_info;
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool selected;
bool hidden;
Extcap Capture Interface Extcap is a plugin interface, which allows for the usage of external capture interfaces via pipes using a predefined configuration language which results in a graphical gui. This implementation seeks for a generic implementation, which results in a seamless integration with the current system, and does add all external interfaces as simple interfaces. Windows Note: Due to limitations with GTK and Windows, a gspawn-winXX-helper.exe, respective gspawn-winXX-helper-console.exe is needed, which is part of any GTK windows installation. The default installation directory from the build is an extcap subdirectory underneath the run directory. The folder used by extcap may be viewed in the folders tab of the about dialog. The default installation directory for extcap plugins with a pre-build or installer version of wireshark is the extcap subdirectory underneath the main wireshark directory. For more information see: http://youtu.be/Nn84T506SwU bug #9009 Also take a look in doc/extcap_example.py for a Python-example and in extcap.pod for the arguments grammer. Todo: - Integrate with Qt - currently no GUI is generated, but the interfaces are still usable Change-Id: I4f1239b2f1ebd8b2969f73af137915f5be1ce50f Signed-off-by: Mike Ryan <mikeryan+wireshark@lacklustre.net> Signed-off-by: Mike Kershaw <dragorn@kismetwireless.net> Signed-off-by: Roland Knall <rknall@gmail.com> Reviewed-on: https://code.wireshark.org/review/359 Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Michael Mann <mmann78@netscape.net>
2014-02-25 14:05:11 +01:00
/* External capture cached data */
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
GHashTable *external_cap_args_settings;
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *timestamp_type;
Third try. This time pipes and stdin are supported and the test scripts are passed. Use a global list containing all interfaces and only change properties of the entries when changes are made in the GUI. Do not misuse the list of interfaces specified on the command line anymore. This patch does not provide any new functionality, it just provides the base for future extensions like removing remote interface, mulitple airpcap devices and multiple pipes. This patch was provided by Irene Ruengeler. svn path=/trunk/; revision=40715
2012-01-25 13:04:32 +00:00
} interface_t;
typedef struct link_row_tag {
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *name;
int dlt;
Third try. This time pipes and stdin are supported and the test scripts are passed. Use a global list containing all interfaces and only change properties of the entries when changes are made in the GUI. Do not misuse the list of interfaces specified on the command line anymore. This patch does not provide any new functionality, it just provides the base for future extensions like removing remote interface, mulitple airpcap devices and multiple pipes. This patch was provided by Irene Ruengeler. svn path=/trunk/; revision=40715
2012-01-25 13:04:32 +00:00
} link_row;
Add support for handling multiple interfaces as command line parameters. An array of interface specific data is handled in addition to the current way. This change should not have any effect right now, it will be used by dumpcap when supporting multiple interfaces (and tshark/wireshark... in the future). svn path=/trunk/; revision=37082
2011-05-12 16:54:16 +00:00
typedef struct interface_options_tag {
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *name; /* the name of the interface supplied to libpcap/WinPcap/Npcap to specify the interface */
char *descr; /* a more user-friendly description of the interface; may be NULL if none */
char *hardware; /* description of the hardware */
char *display_name; /* the name displayed in the console and title bar */
char *ifname; /* if not null, name to use instead of the interface naem in IDBs */
char *cfilter;
bool has_snaplen;
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
int snaplen;
int linktype;
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool promisc_mode;
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
interface_type if_type;
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *extcap;
char *extcap_fifo;
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
GHashTable *extcap_args;
More spawned process handling updates. Document ws_pipe.h. Define invalid PIDs in one place. Extcap didn't use stdin before 1a0987904f. Make sure we close it. Change-Id: I7a69cd9b5137ae82435e64628a22e4d812d58f89 Reviewed-on: https://code.wireshark.org/review/26226 Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org>
2018-03-02 09:11:31 -08:00
GPid extcap_pid; /* pid of running process or WS_INVALID_PID */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
void * extcap_pipedata;
extcap: Read stdout and stderr during capture Read extcap stdout/stderr data when available to prevent extcap hang on stdout/stderr write. Discard stdout data as it was not used earlier. Store up to 1024 bytes of stderr and display it to user after capture stops. Fixes #17827
2022-08-07 18:40:56 +02:00
GString *extcap_stderr;
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
unsigned extcap_stdout_watch;
unsigned extcap_stderr_watch;
extcap: Create unique pipe names for each interface On Windows the pipe names does not get random characters appended. Add the interface name and pipe type to make it unique. This partly fixes the issue with capturing from multiple extcap interfaces on Windows. Ping-Bug: 13653 Ping-Bug: 13833 Change-Id: I4290b37cf789bf77608993682a803aca29513d28 Reviewed-on: https://code.wireshark.org/review/23158 Petri-Dish: Stig Bjørlykke <stig@bjorlykke.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-08-19 23:39:21 +02:00
#ifdef _WIN32
HANDLE extcap_pipe_h;
extcap: Interface Toolbar support on Windows Add support for extcap control pipes on Windows. Improved read loop in InterfaceToolbarReader. Delay opening control pipes until extcap has opened the fifo pipe. Make extcap_example.py work on Windows. Bug: 13833 Change-Id: I4b47d25452637759b8a3be53be48eee5365bc0e4 Reviewed-on: https://code.wireshark.org/review/23211 Petri-Dish: Stig Bjørlykke <stig@bjorlykke.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-08-25 11:28:34 +02:00
HANDLE extcap_control_in_h;
HANDLE extcap_control_out_h;
extcap: Create unique pipe names for each interface On Windows the pipe names does not get random characters appended. Add the interface name and pipe type to make it unique. This partly fixes the issue with capturing from multiple extcap interfaces on Windows. Ping-Bug: 13653 Ping-Bug: 13833 Change-Id: I4290b37cf789bf77608993682a803aca29513d28 Reviewed-on: https://code.wireshark.org/review/23158 Petri-Dish: Stig Bjørlykke <stig@bjorlykke.org> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-08-19 23:39:21 +02:00
#endif
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *extcap_control_in;
char *extcap_control_out;
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
int buffer_size;
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool monitor_mode;
Make remote capturing settings a per interface thing. You can now configure that you want to capture on multiple remote interfaces on mulitple hosts. Improve some #ifdef mess in dumpcap. svn path=/trunk/; revision=37178
2011-05-16 15:19:54 +00:00
#ifdef HAVE_PCAP_REMOTE
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
capture_source src_type;
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *remote_host;
char *remote_port;
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
capture_auth auth_type;
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *auth_username;
char *auth_password;
bool datatx_udp;
bool nocap_rpcap;
bool nocap_local;
Make remote capturing settings a per interface thing. You can now configure that you want to capture on multiple remote interfaces on mulitple hosts. Improve some #ifdef mess in dumpcap. svn path=/trunk/; revision=37178
2011-05-16 15:19:54 +00:00
#endif
Make pcap samping a per interface setting. Use consistent naming of variables on capture_options. Make pcap sampling independent of remote capturing, since it seems to work local pcap devices using winpcap (at least that is what the documentation says). svn path=/trunk/; revision=37176
2011-05-16 14:12:35 +00:00
#ifdef HAVE_PCAP_SETSAMPLING
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
capture_sampling sampling_method;
int sampling_param;
Make pcap samping a per interface setting. Use consistent naming of variables on capture_options. Make pcap sampling independent of remote capturing, since it seems to work local pcap devices using winpcap (at least that is what the documentation says). svn path=/trunk/; revision=37176
2011-05-16 14:12:35 +00:00
#endif
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *timestamp_type; /* requested timestamp as string */
Add hardware timestamping support pcap provides a pcap_set_tstamp_type function, which can be used to request hardware timestamps from a supporting kernel. This patch adds support for aforementioned function as well as two new command line options to dumpcap, wireshark and tshark: --list-time-stamp-types List time stamp types supported for the interface --time-stamp-type <type> Change the interface's timestamp method Name choice mimics those used by tcpdump(1), which already supports this feature. However, unlike tcpdump, we provide both options unconditionally. If Wireshark was configured without pcap_set_tstamp_type being available, --list-time-stamp-types reports an empty list. Change-Id: I418a4b2b84cb01949cd262aad0ad8427f5ac0652 Signed-off-by: Ahmad Fatoum <ahmad.fatoum@siemens.com> Reviewed-on: https://code.wireshark.org/review/23113 Petri-Dish: Guy Harris <guy@alum.mit.edu> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-08-07 16:38:52 +02:00
int timestamp_type_id; /* Timestamp type to pass to pcap_set_tstamp_type.
only valid if timestamp_type != NULL */
Add support for handling multiple interfaces as command line parameters. An array of interface specific data is handled in addition to the current way. This change should not have any effect right now, it will be used by dumpcap when supporting multiple interfaces (and tshark/wireshark... in the future). svn path=/trunk/; revision=37082
2011-05-12 16:54:16 +00:00
} interface_options;
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
/** Capture options coming from user interface */
typedef struct capture_options_tag {
/* general */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
GList *(*get_iface_list)(int *, char **);
For capture options, provide a callback to use to fetch an interface list. Do that rather than having that code directly call capture_interface_list(), with the programs providing their own versions of capture_interface_list().
2023-08-27 23:44:14 -07:00
/**< routine to call to get the interface list */
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
GArray *ifaces; /**< the interfaces to use for the
next capture, entries are of
type interface_options */
GArray *all_ifaces; /**< all interfaces, entries are
of type interface_t */
int ifaces_err; /**< if all_ifaces is null, the error
when it was fetched, if any */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *ifaces_err_info; /**< error string for that error */
unsigned num_selected;
Add a comment about the "default options". svn path=/trunk/; revision=53590
2013-11-26 02:25:20 +00:00
/*
* Options to be applied to all interfaces.
*
* Some of these can be set from the GUI, others can't; setting
* the link-layer header type, for example, doesn't necessarily
* make sense, as different interfaces may support different sets
* of link-layer header types.
*
* Some that can't be set from the GUI can be set from the command
* line, by specifying them before any interface is specified.
* This includes the link-layer header type, so if somebody asks
* for a link-layer header type that an interface on which they're
* capturing doesn't support, we should report an error and fail
* to capture.
*
* These can be overridden per-interface.
*/
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
interface_options default_options;
Add a comment about the "default options". svn path=/trunk/; revision=53590
2013-11-26 02:25:20 +00:00
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool saving_to_file; /**< true if capture is writing to a file */
char *save_file; /**< the capture file name */
bool group_read_access; /**< true is group read permission needs to be set */
bool use_pcapng; /**< true if file format is pcapng */
unsigned update_interval; /**< Time in milliseconds. How often to notify parent of new packet counts, check file duration, etc. */
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
/* GUI related */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool real_time_mode; /**< Update list of packets in real time */
bool show_info; /**< show the info dialog. */
bool restart; /**< restart after closing is done */
char *orig_save_file; /**< the original capture file name (saved for a restart) */
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
/* multiple files (and ringbuffer) */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool multi_files_on; /**< true if ring buffer in use */
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool has_file_duration; /**< true if ring duration specified */
double file_duration; /**< Switch file after n seconds */
bool has_file_interval; /**< true if ring interval specified */
int32_t file_interval; /**< Create time intervals of n seconds */
bool has_file_packets; /**< true if ring packet count is
Dumpcap+Qt: Add support for `-a packets:NUM` and `-b packets:NUM`. Add the ability to rotate files after a specified number of packets (`-b packets:NUM`). Move some condition checks to capture_loop_write_packet_cb. Add `-a packets:NUM` in order to be consistent. It is functionally equivalent to the `-c` flag. Add a corresponding "packets" option to the Capture Interfaces dialog Output tab. Add initial tests for autostop and ringbuffer conditions. Change-Id: I66eb968927ed287deb8edb96db96d7c73526c257 Reviewed-on: https://code.wireshark.org/review/30534 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-10-31 10:03:04 +01:00
specified */
int file_packets; /**< Switch file after n packets */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool has_ring_num_files; /**< true if ring num_files specified */
uint32_t ring_num_files; /**< Number of multiple buffer files */
bool has_nametimenum; /**< true if file name has date part before num part */
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
/* autostop conditions */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool has_autostop_files; /**< true if maximum number of capture files
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
are specified */
Dumpcap+Qt: Add support for `-a packets:NUM` and `-b packets:NUM`. Add the ability to rotate files after a specified number of packets (`-b packets:NUM`). Move some condition checks to capture_loop_write_packet_cb. Add `-a packets:NUM` in order to be consistent. It is functionally equivalent to the `-c` flag. Add a corresponding "packets" option to the Capture Interfaces dialog Output tab. Add initial tests for autostop and ringbuffer conditions. Change-Id: I66eb968927ed287deb8edb96db96d7c73526c257 Reviewed-on: https://code.wireshark.org/review/30534 Reviewed-by: Gerald Combs <gerald@wireshark.org> Petri-Dish: Gerald Combs <gerald@wireshark.org> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2018-10-31 10:03:04 +01:00
int autostop_files; /**< Maximum number of capture files */
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool has_autostop_packets; /**< true if maximum packet count is
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
specified */
int autostop_packets; /**< Maximum packet count */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool has_autostop_written_packets; /**< true if maximum packet count is
Differentiate `-c` from `-a packets:`
2022-02-11 01:54:53 +00:00
specified */
int autostop_written_packets; /**< Maximum packet count */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool has_autostop_filesize; /**< true if maximum capture file size
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
is specified */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
uint32_t autostop_filesize; /**< Maximum capture file size in kB */
bool has_autostop_duration; /**< true if maximum capture duration
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
is specified */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
double autostop_duration; /**< Maximum capture duration */
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool print_file_names; /**< true if printing names of completed
Dumpcap: print closed ring-buffer file names This proposal adds a new option '-b printname:<filename>' to dumpcap. If used, dumpcap will print the name of each ring buffer file it creates after it is closed. Allows the use of '-'/'stdout' and 'stderr'. Use case: Since the file name is printed after the file is closed for writing, an automated capture process can do something like the following with the guarantee that the file in question will not be changed. dumpcap -i eth0 -b files:2 -b printname:stdout [-b ...] | \ while read cap_file_name ; do # Do something with $cap_file_name done This sort of scripting is difficult in dumpcap's current form. Dumpcap prints the names of new files to stderr as it *opens* them, so a script attempting to use this must sleep for "-b duration:value" seconds plus some fudge time to be sure it's getting a closed, unchanging file. Change-Id: Idb288cc7c8c30443256d35c8cd4460a2e3f0861c Reviewed-on: https://code.wireshark.org/review/37994 Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot Reviewed-by: Anders Broman <a.broman58@gmail.com>
2020-07-29 09:36:19 -04:00
files as we close them */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
char *print_name_to; /**< output file name */
char *temp_dir; /**< temporary directory path */
Handle the 2GiB boundary case of the max filesize autostop condition properly so that we avoid overflow conditions and so that we ensure we don't capture more than 2GiB. Also, document the max filesize autostop value of 2GIB as well as indicating that it's truly GiB and not GB. This fixes the problem reported on ask: http://ask.wireshark.org/questions/23891/wireshark-wont-run-with-multiple-capture-files #BACKPORT(1.10) ... not sure about 1.8? svn path=/trunk/; revision=51576
2013-08-29 18:15:13 +00:00
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
/* internally used (don't touch from outside) */
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
bool output_to_pipe; /**< save_file is a pipe (named or stdout) */
bool capture_child; /**< hidden option: Wireshark child mode */
bool stop_after_extcaps; /**< request dumpcap stop after last extcap */
bool wait_for_extcap_cbs; /**< extcaps terminated, waiting for callbacks */
char *compress_type; /**< compress type */
char *closed_msg; /**< Dumpcap capture closed message */
unsigned extcap_terminate_id; /**< extcap process termination source ID */
wsutil: Make filter lists dynamic and on-demand Do not read the capture filter list unless needed. Do not use a static list because the capture filter list can change during program execution and we want to be able to read multiple copies whenever. Improve the public API function names.
2023-11-07 19:09:01 +00:00
filter_list_t *capture_filters_list; /**< list of saved capture filters */
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
} capture_options;
For capture options, provide a callback to use to fetch an interface list. Do that rather than having that code directly call capture_interface_list(), with the programs providing their own versions of capture_interface_list().
2023-08-27 23:44:14 -07:00
/*
* Initialize the capture_options with some reasonable values, and
* provide a routine it can use to fetch a list of capture options
* if it needs it.
*
* (Getting that list might involve running dumpcap, so we don't want
* to waste time doing that if we don't have to.)
*/
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
extern void
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
capture_opts_init(capture_options *capture_opts, GList *(*get_iface_list)(int *, char **));
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
capture_opts: free memory on exit to avoid leak. This required a restyle of the way the different apps exit. Change-Id: Iedf728488954cc415b620ff0284d2e60f38f87d2 Reviewed-on: https://code.wireshark.org/review/19780 Reviewed-by: Peter Wu <peter@lekensteyn.nl> Reviewed-by: Dario Lombardo <lomato@gmail.com>
2017-01-25 10:16:35 +01:00
/* clean internal structures */
extern void
capture_opts_cleanup(capture_options *capture_opts);
add capture_opts_trim(), as this sequence is used three times now (will replace the other appearances later) ... svn path=/trunk/; revision=16683
2005-12-05 21:26:01 +00:00
/* set a command line option value */
remove all calls to exit() from the capture_opts.c and replace them by status return values (0,1 or 2). This way makes it much easier to debug, e.g. to set a common breakpoint if a command line parameter fails. svn path=/trunk/; revision=17240
2006-02-10 02:05:30 +00:00
extern int
Use the musl in-tree getopt_long() everywhere Besides the obvious limitation of being unavailable on Windows, the standard is vague about getopt() and getopt_long() has many non-portable pitfalls and buggy implementations, that increase the maintainance cost a lot. Also the GNU libc code currently in the tree is not suited for embedding and is unmaintainable. Own maintainership for getopt_long() and use the musl implementation everywhere. This way we don't need to worry if optreset is available, or if the $OPERATING_SYSTEM version behaves in subtly different ways. The API is under the Wireshark namespace to avoid conflicts with system headers. Side-note, the Mingw-w64 9.0 getopt_long() implementation is buggy with opterr and known to crash. In my experience it's a headache to use the embedded getopt implementation if the system provides one.
2021-07-26 17:22:36 +01:00
capture_opts_add_opt(capture_options *capture_opts, int opt, const char *ws_optarg);
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
/* log content of capture_opts */
extern void
wslog: Add support for domain filtering A domain filter can be given in the environment variable 'WS_LOG_DOMAINS' or in a command-line options "--log-domains". The filter is specified as a comma separated case insensitive list, for example: ./tshark --log-domains=main,capture Domain data type switches from an enum to a string. There is no constaint on adding new domains, neither in code or at runtime. The string format is arbitrary, only positive matches will produce output.
2021-06-11 13:39:16 +01:00
capture_opts_log(const char *domain, enum ws_log_level level, capture_options *capture_opts);
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
capture: Support the -F option, request nanosecond time stamp for pcap Support the -F option from the command line for dumpcap and wireshark, only supporting pcapng and pcap. Deprecate the -n and -P options. Make the output resemble that from libwiretap, but implement it separately because dumpcap intentionally does not link to libwiretap. Request nanosecond time stamps for the pcap format as well; we believe the vast majority of programs should be able to handle them at this point. The Internet Draft of the pcap format specification treats them as the same format: https://datatracker.ietf.org/doc/html/draft-ietf-opsawg-pcap For now libwiretap still treats them as different formats, which allows converting explicitly between them; this can be used as a workaround if someone needs to convert to the microsecond time stamp pcap format. If someone requests nanosecond time resolution to tshark using the -F flag, allow it. Update the documentation. Fix #18009
2024-06-06 10:56:10 -04:00
/* List supported file types for capturing. This is intentionally smaller
* than the list supported by libwiretap (and dumpcap isn't linked with
* libwiretap.) */
extern void
capture_opts_list_file_types(void);
Add hardware timestamping support pcap provides a pcap_set_tstamp_type function, which can be used to request hardware timestamps from a supporting kernel. This patch adds support for aforementioned function as well as two new command line options to dumpcap, wireshark and tshark: --list-time-stamp-types List time stamp types supported for the interface --time-stamp-type <type> Change the interface's timestamp method Name choice mimics those used by tcpdump(1), which already supports this feature. However, unlike tcpdump, we provide both options unconditionally. If Wireshark was configured without pcap_set_tstamp_type being available, --list-time-stamp-types reports an empty list. Change-Id: I418a4b2b84cb01949cd262aad0ad8427f5ac0652 Signed-off-by: Ahmad Fatoum <ahmad.fatoum@siemens.com> Reviewed-on: https://code.wireshark.org/review/23113 Petri-Dish: Guy Harris <guy@alum.mit.edu> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-08-07 16:38:52 +02:00
enum caps_query {
Clean up printing of interface information. In dumpcap, if we're being run by TShark or Wireshark, if there are no link-layer types, just provide an empty list to our caller; let them construct an empty list of link-layer types when they read our output. In the code that reads that list, don't report an error if the list is empty, rely on the caller to do so. Have capture_opts_print_if_capabilities() do more work, moving some functions from its callers to it.
2021-04-13 23:14:09 -07:00
CAPS_QUERY_LINK_TYPES = 0x1,
CAPS_QUERY_TIMESTAMP_TYPES = 0x2
Add hardware timestamping support pcap provides a pcap_set_tstamp_type function, which can be used to request hardware timestamps from a supporting kernel. This patch adds support for aforementioned function as well as two new command line options to dumpcap, wireshark and tshark: --list-time-stamp-types List time stamp types supported for the interface --time-stamp-type <type> Change the interface's timestamp method Name choice mimics those used by tcpdump(1), which already supports this feature. However, unlike tcpdump, we provide both options unconditionally. If Wireshark was configured without pcap_set_tstamp_type being available, --list-time-stamp-types reports an empty list. Change-Id: I418a4b2b84cb01949cd262aad0ad8427f5ac0652 Signed-off-by: Ahmad Fatoum <ahmad.fatoum@siemens.com> Reviewed-on: https://code.wireshark.org/review/23113 Petri-Dish: Guy Harris <guy@alum.mit.edu> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
2017-08-07 16:38:52 +02:00
};
Fetch an indication of whether the interface supports capturing in monitor mode at the same time that we fetch its list of link-layer types. Support fetching that list in monitor mode, as the list may be different in regular and monitor mode. If the interface supports monitor mode, when printing the list of link-layer types, indicate whether they're fetched in monitor mode or not, as tcpdump 4.1.x does. svn path=/trunk/; revision=32789
2010-05-13 17:37:39 +00:00
/* print interface capabilities, including link layer types */
Clean up printing of interface information. In dumpcap, if we're being run by TShark or Wireshark, if there are no link-layer types, just provide an empty list to our caller; let them construct an empty list of link-layer types when they read our output. In the code that reads that list, don't report an error if the list is empty, rely on the caller to do so. Have capture_opts_print_if_capabilities() do more work, moving some functions from its callers to it.
2021-04-13 23:14:09 -07:00
extern int
capture_opts_print_if_capabilities(if_capabilities_t *caps,
dumpcap: Allow retrieving interface list + caps Since we get both the non monitor mode and monitor mode link types lists of interfaces that can support it, we can allow the combination of retrieving the interface list and capabilities at the same time, because we don't need the user to specify whether to retrieve the list in or not in monitor mode. Allow any combination of retrieving the the interface list and the two capability types to be retrieved, but don't allow them in combination with the other run once arguments. When not in machine readable mode, print the capability types after the link lists (maybe we should interleave them). When in machine readable mode, add them to the serialized JSON. We don't yet pass both flags to dumpcap in capture child mode from the other applications yet. Related to #15082
2023-12-15 06:18:39 -05:00
const interface_options *interface_opts,
Clean up printing of interface information. In dumpcap, if we're being run by TShark or Wireshark, if there are no link-layer types, just provide an empty list to our caller; let them construct an empty list of link-layer types when they read our output. In the code that reads that list, don't report an error if the list is empty, rely on the caller to do so. Have capture_opts_print_if_capabilities() do more work, moving some functions from its callers to it.
2021-04-13 23:14:09 -07:00
int queries);
HUGE STEP (hopefully toward the right direction): remove a lot of redundant code from tethereal and use (move) stuff from capture_loop.c instead. concentrate common capture related code in capture_opts.c, e.g. trying to find the right interface to capture from (command line option, preference, first usable) instead of duplicating this code over several files. remove redundant code from dumpcap.c this also implements command line option -D (and indexed interfaces at -i) for Ethereal and Dumpcap (as we have it in Tethereal already for a while) svn path=/trunk/; revision=16787
2005-12-13 22:48:58 +00:00
As with the list of data link types, so with the list of interfaces; move the code to print the machine-readable format into dumpcap, and have the code in capture_opts.c just print the human-readable format. svn path=/trunk/; revision=32714
2010-05-07 19:24:32 +00:00
/* print list of interfaces */
extern void
capture_opts_print_interfaces(GList *if_list);
HUGE STEP (hopefully toward the right direction): remove a lot of redundant code from tethereal and use (move) stuff from capture_loop.c instead. concentrate common capture related code in capture_opts.c, e.g. trying to find the right interface to capture from (command line option, preference, first usable) instead of duplicating this code over several files. remove redundant code from dumpcap.c this also implements command line option -D (and indexed interfaces at -i) for Ethereal and Dumpcap (as we have it in Tethereal already for a while) svn path=/trunk/; revision=16787
2005-12-13 22:48:58 +00:00
/* trim the snaplen entry */
One more step in privilege separation. Add a capture_interface_list(), which works similar to get_interface_list() except that it forks dumpcap instead of calling the pcap routines directly. Use it in the GUI. Add a "-I" flag to dumpcap, which prints out verbose interface information. Tested under Windows and Linux. svn path=/trunk/; revision=22071
2007-06-11 03:58:58 +00:00
extern void
HUGE STEP (hopefully toward the right direction): remove a lot of redundant code from tethereal and use (move) stuff from capture_loop.c instead. concentrate common capture related code in capture_opts.c, e.g. trying to find the right interface to capture from (command line option, preference, first usable) instead of duplicating this code over several files. remove redundant code from dumpcap.c this also implements command line option -D (and indexed interfaces at -i) for Ethereal and Dumpcap (as we have it in Tethereal already for a while) svn path=/trunk/; revision=16787
2005-12-13 22:48:58 +00:00
capture_opts_trim_snaplen(capture_options *capture_opts, int snaplen_min);
/* trim the ring_num_files entry */
One more step in privilege separation. Add a capture_interface_list(), which works similar to get_interface_list() except that it forks dumpcap instead of calling the pcap routines directly. Use it in the GUI. Add a "-I" flag to dumpcap, which prints out verbose interface information. Tested under Windows and Linux. svn path=/trunk/; revision=22071
2007-06-11 03:58:58 +00:00
extern void
HUGE STEP (hopefully toward the right direction): remove a lot of redundant code from tethereal and use (move) stuff from capture_loop.c instead. concentrate common capture related code in capture_opts.c, e.g. trying to find the right interface to capture from (command line option, preference, first usable) instead of duplicating this code over several files. remove redundant code from dumpcap.c this also implements command line option -D (and indexed interfaces at -i) for Ethereal and Dumpcap (as we have it in Tethereal already for a while) svn path=/trunk/; revision=16787
2005-12-13 22:48:58 +00:00
capture_opts_trim_ring_num_files(capture_options *capture_opts);
Rename capture_opts_trim_iface() to capture_opts_default_iface_if_necessary(), to reflect what it actually does. svn path=/trunk/; revision=49491
2013-05-22 04:49:31 +00:00
/* pick default interface if none was specified */
On error, have capture_opts_trim_iface() return the exit status that should be used (on success, have it return 0). Exit with that exit status; if the problem is that we couldn't get the interface list or if there are no interfaces in that list, return 2, as that's not a command-line syntax error. svn path=/trunk/; revision=46108
2012-11-21 17:14:54 +00:00
extern int
Rename capture_opts_trim_iface() to capture_opts_default_iface_if_necessary(), to reflect what it actually does. svn path=/trunk/; revision=49491
2013-05-22 04:49:31 +00:00
capture_opts_default_iface_if_necessary(capture_options *capture_opts,
const char *capture_device);
split capture.h into capture.h, capture_loop.h and capture_opts.h and place the parts into the corresponding files svn path=/trunk/; revision=16664
2005-12-03 19:32:54 +00:00
fix scan_local_interfaces() when we delete an interface from all_ifaces, delete it from ifaces as well remove its selected status if it was selected at the moment, an interface that was used for capturing before will never be removed from the list of interfaces even if it becomes unavailable as it remains in ifaces and will be re-added to all_ifaces in scan_local_interfaces() new helper function capture_opts_del_iface() to delete an entry from ifaces and free all its components Change-Id: Ie3271a7ed086367e511d3a971f3b68cfc014115d Reviewed-on: https://code.wireshark.org/review/2965 Reviewed-by: Evan Huus <eapache@gmail.com>
2014-07-04 18:18:07 -04:00
extern void
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
capture_opts_del_iface(capture_options *capture_opts, unsigned if_index);
fix scan_local_interfaces() when we delete an interface from all_ifaces, delete it from ifaces as well remove its selected status if it was selected at the moment, an interface that was used for capturing before will never be removed from the list of interfaces even if it becomes unavailable as it remains in ifaces and will be re-added to all_ifaces in scan_local_interfaces() new helper function capture_opts_del_iface() to delete an entry from ifaces and free all its components Change-Id: Ie3271a7ed086367e511d3a971f3b68cfc014115d Reviewed-on: https://code.wireshark.org/review/2965 Reviewed-by: Evan Huus <eapache@gmail.com>
2014-07-04 18:18:07 -04:00
dumpcap: Allow retrieving interface list + caps Since we get both the non monitor mode and monitor mode link types lists of interfaces that can support it, we can allow the combination of retrieving the interface list and capabilities at the same time, because we don't need the user to specify whether to retrieve the list in or not in monitor mode. Allow any combination of retrieving the the interface list and the two capability types to be retrieved, but don't allow them in combination with the other run once arguments. When not in machine readable mode, print the capability types after the link lists (maybe we should interleave them). When in machine readable mode, add them to the serialized JSON. We don't yet pass both flags to dumpcap in capture child mode from the other applications yet. Related to #15082
2023-12-15 06:18:39 -05:00
extern void
interface_opts_free(interface_options *interface_opts);
extern interface_options*
interface_opts_from_if_info(capture_options *capture_opts, const if_info_t *if_info);
Third try. This time pipes and stdin are supported and the test scripts are passed. Use a global list containing all interfaces and only change properties of the entries when changes are made in the GUI. Do not misuse the list of interfaces specified on the command line anymore. This patch does not provide any new functionality, it just provides the base for future extensions like removing remote interface, mulitple airpcap devices and multiple pipes. This patch was provided by Irene Ruengeler. svn path=/trunk/; revision=40715
2012-01-25 13:04:32 +00:00
extern void
collect_ifaces(capture_options *capture_opts);
iface_lists: Do not reset capture options when refreshing interface list When rescanning the interface list (e.g. when manually refreshing or a new device is added or removed), do not destroy old devices but instead reuse it and preserve the user-set options. Do check the monitor mode and active dlt setting against the retrieved values to make sure that they are still supported. In particular this means that the capture filter is not reset. For many of the options, the value when creating a new device is taken from the prefs, and the prefs are updated when the Capture Options Dialog is closed (monitor mode, promiscuous mode, link layer type, snapshot length, buffer size), or when the Manage Interfaces Dialog is closed (hidden, user description), which mostly worked, unless a refresh occurred when those dialogs were open and changes had not been saved to prefs. Fix #16418
2024-01-10 09:38:35 -05:00
extern void
Convert capture_opts to C99 Ping #19116
2024-07-07 19:05:04 -04:00
capture_opts_free_link_row(void *elem);
iface_lists: Do not reset capture options when refreshing interface list When rescanning the interface list (e.g. when manually refreshing or a new device is added or removed), do not destroy old devices but instead reuse it and preserve the user-set options. Do check the monitor mode and active dlt setting against the retrieved values to make sure that they are still supported. In particular this means that the capture filter is not reset. For many of the options, the value when creating a new device is taken from the prefs, and the prefs are updated when the Capture Options Dialog is closed (monitor mode, promiscuous mode, link layer type, snapshot length, buffer size), or when the Manage Interfaces Dialog is closed (hidden, user description), which mostly worked, unless a refresh occurred when those dialogs were open and changes had not been saved to prefs. Fix #16418
2024-01-10 09:38:35 -05:00
Fix memory leaks in all_ifaces when interface list changes Valgrind report leaks of several allocations like these: 590 bytes in 50 blocks are possibly lost in loss record 29,818 of 31,670 at 0x4C2B6CD: malloc (in /usr/lib/valgrind/vgpreload_memcheck-amd64-linux.so) by 0xCB9C8A7: __vasprintf_chk (vasprintf_chk.c:82) by 0xA3D8DCA: g_vasprintf (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.3200.4) by 0xA3B846C: g_strdup_vprintf (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.3200.4) by 0xA3B850B: g_strdup_printf (in /lib/x86_64-linux-gnu/libglib-2.0.so.0.3200.4) by 0x6F4B51: scan_local_interfaces (iface_lists.c:254) by 0x6EF3D8: iface_mon_handler2 (iface_monitor.c:113) by 0xBE56F1D: ??? (in /lib/libnl-3.so.200.3.0) by 0xBA16F19: ??? (in /usr/lib/libnl-route-3.so.200.3.0) by 0xBE54E5E: nl_cache_parse (in /lib/libnl-3.so.200.3.0) by 0xBE585CA: nl_msg_parse (in /lib/libnl-3.so.200.3.0) by 0x6EF372: iface_mon_handler (iface_monitor.c:123) When the list of network interfaces is updated allocations done for global_capture_opts.all_ifaces elements leak memory. Fixed by introducing a helper function to be used for removing an interface_t element from all_ifaces array. While at it also fixed misc leaks when updating individual allocated records of all_ifaces elements. Change-Id: I035e6936a44edeef2ebe4780931c14cde99e93a4 Reviewed-on: https://code.wireshark.org/review/12209 Petri-Dish: Alexis La Goutte <alexis.lagoutte@gmail.com> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Peter Wu <peter@lekensteyn.nl>
2015-11-26 09:27:51 +01:00
extern void
capture_opts_free_interface_t(interface_t *device);
Add a #define for the default capture buffer size and use it. svn path=/trunk/; revision=47942
2013-02-28 15:27:56 +00:00
/* Default capture buffer size in Mbytes. */
#define DEFAULT_CAPTURE_BUFFER_SIZE 2
capture: Set update interval in capture opts, default to 100ms Reduce the default update interval for dumpcap to notify its parent of new packets (or to check if we've met file duration, etc.) from 500 ms to 100 ms, and put in the capture options. This makes the GUI appear to update more in real time rather than in visible batches of packets. This also reduces the amount of ring buffer space needed in cases where we're doing dissection, and dissection is able to keep up, but the files can be deleted before tshark gets to them because of the notification lag. (See #1650.)
2023-03-08 22:15:21 -05:00
/* Default update interval in milliseconds */
#define DEFAULT_UPDATE_INTERVAL 100
Add 'extern "C"' wrappers and #include guards to various header files. svn path=/trunk/; revision=40321
2011-12-29 00:08:47 +00:00
#ifdef __cplusplus
}
#endif /* __cplusplus */
cmdline: cleanup option string definitions Option string composition has grown organically over time and is depending on compilation options also. This results in somewhat complex macro definitions and the use of the string concatenation feature of the C compiler. This change tries to clean up some of this magic by removing definitions of empty strings and merging of adjacent strings. Change-Id: I968449ea9b564915bee468a0cac0e114983ceebe Reviewed-on: https://code.wireshark.org/review/35429 Reviewed-by: Jaap Keuter <jaap.keuter@xs4all.nl> Petri-Dish: Jaap Keuter <jaap.keuter@xs4all.nl> Tested-by: Petri Dish Buildbot Reviewed-by: Gerald Combs <gerald@wireshark.org>
2019-12-13 13:13:32 +01:00
#endif /* __CAPTURE_OPTS_H__ */
Always put editor-modelines at the end of the file ... ... to ensure that there are no potential issues with respect to editors limiting the number of lines scanned at the end of the file when checking for editor modelines. Change-Id: Ic85cbb108bb5159d6ec4116fea11f5eebb4e44a4 Reviewed-on: https://code.wireshark.org/review/4688 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-14 15:58:21 -04:00
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
/*
HTTPS (almost) everywhere. Change all wireshark.org URLs to use https. Fix some broken links while we're at it. Change-Id: I161bf8eeca43b8027605acea666032da86f5ea1c Reviewed-on: https://code.wireshark.org/review/34089 Reviewed-by: Guy Harris <guy@alum.mit.edu>
2019-07-26 11:43:17 -07:00
* Editor modelines - https://www.wireshark.org/tools/modelines.html
Add editor modelines; Adjust whitespace as needed. Change-Id: I4da7b335d905dbca10bbce03aa88e1cdeeb1f8ad Reviewed-on: https://code.wireshark.org/review/4626 Reviewed-by: Bill Meier <wmeier@newsguy.com>
2014-10-12 14:56:12 -04:00
*
* Local variables:
* c-basic-offset: 4
* tab-width: 8
* indent-tabs-mode: nil
* End:
*
* vi: set shiftwidth=4 tabstop=8 expandtab:
* :indentSize=4:tabSize=8:noTabs=true:
*/
Reference in New Issue Copy Permalink