2 * FreeRDP: A Remote Desktop Protocol Client
3 * pcap File Format Utils
5 * Copyright 2011 Marc-Andre Moreau <marcandre.moreau@gmail.com>
7 * Licensed under the Apache License, Version 2.0 (the "License");
8 * you may not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
11 * http://www.apache.org/licenses/LICENSE-2.0
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS,
15 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
27 #include <sys/timeb.h>
29 #if !defined(__MINGW32__) && !defined(__MINGW64__)
37 int gettimeofday(struct timeval* tp, void* tz)
39 struct _timeb timebuffer;
41 tp->tv_sec = (long) timebuffer.time;
42 tp->tv_usec = timebuffer.millitm * 1000;
47 #include <freerdp/types.h>
48 #include <freerdp/utils/memory.h>
50 #include <freerdp/utils/pcap.h>
52 #define PCAP_MAGIC 0xA1B2C3D4
54 void pcap_read_header(rdpPcap* pcap, pcap_header* header)
56 fread((void*) header, sizeof(pcap_header), 1, pcap->fp);
59 void pcap_write_header(rdpPcap* pcap, pcap_header* header)
61 fwrite((void*) header, sizeof(pcap_header), 1, pcap->fp);
64 void pcap_read_record_header(rdpPcap* pcap, pcap_record_header* record)
66 fread((void*) record, sizeof(pcap_record_header), 1, pcap->fp);
69 void pcap_write_record_header(rdpPcap* pcap, pcap_record_header* record)
71 fwrite((void*) record, sizeof(pcap_record_header), 1, pcap->fp);
74 void pcap_read_record(rdpPcap* pcap, pcap_record* record)
76 pcap_read_record_header(pcap, &record->header);
77 record->length = record->header.incl_len;
78 record->data = xmalloc(record->length);
79 fread(record->data, record->length, 1, pcap->fp);
82 void pcap_write_record(rdpPcap* pcap, pcap_record* record)
84 pcap_write_record_header(pcap, &record->header);
85 fwrite(record->data, record->length, 1, pcap->fp);
88 void pcap_add_record(rdpPcap* pcap, void* data, uint32 length)
93 if (pcap->tail == NULL)
95 pcap->tail = (pcap_record*) xzalloc(sizeof(pcap_record));
96 pcap->head = pcap->tail;
97 pcap->record = pcap->head;
102 record = (pcap_record*) xzalloc(sizeof(pcap_record));
103 pcap->tail->next = record;
107 if (pcap->record == NULL)
108 pcap->record = record;
111 record->length = length;
112 record->header.incl_len = length;
113 record->header.orig_len = length;
115 gettimeofday(&tp, 0);
116 record->header.ts_sec = tp.tv_sec;
117 record->header.ts_usec = tp.tv_usec;
120 boolean pcap_has_next_record(rdpPcap* pcap)
122 if (pcap->file_size - (ftell(pcap->fp)) <= 16)
128 boolean pcap_get_next_record_header(rdpPcap* pcap, pcap_record* record)
130 if (pcap_has_next_record(pcap) != true)
133 pcap_read_record_header(pcap, &record->header);
134 record->length = record->header.incl_len;
135 record->data = xmalloc(record->length);
140 boolean pcap_get_next_record_content(rdpPcap* pcap, pcap_record* record)
142 fread(record->data, record->length, 1, pcap->fp);
146 boolean pcap_get_next_record(rdpPcap* pcap, pcap_record* record)
148 if (pcap_has_next_record(pcap) != true)
151 pcap_read_record(pcap, record);
156 rdpPcap* pcap_open(char* name, boolean write)
160 FILE *pcap_fp = fopen(name, write ? "w+" : "r");
163 perror("opening pcap dump");
167 pcap = (rdpPcap*) xzalloc(sizeof(rdpPcap));
173 pcap->record_count = 0;
178 pcap->header.magic_number = 0xA1B2C3D4;
179 pcap->header.version_major = 2;
180 pcap->header.version_minor = 4;
181 pcap->header.thiszone = 0;
182 pcap->header.sigfigs = 0;
183 pcap->header.snaplen = 0xFFFFFFFF;
184 pcap->header.network = 0;
185 pcap_write_header(pcap, &pcap->header);
189 fseek(pcap->fp, 0, SEEK_END);
190 pcap->file_size = (int) ftell(pcap->fp);
191 fseek(pcap->fp, 0, SEEK_SET);
192 pcap_read_header(pcap, &pcap->header);
199 void pcap_flush(rdpPcap* pcap)
201 while (pcap->record != NULL)
203 pcap_write_record(pcap, pcap->record);
204 pcap->record = pcap->record->next;
207 if (pcap->fp != NULL)
211 void pcap_close(rdpPcap* pcap)
215 if (pcap->fp != NULL)