2 * Definitions for packet capture windows
6 * Ethereal - Network traffic analyzer
7 * By Gerald Combs <gerald@ethereal.com>
8 * Copyright 1998 Gerald Combs
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License
12 * as published by the Free Software Foundation; either version 2
13 * of the License, or (at your option) any later version.
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
20 * You should have received a copy of the GNU General Public License
21 * along with this program; if not, write to the Free Software
22 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
25 /* This file should only be included if libpcap is present */
31 * Capture related things.
34 /** Name we give to the child process when doing a "-S" capture. */
35 #define CHILD_NAME "ethereal-capture"
37 /** Capture options coming from user interface */
38 typedef struct capture_options_tag {
40 void *cf; /**< handle to cfile (note: untyped handle) */
41 gchar *cfilter; /**< Capture filter string */
42 gchar *iface; /**< the network interface to capture from */
45 int buffer_size; /**< the capture buffer size (MB) */
47 gboolean has_snaplen; /**< TRUE if maximum capture packet length
49 int snaplen; /**< Maximum captured packet length */
50 gboolean promisc_mode; /**< Capture in promiscuous mode */
51 int linktype; /**< Data link type to use, or -1 for
53 gchar *save_file; /**< the capture file name */
56 gboolean real_time_mode;/**< Update list of packets in real time */
57 gboolean show_info; /**< show the info dialog */
58 gboolean quit_after_cap; /** Makes a "capture only mode". Implies -k */
60 /* multiple files (and ringbuffer) */
61 gboolean multi_files_on; /**< TRUE if ring buffer in use */
63 gboolean has_file_duration; /**< TRUE if ring duration specified */
64 gint32 file_duration; /* Switch file after n seconds */
65 gboolean has_ring_num_files;/**< TRUE if ring num_files specified */
66 guint32 ring_num_files; /**< Number of multiple buffer files */
68 /* autostop conditions */
69 gboolean has_autostop_files;/**< TRUE if maximum number of capture files
71 gint32 autostop_files; /**< Maximum number of capture files */
73 gboolean has_autostop_packets; /**< TRUE if maximum packet count is
75 int autostop_packets; /**< Maximum packet count */
76 gboolean has_autostop_filesize; /**< TRUE if maximum capture file size
78 gint32 autostop_filesize; /**< Maximum capture file size */
79 gboolean has_autostop_duration; /**< TRUE if maximum capture duration
81 gint32 autostop_duration; /**< Maximum capture duration */
83 /* internally used (don't touch from outside) */
84 int fork_child; /**< If not -1, in parent, process ID of child */
86 int signal_pipe_fd; /**< the pipe to signal the child */
91 /* initialize the capture_options with some reasonable values */
93 capture_opts_init(capture_options *capture_opts, void *cfile);
96 capture_opts_add_opt(capture_options *capture_opts, const char *appname, int opt, const char *optarg, gboolean *start_capture);
99 * Start a capture session.
101 * @param capture_opts the numerous capture options
102 * @return TRUE if the capture starts successfully, FALSE otherwise.
104 extern gboolean capture_start(capture_options *capture_opts);
106 /** Stop a capture session (usually from a menu item). */
107 extern void capture_stop(capture_options *capture_opts);
109 /** Terminate the capture child cleanly when exiting. */
110 extern void capture_kill_child(capture_options *capture_opts);
113 * Capture child told us, we have a new (or the first) capture file.
115 extern gboolean capture_input_new_file(capture_options *capture_opts, gchar *new_file);
118 * Capture child told us, we have new packets to read.
120 extern void capture_input_new_packets(capture_options *capture_opts, int to_read);
123 * Capture child closed it's side ot the pipe, do the required cleanup.
125 extern void capture_input_closed(capture_options *capture_opts);
129 /** Do the low-level work of a capture (start the capture child).
130 * Returns TRUE if it succeeds, FALSE otherwise. */
131 extern int capture_loop_start(capture_options *capture_opts, gboolean *stats_known, struct pcap_stat *stats);
133 /** Stop a low-level capture (stops the capture child). */
134 extern void capture_loop_stop(void);
138 /** Current Capture info. */
141 gpointer callback_data; /**< capture callback handle */
142 gpointer ui; /**< user interfaces own handle */
145 packet_counts *counts; /**< protocol specific counters */
146 time_t running_time; /**< running time since last update */
147 gint new_packets; /**< packets since last update */
151 /** Create the capture info dialog */
152 extern void capture_info_create(
156 /** Update the capture info counters in the dialog */
157 extern void capture_info_update(
158 capture_info *cinfo);
160 /** Destroy the capture info dialog again */
161 extern void capture_info_destroy(
162 capture_info *cinfo);
165 #endif /* capture.h */