netsniff-ng: Rotate pcap files prematurely on SIGHUP
[netsniff-ng.git] / dissector.c
blob7c8ba39afbe420504967beec39a22c8ccdbd51dd
1 /*
2 * netsniff-ng - the packet sniffing beast
3 * Copyright 2009, 2010, 2011, 2012 Daniel Borkmann.
4 * Subject to the GPL, version 2.
5 */
7 #include <stdint.h>
8 #include <stdlib.h>
9 #include <unistd.h>
11 #include "built_in.h"
12 #include "tprintf.h"
13 #include "pkt_buff.h"
14 #include "proto.h"
15 #include "dissector.h"
16 #include "dissector_eth.h"
17 #include "dissector_80211.h"
18 #include "dissector_netlink.h"
19 #include "linktype.h"
21 int dissector_set_print_type(void *ptr, int type)
23 struct protocol *proto;
25 for (proto = ptr; proto; proto = proto->next) {
26 switch (type) {
27 case PRINT_NORM:
28 proto->process = proto->print_full;
29 break;
30 case PRINT_LESS:
31 proto->process = proto->print_less;
32 break;
33 default:
34 proto->process = NULL;
35 break;
39 return 0;
42 static void dissector_main(struct pkt_buff *pkt, struct protocol *start,
43 struct protocol *end)
45 struct protocol *proto;
47 if (!start)
48 return;
50 for (pkt->proto = start; pkt->proto; ) {
51 if (unlikely(!pkt->proto->process))
52 break;
54 proto = pkt->proto;
55 pkt->proto = NULL;
56 proto->process(pkt);
59 if (end && likely(end->process))
60 end->process(pkt);
63 void dissector_entry_point(uint8_t *packet, size_t len, int linktype, int mode)
65 struct protocol *proto_start, *proto_end;
66 struct pkt_buff *pkt;
68 if (mode == PRINT_NONE)
69 return;
71 pkt = pkt_alloc(packet, len);
72 pkt->link_type = linktype;
74 switch (linktype) {
75 case LINKTYPE_EN10MB:
76 case ___constant_swab32(LINKTYPE_EN10MB):
77 proto_start = dissector_get_ethernet_entry_point();
78 proto_end = dissector_get_ethernet_exit_point();
79 break;
80 case LINKTYPE_IEEE802_11_RADIOTAP:
81 case ___constant_swab32(LINKTYPE_IEEE802_11_RADIOTAP):
82 case LINKTYPE_IEEE802_11:
83 case ___constant_swab32(LINKTYPE_IEEE802_11):
84 proto_start = dissector_get_ieee80211_entry_point();
85 proto_end = dissector_get_ieee80211_exit_point();
86 break;
87 case LINKTYPE_NETLINK:
88 case ___constant_swab32(LINKTYPE_NETLINK):
89 proto_start = dissector_get_netlink_entry_point();
90 proto_end = dissector_get_netlink_exit_point();
91 break;
92 default:
93 proto_start = &none_ops;
94 proto_end = NULL;
95 break;
98 dissector_main(pkt, proto_start, proto_end);
100 switch (mode) {
101 case PRINT_HEX:
102 hex(pkt);
103 break;
104 case PRINT_ASCII:
105 ascii(pkt);
106 break;
107 case PRINT_HEX_ASCII:
108 hex_ascii(pkt);
109 break;
112 tprintf_flush();
113 pkt_free(pkt);
116 void dissector_init_all(int fnttype)
118 dissector_init_ethernet(fnttype);
119 dissector_init_ieee80211(fnttype);
120 dissector_init_netlink(fnttype);
123 void dissector_cleanup_all(void)
125 dissector_cleanup_ethernet();
126 dissector_cleanup_ieee80211();
127 dissector_cleanup_netlink();