2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 2000
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
25 static const char copyright
[] _U_
=
26 "@(#) Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 2000\n\
27 The Regents of the University of California. All rights reserved.\n";
39 #define THREAD_HANDLE HANDLE
40 #define THREAD_FUNC_ARG_TYPE LPVOID
41 #define THREAD_FUNC_RETURN_TYPE DWORD __stdcall
49 #define THREAD_HANDLE pthread_t
50 #define THREAD_FUNC_ARG_TYPE void *
51 #define THREAD_FUNC_RETURN_TYPE void *
54 #include <sys/types.h>
58 #include "pcap/funcattrs.h"
61 #include "portability.h"
64 static char *program_name
;
67 static void countme(u_char
*, const struct pcap_pkthdr
*, const u_char
*);
68 static void PCAP_NORETURN
usage(void);
69 static void PCAP_NORETURN
error(const char *, ...) PCAP_PRINTFLIKE(1, 2);
70 static void warning(const char *, ...) PCAP_PRINTFLIKE(1, 2);
71 static char *copy_argv(char **);
77 * Generate a string for a Win32-specific error (i.e. an error generated when
78 * calling a Win32 API).
79 * For errors occurred during standard C calls, we still use pcap_strerror()
81 #define ERRBUF_SIZE 1024
83 win32_strerror(DWORD error
)
85 static char errbuf
[ERRBUF_SIZE
+1];
88 FormatMessage(FORMAT_MESSAGE_FROM_SYSTEM
, NULL
, error
, 0, errbuf
,
92 * "FormatMessage()" "helpfully" sticks CR/LF at the end of the
93 * message. Get rid of it.
95 errlen
= strlen(errbuf
);
97 errbuf
[errlen
- 1] = '\0';
98 errbuf
[errlen
- 2] = '\0';
105 catch_sigusr1(int sig _U_
)
107 printf("Got SIGUSR1\n");
117 unsigned secs_remaining
;
121 secs_remaining
= secs
;
122 while (secs_remaining
!= 0)
123 secs_remaining
= sleep(secs_remaining
);
127 static THREAD_FUNC_RETURN_TYPE
128 capture_thread_func(THREAD_FUNC_ARG_TYPE arg
)
134 struct sigaction action
;
140 action
.sa_handler
= catch_sigusr1
;
141 action
.sa_mask
= mask
;
143 if (sigaction(SIGUSR1
, &action
, NULL
) == -1)
144 error("Can't catch SIGUSR1: %s", strerror(errno
));
147 printf("Listening on %s\n", device
);
150 status
= pcap_dispatch(pd
, -1, countme
,
151 (u_char
*)&packet_count
);
155 printf("%d packets seen, %d packets counted after pcap_dispatch returns\n",
156 status
, packet_count
);
158 printf("No packets seen by pcap_dispatch\n");
160 if (status
== PCAP_ERROR_BREAK
) {
162 * We got interrupted, so perhaps we didn't
163 * manage to finish a line we were printing.
164 * Print an extra newline, just in case.
167 printf("Loop got broken\n");
169 (void)fflush(stdout
);
170 if (status
== PCAP_ERROR
) {
174 (void)fprintf(stderr
, "%s: pcap_dispatch: %s\n",
175 program_name
, pcap_geterr(pd
));
181 main(int argc
, char **argv
)
184 register char *cp
, *cmdbuf
, *device
;
187 bpf_u_int32 localnet
, netmask
;
188 struct bpf_program fcode
;
189 char ebuf
[PCAP_ERRBUF_SIZE
];
191 THREAD_HANDLE capture_thread
;
197 if ((cp
= strrchr(argv
[0], '/')) != NULL
)
198 program_name
= cp
+ 1;
200 program_name
= argv
[0];
203 while ((op
= getopt(argc
, argv
, "i:n")) != -1) {
220 if (device
== NULL
) {
221 if (pcap_findalldevs(&devlist
, ebuf
) == -1)
224 error("no interfaces available for capture");
225 device
= strdup(devlist
->name
);
226 pcap_freealldevs(devlist
);
229 pd
= pcap_create(device
, ebuf
);
232 status
= pcap_set_snaplen(pd
, 65535);
234 error("%s: pcap_set_snaplen failed: %s",
235 device
, pcap_statustostr(status
));
236 status
= pcap_set_timeout(pd
, 5*60*1000);
238 error("%s: pcap_set_timeout failed: %s",
239 device
, pcap_statustostr(status
));
240 status
= pcap_activate(pd
);
243 * pcap_activate() failed.
245 error("%s: %s\n(%s)", device
,
246 pcap_statustostr(status
), pcap_geterr(pd
));
247 } else if (status
> 0) {
249 * pcap_activate() succeeded, but it's warning us
250 * of a problem it had.
252 warning("%s: %s\n(%s)", device
,
253 pcap_statustostr(status
), pcap_geterr(pd
));
255 if (pcap_lookupnet(device
, &localnet
, &netmask
, ebuf
) < 0) {
260 cmdbuf
= copy_argv(&argv
[optind
]);
262 if (pcap_compile(pd
, &fcode
, cmdbuf
, 1, netmask
) < 0)
263 error("%s", pcap_geterr(pd
));
265 if (pcap_setfilter(pd
, &fcode
) < 0)
266 error("%s", pcap_geterr(pd
));
269 capture_thread
= CreateThread(NULL
, 0, capture_thread_func
, device
,
271 if (capture_thread
== NULL
)
272 error("Can't create capture thread: %s",
273 win32_strerror(GetLastError()));
275 status
= pthread_create(&capture_thread
, NULL
, capture_thread_func
,
278 error("Can't create capture thread: %s", strerror(status
));
281 printf("Doing pcap_breakloop()\n");
285 * Force a wakeup in the capture thread.
287 * On some platforms, with some devices,, pcap_breakloop()
288 * can't do that itself. On Windows, poke the device's
289 * event handle; on UN*X, send a SIGUSR1 to the thread.
292 printf("Setting event\n");
293 if (!SetEvent(pcap_getevent(pd
)))
294 error("Can't set event for pcap_t: %s",
295 win32_strerror(GetLastError()));
297 printf("Sending SIGUSR1\n");
298 status
= pthread_kill(capture_thread
, SIGUSR1
);
300 warning("Can't interrupt capture thread: %s",
306 * Now wait for the capture thread to terminate.
309 if (WaitForSingleObject(capture_thread
, INFINITE
) == WAIT_FAILED
)
310 error("Wait for thread termination failed: %s",
311 win32_strerror(GetLastError()));
312 CloseHandle(capture_thread
);
314 status
= pthread_join(capture_thread
, &retval
);
316 error("Wait for thread termination failed: %s",
321 pcap_freecode(&fcode
);
322 exit(status
== -1 ? 1 : 0);
326 countme(u_char
*user
, const struct pcap_pkthdr
*h _U_
, const u_char
*sp _U_
)
328 int *counterp
= (int *)user
;
336 (void)fprintf(stderr
, "Usage: %s [ -n ] [ -i interface ] [ expression ]\n",
343 error(const char *fmt
, ...)
347 (void)fprintf(stderr
, "%s: ", program_name
);
349 (void)vfprintf(stderr
, fmt
, ap
);
354 (void)fputc('\n', stderr
);
362 warning(const char *fmt
, ...)
366 (void)fprintf(stderr
, "%s: WARNING: ", program_name
);
368 (void)vfprintf(stderr
, fmt
, ap
);
373 (void)fputc('\n', stderr
);
378 * Copy arg vector into a new buffer, concatenating arguments with spaces.
381 copy_argv(register char **argv
)
384 register size_t len
= 0;
393 len
+= strlen(*p
++) + 1;
395 buf
= (char *)malloc(len
);
397 error("copy_argv: malloc");
401 while ((src
= *p
++) != NULL
) {
402 while ((*dst
++ = *src
++) != '\0')