2 * Copyright (c) 2006 Paolo Abeni (Italy)
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 * notice, this list of conditions and the following disclaimer in the
13 * documentation and/or other materials provided with the distribution.
14 * 3. The name of the author may not be used to endorse or promote
15 * products derived from this software without specific prior written
18 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
19 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
20 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
21 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
22 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
23 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
24 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
25 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
26 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
27 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
28 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30 * USB sniffing API implementation for Linux platform
31 * By Paolo Abeni <paolo.abeni@email.it>
32 * Modifications: Kris Katterjohn <katterjohn@gmail.com>
36 static const char rcsid
[] _U_
=
37 "@(#) $Header: /tcpdump/master/libpcap/pcap-usb-linux.c,v 1.33 2008-12-23 21:38:50 guy Exp $ (LBL)";
45 #include "pcap-usb-linux.h"
48 #ifdef NEED_STRERROR_H
60 #include <netinet/in.h>
61 #include <sys/ioctl.h>
63 #ifdef HAVE_LINUX_USBDEVICE_FS_H
64 #include <linux/usbdevice_fs.h>
67 #define USB_IFACE "usbmon"
68 #define USB_TEXT_DIR "/sys/kernel/debug/usbmon"
69 #define SYS_USB_BUS_DIR "/sys/bus/usb/devices"
70 #define PROC_USB_BUS_DIR "/proc/bus/usb"
71 #define USB_LINE_LEN 4096
73 #if __BYTE_ORDER == __LITTLE_ENDIAN
78 #define htols(s) bswap_16(s)
79 #define htoll(l) bswap_32(l)
80 #define htol64(ll) bswap_64(ll)
83 struct mon_bin_stats
{
91 size_t data_len
; /* Length of data (can be zero) */
94 struct mon_bin_mfetch
{
95 int32_t *offvec
; /* Vector of events fetched */
96 int32_t nfetch
; /* Number of events to fetch (out: fetched) */
97 int32_t nflush
; /* Number of events to flush */
100 #define MON_IOC_MAGIC 0x92
102 #define MON_IOCQ_URB_LEN _IO(MON_IOC_MAGIC, 1)
103 #define MON_IOCX_URB _IOWR(MON_IOC_MAGIC, 2, struct mon_bin_hdr)
104 #define MON_IOCG_STATS _IOR(MON_IOC_MAGIC, 3, struct mon_bin_stats)
105 #define MON_IOCT_RING_SIZE _IO(MON_IOC_MAGIC, 4)
106 #define MON_IOCQ_RING_SIZE _IO(MON_IOC_MAGIC, 5)
107 #define MON_IOCX_GET _IOW(MON_IOC_MAGIC, 6, struct mon_bin_get)
108 #define MON_IOCX_MFETCH _IOWR(MON_IOC_MAGIC, 7, struct mon_bin_mfetch)
109 #define MON_IOCH_MFLUSH _IO(MON_IOC_MAGIC, 8)
111 #define MON_BIN_SETUP 0x1 /* setup hdr is present*/
112 #define MON_BIN_SETUP_ZERO 0x2 /* setup buffer is not available */
113 #define MON_BIN_DATA_ZERO 0x4 /* data buffer is not available */
114 #define MON_BIN_ERROR 0x8
116 /* forward declaration */
117 static int usb_activate(pcap_t
*);
118 static int usb_stats_linux(pcap_t
*, struct pcap_stat
*);
119 static int usb_stats_linux_bin(pcap_t
*, struct pcap_stat
*);
120 static int usb_read_linux(pcap_t
*, int , pcap_handler
, u_char
*);
121 static int usb_read_linux_bin(pcap_t
*, int , pcap_handler
, u_char
*);
122 static int usb_read_linux_mmap(pcap_t
*, int , pcap_handler
, u_char
*);
123 static int usb_inject_linux(pcap_t
*, const void *, size_t);
124 static int usb_setfilter_linux(pcap_t
*, struct bpf_program
*);
125 static int usb_setdirection_linux(pcap_t
*, pcap_direction_t
);
126 static void usb_cleanup_linux_mmap(pcap_t
*);
128 /* facility to add an USB device to the device list*/
130 usb_dev_add(pcap_if_t
** alldevsp
, int n
, char *err_str
)
134 snprintf(dev_name
, 10, USB_IFACE
"%d", n
);
135 snprintf(dev_descr
, 30, "USB bus number %d", n
);
137 if (pcap_add_if(alldevsp
, dev_name
, 0,
138 dev_descr
, err_str
) < 0)
144 usb_platform_finddevs(pcap_if_t
**alldevsp
, char *err_str
)
153 /* try scanning sysfs usb bus directory */
154 dir
= opendir(SYS_USB_BUS_DIR
);
156 while ((ret
== 0) && ((data
= readdir(dir
)) != 0)) {
159 if (strncmp(name
, "usb", 3) != 0)
162 if (sscanf(&name
[3], "%d", &n
) == 0)
165 ret
= usb_dev_add(alldevsp
, n
, err_str
);
172 /* that didn't work; try scanning procfs usb bus directory */
173 dir
= opendir(PROC_USB_BUS_DIR
);
175 while ((ret
== 0) && ((data
= readdir(dir
)) != 0)) {
179 /* if this file name does not end with a number it's not of our interest */
180 if ((len
< 1) || !isdigit(name
[--len
]))
182 while (isdigit(name
[--len
]));
183 if (sscanf(&name
[len
+1], "%d", &n
) != 1)
186 ret
= usb_dev_add(alldevsp
, n
, err_str
);
193 /* neither of them worked */
198 int usb_mmap(pcap_t
* handle
)
200 int len
= ioctl(handle
->fd
, MON_IOCQ_RING_SIZE
);
204 handle
->md
.mmapbuflen
= len
;
205 handle
->md
.mmapbuf
= mmap(0, handle
->md
.mmapbuflen
, PROT_READ
,
206 MAP_SHARED
, handle
->fd
, 0);
207 return handle
->md
.mmapbuf
!= MAP_FAILED
;
210 #define CTRL_TIMEOUT (5*1000) /* milliseconds */
212 #define USB_DIR_IN 0x80
213 #define USB_TYPE_STANDARD 0x00
214 #define USB_RECIP_DEVICE 0x00
216 #define USB_REQ_GET_DESCRIPTOR 6
218 #define USB_DT_DEVICE 1
220 /* probe the descriptors of the devices attached to the bus */
221 /* the descriptors will end up in the captured packet stream */
222 /* and be decoded by external apps like wireshark */
223 /* without these identifying probes packet data can't be fully decoded */
225 probe_devices(int bus
)
227 struct usbdevfs_ctrltransfer ctrl
;
233 /* scan usb bus directories for device nodes */
234 snprintf(buf
, sizeof(buf
), "/dev/bus/usb/%03d", bus
);
239 while ((ret
>= 0) && ((data
= readdir(dir
)) != 0)) {
241 char* name
= data
->d_name
;
246 snprintf(buf
, sizeof(buf
), "/dev/bus/usb/%03d/%s", bus
, data
->d_name
);
248 fd
= open(buf
, O_RDWR
);
253 * Sigh. Different kernels have different member names
254 * for this structure.
256 #ifdef HAVE_USBDEVFS_CTRLTRANSFER_BREQUESTTYPE
257 ctrl
.bRequestType
= USB_DIR_IN
| USB_TYPE_STANDARD
| USB_RECIP_DEVICE
;
258 ctrl
.bRequest
= USB_REQ_GET_DESCRIPTOR
;
259 ctrl
.wValue
= USB_DT_DEVICE
<< 8;
261 ctrl
.wLength
= sizeof(buf
);
263 ctrl
.requesttype
= USB_DIR_IN
| USB_TYPE_STANDARD
| USB_RECIP_DEVICE
;
264 ctrl
.request
= USB_REQ_GET_DESCRIPTOR
;
265 ctrl
.value
= USB_DT_DEVICE
<< 8;
267 ctrl
.length
= sizeof(buf
);
270 ctrl
.timeout
= CTRL_TIMEOUT
;
272 ret
= ioctl(fd
, USBDEVFS_CONTROL
, &ctrl
);
280 usb_create(const char *device
, char *ebuf
)
284 p
= pcap_create_common(device
, ebuf
);
288 p
->activate_op
= usb_activate
;
293 usb_activate(pcap_t
* handle
)
295 char full_path
[USB_LINE_LEN
];
297 /* Initialize some components of the pcap structure. */
298 handle
->bufsize
= handle
->snapshot
;
300 handle
->linktype
= DLT_USB_LINUX
;
302 handle
->inject_op
= usb_inject_linux
;
303 handle
->setfilter_op
= usb_setfilter_linux
;
304 handle
->setdirection_op
= usb_setdirection_linux
;
305 handle
->set_datalink_op
= NULL
; /* can't change data link type */
306 handle
->getnonblock_op
= pcap_getnonblock_fd
;
307 handle
->setnonblock_op
= pcap_setnonblock_fd
;
309 /*get usb bus index from device name */
310 if (sscanf(handle
->opt
.source
, USB_IFACE
"%d", &handle
->md
.ifindex
) != 1)
312 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
313 "Can't get USB bus index from %s", handle
->opt
.source
);
317 /*now select the read method: try to open binary interface */
318 snprintf(full_path
, USB_LINE_LEN
, LINUX_USB_MON_DEV
"%d", handle
->md
.ifindex
);
319 handle
->fd
= open(full_path
, O_RDONLY
, 0);
322 if (handle
->opt
.rfmon
) {
324 * Monitor mode doesn't apply to USB devices.
327 return PCAP_ERROR_RFMON_NOTSUP
;
330 /* binary api is available, try to use fast mmap access */
331 if (usb_mmap(handle
)) {
332 handle
->linktype
= DLT_USB_LINUX_MMAPPED
;
333 handle
->stats_op
= usb_stats_linux_bin
;
334 handle
->read_op
= usb_read_linux_mmap
;
335 handle
->cleanup_op
= usb_cleanup_linux_mmap
;
336 probe_devices(handle
->md
.ifindex
);
339 * "handle->fd" is a real file, so "select()" and
340 * "poll()" work on it.
342 handle
->selectable_fd
= handle
->fd
;
346 /* can't mmap, use plain binary interface access */
347 handle
->stats_op
= usb_stats_linux_bin
;
348 handle
->read_op
= usb_read_linux_bin
;
349 probe_devices(handle
->md
.ifindex
);
352 /*Binary interface not available, try open text interface */
353 snprintf(full_path
, USB_LINE_LEN
, USB_TEXT_DIR
"/%dt", handle
->md
.ifindex
);
354 handle
->fd
= open(full_path
, O_RDONLY
, 0);
357 /* no more fallback, give it up*/
358 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
359 "Can't open USB bus file %s: %s", full_path
, strerror(errno
));
363 if (handle
->opt
.rfmon
) {
365 * Monitor mode doesn't apply to USB devices.
368 return PCAP_ERROR_RFMON_NOTSUP
;
371 handle
->stats_op
= usb_stats_linux
;
372 handle
->read_op
= usb_read_linux
;
376 * "handle->fd" is a real file, so "select()" and "poll()"
379 handle
->selectable_fd
= handle
->fd
;
381 /* for plain binary access and text access we need to allocate the read
383 handle
->buffer
= malloc(handle
->bufsize
);
384 if (!handle
->buffer
) {
385 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
386 "malloc: %s", pcap_strerror(errno
));
395 return c
< 'A' ? c
- '0': ((c
<'a') ? c
- 'A' + 10: c
-'a'+10);
399 * see <linux-kernel-source>/Documentation/usb/usbmon.txt and
400 * <linux-kernel-source>/drivers/usb/mon/mon_text.c for urb string
404 usb_read_linux(pcap_t
*handle
, int max_packets
, pcap_handler callback
, u_char
*user
)
407 * /usr/src/linux/Documentation/usb/usbmon.txt
411 int tag
, cnt
, ep_num
, dev_addr
, dummy
, ret
, urb_len
, data_len
;
412 char etype
, pipeid1
, pipeid2
, status
[16], urb_tag
, line
[USB_LINE_LEN
];
414 u_char
* rawdata
= handle
->buffer
;
415 struct pcap_pkthdr pkth
;
416 pcap_usb_header
* uhdr
= (pcap_usb_header
*)handle
->buffer
;
417 u_char urb_transfer
=0;
420 /* ignore interrupt system call errors */
422 ret
= read(handle
->fd
, line
, USB_LINE_LEN
- 1);
423 if (handle
->break_loop
)
425 handle
->break_loop
= 0;
428 } while ((ret
== -1) && (errno
== EINTR
));
432 return 0; /* no data there */
434 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
435 "Can't read from fd %d: %s", handle
->fd
, strerror(errno
));
439 /* read urb header; %n argument may increment return value, but it's
440 * not mandatory, so does not count on it*/
442 ret
= sscanf(string
, "%x %d %c %c%c:%d:%d %s%n", &tag
, ×tamp
, &etype
,
443 &pipeid1
, &pipeid2
, &dev_addr
, &ep_num
, status
,
447 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
448 "Can't parse USB bus message '%s', too few tokens (expected 8 got %d)",
453 uhdr
->device_address
= dev_addr
;
454 uhdr
->bus_id
= handle
->md
.ifindex
;
458 /* don't use usbmon provided timestamp, since it have low precision*/
459 if (gettimeofday(&pkth
.ts
, NULL
) < 0)
461 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
462 "Can't get timestamp for message '%s' %d:%s",
463 string
, errno
, strerror(errno
));
466 uhdr
->ts_sec
= pkth
.ts
.tv_sec
;
467 uhdr
->ts_usec
= pkth
.ts
.tv_usec
;
469 /* parse endpoint information */
471 urb_transfer
= URB_CONTROL
;
472 else if (pipeid1
== 'Z')
473 urb_transfer
= URB_ISOCHRONOUS
;
474 else if (pipeid1
== 'I')
475 urb_transfer
= URB_INTERRUPT
;
476 else if (pipeid1
== 'B')
477 urb_transfer
= URB_BULK
;
478 if (pipeid2
== 'i') {
479 ep_num
|= URB_TRANSFER_IN
;
483 incoming
= !incoming
;
488 if (handle
->direction
== PCAP_D_OUT
)
492 if (handle
->direction
== PCAP_D_IN
)
494 uhdr
->event_type
= etype
;
495 uhdr
->transfer_type
= urb_transfer
;
496 uhdr
->endpoint_number
= ep_num
;
497 pkth
.caplen
= sizeof(pcap_usb_header
);
498 rawdata
+= sizeof(pcap_usb_header
);
500 /* check if this is a setup packet */
501 ret
= sscanf(status
, "%d", &dummy
);
504 /* this a setup packet, setup data can be filled with underscore if
505 * usbmon has not been able to read them, so we must parse this fields as
507 pcap_usb_setup
* shdr
;
508 char str1
[3], str2
[3], str3
[5], str4
[5], str5
[5];
509 ret
= sscanf(string
, "%s %s %s %s %s%n", str1
, str2
, str3
, str4
,
513 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
514 "Can't parse USB bus message '%s', too few tokens (expected 5 got %d)",
520 /* try to convert to corresponding integer */
522 shdr
->bmRequestType
= strtoul(str1
, 0, 16);
523 shdr
->bRequest
= strtoul(str2
, 0, 16);
524 shdr
->wValue
= htols(strtoul(str3
, 0, 16));
525 shdr
->wIndex
= htols(strtoul(str4
, 0, 16));
526 shdr
->wLength
= htols(strtoul(str5
, 0, 16));
528 uhdr
->setup_flag
= 0;
531 uhdr
->setup_flag
= 1;
534 ret
= sscanf(string
, " %d%n", &urb_len
, &cnt
);
537 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
538 "Can't parse urb length from '%s'", string
);
543 /* urb tag is not present if urb length is 0, so we can stop here
545 pkth
.len
= urb_len
+pkth
.caplen
;
546 uhdr
->urb_len
= urb_len
;
549 if (uhdr
->urb_len
== 0)
552 /* check for data presence; data is present if and only if urb tag is '=' */
553 if (sscanf(string
, " %c", &urb_tag
) != 1)
555 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
556 "Can't parse urb tag from '%s'", string
);
563 /* skip urb tag and following space */
566 /* if we reach this point we got some urb data*/
569 /* read all urb data; if urb length is greater then the usbmon internal
570 * buffer length used by the kernel to spool the URB, we get only
571 * a partial information.
572 * At least until linux 2.6.17 there is no way to set usbmon intenal buffer
573 * length and default value is 130. */
574 while ((string
[0] != 0) && (string
[1] != 0) && (pkth
.caplen
< handle
->snapshot
))
576 rawdata
[0] = ascii_to_int(string
[0]) * 16 + ascii_to_int(string
[1]);
579 if (string
[0] == ' ')
586 uhdr
->data_len
= data_len
;
587 handle
->md
.packets_read
++;
588 if (pkth
.caplen
> handle
->snapshot
)
589 pkth
.caplen
= handle
->snapshot
;
591 callback(user
, &pkth
, handle
->buffer
);
596 usb_inject_linux(pcap_t
*handle
, const void *buf
, size_t size
)
598 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
, "inject not supported on "
604 usb_stats_linux(pcap_t
*handle
, struct pcap_stat
*stats
)
606 int dummy
, ret
, consumed
, cnt
;
607 char string
[USB_LINE_LEN
];
608 char token
[USB_LINE_LEN
];
612 snprintf(string
, USB_LINE_LEN
, USB_TEXT_DIR
"/%ds", handle
->md
.ifindex
);
613 fd
= open(string
, O_RDONLY
, 0);
616 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
617 "Can't open USB stats file %s: %s",
618 string
, strerror(errno
));
622 /* read stats line */
624 ret
= read(fd
, string
, USB_LINE_LEN
-1);
625 } while ((ret
== -1) && (errno
== EINTR
));
630 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
631 "Can't read stats from fd %d ", fd
);
636 /* extract info on dropped urbs */
637 for (consumed
=0; consumed
< ret
; ) {
638 /* from the sscanf man page:
639 * The C standard says: "Execution of a %n directive does
640 * not increment the assignment count returned at the completion
641 * of execution" but the Corrigendum seems to contradict this.
642 * Do not make any assumptions on the effect of %n conversions
643 * on the return value and explicitly check for cnt assignmet*/
647 ntok
= sscanf(ptr
, "%s%n", token
, &cnt
);
648 if ((ntok
< 1) || (cnt
< 0))
652 if (strcmp(token
, "nreaders") == 0)
653 ret
= sscanf(ptr
, "%d", &stats
->ps_drop
);
655 ret
= sscanf(ptr
, "%d", &dummy
);
662 stats
->ps_recv
= handle
->md
.packets_read
;
663 stats
->ps_ifdrop
= 0;
668 usb_setfilter_linux(pcap_t
*p
, struct bpf_program
*fp
)
674 usb_setdirection_linux(pcap_t
*p
, pcap_direction_t d
)
682 usb_stats_linux_bin(pcap_t
*handle
, struct pcap_stat
*stats
)
685 struct mon_bin_stats st
;
686 ret
= ioctl(handle
->fd
, MON_IOCG_STATS
, &st
);
689 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
690 "Can't read stats from fd %d:%s ", handle
->fd
, strerror(errno
));
694 stats
->ps_recv
= handle
->md
.packets_read
+ st
.queued
;
695 stats
->ps_ifdrop
= 0;
696 stats
->ps_drop
= st
.dropped
;
701 * see <linux-kernel-source>/Documentation/usb/usbmon.txt and
702 * <linux-kernel-source>/drivers/usb/mon/mon_bin.c binary ABI
705 usb_read_linux_bin(pcap_t
*handle
, int max_packets
, pcap_handler callback
, u_char
*user
)
707 struct mon_bin_get info
;
709 struct pcap_pkthdr pkth
;
710 int clen
= handle
->snapshot
- sizeof(pcap_usb_header
);
712 /* the usb header is going to be part of 'packet' data*/
713 info
.hdr
= (pcap_usb_header
*) handle
->buffer
;
714 info
.data
= handle
->buffer
+ sizeof(pcap_usb_header
);
715 info
.data_len
= clen
;
717 /* ignore interrupt system call errors */
719 ret
= ioctl(handle
->fd
, MON_IOCX_GET
, &info
);
720 if (handle
->break_loop
)
722 handle
->break_loop
= 0;
725 } while ((ret
== -1) && (errno
== EINTR
));
729 return 0; /* no data there */
731 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
732 "Can't read from fd %d: %s", handle
->fd
, strerror(errno
));
736 /* we can get less that than really captured from kernel, depending on
737 * snaplen, so adjust header accordingly */
738 if (info
.hdr
->data_len
< clen
)
739 clen
= info
.hdr
->data_len
;
740 info
.hdr
->data_len
= clen
;
741 pkth
.caplen
= clen
+ sizeof(pcap_usb_header
);
742 pkth
.len
= info
.hdr
->data_len
+ sizeof(pcap_usb_header
);
743 pkth
.ts
.tv_sec
= info
.hdr
->ts_sec
;
744 pkth
.ts
.tv_usec
= info
.hdr
->ts_usec
;
746 handle
->md
.packets_read
++;
747 callback(user
, &pkth
, handle
->buffer
);
752 * see <linux-kernel-source>/Documentation/usb/usbmon.txt and
753 * <linux-kernel-source>/drivers/usb/mon/mon_bin.c binary ABI
757 usb_read_linux_mmap(pcap_t
*handle
, int max_packets
, pcap_handler callback
, u_char
*user
)
759 struct mon_bin_mfetch fetch
;
760 int32_t vec
[VEC_SIZE
];
761 struct pcap_pkthdr pkth
;
762 pcap_usb_header
* hdr
;
767 max_clen
= handle
->snapshot
- sizeof(pcap_usb_header
);
771 int limit
= max_packets
- packets
;
774 if (limit
> VEC_SIZE
)
777 /* try to fetch as many events as possible*/
779 fetch
.nfetch
= limit
;
780 fetch
.nflush
= nflush
;
781 /* ignore interrupt system call errors */
783 ret
= ioctl(handle
->fd
, MON_IOCX_MFETCH
, &fetch
);
784 if (handle
->break_loop
)
786 handle
->break_loop
= 0;
789 } while ((ret
== -1) && (errno
== EINTR
));
793 return 0; /* no data there */
795 snprintf(handle
->errbuf
, PCAP_ERRBUF_SIZE
,
796 "Can't mfetch fd %d: %s", handle
->fd
, strerror(errno
));
800 /* keep track of processed events, we will flush them later */
801 nflush
= fetch
.nfetch
;
802 for (i
=0; i
<fetch
.nfetch
; ++i
) {
804 hdr
= (pcap_usb_header
*) &handle
->md
.mmapbuf
[vec
[i
]];
805 if (hdr
->event_type
== '@')
808 /* we can get less that than really captured from kernel, depending on
809 * snaplen, so adjust header accordingly */
811 if (hdr
->data_len
< clen
)
812 clen
= hdr
->data_len
;
814 /* get packet info from header*/
815 pkth
.caplen
= clen
+ sizeof(pcap_usb_header_mmapped
);
816 pkth
.len
= hdr
->data_len
+ sizeof(pcap_usb_header_mmapped
);
817 pkth
.ts
.tv_sec
= hdr
->ts_sec
;
818 pkth
.ts
.tv_usec
= hdr
->ts_usec
;
820 handle
->md
.packets_read
++;
821 callback(user
, &pkth
, (u_char
*) hdr
);
825 /* with max_packets <= 0 we stop afer the first chunk*/
826 if ((max_packets
<= 0) || (packets
== max_packets
))
830 /* flush pending events*/
831 ioctl(handle
->fd
, MON_IOCH_MFLUSH
, nflush
);
836 usb_cleanup_linux_mmap(pcap_t
* handle
)
838 /* if we have a memory-mapped buffer, unmap it */
839 if (handle
->md
.mmapbuf
!= NULL
) {
840 munmap(handle
->md
.mmapbuf
, handle
->md
.mmapbuflen
);
841 handle
->md
.mmapbuf
= NULL
;
843 pcap_cleanup_live_common(handle
);