Skip to content
This repository has been archived by the owner on Nov 5, 2020. It is now read-only.

Read directly from network device #13

Open
wants to merge 8 commits into
base: master
Choose a base branch
from

Commits on Jul 17, 2015

  1. pac-driver: Add switch -n to read from network device

    Uses libpcap and hands each packet to the parser.
    blipp committed Jul 17, 2015
    Configuration menu
    Copy the full SHA
    0f5fe72 View commit details
    Browse the repository at this point in the history
  2. pac-driver: Provide caplen to Hilti

    Grammars often depend on the knowledge of the length of the content.
    This is especially the case for Ethernet packets. Thus, the modified
    pac-driver needs to provide this information to Hilti. The caplen
    provided by libpcap as uint32_t is added at the very beginning to the
    input of Hilti. In a grammar, this is the first data to be interpreted.
    By default, a grammar expects big endian; thus, caplen is converted
    accordingly.
    blipp committed Jul 17, 2015
    Configuration menu
    Copy the full SHA
    c488d1e View commit details
    Browse the repository at this point in the history

Commits on Jul 27, 2015

  1. Configuration menu
    Copy the full SHA
    4a104e6 View commit details
    Browse the repository at this point in the history

Commits on Jul 29, 2015

  1. Configuration menu
    Copy the full SHA
    2f14c4f View commit details
    Browse the repository at this point in the history

Commits on Aug 3, 2015

  1. pac-driver: Print only the packet's first bytes in debug output

    Chosen such that it should only take up one line,
    this keeps the output clearer.
    blipp committed Aug 3, 2015
    Configuration menu
    Copy the full SHA
    bd7dc1f View commit details
    Browse the repository at this point in the history
  2. pac-driver: Add possibility to read pcap files

    Add a new command line option -f. The file is read using libpcap. This
    shares a lot of code with listening on a network interface.
    
    The grammar networkinterface.pac2 was renamed to libpcap.pac2 because it
    is now used for both reading from pcap files and network devices.
    
    There is now an ambiguity with parsers/libpcap.pac2 and
    parsers/pcap.pac2, there should be a way to resolve this.
    blipp committed Aug 3, 2015
    Configuration menu
    Copy the full SHA
    eae9e4a View commit details
    Browse the repository at this point in the history

Commits on Aug 21, 2015

  1. Hand over timestamp of packet capture to the grammar

    When using libpcap to read from a network interface or a pcap file,
    hand over the packet capture time and also the total length of the
    packet; not only the captured length.
    
    Currently, the timestamps are handled as being 64 bit. This has to be
    generalized to cover platforms where time_t and suseconds_t are 32 bit,
    as well.
    blipp committed Aug 21, 2015
    Configuration menu
    Copy the full SHA
    a960422 View commit details
    Browse the repository at this point in the history
  2. Remove unused variable

    blipp committed Aug 21, 2015
    Configuration menu
    Copy the full SHA
    12da32b View commit details
    Browse the repository at this point in the history