aboutsummaryrefslogtreecommitdiffstats
path: root/editcap.c
AgeCommit message (Collapse)AuthorFilesLines
2005-09-14added compression support for capture file output. The Save/As dialog now ↵Ulf Lamping1-1/+1
has a checkbox "Compress with gzip" currently limited to Ethereal and all the variants of libpcap filetypes only. We might want to add output compression support to the other tools as well (tethereal, mergecap, ...). We might also want to add support for the other filetypes, but this is only possible if the filetype functions doesn't use special output operations like fseek. One bug is still left: if the input and output filetypes while saving are the same, Ethereal currently optimizes this by simply copy the binary file instead of using wiretap (so it will be faster but it will ignore the compress setting). Don't know a good workaround for this, as I don't know a way to find out if the input file is currently compressed or not. One idea might be to use a heuristic on the filesize (compared to the packet size summmary). Another workaround I see is to remove this optimization, which is of course not the way I like to do it ... svn path=/trunk/; revision=15804
2005-08-24fix usec -> nsec translationUlf Lamping1-12/+12
svn path=/trunk/; revision=15521
2005-07-26From Peter Johansson:Anders Broman1-1/+5
The supplied patch takes care of the following compilation warnings: editcap.c(273) : warning C4013: 'getpid' undefined; assuming extern returning int editcap.c(464) : warning C4018: '<' : signed/unsigned mismatch svn path=/trunk/; revision=15084
2005-06-17the -E probability parameter was missing in the usage summaryUlf Lamping1-2/+2
svn path=/trunk/; revision=14677
2005-05-30Add random bit errors to the fuzz tests.Gerald Combs1-1/+9
svn path=/trunk/; revision=14489
2005-04-10Remove debugging printf()s.Gerald Combs1-4/+0
svn path=/trunk/; revision=14048
2005-04-10Add an option to Editcap that adds various types of errors to the capture Gerald Combs1-26/+94
file. svn path=/trunk/; revision=14046
2005-04-03Make editcap use wtap_read(); that eliminates the last user ofGuy Harris1-97/+79
wtap_loop(), so eliminate wtap_loop(). svn path=/trunk/; revision=14006
2004-12-29Make the tone of the error messages a bit less formal, by usingGuy Harris1-6/+6
contractions. (Safari does, at least when you're trying to open a file to which you don't have read access.) svn path=/trunk/; revision=12852
2004-07-18Set the svn:eol-style property on all text files to "native", so thatGuy Harris1-1/+1
they have LF at the end of the line on UN*X and CR/LF on Windows; hopefully this means that if a CR/LF version is checked in on Windows, the CRs will be stripped so that they show up only when checked out on Windows, not on UN*X. svn path=/trunk/; revision=11400
2004-02-23Another small closing bracket fixup.Richard Sharpe1-3/+3
svn path=/trunk/; revision=10196
2004-02-23Small fix to usage text to add a trailing closed square bracket (]).Richard Sharpe1-2/+2
svn path=/trunk/; revision=10194
2004-01-25Free the error info string after using it.Guy Harris1-1/+2
svn path=/trunk/; revision=9855
2004-01-25Have the Wiretap open, read, and seek-and-read routines return, inGuy Harris1-4/+25
addition to an error code, an error info string, for WTAP_ERR_UNSUPPORTED, WTAP_ERR_UNSUPPORTED_ENCAP, and WTAP_ERR_BAD_RECORD errors. Replace the error messages logged with "g_message()" for those errors with g_strdup()ed or g_strdup_printf()ed strings returned as the error info string, and change the callers of those routines to, for those errors, put the info string into the printed message or alert box for the error. Add messages for cases where those errors were returned without printing an additional message. Nobody uses the error code from "cf_read()" - "cf_read()" puts up the alert box itself for failures; get rid of the error code, so it just returns a success/failure indication. Rename "file_read_error_message()" to "cf_read_error_message()", as it handles read errors from Wiretap, and have it take an error info string as an argument. (That handles a lot of the work of putting the info string into the error message.) Make some variables in "ascend-grammar.y" static. Check the return value of "erf_read_header()" in "erf_seek_read()". Get rid of an unused #define in "i4btrace.c". svn path=/trunk/; revision=9852
2004-01-18Fix warnings found by -Wstrict-prototypesJörg Mayer1-2/+2
svn path=/trunk/; revision=9722
2002-08-28Removed trailing whitespaces from .h and .c files using theJörg Mayer1-6/+6
winapi_cleanup tool written by Patrik Stridvall for the wine project. svn path=/trunk/; revision=6117
2002-08-02Replace the types from sys/types.h and netinet/in.h by their glib.hJörg Mayer1-7/+3
equivalents for the toplevel directory. The removal of winsock2.h will hopefully not cause any problems under MSVC++, as those files using struct timeval still include wtap.h, which still includes winsock2.h. svn path=/trunk/; revision=5932
2002-06-30From Joerg Mayer: add some missing static declarations.Guy Harris1-6/+6
svn path=/trunk/; revision=5806
2002-06-23WinPcap 2.3's <pcap.h> includes <packet32.h>, and WinPcap 2.3'sGuy Harris1-3/+3
<packet32.h> includes <winsock2.h>; we include that rather than <winsock.h>, to avoid errors due to conflicting declarations in <winsock.h> and <winsock2.h>. svn path=/trunk/; revision=5742
2002-03-31From Joerg Mayer: mark function arguments as unused.Guy Harris1-2/+2
svn path=/trunk/; revision=5049
2002-03-14When defining the struct select_item, don't create an instance of thatGilbert Ramirez1-2/+2
struct, alsoc alled select_item, as it's not used. svn path=/trunk/; revision=4938
2002-02-24From Peter Valchev: fix editcap to assign the result of "getopt()" to anGuy Harris1-3/+3
"int" and to check "getopt()"s return value with -1 rather than EOF. Fix other "getopt()" loops to check against -1 as well (EOF is -1 on most if not all platforms, but the Single UNIX Specification says "getopt()" returns -1, so we should check against -1, not EOF). svn path=/trunk/; revision=4793
2002-02-08Have Wiretap set the snapshot length to 0 if it can't be derived fromGuy Harris1-1/+7
reading the capture file. Have callers of "wtap_snapshot_length()" treat a value of 0 as "unknown", and default to WTAP_MAX_PACKET_SIZE (so that, when writing a capture file in a format that *does* store the snapshot length, we can at least put *something* in the file). If we don't know the snapshot length of the current capture file, don't display a value in the summary window. Don't use "cfile.snap" as the snapshot length option when capturing - doing so causes Ethereal to default, when capturing, to the snapshot length of the last capture file that you read in, rather than to the snapshot length of the last capture you did (or the initial default of "no snapshot length"). Redo the "Capture Options" dialog box to group options into sections with frames around them, and add units to the snapshot length, maximum file size, and capture duration options, as per a suggestion by Ulf Lamping. Also add units to the capture count option. Make the snapshot length, capture count, maximum file size, and capture duration options into a combination of a check box and a spin button. If the check box is not checked, the limit in question is inactive (snapshot length of 65535, no max packet count, no max file size, no max capture duration); if it's checked, the spinbox specifies the limit. Default all of the check boxes to "not checked" and all of the spin boxes to small values. Use "gtk_toggle_button_get_active()" rather than directly fetching the state of a check box. svn path=/trunk/; revision=4709
2001-10-04Use longs as file offsets, so that on platforms with 64-bit "long" weGuy Harris1-2/+2
can handle capture files bigger than 2GB. svn path=/trunk/; revision=3993
2001-07-13From Scott Renfro:Guy Harris1-12/+30
- make a leading zero in the argument to -t optional; - includes the -t option in in the summary portion of of the editcap usage message. svn path=/trunk/; revision=3712
2001-07-12"-t" flag for editcap, to adjust timestamps in frames, from ScottGuy Harris1-4/+100
Renfro. svn path=/trunk/; revision=3696
2001-06-19More signed vs. unsigned cleanups, and initialization cleanups, fromGuy Harris1-2/+2
Joerg Mayer. svn path=/trunk/; revision=3578
2001-04-20In ANSI C (and in pre-ANSI UNIX implementations), if you return fromGuy Harris1-3/+2
"main()", the program exits, and exits with an exit status equal to the return value of "main()", so "return 0;" is sufficient at the end of "main()". svn path=/trunk/; revision=3354
2000-12-03Put the "-s" flag into the usage message for editcap.Guy Harris1-3/+5
svn path=/trunk/; revision=2738
2000-08-09Make "editcap -h" give the usage message without an error message (i.e.,Guy Harris1-2/+2
specify it in the argument to "getopt()"). svn path=/trunk/; revision=2235
2000-05-19Add wtap-int.h. Move definitions relevant to the internal workins of wiretapGilbert Ramirez1-2/+2
to that file, leave public definitions in wtap.h. Rename "union pseudo_header" to "union wtap_pseudo_header". Make the wtap_pseudo_header pointer available in packet_info struct. svn path=/trunk/; revision=1989
2000-05-18Remove the "union pseudo_header" from the "frame_data" structure;Guy Harris1-4/+4
there's no need to keep it around in memory - when the frame data is read in when handing a frame, read in the information, if any, necessary to reconstruct the frame header, and reconstruct it. This saves some memory. This requires that the seek-and-read function be implemented inside Wiretap, and that the Wiretap handle remain open even after we've finished reading the file sequentially. This also points out that we can't really do X.25-over-Ethernet correctly, as we don't know where the direction (DTE->DCE or DCE->DTE) flag is stored; it's not clear how the Ethernet type 0x0805 for X.25 Layer 3 is supposed to be handled in any case. We eliminate X.25-over-Ethernet support (until we find out what we're supposed to do). svn path=/trunk/; revision=1975
2000-04-27Add a "-s" flag to editcap, to make it truncate packets to a specifiedGuy Harris1-3/+22
snapshot length before writing them to the output file; this may come in handy if you are translating the file to a different format so that it can be read by a program that can't handle packets above a certain size (e.g., the snoop in Solaris 2.5.1 or 2.6, which reject Ethernet packets larger than the Ethernet MTU, and thus can't handle gigabit Ethernet captures using jumbo frames). svn path=/trunk/; revision=1891
2000-04-17Remove optopt and opterr, two unused variables.Gilbert Ramirez1-2/+2
svn path=/trunk/; revision=1877
2000-04-12Build tethereal and editcap on Win32.Gilbert Ramirez1-1/+20
Add RCS ID tags to Makefile.nmake's. svn path=/trunk/; revision=1836
2000-01-17Use "strchr()" rather than "index()" - the ANSI C standard specifiesGuy Harris1-2/+3
"strchr()", and it, unlike "index()", is declared in <string.h>. svn path=/trunk/; revision=1502
2000-01-17Small patch to editcap to allow ranges of packets to be specifiedRichard Sharpe1-6/+62
as well as individual packets. I needed to grab quite a few from the middle of a large capture file. Will eventually need to sort the extract list. svn path=/trunk/; revision=1498
1999-12-12Another commit from a Qantas Club Lounge ... :-)Richard Sharpe1-29/+62
Update editcap to print out the type of capture file if -v specified and add a -h flag. Also fix a few compiler warnings ... svn path=/trunk/; revision=1302
1999-12-05Use the new routines in Wiretap to make the argument to "-T" be aGuy Harris1-5/+19
symbolic name, and to list the encapsulation types in the usage message. Note in the usage message that the default output encapsulation type is "same as the input file" and that the default output file type is "libpcap". svn path=/trunk/; revision=1213
1999-12-04It's now called "editcap", as it can read any file format Wiretap canGuy Harris1-9/+22
read, and write any format it can write; change the error messages. Make the "-F" flag take a symbolic capture file type; use "wtap_short_string_to_file_type()" to translate it to a WTAP_FILE_ value. List, in the usage message, the capture file types we can write, and the symbolic types you use on the command line to specify them. Give it an RCS ID. svn path=/trunk/; revision=1210
1999-12-04Adding editcap.c. This is an example of a simple wiretap editing program.Richard Sharpe1-0/+174
Will need new functions in wiretap before I can do more. Should perhaps be moved into an examples directory and have other bots added. svn path=/trunk/; revision=1206
generated by cgit v1.2.3 (git 2.25.1) at 2024-04-20 01:07:32 +0000