aboutsummaryrefslogtreecommitdiffstats
path: root/wiretap/wtap.def
AgeCommit message (Collapse)AuthorFilesLines
2012-06-01Export those file_ routines that Wiretap plugins would use (othersGuy Harris1-0/+8
should only be used inside Wiretap). svn path=/trunk/; revision=42986
2012-06-01Sigh. There appears to be no way to get Windows to allow us to rename aGuy Harris1-14/+2
file that we ourselves have open. In the "safe save" code path for capture files, on Windows temporarily close the file descriptors for the currently-open capture before doing the rename and then, if the rename failed, reopen them, leaving the rest of the wtap and capture_file structures intact. Rename filed_open() to file_fdopen(), to make its name match what it does a bit better (it's an fdopen()-style routine, i.e. do the equivalent of an open with an already-open file descriptor rather than a pathname, in the file_wrappers.c set of routines). Remove the file_ routines from the .def file for Wiretap - they should only be called by code inside Wiretap. Closing a descriptor open for input has no reason to fail (closing a descriptor open for *writing* could fail if the file is on a server and dirty pages are pushed asynchronously to the server and synchronously on a close), so just have file_close() return void. svn path=/trunk/; revision=42961
2012-05-24Keep track, in Wiretap, of whether the file is compressed, and provideGuy Harris1-0/+1
an API to fetch that. When doing "Save" on a compressed file, write it out compressed. In the Statistics -> Summary dialog and in capinfos, report whether the file is gzip-compressed. svn path=/trunk/; revision=42818
2012-04-25Add wtap_dump_fdopen_ngAnders Broman1-0/+1
svn path=/trunk/; revision=42231
2012-02-26Make it possible to edit capture commentsAnders Broman1-0/+1
svn path=/trunk/; revision=41193
2012-02-20Handle reading and writing of multiple IDB:s, write IDB options and use ↵Anders Broman1-0/+1
correct lengt for strings, handle more than 100 char comment svn path=/trunk/; revision=41082
2012-02-15Make it possible to get inforamtion from the read SHB to the one to write out.Anders Broman1-0/+2
svn path=/trunk/; revision=41032
2012-01-24Add a routine to Wiretap that takes a file type value and anGuy Harris1-0/+1
encapsulation value and returns a GArray containing all the file types that could be used to save a file of that file type and that encapsulation value (which could be WTAP_ENCAP_PER_PACKET), with the input file type first if that can be used and pcap or pcap-ng first if not and if one of them can be used, and with pcap and pcap-ng clustered together if they're among the file types that can be used. Use that routine for the GTK+ file save dialog. svn path=/trunk/; revision=40685
2012-01-23In the table of capture file types, have:Guy Harris1-1/+1
a field that gives the default extension for the file type, *without* a leading "." (i.e., just the extension, not the "." that separates it from the rest of the file name), which is NULL if there are no known extensions; a field that gives a semicolon-separated list of *other* extensions, without "*." or ".", which is NULL if there are no known extensions or there are no known extensions other than the default. Rename wtap_file_extension_default_string() to wtap_default_file_extension() (matches the name of the field). svn path=/trunk/; revision=40678
2012-01-21Replace wtap_file_extensions_string() with a routine that returns aGuy Harris1-1/+2
GSList of extensions for a file type, including extensions for the compressed versions of those file types that we can read. svn path=/trunk/; revision=40623
2011-05-11Export wtap_fstat()Tomas Kukosa1-0/+1
svn path=/trunk/; revision=37059
2011-04-14Export new file_...() functions from libwiretap.dllTomas Kukosa1-0/+9
svn path=/trunk/; revision=36640
2011-04-08Make wtap plugins build on windows again.Anders Broman1-0/+1
svn path=/trunk/; revision=36517
2011-03-24Add initial pcapng name resolution record support. Wireshark has readGerald Combs1-0/+3
support; TShark has read+write support. Additionally TShark can read a "hosts" file and write those records to a capture file. This uses "struct addrinfo" in many places and probably won't compile on some platforms. svn path=/trunk/; revision=36318
2010-11-13Try to fix the build for text_import_scanner.Anders Broman1-0/+1
Please check if the compile flags are OK... 3:d time lucky ? svn path=/trunk/; revision=34862
2010-05-08Add wtap_cleareof().Guy Harris1-0/+1
svn path=/trunk/; revision=32719
2008-05-22Move the file utility functions from wiretap to libwsutil so thatJeff Morriss1-9/+0
libwireshark (and the plugins using those functions) do not depend on wiretap on Windows. While doing that, rename the eth_* functions to ws_*. svn path=/trunk/; revision=25354
2008-05-20Create a new "Wireshark utility" library and move the mpeg-audio stuff fromJeff Morriss1-7/+0
wiretap to this new libwsutil. This solves http://bugs.wireshark.org/bugzilla/show_bug.cgi?id=1677 by making libwireshark no longer depend on libwiretap. svn path=/trunk/; revision=25330
2007-12-27export more buffer functions from wiretapTomas Kukosa1-0/+3
svn path=/trunk/; revision=23952
2007-12-08wtap_process_pcap_packet() is gone; remove it from the list of exportedGuy Harris1-1/+0
functions. svn path=/trunk/; revision=23806
2007-11-27fix mpa_... problemsUlf Lamping1-4/+13
svn path=/trunk/; revision=23616
2007-06-13turns out that wtap_pkthdr was not exportable!Luis Ontanon1-1/+0
nm on my mac says it is there... svn path=/trunk/; revision=22093
2007-06-13Export all that's exportable from libwiretap.dllLuis Ontanon1-20/+27
svn path=/trunk/; revision=22092
2007-06-06Actually implement wtap_register_file_type() and have it returning the ID of ↵Luis Ontanon1-1/+4
the new file type. Add few functions to wiretap's exported API. svn path=/trunk/; revision=22060
2007-05-05fix win32 build by using wtap_get_num_file_types() instead of direct ↵Ulf Lamping1-0/+1
variable access svn path=/trunk/; revision=21689
2007-05-04Add a plugin interface to wiretap.Luis Ontanon1-0/+4
So far I've done only regression testing (the new functionality and what's in wtap-plugins.c has not yet being tested). it is a first step in the way to have lua opening files. svn path=/trunk/; revision=21686
2007-03-22Added mpeg exportsGraham Bloice1-0/+8
svn path=/trunk/; revision=21116
2007-01-12Win32: MSVC > 6 doesn't work well with Unicode filenames!Ulf Lamping1-0/+9
fix this, by providing required functions in the new file file_util.c - it's mostly copied from GLib (g_open alike - that take UTF8 as filename format but don't use msvcrt.dll V6 for this as the glib files do) "link" to these functions in file_util.h: #define eth_open eth_stdio_open revert changes (from SVN 20282) throughout the code related to these file functions which were introduced with the first tries of MSVC 2005 ... Hopefully I've done everything right with the new file_util.c ... svn path=/trunk/; revision=20402
2006-06-23add file extension information (filter "*.pcap;*.cap" and default extension ↵Ulf Lamping1-0/+2
".pcap") to wiretap sort file types in alphabetical order, but keep the libpcap like entries at the start svn path=/trunk/; revision=18562
2005-09-14added compression support for capture file output. The Save/As dialog now ↵Ulf Lamping1-1/+2
has a checkbox "Compress with gzip" currently limited to Ethereal and all the variants of libpcap filetypes only. We might want to add output compression support to the other tools as well (tethereal, mergecap, ...). We might also want to add support for the other filetypes, but this is only possible if the filetype functions doesn't use special output operations like fseek. One bug is still left: if the input and output filetypes while saving are the same, Ethereal currently optimizes this by simply copy the binary file instead of using wiretap (so it will be faster but it will ignore the compress setting). Don't know a good workaround for this, as I don't know a way to find out if the input file is currently compressed or not. One idea might be to use a heuristic on the filesize (compared to the packet size summmary). Another workaround I see is to remove this optimization, which is of course not the way I like to do it ... svn path=/trunk/; revision=15804
2005-08-24EVERYTHING IN THE BUILDBOT IS GOING TO BE RED!!! Sorry! Ulf Lamping1-0/+1
I've done more than a day to change the timestamp resolution from microseconds to nanoseconds. As I really don't want to loose those changes, I'm going to check in the changes I've done so far. Hopefully someone else will give me a helping hand with the things left ... What's done: I've changed the timestamp resolution from usec to nsec in almost any place in the sources. I've changed parts of the implementation in nstime.s/.h and a lot of places elsewhere. As I don't understand the editcap source (well, I'm maybe just too tired right now), hopefully someone else might be able to fix this soon. Doing all those changes, we get native nanosecond timestamp resolution in Ethereal. After fixing all the remaining issues, I'll take a look how to display this in a convenient way... As I've also changed the wiretap timestamp resolution from usec to nsec we might want to change the wiretap version number... svn path=/trunk/; revision=15520
2005-08-19Add APIs to Wiretap to return the file of the size as supplied by the OSGuy Harris1-1/+2
(so if the file's gzipped, it's *NOT* the size of the file after uncompressing), and an approximation of the amount of that data read sequentially so far. Use those for various progress bars and the like. Make the fstat() in the Ascend trace reader directly use wth->fd, as it's inside Wiretap; that gets rid of the last caller of wtap_fd() (as we're no longer directly using fstat() or lseek() in Ethereal), so get rid of wtap_fd(). svn path=/trunk/; revision=15437
2005-04-03Make editcap use wtap_read(); that eliminates the last user ofGuy Harris1-1/+0
wtap_loop(), so eliminate wtap_loop(). svn path=/trunk/; revision=14006
2004-07-18Set the svn:eol-style property on all text files to "native", so thatGuy Harris1-32/+32
they have LF at the end of the line on UN*X and CR/LF on Windows; hopefully this means that if a CR/LF version is checked in on Windows, the CRs will be stripped so that they show up only when checked out on Windows, not on UN*X. svn path=/trunk/; revision=11400
2003-10-01Have a pseudo-header for Ethernet packets, giving the size of the FCS -Guy Harris1-1/+0
0 means "there is no FCS in the packet data", 4 means "there is an FCS in the packet data", -1 means "I don't know whether there's an FCS in the packet data, guess based on the packet size". Assume that Ethernet encapsulated inside other protocols has no FCS, by having the "eth" dissector assume that (and not check for an Ethernet pseudo-header). Have "ethertype()" take an argument giving the FCS size; pass 0 when appropriate. Fix up Wiretap routines to set the pseudo-header. This means we no longer use the "generic" seek-and-read routine, so get rid of it. svn path=/trunk/; revision=8578
2002-06-13Export the new wtap_process_pcap_packet routine.Guy Harris1-0/+1
svn path=/trunk/; revision=5662
2001-12-04Make the bytes-written information from Wiretap a long, as we allowGuy Harris1-0/+1
files to get that big. From Thomas Wittwer and Matthias Nyffenegger: Support for "ring buffer mode", wherein there's a ring buffer of N capture files; as each capture file reaches its maximum size (the ring buffer works only with a maximum capture file size specified), Ethereal rolls over to the next capture file in the ring buffer, replacing whatever packets might be in it with new packets. svn path=/trunk/; revision=4323
2001-12-04Support for stopping capture at specified capture file size or captureGuy Harris1-0/+1
duration, from Thomas Wittwer and Matthias Nyffenegger. svn path=/trunk/; revision=4322
2001-07-05"wtap_file()" is no longer in Wiretap, so don't try to export it fromGuy Harris1-1/+0
the Wiretap DLL. svn path=/trunk/; revision=3655
2001-03-23The Win32 build builds wiretap as a DLL and requires WinPcap 2.1.Gilbert Ramirez1-0/+31
svn path=/trunk/; revision=3163