tpcpr/src/parser.rs

extern crate byteorder;
extern crate bitfield;
extern crate eui48;
mod packet_handler;
use pcap::Capture;
use eui48::MacAddress;
//use std::net::{IpAddr, Ipv4Addr, Ipv6Addr};
use std::str;


/* protocol ids, LittleEndian */ 
const ETH_P_IPV6:           usize = 0xDD86;
const ETH_P_IP:             usize = 0x08;
const TCP:                  usize = 0x06;


fn build_ether () -> packet_handler::EtherHeader {
    packet_handler::EtherHeader {
        ether_dhost: (MacAddress::new([0;6])).to_hex_string(),
        ether_shost: (MacAddress::new([0;6])).to_hex_string(),
        ether_type: 0, 
    }
}
 

// TODO: wrap packet_handler types inside Option<T>
#[derive(Debug, Clone)]
pub struct QryData{ 
    pub id:                             i32,
    pub time:                           f64,
    pub data:                           Option<Vec<u8>>,
    pub ether_header:                   packet_handler::EtherHeader,
    pub ipv4_header:                    Option<packet_handler::IpV4Header>,
    pub ipv6_header:                    Option<packet_handler::IpV6Header>,
    pub tcp_header:                     Option<packet_handler::TcpHeader>,
}

pub fn parse (parse_file: &str, filter_str: &str) -> Vec<QryData> { 
        let ether_init = build_ether();

        let mut me = QryData {
            id: 0,
            time: 0.0,
            data: None,
            ether_header: ether_init,
            ipv4_header: None::<packet_handler::IpV4Header>,
            ipv6_header: None::<packet_handler::IpV6Header>,
            tcp_header:  None::<packet_handler::TcpHeader>,
            
        };
    let mut v: Vec<QryData> = Vec::new();

        let mut cap = Capture::from_file(parse_file).unwrap();
        Capture::filter(&mut cap, &filter_str).unwrap();

    while let Ok(packet) = cap.next() {
        me.time = (packet.header.ts.tv_usec as f64 / 1000000.0) + packet.header.ts.tv_sec as f64; 
        me.data = Some(packet.data.to_vec());  
        me.ether_header = packet_handler::ethernet_handler( packet.data );
        if  ETH_P_IP == me.ether_header.ether_type as usize {
              me.ipv6_header = None::<packet_handler::IpV6Header>;
              me.ipv4_header = Some(packet_handler::ip_handler( packet.data )).unwrap();
              if TCP == me.ipv4_header.unwrap().ip_protocol as usize {
                me.tcp_header = Some(packet_handler::tcp_handler( me.ipv4_header.unwrap().ip_ihl, packet.data )).unwrap();
                me.data= packet_handler::payload_handler( me.ipv4_header.unwrap().ip_ihl, me.tcp_header.unwrap().data_offset, packet.data);
              }

        } 
        if ETH_P_IPV6 == me.ether_header.ether_type as usize {
            me.ipv4_header = None::<packet_handler::IpV4Header>;
            me.ipv6_header = Some(packet_handler::ipv6_handler( packet.data )).unwrap();
            if TCP == me.ipv6_header.unwrap().next_header as usize{
                me.tcp_header = Some(packet_handler::tcp_handler( 10, packet.data )).unwrap();
                me.data = packet_handler::payload_handler( 10, 0, packet.data);
            }
        }
 
        v.push(QryData{id:0, time:me.time, data: me.data, ether_header:me.ether_header, ipv4_header: me.ipv4_header, ipv6_header: me.ipv6_header, tcp_header: me.tcp_header});
        
    }
    v
}

pub fn parse_device (parse_device: &str, filter_str: &str, insert_max: &usize) -> Vec<QryData> { 
    let ether_init = build_ether();

    let mut me = QryData {
        id: 0,
        time: 0.0,
        data: None,
        ether_header: ether_init,
        ipv4_header: None::<packet_handler::IpV4Header>,
        ipv6_header: None::<packet_handler::IpV6Header>,
        tcp_header:  None::<packet_handler::TcpHeader>,
    };
    let mut v: Vec<QryData> = Vec::new();
    let mut cap = Capture::from_device(parse_device).unwrap().open().unwrap();
    Capture::filter(&mut cap, &filter_str).unwrap();
    
    'parse: while let Ok(packet) = cap.next(){
        me.time = (packet.header.ts.tv_usec as f64 / 1000000.0) + packet.header.ts.tv_sec as f64; 
        me.data = Some(packet.data.to_vec());  
        me.ether_header = packet_handler::ethernet_handler( packet.data );
        if  ETH_P_IP == me.ether_header.ether_type as usize {
              me.ipv6_header = None::<packet_handler::IpV6Header>;
              me.ipv4_header = Some(packet_handler::ip_handler( packet.data )).unwrap();
              if TCP == me.ipv4_header.unwrap().ip_protocol as usize{
                me.tcp_header = Some(packet_handler::tcp_handler( me.ipv4_header.unwrap().ip_ihl, packet.data )).unwrap();
                me.data= packet_handler::payload_handler( me.ipv4_header.unwrap().ip_ihl, me.tcp_header.unwrap().data_offset, packet.data);
              }

        } 
        if ETH_P_IPV6 == me.ether_header.ether_type as usize {
            me.ipv4_header = None::<packet_handler::IpV4Header>;
            me.ipv6_header = Some(packet_handler::ipv6_handler( packet.data)).unwrap();
            if TCP == me.ipv6_header.unwrap().next_header as usize {
                me.tcp_header = Some(packet_handler::tcp_handler( 10, packet.data )).unwrap();
                me.data = packet_handler::payload_handler( 10, 0, packet.data);
            }
        }
 
        v.push(QryData{id:0, time:me.time, data: me.data, ether_header:me.ether_header, ipv4_header: me.ipv4_header, ipv6_header: me.ipv6_header, tcp_header: me.tcp_header});
    

        if &v.len() >= insert_max {
            break 'parse;
        }
    }
    v
}