extern crate byteorder; extern crate bitfield; extern crate eui48; mod packet_handler; use pcap::Capture; use eui48::MacAddress; //use std::net::{IpAddr, Ipv4Addr, Ipv6Addr}; use std::str; /* protocol ids, LittleEndian */ const ETH_P_IPV6: usize = 0xDD86; const ETH_P_IP: usize = 0x08; const TCP: usize = 0x06; fn build_ether () -> packet_handler::EtherHeader { packet_handler::EtherHeader { ether_dhost: (MacAddress::new([0;6])).to_hex_string(), ether_shost: (MacAddress::new([0;6])).to_hex_string(), ether_type: 0, } } // TODO: wrap packet_handler types inside Option #[derive(Debug, Clone)] pub struct QryData{ pub id: i32, pub time: f64, pub data: Option>, pub ether_header: packet_handler::EtherHeader, pub ipv4_header: Option, pub ipv6_header: Option, pub tcp_header: Option, } pub fn parse (parse_file: &str, filter_str: &str) -> Vec { let ether_init = build_ether(); let mut me = QryData { id: 0, time: 0.0, data: None, ether_header: ether_init, ipv4_header: None::, ipv6_header: None::, tcp_header: None::, }; let mut v: Vec = Vec::new(); let mut cap = Capture::from_file(parse_file).unwrap(); Capture::filter(&mut cap, &filter_str).unwrap(); while let Ok(packet) = cap.next() { me.time = (packet.header.ts.tv_usec as f64 / 1000000.0) + packet.header.ts.tv_sec as f64; me.data = Some(packet.data.to_vec()); me.ether_header = packet_handler::ethernet_handler( packet.data ); if ETH_P_IP == me.ether_header.ether_type as usize { me.ipv6_header = None::; me.ipv4_header = Some(packet_handler::ip_handler( packet.data )).unwrap(); if TCP == me.ipv4_header.unwrap().ip_protocol as usize { me.tcp_header = Some(packet_handler::tcp_handler( me.ipv4_header.unwrap().ip_ihl, packet.data )).unwrap(); me.data= packet_handler::payload_handler( me.ipv4_header.unwrap().ip_ihl, me.tcp_header.unwrap().data_offset, packet.data); } } if ETH_P_IPV6 == me.ether_header.ether_type as usize { me.ipv4_header = None::; me.ipv6_header = Some(packet_handler::ipv6_handler( packet.data )).unwrap(); if TCP == me.ipv6_header.unwrap().next_header as usize{ me.tcp_header = Some(packet_handler::tcp_handler( 10, packet.data )).unwrap(); me.data = packet_handler::payload_handler( 10, me.tcp_header.unwrap().data_offset, packet.data); } } v.push(QryData{id:0, time:me.time, data: me.data, ether_header:me.ether_header, ipv4_header: me.ipv4_header, ipv6_header: me.ipv6_header, tcp_header: me.tcp_header}); } v } pub fn parse_device (parse_device: &str, filter_str: &str, insert_max: &usize) -> Vec { let ether_init = build_ether(); let mut me = QryData { id: 0, time: 0.0, data: None, ether_header: ether_init, ipv4_header: None::, ipv6_header: None::, tcp_header: None::, }; let mut v: Vec = Vec::new(); let mut cap = Capture::from_device(parse_device).unwrap().open().unwrap(); Capture::filter(&mut cap, &filter_str).unwrap(); 'parse: while let Ok(packet) = cap.next(){ me.time = (packet.header.ts.tv_usec as f64 / 1000000.0) + packet.header.ts.tv_sec as f64; me.data = Some(packet.data.to_vec()); me.ether_header = packet_handler::ethernet_handler( packet.data ); if ETH_P_IP == me.ether_header.ether_type as usize { me.ipv6_header = None::; me.ipv4_header = Some(packet_handler::ip_handler( packet.data )).unwrap(); if TCP == me.ipv4_header.unwrap().ip_protocol as usize{ me.tcp_header = Some(packet_handler::tcp_handler( me.ipv4_header.unwrap().ip_ihl, packet.data )).unwrap(); me.data= packet_handler::payload_handler( me.ipv4_header.unwrap().ip_ihl, me.tcp_header.unwrap().data_offset, packet.data); } } if ETH_P_IPV6 == me.ether_header.ether_type as usize { me.ipv4_header = None::; me.ipv6_header = Some(packet_handler::ipv6_handler( packet.data)).unwrap(); if TCP == me.ipv6_header.unwrap().next_header as usize { me.tcp_header = Some(packet_handler::tcp_handler( 10, packet.data )).unwrap(); me.data = packet_handler::payload_handler( 10, me.tcp_header.unwrap().data_offset, packet.data); } } v.push(QryData{id:0, time:me.time, data: me.data, ether_header:me.ether_header, ipv4_header: me.ipv4_header, ipv6_header: me.ipv6_header, tcp_header: me.tcp_header}); if &v.len() >= insert_max { break 'parse; } } v }