ddn.lib.pcap.remote

Remote capture support for libpcap.

This module provides functions for capturing packets from remote hosts using the RPCAP protocol. These functions are only available if the linked libpcap was built with remote capture support.

Authors

Dejan Lekić

License

BSD-3-Clause

Copyright

enum AuthType OpenFlags SourceType

fn createSrcStr findAllDevsEx hasRemoteSupport open parseSrcStr remoteactAccept remoteactAcceptEx remoteactCleanup remoteactClose remoteactList

Types 3

enumSourceType : int

Remote capture source types.

FILE = 2local savefile

IFLOCAL = 3local network interface

IFREMOTE = 4interface on a remote host, using RPCAP

enumOpenFlags : uint

Flags for pcap_open.

PROMISCUOUS = 0x00000001

DATATX_UDP = 0x00000002

NOCAPTURE_RPCAP = 0x00000004

NOCAPTURE_LOCAL = 0x00000008

MAX_RESPONSIVENESS = 0x00000010

enumAuthType : int

Remote authentication methods.

NULL = 0

PWD = 1

Functions 10

fnbool hasRemoteSupport()Checks if the current libpcap build supports remote capture.

fnstring createSrcStr(SourceType type, string host, string port, string name, out string errBuf)Creates a source string for use with `pcap_open`.

int parseSrcStr(string source,  out  SourceType type,  out  string host,  out  string port,  out  string name,  out  string errBuf)

Parses a source string into its components.

PcapHandle open(string source,  int  snaplen,  int  flags,  int  readTimeout,  pcap_rmtauth *  auth,  out  string errBuf)

Opens a remote capture or local file using the modern `pcap_open` API.

fnPcapIfList findAllDevsEx(string source, pcap_rmtauth * auth, out string errBuf)Extension of `findAllDevs` that supports remote hosts.

int remoteactAccept(string address,  string port,  string hostlist,  out  string connectingHost,  pcap_rmtauth *  auth,  out  string errBuf)

Accepts an RPCAP connection.

int remoteactAcceptEx(string address,  string port,  string hostlist,  out  string connectingHost,  pcap_rmtauth *  auth,  int  usesUdp,  out  string errBuf)

Accepts an RPCAP connection (extended).

fnint remoteactCleanup()Cleans up RPCAP connections. (RPCAP server)

fnvoid remoteactClose(int fd)Closes an RPCAP connection. (RPCAP server)

fnint remoteactList(char * hostlist, char sep)Lists RPCAP connections. (RPCAP server)