nl.sidnlabs.pcap

Class PcapReader

java.lang.Object

nl.sidnlabs.pcap.PcapReader

All Implemented Interfaces:

Iterable<Packet>

public class PcapReader
extends Object
implements Iterable<Packet>

Read all data from a pcap file and decode all the packets

Nested Class Summary

Nested Classes

Modifier and Type	Class and Description
protected static class	PcapReader.LinkType

Field Summary

Fields

Modifier and Type	Field and Description
static int	CAP_LEN_OFFSET
static int	DNS_PORT
static int	ETHERNET_HEADER_SIZE
static int	ETHERNET_TYPE_8021Q
static int	ETHERNET_TYPE_IP
static int	ETHERNET_TYPE_IPV6
static int	ETHERNET_TYPE_OFFSET
static int	ETHHERNET_MINIMUM_PYALOAD_SIZE
static int	HEADER_SIZE
static long	MAGIC_NUMBER
static int	PACKET_HEADER_SIZE
static int	PCAP_HEADER_LINKTYPE_OFFSET
static int	PROTOCOL_FRAGMENTED
static int	PROTOCOL_HEADER_DST_PORT_OFFSET
static int	PROTOCOL_HEADER_SRC_PORT_OFFSET
static int	PROTOCOL_TCP
static int	PROTOCOL_UDP
static int	SLL_ADDRESS_LENGTH_OFFSET
static int	SLL_HEADER_BASE_SIZE
static int	TCP_DNS_LENGTH_PREFIX
static int	TIMESTAMP_MICROS_OFFSET
static int	TIMESTAMP_OFFSET

Constructor Summary

Constructors

Constructor and Description
PcapReader()

Method Summary

Modifier and Type	Method and Description
void	clearCache(int tcpFlowCacheTimeout, int fragmentedIPcacheTimeout) Clear expired cache entries in order to avoid memory problems
void	close()
protected int	findIPStart(byte[] packet)
com.google.common.collect.Multimap<Datagram,DatagramPayload>	getDatagrams()
int	getDnsDecodeError()
com.google.common.collect.Multimap<TCPFlow,SequencePayload>	getFlows()
protected PcapReader.LinkType	getLinkType(long linkTypeVal)
int	getTcpPrefixError()
void	init(DataInputStream is)
Iterator<Packet>	iterator()
protected boolean	readBytes(byte[] buf)
void	setDatagrams(com.google.common.collect.Multimap<Datagram,DatagramPayload> map)
void	setFlows(com.google.common.collect.Multimap<TCPFlow,SequencePayload> flows)
protected boolean	validateMagicNumber(byte[] pcapHeader)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Methods inherited from interface java.lang.Iterable

forEach, spliterator

Field Detail

DNS_PORT

public static final int DNS_PORT

See Also:

Constant Field Values

MAGIC_NUMBER

public static final long MAGIC_NUMBER

See Also:

Constant Field Values

HEADER_SIZE

public static final int HEADER_SIZE

See Also:

Constant Field Values

PCAP_HEADER_LINKTYPE_OFFSET

public static final int PCAP_HEADER_LINKTYPE_OFFSET

See Also:

Constant Field Values

PACKET_HEADER_SIZE

public static final int PACKET_HEADER_SIZE

See Also:

Constant Field Values

TIMESTAMP_OFFSET

public static final int TIMESTAMP_OFFSET

See Also:

Constant Field Values

TIMESTAMP_MICROS_OFFSET

public static final int TIMESTAMP_MICROS_OFFSET

See Also:

Constant Field Values

CAP_LEN_OFFSET

public static final int CAP_LEN_OFFSET

See Also:

Constant Field Values

ETHERNET_HEADER_SIZE

public static final int ETHERNET_HEADER_SIZE

See Also:

Constant Field Values

ETHERNET_TYPE_OFFSET

public static final int ETHERNET_TYPE_OFFSET

See Also:

Constant Field Values

ETHERNET_TYPE_IP

public static final int ETHERNET_TYPE_IP

See Also:

Constant Field Values

ETHERNET_TYPE_IPV6

public static final int ETHERNET_TYPE_IPV6

See Also:

Constant Field Values

ETHERNET_TYPE_8021Q

public static final int ETHERNET_TYPE_8021Q

See Also:

Constant Field Values

ETHHERNET_MINIMUM_PYALOAD_SIZE

public static final int ETHHERNET_MINIMUM_PYALOAD_SIZE

See Also:

Constant Field Values

SLL_HEADER_BASE_SIZE

public static final int SLL_HEADER_BASE_SIZE

See Also:

Constant Field Values

SLL_ADDRESS_LENGTH_OFFSET

public static final int SLL_ADDRESS_LENGTH_OFFSET

See Also:

Constant Field Values

PROTOCOL_HEADER_SRC_PORT_OFFSET

public static final int PROTOCOL_HEADER_SRC_PORT_OFFSET

See Also:

Constant Field Values

PROTOCOL_HEADER_DST_PORT_OFFSET

public static final int PROTOCOL_HEADER_DST_PORT_OFFSET

See Also:

Constant Field Values

PROTOCOL_TCP

public static final int PROTOCOL_TCP

See Also:

Constant Field Values

PROTOCOL_UDP

public static final int PROTOCOL_UDP

See Also:

Constant Field Values

PROTOCOL_FRAGMENTED

public static final int PROTOCOL_FRAGMENTED

See Also:

Constant Field Values

TCP_DNS_LENGTH_PREFIX

public static final int TCP_DNS_LENGTH_PREFIX

See Also:

Constant Field Values

Constructor Detail

PcapReader

public PcapReader()

Method Detail

init

public void init(DataInputStream is)
          throws IOException

Throws:

IOException

clearCache

public void clearCache(int tcpFlowCacheTimeout,
                       int fragmentedIPcacheTimeout)

Clear expired cache entries in order to avoid memory problems

close

public void close()

validateMagicNumber

protected boolean validateMagicNumber(byte[] pcapHeader)

getLinkType

protected PcapReader.LinkType getLinkType(long linkTypeVal)

findIPStart

protected int findIPStart(byte[] packet)

readBytes

protected boolean readBytes(byte[] buf)

iterator

public Iterator<Packet> iterator()

Specified by:

iterator in interface Iterable<Packet>

getFlows

public com.google.common.collect.Multimap<TCPFlow,SequencePayload> getFlows()

setFlows

public void setFlows(com.google.common.collect.Multimap<TCPFlow,SequencePayload> flows)

getTcpPrefixError

public int getTcpPrefixError()

getDnsDecodeError

public int getDnsDecodeError()

getDatagrams

public com.google.common.collect.Multimap<Datagram,DatagramPayload> getDatagrams()

setDatagrams

public void setDatagrams(com.google.common.collect.Multimap<Datagram,DatagramPayload> map)