func TestCapture(t *testing.T) {
src, err := file.Open("capture_test.pcap")
if err != nil {
t.Fatalf("Error opening: %s", err)
}
defer src.Close()
var count uint64
for {
buf, err := src.Capture()
if err != nil {
t.Fatalf("Error reading: %s", err)
}
if buf == nil {
break
}
count++
}
if count != 16 {
t.Fatalf("Count mismatch: %d", count)
}
}
func ExampleCapture() {
src, err := file.Open("/path/to/file/dump.pcap")
if err != nil {
log.Fatal(err)
}
defer src.Close()
// you may configure the source further, e.g. by activating
// promiscuous mode.
err = src.Activate()
if err != nil {
log.Fatal(err)
}
for {
buf, err := src.Capture()
if err != nil {
log.Fatal(err)
}
if buf == nil {
break
}
log.Println("PACKET!!!")
// do something with the packet
}
}
func ExampleInject() {
dst, err := file.Open("/path/to/file/dump.pcap")
if err != nil {
log.Fatal(err)
}
defer dst.Close()
// you may configure the source further, e.g. by activating
// promiscuous mode.
err = dst.Activate()
if err != nil {
log.Fatal(err)
}
err = dst.Inject([]byte("random data"))
if err != nil {
log.Fatal(err)
}
}
func TestCaptureFilter(t *testing.T) {
src, err := file.Open("capture_test.pcap")
if err != nil {
t.Fatalf("Error opening: %s", err)
}
defer src.Close()
flt, err := filter.Compile("arp", src.LinkType())
if err != nil {
t.Fatalf("Error parsing filter: %s", err)
}
defer flt.Cleanup()
err = src.ApplyFilter(flt)
if err != nil {
t.Fatalf("Error applying filter: %s", err)
}
var count uint64
for {
buf, err := src.Capture()
if err != nil {
t.Fatalf("Error reading: %s %d", err, count)
}
if buf == nil {
break
}
count++
}
if count != 2 {
t.Fatalf("Count mismatch: %d", count)
}
}
func main() {
log.SetFlags(0)
usage := `Usage: dump [options] [<expression>]
Dump the traffic on the network (like tcpdump).
Options:
-c <count> Exit after receiving count packets.
-i <iface> Listen on interface.
-r <file> Read packets from file.
-w <file> Write the raw packets to file.`
args, err := docopt.Parse(usage, nil, true, "", false)
if err != nil {
log.Fatalf("Invalid arguments: %s", err)
}
var count uint64
if args["-c"] != nil {
count, err = strconv.ParseUint(args["-c"].(string), 10, 64)
if err != nil {
log.Fatalf("Error parsing count: %s", err)
}
}
var src capture.Handle
if args["-i"] != nil {
src, err = pcap.Open(args["-i"].(string))
if err != nil {
log.Fatalf("Error opening iface: %s", err)
}
} else if args["-r"] != nil {
src, err = file.Open(args["-r"].(string))
if err != nil {
log.Fatalf("Error opening file: %s", err)
}
} else {
log.Fatalf("Must select a source (either -i or -r)")
}
defer src.Close()
var dst capture.Handle
if args["-w"] != nil {
dst, err = file.Open(args["-w"].(string))
if err != nil {
log.Fatalf("Error opening file: %s", err)
}
defer dst.Close()
}
err = src.Activate()
if err != nil {
log.Fatalf("Error activating source: %s", err)
}
if args["<expression>"] != nil {
expr := args["<expression>"].(string)
flt, err := filter.Compile(expr, src.LinkType(), false)
if err != nil {
log.Fatalf("Error parsing filter: %s", err)
}
defer flt.Cleanup()
err = src.ApplyFilter(flt)
if err != nil {
log.Fatalf("Error appying filter: %s", err)
}
}
var i uint64
for {
buf, err := src.Capture()
if err != nil {
log.Fatalf("Error: %s", err)
break
}
if buf == nil {
break
}
i++
if dst == nil {
rcv_pkt, err := layers.UnpackAll(buf, src.LinkType())
if err != nil {
log.Printf("Error: %s\n", err)
}
log.Println(rcv_pkt)
} else {
dst.Inject(buf)
}
if count > 0 && i >= count {
break
}
}
}