1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
|
/*
* This file is part of libtrace
*
* Copyright (c) 2007,2008,2009,2010 The University of Waikato, Hamilton,
* New Zealand.
*
* Authors: Daniel Lawson
* Perry Lorier
* Shane Alcock
*
* All rights reserved.
*
* This code has been developed by the University of Waikato WAND
* research group. For further information please see http://www.wand.net.nz/
*
* libtrace is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* libtrace is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with libtrace; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
*
* $Id: dagformat.h 1505 2010-02-03 01:00:32Z salcock $
*
*/
/** @file
*
* @brief Header file containing definitions required to process DAG / ERF
* traces
*
* @author Daniel Lawson
* @author Perry Lorier
* @author Shane Alcock
*
* @version $Id: dagformat.h 1505 2010-02-03 01:00:32Z salcock $
*
* Most of the structures defined in here are already defined in the Endace DAG
* libraries, but we need to re-define them ourselves here so that we can
* process ERF traces without requiring the user to buy a DAG card :)
*/
#ifndef _DAGFORMAT_H_
#define _DAGFORMAT_H_
#include "libtrace.h"
#include "erftypes.h"
#ifdef WIN32
#pragma pack(push)
#pragma pack(1)
#endif
/** GPP Type 1 */
typedef struct pos_rec {
uint32_t hdlc; /**< The HDLC header */
uint8_t pload[1]; /**< First byte of payload */
} PACKED pos_rec_t;
/** GPP Type 2 */
typedef struct eth_rec {
uint8_t offset; /**< Ethernet record offset */
uint8_t pad; /**< Padding */
uint8_t dst[6]; /**< Destination MAC address */
uint8_t src[6]; /**< Source MAC address */
uint16_t etype; /**< Ethertype */
uint8_t pload[1]; /**< First byte of payload */
} PACKED eth_rec_t;
/** GPP Type 3 */
typedef struct atm_rec {
uint32_t header; /**< The ATM header */
uint8_t pload[1]; /**< First byte of payload */
} PACKED atm_rec_t;
/** GPP Type 4 */
typedef struct aal5_rec {
uint32_t header; /**< The AAL5 header */
uint8_t pload[1]; /**< First byte of payload */
} PACKED aal5_rec_t;
/** Flags */
typedef struct flags {
LT_BITFIELD8 iface:2; /**< Interface (direction) */
LT_BITFIELD8 vlen:1; /**< Varying Record Lengths Present */
LT_BITFIELD8 trunc:1; /**< Truncated Record */
LT_BITFIELD8 rxerror:1; /**< RX Error detected */
LT_BITFIELD8 dserror:1; /**< Data stream error */
LT_BITFIELD8 pad:2; /**< Unused */
} PACKED flags_t;
/** GPP Global type */
typedef struct dag_record {
uint64_t ts; /**< ERF timestamp */
uint8_t type; /**< GPP record type */
flags_t flags; /**< Flags */
uint16_t rlen; /**< Record len (capture+framing) */
uint16_t lctr; /**< Loss counter */
uint16_t wlen; /**< Wire length */
union {
pos_rec_t pos;
eth_rec_t eth;
atm_rec_t atm;
aal5_rec_t aal5;
} rec; /**< The captured record itself */
} PACKED dag_record_t;
#ifdef WIN32
#pragma pack(pop)
#endif
/** The size of the ERF record header, without the rec field */
#define dag_record_size 16U
#endif /* _DAGFORMAT_H_ */
|
