72 lines
2 KiB
Go
72 lines
2 KiB
Go
// Licensed to Elasticsearch B.V. under one or more contributor
|
|
// license agreements. See the NOTICE file distributed with
|
|
// this work for additional information regarding copyright
|
|
// ownership. Elasticsearch B.V. licenses this file to you under
|
|
// the Apache License, Version 2.0 (the "License"); you may
|
|
// not use this file except in compliance with the License.
|
|
// You may obtain a copy of the License at
|
|
//
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
//
|
|
// Unless required by applicable law or agreed to in writing,
|
|
// software distributed under the License is distributed on an
|
|
// "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
|
|
// KIND, either express or implied. See the License for the
|
|
// specific language governing permissions and limitations
|
|
// under the License.
|
|
|
|
// +build linux
|
|
|
|
package sniffer
|
|
|
|
import (
|
|
"time"
|
|
|
|
"github.com/tsg/gopacket"
|
|
"github.com/tsg/gopacket/afpacket"
|
|
"github.com/tsg/gopacket/layers"
|
|
)
|
|
|
|
type afpacketHandle struct {
|
|
TPacket *afpacket.TPacket
|
|
}
|
|
|
|
func newAfpacketHandle(device string, snaplen int, block_size int, num_blocks int,
|
|
timeout time.Duration) (*afpacketHandle, error) {
|
|
|
|
h := &afpacketHandle{}
|
|
var err error
|
|
|
|
if device == "any" {
|
|
h.TPacket, err = afpacket.NewTPacket(
|
|
afpacket.OptFrameSize(snaplen),
|
|
afpacket.OptBlockSize(block_size),
|
|
afpacket.OptNumBlocks(num_blocks),
|
|
afpacket.OptPollTimeout(timeout))
|
|
} else {
|
|
h.TPacket, err = afpacket.NewTPacket(
|
|
afpacket.OptInterface(device),
|
|
afpacket.OptFrameSize(snaplen),
|
|
afpacket.OptBlockSize(block_size),
|
|
afpacket.OptNumBlocks(num_blocks),
|
|
afpacket.OptPollTimeout(timeout))
|
|
}
|
|
|
|
return h, err
|
|
}
|
|
|
|
func (h *afpacketHandle) ReadPacketData() (data []byte, ci gopacket.CaptureInfo, err error) {
|
|
return h.TPacket.ReadPacketData()
|
|
}
|
|
|
|
func (h *afpacketHandle) SetBPFFilter(expr string) (_ error) {
|
|
return h.TPacket.SetBPFFilter(expr)
|
|
}
|
|
|
|
func (h *afpacketHandle) LinkType() layers.LinkType {
|
|
return layers.LinkTypeEthernet
|
|
}
|
|
|
|
func (h *afpacketHandle) Close() {
|
|
h.TPacket.Close()
|
|
}
|