win_adv_capture.c File Reference

#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <errno.h>
#include <pcap.h>
#include <unistd.h>
#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <cygwin/in.h>
#include "debug.h"
#include "mn.h"

Include dependency graph for win_adv_capture.c:

Go to the source code of this file.

Data Structures
struct	dst_data
Functions
pid_t	init_pcap_for_advs (void)

---

Function Documentation

pid_t init_pcap_for_advs

(

void

)

Definition at line 78 of file win_adv_capture.c.

References dst_data::addr, DEBUG(), and dst_data::s.

Referenced by mn_init().

{
        pcap_t *fp;
        char error[PCAP_ERRBUF_SIZE];
        char *dev;
        struct dst_data dst;
        pid_t pid;

        pid = fork();
        if (pid < 0) {
                DEBUG(DEBUG_INFO, "init_pcap_for_advs: fork failed: %s\n",
                      strerror(errno));
                return -1;
        }

        if (pid > 0) {
                /* in parent - return */
                return pid;
        }

        dst.s = socket(AF_INET, SOCK_DGRAM, 0);
        if (dst.s < 0) {
                perror("socket");
                exit(1);
        }
        dst.addr.sin_family = AF_INET;
        dst.addr.sin_addr.s_addr = htonl((127 << 24 | 1));
        dst.addr.sin_port = htons(4344);

        /* FIX: should support more than one interface and also detect new
         * interfaces when, e.g., wireless LAN card is inserted */

        dev = pcap_lookupdev(error);
        if (dev == NULL) {
                DEBUG(DEBUG_INFO,
                      "init_pcap_for_advs: Could not get device (%s)\n",
                      error);
                return -1;
        }

        DEBUG(DEBUG_INFO, "init_pcap_for_advs: using device '%s'\n", dev);
        fp = pcap_open_live(dev, 1500, 0, 20, error);
        if (fp == NULL) {
                DEBUG(DEBUG_INFO, "pcap_open_live failed (%s)\n", error);
                return -1;
        }

        if (pcap_setfilter(fp, &agentadv_fprog) < 0) {
                DEBUG(DEBUG_INFO,
                      "init_pcap_for_advs: Could not attach BPF\n");
                return -1;
        }

        /* in child - start capturing packets */
        DEBUG(DEBUG_INFO, "init_pcap_for_advs: child starting to capture "
              "packets\n");

        pcap_loop(fp, 0, dispatcher_handler, (u_char *) &dst);

        /* never reached */
        DEBUG(DEBUG_INFO, "pcap_loop returned?!\n");
        return 0;
}

Here is the call graph for this function:

---