romanbsd-pcap 0.7.0

data/lib/pcaplet.rb

@@ -0,0 +1,123 @@
+require 'pcap'
+require 'optparse'
+
+def pcaplet_usage()
+  $stderr.print <<END
+Usage: #{File.basename $0} [ -dnv ] [ -i interface | -r file ]
+       #{' ' * File.basename($0).length} [ -c count ] [ -s snaplen ] [ filter ]
+Options:
+  -n  do not convert address to name
+  -d  debug mode
+  -v  verbose mode
+END
+end
+
+module Pcap
+  class Pcaplet
+    def usage(status, msg = nil)
+      $stderr.puts msg if msg
+      pcaplet_usage
+      exit(status)
+    end
+
+    def initialize(args = nil)
+      if args
+        ARGV[0,0] = args.split(/\s+/)
+      end
+      @device = nil
+      @rfile = nil
+      @count = -1
+      @snaplen = 68
+      opts = OptionParser.new do |opts|
+        opts.on('-d') {$DEBUG = true}
+        opts.on('-v') {$VERBOSE = true}
+        opts.on('-n') {Pcap.convert = false}
+        opts.on('-i IFACE') {|s| @device = s}
+        opts.on('-r FILE') {|s| @rfile = s}
+        opts.on('-c COUNT', OptionParser::DecimalInteger) {|i| @count = i}
+        opts.on('-s LEN', OptionParser::DecimalInteger) {|i| @snaplen = i}
+      end
+      begin
+        opts.parse!
+      rescue
+        usage(1)
+      end
+      
+      @filter = ARGV.join(' ')
+
+      # check option consistency
+      usage(1) if @device && @rfile
+      if !@device and !@rfile
+        @device = Pcap.lookupdev
+      end
+
+      # open
+      begin
+        if @device
+          @capture = Capture.open_live(@device, @snaplen)
+        elsif @rfile
+          if @rfile !~ /\.gz$/
+            @capture = Capture.open_offline(@rfile)
+          else
+            $stdin = IO.popen("gzip -dc < #@rfile", 'r')
+            @capture = Capture.open_offline('-')
+          end
+        end
+        @capture.setfilter(@filter)
+      rescue PcapError, ArgumentError
+        $stdout.flush
+        $stderr.puts $!
+        exit(1)
+      end
+    end
+
+    attr('capture')
+
+    def add_filter(f)
+      if @filter == nil || @filter =~ /^\s*$/  # if empty
+        @filter = f
+      else
+        f = f.source if f.is_a? Filter
+        @filter = "( #{@filter} ) and ( #{f} )"
+      end
+      @capture.setfilter(@filter)
+    end
+
+    def each_packet(&block)
+      begin
+        duplicated = (RUBY_PLATFORM =~ /linux/ && @device == "lo")
+        unless duplicated
+          @capture.loop(@count, &block)
+        else
+          flip = true
+          @capture.loop(@count) do |pkt|
+            flip = (! flip)
+            next if flip
+            block.call pkt
+          end
+        end
+      rescue Interrupt
+        $stdout.flush
+        $stderr.puts("Interrupted.")
+        $stderr.puts $@.join("\n\t") if $DEBUG
+      ensure
+        # print statistics if live
+        if @device
+          stat = @capture.stats
+          if stat
+            $stderr.print("#{stat.recv} packets received by filter\n");
+            $stderr.print("#{stat.drop} packets dropped by kernel\n");
+          end
+        end
+      end
+    end
+
+    alias each each_packet
+
+    def close
+      @capture.close
+    end
+  end
+end
+
+Pcaplet = Pcap::Pcaplet

metadata

@@ -0,0 +1,103 @@
+--- !ruby/object:Gem::Specification 
+name: romanbsd-pcap
+version: !ruby/object:Gem::Version 
+  version: 0.7.0
+platform: ruby
+authors: 
+- Masaki Fukushima
+- Andrew Hobson
+autorequire: 
+bindir: bin
+cert_chain: []
+
+date: 2009-06-06 00:00:00 -07:00
+default_executable: 
+dependencies: []
+
+description: Ruby interface to LBL Packet Capture library. This library also includes classes to access packet header fields.
+email: fukusima@goto.info.waseda.ac.jp
+executables: []
+
+extensions: 
+- ext/extconf.rb
+extra_rdoc_files: 
+- ChangeLog
+- README
+- README.ja
+files: 
+- COPYING
+- ChangeLog
+- MANIFEST
+- README
+- README.ja
+- Rakefile
+- VERSION
+- doc-ja/Capture.html
+- doc-ja/Dumper.html
+- doc-ja/Filter.html
+- doc-ja/ICMPPacket.html
+- doc-ja/IPAddress.html
+- doc-ja/IPPacket.html
+- doc-ja/Packet.html
+- doc-ja/Pcap.html
+- doc-ja/PcapError.html
+- doc-ja/Pcaplet.html
+- doc-ja/TCPPacket.html
+- doc-ja/TruncatedPacket.html
+- doc-ja/UDPPacket.html
+- doc-ja/index.html
+- doc/Capture.html
+- doc/Dumper.html
+- doc/Filter.html
+- doc/ICMPPacket.html
+- doc/IPAddress.html
+- doc/IPPacket.html
+- doc/Packet.html
+- doc/Pcap.html
+- doc/PcapError.html
+- doc/Pcaplet.html
+- doc/TCPPacket.html
+- doc/TruncatedPacket.html
+- doc/UDPPacket.html
+- doc/index.html
+- examples/httpdump.rb
+- examples/tcpdump.rb
+- examples/test.rb
+- ext/Pcap.c
+- ext/extconf.rb
+- ext/icmp_packet.c
+- ext/ip_packet.c
+- ext/packet.c
+- ext/ruby_pcap.h
+- ext/tcp_packet.c
+- ext/udp_packet.c
+- lib/pcap_misc.rb
+- lib/pcaplet.rb
+has_rdoc: true
+homepage: http://www.goto.info.waseda.ac.jp/~fukusima/ruby/pcap-e.html
+post_install_message: 
+rdoc_options: 
+- --charset=UTF-8
+require_paths: 
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+  version: 
+required_rubygems_version: !ruby/object:Gem::Requirement 
+  requirements: 
+  - - ">="
+    - !ruby/object:Gem::Version 
+      version: "0"
+  version: 
+requirements: []
+
+rubyforge_project: 
+rubygems_version: 1.2.0
+signing_key: 
+specification_version: 2
+summary: Interface to LBL Packet Capture library (libpcap)
+test_files: []
+