libnd_dumper 3 LIBNETDUDE Library libnd_dumper #define LND_DUMPER_500MB #define LND_DUMPER_1GB #define LND_DUMPER_2GB typedef LND_Dumper; LND_DumperArgs; void libnd_dumper_args_init (LND_DumperArgs *args); LND_Dumper* libnd_dumper_new (pcap_t *pcap, const char *dumper_name, LND_DumperArgs *args); void libnd_dumper_free (LND_Dumper *dumper); gboolean libnd_dumper_write (LND_Dumper *dumper, LND_Packet *packet); void libnd_dumper_delete (LND_Dumper *dumper); guint64 libnd_dumper_get_size (LND_Dumper *dumper); LND_DUMPER_500MB#define LND_DUMPER_500MB 500000000 LND_DUMPER_1GB#define LND_DUMPER_1GB 1000000000 LND_DUMPER_2GB#define LND_DUMPER_2GB 2000000000 LND_Dumpertypedef struct lnd_dumper LND_Dumper; LND_DumperArgstypedef struct { pcapnav_dumpmode_t open_mode; guint64 file_limit; guint64 hard_limit; } LND_DumperArgs; libnd_dumper_args_initvoid libnd_dumper_args_init (LND_DumperArgs *args); The function initializes the dumper spec structure to default values. Currently, these are all zeroes. args : the argument structure to initialize. libnd_dumper_newLND_Dumper* libnd_dumper_new (pcap_t *pcap, const char *dumper_name, LND_DumperArgs *args); The function returns a new dumper, or NULL on error. args can be NULL, in which case a per-file size limit of 1GB is enforced. pcap : the pcap handle for the new dumper, as used in pcap_dump_open(). dumper_name : the file name of the dumper. args : the dumper specification. Returns : libnd_dumper_freevoid libnd_dumper_free (LND_Dumper *dumper); The function closes the current output file, if any, and releases all memory resources of the dumper. dumper : dumper to close. libnd_dumper_writegboolean libnd_dumper_write (LND_Dumper *dumper, LND_Packet *packet); dumper : packet : Returns : libnd_dumper_deletevoid libnd_dumper_delete (LND_Dumper *dumper); The function looks for all files the dumper might have created based on its name and deletes them, until one is found that does not exist. So if the dumper name is "foo", it potentially deletes files foo, foo.00001, foo.00002 etc, until a nonexistant file is hit. dumper : the dumper whose files to delete. libnd_dumper_get_sizeguint64 libnd_dumper_get_size (LND_Dumper *dumper); The function returns the total size, in bytes, of all packets ever written to this dumper (counting across multiple created files). dumper : dumper to return size of. Returns :