pcap-to-dlt-en10mb.c

#include <stdio.h>
#include <unistd.h>
#include <stdlib.h>
#include <pcap.h>
#include <err.h>
#include <string.h>
#include <time.h>
#include <errno.h>

#include <sys/types.h>
#include <sys/socket.h>
#include <netinet/in.h>
#include <netinet/ip6.h>
#include <arpa/inet.h>

#include <pcap_layers.h>
#include "pcap-tools.h"

#ifndef ETHERTYPE_IPV6
#define ETHERTYPE_IPV6 0x86dd
#endif

const char *progname;
struct pcap_pkthdr out_hdr;
u_char out_data[65536];

/*
 * this will only be called if 'ip' is a complete IPv header
 */
int
my_ip4_handler(const struct ip *ip4, int len, void *userdata)
{
    out_hdr.len = out_hdr.caplen = len + 14;
    htonps(&out_data[12], ETHERTYPE_IP);
    memcpy(&out_data[14], ip4, len);
    return 0;
}

int
my_ip6_handler(const struct ip6_hdr *ip6, int len, void *userdata)
{
    out_hdr.len = out_hdr.caplen = len + 14;
    htonps(&out_data[12], ETHERTYPE_IPV6);
    memcpy(&out_data[14], ip6, len);
    return 0;
}

int
main(int argc, char *argv[])
{
    pcap_t *in = NULL;
    struct pcap_pkthdr hdr;
    const u_char *data;
    pcap_dumper_t *out = NULL;
    pcap_t *dead;

    memset(out_data, 0, sizeof(out_data));
    progname = argv[0];
    if (argc < 2) {
	fprintf(stderr, "usage: %s pcapfiles\n", progname);
	exit(1);
    }

    in = my_pcap_open_offline(argv[1]);
    dead = pcap_open_dead(DLT_EN10MB, 65536);
    if (NULL == dead) {
	perror("pcap_open_dead");
	exit(1);
    }
    out = pcap_dump_open(dead, "-");
    if (NULL == out) {
	perror("stdout");
	exit(1);
    }
    pcap_layers_init(pcap_datalink(in), 0);
    callback_ipv4 = my_ip4_handler;
    callback_ipv6 = my_ip6_handler;
    while ((data = pcap_next(in, &hdr))) {
	out_hdr.ts = hdr.ts;
	out_hdr.len = 0;
	out_hdr.caplen = 0;
	handle_pcap(NULL, &hdr, data);
	if (out_hdr.len)
	    pcap_dump((void *) out, &out_hdr, out_data);
    }
    my_pcap_close_offline(in);
    pcap_dump_close(out);
    exit(0);
}