2 * This program is free software; you can redistribute it and/or modify
3 * it under the terms of the GNU General Public License as published by
4 * the Free Software Foundation; either version 2 of the License, or
5 * (at your option) any later version.
7 * This program is distributed in the hope that it will be useful,
8 * but WITHOUT ANY WARRANTY; without even the implied warranty of
9 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
10 * GNU General Public License for more details.
12 * You should have received a copy of the GNU General Public License
13 * along with this program; if not, write to the Free Software
14 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
18 * Author : Maxim Mamontov <faust@stargazer.dp.ua>
24 #include "stg/plugin.h"
25 #include "stg/module_settings.h"
26 #include "stg/logger.h"
33 #include <sys/select.h>
45 DEV() : device("any"), filterExpression("ip"), handle(NULL), fd(-1) {}
46 DEV(const std::string & d) : device(d), filterExpression("ip"), handle(NULL), fd(-1) {}
47 DEV(const std::string & d, const std::string & f)
48 : device(d), filterExpression(f), handle(NULL), fd(-1) {}
51 std::string filterExpression;
53 struct bpf_program filter;
57 typedef std::vector<DEV> DEV_MAP;
59 class PCAP_CAP : public PLUGIN {
62 virtual ~PCAP_CAP() {}
64 void SetTraffcounter(TRAFFCOUNTER * tc) { traffCnt = tc; }
68 int Reload(const MODULE_SETTINGS & /*ms*/) { return 0; }
69 bool IsRunning() { return isRunning; }
71 void SetSettings(const MODULE_SETTINGS & s) { settings = s; }
74 const std::string & GetStrError() const { return errorStr; }
75 std::string GetVersion() const;
76 uint16_t GetStartPosition() const { return 40; }
77 uint16_t GetStopPosition() const { return 40; }
80 PCAP_CAP(const PCAP_CAP & rvalue);
81 PCAP_CAP & operator=(const PCAP_CAP & rvalue);
83 void TryRead(const fd_set & set);
84 void TryReadDev(const DEV & dev);
86 static void * Run(void *);
88 mutable std::string errorStr;
93 MODULE_SETTINGS settings;
96 TRAFFCOUNTER * traffCnt;
100 //-----------------------------------------------------------------------------