Crate extcap

Expand description

This crate helps writing extcap plugins for Wireshark.

Quick Example

use extcap::{Extcap, ExtcapListener, ExtcapResult, ExtcapWriter, IFace};
use pcap_file::{pcap::PcapHeader, DataLink, PcapWriter};

struct HelloDump {}

impl ExtcapListener for HelloDump {
    fn capture_header(&mut self, extcap: &Extcap, ifc: &IFace) -> PcapHeader {
        PcapHeader { datalink: DataLink::USER10, ..Default::default() }
    }

    fn capture(&mut self, extcap: &Extcap, ifc: &IFace, mut pcap_writer: PcapWriter<ExtcapWriter>) -> ExtcapResult<()> {
        let pkt = b"Hello Extcap!";
        pcap_writer.write(0, 0, pkt, pkt.len() as u32);
        Ok(())
    }
}

fn main() -> Result<(), Box<dyn std::error::Error>> {
    let mut ex = Extcap::new("hellodump");
    ex.add_interface(IFace::new("helloif"));
    ex.run(HelloDump {});
    Ok(())
}