net-trace 0.2.0

A network trace parser for pcap files. You can parse packets with all relevant IPv4 and TCP fields. Further you can get all relevant TCP sessions. (tshark is required to be installed on your system.)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

mod packet;
mod parser;
mod sessions;

use std::path::Path;
// for writing to files
use std::fs::File;
use std::io::prelude::*;
use serde_json::json;

#[allow(unused_imports)]
use packet::*;
use parser::parse_pcap;
use sessions::find_tcp_sessions;
fn main() {
    let path = Path::new("src/example/pcap/rsasnakeoil2.pcap");
    let res = match parse_pcap(path) {
        Ok(res) => res,
        Err(e) => {
            println!("{:#?}", e);
            return;
        }
    };
    println!("Got {} packets", res.len());

    // write to file
    let mut file = File::create("src/example/pcap/packets.json").unwrap();
    file.write_all(json!(res).to_string().as_bytes()).unwrap();

    let sessions = find_tcp_sessions(&res);
    println!("Got {} sessions", sessions.len());

    // Write sessions to file
    let mut file = File::create("src/example/pcap/tcp_sessions.json").unwrap();
    file.write_all(json!(sessions).to_string().as_bytes()).unwrap();

    println!("TCP sessions saved to tcp_sessions.json");
}