netring 0.5.0

High-performance zero-copy packet I/O for Linux (AF_PACKET TPACKET_V3 + AF_XDP)
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

//! Capture packets to a PCAP file (feature: `pcap`).
//!
//! Usage: cargo run --example pcap_write --features pcap -- [interface] [count] [out.pcap]
//!
//! Defaults: lo / 100 packets / out.pcap

#[cfg(feature = "pcap")]
fn main() -> Result<(), Box<dyn std::error::Error>> {
    use netring::Capture;
    use netring::pcap::CaptureWriter;
    use std::fs::File;

    let iface = std::env::args().nth(1).unwrap_or_else(|| "lo".into());
    let count: usize = std::env::args()
        .nth(2)
        .and_then(|s| s.parse().ok())
        .unwrap_or(100);
    let out = std::env::args().nth(3).unwrap_or_else(|| "out.pcap".into());

    eprintln!("Capturing {count} packets from {iface} into {out}");

    let mut cap = Capture::open(&iface)?;
    let mut writer = CaptureWriter::create(File::create(&out)?)?;

    for pkt in cap.packets().take(count) {
        writer.write_packet(&pkt)?;
    }

    eprintln!("Done. Inspect with `tcpdump -r {out}` or `wireshark {out}`.");
    Ok(())
}

#[cfg(not(feature = "pcap"))]
fn main() {
    eprintln!(
        "This example requires the 'pcap' feature: cargo run --example pcap_write --features pcap"
    );
}