Crate snoop

snoop is a rust library to read and write files in snoop file format.

Example

the default case is to read from a snoop file.

$ cargo add snoop --features read

Then use the snoop reader on a file in main.rs:

extern crate snoop;

use snoop::read::Reader;
use std::fs::File;
use std::io::BufReader;

/// cargo run --example read -- snoop_file.cap
///
/// read a single snoop file and get a copy of the data
fn main() {
    let fp = match File::open(
        std::env::args()
            .nth(1)
            .expect("no path to snoop file given"),
    ) {
        Ok(f) => f,
        Err(e) => {
            println!("File Error: {}", e);
            return;
        }
    };
    let mut cnt = 0u32;
    for i in Reader::new(BufReader::new(fp)).unwrap() {
        cnt += 1;
        let packet = i.unwrap();
        println!(
            "packet: {}\n{:#?}\ndata: {:x?}\n",
            cnt,
            &packet.header,
            &packet.data[..]
        );
    }
}

feature flags

default features

• parser: format parser

optional features

• read: read from a reader like files or buf
• write: write to a writer like files or buf
• full: include parser, reader and writer

Modules

error

custom errors that can happen using snoop.

format

implementation of the snoop file format version 2.

parse

parse snoop headers and calculate data len and pads.