2 * Copyright (C) 1993-1998 by Darren Reed.
4 * Redistribution and use in source and binary forms are permitted
5 * provided that this notice is preserved and due credit is given
6 * to the original author and the contributors.
12 00:05:47.816843 128.231.76.76.3291 > 224.2.252.231.36573: udp 36 (encap)
16 00:33:48.410771 192.73.213.11.1463 > 224.2.248.153.59360: udp 31 (encap)
20 128.250.133.13.23 > 128.250.20.20.2419: tcp 27
24 123456789.1234567 128.250.133.13.23 > 128.250.20.20.2419: tcp 27
28 8:0:20:f:65:f7 0:0:c:1:8a:c5 81: 128.250.133.13.23 > 128.250.20.20.2419: tcp 27
33 #if !defined(__SVR4) && !defined(__GNUC__)
36 #include <sys/types.h>
37 #include <sys/param.h>
42 #include <sys/socket.h>
43 #include <sys/ioctl.h>
44 #include <netinet/in.h>
45 #include <arpa/inet.h>
46 #include <netinet/in_systm.h>
48 #include <netinet/ip_var.h>
50 #include <netinet/ip.h>
51 #include <netinet/tcp.h>
52 #include <netinet/udp.h>
53 #include <netinet/ip_icmp.h>
56 #include "ip_compat.h"
57 #include <netinet/tcpip.h>
62 static const char sccsid[] = "@(#)ipft_td.c 1.8 2/4/96 (C)1995 Darren Reed";
63 static const char rcsid[] = "@(#)$Id: ipft_td.c,v 2.1 1999/08/04 17:30:04 darrenr Exp $";
66 static int tcpd_open __P((char *));
67 static int tcpd_close __P((void));
68 static int tcpd_readip __P((char *, int, char **, int *));
69 static int count_dots __P((char *));
71 struct ipread tcpd = { tcpd_open, tcpd_close, tcpd_readip };
73 static FILE *tfp = NULL;
77 static int tcpd_open(fname)
83 if (!strcmp(fname, "-")) {
87 tfd = open(fname, O_RDONLY);
88 tfp = fdopen(tfd, "r");
94 static int tcpd_close()
101 static int count_dots(str)
113 static int tcpd_readip(buf, cnt, ifn, dir)
118 ip_t *ip = (ip_t *)&pkt;
120 char src[32], dst[32], misc[256], time[32], link1[32], link2[32];
122 int n, dots, slen, extra = 0;
124 if (!fgets(lbuf, sizeof(lbuf) - 1, tfp))
127 if ((s = strchr(lbuf, '\n')))
129 lbuf[sizeof(lbuf)-1] = '\0';
131 bzero(&pkt, sizeof(pkt));
133 if ((n = sscanf(lbuf, "%s > %s: %s", src, dst, misc)) != 3)
134 if ((n = sscanf(lbuf, "%s %s > %s: %s",
135 time, src, dst, misc)) != 4)
136 if ((n = sscanf(lbuf, "%s %s: %s > %s: %s",
137 link1, link2, src, dst, misc)) != 5) {
138 n = sscanf(lbuf, "%s %s %s: %s > %s: %s",
139 time, link1, link2, src, dst, misc);
144 if ((dots = count_dots(dst)) == 4) {
145 s = strrchr(src, '.');
147 (void) inet_aton(src, &ip->ip_src);
148 pkt.ti_sport = htons(atoi(s));
150 s = strrchr(dst, '.');
153 (void) inet_aton(src, &ip->ip_dst);
154 pkt.ti_dport = htons(atoi(s));
158 (void) inet_aton(src, &ip->ip_src);
159 (void) inet_aton(src, &ip->ip_dst);
161 ip->ip_len = ip->ip_hl = sizeof(ip_t);
163 s = strtok(misc, " :");
164 if ((p = getprotobyname(s))) {
165 ip->ip_p = p->p_proto;
167 switch (p->p_proto) {
170 s = strtok(NULL, " :");
171 ip->ip_len += atoi(s);
172 if (p->p_proto == IPPROTO_TCP)
173 extra = sizeof(struct tcphdr);
174 else if (p->p_proto == IPPROTO_UDP)
175 extra = sizeof(struct udphdr);
179 extra = sizeof(struct igmp);
183 extra = sizeof(struct icmp);
189 slen = ip->ip_hl + extra + ip->ip_len;