diff options
Diffstat (limited to 'analyzer/analyzer.c')
| -rw-r--r-- | analyzer/analyzer.c | 72 |
1 files changed, 72 insertions, 0 deletions
diff --git a/analyzer/analyzer.c b/analyzer/analyzer.c new file mode 100644 index 0000000..aa4a645 --- /dev/null +++ b/analyzer/analyzer.c @@ -0,0 +1,72 @@ +#include "analyzer.h" + +#include <stdlib.h> +#include <string.h> + +#include "parser/parser.h" +#include "render.h" +#include "utils/tcp.h" + +// loop through packets received from pcap_handle and analyze the TCP stream +void analyzer_loop( + TCPStream *stream, pcap_t *pcap_handle, void *state, void (*parsed_data_handler)(void *state, ParsedData *parsed_data, size_t n_parsed_data) +) { + // read packets from handle + struct pcap_pkthdr *packet_data; + const byte_t *packet; + while (pcap_next_ex(pcap_handle, &packet_data, &packet) == 1) { + // get new segment + TCPSegment segment = get_segment_from_packet(packet, packet_data); + + // handle the new segment if it's correct one and has data in it (ignore SYN) + if (segment.len > 0 && handle_segment(stream, segment)) { + // if it was added to the stream - parse it + size_t parsed_len; + size_t n_parsed_data; + ParsedData *parsed_data = parse_stream(stream, &parsed_len, &n_parsed_data); + + // if some bytes were parsed - remove them from the stream + if (parsed_len > 0) + remove_parsed_data(stream, parsed_len); + + // if there's parsed data - call the parsed data handler + if (n_parsed_data > 0) + parsed_data_handler(state, parsed_data, n_parsed_data); + + // free the entire parsed data memory + free_parsed_data(parsed_data, n_parsed_data); + } + } +} + +// file analyzer parsed data handler +void file_parsed_data_handler(void *state, ParsedData *parsed_data, size_t n_parsed_data) { + int *fights_count = state; + for (size_t i = 0; i < n_parsed_data; i++) { + switch (parsed_data[i].data_type) { + case TYPE_FIGHT_RESULTS: + printf("\nFIGHT %d:\n", ++*fights_count); + render_fight_results(*(FightResults *)parsed_data[i].data); + break; + } + } +} + +void analyze_file(char *path) { + // open the file + char errbuf[PCAP_ERRBUF_SIZE]; + pcap_t *handle = pcap_open_offline(path, errbuf); + + // handle errors + if (handle == NULL) { + fprintf(stderr, "Couldn't open the specified file:\n%s\n", errbuf); + return; + } + + // analyze the file + TCPStream stream = new_stream(); + int state = 0; + analyzer_loop(&stream, handle, &state, file_parsed_data_handler); + destroy_stream(stream); + pcap_close(handle); +} |
