1 /* $OpenBSD: pflogd.h,v 1.3 2006/01/15 16:38:04 canacar Exp $ */ 2 3 /* 4 * Copyright (c) 2003 Can Erkin Acar 5 * 6 * Permission to use, copy, modify, and distribute this software for any 7 * purpose with or without fee is hereby granted, provided that the above 8 * copyright notice and this permission notice appear in all copies. 9 * 10 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES 11 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF 12 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR 13 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 14 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN 15 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF 16 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE. 17 */ 18 19 #include <sys/limits.h> 20 #include <pcap.h> 21 22 #define DEF_SNAPLEN 116 /* default plus allow for larger header of pflog */ 23 #define PCAP_TO_MS 500 /* pcap read timeout (ms) */ 24 #define PCAP_NUM_PKTS 1000 /* max number of packets to process at each loop */ 25 #define PCAP_OPT_FIL 1 /* filter optimization */ 26 #define FLUSH_DELAY 60 /* flush delay */ 27 28 #define PFLOGD_LOG_FILE "/var/log/pflog" 29 #define PFLOGD_DEFAULT_IF "pflog0" 30 31 #define PFLOGD_MAXSNAPLEN INT_MAX 32 #define PFLOGD_BUFSIZE 65536 /* buffer size for incoming packets */ 33 34 void logmsg(int priority, const char *message, ...); 35 36 /* Privilege separation */ 37 int priv_init(void); 38 int priv_set_snaplen(int snaplen); 39 int priv_open_log(void); 40 int priv_move_log(void); 41 pcap_t *pcap_open_live_fd(int fd, int snaplen, char *ebuf); 42 43 /* XXX TODO: Investigate a permanent solution, rather than defining these two 44 structures here. */ 45 struct pcap_timeval { 46 bpf_u_int32 tv_sec; /* seconds */ 47 bpf_u_int32 tv_usec; /* microseconds */ 48 }; 49 50 struct pcap_sf_pkthdr { 51 struct pcap_timeval ts; /* time stamp */ 52 bpf_u_int32 caplen; /* length of portion present */ 53 bpf_u_int32 len; /* length of this packet (off wire) */ 54 }; 55 56 void set_pcap_filter(void); 57 /* File descriptor send/recv */ 58 void send_fd(int, int); 59 int receive_fd(int); 60 61 extern int Debug; 62