epl-viz/liblibwireshark

Leverage the libwireshark v2.4.0 capture and dissector API in your own application

EPL-Viz

EPL-Viz is a visualizer for ethernetPOWERLINK setups.

Downloads

OS	Dowbload link	Version
Linux	https://github.com/epl-viz/EPL-Viz/releases/download/v1.3.2/EPLViz-x86_64.AppImage	v1.3.2
Windows	https://github.com/epl-viz/EPL-Viz/releases/download/v1.3.1/EPL-Viz-1.3.1-win64.msi	v1.3.1
Source	https://github.com/epl-viz/EPL-Viz/archive/v1.3.2.tar.gz	v1.3.2

Initial Setup

See INSTALL.md for instructions

CMake options

• -DUSE_SYSTEM_PACKETS=<ON/OFF> Looks for dependencies in the system, don't use the submodules
• -DDISABLE_TESTS=<ON/OFF> Flag to disable all tests
• -DENABLE_CODE_COVERAGE=<ON/OFF> Enables / Disables code coverage with gcov
• -DWireshark_DIR=<path/to/custom/wireshark/lib/wireshark> Needed for globals.h, dir should contain cmake files List not complete

Features

Hardware timestamps

Hardware timestamps (if supported) can offer more accurate timestamps.

To enable hardware timestamps check the box in Settings --> Backend --> General --> Enable Hardware timestamps.

Pre SoC Cycles

In some scenarios debugging the network traffic that came before the first SoC is neccessary.

When enabled every SoA is treated as a SoC, before the firtst SoC is detected.

To enable Pre SoC Cycles check the box in Settings --> Backend --> Input Handler --> Enable Pre SoC Cycles.

Troubleshooting

• I can't start a live recording FAILED_TO_CAPTURE_ON_INTERFACE

  https://wiki.wireshark.org/CaptureSetup/CapturePrivileges#Other_Linux_based_systems_or_other_installation_methods

liblibwireshark's Issues

Read PCAP from STDIN

How do you read a PCAP file from STDIN and start dissecting it?

./simple_print -t manual file.pcap works for a file, that is present in the file system.

Lets say I have an application, that returns a pcap file to the stdout. Most straightforward but useless example would be tcpdump:

tcpdump -r file.pcap -w - | ./simple_print -t raw - fails for me.

Do I get the syntax wrong or is this feature not implemented yet?

Error building on MAC

I am building on High sierra

I used a private.cmake with following contents:

bhakta@Bhaktas-MacBook-Pro:~/dev/liblibwireshark/build$ cat ../private.cmake
set(Wireshark_DIR "/Users/bhakta/dev/wireshark")
include_directories(SYSTEM "/Users/bhakta/dev/wireshark")
link_directories("/Users/bhakta/dev/wireshark/build/run")

with this cmake .. passed

Next I try make:

bhakta@Bhaktas-MacBook-Pro:~/dev/liblibwireshark/build$ make
[ 11%] Built target caputils
[ 14%] Building C object CMakeFiles/objlib.dir/dissect.c.o
/Users/bhakta/dev/gliblibwireshark/dissect.c:43:5: warning: implicit declaration of function 'epan_register_plugin_types' is invalid in C99 [-Wimplicit-function-declaration]
    epan_register_plugin_types(); /* Types known to libwireshark */
    ^
/Users/bhakta/dev/gliblibwireshark/dissect.c:44:5: warning: implicit declaration of function 'scan_plugins' is invalid in C99 [-Wimplicit-function-declaration]
    scan_plugins(REPORT_LOAD_FAILURE);
    ^
/Users/bhakta/dev/gliblibwireshark/dissect.c:44:18: error: use of undeclared identifier 'REPORT_LOAD_FAILURE'
    scan_plugins(REPORT_LOAD_FAILURE);
                 ^
2 warnings and 1 error generated.
make[2]: *** [CMakeFiles/objlib.dir/dissect.c.o] Error 1
make[1]: *** [CMakeFiles/objlib.dir/all] Error 2
make: *** [all] Error 2

wrong frame number in ws_dissect_tostr

ws_dissect_tostr in combination with ws_dissect_seek generates wrong frame numbers in the resulting string.

Status of this project?

Hi! Thanks for this!
Is this project still maintained?

Unable to compile

I am trying to compile liblibwireshark from git repo.
but i am unable to compile code.wireshark version is 2.4.4
here is error

root@ubuntu:/home/akib/software/liblibwireshark/build# cat ../private.cmake
set(Wireshark_DIR "/home/akib/software/wireshark-2.4.4")
include_directories(SYSTEM "/home/akib/software/wireshark-2.4.4")
link_directories("/home/akib/software/wireshark-2.4.4/build/run")

root@ubuntu:/home/akib/software/liblibwireshark/build# cmake ../
-- The C compiler identification is GNU 5.4.0
-- Check for working C compiler: /usr/bin/cc
-- Check for working C compiler: /usr/bin/cc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Detecting C compile features
-- Detecting C compile features - done
CMake Error at CMakeLists.txt:53 (find_package):
By not providing "FindWireshark.cmake" in CMAKE_MODULE_PATH this project
has asked CMake to find a package configuration file provided by
"Wireshark", but CMake did not find one.

Could not find a package configuration file provided by "Wireshark" with
any of the following names:

WiresharkConfig.cmake
wireshark-config.cmake

Add the installation prefix of "Wireshark" to CMAKE_PREFIX_PATH or set
"Wireshark_DIR" to a directory containing one of the above files. If
"Wireshark" provides a separate development package or SDK, be sure it has
been installed.

-- Configuring incomplete, errors occurred!
See also "/home/akib/software/liblibwireshark/build/CMakeFiles/CMakeOutput.log".
root@ubuntu:/home/akib/software/liblibwireshark/build#

Issue adding liblibwireshark to eclipse

Hello,
I was wondering about adding liblibwireshark to eclipse oxygen ide(for c/c++).
How should i do it correctly? Should i cmake, make etc or just add it like a simple libary?

Issue with make

I do the commands as specified, I git clone, mkdir cd etc, cmake works fine, but then i fail to make.

lior@lior-Lenovo-G570:~/Documents/liblibwireshark/build$ make
[ 2%] Building C object caputils/CMakeFiles/caputils.dir/capture-pcap-util-unix.c.o
/home/lior/Documents/liblibwireshark/caputils/capture-pcap-util-unix.c:29:27: fatal error: wsutil/wspcap.h: No such file or directory
compilation terminated.
caputils/CMakeFiles/caputils.dir/build.make:62: recipe for target 'caputils/CMakeFiles/caputils.dir/capture-pcap-util-unix.c.o' failed
make[2]: *** [caputils/CMakeFiles/caputils.dir/capture-pcap-util-unix.c.o] Error 1
CMakeFiles/Makefile2:586: recipe for target 'caputils/CMakeFiles/caputils.dir/all' failed
make[1]: *** [caputils/CMakeFiles/caputils.dir/all] Error 2
Makefile:138: recipe for target 'all' failed
make: *** [all] Error 2

Here is the CMake output:

~/Documents/liblibwireshark/build$ cmake ..
-- The C compiler identification is GNU 5.4.0
-- Check for working C compiler: /usr/bin/cc
-- Check for working C compiler: /usr/bin/cc -- works
-- Detecting C compiler ABI info
-- Detecting C compiler ABI info - done
-- Detecting C compile features
-- Detecting C compile features - done
-- Found PkgConfig: /usr/bin/pkg-config (found version "0.29.1")
-- Checking for one of the modules 'glib-2.0'
-- Found GLIB2: /usr/lib/x86_64-linux-gnu/libglib-2.0.so
-- Found GMODULE2: /usr/lib/x86_64-linux-gnu/libgmodule-2.0.so
-- Found PCAP: /usr/include
-- Looking for pcap_open_dead
-- Looking for pcap_open_dead - found
-- Looking for pcap_freecode
-- Looking for pcap_freecode - found
-- Looking for pcap_breakloop
-- Looking for pcap_breakloop - found
-- Looking for pcap_create
-- Looking for pcap_create - found
-- Looking for pcap_datalink_name_to_val
-- Looking for pcap_datalink_name_to_val - found
-- Looking for pcap_datalink_val_to_description
-- Looking for pcap_datalink_val_to_description - found
-- Looking for pcap_datalink_val_to_name
-- Looking for pcap_datalink_val_to_name - found
-- Looking for pcap_findalldevs
-- Looking for pcap_findalldevs - found
-- Looking for pcap_free_datalinks
-- Looking for pcap_free_datalinks - found
-- Looking for pcap_get_selectable_fd
-- Looking for pcap_get_selectable_fd - found
-- Looking for pcap_lib_version
-- Looking for pcap_lib_version - found
-- Looking for pcap_list_datalinks
-- Looking for pcap_list_datalinks - found
-- Looking for pcap_set_datalink
-- Looking for pcap_set_datalink - found
-- Looking for bpf_image
-- Looking for bpf_image - found
-- Looking for pcap_setsampling
-- Looking for pcap_setsampling - not found
-- Looking for pcap_set_tstamp_precision
-- Looking for pcap_set_tstamp_precision - found
-- Looking for pcap_open
-- Looking for pcap_open - not found
-- Wireshark version: 2.2.7
-- Wireshark install dir: /usr
-- /home/lior/Documents/liblibwireshark/examples/02-seek-interactive-online.c
-- Configuring done
-- Generating done
-- Build files have been written to: /home/lior/Documents/liblibwireshark/build