2 * parse.c - parsing of pcap packages
4 * author: hackbard@hackdaworld.dyndns.org
11 /* all the parsing stuff will go here
13 * different protocols should get to seperated files though ...
16 void parse_package(unsigned char *ptr,const struct pcap_pkthdr *pcap_header,const unsigned char *package) {
25 t_beacon_fb *beacon_fb;
32 memset(&new_sta,0,sizeof(t_sta));
34 if(info->dump_fd!=0) {
35 ret=write(info->dump_fd,pcap_header,sizeof(struct pcap_pkthdr));
36 if(ret!=sizeof(struct pcap_pkthdr))
37 display_console(info,"warning, pcap header write failed!");
38 ret=write(info->dump_fd,package,pcap_header->caplen);
39 if(ret!=pcap_header->caplen)
40 display_console(info,"warning, package write failed!");
43 /* maybe there is offset to the actual ieee802.11 frame,
44 for example prism header ... */
46 if(FCTL_TYPE(package[0])==FCTL_TYPE_MGMT) {
47 if(FCTL_STYPE(package[0])==FCTL_STYPE_BEACON)
48 f3hdr=(t_frame3_hdr *)package;
49 beacon_fb=(t_beacon_fb *)package+sizeof(t_frame3_hdr);
50 dprintf(info->log_fd,"beacon: ");
51 for(i=0;i<ADDR_LEN;i++) dprintf(info->log_fd,"%02x ",*((f3hdr->addr2)+i));
52 dprintf(info->log_fd," essid: ");
53 for(i=0;i<beacon_fb->ssid_length;i++)
54 dprintf(info->log_fd,"%c ",(beacon_fb->ssid)+i);
55 dprintf(info->log_fd,"\n");
59 dprintf(info->log_fd,"other: ");
60 for(i=0;i<16;i++) dprintf(info->log_fd,"%02x ",package[i]);
61 dprintf(info->log_fd,"\n");