pancap/file.go

package main

import (
	"flag"
	"fmt"

	"github.com/google/gopacket"
	"github.com/google/gopacket/layers"
	"github.com/google/gopacket/pcap"
)

var (
	filenameFlag string
)

// Registers the flag --file
func registerFileFlags() {
	flag.StringVar(&filenameFlag, "file", "", "PCAP file to base analysis on")
}

// Opens the PCAP, returns its packets and the link type or an error
func openPCAP() (*gopacket.PacketSource, layers.LinkType, error) {
	// Check if we even got a file.
	if filenameFlag == "" {
		return nil, 0, fmt.Errorf("missing file to analyze. Please specifiy it with --file")
	}

	// Open specified file
	handle, openErr := pcap.OpenOffline(filenameFlag)
	if openErr != nil {
		// There were some problems opening the file
		return nil, 0, openErr
	}

	// Output basic information about this PCAP
	fmt.Printf("PCAP capture link type is %s (ID %d)\n", handle.LinkType().String(), handle.LinkType())

	// Open given handle as packet source and return it
	packetSource := gopacket.NewPacketSource(handle, handle.LinkType())
	return packetSource, handle.LinkType(), nil
}