June 2010

Hi ,
i need tcp reassembler i searched forum i saw something but that is a little complicated
can you explain this ? how to use?
and can we use this reassembler for all protocol include protocols that i wrote ?

may be a short article will be too much helpful for me ?

thanks

Exception in thread "main" java.lang.UnsatisfiedLinkError: no jnetpcap in java.library.path
at java.lang.ClassLoader.loadLibrary(ClassLoader.java:1734)
at java.lang.Runtime.loadLibrary0(Runtime.java:823)
at java.lang.System.loadLibrary(System.java:1028)
at org.jnetpcap.Pcap.(Pcap.java:469)
at com.kiki88.pcap.GetListInterfaces.getDevs(GetListInterfaces.java:20)
at com.kiki88.pcap.GetListInterfaces.main(GetListInterfaces.java:26)

[root@localhost ~]# ls -l /usr/lib/libjnet*
-rw-r--r-- 1 root root 897056 06-26 12:51 /usr/lib/libjnetpcap.so.1.4.b0004

[root@localhost ~]# ls -l /usr/lib/libpcap*
lrwxrwxrwx 1 root root 16 06-26 01:17 /usr/lib/libpcap.so.0 -> libpcap.so.0.9.4
lrwxrwxrwx 1 root root 16 06-26 01:17 /usr/lib/libpcap.so.0.9 -> libpcap.so.0.9.4
-rwxr-xr-x 1 root root 168544 01-27 06:41 /usr/lib/libpcap.so.0.9.4

Solution, my English not, want to be helped.
I am using centOS5.5.
please help me,Mark B

The pseudo code below demonstrates how we are attempting to use JNETPCAP.

package testparser;
import org.jnetpcap.Pcap;
import org.jnetpcap.nio.JMemory;
import org.jnetpcap.packet.Payload;
import org.jnetpcap.packet.PcapPacket;


public class Parser {
  PcapPacket m_packet;
  byte[] m_data;
  
  public final void parse(String filename)
  {
    long packetcount = 0;
    try
    {
      System.out.println("Parsing file " + filename);
      StringBuilder errbuf = new StringBuilder();
      for (long i=0;i<20;i++)
      {
        Pcap pcap = Pcap.openOffline(filename,errbuf);
        if (pcap == null)
        {
          System.err.println("Unable to open file");
          return;
        }
        while(true)
        {
          m_packet = new PcapPacket(JMemory.POINTER);
          if (pcap.nextEx(m_packet) != Pcap.NEXT_EX_OK)
          {
            break;
          }
          Payload payload = new Payload();
          if (m_packet.hasHeader(payload))
          {
            m_data = payload.getByteArray(0,payload.size());
          }
          else
          {
            break;
          }
          packetcount++;
          
          // parse the bytes referenced by m_data here
          
          m_data = null;
          m_packet = null;
        }
      }
    }
    catch (Exception e)
    {
        System.err.println(e);
    }
    System.out.println("Processed " + packetcount + " packets.");
  }
}

After opening the .PCAP file, we:

(a) navigate to each packet in turn with the class PcapPacket;
( peer the packet payload with the class Payload
(c) retrieve the payload data bytes with the method Payload.getByteArray()

We profiled the attached Java code in NetBeans 6.5 with default JVM options. In our test run we processed 6579160 packets.

Hello,

I am interested in using jnetpcap. I do most of my development on OS X and I understand from searching the forums that support may be on the way, but not here yet.

Actually, I just want to read a capture file for now. I'm not intending to do any live captures... at least initially. Does this offline functionality still rely on native code? I tried to test by running NextExExample but it blew up with an unsatisfied link error- but I'm not sure if this is because the parsing functionality is actually handled by native code, or perhaps it is just because how where/how the native libraries are referenced.

Thanks!
Brian