Beispiel #1
0
 public IEnumerator <PacketSaveDataNG> GetEnumerator()
 {
     try
     {
         reader = new PcapngFile.Reader(_fileName);
         int interfaceId = 0;
         Dictionary <int, LinkType> interfaceIdToLinkLayer = new Dictionary <int, LinkType>();
         foreach (InterfaceDescriptionBlock readerInterfaceDescriptionBlock in reader.InterfaceDescriptionBlocks)
         {
             interfaceIdToLinkLayer.Add(interfaceId, readerInterfaceDescriptionBlock.LinkType);
         }
         foreach (EnhancedPacketBlock packetBlock in reader.EnhancedPacketBlocks)
         {
             LinkType         linkType    = interfaceIdToLinkLayer[packetBlock.InterfaceID];
             string           linkTypeStr = ((byte)linkType).ToString();
             byte[]           data        = packetBlock.Data;
             PacketSaveDataNG psdng       = new PacketSaveDataNG(HexStreamType.Raw, data.ToHex());
             psdng.Details[PacketSaveDataNGProtoFields.ENCAPS_TYPE] = linkTypeStr;
             yield return(psdng);
         }
     }
     finally
     {
         reader?.Dispose();
     }
 }
        public IEnumerator <PacketSaveDataNG> GetEnumerator()
        {
            try
            {
                List <PacketSaveDataNG> blockCol = new List <PacketSaveDataNG>();
                pReader = new PcapReader(_fileName);
                string linkLayer = ((int)pReader.Header.LinkType).ToString();
                pReader.OnReadPacketEvent += delegate(object context, IPacket packet)
                {
                    PacketSaveDataNG psdng = new PacketSaveDataNG(HexStreamType.Raw, packet.Data.ToHex());
                    psdng.Details[PacketSaveDataNGProtoFields.ENCAPS_TYPE] = linkLayer;
                    blockCol.Add(psdng);
                };
                pReader.ReadPackets(CancellationToken.None);

                foreach (var packet in blockCol)
                {
                    yield return(packet);
                }
            }
            finally
            {
                pReader?.Dispose();
            }
        }