fuzz_pcap.h

// Copyright (c) 2021 Catena cyber
// Author Philippe Antoine <p.antoine@catenacyber.fr>

#include <stdint.h>
#include <stddef.h>
#include <stdbool.h>

#define FPC0_MAGIC_LEN 4
#define FPC0_MAGIC "FPC0"
#define FPC0_HEADER_LEN (FPC0_MAGIC_LEN + 4)

#define FPC_SNAPLEN 0xFFFF

#define FPC_DATALINK_ERROR 2

#define FPC_TS_MAXSIZE 16

typedef enum FPC_tcp_state {
    FPC_TCP_STATE_START = 0,
    FPC_TCP_STATE_SYN,
    FPC_TCP_STATE_SYNACK,
    FPC_TCP_STATE_ESTABLISHED,
} FPC_tcp_state_t;

typedef struct _FPC_buffer {
    const uint8_t *Data;
    size_t Size;
    size_t offset;
    uint32_t datalink;
    bool tcpSingleStream;
    FPC_tcp_state_t tcpState;
    uint8_t pkt[FPC_SNAPLEN];
    uint32_t seqCliAckSrv;
    uint32_t seqSrvAckCli;
    uint32_t nb;
} FPC_buffer_t;

int FPC_IsFuzzPacketCapture(const uint8_t *Data, size_t Size);

uint8_t FPC_datalink_from(uint32_t in);
uint32_t FPC_datalink_to(uint8_t in);

int FPC_init(FPC_buffer_t *r, const uint8_t *Data, size_t Size);

int FPC_next(FPC_buffer_t *pkts, struct pcap_pkthdr *header, const uint8_t **pkt);