ongrep

commit 65721037b6508360483686a7f3226bac7d4fa13a
parent cfeb2eb46b2a0bfae96096a9f986eb3d72ad561b
Author: Jordan Ritter <jpr5@darkridge.com>
Date:   Wed,  6 Sep 2017 16:13:17 -0700

Emit frame # in header when not in single mode

Useful for referencing/conversing about packet flows when doing analysis.

Credit to @rwhalb in #5 for the suggestion.

Diffstat:
M
ngrep.c
 | 
5
++++-

1 file changed, 4 insertions(+), 1 deletion(-)
diff --git a/ngrep.c b/ngrep.c
@@ -106,6 +106,7 @@
 
 uint32_t snaplen = 65535, limitlen = 65535, promisc = 1, to = 100;
 uint32_t match_after = 0, keep_matching = 0, matches = 0, max_matches = 0;
+uint32_t seen_frames = 0;
 
 #if USE_TCPKILL
 uint32_t tcpkill_active = 0;
@@ -717,6 +718,8 @@ void process(u_char *d, struct pcap_pkthdr *h, u_char *p) {
     unsigned char *data;
     uint32_t len = h->caplen - vlan_offset;
 
+    seen_frames++;
+
 #if HAVE_DLT_IEEE802_11_RADIO
     if (radiotap_present) {
         uint16_t radio_len = ((struct NGREP_rtaphdr_t *)(p))->it_len;
@@ -948,7 +951,7 @@ void dump_packet(struct pcap_pkthdr *h, u_char *p, uint8_t proto, unsigned char 
     if (dump_single)
         printf(" ");
     else
-        printf("\n");
+        printf(" #%u\n", seen_frames);
 
     if (quiet < 3)
         dump_func(data, len, match_index, match_size);