Function NetworkAnalysisRoutine

networkcapture.go:17–58

NetworkAnalysisRoutine dump network interfaces traffic

(bpffilter string, filename string, verbose bool)

// NetworkAnalysisRoutine dump network interfaces traffic
func NetworkAnalysisRoutine(bpffilter string, filename string, verbose bool) {
	// Check if WinPCAP installed
	if _, err := os.Stat(os.Getenv("SystemRoot") + "\\System32\\wpcap.dll"); os.IsNotExist(err) {
		logMessage(LOG_ERROR, "[ERROR] The network capture system requires the installation of WinPCAP on the workstation")
		return
	}

	// Get a list of all interfaces.
	ifaces, err := net.Interfaces()
	if err != nil {
		panic(err)
	}

	// Get a list of all devices
	devices, err := pcap.FindAllDevs()
	if err != nil {
		panic(err)
	}

	// Creating pcap file
	_, err = os.Stat(filepath.Dir(filename))
	if os.IsNotExist(err) {
		if err := os.MkdirAll(filepath.Dir(filename), 0600); err != nil {
			logMessage(LOG_ERROR, "[ERROR] Failed to create pcap file: ", err.Error())
			return
		}
	}

	f, err := os.Create(filename)
	if err != nil {
		logMessage(LOG_ERROR, "[ERROR] Failed to create pcap file: ", err.Error())
		return
	}
	defer f.Close()

	// listening for all interfaces
	for _, iface := range ifaces {
		if err := CaptureInterface(&iface, &devices, bpffilter, f, verbose); err != nil && verbose {
			logMessage(LOG_ERROR, "[ERROR]", err)
		}
	}
}

// CaptureInterface dump all packet on specified network interface
func CaptureInterface(iface *net.Interface, devices *[]pcap.Interface, bpffilter string, f *os.File, verbose bool) error {