tools

type CaptureInfoInput struct {
	FilePath string `json:"file_path" jsonschema:"path to pcap/pcapng file (required)"`
}

type CaptureInput struct {
	Interface     string `json:"interface" jsonschema:"network interface name or index (required)"`
	CaptureFilter string `json:"capture_filter,omitempty" jsonschema:"BPF capture filter expression (e.g. 'tcp port 80')"`
	DisplayFilter string `json:"display_filter,omitempty" jsonschema:"Wireshark display filter (e.g. 'http.request')"`
	Duration      int    `json:"duration,omitempty" jsonschema:"capture duration in seconds (max 30, default 10)"`
	PacketCount   int    `json:"packet_count,omitempty" jsonschema:"max packets to capture (max 1000, default 100)"`
	OutputFile    string `json:"output_file,omitempty" jsonschema:"path to save pcap file (.pcap or .pcapng)"`
	Summarize     bool   `json:"summarize,omitempty" jsonschema:"parse JSON into structured packet summaries (default false)"`
}

type DecodePacketInput struct {
	FilePath      string `json:"file_path" jsonschema:"path to pcap/pcapng file (required)"`
	PacketNumber  int    `json:"packet_number,omitempty" jsonschema:"specific packet number to decode (1-based, default: first 5 packets)"`
	DisplayFilter string `json:"display_filter,omitempty" jsonschema:"Wireshark display filter"`
	MaxPackets    int    `json:"max_packets,omitempty" jsonschema:"max packets to decode verbosely (max 10, default 5)"`
}

type ExtractFieldsInput struct {
	FilePath      string   `json:"file_path" jsonschema:"path to pcap/pcapng file (required)"`
	Fields        []string `json:"fields" jsonschema:"protocol fields to extract (e.g. ['ip.src', 'ip.dst', 'tcp.port'])"`
	DisplayFilter string   `json:"display_filter,omitempty" jsonschema:"Wireshark display filter to apply"`
	MaxPackets    int      `json:"max_packets,omitempty" jsonschema:"maximum packets to process (max 1000, default 100)"`
	Separator     string   `json:"separator,omitempty" jsonschema:"field separator character (default tab)"`
	ShowHeader    bool     `json:"show_header,omitempty" jsonschema:"include field names as header row"`
	Summarize     bool     `json:"summarize,omitempty" jsonschema:"parse output into structured JSON with named fields (default false)"`
}

type FilterPcapInput struct {
	InputFile  string `json:"input_file" jsonschema:"source pcap/pcapng file path (required)"`
	OutputFile string `json:"output_file" jsonschema:"destination pcap file path (required)"`
	StartTime  string `json:"start_time,omitempty" jsonschema:"start time filter (e.g. '2024-01-01 00:00:00')"`
	EndTime    string `json:"end_time,omitempty" jsonschema:"end time filter"`
	MaxPackets int    `json:"max_packets,omitempty" jsonschema:"maximum packets to keep (max 1000)"`
}

type ListInterfacesInput struct{}

type ListProtocolsInput struct {
	Filter string `json:"filter,omitempty" jsonschema:"filter protocols by name (case-insensitive substring match)"`
}

type MergePcapsInput struct {
	InputFiles []string `json:"input_files" jsonschema:"list of pcap/pcapng file paths to merge (min 2 required)"`
	OutputFile string   `json:"output_file" jsonschema:"destination merged pcap file path (required)"`
}

type ReadPcapInput struct {
	FilePath      string `json:"file_path" jsonschema:"path to pcap/pcapng file to read (required)"`
	DisplayFilter string `json:"display_filter,omitempty" jsonschema:"Wireshark display filter (e.g. 'tcp.port == 80')"`
	MaxPackets    int    `json:"max_packets,omitempty" jsonschema:"maximum packets to return (max 1000, default 100)"`
	Summarize     bool   `json:"summarize,omitempty" jsonschema:"parse JSON into structured packet summaries (default false)"`
}

type StatisticsInput struct {
	FilePath      string `json:"file_path" jsonschema:"path to pcap/pcapng file (required)"`
	StatType      string `` /* 237-byte string literal not displayed */
	DisplayFilter string `json:"display_filter,omitempty" jsonschema:"Wireshark display filter to apply"`
}