refactor http packet capture

internal/pcap/capture.go

@@ -181,7 +181,7 @@ func (pc *PacketBreakdown) CaptureTCP(dst []Frame, pkt []byte, bitOffset int) ([
 }
 
 func (pc *PacketBreakdown) CaptureHTTP(dst []Frame, pkt []byte, bitOffset int) ([]Frame, error) {
-	const protocol = "HTTP"
+	const httpProtocol = "HTTP"
 	if bitOffset%8 != 0 {
 		return nil, errors.New("HTTP must be parsed at byte boundary")
 	}
@@ -190,16 +190,32 @@ func (pc *PacketBreakdown) CaptureHTTP(dst []Frame, pkt []byte, bitOffset int) (
 	httpData := pkt[bitOffset/8:]
 	pc.hdr.Reset(httpData)
 	err := pc.hdr.Parse(asResponse)
-	if err == nil {
-		dst = append(dst, remainingFrameInfo(protocol, FieldClassText, bitOffset, len(pkt)))
-		return dst, nil
+	if err != nil {
+		pc.hdr.Reset(httpData)
+		err = pc.hdr.Parse(asRequest) // try as request.
 	}
-	pc.hdr.Reset(httpData)
-	err = pc.hdr.Parse(asRequest)
-	if err == nil {
-		dst = append(dst, remainingFrameInfo(protocol, FieldClassText, bitOffset, len(pkt)))
-		return dst, nil
+	if err != nil {
+		return dst, err
 	}
+	hdrLen := pc.hdr.BufferParsed()
+	body, _ := pc.hdr.Body()
+	dst = append(dst, Frame{
+		Protocol:        httpProtocol,
+		PacketBitOffset: bitOffset,
+		Fields: []FrameField{
+			{
+				Name:           "HTTP Header",
+				Class:          FieldClassText,
+				FrameBitOffset: 0,
+				BitLength:      hdrLen * octet,
+			},
+			{
+				Class:          FieldClassPayload,
+				FrameBitOffset: hdrLen * octet,
+				BitLength:      len(body) * octet,
+			},
+		},
+	})
 	return dst, err
 }
 

internal/pcap/capture_test.go

@@ -15,6 +15,7 @@ import (
 
 func TestCap(t *testing.T) {
 	const mtu = 1500
+	const httpBody = "{200,ok}"
 	var buf [mtu]byte
 	var gen ltesto.PacketGen
 	rng := rand.New(rand.NewSource(1))
@@ -29,6 +30,8 @@ func TestCap(t *testing.T) {
 	var hdr httpraw.Header
 	hdr.SetStatus("200", "OK")
 	hdr.Set("Cookie", "ABC=123")
+	pkt, _ = hdr.AppendResponse(pkt)
+	pkt = append(pkt, httpBody...)
 	var pbreak PacketBreakdown
 	frames, err := pbreak.CaptureEthernet(nil, pkt, 0)
 	if err != nil {
@@ -55,11 +58,19 @@ func TestCap(t *testing.T) {
 		}
 		return math.MaxUint64
 	}
+	getClassData := func(frame Frame, class FieldClass) []byte {
+		idx, err := frame.FieldByClass(class)
+		if err != nil {
+			return nil
+		}
+		v, _ := frame.AppendField(nil, idx, pkt)
+		return v
+	}
 	efrm, _ := ethernet.NewFrame(pkt)
 	pefrm := frames[0]
 	pifrm := frames[1]
 	ptfrm := frames[2]
-	// phfrm := frames[3]
+	phfrm := frames[3]
 	gotEproto := ethernet.Type(getClass(pefrm, FieldClassProto))
 	if gotEproto != efrm.EtherTypeOrSize() {
 		t.Errorf("want %s ethernet type, got %s", efrm.EtherTypeOrSize().String(), gotEproto.String())
@@ -95,4 +106,8 @@ func TestCap(t *testing.T) {
 	if gotHeaderLen != uint64(wantHeaderLen) {
 		t.Errorf("want %d TCP header length, got %d", wantHeaderLen, gotHeaderLen)
 	}
+	gotBody := getClassData(phfrm, FieldClassPayload)
+	if string(gotBody) != httpBody {
+		t.Errorf("want %q HTTP body, got %q", httpBody, gotBody)
+	}
 }