From 5132d71726b7199b3e856a8cd0dafa585196d00b Mon Sep 17 00:00:00 2001
From: Graham Clark <grclark@gmail.com>
Date: Fri, 23 Oct 2020 14:17:38 -0400
Subject: [PATCH] Dup2() is not available on these platforms

Fall-back to lesser implementations.
---
 system/dumpcapext.go         |  3 +++
 system/dumpcapext_arm64.go   | 40 ++++++++++++++++++++++++++++++++++++
 system/dumpcapext_windows.go | 37 +++++++++++++++++++++++++++++++++
 3 files changed, 80 insertions(+)
 create mode 100644 system/dumpcapext_arm64.go
 create mode 100644 system/dumpcapext_windows.go

diff --git a/system/dumpcapext.go b/system/dumpcapext.go
index a2842e0..3a70a19 100644
--- a/system/dumpcapext.go
+++ b/system/dumpcapext.go
@@ -2,6 +2,9 @@
 // code is governed by the MIT license that can be found in the LICENSE
 // file.
 
+// +build !windows
+// +build !arm64
+
 package system
 
 import (
diff --git a/system/dumpcapext_arm64.go b/system/dumpcapext_arm64.go
new file mode 100644
index 0000000..d114094
--- /dev/null
+++ b/system/dumpcapext_arm64.go
@@ -0,0 +1,40 @@
+// Copyright 2019-2020 Graham Clark. All rights reserved.  Use of this source
+// code is governed by the MIT license that can be found in the LICENSE
+// file.
+
+package system
+
+import (
+	"os"
+	"os/exec"
+	"syscall"
+
+	log "github.com/sirupsen/logrus"
+)
+
+//======================================================================
+
+// DumpcapExt will run dumpcap first, but if it fails, run tshark. Intended as
+// a special case to allow termshark -i <iface> to use dumpcap if possible,
+// but if it fails (e.g. iface==randpkt), fall back to tshark. dumpcap is more
+// efficient than tshark at just capturing, and will drop fewer packets, but
+// tshark supports extcap interfaces.
+func DumpcapExt(dumpcapBin string, tsharkBin string, args ...string) error {
+	var err error
+
+	dumpcapCmd := exec.Command(dumpcapBin, args...)
+	log.Infof("Starting dumpcap command %v", dumpcapCmd)
+	dumpcapCmd.Stdin = os.Stdin
+	dumpcapCmd.Stdout = os.Stdout
+	dumpcapCmd.Stderr = os.Stderr
+	if dumpcapCmd.Run() != nil {
+		var tshark string
+		tshark, err = exec.LookPath(tsharkBin)
+		if err == nil {
+			log.Infof("Retrying with dumpcap command %v", append([]string{tshark}, args...))
+			err = syscall.Exec(tshark, append([]string{tshark}, args...), os.Environ())
+		}
+	}
+
+	return err
+}
diff --git a/system/dumpcapext_windows.go b/system/dumpcapext_windows.go
new file mode 100644
index 0000000..09a2e5b
--- /dev/null
+++ b/system/dumpcapext_windows.go
@@ -0,0 +1,37 @@
+// Copyright 2019-2020 Graham Clark. All rights reserved.  Use of this source
+// code is governed by the MIT license that can be found in the LICENSE
+// file.
+
+package system
+
+import (
+	"os"
+	"os/exec"
+
+	log "github.com/sirupsen/logrus"
+)
+
+//======================================================================
+
+// DumpcapExt will run dumpcap first, but if it fails, run tshark. Intended as
+// a special case to allow termshark -i <iface> to use dumpcap if possible,
+// but if it fails (e.g. iface==randpkt), fall back to tshark. dumpcap is more
+// efficient than tshark at just capturing, and will drop fewer packets, but
+// tshark supports extcap interfaces.
+func DumpcapExt(dumpcapBin string, tsharkBin string, args ...string) error {
+	dumpcapCmd := exec.Command(dumpcapBin, args...)
+	log.Infof("Starting dumpcap command %v", dumpcapCmd)
+	dumpcapCmd.Stdin = os.Stdin
+	dumpcapCmd.Stdout = os.Stdout
+	dumpcapCmd.Stderr = os.Stderr
+	if dumpcapCmd.Run() == nil {
+		return nil
+	}
+
+	tsharkCmd := exec.Command(tsharkBin, args...)
+	log.Infof("Retrying with dumpcap command %v", tsharkCmd)
+	tsharkCmd.Stdin = os.Stdin
+	tsharkCmd.Stdout = os.Stdout
+	tsharkCmd.Stderr = os.Stderr
+	return tsharkCmd.Run()
+}