PCAP Reader rust extension

[lmangani]

Our very first Rust Community Extension: PCAP Reader

D SELECT * FROM pcap_reader('/tmp/aaa.pcap') WHERE protocol == 'TCP' AND length::INT >= 100 LIMIT 10;
┌────────────┬───────────────┬─────────────┬──────────┬──────────┬──────────┬─────────┬─────────────────────────────────────────────────────────┐
│ timestamp  │    src_ip     │   dst_ip    │ src_port │ dst_port │ protocol │ length  │                         payload                         │
│  varchar   │    varchar    │   varchar   │ varchar  │ varchar  │ varchar  │ varchar │                         varchar                         │
├────────────┼───────────────┼─────────────┼──────────┼──────────┼──────────┼─────────┼─────────────────────────────────────────────────────────┤
│ 1120469634 │ 147.234.1.253 │ 192.168.1.2 │ 21       │ 2720     │ TCP      │ 108     │ 220 ProFTPD Server In ECI Telecom (ftp.ecitele.com) \…  │
│ 1120469635 │ 147.234.1.253 │ 192.168.1.2 │ 21       │ 2720     │ TCP      │ 130     │ 331 Anonymous login ok, send your complete email addr…  │
│ 1120469635 │ 147.234.1.253 │ 192.168.1.2 │ 21       │ 2720     │ TCP      │ 113     │  \t\t   Anyone can access, write & retrieve a specifi…  │
│ 1120469635 │ 147.234.1.253 │ 192.168.1.2 │ 21       │ 2720     │ TCP      │ 113     │  \t\t   Anyone can access, write & retrieve a specifi…  │
│ 1120469635 │ 147.234.1.253 │ 192.168.1.2 │ 21       │ 2720     │ TCP      │ 113     │  Files larger then 250MB will be deleted after 5 days…  │
│ 1120469635 │ 147.234.1.253 │ 192.168.1.2 │ 21       │ 2720     │ TCP      │ 102     │  Other Files will be deleted after 2 weeks !!!\r\n      │
│ 1120469635 │ 147.234.1.253 │ 192.168.1.2 │ 21       │ 2720     │ TCP      │ 106     │ 227 Entering Passive Mode (147,234,1,253,230,119).\r\n  │
└────────────┴───────────────┴─────────────┴──────────┴──────────┴──────────┴─────────┴─────────────────────────────────────────────────────────┘

Still so much work to do and so many bugs to fix, but the rust template experience was amazing! 👏 @samansmink

[carlopi]

Thanks!