pcap_file/pcapng/blocks/
systemd_journal_export.rs

1//! Systemd Journal Export Block.
2
3use std::borrow::Cow;
4use std::io::{Result as IoResult, Write};
5
6use byteorder_slice::ByteOrder;
7use derive_into_owned::IntoOwned;
8
9use super::block_common::{Block, PcapNgBlock};
10use crate::errors::PcapError;
11
12
13/// The Systemd Journal Export Block is a lightweight containter for systemd Journal Export Format entry data.
14#[derive(Clone, Debug, IntoOwned, Eq, PartialEq)]
15pub struct SystemdJournalExportBlock<'a> {
16    /// A journal entry as described in the Journal Export Format documentation.
17    pub journal_entry: Cow<'a, [u8]>,
18}
19
20impl<'a> PcapNgBlock<'a> for SystemdJournalExportBlock<'a> {
21    fn from_slice<B: ByteOrder>(slice: &'a [u8]) -> Result<(&'a [u8], Self), PcapError> {
22        let packet = SystemdJournalExportBlock { journal_entry: Cow::Borrowed(slice) };
23        Ok((&[], packet))
24    }
25
26    fn write_to<B: ByteOrder, W: Write>(&self, writer: &mut W) -> IoResult<usize> {
27        writer.write_all(&self.journal_entry)?;
28
29        let pad_len = (4 - (self.journal_entry.len() % 4)) % 4;
30        writer.write_all(&[0_u8; 3][..pad_len])?;
31
32        Ok(self.journal_entry.len() + pad_len)
33    }
34
35    fn into_block(self) -> Block<'a> {
36        Block::SystemdJournalExport(self)
37    }
38}