diff options
Diffstat (limited to 'ui/cli/tap-endpoints.c')
| -rw-r--r-- | ui/cli/tap-endpoints.c | 134 |
1 files changed, 134 insertions, 0 deletions
diff --git a/ui/cli/tap-endpoints.c b/ui/cli/tap-endpoints.c new file mode 100644 index 00000000..e97dcf85 --- /dev/null +++ b/ui/cli/tap-endpoints.c @@ -0,0 +1,134 @@ +/* tap-endpoints.c + * endpoints 2014 Michael Mann + * + * Wireshark - Network traffic analyzer + * By Gerald Combs <gerald@wireshark.org> + * Copyright 1998 Gerald Combs + * + * SPDX-License-Identifier: GPL-2.0-or-later + */ + +#include "config.h" + +#include <stdio.h> +#include <stdlib.h> + +#include <string.h> +#include <epan/packet.h> +#include <epan/tap.h> +#include <epan/stat_tap_ui.h> +#include <epan/conversation_table.h> +#include <wsutil/cmdarg_err.h> +#include <ui/cli/tshark-tap.h> + +typedef struct _endpoints_t { + const char *type; + const char *filter; + conv_hash_t hash; +} endpoints_t; + +static void +endpoints_draw(void *arg) +{ + conv_hash_t *hash = (conv_hash_t*)arg; + endpoints_t *iu = (endpoints_t *)hash->user_data; + endpoint_item_t *endpoint; + guint64 last_frames, max_frames; + guint i; + gboolean display_port = (!strncmp(iu->type, "TCP", 3) || !strncmp(iu->type, "UDP", 3) || !strncmp(iu->type, "SCTP", 4)) ? TRUE : FALSE; + + printf("================================================================================\n"); + printf("%s Endpoints\n", iu->type); + printf("Filter:%s\n", iu->filter ? iu->filter : "<No Filter>"); + + printf(" | %sPackets | | Bytes | | Tx Packets | | Tx Bytes | | Rx Packets | | Rx Bytes |\n", + display_port ? "Port || " : ""); + + max_frames = UINT_MAX; + do { + last_frames = 0; + for (i=0; (iu->hash.conv_array && i < iu->hash.conv_array->len); i++) { + guint64 tot_frames; + + endpoint = &g_array_index(iu->hash.conv_array, endpoint_item_t, i); + tot_frames = endpoint->rx_frames + endpoint->tx_frames; + + if ((tot_frames > last_frames) && (tot_frames < max_frames)) { + last_frames = tot_frames; + } + } + + for (i=0; (iu->hash.conv_array && i < iu->hash.conv_array->len); i++) { + guint64 tot_frames; + gchar *conversation_str, *port_str; + + endpoint = &g_array_index(iu->hash.conv_array, endpoint_item_t, i); + tot_frames = endpoint->rx_frames + endpoint->tx_frames; + + if (tot_frames == last_frames) { + /* XXX - TODO: make name resolution configurable (through gbl_resolv_flags?) */ + conversation_str = get_conversation_address(NULL, &endpoint->myaddress, TRUE); + if (display_port) { + /* XXX - TODO: make port resolution configurable (through gbl_resolv_flags?) */ + port_str = get_endpoint_port(NULL, endpoint, TRUE); + printf("%-20s %5s %6" PRIu64 " %9" PRIu64 + " %6" PRIu64 " %9" PRIu64 " %6" + PRIu64 " %9" PRIu64 " \n", + conversation_str, + port_str, + endpoint->tx_frames+endpoint->rx_frames, endpoint->tx_bytes+endpoint->rx_bytes, + endpoint->tx_frames, endpoint->tx_bytes, + endpoint->rx_frames, endpoint->rx_bytes); + wmem_free(NULL, port_str); + } else { + printf("%-20s %6" PRIu64 " %9" PRIu64 + " %6" PRIu64 " %9" PRIu64 " %6" + PRIu64 " %9" PRIu64 " \n", + /* XXX - TODO: make name resolution configurable (through gbl_resolv_flags?) */ + conversation_str, + endpoint->tx_frames+endpoint->rx_frames, endpoint->tx_bytes+endpoint->rx_bytes, + endpoint->tx_frames, endpoint->tx_bytes, + endpoint->rx_frames, endpoint->rx_bytes); + + } + wmem_free(NULL, conversation_str); + } + } + max_frames = last_frames; + } while (last_frames); + printf("================================================================================\n"); +} + +void init_endpoints(struct register_ct *ct, const char *filter) +{ + endpoints_t *iu; + GString *error_string; + + iu = g_new0(endpoints_t, 1); + iu->type = proto_get_protocol_short_name(find_protocol_by_id(get_conversation_proto_id(ct))); + iu->filter = g_strdup(filter); + iu->hash.user_data = iu; + + error_string = register_tap_listener(proto_get_protocol_filter_name(get_conversation_proto_id(ct)), &iu->hash, filter, 0, NULL, get_endpoint_packet_func(ct), endpoints_draw, NULL); + if (error_string) { + g_free(iu); + cmdarg_err("Couldn't register endpoint tap: %s", + error_string->str); + g_string_free(error_string, TRUE); + exit(1); + } + +} + +/* + * Editor modelines - https://www.wireshark.org/tools/modelines.html + * + * Local variables: + * c-basic-offset: 8 + * tab-width: 8 + * indent-tabs-mode: t + * End: + * + * vi: set shiftwidth=8 tabstop=8 noexpandtab: + * :indentSize=8:tabSize=8:noTabs=false: + */ |