summaryrefslogtreecommitdiffstats
path: root/ui/cli/tap-iousers.c
diff options
context:
space:
mode:
Diffstat (limited to 'ui/cli/tap-iousers.c')
-rw-r--r--ui/cli/tap-iousers.c267
1 files changed, 267 insertions, 0 deletions
diff --git a/ui/cli/tap-iousers.c b/ui/cli/tap-iousers.c
new file mode 100644
index 00000000..742f984c
--- /dev/null
+++ b/ui/cli/tap-iousers.c
@@ -0,0 +1,267 @@
+/* tap-iousers.c
+ * iostat 2003 Ronnie Sahlberg
+ *
+ * Wireshark - Network traffic analyzer
+ * By Gerald Combs <gerald@wireshark.org>
+ * Copyright 1998 Gerald Combs
+ *
+ * SPDX-License-Identifier: GPL-2.0-or-later
+ */
+
+#include "config.h"
+
+#include <stdio.h>
+#include <stdlib.h>
+
+#include <string.h>
+#include <epan/packet.h>
+#include <epan/timestamp.h>
+#include <wsutil/str_util.h>
+#include <wsutil/cmdarg_err.h>
+#include <ui/cli/tshark-tap.h>
+
+typedef struct _io_users_t {
+ const char *type;
+ const char *filter;
+ conv_hash_t hash;
+} io_users_t;
+
+static void
+iousers_draw(void *arg)
+{
+ conv_hash_t *hash = (conv_hash_t*)arg;
+ io_users_t *iu = (io_users_t *)hash->user_data;
+ conv_item_t *iui;
+ guint64 last_frames, max_frames;
+ struct tm * tm_time;
+ guint i;
+ gboolean display_ports = (!strncmp(iu->type, "TCP", 3) || !strncmp(iu->type, "UDP", 3) || !strncmp(iu->type, "SCTP", 4)) ? TRUE : FALSE;
+
+ printf("================================================================================\n");
+ printf("%s Conversations\n", iu->type);
+ printf("Filter:%s\n", iu->filter ? iu->filter : "<No Filter>");
+
+ switch (timestamp_get_type()) {
+ case TS_ABSOLUTE:
+ case TS_UTC:
+ printf("%s | <- | | -> | | Total | Absolute Time | Duration |\n",
+ display_ports ? " " : "");
+ printf("%s | Frames Size | | Frames Size | | Frames Size | Start | |\n",
+ display_ports ? " " : "");
+ break;
+ case TS_ABSOLUTE_WITH_YMD:
+ case TS_ABSOLUTE_WITH_YDOY:
+ case TS_UTC_WITH_YMD:
+ case TS_UTC_WITH_YDOY:
+ printf("%s | <- | | -> | | Total | Absolute Date | Duration |\n",
+ display_ports ? " " : "");
+ printf("%s | Frames Size | | Frames Size | | Frames Size | Start | |\n",
+ display_ports ? " " : "");
+ break;
+ case TS_EPOCH:
+ printf("%s | <- | | -> | | Total | Relative | Duration |\n",
+ display_ports ? " " : "");
+ printf("%s | Frames Bytes | | Frames Bytes | | Frames Bytes | Start | |\n",
+ display_ports ? " " : "");
+ break;
+ case TS_RELATIVE:
+ case TS_NOT_SET:
+ default:
+ printf("%s | <- | | -> | | Total | Relative | Duration |\n",
+ display_ports ? " " : "");
+ printf("%s | Frames Bytes | | Frames Bytes | | Frames Bytes | Start | |\n",
+ display_ports ? " " : "");
+ break;
+ }
+
+ max_frames = UINT_MAX;
+ do {
+ last_frames = 0;
+ for (i=0; (iu->hash.conv_array && i < iu->hash.conv_array->len); i++) {
+ guint64 tot_frames;
+
+ iui = &g_array_index(iu->hash.conv_array, conv_item_t, i);
+ tot_frames = iui->rx_frames + iui->tx_frames;
+
+ if ((tot_frames > last_frames) && (tot_frames < max_frames)) {
+ last_frames = tot_frames;
+ }
+ }
+
+ for (i=0; (iu->hash.conv_array && i < iu->hash.conv_array->len); i++) {
+ guint64 tot_frames;
+ char *src_addr, *dst_addr;
+
+ iui = &g_array_index(iu->hash.conv_array, conv_item_t, i);
+ tot_frames = iui->rx_frames + iui->tx_frames;
+
+ if (tot_frames == last_frames) {
+ char *rx_bytes, *tx_bytes, *total_bytes;
+
+ rx_bytes = format_size(iui->rx_bytes, FORMAT_SIZE_UNIT_BYTES, 0);
+ tx_bytes = format_size(iui->tx_bytes, FORMAT_SIZE_UNIT_BYTES, 0);
+ total_bytes = format_size(iui->tx_bytes + iui->rx_bytes, FORMAT_SIZE_UNIT_BYTES, 0);
+
+ /* XXX - TODO: make name / port resolution configurable (through gbl_resolv_flags?) */
+ src_addr = get_conversation_address(NULL, &iui->src_address, TRUE);
+ dst_addr = get_conversation_address(NULL, &iui->dst_address, TRUE);
+ if (display_ports) {
+ char *src, *dst, *src_port, *dst_port;
+ src_port = get_conversation_port(NULL, iui->src_port, iui->ctype, TRUE);
+ dst_port = get_conversation_port(NULL, iui->dst_port, iui->ctype, TRUE);
+ src = wmem_strconcat(NULL, src_addr, ":", src_port, NULL);
+ dst = wmem_strconcat(NULL, dst_addr, ":", dst_port, NULL);
+ printf("%-26s <-> %-26s %6" PRIu64 " %-9s"
+ " %6" PRIu64 " %-9s"
+ " %6" PRIu64 " %-9s ",
+ src, dst,
+ iui->rx_frames, rx_bytes,
+ iui->tx_frames, tx_bytes,
+ iui->tx_frames+iui->rx_frames,
+ total_bytes
+ );
+ wmem_free(NULL, src_port);
+ wmem_free(NULL, dst_port);
+ wmem_free(NULL, src);
+ wmem_free(NULL, dst);
+ } else {
+ printf("%-20s <-> %-20s %6" PRIu64 " %-9s"
+ " %6" PRIu64 " %-9s"
+ " %6" PRIu64 " %-9s ",
+ src_addr, dst_addr,
+ iui->rx_frames, rx_bytes,
+ iui->tx_frames, tx_bytes,
+ iui->tx_frames+iui->rx_frames,
+ total_bytes
+ );
+ }
+
+ wmem_free(NULL, src_addr);
+ wmem_free(NULL, dst_addr);
+ wmem_free(NULL, rx_bytes);
+ wmem_free(NULL, tx_bytes);
+ wmem_free(NULL, total_bytes);
+
+ switch (timestamp_get_type()) {
+ case TS_ABSOLUTE:
+ tm_time = localtime(&iui->start_abs_time.secs);
+ if (tm_time != NULL) {
+ printf("%02d:%02d:%02d",
+ tm_time->tm_hour,
+ tm_time->tm_min,
+ tm_time->tm_sec);
+ } else
+ printf("XX:XX:XX");
+ break;
+ case TS_ABSOLUTE_WITH_YMD:
+ tm_time = localtime(&iui->start_abs_time.secs);
+ if (tm_time != NULL) {
+ printf("%04d-%02d-%02d %02d:%02d:%02d",
+ tm_time->tm_year + 1900,
+ tm_time->tm_mon + 1,
+ tm_time->tm_mday,
+ tm_time->tm_hour,
+ tm_time->tm_min,
+ tm_time->tm_sec);
+ } else
+ printf("XXXX-XX-XX XX:XX:XX");
+ break;
+ case TS_ABSOLUTE_WITH_YDOY:
+ tm_time = localtime(&iui->start_abs_time.secs);
+ if (tm_time != NULL) {
+ printf("%04d/%03d %02d:%02d:%02d",
+ tm_time->tm_year + 1900,
+ tm_time->tm_yday + 1,
+ tm_time->tm_hour,
+ tm_time->tm_min,
+ tm_time->tm_sec);
+ } else
+ printf("XXXX/XXX XX:XX:XX");
+ break;
+ case TS_UTC:
+ tm_time = gmtime(&iui->start_abs_time.secs);
+ if (tm_time != NULL) {
+ printf("%02d:%02d:%02d",
+ tm_time->tm_hour,
+ tm_time->tm_min,
+ tm_time->tm_sec);
+ } else
+ printf("XX:XX:XX");
+ break;
+ case TS_UTC_WITH_YMD:
+ tm_time = gmtime(&iui->start_abs_time.secs);
+ if (tm_time != NULL) {
+ printf("%04d-%02d-%02d %02d:%02d:%02d",
+ tm_time->tm_year + 1900,
+ tm_time->tm_mon + 1,
+ tm_time->tm_mday,
+ tm_time->tm_hour,
+ tm_time->tm_min,
+ tm_time->tm_sec);
+ } else
+ printf("XXXX-XX-XX XX:XX:XX");
+ break;
+ case TS_UTC_WITH_YDOY:
+ tm_time = gmtime(&iui->start_abs_time.secs);
+ if (tm_time != NULL) {
+ printf("%04d/%03d %02d:%02d:%02d",
+ tm_time->tm_year + 1900,
+ tm_time->tm_yday + 1,
+ tm_time->tm_hour,
+ tm_time->tm_min,
+ tm_time->tm_sec);
+ } else
+ printf("XXXX/XXX XX:XX:XX");
+ break;
+ case TS_EPOCH:
+ printf("%20.9f", nstime_to_sec(&iui->start_abs_time));
+ break;
+ case TS_RELATIVE:
+ case TS_NOT_SET:
+ default:
+ printf("%14.9f",
+ nstime_to_sec(&iui->start_time));
+ break;
+ }
+ printf(" %12.4f\n",
+ nstime_to_sec(&iui->stop_time) - nstime_to_sec(&iui->start_time));
+ }
+ }
+ max_frames = last_frames;
+ } while (last_frames);
+ printf("================================================================================\n");
+}
+
+void init_iousers(struct register_ct *ct, const char *filter)
+{
+ io_users_t *iu;
+ GString *error_string;
+
+ iu = g_new0(io_users_t, 1);
+ iu->type = proto_get_protocol_short_name(find_protocol_by_id(get_conversation_proto_id(ct)));
+ iu->filter = g_strdup(filter);
+ iu->hash.user_data = iu;
+
+ error_string = register_tap_listener(proto_get_protocol_filter_name(get_conversation_proto_id(ct)), &iu->hash, filter, 0, NULL, get_conversation_packet_func(ct), iousers_draw, NULL);
+ if (error_string) {
+ g_free(iu);
+ cmdarg_err("Couldn't register conversations tap: %s",
+ error_string->str);
+ g_string_free(error_string, TRUE);
+ exit(1);
+ }
+
+}
+
+/*
+ * Editor modelines - https://www.wireshark.org/tools/modelines.html
+ *
+ * Local variables:
+ * c-basic-offset: 8
+ * tab-width: 8
+ * indent-tabs-mode: t
+ * End:
+ *
+ * vi: set shiftwidth=8 tabstop=8 noexpandtab:
+ * :indentSize=8:tabSize=8:noTabs=false:
+ */