2 * Routines for capture file summary info
6 * Wireshark - Network traffic analyzer
7 * By Gerald Combs <gerald@wireshark.org>
8 * Copyright 1998 Gerald Combs
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License
12 * as published by the Free Software Foundation; either version 2
13 * of the License, or (at your option) any later version.
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
20 * You should have received a copy of the GNU General Public License
21 * along with this program; if not, write to the Free Software
22 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
29 #include <epan/packet.h>
33 #include "capture_ui_utils.h"
38 tally_frame_data(frame_data *cur_frame, summary_tally *sum_tally)
42 sum_tally->bytes += cur_frame->pkt_len;
43 if (cur_frame->flags.passed_dfilter){
44 sum_tally->filtered_count++;
45 sum_tally->filtered_bytes += cur_frame->pkt_len;
47 if (cur_frame->flags.marked){
48 sum_tally->marked_count++;
49 sum_tally->marked_bytes += cur_frame->pkt_len;
51 if (cur_frame->flags.ignored){
52 sum_tally->ignored_count++;
55 if (cur_frame->flags.has_ts) {
56 /* This packet has a time stamp. */
57 cur_time = nstime_to_sec(&cur_frame->abs_ts);
59 sum_tally->packet_count_ts++;
60 if (cur_time < sum_tally->start_time) {
61 sum_tally->start_time = cur_time;
63 if (cur_time > sum_tally->stop_time){
64 sum_tally->stop_time = cur_time;
66 if (cur_frame->flags.passed_dfilter){
67 sum_tally->filtered_count_ts++;
69 * If we've seen one filtered packet, this is the first
72 if (sum_tally->filtered_count == 1){
73 sum_tally->filtered_start= cur_time;
74 sum_tally->filtered_stop = cur_time;
76 if (cur_time < sum_tally->filtered_start) {
77 sum_tally->filtered_start = cur_time;
79 if (cur_time > sum_tally->filtered_stop) {
80 sum_tally->filtered_stop = cur_time;
84 if (cur_frame->flags.marked){
85 sum_tally->marked_count_ts++;
87 * If we've seen one marked packet, this is the first
90 if (sum_tally->marked_count == 1){
91 sum_tally->marked_start= cur_time;
92 sum_tally->marked_stop = cur_time;
94 if (cur_time < sum_tally->marked_start) {
95 sum_tally->marked_start = cur_time;
97 if (cur_time > sum_tally->marked_stop) {
98 sum_tally->marked_stop = cur_time;
106 summary_fill_in(capture_file *cf, summary_tally *st)
109 frame_data *first_frame, *cur_frame;
111 wtapng_section_t* shb_inf;
113 st->packet_count_ts = 0;
117 st->filtered_count = 0;
118 st->filtered_count_ts = 0;
119 st->filtered_start = 0;
120 st->filtered_stop = 0;
121 st->filtered_bytes = 0;
122 st->marked_count = 0;
123 st->marked_count_ts = 0;
124 st->marked_start = 0;
126 st->marked_bytes = 0;
127 st->ignored_count = 0;
129 /* initialize the tally */
130 if (cf->count != 0) {
131 first_frame = frame_data_sequence_find(cf->frames, 1);
132 st->start_time = nstime_to_sec(&first_frame->abs_ts);
133 st->stop_time = nstime_to_sec(&first_frame->abs_ts);
135 for (framenum = 1; framenum <= cf->count; framenum++) {
136 cur_frame = frame_data_sequence_find(cf->frames, framenum);
137 tally_frame_data(cur_frame, st);
141 st->filename = cf->filename;
142 st->file_length = cf->f_datalen;
143 st->file_type = cf->cd_t;
144 st->is_tempfile = cf->is_tempfile;
145 st->encap_type = cf->lnk_t;
146 st->has_snap = cf->has_snap;
148 st->elapsed_time = nstime_to_sec(&cf->elapsed_time);
149 st->packet_count = cf->count;
150 st->drops_known = cf->drops_known;
151 st->drops = cf->drops;
152 st->dfilter = cf->dfilter;
154 /* Get info from SHB */
155 shb_inf = wtap_file_get_shb_info(cf->wth);
157 st->opt_comment = NULL;
158 st->shb_hardware = NULL;
160 st->shb_user_appl = NULL;
162 st->opt_comment = shb_inf->opt_comment;
163 st->shb_hardware = shb_inf->shb_hardware;
164 st->shb_os = shb_inf->shb_os;
165 st->shb_user_appl = shb_inf->shb_user_appl;
169 st->ifaces = g_array_new(FALSE, FALSE, sizeof(iface_options));
175 summary_fill_in_capture(capture_file *cf,capture_options *capture_opts, summary_tally *st)
180 wtapng_iface_descriptions_t* idb_info;
181 wtapng_if_descr_t wtapng_if_descr;
182 wtapng_if_stats_t *if_stats;
184 while (st->ifaces->len > 0) {
185 iface = g_array_index(st->ifaces, iface_options, 0);
186 st->ifaces = g_array_remove_index(st->ifaces, 0);
189 g_free(iface.cfilter);
191 if (st->is_tempfile) {
192 for (i = 0; i < capture_opts->all_ifaces->len; i++) {
193 device = g_array_index(capture_opts->all_ifaces, interface_t, i);
194 if (!device.selected) {
197 iface.cfilter = g_strdup(device.cfilter);
198 iface.name = g_strdup(device.name);
199 iface.descr = g_strdup(device.display_name);
200 iface.drops_known = cf->drops_known;
201 iface.drops = cf->drops;
202 iface.has_snap = device.has_snaplen;
203 iface.snap = device.snaplen;
204 iface.linktype = device.active_dlt;
205 g_array_append_val(st->ifaces, iface);
208 idb_info = wtap_file_get_idb_info(cf->wth);
209 for (i = 0; i < idb_info->number_of_interfaces; i++) {
210 wtapng_if_descr = g_array_index(idb_info->interface_data, wtapng_if_descr_t, i);
211 iface.cfilter = g_strdup(wtapng_if_descr.if_filter_str);
212 iface.name = g_strdup(wtapng_if_descr.if_name);
213 iface.descr = g_strdup(wtapng_if_descr.if_description);
214 iface.drops_known = FALSE;
216 iface.snap = wtapng_if_descr.snap_len;
217 iface.has_snap = (iface.snap != 65535);
218 iface.linktype = wtapng_if_descr.link_type;
219 if(wtapng_if_descr.num_stat_entries == 1){
220 /* dumpcap only writes one ISB, only handle that for now */
221 if_stats = &g_array_index(wtapng_if_descr.interface_statistics, wtapng_if_stats_t, 0);
222 iface.drops_known = TRUE;
223 iface.drops = if_stats->isb_ifdrop;
224 iface.isb_comment = if_stats->opt_comment;
226 g_array_append_val(st->ifaces, iface);
234 summary_update_comment(capture_file *cf, gchar *comment)
237 /* Get info from SHB */
238 wtap_write_shb_comment(cf->wth, comment);