2 * Routines for the capture interface dialog
6 * Wireshark - Network traffic analyzer
7 * By Gerald Combs <gerald@wireshark.org>
8 * Copyright 1998 Gerald Combs
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License
12 * as published by the Free Software Foundation; either version 2
13 * of the License, or (at your option) any later version.
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
20 * You should have received a copy of the GNU General Public License
21 * along with this program; if not, write to the Free Software
22 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
36 #include <sys/types.h>
40 #include <epan/prefs.h>
42 #include "../globals.h"
43 #include "../capture-pcap-util.h"
44 #include "../simple_dialog.h"
45 #include "../capture.h"
46 #include "../capture_errs.h"
47 #include "../capture_ui_utils.h"
48 #include "wsutil/file_util.h"
49 #include <wiretap/wtap.h>
52 #include "../capture-wpcap.h"
53 #include "gtk/capture_if_details_dlg_win32.h"
56 #include "gtk/stock_icons.h"
57 #include "gtk/capture_dlg.h"
58 #include "gtk/capture_if_dlg.h"
59 #include "gtk/recent.h"
60 #include "gtk/gui_utils.h"
61 #include "gtk/dlg_utils.h"
63 #include "gtk/main_toolbar.h"
64 #include "gtk/help_dlg.h"
66 #include "gtk/webbrowser.h"
67 #include "gtk/capture_globals.h"
70 #include "../image/toolbar/capture_airpcap_16.xpm"
73 #include "../image/toolbar/capture_ethernet_16.xpm"
75 #include "../image/toolbar/modem_16.xpm"
77 #if defined(_WIN32) || defined(__APPLE__) || defined(__linux__)
78 #include "../image/toolbar/network_wireless_16.xpm"
80 #include "../image/toolbar/network_wired_16.xpm"
81 #if defined(_WIN32) || defined(__APPLE__)
82 #include "../image/toolbar/network_virtual_16.xpm"
84 #if defined(_WIN32) || defined(__linux__)
85 #include "../image/toolbar/network_bluetooth_16.xpm"
88 /* new buttons to be used instead of labels for 'Capture','Prepare',' */
89 /*#include "../image/toolbar/capture_capture_16.xpm"*/
90 /*#include "../image/toolbar/capture_prepare_16.xpm"*/
91 /*#include "../image/toolbar/capture_details_16.xpm"*/
96 #include "airpcap_loader.h"
97 #include "airpcap_gui_utils.h"
98 #include "airpcap_dlg.h"
102 * Keep a static pointer to the current "Capture Interfaces" window, if
103 * any, so that if somebody tries to do "Capture:Start" while there's
104 * already a "Capture Interfaces" window up, we just pop up the existing
105 * one, rather than creating a new one.
107 static GtkWidget *cap_if_w;
109 static GtkWidget *cap_air_w;
112 GList *if_data = NULL;
121 * Timeout, in milliseconds, for reads from the stream of captured packets.
123 #define CAP_READ_TIMEOUT 250
126 /* the "runtime" data of one interface */
127 typedef struct if_dlg_data_s {
128 GtkWidget *device_lb;
133 GtkWidget *capture_bt;
134 GtkWidget *prepare_bt;
136 GtkWidget *details_bt;
138 guint32 last_packets;
144 /* start capture button was pressed */
146 capture_do_cb(GtkWidget *capture_bt _U_, gpointer if_data)
148 if_dlg_data_t *if_dlg_data = if_data;
151 airpcap_if_active = get_airpcap_if_from_name(airpcap_if_list, if_dlg_data->if_info.name);
152 airpcap_if_selected = airpcap_if_active;
155 g_free(global_capture_opts.iface);
156 g_free(global_capture_opts.iface_descr);
158 global_capture_opts.iface = g_strdup(if_dlg_data->device);
159 global_capture_opts.iface_descr = get_interface_descriptive_name(global_capture_opts.iface);
161 /* XXX - remove this? */
162 if (global_capture_opts.save_file) {
163 g_free(global_capture_opts.save_file);
164 global_capture_opts.save_file = NULL;
167 /* stop capturing from all interfaces, we are going to do real work now ... */
168 window_destroy(cap_if_w);
170 capture_start_cb(NULL, NULL);
174 /* prepare capture button was pressed */
176 capture_prepare_cb(GtkWidget *prepare_bt _U_, gpointer if_data)
178 if_dlg_data_t *if_dlg_data = if_data;
180 g_free(global_capture_opts.iface);
181 g_free(global_capture_opts.iface_descr);
183 global_capture_opts.iface = g_strdup(if_dlg_data->device);
184 global_capture_opts.iface_descr = get_interface_descriptive_name(global_capture_opts.iface);
186 /* stop capturing from all interfaces, we are going to do real work now ... */
187 window_destroy(cap_if_w);
189 capture_prep_cb(NULL, NULL);
194 /* capture details button was pressed */
196 capture_details_cb(GtkWidget *details_bt _U_, gpointer if_data)
198 if_dlg_data_t *if_dlg_data = if_data;
201 capture_if_details_open(if_dlg_data->device);
205 /* update a single interface */
207 update_if(if_dlg_data_t *if_dlg_data, if_stat_cache_t *sc)
209 struct pcap_stat stats;
215 * Note that some versions of libpcap, on some versions of UN*X,
216 * pcap_stats() returns the number of packets since the last
219 * That's a bug, and should be fixed; "pcap_stats()" is supposed
220 * to work the same way on all platforms.
223 if(capture_stats(sc, if_dlg_data->device, &stats)) {
224 diff = stats.ps_recv - if_dlg_data->last_packets;
225 if_dlg_data->last_packets = stats.ps_recv;
227 str = g_strdup_printf("%u", if_dlg_data->last_packets);
228 gtk_label_set_text(GTK_LABEL(if_dlg_data->curr_lb), str);
230 str = g_strdup_printf("%u", diff);
231 gtk_label_set_text(GTK_LABEL(if_dlg_data->last_lb), str);
234 gtk_widget_set_sensitive(if_dlg_data->curr_lb, diff);
235 gtk_widget_set_sensitive(if_dlg_data->last_lb, diff);
237 gtk_label_set_text(GTK_LABEL(if_dlg_data->curr_lb), "error");
238 gtk_label_set_text(GTK_LABEL(if_dlg_data->last_lb), "error");
243 /* update all interfaces */
245 update_all(gpointer data)
249 if_stat_cache_t *sc = data;
255 for(ifs = 0; (curr = g_list_nth(if_data, ifs)); ifs++) {
256 update_if(curr->data, sc);
262 gboolean g_capture_in_progress = FALSE;
264 /* a live capture has started or stopped */
266 set_capture_if_dialog_for_capture_in_progress(gboolean capture_in_progress)
271 g_capture_in_progress = capture_in_progress;
274 gtk_widget_set_sensitive(stop_bt, capture_in_progress);
276 for(ifs = 0; (curr = g_list_nth(if_data, ifs)); ifs++) {
277 if_dlg_data_t *if_dlg_data = curr->data;
279 gtk_widget_set_sensitive(if_dlg_data->capture_bt, !capture_in_progress);
280 gtk_widget_set_sensitive(if_dlg_data->prepare_bt, !capture_in_progress);
286 /* the window was closed, cleanup things */
288 capture_if_destroy_cb(GtkWidget *win _U_, gpointer user_data)
292 if_stat_cache_t *sc = user_data;
294 g_source_remove(timer_id);
296 for(ifs = 0; (curr = g_list_nth(if_data, ifs)); ifs++) {
302 free_interface_list(if_list);
304 /* Note that we no longer have a "Capture Options" dialog box. */
307 capture_stat_stop(sc);
310 airpcap_set_toolbar_stop_capture(airpcap_if_active);
316 * Sorts the Interface List in alphabetical order
318 gint if_list_comparator_alph (const void *first_arg, const void *second_arg){
319 const if_info_t *first = first_arg, *second = second_arg;
321 if (first != NULL && first->description != NULL &&
322 second != NULL && second->description != NULL) {
323 return g_ascii_strcasecmp(first->description, second->description);
331 * Used to retrieve the interface icon.
332 * This is hideously platform-dependent.
334 GtkWidget * capture_get_if_icon(const if_info_t* if_info _U_)
338 * Much digging failed to reveal any obvious way to get something such
339 * as the SNMP MIB-II ifType value for an interface:
341 * http://www.iana.org/assignments/ianaiftype-mib
343 * by making some NDIS request.
345 if ( strstr(if_info->description,"generic dialup") != NULL ||
346 strstr(if_info->description,"PPP/SLIP") != NULL) {
347 return xpm_to_widget(modem_16_xpm);
350 if ( strstr(if_info->description,"Wireless") != NULL || strstr(if_info->description,"802.11") != NULL) {
351 return xpm_to_widget(network_wireless_16_xpm);
354 /* TODO: find a better icon! */
355 if ( strstr(if_info->description,"VMware") != NULL) {
356 return xpm_to_widget(network_virtual_16_xpm);
359 if ( strstr(if_info->description,"Bluetooth") != NULL) {
360 return xpm_to_widget(network_bluetooth_16_xpm);
362 #elif defined(__APPLE__)
364 * XXX - yes, fetching all the network addresses for an interface
365 * gets you an AF_LINK address, of type "struct sockaddr_dl", and,
366 * yes, that includes an SNMP MIB-II ifType value.
368 * However, it's IFT_ETHER, i.e. Ethernet, for AirPort interfaces,
369 * not IFT_IEEE80211 (which isn't defined in OS X in any case).
371 * Perhaps some other BSD-flavored OSes won't make this mistake;
372 * however, FreeBSD 7.0 and OpenBSD 4.2, at least, appear to have
373 * made the same mistake, at least for my Belkin ZyDAS stick.
375 * On Mac OS X, one might be able to get the information one wants from
378 if ( strcmp(if_info->name, "en1") == 0) {
379 return xpm_to_widget(network_wireless_16_xpm);
383 * XXX - PPP devices have names beginning with "ppp" and an IFT_ of
384 * IFT_PPP, but they could be dial-up, or PPPoE, or mobile phone modem,
385 * or VPN, or... devices. One might have to dive into the bowels of
390 * TODO: find a better icon!
391 * These devices have an IFT_ of IFT_ETHER, so we have to check the name.
392 * XXX - are these supposed to be for VMware interfaces on the host
393 * machine, for talking to the guest, or for VMware-supplied interfaces
394 * on the guest machine, or both?
396 if ( strncmp(if_info->name,"vmnet",5) == 0) {
397 return xpm_to_widget(network_virtual_16_xpm);
401 * XXX - there's currently no support for raw Bluetooth capture,
402 * and IP-over-Bluetooth devices just look like fake Ethernet
403 * devices. There's also Bluetooth modem support, but that'll
404 * probably just give you a device that looks like a PPP device.
406 #elif defined(__linux__)
408 * Look for /sys/class/net/{device}/wireless.
413 wireless_path = g_strdup_printf("/sys/class/net/%s/wireless", if_info->name);
414 if (wireless_path != NULL) {
415 if (ws_stat(wireless_path, &statb) == 0) {
416 g_free(wireless_path);
417 return xpm_to_widget(network_wireless_16_xpm);
419 g_free(wireless_path);
422 /* XXX - "vmnet" again, for VMware interfaces? */
427 * XXX - this is for raw Bluetooth capture; what about IP-over-Bluetooth
430 if ( strstr(if_info->name,"bluetooth") != NULL) {
431 return xpm_to_widget(network_bluetooth_16_xpm);
435 return xpm_to_widget(network_wired_16_xpm);
440 /* start getting capture stats from all interfaces */
442 capture_if_cb(GtkWidget *w _U_, gpointer d _U_)
452 GtkWidget *decryption_cm;
457 GtkTooltips *tooltips;
460 GtkRequisition requisition;
462 if_dlg_data_t *if_dlg_data;
468 GString *if_tool_str = g_string_new("");
469 const gchar *addr_str;
473 if (cap_if_w != NULL) {
474 /* There's already a "Capture Interfaces" dialog box; reactivate it. */
475 reactivate_window(cap_if_w);
480 /* Is WPcap loaded? */
484 detailed_err = cant_load_winpcap_err("Wireshark");
485 simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, "%s", detailed_err);
486 g_free(detailed_err);
491 /* LOAD THE INTERFACES */
492 if_list = capture_interface_list(&err, &err_str);
493 if_list = g_list_sort (if_list, if_list_comparator_alph);
494 if (if_list == NULL && err == CANT_GET_INTERFACE_LIST) {
495 simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, "%s", err_str);
501 /* LOAD AIRPCAP INTERFACES */
502 airpcap_if_list = get_airpcap_interface_list(&err, &err_str);
503 if (airpcap_if_list == NULL)
504 airpcap_if_active = airpcap_if_selected = NULL;
506 decryption_cm = g_object_get_data(G_OBJECT(airpcap_tb),AIRPCAP_TOOLBAR_DECRYPTION_KEY);
507 update_decryption_mode_list(decryption_cm);
509 if (airpcap_if_list == NULL && err == CANT_GET_AIRPCAP_INTERFACE_LIST) {
511 /* XXX - Do we need to show an error here? */
512 simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, "%s", err_str);
517 /* If no airpcap interface is present, gray everything */
518 if (airpcap_if_active == NULL) {
519 if (airpcap_if_list == NULL) {
520 /*No airpcap device found */
521 airpcap_enable_toolbar_widgets(airpcap_tb,FALSE);
523 /* default adapter is not airpcap... or is airpcap but is not found*/
524 airpcap_set_toolbar_stop_capture(airpcap_if_active);
525 airpcap_enable_toolbar_widgets(airpcap_tb,FALSE);
529 airpcap_set_toolbar_start_capture(airpcap_if_active);
532 cap_if_w = window_new(GTK_WINDOW_TOPLEVEL, "Wireshark: Capture Interfaces");
534 tooltips = gtk_tooltips_new();
536 main_sw = gtk_scrolled_window_new(NULL, NULL);
537 gtk_scrolled_window_set_policy(GTK_SCROLLED_WINDOW(main_sw), GTK_POLICY_NEVER, GTK_POLICY_AUTOMATIC);
538 gtk_container_add(GTK_CONTAINER(cap_if_w), main_sw);
540 main_vb = gtk_vbox_new(FALSE, 0);
541 gtk_container_set_border_width(GTK_CONTAINER(main_vb), 5);
542 gtk_scrolled_window_add_with_viewport(GTK_SCROLLED_WINDOW(main_sw), main_vb);
545 if_tb = gtk_table_new(1,9, FALSE);
546 gtk_table_set_row_spacings(GTK_TABLE(if_tb), 3);
547 gtk_table_set_col_spacings(GTK_TABLE(if_tb), 3);
548 gtk_box_pack_start(GTK_BOX(main_vb), if_tb, FALSE, FALSE, 0);
553 /* This is the icon column, used to display which kind of interface we have */
554 if_lb = gtk_label_new("");
555 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 0, 1, row, row+1);
559 * On Windows, device names are generally not meaningful - NT 5
560 * uses long blobs with GUIDs in them, for example - so we don't
561 * bother showing them.
563 if_lb = gtk_label_new("Device");
564 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 1, 2, row, row+1);
567 if_lb = gtk_label_new("Description");
568 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 2, 3, row, row+1);
570 if_lb = gtk_label_new(" IP ");
571 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 3, 4, row, row+1);
573 if_lb = gtk_label_new("Packets");
574 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 4, 5, row, row+1);
576 if_lb = gtk_label_new(" Packets/s ");
577 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 5, 6, row, row+1);
579 stop_bt = gtk_button_new_from_stock(WIRESHARK_STOCK_CAPTURE_STOP);
580 gtk_tooltips_set_tip(tooltips, stop_bt,
581 "Stop a running capture.", NULL);
583 gtk_table_attach_defaults(GTK_TABLE(if_tb), stop_bt, 6, 9, row, row+1);
585 gtk_table_attach_defaults(GTK_TABLE(if_tb), stop_bt, 6, 8, row, row+1);
587 g_signal_connect(stop_bt, "clicked", G_CALLBACK(capture_stop_cb), NULL);
590 gtk_widget_size_request(stop_bt, &requisition);
591 height += requisition.height + 15;
593 /* Start gathering statistics (using dumpcap) */
594 sc = capture_stat_start(if_list);
596 /* List the interfaces */
597 for(ifs = 0; (curr = g_list_nth(if_list, ifs)); ifs++) {
598 g_string_assign(if_tool_str, "");
599 if_info = curr->data;
601 /* Continue if capture device is hidden */
602 if (prefs_is_capture_device_hidden(if_info->name)) {
606 if_dlg_data = g_malloc0(sizeof(if_dlg_data_t));
607 if_dlg_data->if_info = *if_info;
609 /* Kind of adaptor (icon) */
611 if(get_airpcap_if_from_name(airpcap_if_list,if_info->name) != NULL)
612 icon = xpm_to_widget(capture_airpcap_16_xpm);
614 icon = capture_get_if_icon(if_info);
616 icon = capture_get_if_icon(if_info);
619 gtk_table_attach_defaults(GTK_TABLE(if_tb), icon, 0, 1, row, row+1);
622 if_dlg_data->device_lb = gtk_label_new(if_info->name);
623 if_dlg_data->device = if_info->name;
625 gtk_misc_set_alignment(GTK_MISC(if_dlg_data->device_lb), 0.0f, 0.5f);
626 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->device_lb, 1, 2, row, row+1);
628 g_string_append(if_tool_str, "Device: ");
629 g_string_append(if_tool_str, if_info->name);
630 g_string_append(if_tool_str, "\n");
633 if (if_info->description != NULL)
634 if_dlg_data->descr_lb = gtk_label_new(if_info->description);
636 if_dlg_data->descr_lb = gtk_label_new("");
637 gtk_misc_set_alignment(GTK_MISC(if_dlg_data->descr_lb), 0.0f, 0.5f);
638 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->descr_lb, 2, 3, row, row+1);
640 if (if_info->description) {
641 g_string_append(if_tool_str, "Description: ");
642 g_string_append(if_tool_str, if_info->description);
643 g_string_append(if_tool_str, "\n");
647 /* only the first IP address will be shown */
648 g_string_append(if_tool_str, "IP: ");
649 curr_ip = g_slist_nth(if_info->ip_addr, 0);
651 ip_addr = (if_addr_t *)curr_ip->data;
652 switch (ip_addr->type) {
655 addr_str = ip_to_str((guint8 *)&ip_addr->ip_addr.ip4_addr);
659 addr_str = ip6_to_str((struct e_in6_addr *)&ip_addr->ip_addr.ip6_addr);
663 g_assert_not_reached();
666 if_dlg_data->ip_lb = gtk_label_new(addr_str);
667 gtk_widget_set_sensitive(if_dlg_data->ip_lb, TRUE);
668 g_string_append(if_tool_str, addr_str);
670 if_dlg_data->ip_lb = gtk_label_new("unknown");
671 gtk_widget_set_sensitive(if_dlg_data->ip_lb, FALSE);
672 g_string_append(if_tool_str, "unknown");
674 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->ip_lb, 3, 4, row, row+1);
675 g_string_append(if_tool_str, "\n");
678 if_dlg_data->curr_lb = gtk_label_new("-");
679 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->curr_lb, 4, 5, row, row+1);
682 if_dlg_data->last_lb = gtk_label_new("-");
683 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->last_lb, 5, 6, row, row+1);
686 if_dlg_data->capture_bt = gtk_button_new_from_stock(WIRESHARK_STOCK_CAPTURE_START);
687 g_signal_connect(if_dlg_data->capture_bt, "clicked", G_CALLBACK(capture_do_cb), if_dlg_data);
688 tmp_str = g_strdup_printf("Immediately start a capture from this interface:\n\n%s", if_tool_str->str);
689 gtk_tooltips_set_tip(tooltips, if_dlg_data->capture_bt,
692 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->capture_bt, 6, 7, row, row+1);
695 if_dlg_data->prepare_bt = gtk_button_new_from_stock(WIRESHARK_STOCK_CAPTURE_OPTIONS);
696 g_signal_connect(if_dlg_data->prepare_bt, "clicked", G_CALLBACK(capture_prepare_cb), if_dlg_data);
697 gtk_tooltips_set_tip(tooltips, if_dlg_data->prepare_bt,
698 "Open the capture options dialog with this interface selected.", NULL);
699 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->prepare_bt, 7, 8, row, row+1);
703 if_dlg_data->details_bt = gtk_button_new_from_stock(WIRESHARK_STOCK_CAPTURE_DETAILS);
704 g_signal_connect(if_dlg_data->details_bt, "clicked", G_CALLBACK(capture_details_cb), if_dlg_data);
705 gtk_tooltips_set_tip(tooltips, if_dlg_data->details_bt,
706 "Open the capture details dialog of this interface.", NULL);
707 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->details_bt, 8, 9, row, row+1);
710 if_data = g_list_append(if_data, if_dlg_data);
714 /* Lets add up 10 rows of interfaces, otherwise the window may become too high */
715 gtk_widget_size_request(GTK_WIDGET(if_dlg_data->prepare_bt), &requisition);
716 height += requisition.height;
720 g_string_free(if_tool_str, TRUE);
722 /* Button row: close and help button */
723 bbox = dlg_button_row_new(GTK_STOCK_CLOSE, GTK_STOCK_HELP, NULL);
724 gtk_box_pack_start(GTK_BOX(main_vb), bbox, FALSE, FALSE, 5);
726 close_bt = g_object_get_data(G_OBJECT(bbox), GTK_STOCK_CLOSE);
727 window_set_cancel_button(cap_if_w, close_bt, window_cancel_button_cb);
728 gtk_tooltips_set_tip(tooltips, close_bt, "Close this window.", NULL);
730 help_bt = g_object_get_data(G_OBJECT(bbox), GTK_STOCK_HELP);
731 g_signal_connect(help_bt, "clicked", G_CALLBACK(topic_cb), (gpointer)(HELP_CAPTURE_INTERFACES_DIALOG));
733 gtk_widget_size_request(GTK_WIDGET(close_bt), &requisition);
734 /* height + static offset + what the GTK MS Windows Engine needs in addition per interface */
735 height += requisition.height + 20 + ifs;
736 gtk_window_set_default_size(GTK_WINDOW(cap_if_w), -1, height);
738 gtk_widget_grab_default(close_bt);
740 g_signal_connect(cap_if_w, "delete_event", G_CALLBACK(window_delete_event_cb), NULL);
741 g_signal_connect(cap_if_w, "destroy", G_CALLBACK(capture_if_destroy_cb), sc);
743 gtk_widget_show_all(cap_if_w);
744 window_present(cap_if_w);
746 set_capture_if_dialog_for_capture_in_progress(g_capture_in_progress);
748 /* update the interface list every 1000ms */
749 timer_id = g_timeout_add(1000, update_all, sc);
752 #else /* HAVE_LIBPCAP */
755 set_capture_if_dialog_for_capture_in_progress(gboolean capture_in_progress _U_)
759 #endif /* HAVE_LIBPCAP */