2 * Routines for the capture interface dialog
6 * Wireshark - Network traffic analyzer
7 * By Gerald Combs <gerald@wireshark.org>
8 * Copyright 1998 Gerald Combs
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License
12 * as published by the Free Software Foundation; either version 2
13 * of the License, or (at your option) any later version.
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
20 * You should have received a copy of the GNU General Public License
21 * along with this program; if not, write to the Free Software
22 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
36 #include <sys/types.h>
40 #include <epan/prefs.h>
42 #include "../globals.h"
43 #include "../capture-pcap-util.h"
44 #include "../simple_dialog.h"
45 #include "../capture.h"
46 #include "../capture_errs.h"
47 #include "../capture_ui_utils.h"
48 #include "wsutil/file_util.h"
49 #include <wiretap/wtap.h>
52 #include "../capture-wpcap.h"
53 #include "gtk/capture_if_details_dlg_win32.h"
56 #include "gtk/stock_icons.h"
57 #include "gtk/capture_dlg.h"
58 #include "gtk/capture_if_dlg.h"
59 #include "gtk/recent.h"
60 #include "gtk/gui_utils.h"
61 #include "gtk/dlg_utils.h"
63 #include "gtk/main_toolbar.h"
64 #include "gtk/help_dlg.h"
66 #include "gtk/webbrowser.h"
67 #include "gtk/capture_globals.h"
70 #include "../image/toolbar/capture_airpcap_16.xpm"
73 #include "../image/toolbar/capture_ethernet_16.xpm"
75 #include "../image/toolbar/modem_16.xpm"
77 #if defined(_WIN32) || defined(__APPLE__) || defined(__linux__)
78 #include "../image/toolbar/network_wireless_16.xpm"
80 #include "../image/toolbar/network_wired_16.xpm"
81 #if defined(_WIN32) || defined(__APPLE__)
82 #include "../image/toolbar/network_virtual_16.xpm"
84 #if defined(_WIN32) || defined(__linux__)
85 #include "../image/toolbar/network_bluetooth_16.xpm"
88 /* new buttons to be used instead of labels for 'Capture','Prepare',' */
89 /*#include "../image/toolbar/capture_capture_16.xpm"*/
90 /*#include "../image/toolbar/capture_prepare_16.xpm"*/
91 /*#include "../image/toolbar/capture_details_16.xpm"*/
96 #include "airpcap_loader.h"
97 #include "airpcap_gui_utils.h"
98 #include "airpcap_dlg.h"
102 * Keep a static pointer to the current "Capture Interfaces" window, if
103 * any, so that if somebody tries to do "Capture:Start" while there's
104 * already a "Capture Interfaces" window up, we just pop up the existing
105 * one, rather than creating a new one.
107 static GtkWidget *cap_if_w;
109 GList *if_data = NULL;
118 * Timeout, in milliseconds, for reads from the stream of captured packets.
120 #define CAP_READ_TIMEOUT 250
123 /* the "runtime" data of one interface */
124 typedef struct if_dlg_data_s {
125 GtkWidget *device_lb;
130 GtkWidget *capture_bt;
131 GtkWidget *prepare_bt;
133 GtkWidget *details_bt;
135 guint32 last_packets;
141 /* start capture button was pressed */
143 capture_do_cb(GtkWidget *capture_bt _U_, gpointer if_data)
145 if_dlg_data_t *if_dlg_data = if_data;
148 airpcap_if_active = get_airpcap_if_from_name(airpcap_if_list, if_dlg_data->if_info.name);
149 airpcap_if_selected = airpcap_if_active;
152 g_free(global_capture_opts.iface);
153 g_free(global_capture_opts.iface_descr);
155 global_capture_opts.iface = g_strdup(if_dlg_data->device);
156 global_capture_opts.iface_descr = get_interface_descriptive_name(global_capture_opts.iface);
158 /* XXX - remove this? */
159 if (global_capture_opts.save_file) {
160 g_free(global_capture_opts.save_file);
161 global_capture_opts.save_file = NULL;
164 /* stop capturing from all interfaces, we are going to do real work now ... */
165 window_destroy(cap_if_w);
167 capture_start_cb(NULL, NULL);
171 /* prepare capture button was pressed */
173 capture_prepare_cb(GtkWidget *prepare_bt _U_, gpointer if_data)
175 if_dlg_data_t *if_dlg_data = if_data;
177 g_free(global_capture_opts.iface);
178 g_free(global_capture_opts.iface_descr);
180 global_capture_opts.iface = g_strdup(if_dlg_data->device);
181 global_capture_opts.iface_descr = get_interface_descriptive_name(global_capture_opts.iface);
183 /* stop capturing from all interfaces, we are going to do real work now ... */
184 window_destroy(cap_if_w);
186 capture_prep_cb(NULL, NULL);
191 /* capture details button was pressed */
193 capture_details_cb(GtkWidget *details_bt _U_, gpointer if_data)
195 if_dlg_data_t *if_dlg_data = if_data;
198 capture_if_details_open(if_dlg_data->device);
202 /* update a single interface */
204 update_if(if_dlg_data_t *if_dlg_data, if_stat_cache_t *sc)
206 struct pcap_stat stats;
212 * Note that some versions of libpcap, on some versions of UN*X,
213 * pcap_stats() returns the number of packets since the last
216 * That's a bug, and should be fixed; "pcap_stats()" is supposed
217 * to work the same way on all platforms.
220 if(capture_stats(sc, if_dlg_data->device, &stats)) {
221 diff = stats.ps_recv - if_dlg_data->last_packets;
222 if_dlg_data->last_packets = stats.ps_recv;
224 str = g_strdup_printf("%u", if_dlg_data->last_packets);
225 gtk_label_set_text(GTK_LABEL(if_dlg_data->curr_lb), str);
227 str = g_strdup_printf("%u", diff);
228 gtk_label_set_text(GTK_LABEL(if_dlg_data->last_lb), str);
231 gtk_widget_set_sensitive(if_dlg_data->curr_lb, diff);
232 gtk_widget_set_sensitive(if_dlg_data->last_lb, diff);
234 gtk_label_set_text(GTK_LABEL(if_dlg_data->curr_lb), "error");
235 gtk_label_set_text(GTK_LABEL(if_dlg_data->last_lb), "error");
240 /* update all interfaces */
242 update_all(gpointer data)
246 if_stat_cache_t *sc = data;
252 for(ifs = 0; (curr = g_list_nth(if_data, ifs)); ifs++) {
253 update_if(curr->data, sc);
259 gboolean g_capture_in_progress = FALSE;
261 /* a live capture has started or stopped */
263 set_capture_if_dialog_for_capture_in_progress(gboolean capture_in_progress)
268 g_capture_in_progress = capture_in_progress;
271 gtk_widget_set_sensitive(stop_bt, capture_in_progress);
273 for(ifs = 0; (curr = g_list_nth(if_data, ifs)); ifs++) {
274 if_dlg_data_t *if_dlg_data = curr->data;
276 gtk_widget_set_sensitive(if_dlg_data->capture_bt, !capture_in_progress);
277 gtk_widget_set_sensitive(if_dlg_data->prepare_bt, !capture_in_progress);
283 /* the window was closed, cleanup things */
285 capture_if_destroy_cb(GtkWidget *win _U_, gpointer user_data)
289 if_stat_cache_t *sc = user_data;
291 g_source_remove(timer_id);
293 for(ifs = 0; (curr = g_list_nth(if_data, ifs)); ifs++) {
299 free_interface_list(if_list);
301 /* Note that we no longer have a "Capture Options" dialog box. */
304 capture_stat_stop(sc);
307 airpcap_set_toolbar_stop_capture(airpcap_if_active);
313 * Sorts the Interface List in alphabetical order
315 gint if_list_comparator_alph (const void *first_arg, const void *second_arg){
316 const if_info_t *first = first_arg, *second = second_arg;
318 if (first != NULL && first->description != NULL &&
319 second != NULL && second->description != NULL) {
320 return g_ascii_strcasecmp(first->description, second->description);
328 * Used to retrieve the interface icon.
329 * This is hideously platform-dependent.
331 GtkWidget * capture_get_if_icon(const if_info_t* if_info _U_)
335 * Much digging failed to reveal any obvious way to get something such
336 * as the SNMP MIB-II ifType value for an interface:
338 * http://www.iana.org/assignments/ianaiftype-mib
340 * by making some NDIS request.
342 if ( strstr(if_info->description,"generic dialup") != NULL ||
343 strstr(if_info->description,"PPP/SLIP") != NULL) {
344 return xpm_to_widget(modem_16_xpm);
347 if ( strstr(if_info->description,"Wireless") != NULL || strstr(if_info->description,"802.11") != NULL) {
348 return xpm_to_widget(network_wireless_16_xpm);
351 /* TODO: find a better icon! */
352 if ( strstr(if_info->description,"VMware") != NULL) {
353 return xpm_to_widget(network_virtual_16_xpm);
356 if ( strstr(if_info->description,"Bluetooth") != NULL) {
357 return xpm_to_widget(network_bluetooth_16_xpm);
359 #elif defined(__APPLE__)
361 * XXX - yes, fetching all the network addresses for an interface
362 * gets you an AF_LINK address, of type "struct sockaddr_dl", and,
363 * yes, that includes an SNMP MIB-II ifType value.
365 * However, it's IFT_ETHER, i.e. Ethernet, for AirPort interfaces,
366 * not IFT_IEEE80211 (which isn't defined in OS X in any case).
368 * Perhaps some other BSD-flavored OSes won't make this mistake;
369 * however, FreeBSD 7.0 and OpenBSD 4.2, at least, appear to have
370 * made the same mistake, at least for my Belkin ZyDAS stick.
372 * On Mac OS X, one might be able to get the information one wants from
375 if ( strcmp(if_info->name, "en1") == 0) {
376 return xpm_to_widget(network_wireless_16_xpm);
380 * XXX - PPP devices have names beginning with "ppp" and an IFT_ of
381 * IFT_PPP, but they could be dial-up, or PPPoE, or mobile phone modem,
382 * or VPN, or... devices. One might have to dive into the bowels of
387 * TODO: find a better icon!
388 * These devices have an IFT_ of IFT_ETHER, so we have to check the name.
389 * XXX - are these supposed to be for VMware interfaces on the host
390 * machine, for talking to the guest, or for VMware-supplied interfaces
391 * on the guest machine, or both?
393 if ( strncmp(if_info->name,"vmnet",5) == 0) {
394 return xpm_to_widget(network_virtual_16_xpm);
398 * XXX - there's currently no support for raw Bluetooth capture,
399 * and IP-over-Bluetooth devices just look like fake Ethernet
400 * devices. There's also Bluetooth modem support, but that'll
401 * probably just give you a device that looks like a PPP device.
403 #elif defined(__linux__)
405 * Look for /sys/class/net/{device}/wireless.
410 wireless_path = g_strdup_printf("/sys/class/net/%s/wireless", if_info->name);
411 if (wireless_path != NULL) {
412 if (ws_stat(wireless_path, &statb) == 0) {
413 g_free(wireless_path);
414 return xpm_to_widget(network_wireless_16_xpm);
416 g_free(wireless_path);
419 /* XXX - "vmnet" again, for VMware interfaces? */
424 * XXX - this is for raw Bluetooth capture; what about IP-over-Bluetooth
427 if ( strstr(if_info->name,"bluetooth") != NULL) {
428 return xpm_to_widget(network_bluetooth_16_xpm);
432 return xpm_to_widget(network_wired_16_xpm);
437 /* start getting capture stats from all interfaces */
439 capture_if_cb(GtkWidget *w _U_, gpointer d _U_)
449 GtkWidget *decryption_cm;
454 GtkTooltips *tooltips;
457 GtkRequisition requisition;
459 if_dlg_data_t *if_dlg_data;
465 GString *if_tool_str = g_string_new("");
466 const gchar *addr_str;
470 if (cap_if_w != NULL) {
471 /* There's already a "Capture Interfaces" dialog box; reactivate it. */
472 reactivate_window(cap_if_w);
477 /* Is WPcap loaded? */
481 detailed_err = cant_load_winpcap_err("Wireshark");
482 simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, "%s", detailed_err);
483 g_free(detailed_err);
488 /* LOAD THE INTERFACES */
489 if_list = capture_interface_list(&err, &err_str);
490 if_list = g_list_sort (if_list, if_list_comparator_alph);
491 if (if_list == NULL && err == CANT_GET_INTERFACE_LIST) {
492 simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, "%s", err_str);
498 /* LOAD AIRPCAP INTERFACES */
499 airpcap_if_list = get_airpcap_interface_list(&err, &err_str);
500 if (airpcap_if_list == NULL)
501 airpcap_if_active = airpcap_if_selected = NULL;
503 decryption_cm = g_object_get_data(G_OBJECT(airpcap_tb),AIRPCAP_TOOLBAR_DECRYPTION_KEY);
504 update_decryption_mode_list(decryption_cm);
506 if (airpcap_if_list == NULL && err == CANT_GET_AIRPCAP_INTERFACE_LIST) {
508 /* XXX - Do we need to show an error here? */
509 simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, "%s", err_str);
514 /* If no airpcap interface is present, gray everything */
515 if (airpcap_if_active == NULL) {
516 if (airpcap_if_list == NULL) {
517 /*No airpcap device found */
518 airpcap_enable_toolbar_widgets(airpcap_tb,FALSE);
520 /* default adapter is not airpcap... or is airpcap but is not found*/
521 airpcap_set_toolbar_stop_capture(airpcap_if_active);
522 airpcap_enable_toolbar_widgets(airpcap_tb,FALSE);
526 airpcap_set_toolbar_start_capture(airpcap_if_active);
529 cap_if_w = window_new(GTK_WINDOW_TOPLEVEL, "Wireshark: Capture Interfaces");
531 tooltips = gtk_tooltips_new();
533 main_sw = gtk_scrolled_window_new(NULL, NULL);
534 gtk_scrolled_window_set_policy(GTK_SCROLLED_WINDOW(main_sw), GTK_POLICY_NEVER, GTK_POLICY_AUTOMATIC);
535 gtk_container_add(GTK_CONTAINER(cap_if_w), main_sw);
537 main_vb = gtk_vbox_new(FALSE, 0);
538 gtk_container_set_border_width(GTK_CONTAINER(main_vb), 5);
539 gtk_scrolled_window_add_with_viewport(GTK_SCROLLED_WINDOW(main_sw), main_vb);
542 if_tb = gtk_table_new(1,9, FALSE);
543 gtk_table_set_row_spacings(GTK_TABLE(if_tb), 3);
544 gtk_table_set_col_spacings(GTK_TABLE(if_tb), 3);
545 gtk_box_pack_start(GTK_BOX(main_vb), if_tb, FALSE, FALSE, 0);
550 /* This is the icon column, used to display which kind of interface we have */
551 if_lb = gtk_label_new("");
552 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 0, 1, row, row+1);
556 * On Windows, device names are generally not meaningful - NT 5
557 * uses long blobs with GUIDs in them, for example - so we don't
558 * bother showing them.
560 if_lb = gtk_label_new("Device");
561 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 1, 2, row, row+1);
564 if_lb = gtk_label_new("Description");
565 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 2, 3, row, row+1);
567 if_lb = gtk_label_new(" IP ");
568 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 3, 4, row, row+1);
570 if_lb = gtk_label_new("Packets");
571 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 4, 5, row, row+1);
573 if_lb = gtk_label_new(" Packets/s ");
574 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_lb, 5, 6, row, row+1);
576 stop_bt = gtk_button_new_from_stock(WIRESHARK_STOCK_CAPTURE_STOP);
577 gtk_tooltips_set_tip(tooltips, stop_bt,
578 "Stop a running capture.", NULL);
580 gtk_table_attach_defaults(GTK_TABLE(if_tb), stop_bt, 6, 9, row, row+1);
582 gtk_table_attach_defaults(GTK_TABLE(if_tb), stop_bt, 6, 8, row, row+1);
584 g_signal_connect(stop_bt, "clicked", G_CALLBACK(capture_stop_cb), NULL);
587 gtk_widget_size_request(stop_bt, &requisition);
588 height += requisition.height + 15;
590 /* Start gathering statistics (using dumpcap) */
591 sc = capture_stat_start(if_list);
593 /* List the interfaces */
594 for(ifs = 0; (curr = g_list_nth(if_list, ifs)); ifs++) {
595 g_string_assign(if_tool_str, "");
596 if_info = curr->data;
598 /* Continue if capture device is hidden */
599 if (prefs_is_capture_device_hidden(if_info->name)) {
603 if_dlg_data = g_malloc0(sizeof(if_dlg_data_t));
604 if_dlg_data->if_info = *if_info;
606 /* Kind of adaptor (icon) */
608 if(get_airpcap_if_from_name(airpcap_if_list,if_info->name) != NULL)
609 icon = xpm_to_widget(capture_airpcap_16_xpm);
611 icon = capture_get_if_icon(if_info);
613 icon = capture_get_if_icon(if_info);
616 gtk_table_attach_defaults(GTK_TABLE(if_tb), icon, 0, 1, row, row+1);
619 if_dlg_data->device_lb = gtk_label_new(if_info->name);
620 if_dlg_data->device = if_info->name;
622 gtk_misc_set_alignment(GTK_MISC(if_dlg_data->device_lb), 0.0f, 0.5f);
623 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->device_lb, 1, 2, row, row+1);
625 g_string_append(if_tool_str, "Device: ");
626 g_string_append(if_tool_str, if_info->name);
627 g_string_append(if_tool_str, "\n");
630 if (if_info->description != NULL)
631 if_dlg_data->descr_lb = gtk_label_new(if_info->description);
633 if_dlg_data->descr_lb = gtk_label_new("");
634 gtk_misc_set_alignment(GTK_MISC(if_dlg_data->descr_lb), 0.0f, 0.5f);
635 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->descr_lb, 2, 3, row, row+1);
637 if (if_info->description) {
638 g_string_append(if_tool_str, "Description: ");
639 g_string_append(if_tool_str, if_info->description);
640 g_string_append(if_tool_str, "\n");
644 /* only the first IP address will be shown */
645 g_string_append(if_tool_str, "IP: ");
646 curr_ip = g_slist_nth(if_info->ip_addr, 0);
648 ip_addr = (if_addr_t *)curr_ip->data;
649 switch (ip_addr->type) {
652 addr_str = ip_to_str((guint8 *)&ip_addr->ip_addr.ip4_addr);
656 addr_str = ip6_to_str((struct e_in6_addr *)&ip_addr->ip_addr.ip6_addr);
660 g_assert_not_reached();
663 if_dlg_data->ip_lb = gtk_label_new(addr_str);
664 gtk_widget_set_sensitive(if_dlg_data->ip_lb, TRUE);
665 g_string_append(if_tool_str, addr_str);
667 if_dlg_data->ip_lb = gtk_label_new("unknown");
668 gtk_widget_set_sensitive(if_dlg_data->ip_lb, FALSE);
669 g_string_append(if_tool_str, "unknown");
671 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->ip_lb, 3, 4, row, row+1);
672 g_string_append(if_tool_str, "\n");
675 if_dlg_data->curr_lb = gtk_label_new("-");
676 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->curr_lb, 4, 5, row, row+1);
679 if_dlg_data->last_lb = gtk_label_new("-");
680 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->last_lb, 5, 6, row, row+1);
683 if_dlg_data->capture_bt = gtk_button_new_from_stock(WIRESHARK_STOCK_CAPTURE_START);
684 g_signal_connect(if_dlg_data->capture_bt, "clicked", G_CALLBACK(capture_do_cb), if_dlg_data);
685 tmp_str = g_strdup_printf("Immediately start a capture from this interface:\n\n%s", if_tool_str->str);
686 gtk_tooltips_set_tip(tooltips, if_dlg_data->capture_bt,
689 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->capture_bt, 6, 7, row, row+1);
692 if_dlg_data->prepare_bt = gtk_button_new_from_stock(WIRESHARK_STOCK_CAPTURE_OPTIONS);
693 g_signal_connect(if_dlg_data->prepare_bt, "clicked", G_CALLBACK(capture_prepare_cb), if_dlg_data);
694 gtk_tooltips_set_tip(tooltips, if_dlg_data->prepare_bt,
695 "Open the capture options dialog with this interface selected.", NULL);
696 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->prepare_bt, 7, 8, row, row+1);
700 if_dlg_data->details_bt = gtk_button_new_from_stock(WIRESHARK_STOCK_CAPTURE_DETAILS);
701 g_signal_connect(if_dlg_data->details_bt, "clicked", G_CALLBACK(capture_details_cb), if_dlg_data);
702 gtk_tooltips_set_tip(tooltips, if_dlg_data->details_bt,
703 "Open the capture details dialog of this interface.", NULL);
704 gtk_table_attach_defaults(GTK_TABLE(if_tb), if_dlg_data->details_bt, 8, 9, row, row+1);
707 if_data = g_list_append(if_data, if_dlg_data);
711 /* Lets add up 10 rows of interfaces, otherwise the window may become too high */
712 gtk_widget_size_request(GTK_WIDGET(if_dlg_data->prepare_bt), &requisition);
713 height += requisition.height;
717 g_string_free(if_tool_str, TRUE);
719 /* Button row: close and help button */
720 bbox = dlg_button_row_new(GTK_STOCK_CLOSE, GTK_STOCK_HELP, NULL);
721 gtk_box_pack_start(GTK_BOX(main_vb), bbox, FALSE, FALSE, 5);
723 close_bt = g_object_get_data(G_OBJECT(bbox), GTK_STOCK_CLOSE);
724 window_set_cancel_button(cap_if_w, close_bt, window_cancel_button_cb);
725 gtk_tooltips_set_tip(tooltips, close_bt, "Close this window.", NULL);
727 help_bt = g_object_get_data(G_OBJECT(bbox), GTK_STOCK_HELP);
728 g_signal_connect(help_bt, "clicked", G_CALLBACK(topic_cb), (gpointer)(HELP_CAPTURE_INTERFACES_DIALOG));
730 gtk_widget_size_request(GTK_WIDGET(close_bt), &requisition);
731 /* height + static offset + what the GTK MS Windows Engine needs in addition per interface */
732 height += requisition.height + 20 + ifs;
733 gtk_window_set_default_size(GTK_WINDOW(cap_if_w), -1, height);
735 gtk_widget_grab_default(close_bt);
737 g_signal_connect(cap_if_w, "delete_event", G_CALLBACK(window_delete_event_cb), NULL);
738 g_signal_connect(cap_if_w, "destroy", G_CALLBACK(capture_if_destroy_cb), sc);
740 gtk_widget_show_all(cap_if_w);
741 window_present(cap_if_w);
743 set_capture_if_dialog_for_capture_in_progress(g_capture_in_progress);
745 /* update the interface list every 1000ms */
746 timer_id = g_timeout_add(1000, update_all, sc);
749 #else /* HAVE_LIBPCAP */
752 set_capture_if_dialog_for_capture_in_progress(gboolean capture_in_progress _U_)
756 #endif /* HAVE_LIBPCAP */