gtk/compare_stat.c

   1 /* compare_stat.c
   2  * Compare two capture files
   3  * Copyright 2008 Vincenzo Condoleo, Christophe Dirac, Reto Ruoss
   4  * supported by HSR (Hochschule Rapperswil)
   5  *
   6  * $Id$
   7  *
   8  * Wireshark - Network traffic analyzer
   9  * By Gerald Combs <gerald@wireshark.org>
  10  * Copyright 1998 Gerald Combs
  11  *
  12  * This program is free software; you can redistribute it and/or
  13  * modify it under the terms of the GNU General Public License
  14  * as published by the Free Software Foundation; either version 2
  15  * of the License, or (at your option) any later version.
  16  *
  17  * This program is distributed in the hope that it will be useful,
  18  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  19  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  20  * GNU General Public License for more details.
  21  *
  22  * You should have received a copy of the GNU General Public License
  23  * along with this program; if not, write to the Free Software
  24  * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  0F111-1307, USA.
  25  */
  26
  27 /* This module provides statistics about two merged capture files, to find packet loss,
  28  * time delay, ip header checksum errors and order check.
  29  * It's also detecting the matching regions of the different files.
  30  * After the coloring is set Info column can be sorted to create zebra effect.
  31  *
  32  * The packets are compared by the ip id. MAC or TTL is used to distinct the different files.
  33  */
  34
  35 #ifdef HAVE_CONFIG_H
  36 # include "config.h"
  37 #endif
  38
  39 #include <string.h>
  40 #include <math.h>
  41 #include <glib.h>
  42 #include <gtk/gtk.h>
  43
  44 #include <epan/packet_info.h>
  45 #include <epan/epan.h>
  46 #include <epan/epan_dissect.h>
  47 #include <epan/stat_cmd_args.h>
  48 #include <epan/to_str.h>
  49 #include <epan/tap.h>
  50 #include <epan/emem.h>
  51 #include <epan/packet.h>
  52 #include <epan/report_err.h>
  53 #include <epan/dissectors/packet-ip.h>
  54 #include <epan/nstime.h>
  55 #include <epan/in_cksum.h>
  56
  57 #include "../stat_menu.h"
  58 #include "../globals.h"
  59 #include "../simple_dialog.h"
  60 #include "../timestats.h"
  61
  62 #include "gtk/gui_stat_menu.h"
  63 #include "gtk/stock_icons.h"
  64 #include "gtk/help_dlg.h"
  65 #include "gtk/filter_autocomplete.h"
  66
  67 #include "gui_utils.h"
  68 #include "dlg_utils.h"
  69 #include "register.h"
  70 #include "main.h"
  71 #include "filter_dlg.h"
  72 #include "service_response_time_table.h"
  73 #include "gtkglobals.h"
  74 #include "gui_utils.h"
  75 #include "globals.h"
  76
  77 /* Color settings */
  78 #include "color.h"
  79 #include "color_filters.h"
  80 #include "color_dlg.h"
  81
  82 /* From colorize convertion */
  83 #define COLOR_N 1
  84
  85 /* For checksum */
  86 #define BYTES 8
  87 #define WRONG_CHKSUM 0
  88
  89 #define MERGED_FILES 2
  90
  91 #define TTL_SEARCH 5
  92
  93
  94
  95 /* information which are needed for the display */
  96 typedef struct _for_gui {
  97         guint count;
  98         guint16 cksum;
  99         nstime_t predecessor_time;
 100         struct _frame_info *partner;
 101 } for_gui;
 102
 103 /* each tracked packet */
 104 typedef struct _frame_info {
 105         for_gui *fg;
 106         column_info *cinfo;
 107         guint32 num;
 108         guint16 id;
 109         guint8 ip_ttl;
 110         address dl_dst;
 111         nstime_t abs_ts, zebra_time, delta;
 112 } frame_info;
 113
 114 /* used to keep track of the statistics for an entire program interface */
 115 typedef struct _compstat_t {
 116         GtkWidget *win, *treeview, *scrolled_win, *statis_label;
 117         GtkTreeStore *simple_list;
 118         GtkTreeIter iter, child;
 119         emem_tree_t *packet_tree, *ip_id_tree, *nr_tree;
 120         address eth_dst, eth_src;
 121         nstime_t zebra_time, current_time;
 122         timestat_t stats;
 123         GArray *ip_ttl_list;
 124         gboolean last_hit;
 125         guint32 start_ongoing_hits, stop_ongoing_hits, start_packet_nr_first, start_packet_nr_second, stop_packet_nr_first, stop_packet_nr_second;
 126         guint32 first_file_amount, second_file_amount;
 127 } compstat_t;
 128
 129 /* column numbers */
 130 enum
 131 {
 132         IP_ID=0,
 133         PROBLEM,
 134         COUNT,
 135         DELTA,
 136         COLUMNS
 137 };
 138
 139 /* only one compare window should be open */
 140 static gboolean first_window=TRUE;
 141
 142 /* allowed variace */
 143 static GtkWidget *spin_var_int=NULL;
 144
 145 /* start/stop compare */
 146 static GtkWidget  *spin_start_int, *spin_stop_int;
 147
 148 /* to call directly _init */
 149 static gdouble compare_variance=0.0;
 150 static guint8 compare_start, compare_stop;
 151 static gboolean TTL_method=TRUE, ON_method=TRUE;
 152 static GtkWidget *radio_TTL, *radio_ON;
 153
 154 static void
 155 comparestat_set_title(compstat_t *cs)
 156 {
 157         char *title;
 158
 159         title=g_strdup_printf("Compare two capture files: %s", cf_get_display_name(&cfile));
 160         gtk_window_set_title(GTK_WINDOW(cs->win), title);
 161         g_free(title);
 162 }
 163
 164 /* called when new capture starts, when it rescans the packetlist after some prefs have
 165  * changed
 166  */
 167 static void
 168 comparestat_reset(void *arg)
 169 {
 170         compstat_t *cs=arg;
 171
 172         SET_ADDRESS(&cs->eth_src, AT_ETHER, 0, NULL);
 173         SET_ADDRESS(&cs->eth_dst, AT_ETHER, 0, NULL);
 174
 175         gtk_tree_store_clear(cs->simple_list);
 176         comparestat_set_title(cs);
 177 }
 178
 179 /* This callback is invoked whenever the tap system has seen a packet
 180  * we might be interested in.
 181  * function returns :
 182  *  0: no updates, no need to call (*draw) later
 183  * !0: state has changed, call (*draw) sometime later
 184  */
 185 static int
 186 comparestat_packet(void *arg, packet_info *pinfo, epan_dissect_t *edt _U_, const void *arg2)
 187 {
 188         compstat_t *cs=arg;
 189         const ws_ip *ci=arg2;
 190         frame_info *fInfo, *fInfoTemp;
 191         vec_t cksum_vec[3];
 192         guint16 computed_cksum=0;
 193
 194         /* so this get filled, usually with the first frame */
 195         if(cs->eth_dst.len==0) {
 196                 cs->eth_dst=pinfo->dl_dst;
 197                 cs->eth_src=pinfo->dl_src;
 198         }
 199
 200         /* Set up the fields of the pseudo-header and create checksum */
 201         cksum_vec[0].ptr=&ci->ip_v_hl;
 202         cksum_vec[0].len=BYTES;
 203         /* skip TTL */
 204         cksum_vec[1].ptr=&ci->ip_p;
 205         cksum_vec[1].len=1;
 206         /* skip header checksum and ip's (because of NAT)*/
 207         cksum_vec[2].ptr=ci->ip_dst.data;
 208         cksum_vec[2].ptr=cksum_vec[2].ptr+ci->ip_dst.len;
 209         /* dynamic computation */
 210         cksum_vec[2].len=pinfo->iphdrlen-20;
 211         computed_cksum=in_cksum(&cksum_vec[0], 3);
 212
 213         /* Set up the new order to create the zebra effect */
 214         fInfoTemp=se_tree_lookup32(cs->packet_tree, pinfo->fd->num);
 215         if(check_col(pinfo->cinfo, COL_INFO)&&(fInfoTemp!=NULL)){
 216                 col_set_time(pinfo->cinfo, COL_INFO, &fInfoTemp->zebra_time, "ZebraTime");
 217         }
 218
 219         /* collect all packet infos */
 220         fInfo=(frame_info*)se_alloc(sizeof(frame_info));
 221         fInfo->fg=(for_gui*)se_alloc(sizeof(for_gui));
 222         fInfo->fg->partner=NULL;
 223         fInfo->fg->count=1;
 224         fInfo->fg->cksum=computed_cksum;
 225         fInfo->num=pinfo->fd->num;
 226         fInfo->id=ci->ip_id;
 227         fInfo->ip_ttl=ci->ip_ttl;
 228         fInfo->dl_dst=pinfo->dl_dst;
 229         fInfo->abs_ts=pinfo->fd->abs_ts;
 230         /* clean memory */
 231         nstime_set_zero(&fInfo->zebra_time);
 232         nstime_set_zero(&fInfo->fg->predecessor_time);
 233         se_tree_insert32(cs->packet_tree, pinfo->fd->num, fInfo);
 234
 235         if(cf_get_packet_count(&cfile)==abs(fInfo->num)){
 236                 nstime_set_unset(&cs->current_time);
 237                 return 1;
 238         } else {
 239                 return 0;
 240         }
 241 }
 242
 243 /* Find equal packets, same IP-Id, count them and make time statistics */
 244 static gboolean
 245 call_foreach_count_ip_id(gpointer value, gpointer arg)
 246 {
 247         compstat_t *cs=(compstat_t*)arg;
 248         frame_info *fInfo=(frame_info*)value, *fInfoTemp;
 249         nstime_t delta;
 250         guint i;
 251
 252         /* we only need one value out of pinfo we use a temp one */
 253         packet_info *pinfo=(packet_info*)ep_alloc(sizeof(packet_info));
 254         pinfo->fd=(frame_data*)ep_alloc(sizeof(frame_data));
 255         pinfo->fd->num = fInfo->num;
 256
 257         fInfoTemp=se_tree_lookup32(cs->ip_id_tree, fInfo->id);
 258         if(fInfoTemp==NULL){
 259                 /* Detect ongoing package loss */
 260                 if((cs->last_hit==FALSE)&&(cs->start_ongoing_hits>compare_start)&&(cs->stop_ongoing_hits<compare_stop)){
 261                         cs->stop_ongoing_hits++;
 262                         cs->stop_packet_nr_first=fInfo->num;
 263                 } else if(cs->stop_ongoing_hits<compare_stop){
 264                         cs->stop_ongoing_hits=0;
 265                         cs->stop_packet_nr_first=G_MAXINT32;
 266                 }
 267                 cs->last_hit=FALSE;
 268
 269                 fInfo->fg->count=1;
 270                 se_tree_insert32(cs->ip_id_tree, fInfo->id, fInfo);
 271         } else {
 272                 /* Detect ongoing package hits, special behavior if start is set to 0 */
 273                 if((cs->last_hit||(compare_start==0))&&(cs->start_ongoing_hits<compare_start||(compare_start==0))){
 274                         if((compare_start==0)&&(cs->start_ongoing_hits!=0)){
 275                                 /* start from the first packet so allready set */
 276                         } else {
 277                                 cs->start_ongoing_hits++;
 278                                 /* Take the lower number */
 279                                 cs->start_packet_nr_first=fInfoTemp->num;
 280                                 cs->start_packet_nr_second=fInfo->num;
 281                         }
 282                 } else if(cs->start_ongoing_hits<compare_start){
 283                         cs->start_ongoing_hits=0;
 284                         cs->start_packet_nr_first=G_MAXINT32;
 285                 }
 286                 cs->last_hit=TRUE;
 287
 288                 fInfo->fg->count=fInfoTemp->fg->count + 1;
 289                 if(fInfoTemp->fg->cksum!=fInfo->fg->cksum){
 290                         fInfo->fg->cksum=WRONG_CHKSUM;
 291                         fInfoTemp->fg->cksum=WRONG_CHKSUM;
 292                 }
 293                 /* Add partner */
 294                 fInfo->fg->partner=fInfoTemp;
 295                 /* Create time statistic */
 296                 if(fInfo->fg->count==MERGED_FILES){
 297                         nstime_delta(&delta, &fInfo->abs_ts, &fInfoTemp->abs_ts);
 298                         /* Set delta in both packets */
 299                         nstime_set_zero(&fInfoTemp->delta);
 300                         nstime_add(&fInfoTemp->delta, &delta);
 301                         nstime_set_zero(&fInfo->delta);
 302                         nstime_add(&fInfo->delta, &delta);
 303                         time_stat_update(&cs->stats, &delta, pinfo);
 304                 }
 305                 se_tree_insert32(cs->ip_id_tree, fInfo->id, fInfo);
 306         }
 307
 308         /* collect TTL's */
 309         if(TTL_method && (fInfo->num<TTL_SEARCH)){
 310                 for(i=0; i < cs->ip_ttl_list->len; i++){
 311                         if(g_array_index(cs->ip_ttl_list, guint8, i) == fInfo->ip_ttl){
 312                                 return FALSE;
 313                         }
 314                 }
 315                 g_array_append_val(cs->ip_ttl_list, fInfo->ip_ttl);
 316         }
 317
 318         return FALSE;
 319 }
 320
 321 /*Create new numbering in the Info column, to create a zebra effect */
 322 static gboolean
 323 call_foreach_new_order(gpointer value, gpointer arg)
 324 {
 325         compstat_t *cs=(compstat_t*)arg;
 326         frame_info *fInfo=(frame_info*)value, *fInfoTemp;
 327
 328         /* overwrite Info column for new ordering */
 329         fInfoTemp=se_tree_lookup32(cs->nr_tree, fInfo->id);
 330         if(fInfoTemp==NULL){
 331                 if(TTL_method==FALSE){
 332                         if((ADDRESSES_EQUAL(&cs->eth_dst, &fInfo->dl_dst)) || (ADDRESSES_EQUAL(&cs->eth_src, &fInfo->dl_dst))){
 333                                 se_tree_insert32(cs->nr_tree, fInfo->id, fInfo);
 334                                 fInfo->zebra_time=cs->zebra_time;
 335                                 cs->zebra_time.nsecs=cs->zebra_time.nsecs + MERGED_FILES;
 336                         } else {
 337                                 cs->zebra_time.nsecs++;
 338                                 se_tree_insert32(cs->nr_tree, fInfo->id, fInfo);
 339                                 fInfo->zebra_time=cs->zebra_time;
 340                                 cs->zebra_time.nsecs=cs->zebra_time.nsecs++;
 341                         }
 342                 } else {
 343                         if((g_array_index(cs->ip_ttl_list, guint8, 0)==fInfo->ip_ttl) || (g_array_index(cs->ip_ttl_list, guint8, 1)==fInfo->ip_ttl)){
 344                                 se_tree_insert32(cs->nr_tree, fInfo->id, fInfo);
 345                                 fInfo->zebra_time=cs->zebra_time;
 346                                 cs->zebra_time.nsecs=cs->zebra_time.nsecs + MERGED_FILES;
 347                         } else {
 348                                 cs->zebra_time.nsecs++;
 349                                 se_tree_insert32(cs->nr_tree, fInfo->id, fInfo);
 350                                 fInfo->zebra_time=cs->zebra_time;
 351                                 cs->zebra_time.nsecs=cs->zebra_time.nsecs++;
 352                         }
 353
 354                 }
 355         } else {
 356                 if(TTL_method==FALSE){
 357                         if(((ADDRESSES_EQUAL(&cs->eth_dst, &fInfo->dl_dst)) || (ADDRESSES_EQUAL(&cs->eth_src, &fInfo->dl_dst)))&&(!fmod(fInfoTemp->zebra_time.nsecs,MERGED_FILES))){
 358                                 fInfo->zebra_time.nsecs=fInfoTemp->zebra_time.nsecs;
 359                         } else {
 360                                 fInfo->zebra_time.nsecs=fInfoTemp->zebra_time.nsecs+1;
 361                         }
 362                 } else {
 363                         if(((g_array_index(cs->ip_ttl_list, guint8, 0)==fInfo->ip_ttl) || (g_array_index(cs->ip_ttl_list, guint8, 1)==fInfo->ip_ttl))&&(!fmod(fInfoTemp->zebra_time.nsecs,MERGED_FILES))){
 364                                 fInfo->zebra_time.nsecs=fInfoTemp->zebra_time.nsecs;
 365                         } else {
 366                                 fInfo->zebra_time.nsecs=fInfoTemp->zebra_time.nsecs+1;
 367                         }
 368                 }
 369         }
 370
 371         /* count packets of file */
 372         if(fmod(fInfo->zebra_time.nsecs, MERGED_FILES)){
 373                 cs->first_file_amount++;
 374         } else {
 375                 cs->second_file_amount++;
 376         }
 377
 378         /* ordering */
 379         if(!nstime_is_unset(&cs->current_time)){
 380                 fInfo->fg->predecessor_time.nsecs=cs->current_time.nsecs;
 381         }
 382
 383         cs->current_time.nsecs=fInfo->zebra_time.nsecs;
 384
 385         return FALSE;
 386 }
 387
 388 /* calculate scopes if not set yet */
 389 static gboolean
 390 call_foreach_merge_settings(gpointer value, gpointer arg)
 391 {
 392         compstat_t *cs=(compstat_t*)arg;
 393         frame_info *fInfo=(frame_info*)value, *fInfoTemp=NULL;
 394         guint32 tot_packet_amount=cs->first_file_amount+cs->second_file_amount, swap;
 395
 396         if((fInfo->num==tot_packet_amount)&&(cs->stop_packet_nr_first!=G_MAXINT32)){
 397                 /* calculate missing stop number */
 398                 swap=cs->stop_packet_nr_first;
 399                 cs->stop_packet_nr_first=tot_packet_amount-cs->second_file_amount;;
 400                 cs->stop_packet_nr_second=swap;
 401         }
 402
 403         if((fInfo->num==tot_packet_amount)&&(cs->stop_packet_nr_first==G_MAXINT32)&&(cs->start_packet_nr_first!=G_MAXINT32)){
 404                 fInfoTemp=se_tree_lookup32(cs->packet_tree, cs->start_packet_nr_first);
 405                 if(fInfoTemp==NULL){
 406                         fprintf(stderr,"ERROR: start number not set correctly\n");
 407                 }
 408                 if(fmod(fInfoTemp->zebra_time.nsecs, 2)){
 409                         /*first file*/
 410                         cs->stop_packet_nr_first=cs->start_packet_nr_first+abs(cs->second_file_amount-(cs->start_packet_nr_second-cs->first_file_amount));
 411                         if(cs->stop_packet_nr_first>(tot_packet_amount-cs->second_file_amount)){
 412                                 cs->stop_packet_nr_first=tot_packet_amount-cs->second_file_amount;
 413                         }
 414                         /*this only happens if we have too many MAC's or TTL*/
 415                         if(cs->stop_packet_nr_first>cs->start_packet_nr_second){
 416                                 cs->stop_packet_nr_first=cs->start_packet_nr_second-1;
 417                         }
 418                         fInfoTemp=se_tree_lookup32(cs->packet_tree, cs->stop_packet_nr_first);
 419                         while((fInfoTemp!=NULL)?fmod(!fInfoTemp->zebra_time.nsecs, 2):TRUE){
 420                                 cs->stop_packet_nr_first--;
 421                                 fInfoTemp=se_tree_lookup32(cs->packet_tree, cs->stop_packet_nr_first);
 422                         }
 423                 } else {
 424                         /*this only happens if we have too many MAC's or TTL*/
 425                         cs->stop_packet_nr_first=cs->first_file_amount+cs->start_packet_nr_first;
 426                         if(cs->stop_packet_nr_first>tot_packet_amount-cs->first_file_amount){
 427                                 cs->stop_packet_nr_first=tot_packet_amount-cs->first_file_amount;
 428                         }
 429                         fInfoTemp=se_tree_lookup32(cs->packet_tree, cs->stop_packet_nr_first);
 430                         while((fInfoTemp!=NULL)?fmod(fInfoTemp->zebra_time.nsecs, 2):TRUE){
 431                                 cs->stop_packet_nr_first--;
 432                                 fInfoTemp=se_tree_lookup32(cs->packet_tree, cs->stop_packet_nr_first);
 433                         }
 434                 }
 435                 /* set second stop location */
 436                 cs->stop_packet_nr_second=cs->start_packet_nr_second+abs(cs->stop_packet_nr_first-cs->start_packet_nr_first);
 437                 if(cs->stop_packet_nr_second>tot_packet_amount){
 438                         cs->stop_packet_nr_second=tot_packet_amount;
 439                 }
 440         }
 441
 442         /* no start found */
 443         if(fInfo->num==tot_packet_amount&&compare_start!=0&&compare_stop!=0){
 444                 if(cs->start_packet_nr_first==G_MAXINT32){
 445                         report_failure("Start point couldn't be set, choose a lower compare start");
 446                 }
 447         }
 448
 449         return FALSE;
 450 }
 451
 452
 453 /* build gtk-tree of lost, delayed, checksum error and wrong order Packets*/
 454 static gboolean
 455 call_foreach_print_ip_tree(gpointer value, gpointer user_data)
 456 {
 457         frame_info *fInfo=(frame_info*)value;
 458         compstat_t *cs=(compstat_t*)user_data;
 459         gdouble delta, average;
 460         gboolean show_it=FALSE;
 461
 462         delta=fabs(get_average(&fInfo->delta,1));
 463         average=fabs(get_average(&cs->stats.tot, cs->stats.num));
 464
 465         /* special case if both are set to zero ignore start and stop numbering */
 466         if(compare_start!=0&&compare_stop!=0){
 467                 /* check out if packet is in searched scope */
 468                 if((cs->start_packet_nr_first<fInfo->num)&&(cs->stop_packet_nr_first>fInfo->num)){
 469                         show_it=TRUE;
 470                 } else {
 471                         /* so we won't miss the other file */
 472                         if((fInfo->num>cs->start_packet_nr_second)&&(fInfo->num<cs->stop_packet_nr_second)){
 473                                 show_it=TRUE;
 474                         }
 475                 }
 476         } else {
 477                 show_it=TRUE;
 478         }
 479
 480         /* Create the gtk tree */
 481         if(show_it){
 482                 if((fInfo->fg->count<MERGED_FILES)){
 483                         gtk_tree_store_append(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, NULL);
 484                         gtk_tree_store_set(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, IP_ID, fInfo->id, PROBLEM, "Packet lost", COUNT, fInfo->fg->count, DELTA, 0.0, -1);
 485                 }
 486
 487                 if(fInfo->fg->count > MERGED_FILES){
 488                         gtk_tree_store_append(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, NULL);
 489                         gtk_tree_store_set(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, IP_ID, fInfo->id, PROBLEM, "More than two packets", COUNT, fInfo->fg->count, DELTA, 0.0, -1);
 490                         if(fInfo->fg->cksum == WRONG_CHKSUM) {
 491                                 gtk_tree_store_append(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->child, &cs->iter);
 492                                 gtk_tree_store_set(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->child, IP_ID, fInfo->id, PROBLEM, "Checksum error over IP header", COUNT, fInfo->fg->count, DELTA, 0.0, -1);
 493                         }
 494                 }
 495                 if(fInfo->fg->count == MERGED_FILES){
 496                         if(fInfo->fg->cksum == WRONG_CHKSUM) {
 497                                 gtk_tree_store_append(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, NULL);
 498                                 gtk_tree_store_set(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, IP_ID, fInfo->id, PROBLEM, "Checksum error over IP header", COUNT, fInfo->fg->count, DELTA, delta, -1);
 499                                 if(((delta < (average-cs->stats.variance)) || (delta > (average+cs->stats.variance))) && (delta > 0.0) && (cs->stats.variance!=0)){
 500                                         gtk_tree_store_append(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->child, &cs->iter);
 501                                         gtk_tree_store_set(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->child, IP_ID, fInfo->id, PROBLEM, "Not arrived in time", COUNT, fInfo->fg->count, DELTA, delta, -1);
 502                                 }
 503                                 if((nstime_cmp(&fInfo->fg->predecessor_time, &fInfo->zebra_time)>0||nstime_cmp(&fInfo->fg->partner->fg->predecessor_time, &fInfo->fg->partner->zebra_time)>0) && (fInfo->zebra_time.nsecs!=MERGED_FILES) && ON_method){
 504                                         gtk_tree_store_append(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->child, &cs->iter);
 505                                         gtk_tree_store_set(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->child, IP_ID, fInfo->id, PROBLEM, "Not correct order", COUNT, fInfo->fg->count, DELTA, delta, -1);
 506                                 }
 507                         } else if(((delta < (average-cs->stats.variance)) || (delta > (average+cs->stats.variance))) && (delta > 0.0) && (cs->stats.variance!=0)) {
 508                                 gtk_tree_store_append(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, NULL);
 509                                 gtk_tree_store_set(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, IP_ID, fInfo->id, PROBLEM, "Not arrived in time", COUNT, fInfo->fg->count, DELTA, delta, -1);
 510                                 if((nstime_cmp(&fInfo->fg->predecessor_time, &fInfo->zebra_time)>0||nstime_cmp(&fInfo->fg->partner->fg->predecessor_time, &fInfo->fg->partner->zebra_time)>0) && fInfo->zebra_time.nsecs != MERGED_FILES && ON_method){
 511                                         gtk_tree_store_append(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->child, &cs->iter);
 512                                         gtk_tree_store_set(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->child, IP_ID, fInfo->id, PROBLEM, "Not correct order", COUNT, fInfo->fg->count, DELTA, delta, -1);
 513                                 }
 514                         } else if((nstime_cmp(&fInfo->fg->predecessor_time, &fInfo->zebra_time)>0||nstime_cmp(&fInfo->fg->partner->fg->predecessor_time, &fInfo->fg->partner->zebra_time)>0) && fInfo->zebra_time.nsecs != MERGED_FILES && ON_method){
 515                                 gtk_tree_store_append(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, NULL);
 516                                 gtk_tree_store_set(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, IP_ID, fInfo->id, PROBLEM, "Not correct order", COUNT, fInfo->fg->count, DELTA, delta, -1);
 517                         }
 518                 }
 519         }
 520         return FALSE;
 521 }
 522
 523 /* since the gtk2 implementation of tap is multithreaded we must protect
 524  * remove_tap_listener() from modifying the list while draw_tap_listener()
 525  * is running.  the other protected block is in main.c
 526  *
 527  * there should not be any other critical regions in gtk2
 528  */
 529 static void
 530 win_destroy_cb(GtkWindow *win _U_, gpointer data)
 531 {
 532         compstat_t *cs=(compstat_t *)data;
 533
 534         protect_thread_critical_region();
 535         remove_tap_listener(cs);
 536         unprotect_thread_critical_region();
 537
 538         first_window=TRUE;
 539         gtk_tree_store_clear(cs->simple_list);
 540         g_free(cs);
 541 }
 542
 543 /* this may be called any time, perhaps once every 3 seconds or so.
 544  */
 545 static void
 546 comparestat_draw(void *arg)
 547 {
 548         compstat_t *cs = arg;
 549         GString *filter_str = g_string_new("");
 550         const gchar *statis_string;
 551         frame_info *fInfo;
 552         guint32 first_file_amount, second_file_amount;
 553
 554         /* inital steps, clear all data before start*/
 555         cs->zebra_time.secs=0;
 556         cs->zebra_time.nsecs=1;
 557         nstime_set_unset(&cs->current_time);
 558         cs->ip_ttl_list=g_array_new(FALSE, FALSE, sizeof(guint8));
 559         cs->last_hit=FALSE;
 560         cs->start_ongoing_hits=0;
 561         cs->stop_ongoing_hits=0;
 562         cs->start_packet_nr_first=G_MAXINT32;
 563         cs->start_packet_nr_second=G_MAXINT32;
 564         cs->stop_packet_nr_first=G_MAXINT32;
 565         cs->stop_packet_nr_second=G_MAXINT32;
 566         cs->first_file_amount=0;
 567         cs->second_file_amount=0;
 568
 569         time_stat_init(&cs->stats);
 570
 571         /* no need to do anything no file is open*/
 572         if(cf_get_packet_count(&cfile)==0){
 573                 /* add statistic string */
 574                 statis_string=g_strdup_printf("No file open");
 575                 gtk_label_set_text((GtkLabel *) cs->statis_label, statis_string);
 576                 return;
 577         }
 578
 579         /* not using g_free, because struct is managed by se binarytrees */
 580         cs->ip_id_tree=se_tree_create(EMEM_TREE_TYPE_RED_BLACK, "ip_id_tree");
 581         emem_tree_foreach(cs->packet_tree, call_foreach_count_ip_id, cs);
 582
 583         /* set up TTL choice if only one number found */
 584         if(TTL_method&&cs->ip_ttl_list->len==1){
 585                 g_array_append_val(cs->ip_ttl_list, g_array_index(cs->ip_ttl_list, guint8, 1));
 586         }
 587
 588         emem_tree_foreach(cs->packet_tree, call_foreach_new_order,cs);
 589         emem_tree_foreach(cs->packet_tree, call_foreach_merge_settings, cs);
 590
 591         /* remembering file amounts */
 592         first_file_amount=cs->first_file_amount;
 593         second_file_amount=cs->second_file_amount;
 594         /* reset after numbering */
 595         cs->nr_tree=se_tree_create(EMEM_TREE_TYPE_RED_BLACK, "nr_tree");
 596         /* microsecond precision for Info column*/
 597         timestamp_set_precision(TS_PREC_AUTO_NSEC);
 598         /* reset ordering */
 599         nstime_set_unset(&cs->current_time);
 600
 601         /* set color filter, in Routing environment */
 602         if(TTL_method&&cs->ip_ttl_list->len!=0){
 603                 g_string_printf(filter_str, "%s %i %s %i", "ip.ttl ==", g_array_index(cs->ip_ttl_list, guint8, 0), "|| ip.ttl ==", g_array_index(cs->ip_ttl_list, guint8, 1));
 604         } else if(cs->eth_dst.len!=0&&cs->eth_src.len!=0){
 605                 g_string_printf(filter_str, "%s %s %s %s", "eth.dst==", address_to_str(&cs->eth_dst), "|| eth.dst==", address_to_str(&cs->eth_src));
 606         }
 607         color_filters_set_tmp(COLOR_N, filter_str->str, FALSE);
 608         cf_colorize_packets(&cfile);
 609
 610         /* Variance */
 611         cs->stats.variance=compare_variance;
 612
 613         /* add statistic string */
 614         statis_string=g_strdup_printf("Compare Statistics: \nNumber of packets total:%i 1st file:%i, 2nd file:%i\nScopes:\t start:%i stop:%i\nand:\t start:%i stop:%i\nEqual packets: %i \nAllowed variation: %f \nAverage time difference: %f", cf_get_packet_count(&cfile), first_file_amount, second_file_amount, cs->start_packet_nr_first, cs->stop_packet_nr_first, cs->start_packet_nr_second, cs->stop_packet_nr_second, cs->stats.num, cs->stats.variance, fabs(get_average(&cs->stats.tot, cs->stats.num)));
 615         gtk_label_set_text((GtkLabel *) cs->statis_label, statis_string);
 616
 617         /* add start and stop of scanning */
 618         if(cs->start_packet_nr_first!=G_MAXINT32&&compare_start!=0&&compare_stop!=0){
 619                 fInfo=se_tree_lookup32(cs->packet_tree, cs->start_packet_nr_first);
 620                 if(fInfo){
 621                         gtk_tree_store_append(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, NULL);
 622                         gtk_tree_store_set(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, IP_ID, fInfo->id, PROBLEM, "Start scanning", COUNT, 0, DELTA, 0.0, -1);
 623                 }
 624         }
 625         if(cs->stop_packet_nr_first!=G_MAXINT32&&compare_start!=0&&compare_stop!=0){
 626                 fInfo=se_tree_lookup32(cs->packet_tree, cs->stop_packet_nr_first);
 627                 if(fInfo){
 628                         gtk_tree_store_append(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, NULL);
 629                         gtk_tree_store_set(GTK_TREE_STORE(gtk_tree_view_get_model(GTK_TREE_VIEW(cs->treeview))), &cs->iter, IP_ID, fInfo->id, PROBLEM, "Stop scanning", COUNT, 0, DELTA, 0.0, -1);
 630                 }
 631         }
 632
 633         emem_tree_foreach(cs->ip_id_tree, call_foreach_print_ip_tree, cs);
 634         g_string_free(filter_str, TRUE);
 635         g_array_free(cs->ip_ttl_list, TRUE);
 636 }
 637
 638 /* called when a tree row is (un)selected in the popup window */
 639 static void
 640 new_tree_view_selection_changed(GtkTreeSelection *sel, gpointer user_data)
 641 {
 642         gchar *problem;
 643         GtkTreeModel *model;
 644         GtkTreeIter iter;
 645         frame_info *fInfo;
 646         /* Because it could be zero */
 647         gint id=-1;
 648
 649         compstat_t *cs=(compstat_t*)user_data;
 650
 651         /* if something is selected */
 652         if(gtk_tree_selection_get_selected(sel, &model, &iter)){
 653                 gtk_tree_model_get(model, &iter, 0, &id, 1, &problem, -1);
 654                 if (id<0) return;
 655                 /* The id is not enough to find the start or the end packet */
 656                 if(strcmp("Start scanning",problem)==0){
 657                         cf_goto_frame(&cfile, cs->start_packet_nr_first);
 658                         return;
 659                 }
 660                 if(strcmp("Stop scanning",problem)==0){
 661                         cf_goto_frame(&cfile, cs->stop_packet_nr_first);
 662                         return;
 663                 }
 664                 fInfo=se_tree_lookup32(cs->ip_id_tree, id);
 665                 if(fInfo != NULL){
 666                         cf_goto_frame(&cfile, fInfo->num);
 667                 }
 668         }
 669
 670 }
 671
 672 /* add three columns to the GtkTreeView. All three of the columns will be
 673  * displayed as text*/
 674 static void
 675 setup_tree_view(GtkWidget *treeview)
 676 {
 677         GtkCellRenderer *renderer;
 678         GtkTreeViewColumn *column;
 679         /* Create a new GtkCellRendererText, add it to the tree view column and
 680          * append the column to the tree view. */
 681         renderer=gtk_cell_renderer_text_new ();
 682         column=gtk_tree_view_column_new_with_attributes("IP Id", renderer, "text", IP_ID, NULL);
 683         gtk_tree_view_append_column(GTK_TREE_VIEW (treeview), column);
 684         renderer=gtk_cell_renderer_text_new ();
 685         column=gtk_tree_view_column_new_with_attributes("Problem", renderer, "text", PROBLEM, NULL);
 686         gtk_tree_view_append_column(GTK_TREE_VIEW (treeview), column);
 687         renderer=gtk_cell_renderer_text_new ();
 688         column=gtk_tree_view_column_new_with_attributes("Count", renderer, "text", COUNT, NULL);
 689         gtk_tree_view_append_column(GTK_TREE_VIEW (treeview), column);
 690         renderer=gtk_cell_renderer_text_new ();
 691         column=gtk_tree_view_column_new_with_attributes("Delta", renderer, "text", DELTA, NULL);
 692         gtk_tree_view_append_column(GTK_TREE_VIEW (treeview), column);
 693 }
 694
 695 /* when called, this function will create a new instance of gtk2-comparestat.
 696  */
 697 static void
 698 gtk_comparestat_init(const char *optarg, void* userdata _U_)
 699 {
 700         compstat_t *cs;
 701         char *title_string;
 702         char *filter_string;
 703         GtkWidget *stat_label;
 704         GtkWidget *filter_label;
 705         GtkWidget *bbox;
 706         GtkWidget *close_bt;
 707         GtkWidget *help_bt;
 708         GtkWidget *vbox;
 709         gdouble variance;
 710         gint start, stop,ttl, order, pos=0;
 711         const char *filter=NULL;
 712         GString *error_string;
 713
 714         if(sscanf(optarg,"compare,%d,%d,%d,%d,%lf,%n",&start, &stop, &ttl, &order, &variance, &pos)==5){
 715                 if(pos){
 716                         filter=optarg+pos;
 717                 } else {
 718                         filter=NULL;
 719                 }
 720         } else {
 721                 fprintf(stderr, "wireshark: invalid \"-z compare,<start>,<stop>,<ttl[0|1]>,<order[0|1]>,<variance>[,<filter>]\" argument\n");
 722                 exit(1);
 723         }
 724
 725         compare_variance=variance;
 726         compare_start=start;
 727         compare_stop=stop;
 728         TTL_method=ttl;
 729         ON_method=order;
 730
 731         cs=g_malloc(sizeof(compstat_t));
 732         nstime_set_unset(&cs->current_time);
 733         cs->ip_ttl_list=g_array_new(FALSE, FALSE, sizeof(guint8));
 734         cs->last_hit=FALSE;
 735         cs->start_ongoing_hits=0;
 736         cs->stop_ongoing_hits=0;
 737         cs->start_packet_nr_first=G_MAXINT32;
 738         cs->start_packet_nr_second=G_MAXINT32;
 739         cs->stop_packet_nr_first=G_MAXINT32;
 740         cs->stop_packet_nr_second=G_MAXINT32;
 741         cs->first_file_amount=0;
 742         cs->second_file_amount=0;
 743
 744         cs->zebra_time.secs=0;
 745         cs->zebra_time.nsecs=1;
 746         cs->nr_tree=se_tree_create(EMEM_TREE_TYPE_RED_BLACK, "nr_tree");
 747         /* microsecond precision */
 748         timestamp_set_precision(TS_PREC_AUTO_NSEC);
 749
 750         cs->win=window_new(GTK_WINDOW_TOPLEVEL, "compare-stat");
 751         gtk_window_set_default_size(GTK_WINDOW(cs->win), 550, 400);
 752         comparestat_set_title(cs);
 753
 754         vbox=gtk_vbox_new(FALSE, 3);
 755         gtk_container_add(GTK_CONTAINER(cs->win), vbox);
 756         gtk_container_set_border_width(GTK_CONTAINER(vbox), 12);
 757
 758         title_string = g_strdup_printf("Compare two capture files: %s", cf_get_display_name(&cfile));
 759         stat_label=gtk_label_new(title_string);
 760         g_free(title_string);
 761         gtk_box_pack_start(GTK_BOX(vbox), stat_label, FALSE, FALSE, 0);
 762
 763         filter_string = g_strdup_printf("Filter: %s", filter ? filter : "");
 764         filter_label=gtk_label_new(filter_string);
 765         g_free(filter_string);
 766         gtk_label_set_line_wrap(GTK_LABEL(filter_label), TRUE);
 767         gtk_box_pack_start(GTK_BOX(vbox), filter_label, FALSE, FALSE, 0);
 768
 769         /* add statistik info to Window */
 770         cs->statis_label=gtk_label_new("Statistics:");
 771         gtk_label_set_line_wrap(GTK_LABEL(cs->statis_label), TRUE);
 772         gtk_box_pack_start(GTK_BOX(vbox), cs->statis_label, FALSE, FALSE, 0);
 773
 774         /* we must display TOP LEVEL Widget before calling simple_list_new */
 775         gtk_widget_show_all(cs->win);
 776
 777         cs->treeview=gtk_tree_view_new();
 778         setup_tree_view(cs->treeview);
 779
 780         /* create a newtree model with four columns */
 781         cs->simple_list=gtk_tree_store_new(COLUMNS, G_TYPE_INT, G_TYPE_STRING, G_TYPE_INT, G_TYPE_DOUBLE);
 782
 783         /* add the tree model to the tree view and unreference it so that the model will
 784         * be destroyed along with the tree view. */
 785         gtk_tree_view_set_model(GTK_TREE_VIEW (cs->treeview), GTK_TREE_MODEL (cs->simple_list));
 786         g_object_unref(cs->simple_list);
 787
 788         /* call this method when row is chosen*/
 789         gtk_tree_selection_set_mode(gtk_tree_view_get_selection(GTK_TREE_VIEW(cs->treeview)),GTK_SELECTION_SINGLE);
 790         g_signal_connect(gtk_tree_view_get_selection(GTK_TREE_VIEW(cs->treeview)), "changed", G_CALLBACK(new_tree_view_selection_changed), cs);
 791
 792         /* list with scrollbar's */
 793         cs->scrolled_win=gtk_scrolled_window_new(NULL, NULL);
 794         gtk_scrolled_window_set_policy (GTK_SCROLLED_WINDOW(cs->scrolled_win), GTK_POLICY_AUTOMATIC, GTK_POLICY_AUTOMATIC);
 795         gtk_container_add(GTK_CONTAINER(cs->scrolled_win), cs->treeview);
 796         gtk_box_pack_start(GTK_BOX(vbox), cs->scrolled_win, TRUE, TRUE, 0);
 797
 798         /* create a Hash to count the packets with the same ip.id */
 799         cs->packet_tree=se_tree_create(EMEM_TREE_TYPE_RED_BLACK, "Packet_info_tree");
 800
 801         error_string=register_tap_listener("ip", cs, filter, 0, comparestat_reset, comparestat_packet, comparestat_draw);
 802         if(error_string){
 803                 simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, "%s", error_string->str);
 804                 g_string_free(error_string, TRUE);
 805                 gtk_tree_store_clear(cs->simple_list);
 806                 g_free(cs);
 807                 return;
 808         }
 809
 810         /* button row. */
 811         bbox = dlg_button_row_new(GTK_STOCK_CLOSE, GTK_STOCK_HELP, NULL);
 812         gtk_box_pack_end(GTK_BOX(vbox), bbox, FALSE, FALSE, 0);
 813
 814         close_bt = g_object_get_data(G_OBJECT(bbox), GTK_STOCK_CLOSE);
 815         window_set_cancel_button(cs->win, close_bt, window_cancel_button_cb);
 816
 817         help_bt = g_object_get_data(G_OBJECT(bbox), GTK_STOCK_HELP);
 818         g_signal_connect(help_bt, "clicked", G_CALLBACK(topic_cb), (gpointer)HELP_STATS_COMPARE_FILES_DIALOG);
 819
 820         g_signal_connect(cs->win, "delete_event", G_CALLBACK(window_delete_event_cb), NULL);
 821         g_signal_connect(cs->win, "destroy", G_CALLBACK(win_destroy_cb), cs);
 822
 823         gtk_widget_show_all(cs->win);
 824         window_present(cs->win);
 825
 826         cf_retap_packets(&cfile);
 827 }
 828
 829 static GtkWidget *dlg=NULL;
 830 static GtkWidget *filter_entry;
 831
 832 static void
 833 comparestat_start_button_clicked(GtkWidget *item _U_, gpointer data _U_)
 834 {
 835         GString *str;
 836         const char *filter;
 837
 838         compare_start=gtk_spin_button_get_value_as_int(GTK_SPIN_BUTTON(spin_start_int));
 839         compare_stop=gtk_spin_button_get_value_as_int(GTK_SPIN_BUTTON(spin_stop_int));
 840         compare_variance=gtk_spin_button_get_value(GTK_SPIN_BUTTON(spin_var_int));
 841         if(gtk_toggle_button_get_active(GTK_TOGGLE_BUTTON(radio_TTL))){
 842                 TTL_method=TRUE;
 843         } else {
 844                 TTL_method=FALSE;
 845         }
 846         if(gtk_toggle_button_get_active(GTK_TOGGLE_BUTTON(radio_ON))){
 847                 ON_method=TRUE;
 848         } else {
 849                 ON_method=FALSE;
 850         }
 851
 852         str = g_string_new("compare");
 853         g_string_append_printf(str, ",%d,%d,%d,%d,%lf",compare_start, compare_stop, TTL_method, ON_method, compare_variance);
 854         filter=gtk_entry_get_text(GTK_ENTRY(filter_entry));
 855         if(filter[0]!=0){
 856                 g_string_append_printf(str, ",%s", filter);
 857         }
 858
 859         if(first_window){
 860                 first_window = FALSE;
 861                 gtk_comparestat_init(str->str,NULL);
 862         } else {
 863                 report_failure("cannot open more than one compare of the same type at once");
 864         }
 865
 866         g_string_free(str, TRUE);
 867 }
 868
 869 static void
 870 dlg_destroy_cb(void)
 871 {
 872         dlg=NULL;
 873 }
 874
 875 /* create and show first view of this module
 876  */
 877 static void
 878 gtk_comparestat_cb(GtkWidget *w _U_, gpointer d _U_)
 879 {
 880         GtkAdjustment *start_integer, *stop_integer, *var_integer;
 881         GtkWidget *dlg_box;
 882         GtkWidget *spin_start_label, *spin_stop_label, *spin_start_box, *spin_stop_box;
 883         GtkWidget *spin_var_box, *spin_var_label;
 884         GtkWidget *order_box, *radio_MAC, *order_label;
 885         GtkWidget *differ_box, *radio_OFF, *differ_label;
 886         GtkWidget *filter_box, *filter_bt;
 887         GtkWidget *bbox, *start_button, *cancel_button;
 888         const char *filter;
 889         static construct_args_t args = {
 890           "Compare statistics",
 891           TRUE,
 892           FALSE,
 893           FALSE
 894         };
 895
 896         /* if the window is already open, bring it to front */
 897         if(dlg){
 898                 gdk_window_raise(dlg->window);
 899                 return;
 900         }
 901
 902         dlg=dlg_window_new("Wireshark: Compare two capture files");
 903         gtk_window_set_default_size(GTK_WINDOW(dlg), 300, -1);
 904
 905         dlg_box=gtk_vbox_new(FALSE, 10);
 906         gtk_container_set_border_width(GTK_CONTAINER(dlg_box), 10);
 907         gtk_container_add(GTK_CONTAINER(dlg), dlg_box);
 908         gtk_widget_show(dlg_box);
 909
 910         /* spin Box */
 911         spin_start_box=gtk_hbox_new(FALSE, 10);
 912         spin_stop_box=gtk_hbox_new(FALSE, 10);
 913
 914         /* spin label */
 915         gtk_container_set_border_width(GTK_CONTAINER(spin_start_box), 1);
 916         spin_start_label=gtk_label_new("Start compare:");
 917         gtk_box_pack_start(GTK_BOX(spin_start_box), spin_start_label, FALSE, FALSE, 0);
 918         gtk_widget_show(spin_start_label);
 919         gtk_container_set_border_width(GTK_CONTAINER(spin_stop_box), 1);
 920         spin_stop_label=gtk_label_new("Stop compare: ");
 921         gtk_box_pack_start(GTK_BOX(spin_stop_box), spin_stop_label, FALSE, FALSE, 0);
 922         gtk_widget_show(spin_stop_label);
 923
 924         /* create adjustments. Spans between 0 and 100, starting at 0 and
 925          * moves in increments of 1 */
 926         start_integer=GTK_ADJUSTMENT(gtk_adjustment_new(0.0, 0.0, 100.0, 1.0, 5.0, 5.0));
 927         stop_integer=GTK_ADJUSTMENT(gtk_adjustment_new(0.0, 0.0, 100.0, 1.0, 5.0, 5.0));
 928
 929         /* create spin button. Not displaying decimal */
 930         spin_start_int=gtk_spin_button_new(start_integer, 1.0, 0);
 931         spin_stop_int=gtk_spin_button_new(stop_integer, 1.0, 0);
 932
 933         /* pack it up */
 934         gtk_box_pack_start(GTK_BOX(spin_start_box), spin_start_int, TRUE, TRUE, 0);
 935         gtk_box_pack_start(GTK_BOX(spin_stop_box), spin_stop_int,  TRUE, TRUE, 0);
 936
 937         gtk_box_pack_start(GTK_BOX(dlg_box), spin_start_box, FALSE, FALSE, 0);
 938         gtk_widget_show(spin_start_box);
 939         gtk_box_pack_start(GTK_BOX(dlg_box), spin_stop_box, FALSE, FALSE, 0);
 940         gtk_widget_show(spin_stop_box);
 941
 942         /* differ Box */
 943         differ_box=gtk_hbox_new(FALSE, 10);
 944
 945         /* radio label */
 946         gtk_container_set_border_width(GTK_CONTAINER(differ_box), 1);
 947         differ_label=gtk_label_new("File distinction:");
 948         gtk_box_pack_start(GTK_BOX(differ_box), differ_label, FALSE, FALSE, 0);
 949         gtk_widget_show(differ_label);
 950
 951         /* create radio buttons */
 952         radio_MAC=gtk_radio_button_new_with_label (NULL, "MAC");
 953         radio_TTL=gtk_radio_button_new_with_label_from_widget (GTK_RADIO_BUTTON(radio_MAC), "TTL");
 954         gtk_box_pack_start(GTK_BOX(differ_box), radio_MAC, TRUE, TRUE, 0);
 955         gtk_box_pack_start(GTK_BOX(differ_box), radio_TTL, TRUE, TRUE, 0);
 956         gtk_widget_show(radio_MAC);
 957         gtk_widget_show(radio_TTL);
 958
 959         gtk_box_pack_start(GTK_BOX(dlg_box), differ_box, FALSE, FALSE, 0);
 960         gtk_widget_show(differ_box);
 961
 962         /* order Box */
 963         order_box=gtk_hbox_new(FALSE, 10);
 964
 965         /* order label */
 966         gtk_container_set_border_width(GTK_CONTAINER(order_box), 1);
 967         order_label=gtk_label_new("Check order:    ");
 968         gtk_box_pack_start(GTK_BOX(order_box), order_label, FALSE, FALSE, 0);
 969         gtk_widget_show(order_label);
 970
 971         /* create radio buttons */
 972         radio_ON=gtk_radio_button_new_with_label (NULL, "ON");
 973         radio_OFF=gtk_radio_button_new_with_label_from_widget (GTK_RADIO_BUTTON(radio_ON), "OFF");
 974         gtk_box_pack_start(GTK_BOX(order_box), radio_ON, TRUE, TRUE, 0);
 975         gtk_box_pack_start(GTK_BOX(order_box), radio_OFF, TRUE, TRUE, 0);
 976         gtk_widget_show(radio_ON);
 977         gtk_widget_show(radio_OFF);
 978
 979         gtk_box_pack_start(GTK_BOX(dlg_box), order_box, FALSE, FALSE, 0);
 980         gtk_widget_show(order_box);
 981
 982         /* spin box */
 983         spin_var_box=gtk_hbox_new(FALSE, 10);
 984
 985         /* spin label */
 986         gtk_container_set_border_width(GTK_CONTAINER(spin_var_box), 1);
 987         spin_var_label=gtk_label_new("Time variance (sec +/-):");
 988         gtk_box_pack_start(GTK_BOX(spin_var_box), spin_var_label, FALSE, FALSE, 0);
 989         gtk_widget_show(spin_var_label);
 990
 991         /* create adjustments. Spans between 0 and 100, starting at 0 and
 992          * moves in increments of 1 */
 993         var_integer=GTK_ADJUSTMENT(gtk_adjustment_new(0.0, 0.0, 100.0, 1.0, 5.0, 5.0));
 994
 995         /* create spin button. Not displaying decimal */
 996         spin_var_int=gtk_spin_button_new(var_integer, 0.0, 2);
 997
 998         /* pack it up */
 999         gtk_box_pack_start(GTK_BOX(spin_var_box), spin_var_int, TRUE, TRUE, 0);
1000         gtk_widget_show(spin_var_int);
1001
1002         gtk_box_pack_start(GTK_BOX(dlg_box), spin_var_box, FALSE, FALSE, 0);
1003         gtk_widget_show(spin_var_box);
1004
1005         /* filter box */
1006         filter_box=gtk_hbox_new(FALSE, 3);
1007
1008         /* filter label */
1009         filter_bt=gtk_button_new_from_stock(WIRESHARK_STOCK_DISPLAY_FILTER_ENTRY);
1010         g_signal_connect(filter_bt, "clicked", G_CALLBACK(display_filter_construct_cb), &args);
1011         gtk_box_pack_start(GTK_BOX(filter_box), filter_bt, FALSE, TRUE, 0);
1012         gtk_widget_show(filter_bt);
1013
1014         /* filter entry */
1015         filter_entry=gtk_entry_new();
1016         g_signal_connect(filter_entry, "changed",  G_CALLBACK(filter_te_syntax_check_cb), NULL);
1017         g_object_set_data(G_OBJECT(filter_box), E_FILT_AUTOCOMP_PTR_KEY, NULL);
1018         g_signal_connect(filter_entry, "key-press-event", G_CALLBACK (filter_string_te_key_pressed_cb), NULL);
1019         g_signal_connect(dlg, "key-press-event", G_CALLBACK (filter_parent_dlg_key_pressed_cb), NULL);
1020
1021         /* filter prefs dialog */
1022         g_object_set_data(G_OBJECT(filter_bt), E_FILT_TE_PTR_KEY, filter_entry);
1023         /* filter prefs dialog */
1024
1025         gtk_box_pack_start(GTK_BOX(filter_box), filter_entry, TRUE, TRUE, 0);
1026         filter=gtk_entry_get_text(GTK_ENTRY(main_display_filter_widget));
1027         if(filter){
1028                 gtk_entry_set_text(GTK_ENTRY(filter_entry), filter);
1029         }
1030         gtk_widget_show(filter_entry);
1031
1032         gtk_box_pack_start(GTK_BOX(dlg_box), filter_box, TRUE, TRUE, 0);
1033         gtk_widget_show(filter_box);
1034
1035         /* button box */
1036         bbox = dlg_button_row_new(WIRESHARK_STOCK_CREATE_STAT, GTK_STOCK_CANCEL, NULL);
1037         gtk_box_pack_start(GTK_BOX(dlg_box), bbox, FALSE, FALSE, 0);
1038         gtk_widget_show(bbox);
1039
1040         start_button = g_object_get_data(G_OBJECT(bbox), WIRESHARK_STOCK_CREATE_STAT);
1041         g_signal_connect_swapped(start_button, "clicked", G_CALLBACK(comparestat_start_button_clicked), NULL);
1042
1043         cancel_button = g_object_get_data(G_OBJECT(bbox), GTK_STOCK_CANCEL);
1044         window_set_cancel_button(dlg, cancel_button, window_cancel_button_cb);
1045
1046         /* give the initial focus to the "filter" entry box. */
1047         gtk_widget_grab_focus(filter_entry);
1048
1049         gtk_widget_grab_default(start_button );
1050
1051         g_signal_connect(dlg, "delete_event", G_CALLBACK(window_delete_event_cb), NULL);
1052         g_signal_connect(dlg, "destroy", G_CALLBACK(dlg_destroy_cb), NULL);
1053
1054         gtk_widget_show_all(dlg);
1055         window_present(dlg);
1056 }
1057
1058
1059 void
1060 register_tap_listener_gtkcomparestat(void)
1061 {
1062         register_stat_cmd_arg("compare", gtk_comparestat_init, NULL);
1063
1064         register_stat_menu_item("Compare...", REGISTER_STAT_GROUP_UNSORTED, gtk_comparestat_cb, NULL, NULL, NULL);
1065 }