2 * SCTP chunk counter for Wireshark
3 * Copyright 2005 Oleg Terletsky <oleg.terletsky [AT] comverse.com>
4 * Copyright 2009 Varun Notibala <nbvarun [AT] gmail.com>
8 * Wireshark - Network traffic analyzer
9 * By Gerald Combs <gerald@wireshark.org>
10 * Copyright 1998 Gerald Combs
12 * This program is free software; you can redistribute it and/or
13 * modify it under the terms of the GNU General Public License
14 * as published by the Free Software Foundation; either version 2
15 * of the License, or (at your option) any later version.
17 * This program is distributed in the hope that it will be useful,
18 * but WITHOUT ANY WARRANTY; without even the implied warranty of
19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 * GNU General Public License for more details.
22 * You should have received a copy of the GNU General Public License
23 * along with this program; if not, write to the Free Software
24 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
32 #ifdef HAVE_SYS_TYPES_H
33 # include <sys/types.h>
39 #include <epan/packet_info.h>
40 #include <epan/epan.h>
41 #include <epan/value_string.h>
43 #include <epan/dissectors/packet-sctp.h>
45 #include "../register.h"
46 #include "../simple_dialog.h"
48 #include "../globals.h"
49 #include "../stat_menu.h"
51 #include "gtk/gui_stat_util.h"
52 #include "gtk/dlg_utils.h"
53 #include "gtk/tap_dfilter_dlg.h"
54 #include "gtk/gui_utils.h"
58 static void sctpstat_init(const char *optarg, void *userdata);
60 static tap_dfilter_dlg sctp_stat_dlg = {
67 typedef struct sctp_ep {
73 guint32 chunk_count[256];
76 /* used to keep track of the statistics for an entire program interface */
77 typedef struct _sctp_stat_t {
81 GtkWidget *scrolled_window;
83 guint32 number_of_packets;
87 typedef struct _sctp_info sctp_into_t;
89 #define SCTP_DATA_CHUNK_ID 0
90 #define SCTP_INIT_CHUNK_ID 1
91 #define SCTP_INIT_ACK_CHUNK_ID 2
92 #define SCTP_SACK_CHUNK_ID 3
93 #define SCTP_HEARTBEAT_CHUNK_ID 4
94 #define SCTP_HEARTBEAT_ACK_CHUNK_ID 5
95 #define SCTP_ABORT_CHUNK_ID 6
96 #define SCTP_SHUTDOWN_CHUNK_ID 7
97 #define SCTP_SHUTDOWN_ACK_CHUNK_ID 8
98 #define SCTP_ERROR_CHUNK_ID 9
99 #define SCTP_COOKIE_ECHO_CHUNK_ID 10
100 #define SCTP_COOKIE_ACK_CHUNK_ID 11
101 #define SCTP_ECNE_CHUNK_ID 12
102 #define SCTP_CWR_CHUNK_ID 13
103 #define SCTP_SHUTDOWN_COMPLETE_CHUNK_ID 14
104 #define SCTP_AUTH_CHUNK_ID 15
105 #define SCTP_NR_SACK_CHUNK_ID 16
106 #define SCTP_ASCONF_ACK_CHUNK_ID 0x80
107 #define SCTP_PKTDROP_CHUNK_ID 0x81
108 #define SCTP_FORWARD_TSN_CHUNK_ID 0xC0
109 #define SCTP_ASCONF_CHUNK_ID 0xC1
110 #define SCTP_IETF_EXT 0xFF
112 #define CHUNK_TYPE_OFFSET 0
113 #define CHUNK_TYPE(x)(tvb_get_guint8((x), CHUNK_TYPE_OFFSET))
116 sctpstat_reset(void *phs)
118 sctpstat_t* sctp_stat = (sctpstat_t *)phs;
119 sctp_ep_t* list = (sctp_ep_t*)sctp_stat->ep_list;
120 sctp_ep_t* tmp = NULL;
126 for(tmp = list; tmp ; tmp=tmp->next)
127 for(chunk_type = 0; chunk_type < 256; chunk_type++)
128 tmp->chunk_count[chunk_type] = 0;
130 sctp_stat->number_of_packets = 0;
133 static sctp_ep_t* alloc_sctp_ep(struct _sctp_info *si)
141 if (!(ep = g_malloc(sizeof(sctp_ep_t))))
144 COPY_ADDRESS(&ep->src,&si->ip_src);
145 COPY_ADDRESS(&ep->dst,&si->ip_dst);
146 ep->sport = si->sport;
147 ep->dport = si->dport;
149 for(chunk_type = 0; chunk_type < 256; chunk_type++)
150 ep->chunk_count[chunk_type] = 0;
155 sctpstat_packet(void *phs, packet_info *pinfo _U_, epan_dissect_t *edt _U_, const void *phi)
158 sctpstat_t *hs=(sctpstat_t *)phs;
159 sctp_ep_t *tmp = NULL, *te = NULL;
160 struct _sctp_info *si = (struct _sctp_info *) phi;
167 hs->number_of_packets++;
169 hs->ep_list = alloc_sctp_ep(si);
172 for(tmp=hs->ep_list ; tmp ; tmp=tmp->next) {
173 if((!CMP_ADDRESS(&tmp->src,&si->ip_src)) &&
174 (!CMP_ADDRESS(&tmp->dst,&si->ip_dst)) &&
175 (tmp->sport == si->sport) &&
176 (tmp->dport == si->dport)) {
182 if ((te = alloc_sctp_ep(si))) {
183 te->next = hs->ep_list;
193 if (si->number_of_tvbs > 0) {
194 chunk_type = CHUNK_TYPE(si->tvb[0]);
195 if ((chunk_type == SCTP_INIT_CHUNK_ID) ||
196 (chunk_type == SCTP_INIT_ACK_CHUNK_ID)) {
197 (te->chunk_count[chunk_type])++;
199 for(tvb_number = 0; tvb_number < si->number_of_tvbs; tvb_number++) {
200 (te->chunk_count[CHUNK_TYPE(si->tvb[tvb_number])])++;
209 sctpstat_draw(void *phs)
211 sctpstat_t *hs=(sctpstat_t *)phs;
212 sctp_ep_t* list = hs->ep_list, *tmp=0;
217 str[i]=g_malloc(sizeof(char[256]));
219 /* Now print Message and Reason Counter Table */
220 /* clear list before printing */
221 gtk_clist_clear(hs->table);
224 for(tmp = list ; tmp ; tmp=tmp->next) {
226 g_snprintf(str[0], sizeof(char[256]),"%s", address_to_str(&tmp->src));
227 g_snprintf(str[1], sizeof(char[256]),"%u", tmp->sport);
228 g_snprintf(str[2], sizeof(char[256]),"%s", address_to_str(&tmp->dst));
229 g_snprintf(str[3], sizeof(char[256]),"%u", tmp->dport);
230 g_snprintf(str[4], sizeof(char[256]),"%u", tmp->chunk_count[SCTP_DATA_CHUNK_ID]);
231 g_snprintf(str[5], sizeof(char[256]),"%u", tmp->chunk_count[SCTP_SACK_CHUNK_ID]);
232 g_snprintf(str[6], sizeof(char[256]),"%u", tmp->chunk_count[SCTP_HEARTBEAT_CHUNK_ID]);
233 g_snprintf(str[7], sizeof(char[256]),"%u", tmp->chunk_count[SCTP_HEARTBEAT_ACK_CHUNK_ID]);
234 g_snprintf(str[8], sizeof(char[256]),"%u", tmp->chunk_count[SCTP_INIT_CHUNK_ID]);
235 g_snprintf(str[9], sizeof(char[256]),"%u", tmp->chunk_count[SCTP_INIT_ACK_CHUNK_ID]);
236 g_snprintf(str[10], sizeof(char[256]),"%u", tmp->chunk_count[SCTP_COOKIE_ECHO_CHUNK_ID]);
237 g_snprintf(str[11], sizeof(char[256]),"%u", tmp->chunk_count[SCTP_COOKIE_ACK_CHUNK_ID]);
238 g_snprintf(str[12], sizeof(char[256]),"%u", tmp->chunk_count[SCTP_ABORT_CHUNK_ID]);
239 g_snprintf(str[13], sizeof(char[256]),"%u", tmp->chunk_count[SCTP_ERROR_CHUNK_ID]);
240 g_snprintf(str[14], sizeof(char[256]),"%u", tmp->chunk_count[SCTP_NR_SACK_CHUNK_ID]);
242 gtk_clist_append(hs->table, str);
245 gtk_widget_show(GTK_WIDGET(hs->table));
250 win_destroy_cb(GtkWindow *win _U_, gpointer data)
252 sctpstat_t *hs=(sctpstat_t *)data;
254 protect_thread_critical_region();
255 remove_tap_listener(hs);
256 unprotect_thread_critical_region();
266 static const gchar *titles[]={
284 sctpstat_init(const char *optarg, void *userdata _U_)
287 GString *error_string;
291 hs=g_malloc(sizeof(sctpstat_t));
292 if(strncmp(optarg,"sctp,stat,",10) == 0){
293 hs->filter=g_strdup(optarg+10);
298 hs->number_of_packets = 0;
301 hs->win=window_new(GTK_WINDOW_TOPLEVEL, "Wireshark: SCTP Chunk Statistics");
302 gtk_window_set_default_size(GTK_WINDOW(hs->win), 600, 200);
304 hs->vbox=gtk_vbox_new(FALSE, 3);
305 gtk_container_set_border_width(GTK_CONTAINER(hs->vbox), 12);
307 init_main_stat_window(hs->win, hs->vbox, "SCTP Chunk Counter", hs->filter);
309 /* init a scrolled window*/
310 hs->scrolled_window = scrolled_window_new(NULL, NULL);
312 hs->table = create_stat_table(hs->scrolled_window, hs->vbox, 15, titles);
314 error_string=register_tap_listener("sctp", hs, hs->filter, 0,
319 simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, "%s", error_string->str);
320 g_string_free(error_string, TRUE);
327 bbox = dlg_button_row_new(GTK_STOCK_CLOSE, NULL);
328 gtk_box_pack_end(GTK_BOX(hs->vbox), bbox, FALSE, FALSE, 0);
330 close_bt = g_object_get_data(G_OBJECT(bbox), GTK_STOCK_CLOSE);
331 window_set_cancel_button(hs->win, close_bt, window_cancel_button_cb);
333 g_signal_connect(hs->win, "delete_event", G_CALLBACK(window_delete_event_cb), NULL);
334 g_signal_connect(hs->win, "destroy", G_CALLBACK(win_destroy_cb), hs);
336 gtk_widget_show_all(hs->win);
337 window_present(hs->win);
339 cf_retap_packets(&cfile);
343 register_tap_listener_sctpstat(void)
345 register_dfilter_stat(&sctp_stat_dlg, "SCTP/Chunk Counter",
346 REGISTER_STAT_GROUP_TELEPHONY);