tap-smbstat.c

   1 /* tap-smbstat.c
   2  * smbstat   2003 Ronnie Sahlberg
   3  *
   4  * $Id$
   5  *
   6  * Wireshark - Network traffic analyzer
   7  * By Gerald Combs <gerald@wireshark.org>
   8  * Copyright 1998 Gerald Combs
   9  *
  10  * This program is free software; you can redistribute it and/or
  11  * modify it under the terms of the GNU General Public License
  12  * as published by the Free Software Foundation; either version 2
  13  * of the License, or (at your option) any later version.
  14  *
  15  * This program is distributed in the hope that it will be useful,
  16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18  * GNU General Public License for more details.
  19  *
  20  * You should have received a copy of the GNU General Public License
  21  * along with this program; if not, write to the Free Software
  22  * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
  23  */
  24
  25 #ifdef HAVE_CONFIG_H
  26 # include "config.h"
  27 #endif
  28
  29 #include <stdio.h>
  30
  31 #ifdef HAVE_SYS_TYPES_H
  32 # include <sys/types.h>
  33 #endif
  34
  35 #include <string.h>
  36 #include "epan/packet_info.h"
  37 #include <epan/tap.h>
  38 #include <epan/stat_cmd_args.h>
  39 #include "epan/value_string.h"
  40 #include <epan/dissectors/packet-smb.h>
  41 #include "timestats.h"
  42
  43 /* used to keep track of the statistics for an entire program interface */
  44 typedef struct _smbstat_t {
  45         char *filter;
  46         timestat_t proc[256];
  47         timestat_t trans2[256];
  48         timestat_t nt_trans[256];
  49 } smbstat_t;
  50
  51
  52
  53 static int
  54 smbstat_packet(void *pss, packet_info *pinfo, epan_dissect_t *edt _U_, const void *psi)
  55 {
  56         smbstat_t *ss=(smbstat_t *)pss;
  57         const smb_info_t *si=psi;
  58         nstime_t t, deltat;
  59         timestat_t *sp=NULL;
  60
  61         /* we are only interested in reply packets */
  62         if(si->request){
  63                 return 0;
  64         }
  65         /* if we havnt seen the request, just ignore it */
  66         if(!si->sip){
  67                 return 0;
  68         }
  69
  70         if(si->cmd==0xA0 && si->sip->extra_info_type == SMB_EI_NTI){
  71                 smb_nt_transact_info_t *sti=(smb_nt_transact_info_t *)si->sip->extra_info;
  72
  73                 /*nt transaction*/
  74                 if(sti){
  75                         sp=&(ss->nt_trans[sti->subcmd]);
  76                 }
  77         } else if(si->cmd==0x32 && si->sip->extra_info_type == SMB_EI_T2I){
  78                 smb_transact2_info_t *st2i=(smb_transact2_info_t *)si->sip->extra_info;
  79
  80                 /*transaction2*/
  81                 if(st2i){
  82                         sp=&(ss->trans2[st2i->subcmd]);
  83                 }
  84         } else {
  85                 sp=&(ss->proc[si->cmd]);
  86         }
  87
  88         /* calculate time delta between request and reply */
  89         t=pinfo->fd->abs_ts;
  90         nstime_delta(&deltat, &t, &si->sip->req_time);
  91
  92         if(sp){
  93                 time_stat_update(sp,&deltat, pinfo);
  94         }
  95
  96         return 1;
  97 }
  98
  99 static void
 100 smbstat_draw(void *pss)
 101 {
 102         smbstat_t *ss=(smbstat_t *)pss;
 103         guint32 i;
 104         guint64 td;
 105         printf("\n");
 106         printf("===================================================================\n");
 107         printf("SMB RTT Statistics:\n");
 108         printf("Filter: %s\n",ss->filter?ss->filter:"");
 109         printf("Commands                   Calls   Min RTT   Max RTT   Avg RTT\n");
 110         for(i=0;i<256;i++){
 111                 /* nothing seen, nothing to do */
 112                 if(ss->proc[i].num==0){
 113                         continue;
 114                 }
 115
 116                 /* we deal with transaction2 later */
 117                 if(i==0x32){
 118                         continue;
 119                 }
 120
 121                 /* we deal with nt transaction later */
 122                 if(i==0xA0){
 123                         continue;
 124                 }
 125
 126                 /* scale it to units of 10us.*/
 127                 td=ss->proc[i].tot.secs;
 128                 td=td*100000+(int)ss->proc[i].tot.nsecs/10000;
 129                 if(ss->proc[i].num){
 130                         td/=ss->proc[i].num;
 131                 } else {
 132                         td=0;
 133                 }
 134
 135                 printf("%-25s %6d %3d.%05d %3d.%05d %3" G_GINT64_MODIFIER "u.%05" G_GINT64_MODIFIER "u\n",
 136                         val_to_str_ext(i, &smb_cmd_vals_ext, "Unknown (0x%02x)"),
 137                         ss->proc[i].num,
 138                         (int)ss->proc[i].min.secs,ss->proc[i].min.nsecs/10000,
 139                         (int)ss->proc[i].max.secs,ss->proc[i].max.nsecs/10000,
 140                         td/100000, td%100000
 141                 );
 142         }
 143
 144         printf("\n");
 145         printf("Transaction2 Commands      Calls   Min RTT   Max RTT   Avg RTT\n");
 146         for(i=0;i<256;i++){
 147                 /* nothing seen, nothing to do */
 148                 if(ss->trans2[i].num==0){
 149                         continue;
 150                 }
 151
 152                 /* scale it to units of 10us.*/
 153                 td=ss->trans2[i].tot.secs;
 154                 td=td*100000+(int)ss->trans2[i].tot.nsecs/10000;
 155                 if(ss->trans2[i].num){
 156                         td/=ss->trans2[i].num;
 157                 } else {
 158                         td=0;
 159                 }
 160
 161                 printf("%-25s %6d %3d.%05d %3d.%05d %3" G_GINT64_MODIFIER "u.%05" G_GINT64_MODIFIER "u\n",
 162                         val_to_str_ext(i, &trans2_cmd_vals_ext, "Unknown (0x%02x)"),
 163                         ss->trans2[i].num,
 164                         (int)ss->trans2[i].min.secs,ss->trans2[i].min.nsecs/10000,
 165                         (int)ss->trans2[i].max.secs,ss->trans2[i].max.nsecs/10000,
 166                         td/100000, td%100000
 167                 );
 168         }
 169
 170         printf("\n");
 171         printf("NT Transaction Commands    Calls   Min RTT   Max RTT   Avg RTT\n");
 172         for(i=0;i<256;i++){
 173                 /* nothing seen, nothing to do */
 174                 if(ss->nt_trans[i].num==0){
 175                         continue;
 176                 }
 177
 178                 /* scale it to units of 10us.*/
 179                 td=ss->nt_trans[i].tot.secs;
 180                 td=td*100000+(int)ss->nt_trans[i].tot.nsecs/10000;
 181                 if(ss->nt_trans[i].num){
 182                         td/=ss->nt_trans[i].num;
 183                 } else {
 184                         td=0;
 185                 }
 186
 187                 printf("%-25s %6d %3d.%05d %3d.%05d %3" G_GINT64_MODIFIER "u.%05" G_GINT64_MODIFIER "u\n",
 188                         val_to_str_ext(i, &nt_cmd_vals_ext, "Unknown (0x%02x)"),
 189                         ss->nt_trans[i].num,
 190                         (int)ss->nt_trans[i].min.secs,ss->nt_trans[i].min.nsecs/10000,
 191                         (int)ss->nt_trans[i].max.secs,ss->nt_trans[i].max.nsecs/10000,
 192                         td/100000, td%100000
 193                 );
 194         }
 195
 196         printf("===================================================================\n");
 197 }
 198
 199
 200 static void
 201 smbstat_init(const char *optarg,void* userdata _U_)
 202 {
 203         smbstat_t *ss;
 204         guint32 i;
 205         const char *filter=NULL;
 206         GString *error_string;
 207
 208         if(!strncmp(optarg,"smb,rtt,",8)){
 209                 filter=optarg+8;
 210         } else {
 211                 filter=NULL;
 212         }
 213
 214         ss=g_malloc(sizeof(smbstat_t));
 215         if(filter){
 216                 ss->filter=g_strdup(filter);
 217         } else {
 218                 ss->filter=NULL;
 219         }
 220
 221         for(i=0;i<256;i++){
 222                 ss->proc[i].num=0;
 223                 ss->proc[i].min_num=0;
 224                 ss->proc[i].max_num=0;
 225                 ss->proc[i].min.secs=0;
 226                 ss->proc[i].min.nsecs=0;
 227                 ss->proc[i].max.secs=0;
 228                 ss->proc[i].max.nsecs=0;
 229                 ss->proc[i].tot.secs=0;
 230                 ss->proc[i].tot.nsecs=0;
 231
 232                 ss->trans2[i].num=0;
 233                 ss->trans2[i].min_num=0;
 234                 ss->trans2[i].max_num=0;
 235                 ss->trans2[i].min.secs=0;
 236                 ss->trans2[i].min.nsecs=0;
 237                 ss->trans2[i].max.secs=0;
 238                 ss->trans2[i].max.nsecs=0;
 239                 ss->trans2[i].tot.secs=0;
 240                 ss->trans2[i].tot.nsecs=0;
 241
 242                 ss->nt_trans[i].num=0;
 243                 ss->nt_trans[i].min_num=0;
 244                 ss->nt_trans[i].max_num=0;
 245                 ss->nt_trans[i].min.secs=0;
 246                 ss->nt_trans[i].min.nsecs=0;
 247                 ss->nt_trans[i].max.secs=0;
 248                 ss->nt_trans[i].max.nsecs=0;
 249                 ss->nt_trans[i].tot.secs=0;
 250                 ss->nt_trans[i].tot.nsecs=0;
 251         }
 252
 253         error_string=register_tap_listener("smb", ss, filter, 0, NULL, smbstat_packet, smbstat_draw);
 254         if(error_string){
 255                 /* error, we failed to attach to the tap. clean up */
 256                 g_free(ss->filter);
 257                 g_free(ss);
 258
 259                 fprintf(stderr, "tshark: Couldn't register smb,rtt tap: %s\n",
 260                     error_string->str);
 261                 g_string_free(error_string, TRUE);
 262                 exit(1);
 263         }
 264 }
 265
 266
 267 void
 268 register_tap_listener_smbstat(void)
 269 {
 270         register_stat_cmd_arg("smb,rtt", smbstat_init,NULL);
 271 }
 272