tap-smbstat.c

   1 /* tap-smbstat.c
   2  * smbstat   2003 Ronnie Sahlberg
   3  *
   4  * $Id$
   5  *
   6  * Wireshark - Network traffic analyzer
   7  * By Gerald Combs <gerald@wireshark.org>
   8  * Copyright 1998 Gerald Combs
   9  *
  10  * This program is free software; you can redistribute it and/or
  11  * modify it under the terms of the GNU General Public License
  12  * as published by the Free Software Foundation; either version 2
  13  * of the License, or (at your option) any later version.
  14  *
  15  * This program is distributed in the hope that it will be useful,
  16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18  * GNU General Public License for more details.
  19  *
  20  * You should have received a copy of the GNU General Public License
  21  * along with this program; if not, write to the Free Software
  22  * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
  23  */
  24
  25 #ifdef HAVE_CONFIG_H
  26 # include "config.h"
  27 #endif
  28
  29 #include <stdio.h>
  30
  31 #ifdef HAVE_SYS_TYPES_H
  32 # include <sys/types.h>
  33 #endif
  34
  35 #include <string.h>
  36 #include "epan/packet_info.h"
  37 #include <epan/tap.h>
  38 #include <epan/stat_cmd_args.h>
  39 #include "epan/value_string.h"
  40 #include <epan/dissectors/packet-smb.h>
  41 #include "register.h"
  42 #include "timestats.h"
  43
  44 /* used to keep track of the statistics for an entire program interface */
  45 typedef struct _smbstat_t {
  46         char *filter;
  47         timestat_t proc[256];
  48         timestat_t trans2[256];
  49         timestat_t nt_trans[256];
  50 } smbstat_t;
  51
  52
  53
  54 static int
  55 smbstat_packet(void *pss, packet_info *pinfo, epan_dissect_t *edt _U_, const void *psi)
  56 {
  57         smbstat_t *ss=(smbstat_t *)pss;
  58         const smb_info_t *si=psi;
  59         nstime_t t, deltat;
  60         timestat_t *sp=NULL;
  61
  62         /* we are only interested in reply packets */
  63         if(si->request){
  64                 return 0;
  65         }
  66         /* if we havnt seen the request, just ignore it */
  67         if(!si->sip){
  68                 return 0;
  69         }
  70
  71         if(si->cmd==0xA0 && si->sip->extra_info_type == SMB_EI_NTI){
  72                 smb_nt_transact_info_t *sti=(smb_nt_transact_info_t *)si->sip->extra_info;
  73
  74                 /*nt transaction*/
  75                 if(sti){
  76                         sp=&(ss->nt_trans[sti->subcmd]);
  77                 }
  78         } else if(si->cmd==0x32 && si->sip->extra_info_type == SMB_EI_T2I){
  79                 smb_transact2_info_t *st2i=(smb_transact2_info_t *)si->sip->extra_info;
  80
  81                 /*transaction2*/
  82                 if(st2i){
  83                         sp=&(ss->trans2[st2i->subcmd]);
  84                 }
  85         } else {
  86                 sp=&(ss->proc[si->cmd]);
  87         }
  88
  89         /* calculate time delta between request and reply */
  90         t=pinfo->fd->abs_ts;
  91         nstime_delta(&deltat, &t, &si->sip->req_time);
  92
  93         if(sp){
  94                 time_stat_update(sp,&deltat, pinfo);
  95         }
  96
  97         return 1;
  98 }
  99
 100 static void
 101 smbstat_draw(void *pss)
 102 {
 103         smbstat_t *ss=(smbstat_t *)pss;
 104         guint32 i;
 105         guint64 td;
 106         printf("\n");
 107         printf("===================================================================\n");
 108         printf("SMB RTT Statistics:\n");
 109         printf("Filter: %s\n",ss->filter?ss->filter:"");
 110         printf("Commands                   Calls   Min RTT   Max RTT   Avg RTT\n");
 111         for(i=0;i<256;i++){
 112                 /* nothing seen, nothing to do */
 113                 if(ss->proc[i].num==0){
 114                         continue;
 115                 }
 116
 117                 /* we deal with transaction2 later */
 118                 if(i==0x32){
 119                         continue;
 120                 }
 121
 122                 /* we deal with nt transaction later */
 123                 if(i==0xA0){
 124                         continue;
 125                 }
 126
 127                 /* scale it to units of 10us.*/
 128                 td=ss->proc[i].tot.secs;
 129                 td=td*100000+(int)ss->proc[i].tot.nsecs/10000;
 130                 if(ss->proc[i].num){
 131                         td/=ss->proc[i].num;
 132                 } else {
 133                         td=0;
 134                 }
 135
 136                 printf("%-25s %6d %3d.%05d %3d.%05d %3" G_GINT64_MODIFIER "u.%05" G_GINT64_MODIFIER "u\n",
 137                         val_to_str(i, smb_cmd_vals, "Unknown (0x%02x)"),
 138                         ss->proc[i].num,
 139                         (int)ss->proc[i].min.secs,ss->proc[i].min.nsecs/10000,
 140                         (int)ss->proc[i].max.secs,ss->proc[i].max.nsecs/10000,
 141                         td/100000, td%100000
 142                 );
 143         }
 144
 145         printf("\n");
 146         printf("Transaction2 Commands      Calls   Min RTT   Max RTT   Avg RTT\n");
 147         for(i=0;i<256;i++){
 148                 /* nothing seen, nothing to do */
 149                 if(ss->trans2[i].num==0){
 150                         continue;
 151                 }
 152
 153                 /* scale it to units of 10us.*/
 154                 td=ss->trans2[i].tot.secs;
 155                 td=td*100000+(int)ss->trans2[i].tot.nsecs/10000;
 156                 if(ss->trans2[i].num){
 157                         td/=ss->trans2[i].num;
 158                 } else {
 159                         td=0;
 160                 }
 161
 162                 printf("%-25s %6d %3d.%05d %3d.%05d %3" G_GINT64_MODIFIER "u.%05" G_GINT64_MODIFIER "u\n",
 163                         val_to_str(i, trans2_cmd_vals, "Unknown (0x%02x)"),
 164                         ss->trans2[i].num,
 165                         (int)ss->trans2[i].min.secs,ss->trans2[i].min.nsecs/10000,
 166                         (int)ss->trans2[i].max.secs,ss->trans2[i].max.nsecs/10000,
 167                         td/100000, td%100000
 168                 );
 169         }
 170
 171         printf("\n");
 172         printf("NT Transaction Commands    Calls   Min RTT   Max RTT   Avg RTT\n");
 173         for(i=0;i<256;i++){
 174                 /* nothing seen, nothing to do */
 175                 if(ss->nt_trans[i].num==0){
 176                         continue;
 177                 }
 178
 179                 /* scale it to units of 10us.*/
 180                 td=ss->nt_trans[i].tot.secs;
 181                 td=td*100000+(int)ss->nt_trans[i].tot.nsecs/10000;
 182                 if(ss->nt_trans[i].num){
 183                         td/=ss->nt_trans[i].num;
 184                 } else {
 185                         td=0;
 186                 }
 187
 188                 printf("%-25s %6d %3d.%05d %3d.%05d %3" G_GINT64_MODIFIER "u.%05" G_GINT64_MODIFIER "u\n",
 189                         val_to_str(i, nt_cmd_vals, "Unknown (0x%02x)"),
 190                         ss->nt_trans[i].num,
 191                         (int)ss->nt_trans[i].min.secs,ss->nt_trans[i].min.nsecs/10000,
 192                         (int)ss->nt_trans[i].max.secs,ss->nt_trans[i].max.nsecs/10000,
 193                         td/100000, td%100000
 194                 );
 195         }
 196
 197         printf("===================================================================\n");
 198 }
 199
 200
 201 static void
 202 smbstat_init(const char *optarg,void* userdata _U_)
 203 {
 204         smbstat_t *ss;
 205         guint32 i;
 206         const char *filter=NULL;
 207         GString *error_string;
 208
 209         if(!strncmp(optarg,"smb,rtt,",8)){
 210                 filter=optarg+8;
 211         } else {
 212                 filter=NULL;
 213         }
 214
 215         ss=g_malloc(sizeof(smbstat_t));
 216         if(filter){
 217                 ss->filter=g_strdup(filter);
 218         } else {
 219                 ss->filter=NULL;
 220         }
 221
 222         for(i=0;i<256;i++){
 223                 ss->proc[i].num=0;
 224                 ss->proc[i].min_num=0;
 225                 ss->proc[i].max_num=0;
 226                 ss->proc[i].min.secs=0;
 227                 ss->proc[i].min.nsecs=0;
 228                 ss->proc[i].max.secs=0;
 229                 ss->proc[i].max.nsecs=0;
 230                 ss->proc[i].tot.secs=0;
 231                 ss->proc[i].tot.nsecs=0;
 232
 233                 ss->trans2[i].num=0;
 234                 ss->trans2[i].min_num=0;
 235                 ss->trans2[i].max_num=0;
 236                 ss->trans2[i].min.secs=0;
 237                 ss->trans2[i].min.nsecs=0;
 238                 ss->trans2[i].max.secs=0;
 239                 ss->trans2[i].max.nsecs=0;
 240                 ss->trans2[i].tot.secs=0;
 241                 ss->trans2[i].tot.nsecs=0;
 242
 243                 ss->nt_trans[i].num=0;
 244                 ss->nt_trans[i].min_num=0;
 245                 ss->nt_trans[i].max_num=0;
 246                 ss->nt_trans[i].min.secs=0;
 247                 ss->nt_trans[i].min.nsecs=0;
 248                 ss->nt_trans[i].max.secs=0;
 249                 ss->nt_trans[i].max.nsecs=0;
 250                 ss->nt_trans[i].tot.secs=0;
 251                 ss->nt_trans[i].tot.nsecs=0;
 252         }
 253
 254         error_string=register_tap_listener("smb", ss, filter, 0, NULL, smbstat_packet, smbstat_draw);
 255         if(error_string){
 256                 /* error, we failed to attach to the tap. clean up */
 257                 g_free(ss->filter);
 258                 g_free(ss);
 259
 260                 fprintf(stderr, "tshark: Couldn't register smb,rtt tap: %s\n",
 261                     error_string->str);
 262                 g_string_free(error_string, TRUE);
 263                 exit(1);
 264         }
 265 }
 266
 267
 268 void
 269 register_tap_listener_smbstat(void)
 270 {
 271         register_stat_cmd_arg("smb,rtt", smbstat_init,NULL);
 272 }
 273