/* frame_data.c
* Routines for packet disassembly
*
- * $Id: frame_data.c,v 1.1 2001/04/01 04:11:50 hagbard Exp $
+ * $Id$
*
- * Ethereal - Network traffic analyzer
- * By Gerald Combs <gerald@zing.org>
+ * Wireshark - Network traffic analyzer
+ * By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
- *
+ *
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
- *
+ *
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
- *
+ *
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
# include "config.h"
#endif
-#ifdef HAVE_SYS_TYPES_H
-# include <sys/types.h>
-#endif
-
-#include "frame_data.h"
-#include "packet.h"
+#include <wiretap/wtap.h>
+#include <epan/frame_data.h>
+#include <epan/packet.h>
+#include <epan/emem.h>
+#include <epan/timestamp.h>
#include <glib.h>
void *proto_data;
} frame_proto_data;
-static GMemChunk *frame_proto_data_area = NULL;
-
-/*
- * Free up any space allocated for frame proto data areas and then
- * allocate a new area.
- *
- * We can free the area, as the structures it contains are pointed to by
- * frames, that will be freed as well.
- */
-static void
-packet_init_protocol(void)
-{
-
- if (frame_proto_data_area)
- g_mem_chunk_destroy(frame_proto_data_area);
-
- frame_proto_data_area = g_mem_chunk_new("frame_proto_data_area",
- sizeof(frame_proto_data),
- 20 * sizeof(frame_proto_data), /* FIXME*/
- G_ALLOC_ONLY);
-
-}
-
-void
-frame_data_init(void)
-{
- register_init_routine(&packet_init_protocol);
-}
-
-void
-frame_data_cleanup(void)
-{
- /* this function intentionally left blank :) */
-}
-
/* XXX - I declared this static, because it only seems to be used by
* p_get_proto_data and p_add_proto_data
*/
static gint p_compare(gconstpointer a, gconstpointer b)
{
+ const frame_proto_data *ap = (const frame_proto_data *)a;
+ const frame_proto_data *bp = (const frame_proto_data *)b;
- if (((frame_proto_data *)a) -> proto > ((frame_proto_data *)b) -> proto)
+ if (ap -> proto > bp -> proto)
return 1;
- else if (((frame_proto_data *)a) -> proto == ((frame_proto_data *)b) -> proto)
+ else if (ap -> proto == bp -> proto)
return 0;
else
return -1;
}
-
void
p_add_proto_data(frame_data *fd, int proto, void *proto_data)
{
- frame_proto_data *p1 = g_mem_chunk_alloc(frame_proto_data_area);
-
- g_assert(p1 != NULL);
+ frame_proto_data *p1 = se_alloc(sizeof(frame_proto_data));
- p1 -> proto = proto;
- p1 -> proto_data = proto_data;
+ p1->proto = proto;
+ p1->proto_data = proto_data;
/* Add it to the GSLIST */
fd -> pfd = g_slist_insert_sorted(fd -> pfd,
- (gpointer *)p1,
- p_compare);
-
+ (gpointer *)p1,
+ p_compare);
}
void *
}
void
-p_rem_proto_data(frame_data *fd, int proto)
+p_remove_proto_data(frame_data *fd, int proto)
{
frame_proto_data temp;
GSList *item;
item = g_slist_find_custom(fd->pfd, (gpointer *)&temp, p_compare);
if (item) {
+ fd->pfd = g_slist_remove(fd->pfd, item->data);
+ }
+}
+
+#define COMPARE_FRAME_NUM() ((fdata1->num < fdata2->num) ? -1 : \
+ (fdata1->num > fdata2->num) ? 1 : \
+ 0)
+
+#define COMPARE_NUM(f) ((fdata1->f < fdata2->f) ? -1 : \
+ (fdata1->f > fdata2->f) ? 1 : \
+ COMPARE_FRAME_NUM())
+
+/* Compare time stamps.
+ A packet whose time is a reference time is considered to have
+ a lower time stamp than any frame with a non-reference time;
+ if both packets' times are reference times, we compare the
+ times of the packets. */
+#define COMPARE_TS(ts) \
+ ((fdata1->flags.ref_time && !fdata2->flags.ref_time) ? -1 : \
+ (!fdata1->flags.ref_time && fdata2->flags.ref_time) ? 1 : \
+ (fdata1->ts.secs < fdata2->ts.secs) ? -1 : \
+ (fdata1->ts.secs > fdata2->ts.secs) ? 1 : \
+ (fdata1->ts.nsecs < fdata2->ts.nsecs) ? -1 :\
+ (fdata1->ts.nsecs > fdata2->ts.nsecs) ? 1 : \
+ COMPARE_FRAME_NUM())
+
+gint
+frame_data_compare(const frame_data *fdata1, const frame_data *fdata2, int field)
+{
+ switch (field) {
+ case COL_NUMBER:
+ return COMPARE_FRAME_NUM();
+
+ case COL_CLS_TIME:
+ switch (timestamp_get_type()) {
+ case TS_ABSOLUTE:
+ case TS_ABSOLUTE_WITH_DATE:
+ case TS_UTC:
+ case TS_UTC_WITH_DATE:
+ case TS_EPOCH:
+ return COMPARE_TS(abs_ts);
- fd->pfd = g_slist_remove(fd->pfd, item);
+ case TS_RELATIVE:
+ return COMPARE_TS(rel_ts);
+ case TS_DELTA:
+ return COMPARE_TS(del_cap_ts);
+
+ case TS_DELTA_DIS:
+ return COMPARE_TS(del_dis_ts);
+
+ case TS_NOT_SET:
+ return 0;
+ }
+ return 0;
+
+ case COL_ABS_TIME:
+ case COL_ABS_DATE_TIME:
+ case COL_UTC_TIME:
+ case COL_UTC_DATE_TIME:
+ return COMPARE_TS(abs_ts);
+
+ case COL_REL_TIME:
+ return COMPARE_TS(rel_ts);
+
+ case COL_DELTA_TIME:
+ return COMPARE_TS(del_cap_ts);
+
+ case COL_DELTA_TIME_DIS:
+ return COMPARE_TS(del_dis_ts);
+
+ case COL_PACKET_LENGTH:
+ return COMPARE_NUM(pkt_len);
+
+ case COL_CUMULATIVE_BYTES:
+ return COMPARE_NUM(cum_bytes);
+
+ }
+ g_return_val_if_reached(0);
+}
+
+void
+frame_data_init(frame_data *fdata, guint32 num,
+ const struct wtap_pkthdr *phdr, gint64 offset,
+ guint32 cum_bytes)
+{
+ fdata->pfd = NULL;
+ fdata->num = num;
+ fdata->pkt_len = phdr->len;
+ fdata->cum_bytes = cum_bytes + phdr->len;
+ fdata->cap_len = phdr->caplen;
+ fdata->file_off = offset;
+ /* To save some memory, we coerce it into a gint16 */
+ g_assert(phdr->pkt_encap <= G_MAXINT16);
+ fdata->lnk_t = (gint16) phdr->pkt_encap;
+ fdata->abs_ts.secs = phdr->ts.secs;
+ fdata->abs_ts.nsecs = phdr->ts.nsecs;
+ fdata->shift_offset.secs = 0;
+ fdata->shift_offset.nsecs = 0;
+ fdata->flags.passed_dfilter = 0;
+ fdata->flags.encoding = PACKET_CHAR_ENC_CHAR_ASCII;
+ fdata->flags.visited = 0;
+ fdata->flags.marked = 0;
+ fdata->flags.ref_time = 0;
+ fdata->flags.ignored = 0;
+ fdata->color_filter = NULL;
+}
+
+void
+frame_data_set_before_dissect(frame_data *fdata,
+ nstime_t *elapsed_time,
+ nstime_t *first_ts,
+ nstime_t *prev_dis_ts,
+ nstime_t *prev_cap_ts)
+{
+ /* If we don't have the time stamp of the first packet in the
+ capture, it's because this is the first packet. Save the time
+ stamp of this packet as the time stamp of the first packet. */
+ if (nstime_is_unset(first_ts))
+ *first_ts = fdata->abs_ts;
+
+ /* if this frames is marked as a reference time frame, reset
+ firstsec and firstusec to this frame */
+ if(fdata->flags.ref_time)
+ *first_ts = fdata->abs_ts;
+
+ /* If we don't have the time stamp of the previous captured packet,
+ it's because this is the first packet. Save the time
+ stamp of this packet as the time stamp of the previous captured
+ packet. */
+ if (nstime_is_unset(prev_cap_ts))
+ *prev_cap_ts = fdata->abs_ts;
+
+ /* Get the time elapsed between the first packet and this packet. */
+ nstime_delta(&fdata->rel_ts, &fdata->abs_ts, first_ts);
+
+ /* If it's greater than the current elapsed time, set the elapsed time
+ to it (we check for "greater than" so as not to be confused by
+ time moving backwards). */
+ if ((gint32)elapsed_time->secs < fdata->rel_ts.secs
+ || ((gint32)elapsed_time->secs == fdata->rel_ts.secs && (gint32)elapsed_time->nsecs < fdata->rel_ts.nsecs)) {
+ *elapsed_time = fdata->rel_ts;
+ }
+
+ /* Get the time elapsed between the previous displayed packet and
+ this packet. */
+ if (nstime_is_unset(prev_dis_ts))
+ /* If we don't have the time stamp of the previous displayed packet,
+ it's because we have no displayed packets prior to this.
+ Set the delta time to zero. */
+ nstime_set_zero(&fdata->del_dis_ts);
+ else
+ nstime_delta(&fdata->del_dis_ts, &fdata->abs_ts, prev_dis_ts);
+
+ /* Get the time elapsed between the previous captured packet and
+ this packet. */
+ nstime_delta(&fdata->del_cap_ts, &fdata->abs_ts, prev_cap_ts);
+ *prev_cap_ts = fdata->abs_ts;
+}
+
+void
+frame_data_set_after_dissect(frame_data *fdata,
+ guint32 *cum_bytes,
+ nstime_t *prev_dis_ts)
+{
+ /* This frame either passed the display filter list or is marked as
+ a time reference frame. All time reference frames are displayed
+ even if they dont pass the display filter */
+ if(fdata->flags.ref_time){
+ /* if this was a TIME REF frame we should reset the cul bytes field */
+ *cum_bytes = fdata->pkt_len;
+ fdata->cum_bytes = *cum_bytes;
+ } else {
+ /* increase cum_bytes with this packets length */
+ *cum_bytes += fdata->pkt_len;
+ fdata->cum_bytes = *cum_bytes;
}
+ /* Set the time of the previous displayed frame to the time of this
+ frame. */
+ *prev_dis_ts = fdata->abs_ts;
}
+void
+frame_data_cleanup(frame_data *fdata)
+{
+ if (fdata->pfd)
+ g_slist_free(fdata->pfd);
+ fdata->pfd = NULL;
+}
git.samba.org / obnox / wireshark / wip.git / blobdiff