From Colin O'Flynn:
[obnox/wireshark/wip.git] / tap-iostat.c
index 07f10717dcf48b1606b7b509ee5b43824df6b76d..1104edd6d684a85d02cdde79abc40cddc5fa1fe9 100644 (file)
@@ -1,22 +1,22 @@
 /* tap-iostat.c
  * iostat   2002 Ronnie Sahlberg
  *
- * $Id: tap-iostat.c,v 1.5 2003/04/23 03:50:59 guy Exp $
+ * $Id$
  *
- * Ethereal - Network traffic analyzer
- * By Gerald Combs <gerald@ethereal.com>
+ * Wireshark - Network traffic analyzer
+ * By Gerald Combs <gerald@wireshark.org>
  * Copyright 1998 Gerald Combs
- * 
+ *
  * This program is free software; you can redistribute it and/or
  * modify it under the terms of the GNU General Public License
  * as published by the Free Software Foundation; either version 2
  * of the License, or (at your option) any later version.
- * 
+ *
  * This program is distributed in the hope that it will be useful,
  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  * GNU General Public License for more details.
- * 
+ *
  * You should have received a copy of the GNU General Public License
  * along with this program; if not, write to the Free Software
  * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
 #endif
 
 #include <string.h>
+#include "epan/epan_dissect.h"
 #include "epan/packet_info.h"
-#include "tap.h"
-#include "register.h"
+#include <epan/tap.h>
+#include <epan/stat_cmd_args.h>
+#include <epan/strutil.h>
 
 
 typedef struct _io_stat_t {
-       gint32 interval;        /* unit is ms */
+       gint64 interval;        /* unit is us */
        guint32 num_items;
        struct _io_stat_item_t *items;
-       char **filters;
-} io_stat_t;   
+       const char **filters;
+} io_stat_t;
+
+#define CALC_TYPE_FRAMES 0
+#define CALC_TYPE_BYTES         1
+#define CALC_TYPE_FRAMES_AND_BYTES      2
+#define CALC_TYPE_COUNT         3
+#define CALC_TYPE_SUM   4
+#define CALC_TYPE_MIN   5
+#define CALC_TYPE_MAX   6
+#define CALC_TYPE_AVG   7
+#define CALC_TYPE_LOAD  8
 
 typedef struct _io_stat_item_t {
        io_stat_t *parent;
        struct _io_stat_item_t *next;
        struct _io_stat_item_t *prev;
-       gint32 time;            /* unit is ms since start of capture */
-       guint32 frames;
-       guint32 bytes;
+       gint64 time;            /* unit is us since start of capture */
+       int calc_type;
+       int hf_index;
+       guint64 frames;
+       guint64 num;
+       guint64 counter;
+       gfloat float_counter;
+       gdouble double_counter;
 } io_stat_item_t;
 
-#ifdef REMOVED
-/* Tethereal does not use the reset callback.
-   But if someone ports this feature to Gtk with a nice gui, this is what
-   reset should look like.
-*/
-static void
-iostat_reset(io_stat_item_t *mit)
-{
-       io_stat_item_t *it;
-
-       mit->prev=mit;
-       mit->time=0;
-       mit->frames=0;
-       mit->bytes=0;
-       while(mit->next){
-               it=mit->next;
-               mit=mit->next->next;
-               g_free(it);
-       }
-}
-
-/* function to remove and clean up an io stat. would be used by Gtk/Gtk2 version
-   io iostat when the iostat window is closed.
-*/
-static void 
-iostat_cleanup(io_stat_t *io)
-{
-       int i;
-
-       for(i=0;i<io->num_items;i++){
-               if(filters[i]){
-                       g_free(filters[i]);
-                       filters[i]=NULL;
-               }
-               iostat_reset(&io->items[i]);
-               remove_tap_listener(&io->items[i]);
-       }
-       g_free(io->items);
-       g_free(io->filters);
-       g_free(io);
-}
-
-#endif
+#define NANOSECS_PER_SEC 1000000000
 
 static int
-iostat_packet(io_stat_item_t *mit, packet_info *pinfo, epan_dissect_t *edt _U_, void *dummy _U_)
+iostat_packet(void *arg, packet_info *pinfo, epan_dissect_t *edt, const void *dummy _U_)
 {
+       io_stat_item_t *mit = arg;
        io_stat_item_t *it;
-       gint32 current_time;
+       gint64 current_time, ct;
+       GPtrArray *gp;
+       guint i;
 
-       current_time=((pinfo->fd->rel_secs*1000)+(pinfo->fd->rel_usecs/1000));
+       current_time = (gint64)(pinfo->fd->rel_ts.secs*1000000) + (pinfo->fd->rel_ts.nsecs+500)/1000;
 
        /* the prev item before the main one is always the last interval we saw packets for */
        it=mit->prev;
@@ -116,58 +94,428 @@ iostat_packet(io_stat_item_t *mit, packet_info *pinfo, epan_dissect_t *edt _U_,
        }
 
        /* we have moved into a new interval, we need to create a new struct */
-       if(current_time>=(it->time+mit->parent->interval)){
+       ct = current_time;
+       while(ct >= (it->time + mit->parent->interval)){
                it->next=g_malloc(sizeof(io_stat_item_t));
                it->next->prev=it;
                it->next->next=NULL;
                it=it->next;
                mit->prev=it;
 
-               it->time=(current_time / mit->parent->interval) * mit->parent->interval;
-               it->frames=0;
-               it->bytes=0;
+               it->time    = it->prev->time + mit->parent->interval;
+               it->frames  = 0;
+               it->counter = 0;
+               it->float_counter = 0;
+               it->double_counter = 0;
+               it->num     = 0;
+               it->calc_type=it->prev->calc_type;
+               it->hf_index=it->prev->hf_index;
        }
 
        /* it will now give us the current structure to use to store the data in */
        it->frames++;
-       it->bytes+=pinfo->fd->pkt_len;
-       
+
+       switch(it->calc_type){
+       case CALC_TYPE_BYTES:
+       case CALC_TYPE_FRAMES:
+       case CALC_TYPE_FRAMES_AND_BYTES:
+               it->counter+=pinfo->fd->pkt_len;
+               break;
+       case CALC_TYPE_COUNT:
+               gp=proto_get_finfo_ptr_array(edt->tree, it->hf_index);
+               if(gp){
+                       it->counter+=gp->len;
+               }
+               break;
+       case CALC_TYPE_SUM:
+               gp=proto_get_finfo_ptr_array(edt->tree, it->hf_index);
+               if(gp){
+                       guint64 val;
+                       nstime_t *new_time;
+
+                       for(i=0;i<gp->len;i++){
+                               switch(proto_registrar_get_ftype(it->hf_index)){
+                               case FT_UINT8:
+                               case FT_UINT16:
+                               case FT_UINT24:
+                               case FT_UINT32:
+                                       it->counter+=fvalue_get_uinteger(&((field_info *)gp->pdata[i])->value);
+                                       break;
+                               case FT_UINT64:
+                                       it->counter+=fvalue_get_integer64(&((field_info *)gp->pdata[i])->value);
+                                       break;
+                               case FT_INT8:
+                               case FT_INT16:
+                               case FT_INT24:
+                               case FT_INT32:
+                                       it->counter+=fvalue_get_sinteger(&((field_info *)gp->pdata[i])->value);
+                                       break;
+                               case FT_INT64:
+                                       it->counter+=(gint64)fvalue_get_integer64(&((field_info *)gp->pdata[i])->value);
+                                       break;
+                               case FT_FLOAT:
+                                       it->float_counter+=(gfloat)fvalue_get_floating(&((field_info *)gp->pdata[i])->value);
+                                       break;
+                               case FT_DOUBLE:
+                                       it->double_counter+=fvalue_get_floating(&((field_info *)gp->pdata[i])->value);
+                                       break;
+                               case FT_RELATIVE_TIME:
+                                       new_time = fvalue_get(&((field_info *)gp->pdata[i])->value);
+                                       val=(guint64)(new_time->secs) * NANOSECS_PER_SEC + new_time->nsecs;
+                                       it->counter += val;
+                                       break;
+                               }
+                       }
+               }
+               break;
+       case CALC_TYPE_MIN:
+               gp=proto_get_finfo_ptr_array(edt->tree, it->hf_index);
+               if(gp){
+                       int type;
+                       guint64 val;
+                       gfloat float_val;
+                       gdouble double_val;
+                       nstime_t *new_time;
+
+                       type=proto_registrar_get_ftype(it->hf_index);
+                       for(i=0;i<gp->len;i++){
+                               switch(type){
+                               case FT_UINT8:
+                               case FT_UINT16:
+                               case FT_UINT24:
+                               case FT_UINT32:
+                                       val=fvalue_get_uinteger(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->counter=val;
+                                       } else if(val<it->counter){
+                                               it->counter=val;
+                                       }
+                                       break;
+                               case FT_UINT64:
+                                       val=fvalue_get_integer64(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->counter=val;
+                                       } else if(val<it->counter){
+                                               it->counter=val;
+                                       }
+                                       break;
+                               case FT_INT8:
+                               case FT_INT16:
+                               case FT_INT24:
+                               case FT_INT32:
+                                       val=fvalue_get_sinteger(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->counter=val;
+                                       } else if((gint32)val<(gint32)(it->counter)){
+                                               it->counter=val;
+                                       }
+                                       break;
+                               case FT_INT64:
+                                       val=fvalue_get_integer64(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->counter=val;
+                                       } else if((gint64)val<(gint64)(it->counter)){
+                                               it->counter=val;
+                                       }
+                                       break;
+                               case FT_FLOAT:
+                                       float_val=(gfloat)fvalue_get_floating(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->float_counter=float_val;
+                                       } else if(float_val<it->float_counter){
+                                               it->float_counter=float_val;
+                                       }
+                                       break;
+                               case FT_DOUBLE:
+                                       double_val=fvalue_get_floating(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->double_counter=double_val;
+                                       } else if(double_val<it->double_counter){
+                                               it->double_counter=double_val;
+                                       }
+                                       break;
+                               case FT_RELATIVE_TIME:
+                                       new_time=fvalue_get(&((field_info *)gp->pdata[i])->value);
+                                       val=(guint64)(new_time->secs) * NANOSECS_PER_SEC + new_time->nsecs;
+                                       if((it->frames==1)&&(i==0)){
+                                               it->counter=val;
+                                       } else if(val<it->counter){
+                                               it->counter=val;
+                                       }
+                                       break;
+                               }
+                       }
+               }
+               break;
+       case CALC_TYPE_MAX:
+               gp=proto_get_finfo_ptr_array(edt->tree, it->hf_index);
+               if(gp){
+                       int type;
+                       guint64 val;
+                       gfloat float_val;
+                       gdouble double_val;
+                       nstime_t *new_time;
+
+                       type=proto_registrar_get_ftype(it->hf_index);
+                       for(i=0;i<gp->len;i++){
+                               switch(type){
+                               case FT_UINT8:
+                               case FT_UINT16:
+                               case FT_UINT24:
+                               case FT_UINT32:
+                                       val=fvalue_get_uinteger(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->counter=val;
+                                       } else if(val>it->counter){
+                                               it->counter=val;
+                                       }
+                                       break;
+                               case FT_UINT64:
+                                       val=fvalue_get_integer64(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->counter=val;
+                                       } else if(val>it->counter){
+                                               it->counter=val;
+                                       }
+                                       break;
+                               case FT_INT8:
+                               case FT_INT16:
+                               case FT_INT24:
+                               case FT_INT32:
+                                       val=fvalue_get_sinteger(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->counter=val;
+                                       } else if((gint32)val>(gint32)(it->counter)){
+                                               it->counter=val;
+                                       }
+                                       break;
+                               case FT_INT64:
+                                       val=fvalue_get_integer64(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->counter=val;
+                                       } else if((gint64)val>(gint64)(it->counter)){
+                                               it->counter=val;
+                                       }
+                                       break;
+                               case FT_FLOAT:
+                                       float_val=(gfloat)fvalue_get_floating(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->float_counter=float_val;
+                                       } else if(float_val>it->float_counter){
+                                               it->float_counter=float_val;
+                                       }
+                                       break;
+                               case FT_DOUBLE:
+                                       double_val=fvalue_get_floating(&((field_info *)gp->pdata[i])->value);
+                                       if((it->frames==1)&&(i==0)){
+                                               it->double_counter=double_val;
+                                       } else if(double_val>it->double_counter){
+                                               it->double_counter=double_val;
+                                       }
+                                       break;
+                               case FT_RELATIVE_TIME:
+                                       new_time=fvalue_get(&((field_info *)gp->pdata[i])->value);
+                                       val=(guint64)(new_time->secs) * NANOSECS_PER_SEC + new_time->nsecs;
+                                       if((it->frames==1)&&(i==0)){
+                                               it->counter=val;
+                                       } else if(val>it->counter){
+                                               it->counter=val;
+                                       }
+                                       break;
+                               }
+                       }
+               }
+               break;
+       case CALC_TYPE_AVG:
+               gp=proto_get_finfo_ptr_array(edt->tree, it->hf_index);
+               if(gp){
+                       int type;
+                       guint64 val;
+                       nstime_t *new_time;
+
+                       type=proto_registrar_get_ftype(it->hf_index);
+                       for(i=0;i<gp->len;i++){
+                               it->num++;
+                               switch(type){
+                               case FT_UINT8:
+                               case FT_UINT16:
+                               case FT_UINT24:
+                               case FT_UINT32:
+                                       val=fvalue_get_uinteger(&((field_info *)gp->pdata[i])->value);
+                                       it->counter+=val;
+                                       break;
+                               case FT_UINT64:
+                               case FT_INT64:
+                                       val=fvalue_get_integer64(&((field_info *)gp->pdata[i])->value);
+                                       it->counter+=val;
+                                       break;
+                               case FT_INT8:
+                               case FT_INT16:
+                               case FT_INT24:
+                               case FT_INT32:
+                                       val=fvalue_get_sinteger(&((field_info *)gp->pdata[i])->value);
+                                       it->counter+=val;
+                                       break;
+                               case FT_FLOAT:
+                                       it->float_counter+=(gfloat)fvalue_get_floating(&((field_info *)gp->pdata[i])->value);
+                                       break;
+                               case FT_DOUBLE:
+                                       it->double_counter+=fvalue_get_floating(&((field_info *)gp->pdata[i])->value);
+                                       break;
+                               case FT_RELATIVE_TIME:
+                                       new_time=fvalue_get(&((field_info *)gp->pdata[i])->value);
+                                       val=(guint64)(new_time->secs) * NANOSECS_PER_SEC + new_time->nsecs;
+                                       it->counter+=val;
+                                       break;
+                               }
+                       }
+               }
+               break;
+       case CALC_TYPE_LOAD:
+               gp=proto_get_finfo_ptr_array(edt->tree, it->hf_index);
+               if(gp){
+                       int type;
+
+                       type=proto_registrar_get_ftype(it->hf_index);
+                       if (type != FT_RELATIVE_TIME) {
+                               fprintf(stderr,
+                                       "\ntshark: LOAD() is only supported for relative-time fiels such as smb.time\n"
+                                       );
+                               exit(10);
+                       }
+                       for(i=0;i<gp->len;i++){
+                               guint64 val;
+                               int tival;
+                               nstime_t *new_time;
+                               io_stat_item_t *pit;
+
+                               new_time=fvalue_get(&((field_info *)gp->pdata[i])->value);
+                               val=(guint64)(new_time->secs)*1000000 + new_time->nsecs/1000;
+                               tival = (int)(val % mit->parent->interval);
+                               it->counter += tival;
+                               val -= tival;
+                               pit = it->prev;
+                               while (val > 0) {
+                                       if (val < (guint64)mit->parent->interval) {
+                                               pit->counter += val;
+                                               val = 0;
+                                               break;
+                                       }
+
+                                       pit->counter += mit->parent->interval;
+                                       val -= mit->parent->interval;
+                                       pit = pit->prev;
+
+                               }
+                       }
+               }
+               break;
+       }
+
        return TRUE;
 }
 
 static void
-iostat_draw(io_stat_item_t *mit)
+iostat_draw(void *arg)
 {
+       io_stat_item_t *mit = arg;
        io_stat_t *iot;
        io_stat_item_t **items;
-       guint32 *frames;
-       guint32 *bytes;
-       guint32 i,more_items;
-       gint t;
+       guint64 *frames;
+       guint64 *counters;
+       gfloat *float_counters;
+       gdouble *double_counters;
+       guint64 *num;
+       guint32 i;
+       guint32 borderLen=68;
+       gboolean more_items;
+       gint64 t;
 
        iot=mit->parent;
 
        printf("\n");
-       printf("===================================================================\n");
+
+       /* Display the table border */
+       for(i=0;i<iot->num_items;i++){
+               if(iot->items[i].calc_type==CALC_TYPE_FRAMES_AND_BYTES)
+                       borderLen+=17;
+       }
+       if(iot->interval!=G_MAXINT32)
+               borderLen+=8;
+       if(iot->num_items>3)
+               borderLen+=(iot->num_items-3)*17;
+       for(i=0;i<borderLen;i++){
+               printf("=");
+       }
+       printf("\n");
+
+
        printf("IO Statistics\n");
-       printf("Interval: %d secs\n", iot->interval);
+       if(iot->interval!=G_MAXINT32)
+               printf("Interval: %3" G_GINT64_MODIFIER "u.%06" G_GINT64_MODIFIER "u secs\n",
+                               iot->interval/1000000, iot->interval%1000000);
+
        for(i=0;i<iot->num_items;i++){
-               printf("Column #%d: %s\n",i,iot->filters[i]?iot->filters[i]:"");
+               printf("Column #%u: %s\n",i,iot->filters[i]?iot->filters[i]:"");
+       }
+       if(iot->interval==G_MAXINT32){
+               printf("                |");
+       } else {
+               printf("                        |");
        }
-       printf("                ");
        for(i=0;i<iot->num_items;i++){
-               printf("|   Column #%-2d   ",i);
+               if(iot->items[i].calc_type==CALC_TYPE_FRAMES_AND_BYTES){
+                       printf("            Column #%-2u           |",i);
+               } else {
+                       printf("    Column #%-2u  |",i);
+               }
        }
        printf("\n");
-       printf("Time            ");
+
+       if(iot->interval==G_MAXINT32) {
+               printf("Time            |");
+       } else {
+               printf("Time                    |");
+       }
        for(i=0;i<iot->num_items;i++){
-               printf("|frames|  bytes  ");
+               switch(iot->items[i].calc_type){
+               case CALC_TYPE_FRAMES:
+                       printf("     FRAMES     |");
+                       break;
+               case CALC_TYPE_BYTES:
+                       printf("     BYTES      |");
+                       break;
+               case CALC_TYPE_FRAMES_AND_BYTES:
+                       printf("     Frames     |      Bytes     |");
+                       break;
+               case CALC_TYPE_COUNT:
+                       printf("      COUNT     |");
+                       break;
+               case CALC_TYPE_SUM:
+                       printf("       SUM      |");
+                       break;
+               case CALC_TYPE_MIN:
+                       printf("       MIN      |");
+                       break;
+               case CALC_TYPE_MAX:
+                       printf("       MAX      |");
+                       break;
+               case CALC_TYPE_AVG:
+                       printf("       AVG      |");
+                       break;
+               case CALC_TYPE_LOAD:
+                       printf("       LOAD     |");
+                       break;
+               }
        }
        printf("\n");
 
        items=g_malloc(sizeof(io_stat_item_t *)*iot->num_items);
-       frames=g_malloc(sizeof(guint32)*iot->num_items);
-       bytes=g_malloc(sizeof(guint32)*iot->num_items);
+       frames=g_malloc(sizeof(guint64)*iot->num_items);
+       counters=g_malloc(sizeof(guint64)*iot->num_items);
+       float_counters=g_malloc(sizeof(gfloat)*iot->num_items);
+       double_counters=g_malloc(sizeof(gdouble)*iot->num_items);
+       num=g_malloc(sizeof(guint64)*iot->num_items);
        /* preset all items at the first interval */
        for(i=0;i<iot->num_items;i++){
                items[i]=&iot->items[i];
@@ -176,10 +524,13 @@ iostat_draw(io_stat_item_t *mit)
        /* loop the items until we run out of them all */
        t=0;
        do {
-               more_items=0;
+               more_items=FALSE;
                for(i=0;i<iot->num_items;i++){
                        frames[i]=0;
-                       bytes[i]=0;
+                       counters[i]=0;
+                       float_counters[i]=0;
+                       double_counters[i]=0;
+                       num[i]=0;
                }
                for(i=0;i<iot->num_items;i++){
                        if(items[i] && (t>=(items[i]->time+iot->interval))){
@@ -188,20 +539,168 @@ iostat_draw(io_stat_item_t *mit)
 
                        if(items[i] && (t<(items[i]->time+iot->interval)) && (t>=items[i]->time) ){
                                frames[i]=items[i]->frames;
-                               bytes[i]=items[i]->bytes;
+                               counters[i]=items[i]->counter;
+                               float_counters[i]=items[i]->float_counter;
+                               double_counters[i]=items[i]->double_counter;
+                               num[i]=items[i]->num;
                        }
 
                        if(items[i]){
-                               more_items=1;
+                               more_items=TRUE;
                        }
                }
 
                if(more_items){
-                       printf("%03d.%03d-%03d.%03d  ",
-                               t/1000,t%1000,
-                               (t+iot->interval)/1000,(t+iot->interval)%1000);
+                       if(iot->interval==G_MAXINT32) {
+                               printf("000.000-         ");
+                       } else {
+                               printf("%04u.%06u-%04u.%06u  ",
+                                               (int)(t/1000000),(int)(t%1000000),
+                                               (int)((t+iot->interval)/1000000),
+                                               (int)((t+iot->interval)%1000000));
+                       }
                        for(i=0;i<iot->num_items;i++){
-                               printf("%6d %9d ",frames[i],bytes[i]);
+                               switch(iot->items[i].calc_type){
+                               case CALC_TYPE_FRAMES:
+                                       printf(" %15" G_GINT64_MODIFIER "u ", frames[i]);
+                                       break;
+                               case CALC_TYPE_BYTES:
+                                       printf(" %15" G_GINT64_MODIFIER "u ", counters[i]);
+                                       break;
+                               case CALC_TYPE_FRAMES_AND_BYTES:
+                                       printf(" %15" G_GINT64_MODIFIER "u  %15" G_GINT64_MODIFIER "u ", frames[i], counters[i]);
+                                       break;
+                               case CALC_TYPE_COUNT:
+                                       printf(" %15" G_GINT64_MODIFIER "u ", counters[i]);
+                                       break;
+                               case CALC_TYPE_SUM:
+                                       switch(proto_registrar_get_ftype(iot->items[i].hf_index)){
+                                       case FT_UINT8:
+                                       case FT_UINT16:
+                                       case FT_UINT24:
+                                       case FT_UINT32:
+                                       case FT_UINT64:
+                                       case FT_INT8:
+                                       case FT_INT16:
+                                       case FT_INT24:
+                                       case FT_INT32:
+                                       case FT_INT64:
+                                               printf(" %15" G_GINT64_MODIFIER "u ", counters[i]);
+                                               break;
+                                       case FT_FLOAT:
+                                               printf(" %f ", float_counters[i]);
+                                               break;
+                                       case FT_DOUBLE:
+                                               printf(" %f ", double_counters[i]);
+                                               break;
+                                       case FT_RELATIVE_TIME:
+                                               counters[i] = (counters[i]+500)/1000;
+                                               printf(" %8u.%06u ",
+                                                               (int)(counters[i]/1000000), (int)(counters[i]%1000000));
+                                               break;
+                                       }
+                                       break;
+                               case CALC_TYPE_MIN:
+                                       switch(proto_registrar_get_ftype(iot->items[i].hf_index)){
+                                       case FT_UINT8:
+                                       case FT_UINT16:
+                                       case FT_UINT24:
+                                       case FT_UINT32:
+                                       case FT_UINT64:
+                                               printf(" %15" G_GINT64_MODIFIER "u ", counters[i]);
+                                               break;
+                                       case FT_INT8:
+                                       case FT_INT16:
+                                       case FT_INT24:
+                                       case FT_INT32:
+                                       case FT_INT64:
+                                               printf(" %15" G_GINT64_MODIFIER "d ", counters[i]);
+                                               break;
+                                       case FT_FLOAT:
+                                               printf(" %f ", float_counters[i]);
+                                               break;
+                                       case FT_DOUBLE:
+                                               printf(" %f ", double_counters[i]);
+                                               break;
+                                       case FT_RELATIVE_TIME:
+                                               counters[i]=(counters[i]+500)/1000;
+                                               printf(" %8u.%06u ",
+                                                               (int)(counters[i]/1000000), (int)(counters[i]%1000000));
+                                               break;
+                                       }
+                                       break;
+                               case CALC_TYPE_MAX:
+                                       switch(proto_registrar_get_ftype(iot->items[i].hf_index)){
+                                       case FT_UINT8:
+                                       case FT_UINT16:
+                                       case FT_UINT24:
+                                       case FT_UINT32:
+                                       case FT_UINT64:
+                                               printf(" %15u ", (int)(counters[i]));
+                                               break;
+                                       case FT_INT8:
+                                       case FT_INT16:
+                                       case FT_INT24:
+                                       case FT_INT32:
+                                       case FT_INT64:
+                                               printf(" %15" G_GINT64_MODIFIER "d ", counters[i]);
+                                               break;
+                                       case FT_FLOAT:
+                                               printf(" %f ", float_counters[i]);
+                                               break;
+                                       case FT_DOUBLE:
+                                               printf(" %f ", double_counters[i]);
+                                               break;
+                                       case FT_RELATIVE_TIME:
+                                               counters[i]=(counters[i]+500)/1000;
+                                               printf(" %8u.%06u ",
+                                                               (int)(counters[i]/1000000), (int)(counters[i]%1000000));
+                                               break;
+                                       }
+                                       break;
+                               case CALC_TYPE_AVG:
+                                       if(num[i]==0){
+                                               num[i]=1;
+                                       }
+                                       switch(proto_registrar_get_ftype(iot->items[i].hf_index)){
+                                       case FT_UINT8:
+                                       case FT_UINT16:
+                                       case FT_UINT24:
+                                       case FT_UINT32:
+                                       case FT_UINT64:
+                                               printf(" %15" G_GINT64_MODIFIER "u ", counters[i]/num[i]);
+                                               break;
+                                       case FT_INT8:
+                                       case FT_INT16:
+                                       case FT_INT24:
+                                       case FT_INT32:
+                                       case FT_INT64:
+                                               printf(" %15" G_GINT64_MODIFIER "d ", counters[i]/num[i]);
+                                               break;
+                                       case FT_FLOAT:
+                                               printf(" %f ", float_counters[i]/num[i]);
+                                               break;
+                                       case FT_DOUBLE:
+                                               printf(" %f ", double_counters[i]/num[i]);
+                                               break;
+                                       case FT_RELATIVE_TIME:
+                                               counters[i]=((counters[i]/num[i])+500)/1000;
+                                               printf(" %8u.%06u ",
+                                                               (int)(counters[i]/1000000), (int)(counters[i]%1000000));
+                                               break;
+                                       }
+                                       break;
+
+                               case CALC_TYPE_LOAD:
+                                       switch(proto_registrar_get_ftype(iot->items[i].hf_index)){
+                                       case FT_RELATIVE_TIME:
+                                               printf("%8u.%06u ",
+                                                               (int)(counters[i]/iot->interval), (int)((counters[i]%iot->interval)*1000000/iot->interval));
+                                               break;
+                                       }
+                                       break;
+
+                               }
                        }
                        printf("\n");
                }
@@ -209,61 +708,231 @@ iostat_draw(io_stat_item_t *mit)
                t+=iot->interval;
        } while(more_items);
 
-       printf("===================================================================\n");
+       for(i=0;i<borderLen;i++){
+               printf("=");
+       }
+       printf("\n");
 
        g_free(items);
        g_free(frames);
-       g_free(bytes);
+       g_free(counters);
+       g_free(float_counters);
+       g_free(double_counters);
+       g_free(num);
 }
 
 
+typedef struct {
+       const char *func_name;
+       int calc_type;
+} calc_type_ent_t;
+
+static calc_type_ent_t calc_type_table[] = {
+       { "FRAMES", CALC_TYPE_FRAMES },
+       { "BYTES", CALC_TYPE_BYTES },
+       { "COUNT", CALC_TYPE_COUNT },
+       { "SUM", CALC_TYPE_SUM },
+       { "MIN", CALC_TYPE_MIN },
+       { "MAX", CALC_TYPE_MAX },
+       { "AVG", CALC_TYPE_AVG },
+       { "LOAD", CALC_TYPE_LOAD },
+       { NULL, 0 }
+};
+
 static void
-register_io_tap(io_stat_t *io, int i, char *filter)
+register_io_tap(io_stat_t *io, int i, const char *filter)
 {
+       GString *error_string;
+       const char *flt;
+       int j;
+       size_t namelen;
+       const char *p, *parenp;
+       char *field;
+       header_field_info *hfi;
+
        io->items[i].prev=&io->items[i];
        io->items[i].next=NULL;
        io->items[i].parent=io;
        io->items[i].time=0;
+       io->items[i].calc_type=CALC_TYPE_FRAMES_AND_BYTES;
        io->items[i].frames=0;
-       io->items[i].bytes=0;
+       io->items[i].counter=0;
+       io->items[i].num=0;
        io->filters[i]=filter;
+       flt=filter;
+
+       field=NULL;
+       hfi=NULL;
+       for(j=0; calc_type_table[j].func_name; j++){
+               namelen=strlen(calc_type_table[j].func_name);
+               if(filter && strncmp(filter, calc_type_table[j].func_name, namelen) == 0) {
+                       io->items[i].calc_type=calc_type_table[j].calc_type;
+                       if(*(filter+namelen)=='(') {
+                               p=filter+namelen+1;
+                               parenp=strchr(p, ')');
+                               if(!parenp){
+                                       fprintf(stderr, "\ntshark: Closing parenthesis missing from calculated expression.\n");
+                                       exit(10);
+                               }
+
+
+                               if(io->items[i].calc_type==CALC_TYPE_FRAMES || io->items[i].calc_type==CALC_TYPE_BYTES){
+                                       if(parenp!=p) {
+                                               fprintf(stderr, "\ntshark: %s does require or allow a field name within the parens.\n",
+                                                       calc_type_table[j].func_name);
+                                               exit(10);
+                                       }
+                               } else {
+                                       if(parenp==p) {
+                                                       /* bail out if a field name was not specified */
+                                                       fprintf(stderr, "\ntshark: You didn't specify a field name for %s(*).\n",
+                                                               calc_type_table[j].func_name);
+                                                       exit(10);
+                                       }
+                               }
+
+                               field=g_malloc(parenp-p+1);
+                               memcpy(field, p, parenp-p);
+                               field[parenp-p] = '\0';
+                               flt=parenp + 1;
+                               if (io->items[i].calc_type==CALC_TYPE_FRAMES || io->items[i].calc_type==CALC_TYPE_BYTES)
+                                       break;
+                               hfi=proto_registrar_get_byname(field);
+                               if(!hfi){
+                                       fprintf(stderr, "\ntshark: There is no field named '%s'.\n",
+                                               field);
+                                       g_free(field);
+                                       exit(10);
+                               }
+
+                               io->items[i].hf_index=hfi->id;
+                               break;
+                       }
+               } else {
+                       if (io->items[i].calc_type==CALC_TYPE_FRAMES || io->items[i].calc_type==CALC_TYPE_BYTES)
+                               flt="";
+               }
+       }
+       if(hfi && !(io->items[i].calc_type==CALC_TYPE_BYTES ||
+                           io->items[i].calc_type==CALC_TYPE_FRAMES ||
+                           io->items[i].calc_type==CALC_TYPE_FRAMES_AND_BYTES)){
+               /* check that the type is compatible */
+               switch(hfi->type){
+               case FT_UINT8:
+               case FT_UINT16:
+               case FT_UINT24:
+               case FT_UINT32:
+               case FT_UINT64:
+               case FT_INT8:
+               case FT_INT16:
+               case FT_INT24:
+               case FT_INT32:
+               case FT_INT64:
+                       /* these types support all calculations */
+                       break;
+               case FT_FLOAT:
+               case FT_DOUBLE:
+                       /* these types only support SUM, COUNT, MAX, MIN, AVG */
+                       switch(io->items[i].calc_type){
+                       case CALC_TYPE_SUM:
+                       case CALC_TYPE_COUNT:
+                       case CALC_TYPE_MAX:
+                       case CALC_TYPE_MIN:
+                       case CALC_TYPE_AVG:
+                               break;
+                       default:
+                               fprintf(stderr,
+                                       "\ntshark: %s is a float field, so %s(*) calculations are not supported on it.",
+                                       field,
+                                       calc_type_table[j].func_name);
+                               exit(10);
+                       }
+                       break;
+               case FT_RELATIVE_TIME:
+                       /* this type only supports SUM, COUNT, MAX, MIN, AVG, LOAD */
+                       switch(io->items[i].calc_type){
+                       case CALC_TYPE_SUM:
+                       case CALC_TYPE_COUNT:
+                       case CALC_TYPE_MAX:
+                       case CALC_TYPE_MIN:
+                       case CALC_TYPE_AVG:
+                       case CALC_TYPE_LOAD:
+                               break;
+                       default:
+                               fprintf(stderr,
+                                       "\ntshark: %s is a relative-time field, so %s(*) calculations are not supported on it.",
+                                   field,
+                                   calc_type_table[j].func_name);
+                               exit(10);
+                       }
+                       break;
+               default:
+                       /*
+                        * XXX - support all operations on floating-point
+                        * numbers?
+                        */
+                       if(io->items[i].calc_type!=CALC_TYPE_COUNT){
+                               fprintf(stderr,
+                                       "\ntshark: %s doesn't have integral values, so %s(*) calculations are not supported on it.\n",
+                                   field,
+                                   calc_type_table[j].func_name);
+                               exit(10);
+                       }
+                       break;
+               }
+               g_free(field);
+       }
 
-       if(register_tap_listener("frame", &io->items[i], filter, NULL, (void*)iostat_packet, i?NULL:(void*)iostat_draw)){
+       error_string=register_tap_listener("frame", &io->items[i], flt, TL_REQUIRES_PROTO_TREE, NULL, iostat_packet, i?NULL:iostat_draw);
+       if(error_string){
                g_free(io->items);
                g_free(io);
-               fprintf(stderr,"tethereal: iostat_init() failed to attach tap\n");
+               fprintf(stderr, "\ntshark: Couldn't register io,stat tap: %s\n",
+                   error_string->str);
+               g_string_free(error_string, TRUE);
                exit(1);
        }
 }
 
-void
-iostat_init(char *optarg)
+static void
+iostat_init(const char *optarg, void* userdata _U_)
 {
-       float interval_float;
-       gint32 interval; 
-       int pos=0;
+       gdouble interval_float;
+       gint64 interval;
+       int idx=0;
        io_stat_t *io;
-       char *filter=NULL;
-
-       if(sscanf(optarg,"io,stat,%f,%n",&interval_float,&pos)==1){
-               if(pos){
-                       filter=optarg+pos;
+       const char *filter=NULL;
+
+       if(sscanf(optarg,"io,stat,%lf,%n",&interval_float,&idx)==1){
+               if(idx){
+                       if(*(optarg+idx)==',')
+                               filter=optarg+idx+1;
+                       else
+                               filter=optarg+idx;
                } else {
                        filter=NULL;
                }
        } else {
-               fprintf(stderr, "tethereal: invalid \"-z io,stat,<interval>[,<filter>]\" argument\n");
+               fprintf(stderr, "\ntshark: invalid \"-z io,stat,<interval>[,<filter>]\" argument\n");
                exit(1);
        }
 
+       /* if interval is 0, calculate statistics over the whole file
+        * by setting the interval to G_MAXINT32
+        */
+       if(interval_float==0) {
+               interval=G_MAXINT32;
+       } else {
+               /* make interval be number of us rounded to the nearest integer*/
+               interval=(gint64)(interval_float*1000000.0+0.5);
+       }
 
-       /* make interval be number of ms */
-       interval=interval_float*1000;   
        if(interval<1){
-               fprintf(stderr, "tethereal:iostat_init()  interval must be >=0.001 seconds\n");
+               fprintf(stderr,
+                       "\ntshark: \"-z\" interval must be >=0.000001 seconds or \"0\" for the entire capture duration.\n");
                exit(10);
        }
-       
+
        io=g_malloc(sizeof(io_stat_t));
        io->interval=interval;
        if((!filter)||(filter[0]==0)){
@@ -273,7 +942,8 @@ iostat_init(char *optarg)
 
                register_io_tap(io, 0, NULL);
        } else {
-               char *str,*pos,*tmp;
+               const char *str,*pos;
+               char *tmp;
                int i;
                /* find how many ',' separated filters we have */
                str=filter;
@@ -286,7 +956,7 @@ iostat_init(char *optarg)
                io->items=g_malloc(sizeof(io_stat_item_t)*io->num_items);
                io->filters=g_malloc(sizeof(char *)*io->num_items);
 
-               /* for each filter, register a tap listener */          
+               /* for each filter, register a tap listener */
                i=0;
                str=filter;
                do{
@@ -294,24 +964,21 @@ iostat_init(char *optarg)
                        if(pos==str){
                                register_io_tap(io, i, NULL);
                        } else if(pos==NULL) {
-                               tmp=g_malloc(strlen(str)+1);
-                               strcpy(tmp,str);
+                               tmp=g_strdup(str);
                                register_io_tap(io, i, tmp);
                        } else {
                                tmp=g_malloc((pos-str)+1);
-                               strncpy(tmp,str,(pos-str));
-                               tmp[pos-str]=0;
+                               g_strlcpy(tmp,str,(pos-str)+1);
                                register_io_tap(io, i, tmp);
                        }
                        str=pos+1;
-                       i++;                    
+                       i++;
                } while(pos);
-       }                       
+       }
 }
 
 void
 register_tap_listener_iostat(void)
 {
-       register_ethereal_tap("io,stat,", iostat_init);
+       register_stat_cmd_arg("io,stat,", iostat_init, NULL);
 }
-