2013-10-24 22:52:30 +00:00
|
|
|
/* tap-sequence-analysis.h
|
|
|
|
* Flow sequence analysis
|
|
|
|
*
|
|
|
|
* Copied from gtk/graph_analysis.h
|
2014-02-25 20:42:35 +00:00
|
|
|
*
|
2013-10-24 22:52:30 +00:00
|
|
|
* Copyright 2004, Verso Technologies Inc.
|
|
|
|
* By Alejandro Vaquero <alejandrovaquero@yahoo.com>
|
|
|
|
*
|
|
|
|
* based on rtp_analysis.c and io_stat
|
|
|
|
*
|
|
|
|
*
|
|
|
|
* Wireshark - Network traffic analyzer
|
|
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
|
|
* Copyright 1998 Gerald Combs
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU General Public License
|
|
|
|
* as published by the Free Software Foundation; either version 2
|
|
|
|
* of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
* along with this program; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#ifndef __TAP_SEQUENCE_ANALYSIS_H__
|
|
|
|
#define __TAP_SEQUENCE_ANALYSIS_H__
|
|
|
|
|
|
|
|
#include <glib.h>
|
|
|
|
|
|
|
|
#include "cfile.h"
|
|
|
|
#include "epan/address.h"
|
|
|
|
|
|
|
|
#ifdef __cplusplus
|
|
|
|
extern "C" {
|
|
|
|
#endif /* __cplusplus */
|
|
|
|
|
|
|
|
#define MAX_NUM_NODES 40
|
|
|
|
|
|
|
|
typedef enum seq_analysis_type_ {
|
|
|
|
SEQ_ANALYSIS_ANY,
|
|
|
|
SEQ_ANALYSIS_TCP,
|
|
|
|
SEQ_ANALYSIS_VOIP
|
|
|
|
} seq_analysis_type;
|
|
|
|
|
|
|
|
/** defines an entry for the graph analysis */
|
|
|
|
typedef struct _seq_analysis_item {
|
2015-10-25 21:52:30 +00:00
|
|
|
guint32 frame_number;
|
2013-10-24 22:52:30 +00:00
|
|
|
address src_addr;
|
|
|
|
guint16 port_src;
|
|
|
|
address dst_addr;
|
|
|
|
guint16 port_dst;
|
2014-10-06 03:40:42 +00:00
|
|
|
gchar *frame_label; /**< the label on top of the arrow */
|
|
|
|
gchar *time_str; /**< timestamp */
|
|
|
|
gchar *comment; /**< a comment that appears at the right of the graph */
|
|
|
|
guint16 conv_num; /**< the conversation number, each conversation will be colored */
|
|
|
|
gboolean display; /**< indicate if the packet is displayed or not in the graph */
|
2014-11-19 00:21:42 +00:00
|
|
|
guint src_node; /**< this is used by graph_analysis.c to identify the node */
|
|
|
|
guint dst_node; /**< a node is an IP address that will be displayed in columns */
|
2014-10-06 03:40:42 +00:00
|
|
|
guint16 line_style; /**< the arrow line width in pixels*/
|
2015-08-18 06:44:04 +00:00
|
|
|
gchar *protocol; /**< the label of the protocol defined in the IP packet */
|
2013-10-24 22:52:30 +00:00
|
|
|
} seq_analysis_item_t;
|
|
|
|
|
|
|
|
/** defines the graph analysis structure */
|
|
|
|
typedef struct _seq_analysis_info {
|
|
|
|
seq_analysis_type type; /**< sequence type */
|
|
|
|
gboolean all_packets; /**< all packets vs only displayed */
|
|
|
|
gboolean any_addr; /**< any addr (DL+net) vs net-only */
|
|
|
|
int nconv; /**< number of conversations in the list */
|
2014-12-13 00:51:40 +00:00
|
|
|
GQueue* items; /**< list of seq_analysis_info_t */
|
|
|
|
GHashTable *ht; /**< hash table of seq_analysis_info_t */
|
2013-10-24 22:52:30 +00:00
|
|
|
address nodes[MAX_NUM_NODES]; /**< horizontal node list */
|
|
|
|
guint32 num_nodes; /**< actual number of nodes */
|
|
|
|
} seq_analysis_info_t;
|
|
|
|
|
2014-12-13 00:51:40 +00:00
|
|
|
#if 0
|
|
|
|
#define SEQ_ANALYSIS_DEBUG(...) { \
|
|
|
|
char *SEQ_ANALYSIS_DEBUG_MSG = g_strdup_printf(__VA_ARGS__); \
|
2015-10-04 09:52:26 +00:00
|
|
|
g_warning("sequence analysis: %s:%d %s", G_STRFUNC, __LINE__, SEQ_ANALYSIS_DEBUG_MSG); \
|
2014-12-13 00:51:40 +00:00
|
|
|
g_free(SEQ_ANALYSIS_DEBUG_MSG); \
|
|
|
|
}
|
|
|
|
#else
|
|
|
|
#define SEQ_ANALYSIS_DEBUG()
|
|
|
|
#endif
|
|
|
|
|
2014-11-24 20:51:13 +00:00
|
|
|
/** Create and initialize a seq_analysis_info_t struct
|
|
|
|
* @return A pointer to a newly allocated seq_analysis_info_t struct.
|
|
|
|
*/
|
|
|
|
seq_analysis_info_t *sequence_analysis_info_new(void);
|
|
|
|
|
|
|
|
/** Free a seq_analysis_info_t struct.
|
|
|
|
* @param sainfo A pointer to the seq_analysis_info_t struct to be freed.
|
|
|
|
*/
|
|
|
|
void sequence_analysis_info_free(seq_analysis_info_t * sainfo);
|
|
|
|
|
2013-10-24 22:52:30 +00:00
|
|
|
/** Fill in the segment list for sequence analysis
|
|
|
|
*
|
|
|
|
* @param cf Capture file to scan
|
2013-12-02 13:46:39 +00:00
|
|
|
* @param sainfo Sequence analysis information. A valid type must be set.
|
2013-10-24 22:52:30 +00:00
|
|
|
*/
|
|
|
|
void sequence_analysis_list_get(capture_file *cf, seq_analysis_info_t *sainfo);
|
|
|
|
|
2014-11-19 00:21:42 +00:00
|
|
|
void sequence_analysis_list_sort(seq_analysis_info_t *sainfo);
|
|
|
|
|
2013-10-24 22:52:30 +00:00
|
|
|
/** Free the segment list
|
|
|
|
*
|
2013-12-02 13:46:39 +00:00
|
|
|
* @param sainfo Sequence analysis information.
|
2013-10-24 22:52:30 +00:00
|
|
|
*/
|
|
|
|
void sequence_analysis_list_free(seq_analysis_info_t *sainfo);
|
|
|
|
|
|
|
|
/** Fill in the node address list
|
|
|
|
*
|
2013-12-02 13:46:39 +00:00
|
|
|
* @param sainfo Sequence analysis information.
|
2013-10-24 22:52:30 +00:00
|
|
|
* @return The number of transaction items (not nodes) processed.
|
|
|
|
*/
|
|
|
|
int sequence_analysis_get_nodes(seq_analysis_info_t *sainfo);
|
|
|
|
|
|
|
|
/** Write an ASCII version of the sequence diagram to a file.
|
|
|
|
*
|
|
|
|
* @param pathname Pathname of the file to write.
|
2013-12-02 13:46:39 +00:00
|
|
|
* @param sainfo Sequence analysis information.
|
2013-10-24 22:52:30 +00:00
|
|
|
* @param cf Capture file associated with the diagram.
|
|
|
|
* @param first_node Start drawing at this node.
|
|
|
|
* @return TRUE on success, FALSE on failure.
|
|
|
|
*/
|
2013-11-12 01:08:08 +00:00
|
|
|
gboolean sequence_analysis_dump_to_file(const char *pathname, seq_analysis_info_t *sainfo, capture_file *cf, unsigned int first_node);
|
2013-10-24 22:52:30 +00:00
|
|
|
|
|
|
|
#ifdef __cplusplus
|
|
|
|
}
|
|
|
|
#endif /* __cplusplus */
|
|
|
|
|
|
|
|
#endif /* __TAP_SEQUENCE_ANALYSIS_H__ */
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Editor modelines
|
|
|
|
*
|
|
|
|
* Local Variables:
|
|
|
|
* c-basic-offset: 4
|
|
|
|
* tab-width: 8
|
|
|
|
* indent-tabs-mode: nil
|
|
|
|
* End:
|
|
|
|
*
|
|
|
|
* ex: set shiftwidth=4 tabstop=8 expandtab:
|
|
|
|
* :indentSize=4:tabSize=8:noTabs=true:
|
|
|
|
*/
|