429 lines
11 KiB
C
429 lines
11 KiB
C
/* tap_h225counter.c
|
|
* h225 message counter for wireshark
|
|
* Copyright 2003 Lars Roland
|
|
*
|
|
* Wireshark - Network traffic analyzer
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
* Copyright 1998 Gerald Combs
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*/
|
|
|
|
#include "config.h"
|
|
|
|
#include <stdio.h>
|
|
#include <stdlib.h>
|
|
#include <string.h>
|
|
|
|
#include "epan/packet.h"
|
|
#include <epan/tap.h>
|
|
#include <epan/stat_tap_ui.h>
|
|
#include "epan/value_string.h"
|
|
#include <epan/dissectors/packet-h225.h>
|
|
|
|
/* following values represent the size of their valuestring arrays */
|
|
|
|
#define RAS_MSG_TYPES 33
|
|
#define CS_MSG_TYPES 13
|
|
|
|
#define GRJ_REASONS 8
|
|
#define RRJ_REASONS 18
|
|
#define URQ_REASONS 6
|
|
#define URJ_REASONS 6
|
|
#define ARJ_REASONS 22
|
|
#define BRJ_REASONS 8
|
|
#define DRQ_REASONS 3
|
|
#define DRJ_REASONS 4
|
|
#define LRJ_REASONS 16
|
|
#define IRQNAK_REASONS 4
|
|
#define REL_CMP_REASONS 26
|
|
#define FACILITY_REASONS 11
|
|
|
|
void register_tap_listener_h225counter(void);
|
|
|
|
/* used to keep track of the statistics for an entire program interface */
|
|
typedef struct _h225counter_t {
|
|
char *filter;
|
|
guint32 ras_msg[RAS_MSG_TYPES + 1];
|
|
guint32 cs_msg[CS_MSG_TYPES + 1];
|
|
guint32 grj_reason[GRJ_REASONS + 1];
|
|
guint32 rrj_reason[RRJ_REASONS + 1];
|
|
guint32 urq_reason[URQ_REASONS + 1];
|
|
guint32 urj_reason[URJ_REASONS + 1];
|
|
guint32 arj_reason[ARJ_REASONS + 1];
|
|
guint32 brj_reason[BRJ_REASONS + 1];
|
|
guint32 drq_reason[DRQ_REASONS + 1];
|
|
guint32 drj_reason[DRJ_REASONS + 1];
|
|
guint32 lrj_reason[LRJ_REASONS + 1];
|
|
guint32 irqnak_reason[IRQNAK_REASONS + 1];
|
|
guint32 rel_cmp_reason[REL_CMP_REASONS + 1];
|
|
guint32 facility_reason[FACILITY_REASONS + 1];
|
|
} h225counter_t;
|
|
|
|
|
|
static void
|
|
h225counter_reset(void *phs)
|
|
{
|
|
h225counter_t *hs = (h225counter_t *)phs;
|
|
char *save_filter = hs->filter;
|
|
|
|
memset(hs, 0, sizeof(h225counter_t));
|
|
|
|
hs->filter = save_filter;
|
|
}
|
|
|
|
static int
|
|
h225counter_packet(void *phs, packet_info *pinfo _U_, epan_dissect_t *edt _U_, const void *phi)
|
|
{
|
|
h225counter_t *hs = (h225counter_t *)phs;
|
|
const h225_packet_info *pi = (const h225_packet_info *)phi;
|
|
|
|
switch (pi->msg_type) {
|
|
|
|
case H225_RAS:
|
|
if (pi->msg_tag == -1) { /* uninitialized */
|
|
return 0;
|
|
}
|
|
else if (pi->msg_tag >= RAS_MSG_TYPES) { /* unknown */
|
|
hs->ras_msg[RAS_MSG_TYPES]++;
|
|
}
|
|
else {
|
|
hs->ras_msg[pi->msg_tag]++;
|
|
}
|
|
|
|
/* Look for reason tag */
|
|
if (pi->reason == -1) { /* uninitialized */
|
|
break;
|
|
}
|
|
|
|
switch (pi->msg_tag) {
|
|
|
|
case 2: /* GRJ */
|
|
if (pi->reason < GRJ_REASONS)
|
|
hs->grj_reason[pi->reason]++;
|
|
else
|
|
hs->grj_reason[GRJ_REASONS]++;
|
|
break;
|
|
case 5: /* RRJ */
|
|
if (pi->reason < RRJ_REASONS)
|
|
hs->rrj_reason[pi->reason]++;
|
|
else
|
|
hs->rrj_reason[RRJ_REASONS]++;
|
|
break;
|
|
case 6: /* URQ */
|
|
if (pi->reason < URQ_REASONS)
|
|
hs->urq_reason[pi->reason]++;
|
|
else
|
|
hs->urq_reason[URQ_REASONS]++;
|
|
break;
|
|
case 8: /* URJ */
|
|
if (pi->reason < URJ_REASONS)
|
|
hs->urj_reason[pi->reason]++;
|
|
else
|
|
hs->urj_reason[URJ_REASONS]++;
|
|
break;
|
|
case 11: /* ARJ */
|
|
if (pi->reason < ARJ_REASONS)
|
|
hs->arj_reason[pi->reason]++;
|
|
else
|
|
hs->arj_reason[ARJ_REASONS]++;
|
|
break;
|
|
case 14: /* BRJ */
|
|
if (pi->reason < BRJ_REASONS)
|
|
hs->brj_reason[pi->reason]++;
|
|
else
|
|
hs->brj_reason[BRJ_REASONS]++;
|
|
break;
|
|
case 15: /* DRQ */
|
|
if (pi->reason < DRQ_REASONS)
|
|
hs->drq_reason[pi->reason]++;
|
|
else
|
|
hs->drq_reason[DRQ_REASONS]++;
|
|
break;
|
|
case 17: /* DRJ */
|
|
if (pi->reason < DRJ_REASONS)
|
|
hs->drj_reason[pi->reason]++;
|
|
else
|
|
hs->drj_reason[DRJ_REASONS]++;
|
|
break;
|
|
case 20: /* LRJ */
|
|
if (pi->reason < LRJ_REASONS)
|
|
hs->lrj_reason[pi->reason]++;
|
|
else
|
|
hs->lrj_reason[LRJ_REASONS]++;
|
|
break;
|
|
case 29: /* IRQ Nak */
|
|
if (pi->reason < IRQNAK_REASONS)
|
|
hs->irqnak_reason[pi->reason]++;
|
|
else
|
|
hs->irqnak_reason[IRQNAK_REASONS]++;
|
|
break;
|
|
|
|
default:
|
|
/* do nothing */
|
|
break;
|
|
}
|
|
|
|
break;
|
|
|
|
case H225_CS:
|
|
if (pi->msg_tag == -1) { /* uninitialized */
|
|
return 0;
|
|
}
|
|
else if (pi->msg_tag >= CS_MSG_TYPES) { /* unknown */
|
|
hs->cs_msg[CS_MSG_TYPES]++;
|
|
}
|
|
else {
|
|
hs->cs_msg[pi->msg_tag]++;
|
|
}
|
|
|
|
/* Look for reason tag */
|
|
if (pi->reason == -1) { /* uninitialized */
|
|
break;
|
|
}
|
|
|
|
switch (pi->msg_tag) {
|
|
|
|
case 5: /* ReleaseComplete */
|
|
if (pi->reason < REL_CMP_REASONS)
|
|
hs->rel_cmp_reason[pi->reason]++;
|
|
else
|
|
hs->rel_cmp_reason[REL_CMP_REASONS]++;
|
|
break;
|
|
case 6: /* Facility */
|
|
if (pi->reason < FACILITY_REASONS)
|
|
hs->facility_reason[pi->reason]++;
|
|
else
|
|
hs->facility_reason[FACILITY_REASONS]++;
|
|
break;
|
|
default:
|
|
/* do nothing */
|
|
break;
|
|
}
|
|
|
|
break;
|
|
|
|
default:
|
|
return 0;
|
|
}
|
|
|
|
return 1;
|
|
}
|
|
|
|
|
|
static void
|
|
h225counter_draw(void *phs)
|
|
{
|
|
h225counter_t *hs = (h225counter_t *)phs;
|
|
int i, j;
|
|
gchar* tmp_str;
|
|
|
|
printf("================== H225 Message and Reason Counter ==================\n");
|
|
printf("RAS-Messages:\n");
|
|
for (i=0; i<=RAS_MSG_TYPES; i++) {
|
|
if (hs->ras_msg[i] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, i, h225_RasMessage_vals, "unknown ras-messages (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->ras_msg[i]);
|
|
wmem_free(NULL, tmp_str);
|
|
/* reason counter */
|
|
switch (i) {
|
|
case 2: /* GRJ */
|
|
for (j=0; j<=GRJ_REASONS; j++) {
|
|
if (hs->grj_reason[j] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, j, GatekeeperRejectReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->grj_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
case 5: /* RRJ */
|
|
for (j=0; j<=RRJ_REASONS; j++) {
|
|
if (hs->rrj_reason[j] != 0 ) {
|
|
tmp_str = val_to_str_wmem(NULL, j, RegistrationRejectReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->rrj_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
case 6: /* URQ */
|
|
for (j=0; j<=URQ_REASONS; j++) {
|
|
if (hs->urq_reason[j] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, j, UnregRequestReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->urq_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
case 8: /* URJ */
|
|
for (j=0; j<=URJ_REASONS; j++) {
|
|
if (hs->urj_reason[j] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, j, UnregRejectReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->urj_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
case 11: /* ARJ */
|
|
for (j=0; j<=ARJ_REASONS; j++) {
|
|
if (hs->arj_reason[j] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, j, AdmissionRejectReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->arj_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
case 14: /* BRJ */
|
|
for (j=0; j<=BRJ_REASONS; j++) {
|
|
if (hs->brj_reason[j] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, j, BandRejectReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->brj_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
case 15: /* DRQ */
|
|
for (j=0; j<=DRQ_REASONS; j++) {
|
|
if (hs->drq_reason[j] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, j, DisengageReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->drq_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
case 17: /* DRJ */
|
|
for (j=0; j<=DRJ_REASONS; j++) {
|
|
if (hs->drj_reason[j] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, j, DisengageRejectReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->drj_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
case 20: /* LRJ */
|
|
for (j=0; j<=LRJ_REASONS; j++) {
|
|
if (hs->lrj_reason[j] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, j, DisengageRejectReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->lrj_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
case 29: /* IRQNak */
|
|
for (j=0; j<= IRQNAK_REASONS; j++) {
|
|
if (hs->irqnak_reason[j] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, j, InfoRequestNakReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->irqnak_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
/* end of reason counter*/
|
|
}
|
|
}
|
|
printf("Call Signalling:\n");
|
|
for (i=0; i<=CS_MSG_TYPES; i++) {
|
|
if (hs->cs_msg[i] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, i, T_h323_message_body_vals, "unknown cs-messages (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->cs_msg[i]);
|
|
wmem_free(NULL, tmp_str);
|
|
/* reason counter */
|
|
switch (i) {
|
|
case 5: /* ReleaseComplete */
|
|
for (j=0; j<=REL_CMP_REASONS; j++) {
|
|
if (hs->rel_cmp_reason[j] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, j, h225_ReleaseCompleteReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->rel_cmp_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
case 6: /* Facility */
|
|
for (j=0; j<=FACILITY_REASONS; j++) {
|
|
if (hs->facility_reason[j] != 0) {
|
|
tmp_str = val_to_str_wmem(NULL, j, FacilityReason_vals, "unknown reason (%d)");
|
|
printf(" %s : %u\n", tmp_str, hs->facility_reason[j]);
|
|
wmem_free(NULL, tmp_str);
|
|
}
|
|
}
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
printf("=====================================================================\n");
|
|
}
|
|
|
|
|
|
static void
|
|
h225counter_init(const char *opt_arg, void *userdata _U_)
|
|
{
|
|
h225counter_t *hs;
|
|
GString *error_string;
|
|
|
|
hs = g_new(h225counter_t, 1);
|
|
if (!strncmp(opt_arg, "h225,counter,", 13)) {
|
|
hs->filter = g_strdup(opt_arg+13);
|
|
} else {
|
|
hs->filter = NULL;
|
|
}
|
|
|
|
h225counter_reset(hs);
|
|
|
|
error_string = register_tap_listener("h225", hs, hs->filter, 0, NULL, h225counter_packet, h225counter_draw);
|
|
if (error_string) {
|
|
/* error, we failed to attach to the tap. clean up */
|
|
g_free(hs->filter);
|
|
g_free(hs);
|
|
|
|
fprintf(stderr, "tshark: Couldn't register h225,counter tap: %s\n",
|
|
error_string->str);
|
|
g_string_free(error_string, TRUE);
|
|
exit(1);
|
|
}
|
|
}
|
|
|
|
static stat_tap_ui h225counter_ui = {
|
|
REGISTER_STAT_GROUP_GENERIC,
|
|
NULL,
|
|
"h225,counter",
|
|
h225counter_init,
|
|
-1,
|
|
0,
|
|
NULL
|
|
};
|
|
|
|
void
|
|
register_tap_listener_h225counter(void)
|
|
{
|
|
register_stat_tap_ui(&h225counter_ui, NULL);
|
|
}
|
|
|
|
/*
|
|
* Editor modelines - http://www.wireshark.org/tools/modelines.html
|
|
*
|
|
* Local variables:
|
|
* c-basic-offset: 8
|
|
* tab-width: 8
|
|
* indent-tabs-mode: t
|
|
* End:
|
|
*
|
|
* vi: set shiftwidth=8 tabstop=8 noexpandtab:
|
|
* :indentSize=8:tabSize=8:noTabs=false:
|
|
*/
|