709 lines
21 KiB
C
709 lines
21 KiB
C
/* dcerpc_stat.c
|
|
* dcerpc_stat 2002 Ronnie Sahlberg
|
|
*
|
|
* $Id$
|
|
*
|
|
* Wireshark - Network traffic analyzer
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
* Copyright 1998 Gerald Combs
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*/
|
|
|
|
/* This module provides rpc call/reply SRT statistics to Wireshark,
|
|
* and displays them graphically.
|
|
* It is only used by Wireshark and not tshark
|
|
*
|
|
* It serves as an example on how to use the tap api.
|
|
*/
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
# include "config.h"
|
|
#endif
|
|
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
|
|
#include <gtk/gtk.h>
|
|
|
|
#include <epan/packet_info.h>
|
|
#include <epan/epan.h>
|
|
#include <epan/stat_cmd_args.h>
|
|
#include <epan/tap.h>
|
|
#include <epan/dissectors/packet-dcerpc.h>
|
|
|
|
#include "../stat_menu.h"
|
|
#include "../simple_dialog.h"
|
|
|
|
#include "gtk/gui_stat_menu.h"
|
|
#include "gtk/dlg_utils.h"
|
|
#include "gtk/gui_utils.h"
|
|
#include "gtk/filter_dlg.h"
|
|
#include "gtk/stock_icons.h"
|
|
#include "gtk/service_response_time_table.h"
|
|
#include "gtk/gtkglobals.h"
|
|
#include "gtk/main.h"
|
|
#include "gtk/filter_autocomplete.h"
|
|
|
|
/* used to keep track of the statistics for an entire program interface */
|
|
typedef struct _dcerpcstat_t {
|
|
GtkWidget *win;
|
|
srt_stat_table srt_table;
|
|
const char *prog;
|
|
e_uuid_t uuid;
|
|
guint16 ver;
|
|
int num_procedures;
|
|
} dcerpcstat_t;
|
|
|
|
|
|
static gboolean
|
|
uuid_equal(e_uuid_t *uuid1, e_uuid_t *uuid2)
|
|
{
|
|
if( (uuid1->Data1 != uuid2->Data1)
|
|
||(uuid1->Data2 != uuid2->Data2)
|
|
||(uuid1->Data3 != uuid2->Data3)
|
|
||(uuid1->Data4[0] != uuid2->Data4[0])
|
|
||(uuid1->Data4[1] != uuid2->Data4[1])
|
|
||(uuid1->Data4[2] != uuid2->Data4[2])
|
|
||(uuid1->Data4[3] != uuid2->Data4[3])
|
|
||(uuid1->Data4[4] != uuid2->Data4[4])
|
|
||(uuid1->Data4[5] != uuid2->Data4[5])
|
|
||(uuid1->Data4[6] != uuid2->Data4[6])
|
|
||(uuid1->Data4[7] != uuid2->Data4[7]) ){
|
|
return FALSE;
|
|
}
|
|
return TRUE;
|
|
}
|
|
|
|
static char *
|
|
dcerpcstat_gen_title(dcerpcstat_t *rs)
|
|
{
|
|
char *title;
|
|
|
|
title = g_strdup_printf("DCE-RPC Service Response Time statistics for %s major version %u: %s", rs->prog, rs->ver, cf_get_display_name(&cfile));
|
|
return title;
|
|
}
|
|
|
|
static void
|
|
dcerpcstat_set_title(dcerpcstat_t *rs)
|
|
{
|
|
char *title;
|
|
|
|
title = dcerpcstat_gen_title(rs);
|
|
gtk_window_set_title(GTK_WINDOW(rs->win), title);
|
|
g_free(title);
|
|
}
|
|
|
|
static void
|
|
dcerpcstat_reset(void *rs_arg)
|
|
{
|
|
dcerpcstat_t *rs = rs_arg;
|
|
|
|
reset_srt_table_data(&rs->srt_table);
|
|
dcerpcstat_set_title(rs);
|
|
}
|
|
|
|
|
|
static gboolean
|
|
dcerpcstat_packet(void *rs_arg, packet_info *pinfo, epan_dissect_t *edt _U_, const void *ri_arg)
|
|
{
|
|
dcerpcstat_t *rs = rs_arg;
|
|
const dcerpc_info *ri = ri_arg;
|
|
|
|
if(!ri->call_data){
|
|
return FALSE;
|
|
}
|
|
if(!ri->call_data->req_frame){
|
|
/* we have not seen the request so we don't know the delta*/
|
|
return FALSE;
|
|
}
|
|
if(ri->call_data->opnum >= rs->num_procedures){
|
|
/* don't handle this since its outside of known table */
|
|
return FALSE;
|
|
}
|
|
|
|
/* we are only interested in reply packets */
|
|
if(ri->ptype != PDU_RESP){
|
|
return FALSE;
|
|
}
|
|
|
|
/* we are only interested in certain program/versions */
|
|
if( (!uuid_equal( (&ri->call_data->uuid), (&rs->uuid)))
|
|
||(ri->call_data->ver != rs->ver)){
|
|
return FALSE;
|
|
}
|
|
|
|
|
|
add_srt_table_data(&rs->srt_table, ri->call_data->opnum, &ri->call_data->req_time, pinfo);
|
|
|
|
|
|
return TRUE;
|
|
}
|
|
|
|
static void
|
|
dcerpcstat_draw(void *rs_arg)
|
|
{
|
|
dcerpcstat_t *rs = rs_arg;
|
|
|
|
draw_srt_table_data(&rs->srt_table);
|
|
}
|
|
|
|
|
|
/* since the gtk2 implementation of tap is multithreaded we must protect
|
|
* remove_tap_listener() from modifying the list while draw_tap_listener()
|
|
* is running. the other protected block is in main.c
|
|
*
|
|
* there should not be any other critical regions in gtk2
|
|
*/
|
|
static void
|
|
win_destroy_cb(GtkWindow *win _U_, gpointer data)
|
|
{
|
|
dcerpcstat_t *rs = (dcerpcstat_t *)data;
|
|
|
|
protect_thread_critical_region();
|
|
remove_tap_listener(rs);
|
|
unprotect_thread_critical_region();
|
|
|
|
free_srt_table_data(&rs->srt_table);
|
|
g_free(rs);
|
|
}
|
|
|
|
|
|
|
|
/* When called, this function will create a new instance of gtk-dcerpcstat.
|
|
*/
|
|
static void
|
|
gtk_dcerpcstat_init(const char *optarg, void* userdata _U_)
|
|
{
|
|
dcerpcstat_t *rs;
|
|
guint32 i, max_procs;
|
|
char *title_string;
|
|
char *filter_string;
|
|
GtkWidget *vbox;
|
|
GtkWidget *stat_label;
|
|
GtkWidget *filter_label;
|
|
GtkWidget *bbox;
|
|
GtkWidget *close_bt;
|
|
dcerpc_sub_dissector *procs;
|
|
e_uuid_t uuid;
|
|
guint d1,d2,d3,d40,d41,d42,d43,d44,d45,d46,d47;
|
|
int major, minor;
|
|
guint16 ver;
|
|
int pos = 0;
|
|
const char *filter = NULL;
|
|
GString *error_string;
|
|
int hf_opnum;
|
|
|
|
/*
|
|
* XXX - DCE RPC statistics are maintained only by major version,
|
|
* not by major and minor version, so the minor version number is
|
|
* ignored.
|
|
*
|
|
* Should we just stop supporting minor version numbers here?
|
|
* Or should we allow it to be omitted? Or should we keep
|
|
* separate statistics for different minor version numbers,
|
|
* and allow the minor version number to be omitted, and
|
|
* report aggregate statistics for all minor version numbers
|
|
* if it's omitted?
|
|
*/
|
|
if(sscanf(
|
|
optarg,
|
|
"dcerpc,srt,%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x,%d.%d,%n",
|
|
&d1,&d2,&d3,&d40,&d41,&d42,&d43,&d44,&d45,&d46,&d47,&major,&minor,&pos)
|
|
== 13) {
|
|
uuid.Data1 = d1;
|
|
uuid.Data2 = d2;
|
|
uuid.Data3 = d3;
|
|
uuid.Data4[0] = d40;
|
|
uuid.Data4[1] = d41;
|
|
uuid.Data4[2] = d42;
|
|
uuid.Data4[3] = d43;
|
|
uuid.Data4[4] = d44;
|
|
uuid.Data4[5] = d45;
|
|
uuid.Data4[6] = d46;
|
|
uuid.Data4[7] = d47;
|
|
if(pos) {
|
|
filter = optarg+pos;
|
|
} else {
|
|
filter = NULL;
|
|
}
|
|
} else {
|
|
fprintf(stderr, "wireshark: invalid \"-z dcerpc,srt,<uuid>,<major version>.<minor version>[,<filter>]\" argument\n");
|
|
exit(1);
|
|
}
|
|
if ((major < 0) || (major > 65535)) {
|
|
fprintf(stderr,"wireshark: dcerpcstat_init() Major version number %d is invalid - must be positive and <= 65535\n", major);
|
|
exit(1);
|
|
}
|
|
if ((minor < 0) || (minor > 65535)) {
|
|
fprintf(stderr,"wireshark: dcerpcstat_init() Minor version number %d is invalid - must be positive and <= 65535\n", minor);
|
|
exit(1);
|
|
}
|
|
ver = major;
|
|
|
|
rs = g_malloc(sizeof(dcerpcstat_t));
|
|
rs->prog = dcerpc_get_proto_name(&uuid, ver);
|
|
if(!rs->prog){
|
|
g_free(rs);
|
|
fprintf(stderr,
|
|
"wireshark: dcerpcstat_init() Protocol with uuid:%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x v%u not supported\n",
|
|
uuid.Data1,uuid.Data2,uuid.Data3,uuid.Data4[0],uuid.Data4[1],uuid.Data4[2],uuid.Data4[3],uuid.Data4[4],uuid.Data4[5],uuid.Data4[6],uuid.Data4[7],ver);
|
|
exit(1);
|
|
}
|
|
hf_opnum = dcerpc_get_proto_hf_opnum(&uuid, ver);
|
|
procs = dcerpc_get_proto_sub_dissector(&uuid, ver);
|
|
rs->uuid = uuid;
|
|
rs->ver = ver;
|
|
|
|
rs->win = dlg_window_new("dcerpc-stat"); /* transient_for top_level */
|
|
gtk_window_set_destroy_with_parent(GTK_WINDOW(rs->win), TRUE);
|
|
|
|
dcerpcstat_set_title(rs);
|
|
gtk_window_set_default_size(GTK_WINDOW(rs->win), 550, 400);
|
|
|
|
vbox = gtk_vbox_new(FALSE, 3);
|
|
gtk_container_add(GTK_CONTAINER(rs->win), vbox);
|
|
gtk_container_set_border_width(GTK_CONTAINER(vbox), 12);
|
|
|
|
title_string = dcerpcstat_gen_title(rs);
|
|
stat_label = gtk_label_new(title_string);
|
|
g_free(title_string);
|
|
gtk_box_pack_start(GTK_BOX(vbox), stat_label, FALSE, FALSE, 0);
|
|
|
|
filter_string = g_strdup_printf("Filter: %s",filter ? filter : "");
|
|
filter_label = gtk_label_new(filter_string);
|
|
g_free(filter_string);
|
|
gtk_label_set_line_wrap(GTK_LABEL(filter_label), TRUE);
|
|
gtk_box_pack_start(GTK_BOX(vbox), filter_label, FALSE, FALSE, 0);
|
|
|
|
for(i=0,max_procs=0;procs[i].name;i++){
|
|
if(procs[i].num>max_procs){
|
|
max_procs = procs[i].num;
|
|
}
|
|
}
|
|
rs->num_procedures = max_procs+1;
|
|
|
|
/* We must display TOP LEVEL Widget before calling init_srt_table() */
|
|
gtk_widget_show_all(rs->win);
|
|
|
|
if(hf_opnum != -1){
|
|
init_srt_table(&rs->srt_table, max_procs+1, vbox, proto_registrar_get_nth(hf_opnum)->abbrev);
|
|
} else {
|
|
init_srt_table(&rs->srt_table, max_procs+1, vbox, NULL);
|
|
}
|
|
|
|
for(i=0;i<(max_procs+1);i++){
|
|
int j;
|
|
const char *proc_name;
|
|
|
|
proc_name = "unknown";
|
|
for(j=0;procs[j].name;j++){
|
|
if (procs[j].num == i){
|
|
proc_name = procs[j].name;
|
|
}
|
|
}
|
|
|
|
init_srt_table_row(&rs->srt_table, i, proc_name);
|
|
}
|
|
|
|
|
|
error_string = register_tap_listener("dcerpc", rs, filter, 0, dcerpcstat_reset, dcerpcstat_packet, dcerpcstat_draw);
|
|
if(error_string){
|
|
/* error, we failed to attach to the tap. clean up */
|
|
simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, "%s", error_string->str);
|
|
g_string_free(error_string, TRUE);
|
|
free_srt_table_data(&rs->srt_table);
|
|
g_free(rs);
|
|
return;
|
|
}
|
|
|
|
/* Button row. */
|
|
bbox = dlg_button_row_new(GTK_STOCK_CLOSE, NULL);
|
|
gtk_box_pack_end(GTK_BOX(vbox), bbox, FALSE, FALSE, 0);
|
|
|
|
close_bt = g_object_get_data(G_OBJECT(bbox), GTK_STOCK_CLOSE);
|
|
window_set_cancel_button(rs->win, close_bt, window_cancel_button_cb);
|
|
|
|
g_signal_connect(rs->win, "delete_event", G_CALLBACK(window_delete_event_cb), NULL);
|
|
g_signal_connect(rs->win, "destroy", G_CALLBACK(win_destroy_cb), rs);
|
|
|
|
gtk_widget_show_all(rs->win);
|
|
window_present(rs->win);
|
|
|
|
cf_retap_packets(&cfile);
|
|
gdk_window_raise(rs->win->window);
|
|
}
|
|
|
|
|
|
|
|
static e_uuid_t *dcerpc_uuid_program;
|
|
static guint16 dcerpc_version;
|
|
static GtkWidget *dlg = NULL;
|
|
static GtkWidget *filter_entry;
|
|
static dcerpc_uuid_key *current_uuid_key;
|
|
static dcerpc_uuid_value *current_uuid_value;
|
|
static dcerpc_uuid_key *new_uuid_key;
|
|
static dcerpc_uuid_value *new_uuid_value;
|
|
|
|
static void
|
|
dcerpcstat_start_button_clicked(GtkWidget *item _U_, gpointer data _U_)
|
|
{
|
|
GString *str;
|
|
const char *filter;
|
|
|
|
if (dcerpc_uuid_program == NULL) {
|
|
simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, "Please select a program");
|
|
return;
|
|
}
|
|
str = g_string_new("dcerpc,srt");
|
|
g_string_append_printf(str,
|
|
",%08x-%04x-%04x-%02x%02x-%02x%02x%02x%02x%02x%02x,%u.%u",
|
|
dcerpc_uuid_program->Data1, dcerpc_uuid_program->Data2,
|
|
dcerpc_uuid_program->Data3,
|
|
dcerpc_uuid_program->Data4[0], dcerpc_uuid_program->Data4[1],
|
|
dcerpc_uuid_program->Data4[2], dcerpc_uuid_program->Data4[3],
|
|
dcerpc_uuid_program->Data4[4], dcerpc_uuid_program->Data4[5],
|
|
dcerpc_uuid_program->Data4[6], dcerpc_uuid_program->Data4[7],
|
|
dcerpc_version, 0);
|
|
filter = gtk_entry_get_text(GTK_ENTRY(filter_entry));
|
|
if(filter[0] != 0){
|
|
g_string_append_printf(str, ",%s", filter);
|
|
}
|
|
|
|
gtk_dcerpcstat_init(str->str,NULL);
|
|
g_string_free(str, TRUE);
|
|
}
|
|
|
|
|
|
static void
|
|
dcerpcstat_version_select(GtkWidget *vers_combo_box, gpointer user_data _U_)
|
|
{
|
|
dcerpc_uuid_key *k;
|
|
|
|
if (! ws_combo_box_get_active_pointer(GTK_COMBO_BOX(vers_combo_box), (gpointer)&k)) {
|
|
g_assert_not_reached(); /* Programming error: somehow no active item */
|
|
}
|
|
|
|
dcerpc_version = k->ver;
|
|
}
|
|
|
|
static void
|
|
dcerpcstat_find_vers(gpointer *key, gpointer *value _U_, gpointer user_data)
|
|
{
|
|
dcerpc_uuid_key *k = (dcerpc_uuid_key *)key;
|
|
GtkWidget *vers_combo_box = user_data;
|
|
char vs[5];
|
|
|
|
if(!uuid_equal(&(k->uuid), dcerpc_uuid_program)){
|
|
return;
|
|
}
|
|
g_snprintf(vs, sizeof(vs), "%u", k->ver);
|
|
ws_combo_box_append_text_and_pointer(GTK_COMBO_BOX(vers_combo_box), vs, k);
|
|
}
|
|
|
|
static void
|
|
dcerpcstat_program_select(GtkWidget *prog_combo_box, gpointer user_data)
|
|
{
|
|
dcerpc_uuid_key *k;
|
|
GtkWidget *vers_combo_box;
|
|
|
|
vers_combo_box = user_data;
|
|
|
|
if (! ws_combo_box_get_active_pointer(GTK_COMBO_BOX(prog_combo_box), (gpointer)&k)) {
|
|
g_assert_not_reached(); /* Programming error: somehow no active item */
|
|
}
|
|
|
|
g_signal_handlers_disconnect_by_func(vers_combo_box, G_CALLBACK(dcerpcstat_version_select), NULL );
|
|
ws_combo_box_clear_text_and_pointer(GTK_COMBO_BOX(vers_combo_box));
|
|
|
|
g_assert((k != NULL) && "dcerpc_stat: invalid selection"); /* Somehow selected top level ?? */
|
|
dcerpc_uuid_program = &(k->uuid);
|
|
|
|
/* re-create version menu */
|
|
g_signal_handlers_disconnect_by_func(vers_combo_box, G_CALLBACK(dcerpcstat_version_select), NULL );
|
|
ws_combo_box_clear_text_and_pointer(GTK_COMBO_BOX(vers_combo_box));
|
|
|
|
g_hash_table_foreach(dcerpc_uuids, (GHFunc)dcerpcstat_find_vers, vers_combo_box);
|
|
|
|
g_signal_connect(vers_combo_box, "changed", G_CALLBACK(dcerpcstat_version_select), NULL);
|
|
ws_combo_box_set_active(GTK_COMBO_BOX(vers_combo_box), 0); /* default: triggers dcerpcstat_version_select callback */
|
|
|
|
}
|
|
|
|
static GtkTreeIter
|
|
dcerpcstat_add_program_to_menu(dcerpc_uuid_key *k, dcerpc_uuid_value *v, GtkWidget *prog_combo_box, int program_item_index)
|
|
{
|
|
static GtkTreeIter iter;
|
|
char str[64];
|
|
|
|
switch(program_item_index%15){
|
|
case 0:
|
|
g_snprintf(str,sizeof(str),"%s ...",v->name);
|
|
iter = ws_combo_box_append_text_and_pointer_full(
|
|
GTK_COMBO_BOX(prog_combo_box), NULL, str, NULL, FALSE); /* top-level entries are insensitive */
|
|
break;
|
|
|
|
default:
|
|
break;
|
|
}
|
|
|
|
return ws_combo_box_append_text_and_pointer_full(
|
|
GTK_COMBO_BOX(prog_combo_box), &iter, v->name, k, TRUE);
|
|
}
|
|
|
|
static void
|
|
dcerpcstat_find_next_program(gpointer *key, gpointer *value, gpointer *user_data _U_)
|
|
{
|
|
dcerpc_uuid_key *k = (dcerpc_uuid_key *)key;
|
|
dcerpc_uuid_value *v = (dcerpc_uuid_value *)value;
|
|
|
|
/* first time called, just set new_uuid to this one */
|
|
if((current_uuid_key==NULL) && (new_uuid_key==NULL)){
|
|
new_uuid_key = k;
|
|
new_uuid_value = v;
|
|
return;
|
|
}
|
|
|
|
/* if we haven't got a current one yet, just check the new
|
|
and scan for the first one alphabetically */
|
|
if(current_uuid_key==NULL){
|
|
if(strcmp(new_uuid_value->name, v->name)>0){
|
|
new_uuid_key = k;
|
|
new_uuid_value = v;
|
|
return;
|
|
}
|
|
return;
|
|
}
|
|
|
|
/* searching for the next one we are only interested in those
|
|
that sorts alphabetically after the current one */
|
|
if(strcmp(current_uuid_value->name, v->name) >= 0){
|
|
/* this one doesnt so just skip it */
|
|
return;
|
|
}
|
|
|
|
/* is it the first potential new entry? */
|
|
if(new_uuid_key==NULL){
|
|
new_uuid_key = k;
|
|
new_uuid_value = v;
|
|
return;
|
|
}
|
|
|
|
/* does it sort before the current new one? */
|
|
if(strcmp(new_uuid_value->name, v->name) > 0){
|
|
new_uuid_key = k;
|
|
new_uuid_value = v;
|
|
return;
|
|
}
|
|
|
|
return;
|
|
}
|
|
|
|
|
|
static void
|
|
dlg_destroy_cb(GtkWidget *w _U_, gpointer user_data _U_)
|
|
{
|
|
dlg = NULL;
|
|
}
|
|
|
|
|
|
static void
|
|
gtk_dcerpcstat_cb(GtkWidget *w _U_, gpointer d _U_)
|
|
{
|
|
GtkWidget *dlg_box;
|
|
GtkWidget *prog_box, *prog_label, *prog_combo_box;
|
|
GtkWidget *vers_label, *vers_combo_box;
|
|
GtkWidget *filter_box, *filter_bt;
|
|
GtkWidget *bbox, *start_button, *cancel_button;
|
|
GtkCellRenderer *cell_renderer;
|
|
GtkTreeIter program_first_item_iter;
|
|
const char *filter;
|
|
int program_item_index = 0;
|
|
|
|
static construct_args_t args = {
|
|
"Service Response Time Statistics Filter",
|
|
FALSE,
|
|
FALSE,
|
|
FALSE
|
|
};
|
|
|
|
/* if the window is already open, bring it to front and
|
|
un-minimize it, as necessary */
|
|
if(dlg){
|
|
reactivate_window(dlg);
|
|
return;
|
|
}
|
|
|
|
dlg = dlg_window_new("Wireshark: Compute DCE-RPC SRT statistics");
|
|
gtk_window_set_default_size(GTK_WINDOW(dlg), 400, -1);
|
|
|
|
dlg_box = gtk_vbox_new(FALSE, 10);
|
|
gtk_container_set_border_width(GTK_CONTAINER(dlg_box), 10);
|
|
gtk_container_add(GTK_CONTAINER(dlg), dlg_box);
|
|
gtk_widget_show(dlg_box);
|
|
|
|
/* Program box */
|
|
prog_box = gtk_hbox_new(FALSE, 3);
|
|
|
|
/* Program label */
|
|
gtk_container_set_border_width(GTK_CONTAINER(prog_box), 10);
|
|
prog_label = gtk_label_new("Program:");
|
|
gtk_box_pack_start(GTK_BOX(prog_box), prog_label, FALSE, FALSE, 0);
|
|
gtk_widget_show(prog_label);
|
|
|
|
/* Program menu */
|
|
dcerpc_uuid_program = NULL; /* default: no program selected */
|
|
|
|
/* The "program combo box" is implemented with a two-level tree.
|
|
Each top-level of the tree has (up to) 15 selectable "program name"
|
|
children and shows the name of the first child of that entry
|
|
as "child_name ...". Each of the top-level entries can be expanded
|
|
(to show the children) but is "insensitive": ie: cannot be selected.
|
|
(dcerpcstat_add_program_to_menu() does the actual work to add entries
|
|
to the combo box).
|
|
XXX: A simpler alternative might be to just do away with all the two-level
|
|
complexity and just use a standard ws_combo_box... even though the
|
|
list of "program names" is quite large.
|
|
XXX: The gtkrc file distributed with Windows Wireshark has the
|
|
"appears-as-list" GtkComboBox style property set to 1 and thus
|
|
on Windows the entries for this combo box will appear as a tree-view.
|
|
The default is 0(FALSE). In this case the the combo box entries will
|
|
display as a menu with sub-menus.
|
|
A possibility would be to set "appears-as-list" to 0 just for this
|
|
particular combo box on Windows so that the entries will appear as a
|
|
menu even on Windows).
|
|
*/
|
|
prog_combo_box = ws_combo_box_new_text_and_pointer_full(&cell_renderer);
|
|
{
|
|
/* XXX: Hack So that the top-level insensitive entries don't show
|
|
as "grayed out"; The "foreground normal" color is used instead.
|
|
This may not really be necessary but seems better to me.
|
|
*/
|
|
GtkStyle *s;
|
|
s = gtk_widget_get_style(prog_combo_box);
|
|
g_object_set(cell_renderer,
|
|
"foreground-gdk", &(s->fg[GTK_STATE_NORMAL]),
|
|
"foreground-set", TRUE,
|
|
NULL);
|
|
}
|
|
|
|
current_uuid_key = NULL;
|
|
current_uuid_value = NULL;
|
|
do {
|
|
new_uuid_key = NULL;
|
|
new_uuid_value = NULL;
|
|
g_hash_table_foreach(dcerpc_uuids, (GHFunc)dcerpcstat_find_next_program, NULL);
|
|
if(new_uuid_key){
|
|
GtkTreeIter tmp_iter;
|
|
tmp_iter = dcerpcstat_add_program_to_menu(new_uuid_key, new_uuid_value,
|
|
prog_combo_box, program_item_index);
|
|
if (program_item_index == 0)
|
|
program_first_item_iter = tmp_iter;
|
|
program_item_index += 1;
|
|
}
|
|
current_uuid_key = new_uuid_key;
|
|
current_uuid_value = new_uuid_value;
|
|
} while(new_uuid_key != NULL);
|
|
gtk_box_pack_start(GTK_BOX(prog_box), prog_combo_box, TRUE, TRUE, 0);
|
|
gtk_widget_show(prog_combo_box);
|
|
|
|
/* Version label */
|
|
gtk_container_set_border_width(GTK_CONTAINER(prog_box), 10);
|
|
vers_label = gtk_label_new("Version:");
|
|
gtk_box_pack_start(GTK_BOX(prog_box), vers_label, FALSE, FALSE, 0);
|
|
gtk_widget_show(vers_label);
|
|
|
|
/* Version combo-box */
|
|
/* Note: version combo box rows set when dcerpcstat_program_select() callback invoked */
|
|
vers_combo_box = ws_combo_box_new_text_and_pointer();
|
|
gtk_box_pack_start(GTK_BOX(prog_box), vers_combo_box, TRUE, TRUE, 0);
|
|
gtk_widget_show(vers_combo_box);
|
|
|
|
g_signal_connect(prog_combo_box, "changed", G_CALLBACK(dcerpcstat_program_select), vers_combo_box);
|
|
#if 0 /* Don't select an active entry given the way the drop down treeview appears if a default (active) entry is set */
|
|
ws_combo_box_set_active_iter(GTK_COMBO_BOX(prog_combo_box), &program_first_item_iter); /* triggers callback */
|
|
#endif
|
|
gtk_box_pack_start(GTK_BOX(dlg_box), prog_box, TRUE, TRUE, 0);
|
|
gtk_widget_show(prog_box);
|
|
|
|
/* Filter box */
|
|
filter_box = gtk_hbox_new(FALSE, 3);
|
|
|
|
/* Filter label */
|
|
filter_bt = gtk_button_new_from_stock(WIRESHARK_STOCK_DISPLAY_FILTER_ENTRY);
|
|
g_signal_connect(filter_bt, "clicked", G_CALLBACK(display_filter_construct_cb), &args);
|
|
gtk_box_pack_start(GTK_BOX(filter_box), filter_bt, FALSE, FALSE, 0);
|
|
gtk_widget_show(filter_bt);
|
|
|
|
/* Filter entry */
|
|
filter_entry = gtk_entry_new();
|
|
g_signal_connect(filter_entry, "changed", G_CALLBACK(filter_te_syntax_check_cb), NULL);
|
|
g_object_set_data(G_OBJECT(filter_box), E_FILT_AUTOCOMP_PTR_KEY, NULL);
|
|
g_signal_connect(filter_entry, "key-press-event", G_CALLBACK (filter_string_te_key_pressed_cb), NULL);
|
|
g_signal_connect(dlg, "key-press-event", G_CALLBACK (filter_parent_dlg_key_pressed_cb), NULL);
|
|
gtk_box_pack_start(GTK_BOX(filter_box), filter_entry, TRUE, TRUE, 0);
|
|
filter = gtk_entry_get_text(GTK_ENTRY(main_display_filter_widget));
|
|
if(filter){
|
|
gtk_entry_set_text(GTK_ENTRY(filter_entry), filter);
|
|
} else {
|
|
colorize_filter_te_as_empty(filter_entry);
|
|
}
|
|
gtk_widget_show(filter_entry);
|
|
|
|
gtk_box_pack_start(GTK_BOX(dlg_box), filter_box, TRUE, TRUE, 0);
|
|
gtk_widget_show(filter_box);
|
|
|
|
g_object_set_data(G_OBJECT(filter_bt), E_FILT_TE_PTR_KEY, filter_entry);
|
|
|
|
/* button box */
|
|
bbox = dlg_button_row_new(WIRESHARK_STOCK_CREATE_STAT, GTK_STOCK_CANCEL, NULL);
|
|
gtk_box_pack_start(GTK_BOX(dlg_box), bbox, FALSE, FALSE, 0);
|
|
gtk_widget_show(bbox);
|
|
|
|
start_button = g_object_get_data(G_OBJECT(bbox), WIRESHARK_STOCK_CREATE_STAT);
|
|
g_signal_connect_swapped(start_button, "clicked",
|
|
G_CALLBACK(dcerpcstat_start_button_clicked), NULL);
|
|
|
|
cancel_button = g_object_get_data(G_OBJECT(bbox), GTK_STOCK_CANCEL);
|
|
window_set_cancel_button(dlg, cancel_button, window_cancel_button_cb);
|
|
|
|
g_signal_connect(dlg, "delete_event", G_CALLBACK(window_delete_event_cb), NULL);
|
|
g_signal_connect(dlg, "destroy", G_CALLBACK(dlg_destroy_cb), NULL);
|
|
|
|
/* Catch the "activate" signal on the filter text entry, so that
|
|
if the user types Return there, we act as if the "Create Stat"
|
|
button had been selected, as happens if Return is typed if some
|
|
widget that *doesn't* handle the Return key has the input
|
|
focus. */
|
|
dlg_set_activate(filter_entry, start_button);
|
|
|
|
gtk_widget_grab_default(start_button );
|
|
|
|
/* Give the initial focus to the "Filter" entry box. */
|
|
gtk_widget_grab_focus(filter_entry);
|
|
|
|
gtk_widget_show_all(dlg);
|
|
window_present(dlg);
|
|
}
|
|
|
|
void
|
|
register_tap_listener_gtkdcerpcstat(void)
|
|
{
|
|
register_stat_cmd_arg("dcerpc,srt,", gtk_dcerpcstat_init,NULL);
|
|
|
|
register_stat_menu_item("DCE-RPC...", REGISTER_STAT_GROUP_RESPONSE_TIME,
|
|
gtk_dcerpcstat_cb, NULL, NULL, NULL);
|
|
}
|