/* voip_calls.c * VoIP calls summary addition for ethereal * * $Id$ * * Copyright 2004, Ericsson, Spain * By Francisco Alcoba * * based on h323_calls.c * Copyright 2004, Iskratel, Ltd, Kranj * By Miha Jemec * * H323, RTP, RTP Event, MGCP, AudioCodes (ISDN PRI and CAS), T38 and Graph Support * By Alejandro Vaquero, alejandro.vaquero@verso.com * Copyright 2005, Verso Technologies Inc. * * Ethereal - Network traffic analyzer * By Gerald Combs * Copyright 1998 Gerald Combs * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. */ #ifdef HAVE_CONFIG_H # include "config.h" #endif #include #include "graph_analysis.h" #include "voip_calls.h" #include "voip_calls_dlg.h" #include "main.h" #include "globals.h" #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include #include "alert_box.h" #include "simple_dialog.h" const char *voip_call_state_name[7]={ "CALL SETUP", "RINGING", "IN CALL", "CANCELLED", "COMPLETED", "REJECTED", "UNKNOWN" }; /* defines whether we can consider the call active */ const char *voip_protocol_name[7]={ "SIP", "ISUP", "H323", "MGCP", "AC_ISDN", "AC_CAS", "T38" }; typedef struct { gchar *frame_label; gchar *comment; } graph_str; #define H245_MAX 6 typedef struct { guint32 frame_num; gint8 labels_count; graph_str labels[H245_MAX]; } h245_labels_t; static h245_labels_t h245_labels; /****************************************************************************/ /* the one and only global voip_calls_tapinfo_t structure */ static voip_calls_tapinfo_t the_tapinfo_struct = {0, NULL, 0, NULL, 0, 0, 0, 0, NULL, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0}; /* the one and only global voip_rtp_tapinfo_t structure */ static voip_rtp_tapinfo_t the_tapinfo_rtp_struct = {0, NULL, 0, 0}; /****************************************************************************/ /* when there is a [re]reading of packet's */ void voip_calls_reset(voip_calls_tapinfo_t *tapinfo) { voip_calls_info_t *strinfo; sip_calls_info_t *tmp_sipinfo; h323_calls_info_t *tmp_h323info; h245_address_t *h245_add; graph_analysis_item_t *graph_item; GList* list; GList* list2; /* free the data items first */ list = g_list_first(tapinfo->strinfo_list); while (list) { strinfo = list->data; g_free(strinfo->from_identity); g_free(strinfo->to_identity); g_free((void *)(strinfo->initial_speaker.data)); if (strinfo->protocol == VOIP_SIP){ tmp_sipinfo = strinfo->prot_info; g_free(tmp_sipinfo->call_identifier); } if (strinfo->protocol == VOIP_H323){ tmp_h323info = strinfo->prot_info; g_free(tmp_h323info->guid); /* free the H245 list address */ list2 = g_list_first(tmp_h323info->h245_list); while (list2) { h245_add=list2->data; g_free((void *)h245_add->h245_address.data); g_free(list2->data); list2 = g_list_next(list2); } g_list_free(tmp_h323info->h245_list); tmp_h323info->h245_list = NULL; } g_free(strinfo->prot_info); g_free(list->data); list = g_list_next(list); } g_list_free(tapinfo->strinfo_list); tapinfo->strinfo_list = NULL; tapinfo->ncalls = 0; tapinfo->npackets = 0; tapinfo->start_packets = 0; tapinfo->completed_calls = 0; tapinfo->rejected_calls = 0; /* free the graph data items first */ list = g_list_first(tapinfo->graph_analysis->list); while (list) { graph_item = list->data; g_free(graph_item->frame_label); g_free(graph_item->comment); g_free((void *)graph_item->src_addr.data); g_free((void *)graph_item->dst_addr.data); g_free(list->data); list = g_list_next(list); } g_list_free(tapinfo->graph_analysis->list); tapinfo->graph_analysis->nconv = 0; tapinfo->graph_analysis->list = NULL; ++(tapinfo->launch_count); return; } /****************************************************************************/ void graph_analysis_data_init(void){ the_tapinfo_struct.graph_analysis = g_malloc(sizeof(graph_analysis_info_t)); the_tapinfo_struct.graph_analysis->nconv = 0; the_tapinfo_struct.graph_analysis->list = NULL; } /****************************************************************************/ /* Add a new item into the graph */ static int add_to_graph(voip_calls_tapinfo_t *tapinfo _U_, packet_info *pinfo, const gchar *frame_label, gchar *comment, guint16 call_num, address *src_addr, address *dst_addr, guint16 line_style) { graph_analysis_item_t *gai; gai = g_malloc(sizeof(graph_analysis_item_t)); gai->frame_num = pinfo->fd->num; gai->time= nstime_to_sec(&pinfo->fd->rel_ts); COPY_ADDRESS(&(gai->src_addr),src_addr); COPY_ADDRESS(&(gai->dst_addr),dst_addr); gai->port_src=pinfo->srcport; gai->port_dst=pinfo->destport; if (frame_label != NULL) gai->frame_label = g_strdup(frame_label); else gai->frame_label = g_strdup(""); if (comment != NULL) gai->comment = g_strdup(comment); else gai->comment = g_strdup(""); gai->conv_num=call_num; gai->line_style=line_style; gai->display=FALSE; tapinfo->graph_analysis->list = g_list_append(tapinfo->graph_analysis->list, gai); return 1; } /****************************************************************************/ /* Append str to frame_label and comment in a graph item */ /* return 0 if the frame_num is not in the graph list */ static int append_to_frame_graph(voip_calls_tapinfo_t *tapinfo _U_, guint32 frame_num, const gchar *new_frame_label, const gchar *new_comment) { graph_analysis_item_t *gai; GList* list; gchar *tmp_str = NULL; gchar *tmp_str2 = NULL; list = g_list_first(tapinfo->graph_analysis->list); while (list) { gai = list->data; if (gai->frame_num == frame_num){ tmp_str = gai->frame_label; tmp_str2 = gai->comment; if (new_frame_label != NULL){ gai->frame_label = g_strdup_printf("%s %s", gai->frame_label, new_frame_label); g_free(tmp_str); } if (new_comment != NULL){ gai->comment = g_strdup_printf("%s %s", gai->comment, new_comment); g_free(tmp_str2); } break; } list = g_list_next (list); } if (tmp_str == NULL) return 0; /* it is not in the list */ return 1; } /****************************************************************************/ /* Change the frame_label and comment in a graph item if not NULL*/ /* return 0 if the frame_num is not in the graph list */ static int change_frame_graph(voip_calls_tapinfo_t *tapinfo _U_, guint32 frame_num, const gchar *new_frame_label, const gchar *new_comment) { graph_analysis_item_t *gai; GList* list; gchar *tmp_str = NULL; gchar *tmp_str2 = NULL; list = g_list_first(tapinfo->graph_analysis->list); while (list) { gai = list->data; if (gai->frame_num == frame_num){ tmp_str = gai->frame_label; tmp_str2 = gai->comment; if (new_frame_label != NULL){ gai->frame_label = g_strdup(new_frame_label); g_free(tmp_str); } if (new_comment != NULL){ gai->comment = g_strdup(new_comment); g_free(tmp_str2); } break; } list = g_list_next (list); } if (tmp_str == NULL) return 0; /* it is not in the list */ return 1; } /****************************************************************************/ /* Change all the graph items with call_num to new_call_num */ static guint change_call_num_graph(voip_calls_tapinfo_t *tapinfo _U_, guint16 call_num, guint16 new_call_num) { graph_analysis_item_t *gai; GList* list; guint items_changed; items_changed = 0; list = g_list_first(tapinfo->graph_analysis->list); while (list) { gai = list->data; if (gai->conv_num == call_num){ gai->conv_num = new_call_num; items_changed++; } list = g_list_next (list); } return items_changed; } /****************************************************************************/ /* Insert the item in the graph list */ void insert_to_graph(voip_calls_tapinfo_t *tapinfo _U_, packet_info *pinfo, const gchar *frame_label, gchar *comment, guint16 call_num, address *src_addr, address *dst_addr, guint16 line_style, double time, guint32 frame_num) { graph_analysis_item_t *gai, *new_gai; GList* list; guint item_num; gboolean inserted; new_gai = g_malloc(sizeof(graph_analysis_item_t)); new_gai->frame_num = frame_num; new_gai->time= time; COPY_ADDRESS(&(new_gai->src_addr),src_addr); COPY_ADDRESS(&(new_gai->dst_addr),dst_addr); new_gai->port_src=pinfo->srcport; new_gai->port_dst=pinfo->destport; if (frame_label != NULL) new_gai->frame_label = g_strdup(frame_label); else new_gai->frame_label = g_strdup(""); if (comment != NULL) new_gai->comment = g_strdup(comment); else new_gai->comment = g_strdup(""); new_gai->conv_num=call_num; new_gai->line_style=line_style; new_gai->display=FALSE; item_num = 0; inserted = FALSE; list = g_list_first(tapinfo->graph_analysis->list); while (list) { gai = list->data; if (gai->frame_num > frame_num){ the_tapinfo_struct.graph_analysis->list = g_list_insert(the_tapinfo_struct.graph_analysis->list, new_gai, item_num); inserted = TRUE; break; } list = g_list_next (list); item_num++; } if ( !inserted) tapinfo->graph_analysis->list = g_list_append(tapinfo->graph_analysis->list, new_gai); } /****************************************************************************/ /* ***************************TAP for RTP Events*****************************/ /****************************************************************************/ static guint32 rtp_evt_frame_num = 0; static guint8 rtp_evt = 0; static gboolean rtp_evt_end = FALSE; /*static guint32 rtp_evt_setup_frame_num = 0;*/ /****************************************************************************/ /* whenever a rtp event packet is seen by the tap listener */ static int rtp_event_packet(void *ptr _U_, packet_info *pinfo _U_, epan_dissect_t *edt _U_, const void *rtp_event_info) { const struct _rtp_event_info *pi = rtp_event_info; /* do not consider RTP events packets without a setup frame */ if (pi->info_setup_frame_num == 0){ return 0; } rtp_evt_frame_num = pinfo->fd->num; rtp_evt = pi->info_rtp_evt; rtp_evt_end = pi->info_end; return 0; } /****************************************************************************/ static gboolean have_rtp_event_tap_listener=FALSE; void rtp_event_init_tap(void) { GString *error_string; if(have_rtp_event_tap_listener==FALSE) { error_string = register_tap_listener("rtpevent", &(the_tapinfo_rtp_struct.rtp_event_dummy), NULL, NULL, rtp_event_packet, NULL ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_rtp_event_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_rtp_event(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_rtp_struct.rtp_event_dummy)); unprotect_thread_critical_region(); have_rtp_event_tap_listener=FALSE; } /****************************************************************************/ /* ***************************TAP for RTP **********************************/ /****************************************************************************/ /****************************************************************************/ /* when there is a [re]reading of RTP packet's */ static void voip_rtp_reset(void *ptr _U_) { voip_rtp_tapinfo_t *tapinfo = &the_tapinfo_rtp_struct; GList* list; /* free the data items first */ list = g_list_first(tapinfo->list); while (list) { g_free(list->data); list = g_list_next(list); } g_list_free(tapinfo->list); tapinfo->list = NULL; tapinfo->nstreams = 0; return; } /****************************************************************************/ /* whenever a RTP packet is seen by the tap listener */ static int RTP_packet( void *ptr _U_, packet_info *pinfo, epan_dissect_t *edt _U_, const void *RTPinfo) { voip_rtp_tapinfo_t *tapinfo = &the_tapinfo_rtp_struct; voip_rtp_stream_info_t *tmp_listinfo; voip_rtp_stream_info_t *strinfo = NULL; GList* list; struct _rtp_conversation_info *p_conv_data = NULL; const struct _rtp_info *pi = RTPinfo; /* do not consider RTP packets without a setup frame */ if (pi->info_setup_frame_num == 0){ return 0; } /* check wether we already have a RTP stream with this setup frame and ssrc in the list */ list = g_list_first(tapinfo->list); while (list) { tmp_listinfo=list->data; if ( (tmp_listinfo->setup_frame_number == pi->info_setup_frame_num) && (tmp_listinfo->ssrc == pi->info_sync_src) && (tmp_listinfo->end_stream == FALSE)){ /* if the payload type has changed, we mark the stream as finished to create a new one this is to show multiple payload changes in the Graph for example for DTMF RFC2833 */ if ( tmp_listinfo->pt != pi->info_payload_type ) { tmp_listinfo->end_stream = TRUE; } else { strinfo = (voip_rtp_stream_info_t*)(list->data); break; } } list = g_list_next (list); } /* if this is a duplicated RTP Event End, just return */ if ((rtp_evt_frame_num == pinfo->fd->num) && !strinfo && (rtp_evt_end == TRUE)) { return 0; } /* not in the list? then create a new entry */ if (strinfo==NULL){ strinfo = g_malloc(sizeof(voip_rtp_stream_info_t)); COPY_ADDRESS(&(strinfo->src_addr), &(pinfo->src)); strinfo->src_port = pinfo->srcport; COPY_ADDRESS(&(strinfo->dest_addr), &(pinfo->dst)); strinfo->dest_port = pinfo->destport; strinfo->ssrc = pi->info_sync_src; strinfo->end_stream = FALSE; strinfo->pt = pi->info_payload_type; strinfo->pt_str = NULL; /* if it is dynamic payload, let use the conv data to see if it is defined */ if ( (strinfo->pt>95) && (strinfo->pt<128) ) { /* Use existing packet info if available */ p_conv_data = p_get_proto_data(pinfo->fd, proto_get_id_by_filter_name("rtp")); if (p_conv_data) strinfo->pt_str = g_strdup(g_hash_table_lookup(p_conv_data->rtp_dyn_payload, &strinfo->pt)); } if (!strinfo->pt_str) strinfo->pt_str = g_strdup(val_to_str(strinfo->pt, rtp_payload_type_short_vals, "%u")); strinfo->npackets = 0; strinfo->first_frame_num = pinfo->fd->num; strinfo->start_rel_sec = pinfo->fd->rel_ts.secs; strinfo->start_rel_usec = pinfo->fd->rel_ts.nsecs/1000; strinfo->setup_frame_number = pi->info_setup_frame_num; strinfo->rtp_event = -1; tapinfo->list = g_list_append(tapinfo->list, strinfo); } if (strinfo!=NULL){ /* Add the info to the existing RTP stream */ strinfo->npackets++; strinfo->stop_rel_sec = pinfo->fd->rel_ts.secs; strinfo->stop_rel_usec = pinfo->fd->rel_ts.nsecs/1000; /* process RTP Event */ if (rtp_evt_frame_num == pinfo->fd->num) { strinfo->rtp_event = rtp_evt; if (rtp_evt_end == TRUE) { strinfo->end_stream = TRUE; } } } the_tapinfo_struct.redraw = TRUE; return 1; } /****************************************************************************/ /* whenever a redraw in the RTP tap listener */ static void RTP_packet_draw(void *prs _U_) { voip_rtp_tapinfo_t *rtp_tapinfo = &the_tapinfo_rtp_struct; GList* rtp_streams_list; voip_rtp_stream_info_t *rtp_listinfo; GList* voip_calls_graph_list; guint item; graph_analysis_item_t *gai; graph_analysis_item_t *new_gai; guint16 conv_num; guint32 duration; /* add each rtp stream to the graph */ rtp_streams_list = g_list_first(rtp_tapinfo->list); while (rtp_streams_list) { rtp_listinfo = rtp_streams_list->data; /* using the setup frame number of the RTP stream, we get the call number that it belongs */ voip_calls_graph_list = g_list_first(the_tapinfo_struct.graph_analysis->list); while (voip_calls_graph_list) { gai = voip_calls_graph_list->data; conv_num = gai->conv_num; /* if we get the setup frame number, then get the time position to graph the RTP arrow */ if (rtp_listinfo->setup_frame_number == gai->frame_num){ /* look again from the begining because there are cases where the Setup frame is after the RTP */ voip_calls_graph_list = g_list_first(the_tapinfo_struct.graph_analysis->list); item = 0; while(voip_calls_graph_list){ gai = voip_calls_graph_list->data; /* if RTP was already in the Graph, just update the comment information */ if (rtp_listinfo->first_frame_num == gai->frame_num){ duration = (rtp_listinfo->stop_rel_sec*1000000 + rtp_listinfo->stop_rel_usec) - (rtp_listinfo->start_rel_sec*1000000 + rtp_listinfo->start_rel_usec); g_free(gai->comment); gai->comment = g_strdup_printf("RTP Num packets:%d Duration:%d.%03ds ssrc:%d", rtp_listinfo->npackets, duration/1000000,(duration%1000000)/1000, rtp_listinfo->ssrc); break; /* add the RTP item to the graph if was not there*/ } else if (rtp_listinfo->first_frame_numframe_num){ new_gai = g_malloc(sizeof(graph_analysis_item_t)); new_gai->frame_num = rtp_listinfo->first_frame_num; new_gai->time = (double)rtp_listinfo->start_rel_sec + (double)rtp_listinfo->start_rel_usec/1000000; COPY_ADDRESS(&(new_gai->src_addr),&(rtp_listinfo->src_addr)); COPY_ADDRESS(&(new_gai->dst_addr),&(rtp_listinfo->dest_addr)); new_gai->port_src = rtp_listinfo->src_port; new_gai->port_dst = rtp_listinfo->dest_port; duration = (rtp_listinfo->stop_rel_sec*1000000 + rtp_listinfo->stop_rel_usec) - (rtp_listinfo->start_rel_sec*1000000 + rtp_listinfo->start_rel_usec); new_gai->frame_label = g_strdup_printf("RTP (%s) %s", rtp_listinfo->pt_str, (rtp_listinfo->rtp_event == -1)?"":val_to_str(rtp_listinfo->rtp_event, rtp_event_type_values, "Uknown RTP Event")); g_free(rtp_listinfo->pt_str); new_gai->comment = g_strdup_printf("RTP Num packets:%d Duration:%d.%03ds ssrc:%d", rtp_listinfo->npackets, duration/1000000,(duration%1000000)/1000, rtp_listinfo->ssrc); new_gai->conv_num = conv_num; new_gai->display=FALSE; new_gai->line_style = 2; /* the arrow line will be 2 pixels width */ the_tapinfo_struct.graph_analysis->list = g_list_insert(the_tapinfo_struct.graph_analysis->list, new_gai, item); break; } voip_calls_graph_list = g_list_next(voip_calls_graph_list); item++; } break; } voip_calls_graph_list = g_list_next(voip_calls_graph_list); } rtp_streams_list = g_list_next(rtp_streams_list); } } static gboolean have_RTP_tap_listener=FALSE; /****************************************************************************/ void rtp_init_tap(void) { GString *error_string; if(have_RTP_tap_listener==FALSE) { /* don't register tap listener, if we have it already */ error_string = register_tap_listener("rtp", &(the_tapinfo_rtp_struct.rtp_dummy), NULL, voip_rtp_reset, RTP_packet, RTP_packet_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_RTP_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_rtp(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_rtp_struct.rtp_dummy)); unprotect_thread_critical_region(); have_RTP_tap_listener=FALSE; } /****************************************************************************/ /******************************TAP for T38 **********************************/ /****************************************************************************/ /****************************************************************************/ /* whenever a T38 packet is seen by the tap listener */ static int T38_packet( void *ptr _U_, packet_info *pinfo, epan_dissect_t *edt _U_, const void *T38info) { voip_calls_tapinfo_t *tapinfo = &the_tapinfo_struct; voip_calls_info_t *strinfo = NULL; voip_calls_info_t *tmp_listinfo; GList* voip_calls_graph_list; GList* list; gchar *frame_label = NULL; gchar *comment = NULL; graph_analysis_item_t *tmp_gai, *gai = NULL; guint16 line_style = 2; double duration; int conv_num = -1; const t38_packet_info *pi = T38info; if (pi->setup_frame_number != 0) { /* using the setup frame number of the T38 packet, we get the call number that it belongs */ voip_calls_graph_list = g_list_first(tapinfo->graph_analysis->list); while (voip_calls_graph_list) { tmp_gai = voip_calls_graph_list->data; if (pi->setup_frame_number == tmp_gai->frame_num){ gai = tmp_gai; break; } voip_calls_graph_list = g_list_next(voip_calls_graph_list); } if (gai) conv_num = (int) gai->conv_num; } /* if setup_frame_number in the t38 packet is 0, it means it was not set using an SDP or H245 sesion, which means we don't * have the associated Voip calls. It probably means the the packet was decoded using the deafult t38 port, or using "Decode as.." * in this case we create a "voip" call that only have t38 media (no signaling) * OR if we have not found the Setup message in the graph. */ if ( (pi->setup_frame_number == 0) || (gai == NULL) ){ /* check wether we already have a call with these parameters in the list */ list = g_list_first(tapinfo->strinfo_list); while (list) { tmp_listinfo=list->data; if (tmp_listinfo->protocol == MEDIA_T38){ strinfo = (voip_calls_info_t*)(list->data); break; } list = g_list_next (list); } /* not in the list? then create a new entry */ if (strinfo==NULL){ strinfo = g_malloc(sizeof(voip_calls_info_t)); strinfo->call_active_state = VOIP_ACTIVE; strinfo->call_state = VOIP_UNKNOWN; strinfo->from_identity=g_strdup("T38 Media only"); strinfo->to_identity=g_strdup("T38 Media only"); COPY_ADDRESS(&(strinfo->initial_speaker),&(pinfo->src)); strinfo->first_frame_num=pinfo->fd->num; strinfo->selected=FALSE; strinfo->start_sec=pinfo->fd->rel_ts.secs; strinfo->start_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->protocol=MEDIA_T38; strinfo->prot_info=NULL; strinfo->npackets = 0; strinfo->call_num = tapinfo->ncalls++; tapinfo->strinfo_list = g_list_append(tapinfo->strinfo_list, strinfo); } ++(strinfo->npackets); /* increment the packets counter of all calls */ ++(tapinfo->npackets); conv_num = (int) strinfo->call_num; } /* at this point we should have found the call num for this t38 packets belong */ if (conv_num == -1) { return 0; } /* add the item to the graph list */ if (pi->type_msg == 0) { /* 0=t30-indicator */ frame_label = g_strdup(val_to_str(pi->t30ind_value, t30_indicator_vals, "Ukn (0x%02X)") ); comment = g_strdup_printf("t38:t30 Ind:%s",val_to_str(pi->t30ind_value, t30_indicator_vals, "Ukn (0x%02X)") ); line_style = 1; } else if (pi->type_msg == 1) { /* 1=data */ switch(pi->Data_Field_field_type_value){ case 0: /* hdlc-data */ break; case 2: /* hdlc-fcs-OK */ case 4: /* hdlc-fcs-OK-sig-end */ frame_label = g_strdup_printf("%s %s", val_to_str(pi->t30_Facsimile_Control & 0x7F, t30_facsimile_control_field_vals_short, "Ukn (0x%02X)"), pi->desc); comment = g_strdup_printf("t38:%s:HDLC:%s",val_to_str(pi->data_value, t30_data_vals, "Ukn (0x%02X)"), val_to_str(pi->t30_Facsimile_Control & 0x7F, t30_facsimile_control_field_vals, "Ukn (0x%02X)")); break; case 3: /* hdlc-fcs-BAD */ case 5: /* hdlc-fcs-BAD-sig-end */ frame_label = g_strdup(pi->Data_Field_field_type_value == 3 ? "fcs-BAD" : "fcs-BAD-sig-end"); comment = g_strdup_printf("WARNING: received t38:%s:HDLC:%s", val_to_str(pi->data_value, t30_data_vals, "Ukn (0x%02X)"), pi->Data_Field_field_type_value == 3 ? "fcs-BAD" : "fcs-BAD-sig-end"); break; case 7: /* t4-non-ecm-sig-end */ duration = nstime_to_sec(&pinfo->fd->rel_ts) - pi->time_first_t4_data; frame_label = g_strdup_printf("t4-non-ecm-data:%s",val_to_str(pi->data_value, t30_data_vals, "Ukn (0x%02X)") ); comment = g_strdup_printf("t38:t4-non-ecm-data:%s Duration: %.2fs %s",val_to_str(pi->data_value, t30_data_vals, "Ukn (0x%02X)"), duration, pi->desc_comment ); insert_to_graph(tapinfo, pinfo, frame_label, comment, (guint16)conv_num, &(pinfo->src), &(pinfo->dst), line_style, pi->time_first_t4_data, pi->frame_num_first_t4_data); break; } } if (frame_label && !(pi->Data_Field_field_type_value == 7 && pi->type_msg == 1)) { add_to_graph(tapinfo, pinfo, frame_label, comment, (guint16)conv_num, &(pinfo->src), &(pinfo->dst), line_style); } g_free(comment); g_free(frame_label); tapinfo->redraw = TRUE; return 1; /* refresh output */ } static gboolean have_T38_tap_listener=FALSE; /****************************************************************************/ void t38_init_tap(void) { GString *error_string; if(have_T38_tap_listener==FALSE) { /* don't register tap listener, if we have it already */ error_string = register_tap_listener("t38", &(the_tapinfo_struct.t38_dummy), NULL, voip_calls_dlg_reset, T38_packet, voip_calls_dlg_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_T38_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_t38(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_struct.t38_dummy)); unprotect_thread_critical_region(); have_T38_tap_listener=FALSE; } /****************************************************************************/ static gchar *sdp_summary = NULL; static guint32 sdp_frame_num = 0; /****************************************************************************/ /* ***************************TAP for SIP **********************************/ /****************************************************************************/ /****************************************************************************/ /* whenever a SIP packet is seen by the tap listener */ static int SIPcalls_packet( void *ptr _U_, packet_info *pinfo, epan_dissect_t *edt _U_, const void *SIPinfo) { voip_calls_tapinfo_t *tapinfo = &the_tapinfo_struct; /* we just take note of the ISUP data here; when we receive the MTP3 part everything will be compared with existing calls */ voip_calls_info_t *tmp_listinfo; voip_calls_info_t *strinfo = NULL; sip_calls_info_t *tmp_sipinfo = NULL; GList* list; address tmp_src, tmp_dst; gchar *frame_label = NULL; gchar *comment = NULL; const sip_info_value_t *pi = SIPinfo; /* do not consider packets without call_id */ if (pi->tap_call_id ==NULL){ return 0; } /* check wether we already have a call with these parameters in the list */ list = g_list_first(tapinfo->strinfo_list); while (list) { tmp_listinfo=list->data; if (tmp_listinfo->protocol == VOIP_SIP){ tmp_sipinfo = tmp_listinfo->prot_info; if (strcmp(tmp_sipinfo->call_identifier,pi->tap_call_id)==0){ strinfo = (voip_calls_info_t*)(list->data); break; } } list = g_list_next (list); } /* not in the list? then create a new entry if the message is INVITE -i.e. if this session is a call*/ if ((strinfo==NULL) &&(pi->request_method!=NULL)){ if (strcmp(pi->request_method,"INVITE")==0){ strinfo = g_malloc(sizeof(voip_calls_info_t)); strinfo->call_active_state = VOIP_ACTIVE; strinfo->call_state = VOIP_CALL_SETUP; strinfo->from_identity=g_strdup(pi->tap_from_addr); strinfo->to_identity=g_strdup(pi->tap_to_addr); COPY_ADDRESS(&(strinfo->initial_speaker),&(pinfo->src)); strinfo->first_frame_num=pinfo->fd->num; strinfo->selected=FALSE; strinfo->start_sec=pinfo->fd->rel_ts.secs; strinfo->start_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->protocol=VOIP_SIP; strinfo->prot_info=g_malloc(sizeof(sip_calls_info_t)); tmp_sipinfo=strinfo->prot_info; tmp_sipinfo->call_identifier=strdup(pi->tap_call_id); tmp_sipinfo->sip_state=SIP_INVITE_SENT; tmp_sipinfo->invite_cseq=pi->tap_cseq_number; strinfo->npackets = 0; strinfo->call_num = tapinfo->ncalls++; tapinfo->strinfo_list = g_list_append(tapinfo->strinfo_list, strinfo); } } if (strinfo!=NULL){ /* let's analyze the call state */ COPY_ADDRESS(&(tmp_src), &(pinfo->src)); COPY_ADDRESS(&(tmp_dst), &(pinfo->dst)); if (pi->request_method == NULL){ frame_label = g_strdup_printf("%d %s", pi->response_code, pi->reason_phrase ); comment = g_strdup_printf("SIP Status"); if ((tmp_sipinfo && pi->tap_cseq_number == tmp_sipinfo->invite_cseq)&&(ADDRESSES_EQUAL(&tmp_dst,&(strinfo->initial_speaker)))){ if ((pi->response_code > 199) && (pi->response_code<300) && (tmp_sipinfo->sip_state == SIP_INVITE_SENT)){ tmp_sipinfo->sip_state = SIP_200_REC; } else if ((pi->response_code>299)&&(tmp_sipinfo->sip_state == SIP_INVITE_SENT)){ strinfo->call_state = VOIP_REJECTED; tapinfo->rejected_calls++; } } } else{ frame_label = g_strdup(pi->request_method); if ((strcmp(pi->request_method,"INVITE")==0)&&(ADDRESSES_EQUAL(&tmp_src,&(strinfo->initial_speaker)))){ tmp_sipinfo->invite_cseq = pi->tap_cseq_number; strinfo->call_state = VOIP_CALL_SETUP; comment = g_strdup_printf("SIP From: %s To:%s", strinfo->from_identity, strinfo->to_identity); } else if ((strcmp(pi->request_method,"ACK")==0)&&(pi->tap_cseq_number == tmp_sipinfo->invite_cseq) &&(ADDRESSES_EQUAL(&tmp_src,&(strinfo->initial_speaker)))&&(tmp_sipinfo->sip_state==SIP_200_REC) &&(strinfo->call_state == VOIP_CALL_SETUP)){ strinfo->call_state = VOIP_IN_CALL; comment = g_strdup_printf("SIP Request"); } else if (strcmp(pi->request_method,"BYE")==0){ strinfo->call_state = VOIP_COMPLETED; tapinfo->completed_calls++; comment = g_strdup_printf("SIP Request"); } else if ((strcmp(pi->request_method,"CANCEL")==0)&&(pi->tap_cseq_number == tmp_sipinfo->invite_cseq) &&(ADDRESSES_EQUAL(&tmp_src,&(strinfo->initial_speaker)))&&(strinfo->call_state==VOIP_CALL_SETUP)){ strinfo->call_state = VOIP_CANCELLED; tmp_sipinfo->sip_state = SIP_CANCEL_SENT; comment = g_strdup_printf("SIP Request"); } else { comment = g_strdup_printf("SIP Request"); } } strinfo->stop_sec=pinfo->fd->rel_ts.secs; strinfo->stop_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->last_frame_num=pinfo->fd->num; ++(strinfo->npackets); /* increment the packets counter of all calls */ ++(tapinfo->npackets); /* add to the graph */ add_to_graph(tapinfo, pinfo, frame_label, comment, strinfo->call_num, &(pinfo->src), &(pinfo->dst), 1); g_free(comment); g_free(frame_label); g_free((void *)tmp_src.data); g_free((void *)tmp_dst.data); /* add SDP info if apply */ if ( (sdp_summary != NULL) && (sdp_frame_num == pinfo->fd->num) ){ append_to_frame_graph(tapinfo, pinfo->fd->num, sdp_summary, NULL); g_free(sdp_summary); sdp_summary = NULL; } } tapinfo->redraw = TRUE; return 1; /* refresh output */ } /****************************************************************************/ voip_calls_tapinfo_t* voip_calls_get_info(void) { return &the_tapinfo_struct; } /****************************************************************************/ /* TAP INTERFACE */ /****************************************************************************/ static gboolean have_SIP_tap_listener=FALSE; /****************************************************************************/ void sip_calls_init_tap(void) { GString *error_string; if(have_SIP_tap_listener==FALSE) { /* don't register tap listener, if we have it already */ error_string = register_tap_listener("sip", &(the_tapinfo_struct.sip_dummy), NULL, voip_calls_dlg_reset, SIPcalls_packet, voip_calls_dlg_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_SIP_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_sip_calls(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_struct.sip_dummy)); unprotect_thread_critical_region(); have_SIP_tap_listener=FALSE; } /****************************************************************************/ /* ***************************TAP for ISUP **********************************/ /****************************************************************************/ static guint32 mtp3_opc, mtp3_dpc; static guint8 mtp3_ni; static guint32 mtp3_frame_num; /****************************************************************************/ /* whenever a isup_ packet is seen by the tap listener */ static int isup_calls_packet(void *ptr _U_, packet_info *pinfo, epan_dissect_t *edt _U_, const void *isup_info _U_) { voip_calls_tapinfo_t *tapinfo = &the_tapinfo_struct; voip_calls_info_t *tmp_listinfo; voip_calls_info_t *strinfo = NULL; isup_calls_info_t *tmp_isupinfo; gboolean found = FALSE; gboolean forward = FALSE; gboolean right_pair; GList* list; gchar *frame_label = NULL; gchar *comment = NULL; int i; /*voip_calls_tapinfo_t *tapinfo = &the_tapinfo_struct; unused */ const isup_tap_rec_t *pi = isup_info; /* check if the lower layer is MTP matching the frame number */ if (mtp3_frame_num != pinfo->fd->num) return 0; /* check wether we already have a call with these parameters in the list */ list = g_list_first(tapinfo->strinfo_list); while (list) { right_pair = TRUE; tmp_listinfo=list->data; if ((tmp_listinfo->protocol == VOIP_ISUP)&&(tmp_listinfo->call_active_state==VOIP_ACTIVE)){ tmp_isupinfo = tmp_listinfo->prot_info; if ((tmp_isupinfo->cic == pinfo->circuit_id)&&(tmp_isupinfo->ni == mtp3_ni)) { if ((tmp_isupinfo->opc == mtp3_opc)&&(tmp_isupinfo->dpc == mtp3_dpc)){ forward = TRUE; } else if ((tmp_isupinfo->dpc == mtp3_opc)&&(tmp_isupinfo->opc == mtp3_dpc)){ forward = FALSE; } else{ right_pair = FALSE; } if (right_pair){ /* if there is an IAM for a call that is not in setup state, that means the previous call in the same cic is no longer active */ if (tmp_listinfo->call_state == VOIP_CALL_SETUP){ found = TRUE; } else if (pi->message_type != 1){ found = TRUE; } else{ tmp_listinfo->call_active_state=VOIP_INACTIVE; } } if (found){ strinfo = (voip_calls_info_t*)(list->data); break; } } } list = g_list_next (list); } /* not in the list? then create a new entry if the message is IAM -i.e. if this session is a call*/ if ((strinfo==NULL) &&(pi->message_type==1)){ strinfo = g_malloc(sizeof(voip_calls_info_t)); strinfo->call_active_state = VOIP_ACTIVE; strinfo->call_state = VOIP_UNKNOWN; COPY_ADDRESS(&(strinfo->initial_speaker),&(pinfo->src)); strinfo->selected=FALSE; strinfo->first_frame_num=pinfo->fd->num; strinfo->start_sec=pinfo->fd->rel_ts.secs; strinfo->start_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->protocol=VOIP_ISUP; if (pi->calling_number!=NULL){ strinfo->from_identity=g_strdup(pi->calling_number); } if (pi->called_number!=NULL){ strinfo->to_identity=g_strdup(pi->called_number); } strinfo->prot_info=g_malloc(sizeof(isup_calls_info_t)); tmp_isupinfo=strinfo->prot_info; tmp_isupinfo->opc = mtp3_opc; tmp_isupinfo->dpc = mtp3_dpc; tmp_isupinfo->ni = mtp3_ni; tmp_isupinfo->cic = pinfo->circuit_id; strinfo->npackets = 0; strinfo->call_num = tapinfo->ncalls++; tapinfo->strinfo_list = g_list_append(tapinfo->strinfo_list, strinfo); } if (strinfo!=NULL){ strinfo->stop_sec=pinfo->fd->rel_ts.secs; strinfo->stop_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->last_frame_num=pinfo->fd->num; ++(strinfo->npackets); /* Let's analyze the call state */ for (i=0;(isup_message_type_value[i].strptr!=NULL)&& (isup_message_type_value[i].value!=pi->message_type);i++); if (isup_message_type_value[i].value==pi->message_type){ frame_label = g_strdup(isup_message_type_value_acro[i].strptr); } else{ frame_label = g_strdup_printf("Unknown"); } if (strinfo->npackets == 1){ /* this is the first packet, that must be an IAM */ if ((pi->calling_number!=NULL)&&(pi->called_number !=NULL)){ comment = g_strdup_printf("Call from %s to %s", pi->calling_number, pi->called_number); } } else if (strinfo->npackets == 2){ /* in the second packet we show the SPs */ if (forward){ comment = g_strdup_printf("%i-%i -> %i-%i. Cic:%i", mtp3_ni, mtp3_opc, mtp3_ni, mtp3_dpc, pinfo->circuit_id); } else{ comment = g_strdup_printf("%i-%i -> %i-%i. Cic:%i", mtp3_ni, mtp3_dpc, mtp3_ni, mtp3_opc, pinfo->circuit_id); } } switch(pi->message_type){ case 1: /* IAM */ strinfo->call_state=VOIP_CALL_SETUP; break; case 7: /* CONNECT */ case 9: /* ANSWER */ strinfo->call_state=VOIP_IN_CALL; break; case 12: /* RELEASE */ if (strinfo->call_state==VOIP_CALL_SETUP){ if (forward){ strinfo->call_state=VOIP_CANCELLED; } else{ strinfo->call_state=VOIP_REJECTED; tapinfo->rejected_calls++; } } else if (strinfo->call_state == VOIP_IN_CALL){ strinfo->call_state = VOIP_COMPLETED; tapinfo->completed_calls++; } for (i=0;(q931_cause_code_vals[i].strptr!=NULL)&& (q931_cause_code_vals[i].value!=pi->cause_value);i++); if (q931_cause_code_vals[i].value==pi->cause_value){ comment = g_strdup_printf("Cause %i - %s",pi->cause_value, q931_cause_code_vals[i].strptr); } else{ comment = g_strdup_printf("Cause %i",pi->cause_value); } break; } /* increment the packets counter of all calls */ ++(tapinfo->npackets); /* add to the graph */ add_to_graph(tapinfo, pinfo, frame_label, comment, strinfo->call_num, &(pinfo->src), &(pinfo->dst), 1); g_free(comment); g_free(frame_label); } tapinfo->redraw = TRUE; return 1; /* refresh output */ } /****************************************************************************/ static gboolean have_isup_tap_listener=FALSE; void isup_calls_init_tap(void) { GString *error_string; if(have_isup_tap_listener==FALSE) { error_string = register_tap_listener("isup", &(the_tapinfo_struct.isup_dummy), NULL, voip_calls_dlg_reset, isup_calls_packet, voip_calls_dlg_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_isup_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_isup_calls(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_struct.isup_dummy)); unprotect_thread_critical_region(); have_isup_tap_listener=FALSE; } /****************************************************************************/ /* ***************************TAP for MTP3 **********************************/ /****************************************************************************/ /****************************************************************************/ /* whenever a mtp3_ packet is seen by the tap listener */ static int mtp3_calls_packet(void *ptr _U_, packet_info *pinfo, epan_dissect_t *edt _U_, const void *mtp3_info _U_) { const mtp3_tap_rec_t *pi = mtp3_info; /* keep the data in memory to use when the ISUP information arrives */ mtp3_opc = pi->addr_opc.pc; mtp3_dpc = pi->addr_dpc.pc; mtp3_ni = pi->addr_opc.ni; mtp3_frame_num = pinfo->fd->num; return 0; } /****************************************************************************/ static gboolean have_mtp3_tap_listener=FALSE; void mtp3_calls_init_tap(void) { GString *error_string; if(have_mtp3_tap_listener==FALSE) { error_string = register_tap_listener("mtp3", &(the_tapinfo_struct.mtp3_dummy), NULL, voip_calls_dlg_reset, mtp3_calls_packet, voip_calls_dlg_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_mtp3_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_mtp3_calls(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_struct.mtp3_dummy)); unprotect_thread_critical_region(); have_mtp3_tap_listener=FALSE; } /****************************************************************************/ /* ***************************TAP for Q931 **********************************/ /****************************************************************************/ void h245_add_to_graph(guint32 new_frame_num); static const e_guid_t guid_allzero = {0, 0, 0, { 0, 0, 0, 0, 0, 0, 0, 0 } }; /* defines specific H323 data */ static gchar *q931_calling_number; static gchar *q931_called_number; static guint8 q931_cause_value; static gint32 q931_crv; static guint32 q931_frame_num; static guint32 h225_frame_num = 0; static guint16 h225_call_num = 0; static h225_cs_type h225_cstype = H225_OTHER; static gboolean h225_is_faststart; static guint32 actrace_frame_num = 0; static gint32 actrace_trunk = 0; static gint32 actrace_direction = 0; /****************************************************************************/ /* whenever a q931_ packet is seen by the tap listener */ static int q931_calls_packet(void *ptr _U_, packet_info *pinfo, epan_dissect_t *edt _U_, const void *q931_info _U_) { GList *list,*list2; voip_calls_tapinfo_t *tapinfo = &the_tapinfo_struct; h323_calls_info_t *tmp_h323info,*tmp2_h323info; actrace_isdn_calls_info_t *tmp_actrace_isdn_info; voip_calls_info_t *tmp_listinfo; voip_calls_info_t *strinfo = NULL; h245_address_t *h245_add = NULL; gchar *comment; const q931_packet_info *pi = q931_info; /* free previously allocated q931_calling/ed_number */ g_free(q931_calling_number); g_free(q931_called_number); if (pi->calling_number!=NULL) q931_calling_number = g_strdup(pi->calling_number); else q931_calling_number = g_strdup(""); if (pi->called_number!=NULL) q931_called_number = g_strdup(pi->called_number); else q931_called_number = g_strdup(""); q931_cause_value = pi->cause_value; q931_frame_num = pinfo->fd->num; q931_crv = pi->crv; /* add staff to H323 calls */ if (h225_frame_num == q931_frame_num) { tmp_h323info = NULL; list = g_list_first(tapinfo->strinfo_list); while (list) { tmp_listinfo=list->data; if ( (tmp_listinfo->protocol == VOIP_H323) && (tmp_listinfo->call_num == h225_call_num) ){ tmp_h323info = tmp_listinfo->prot_info; strinfo = (voip_calls_info_t*)(list->data); /* Add the CRV to the h323 call */ if (tmp_h323info->q931_crv == -1) { tmp_h323info->q931_crv = q931_crv; } else if (tmp_h323info->q931_crv != q931_crv) { tmp_h323info->q931_crv2 = q931_crv; } break; } list = g_list_next (list); } if (strinfo != NULL) { comment = NULL; if (h225_cstype == H225_SETUP) { /* set te calling and called number from the Q931 packet */ if (q931_calling_number != NULL){ g_free(strinfo->from_identity); strinfo->from_identity=g_strdup(q931_calling_number); } if (q931_called_number != NULL){ g_free(strinfo->to_identity); strinfo->to_identity=g_strdup(q931_called_number); } /* check if there is an LRQ/LCF that match this Setup */ /* TODO: we are just checking the DialedNumer in LRQ/LCF agains the Setup we should also check if the h225 signaling IP and port match the destination Setup ip and port */ list = g_list_first(tapinfo->strinfo_list); while (list) { tmp_listinfo=list->data; if (tmp_listinfo->protocol == VOIP_H323){ tmp2_h323info = tmp_listinfo->prot_info; /* check if the called number match a LRQ/LCF */ if ( (strcmp(strinfo->to_identity, tmp_listinfo->to_identity)==0) && (memcmp(&tmp2_h323info->guid, &guid_allzero, GUID_LEN) == 0) ){ /* change the call graph to the LRQ/LCF to belong to this call */ strinfo->npackets += change_call_num_graph(tapinfo, tmp_listinfo->call_num, strinfo->call_num); /* remove this LRQ/LCF call entry because we have found the Setup that match them */ g_free(tmp_listinfo->from_identity); g_free(tmp_listinfo->to_identity); g_free(tmp2_h323info->guid); list2 = g_list_first(tmp2_h323info->h245_list); while (list2) { h245_add=list2->data; g_free((void *)h245_add->h245_address.data); g_free(list2->data); list2 = g_list_next(list2); } g_list_free(tmp_h323info->h245_list); tmp_h323info->h245_list = NULL; g_free(tmp_listinfo->prot_info); tapinfo->strinfo_list = g_list_remove(tapinfo->strinfo_list, tmp_listinfo); break; } } list = g_list_next (list); } comment = g_strdup_printf("H225 From: %s To:%s TunnH245:%s FS:%s", strinfo->from_identity, strinfo->to_identity, (tmp_h323info->is_h245Tunneling==TRUE?"on":"off"), (h225_is_faststart==TRUE?"on":"off")); } else if (h225_cstype == H225_RELEASE_COMPLET) { /* get the Q931 Release cause code */ if (q931_cause_value != 0xFF){ comment = g_strdup_printf("H225 Q931 Rel Cause (%i):%s", q931_cause_value, val_to_str(q931_cause_value, q931_cause_code_vals, "")); } else { /* Cause not set */ comment = g_strdup("H225 No Q931 Rel Cause"); } } /* change the graph comment for this new one */ if (comment != NULL) { change_frame_graph(tapinfo, h225_frame_num, NULL, comment); g_free(comment); } } /* we reset the h225_frame_num to 0 because there could be empty h225 in the same frame as non empty h225 (e.g connect), so we don't have to be here twice */ h225_frame_num = 0; /* add staff to H245 */ } else if (h245_labels.frame_num == q931_frame_num) { /* there are empty H225 frames that don't have guid (guaid=0) but they have h245 info, so the only way to match those frames is with the Q931 CRV number */ list = g_list_first(tapinfo->strinfo_list); while (list) { tmp_listinfo=list->data; if (tmp_listinfo->protocol == VOIP_H323){ tmp_h323info = tmp_listinfo->prot_info; if ( ((tmp_h323info->q931_crv == q931_crv) || (tmp_h323info->q931_crv2 == q931_crv)) && (q931_crv!=-1)){ comment = g_strdup(""); /* if the frame number exists in graph, append to it*/ if (!append_to_frame_graph(tapinfo, q931_frame_num, "", comment)) { /* if not exist, add to the graph */ add_to_graph(tapinfo, pinfo, "", comment, tmp_listinfo->call_num, &(pinfo->src), &(pinfo->dst), 1); ++(tmp_listinfo->npackets); /* increment the packets counter of all calls */ ++(tapinfo->npackets); } /* Add the H245 info if exists to the Graph */ h245_add_to_graph(pinfo->fd->num); g_free(comment); break; } } list = g_list_next (list); } /* add staff to ACTRACE */ } else if (actrace_frame_num == q931_frame_num) { address pstn_add; gchar *comment = NULL; strinfo = NULL; list = g_list_first(tapinfo->strinfo_list); while (list) { tmp_listinfo=list->data; if ( tmp_listinfo->protocol == VOIP_AC_ISDN ){ tmp_actrace_isdn_info = tmp_listinfo->prot_info; /* TODO: Also check the IP of the Blade, and if the call is complete (no active) */ if ( (tmp_actrace_isdn_info->crv == q931_crv) && (tmp_actrace_isdn_info->trunk == actrace_trunk) ) { strinfo = (voip_calls_info_t*)(list->data); break; } } list = g_list_next (list); } SET_ADDRESS(&pstn_add, AT_STRINGZ, 5, g_strdup("PSTN")); /* if it is a new call, add it to the list */ if (!strinfo) { strinfo = g_malloc(sizeof(voip_calls_info_t)); strinfo->call_active_state = VOIP_ACTIVE; strinfo->call_state = VOIP_CALL_SETUP; strinfo->from_identity=g_strdup(q931_calling_number); strinfo->to_identity=g_strdup(q931_called_number); COPY_ADDRESS(&(strinfo->initial_speaker),actrace_direction?&pstn_add:&(pinfo->src)); strinfo->first_frame_num=pinfo->fd->num; strinfo->selected=FALSE; strinfo->start_sec=pinfo->fd->rel_ts.secs; strinfo->start_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->protocol=VOIP_AC_ISDN; strinfo->prot_info=g_malloc(sizeof(actrace_isdn_calls_info_t)); tmp_actrace_isdn_info=strinfo->prot_info; tmp_actrace_isdn_info->crv=q931_crv; tmp_actrace_isdn_info->trunk=actrace_trunk; strinfo->npackets = 0; strinfo->call_num = tapinfo->ncalls++; tapinfo->strinfo_list = g_list_append(tapinfo->strinfo_list, strinfo); } strinfo->stop_sec=pinfo->fd->rel_ts.secs; strinfo->stop_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->last_frame_num=pinfo->fd->num; ++(strinfo->npackets); /* increment the packets counter of all calls */ ++(tapinfo->npackets); switch(pi->message_type){ case Q931_SETUP: comment = g_strdup_printf("AC_ISDN trunk:%u Calling: %s Called:%s", actrace_trunk, q931_calling_number, q931_called_number); strinfo->call_state=VOIP_CALL_SETUP; break; case Q931_CONNECT: strinfo->call_state=VOIP_IN_CALL; break; case Q931_RELEASE_COMPLETE: case Q931_RELEASE: case Q931_DISCONNECT: if (strinfo->call_state==VOIP_CALL_SETUP){ if (ADDRESSES_EQUAL(&(strinfo->initial_speaker), actrace_direction?&pstn_add:&(pinfo->src) )){ /* forward direction */ strinfo->call_state=VOIP_CANCELLED; } else{ /* reverse */ strinfo->call_state=VOIP_REJECTED; tapinfo->rejected_calls++; } } else if ( (strinfo->call_state!=VOIP_CANCELLED) && (strinfo->call_state!=VOIP_REJECTED) ){ strinfo->call_state=VOIP_COMPLETED; tapinfo->completed_calls++; } if (q931_cause_value != 0xFF){ comment = g_strdup_printf("AC_ISDN trunk:%u Q931 Rel Cause (%i):%s", actrace_trunk, q931_cause_value, val_to_str(q931_cause_value, q931_cause_code_vals, "")); } else { /* Cause not set */ comment = g_strdup("AC_ISDN No Q931 Rel Cause"); } break; } if (!comment) comment = g_strdup_printf("AC_ISDN trunk:%u", actrace_trunk ); add_to_graph(tapinfo, pinfo, val_to_str(pi->message_type, q931_message_type_vals, "") , comment, strinfo->call_num, actrace_direction?&pstn_add:&(pinfo->src), actrace_direction?&(pinfo->src):&pstn_add, 1 ); g_free(comment); g_free((char *)pstn_add.data); } tapinfo->redraw = TRUE; return 1; /* refresh output */ } /****************************************************************************/ static gboolean have_q931_tap_listener=FALSE; void q931_calls_init_tap(void) { GString *error_string; if(have_q931_tap_listener==FALSE) { error_string = register_tap_listener("q931", &(the_tapinfo_struct.q931_dummy), NULL, voip_calls_dlg_reset, q931_calls_packet, voip_calls_dlg_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_q931_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_q931_calls(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_struct.q931_dummy)); unprotect_thread_critical_region(); have_q931_tap_listener=FALSE; } /****************************************************************************/ /****************************TAP for H323 ***********************************/ /****************************************************************************/ static void add_h245_Address(h323_calls_info_t *h323info, h245_address_t *h245_address) { h323info->h245_list = g_list_append(h323info->h245_list, h245_address); } /****************************************************************************/ /* whenever a H225 packet is seen by the tap listener */ static int H225calls_packet(void *ptr _U_, packet_info *pinfo, epan_dissect_t *edt _U_, const void *H225info) { voip_calls_tapinfo_t *tapinfo = &the_tapinfo_struct; voip_calls_info_t *tmp_listinfo; voip_calls_info_t *strinfo = NULL; h323_calls_info_t *tmp_h323info = NULL; gchar *frame_label; gchar *comment; GList *list; address tmp_src, tmp_dst; h245_address_t *h245_add = NULL; const h225_packet_info *pi = H225info; /* if not guid and RAS and not LRQ, LCF or LRJ return because did not belong to a call */ /* OR, if not guid and is H225 return because doesn't belong to a call */ if ((memcmp(&pi->guid, &guid_allzero, GUID_LEN) == 0)) if ( ((pi->msg_type == H225_RAS) && ((pi->msg_tag < 18) || (pi->msg_tag > 20))) || (pi->msg_type != H225_RAS) ) return 0; /* if it is RAS LCF or LRJ*/ if ( (pi->msg_type == H225_RAS) && ((pi->msg_tag == 19) || (pi->msg_tag == 20))) { /* if the LCF/LRJ doesn't match to a LRQ, just return */ if (!pi->request_available) return 0; /* check wether we already have a call with this request SeqNum */ list = g_list_first(tapinfo->strinfo_list); while (list) { tmp_listinfo=list->data; if (tmp_listinfo->protocol == VOIP_H323){ tmp_h323info = tmp_listinfo->prot_info; if (tmp_h323info->requestSeqNum == pi->requestSeqNum) { strinfo = (voip_calls_info_t*)(list->data); break; } } list = g_list_next (list); } } else { /* check wether we already have a call with this guid in the list */ list = g_list_first(tapinfo->strinfo_list); while (list) { tmp_listinfo=list->data; if (tmp_listinfo->protocol == VOIP_H323){ tmp_h323info = tmp_listinfo->prot_info; if ( (memcmp(&tmp_h323info->guid, &guid_allzero, GUID_LEN) != 0) && (memcmp(&tmp_h323info->guid, &pi->guid,GUID_LEN)==0) ){ strinfo = (voip_calls_info_t*)(list->data); break; } } list = g_list_next (list); } } h225_cstype = pi->cs_type; h225_is_faststart = pi->is_faststart; /* not in the list? then create a new entry */ if ((strinfo==NULL)){ strinfo = g_malloc(sizeof(voip_calls_info_t)); strinfo->call_active_state = VOIP_ACTIVE; strinfo->call_state = VOIP_UNKNOWN; strinfo->from_identity=g_strdup(""); strinfo->to_identity=g_strdup(""); COPY_ADDRESS(&(strinfo->initial_speaker),&(pinfo->src)); strinfo->selected=FALSE; strinfo->first_frame_num=pinfo->fd->num; strinfo->start_sec=pinfo->fd->rel_ts.secs; strinfo->start_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->protocol=VOIP_H323; strinfo->prot_info=g_malloc(sizeof(h323_calls_info_t)); tmp_h323info = strinfo->prot_info; tmp_h323info->guid = g_memdup(&pi->guid, sizeof pi->guid); tmp_h323info->h225SetupAddr.type = AT_NONE; tmp_h323info->h225SetupAddr.len = 0; tmp_h323info->h245_list = NULL; tmp_h323info->is_faststart_Setup = FALSE; tmp_h323info->is_faststart_Proc = FALSE; tmp_h323info->is_h245Tunneling = FALSE; tmp_h323info->is_h245 = FALSE; tmp_h323info->q931_crv = -1; tmp_h323info->q931_crv2 = -1; tmp_h323info->requestSeqNum = 0; strinfo->call_num = tapinfo->ncalls++; strinfo->npackets = 0; tapinfo->strinfo_list = g_list_append(tapinfo->strinfo_list, strinfo); } if (strinfo!=NULL){ h225_frame_num = pinfo->fd->num; h225_call_num = strinfo->call_num; /* let's analyze the call state */ COPY_ADDRESS(&(tmp_src),&(pinfo->src)); COPY_ADDRESS(&(tmp_dst),&(pinfo->dst)); strinfo->stop_sec=pinfo->fd->rel_ts.secs; strinfo->stop_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->last_frame_num=pinfo->fd->num; ++(strinfo->npackets); /* increment the packets counter of all calls */ ++(tapinfo->npackets); /* XXX: it is supposed to be initialized isn't it? */ g_assert(tmp_h323info != NULL); /* change the status */ if (pi->msg_type == H225_CS){ /* this is still IPv4 only, because the dissector is */ if (pi->is_h245 == TRUE){ h245_add = g_malloc(sizeof (h245_address_t)); h245_add->h245_address.type=AT_IPv4; h245_add->h245_address.len=4; h245_add->h245_address.data = g_malloc(sizeof(pi->h245_address)); g_memmove((void *)(h245_add->h245_address.data), &(pi->h245_address), 4); h245_add->h245_port = pi->h245_port; add_h245_Address(tmp_h323info, h245_add); } if (pi->cs_type != H225_RELEASE_COMPLET) tmp_h323info->is_h245Tunneling = pi->is_h245Tunneling; frame_label = g_strdup(pi->frame_label); switch(pi->cs_type){ case H225_SETUP: tmp_h323info->is_faststart_Setup = pi->is_faststart; /* Set the Setup address if it was not set */ if (tmp_h323info->h225SetupAddr.type == AT_NONE) COPY_ADDRESS(&(tmp_h323info->h225SetupAddr), &(pinfo->src)); strinfo->call_state=VOIP_CALL_SETUP; comment = g_strdup_printf("H225 TunnH245:%s FS:%s", (tmp_h323info->is_h245Tunneling==TRUE?"on":"off"), (pi->is_faststart==TRUE?"on":"off")); break; case H225_CONNECT: strinfo->call_state=VOIP_IN_CALL; if (pi->is_faststart == TRUE) tmp_h323info->is_faststart_Proc = TRUE; comment = g_strdup_printf("H225 TunnH245:%s FS:%s", (tmp_h323info->is_h245Tunneling==TRUE?"on":"off"), (pi->is_faststart==TRUE?"on":"off")); break; case H225_RELEASE_COMPLET: COPY_ADDRESS(&tmp_src,&(pinfo->src)); if (strinfo->call_state==VOIP_CALL_SETUP){ if (ADDRESSES_EQUAL(&(tmp_h323info->h225SetupAddr),&tmp_src)){ /* forward direction */ strinfo->call_state=VOIP_CANCELLED; } else{ /* reverse */ strinfo->call_state=VOIP_REJECTED; tapinfo->rejected_calls++; } } else { strinfo->call_state=VOIP_COMPLETED; tapinfo->completed_calls++; } comment = g_strdup("H225 No Q931 Rel Cause"); break; case H225_PROGRESS: case H225_ALERTING: case H225_CALL_PROCEDING: if (pi->is_faststart == TRUE) tmp_h323info->is_faststart_Proc = TRUE; comment = g_strdup_printf("H225 TunnH245:%s FS:%s", (tmp_h323info->is_h245Tunneling==TRUE?"on":"off"), (pi->is_faststart==TRUE?"on":"off")); break; default: comment = g_strdup_printf("H225 TunnH245:%s FS:%s", (tmp_h323info->is_h245Tunneling==TRUE?"on":"off"), (pi->is_faststart==TRUE?"on":"off")); } } else if (pi->msg_type == H225_RAS){ switch(pi->msg_tag){ case 18: /* LRQ */ if (!pi->is_duplicate){ g_free(strinfo->to_identity); strinfo->to_identity=g_strdup(pi->dialedDigits); tmp_h323info->requestSeqNum = pi->requestSeqNum; } case 19: /* LCF */ if (strlen(pi->dialedDigits)) comment = g_strdup_printf("H225 RAS dialedDigits: %s", pi->dialedDigits); else comment = g_strdup("H225 RAS"); break; default: comment = g_strdup("H225 RAS"); } frame_label = g_strdup_printf("%s", val_to_str(pi->msg_tag, RasMessage_vals, "")); } else { frame_label = g_strdup("H225: Unknown"); comment = g_strdup(""); } /* add to graph analysis */ /* if the frame number exists in graph, append to it*/ if (!append_to_frame_graph(tapinfo, pinfo->fd->num, pi->frame_label, comment)) { /* if not exist, add to the graph */ add_to_graph(tapinfo, pinfo, frame_label, comment, strinfo->call_num, &(pinfo->src), &(pinfo->dst), 1); g_free((void *)tmp_src.data); g_free((void *)tmp_dst.data); } /* Add the H245 info if exists to the Graph */ h245_add_to_graph(pinfo->fd->num); g_free(frame_label); g_free(comment); } tapinfo->redraw = TRUE; return 1; /* refresh output */ } /****************************************************************************/ /* TAP INTERFACE */ /****************************************************************************/ static gboolean have_H225_tap_listener=FALSE; /****************************************************************************/ void h225_calls_init_tap(void) { GString *error_string; if(have_H225_tap_listener==FALSE) { /* don't register tap listener, if we have it already */ error_string = register_tap_listener("h225", &(the_tapinfo_struct.h225_dummy), NULL, voip_calls_dlg_reset, H225calls_packet, voip_calls_dlg_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_H225_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_h225_calls(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_struct.h225_dummy)); unprotect_thread_critical_region(); have_H225_tap_listener=FALSE; } /* Add the h245 label info to the graph */ void h245_add_to_graph(guint32 new_frame_num) { gint8 n; if (new_frame_num != h245_labels.frame_num) return; for (n=0; nstrinfo_list); while (list) { tmp_listinfo=list->data; if (tmp_listinfo->protocol == VOIP_H323){ tmp_h323info = tmp_listinfo->prot_info; COPY_ADDRESS(&(tmp_src), &(pinfo->src)); COPY_ADDRESS(&(tmp_dst), &(pinfo->dst)); list2 = g_list_first(tmp_h323info->h245_list); while (list2) { h245_add=list2->data; if ( (ADDRESSES_EQUAL(&(h245_add->h245_address),&tmp_src) && (h245_add->h245_port == pinfo->srcport)) || (ADDRESSES_EQUAL(&(h245_add->h245_address),&tmp_dst) && (h245_add->h245_port == pinfo->destport)) ){ strinfo = (voip_calls_info_t*)(list->data); ++(strinfo->npackets); /* increment the packets counter of all calls */ ++(tapinfo->npackets); break; } list2 = g_list_next(list2); } if (strinfo!=NULL) break; g_free((void *)tmp_src.data); g_free((void *)tmp_dst.data); } list = g_list_next(list); } /* Tunnel is OFF, and we matched the h245 add so we add it to graph */ if (strinfo!=NULL){ ++(strinfo->npackets); /* increment the packets counter of all calls */ ++(tapinfo->npackets); frame_label = g_strdup(pi->frame_label); comment = g_strdup(pi->comment); /* if the frame number exists in graph, append to it*/ if (!append_to_frame_graph(tapinfo, pinfo->fd->num, frame_label, comment)) { /* if not exist, add to the graph */ add_to_graph(tapinfo, pinfo, frame_label, comment, strinfo->call_num, &(pinfo->src), &(pinfo->dst), 1); } g_free(frame_label); g_free(comment); } else { /* Tunnel is ON, so we save the label info to use it into h225 or q931 tap. OR may be tunnel OFF but we did not matched the h245 add, in this case nobady will set this label since the frame_num will not match */ h245_add_label(pinfo->fd->num, (gchar *) pi->frame_label, (gchar *) pi->comment); } tapinfo->redraw = TRUE; return 1; /* refresh output */ } /****************************************************************************/ /* TAP INTERFACE */ /****************************************************************************/ static gboolean have_H245dg_tap_listener=FALSE; /****************************************************************************/ void h245dg_calls_init_tap(void) { GString *error_string; if(have_H245dg_tap_listener==FALSE) { /* don't register tap listener, if we have it already */ error_string = register_tap_listener("h245dg", &(the_tapinfo_struct.h245dg_dummy), NULL, voip_calls_dlg_reset, H245dgcalls_packet, voip_calls_dlg_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_H245dg_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_h245dg_calls(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_struct.h245dg_dummy)); unprotect_thread_critical_region(); have_H245dg_tap_listener=FALSE; } /****************************************************************************/ /****************************TAP for SDP PROTOCOL ***************************/ /****************************************************************************/ /* whenever a SDP packet is seen by the tap listener */ static int SDPcalls_packet(void *ptr _U_, packet_info *pinfo, epan_dissect_t *edt _U_, const void *SDPinfo) { voip_calls_tapinfo_t *tapinfo = &the_tapinfo_struct; const sdp_packet_info *pi = SDPinfo; /* There are protocols like MGCP/SIP where the SDP is called before the tap for the MGCP/SIP packet, in those cases we assign the SPD summary to global lastSDPsummary to use it later */ g_free(sdp_summary); sdp_frame_num = pinfo->fd->num; /* Append to graph the SDP summary if the packet exists */ sdp_summary = g_strdup_printf("SDP (%s)", pi->summary_str); append_to_frame_graph(tapinfo, pinfo->fd->num, sdp_summary, NULL); tapinfo->redraw = TRUE; return 1; /* refresh output */ } /****************************************************************************/ /* TAP INTERFACE */ /****************************************************************************/ static gboolean have_sdp_tap_listener=FALSE; /****************************************************************************/ void sdp_calls_init_tap(void) { GString *error_string; if(have_sdp_tap_listener==FALSE) { /* don't register tap listener, if we have it already */ error_string = register_tap_listener("sdp", &(the_tapinfo_struct.sdp_dummy), NULL, voip_calls_dlg_reset, SDPcalls_packet, voip_calls_dlg_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_sdp_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_sdp_calls(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_struct.sdp_dummy)); unprotect_thread_critical_region(); have_sdp_tap_listener=FALSE; } /****************************************************************************/ /* ***************************TAP for MGCP **********************************/ /****************************************************************************/ /* This function will look for a signal/event in the SignalReq/ObsEvent string and return true if it is found */ static gboolean isSignal(const gchar *signal, const gchar *signalStr) { gint i; gchar **resultArray; /* if there is no signalStr, just return false */ if (signalStr == NULL) return FALSE; /* if are both "blank" return true */ if ( (*signal == '\0') && (*signalStr == '\0') ) return TRUE; /* look for signal in signalSre */ resultArray = g_strsplit(signalStr, ",", 10); for (i = 0; resultArray[i]; i++) { g_strstrip(resultArray[i]); if (strcmp(resultArray[i], signal) == 0) return TRUE; } g_strfreev(resultArray); return FALSE; } /* This function will get the Caller ID info and replace the current string This is how it looks the caller Id: rg, ci(02/16/08/29, "3035550002","Ale Sipura 2") */ static void mgcpCallerID(gchar *signalStr, gchar **callerId) { gchar **arrayStr; /* if there is no signalStr, just return false */ if (signalStr == NULL) return; arrayStr = g_strsplit(signalStr, "\"", 10); if (arrayStr[0] == NULL) return; /* look for the ci signal */ if (strstr(arrayStr[0], "ci(") && (arrayStr[1] != NULL) ) { /* free the previous "From" field of the call, and assign the new */ g_free(*callerId); *callerId = g_strdup(arrayStr[1]); } g_strfreev(arrayStr); return; } /* This function will get the Dialed Digits and replace the current string This is how it looks the dialed digits 5,5,5,0,0,0,2,#,* */ static void mgcpDialedDigits(gchar *signalStr, gchar **dialedDigits) { gchar *tmpStr; gchar resultStr[50]; gint i,j; /* if there is no signalStr, just return false */ if (signalStr == NULL) return; tmpStr = g_strdup(signalStr); for ( i = 0 ; tmpStr[i] ; i++) { switch (tmpStr[i]) { case '0' : case '1' : case '2' : case '3' : case '4' : case '5' : case '6' : case '7' : case '8' : case '9' : case '#' : case '*' : break; default: tmpStr[i] = '?'; break; } } for (i = 0, j = 0; tmpStr[i] && i<50; i++) { if (tmpStr[i] != '?') resultStr[j++] = tmpStr[i]; } resultStr[j] = '\0'; if (*resultStr == '\0') return; g_free(*dialedDigits); *dialedDigits = g_strdup(resultStr); g_free(tmpStr); return; } /****************************************************************************/ /* whenever a MGCP packet is seen by the tap listener */ static int MGCPcalls_packet( void *ptr _U_, packet_info *pinfo, epan_dissect_t *edt _U_, const void *MGCPinfo) { voip_calls_tapinfo_t *tapinfo = &the_tapinfo_struct; voip_calls_info_t *tmp_listinfo; voip_calls_info_t *strinfo = NULL; mgcp_calls_info_t *tmp_mgcpinfo = NULL; GList* list; GList* listGraph; gchar *frame_label = NULL; gchar *comment = NULL; graph_analysis_item_t *gai; gboolean new = FALSE; gboolean fromEndpoint = FALSE; /* true for calls originated in Endpoints, false for calls from MGC */ gdouble diff_time; const mgcp_info_t *pi = MGCPinfo; if ((pi->mgcp_type == MGCP_REQUEST) && !pi->is_duplicate ){ /* check wether we already have a call with this Endpoint and it is active*/ list = g_list_first(tapinfo->strinfo_list); while (list) { tmp_listinfo=list->data; if ((tmp_listinfo->protocol == VOIP_MGCP) && (tmp_listinfo->call_active_state == VOIP_ACTIVE)){ tmp_mgcpinfo = tmp_listinfo->prot_info; if (pi->endpointId != NULL){ if (g_strcasecmp(tmp_mgcpinfo->endpointId,pi->endpointId) == 0){ /* check first if it is an ended call. We consider an ended call after 1sec we don't get a packet in this Endpoint and the call has been released */ diff_time = nstime_to_sec(&pinfo->fd->rel_ts) - tmp_listinfo->stop_sec + (double)tmp_listinfo->stop_usec/1000000; if ( ((tmp_listinfo->call_state == VOIP_CANCELLED) || (tmp_listinfo->call_state == VOIP_COMPLETED) || (tmp_listinfo->call_state == VOIP_REJECTED)) && (diff_time > 1) ){ tmp_listinfo->call_active_state = VOIP_INACTIVE; } else { strinfo = (voip_calls_info_t*)(list->data); break; } } } } list = g_list_next (list); } /* there is no call with this Endpoint, lets see if this a new call or not */ if (strinfo == NULL){ if ( (strcmp(pi->code, "NTFY") == 0) && isSignal("hd", pi->observedEvents) ){ /* off hook transition */ /* this is a new call from the Endpoint */ fromEndpoint = TRUE; new = TRUE; } else if (strcmp(pi->code, "CRCX") == 0){ /* this is a new call from the MGC */ fromEndpoint = FALSE; new = TRUE; } if (!new) return 0; } } else if ( ((pi->mgcp_type == MGCP_RESPONSE) && pi->request_available) || ((pi->mgcp_type == MGCP_REQUEST) && pi->is_duplicate) ) { /* if it is a response OR if it is a duplicated Request, lets look in the Graph if thre is a request that match */ listGraph = g_list_first(tapinfo->graph_analysis->list); while (listGraph) { gai = listGraph->data; if (gai->frame_num == pi->req_num){ /* there is a request that match, so look the associated call with this call_num */ list = g_list_first(tapinfo->strinfo_list); while (list) { tmp_listinfo=list->data; if (tmp_listinfo->protocol == VOIP_MGCP){ if (tmp_listinfo->call_num == gai->conv_num){ tmp_mgcpinfo = tmp_listinfo->prot_info; strinfo = (voip_calls_info_t*)(list->data); break; } } list = g_list_next (list); } if (strinfo != NULL) break; } listGraph = g_list_next(listGraph); } /* if there is not a matching request, just return */ if (strinfo == NULL) return 0; } else return 0; /* not in the list? then create a new entry */ if (strinfo==NULL){ strinfo = g_malloc(sizeof(voip_calls_info_t)); strinfo->call_active_state = VOIP_ACTIVE; strinfo->call_state = VOIP_CALL_SETUP; if (fromEndpoint) { strinfo->from_identity=g_strdup(pi->endpointId); strinfo->to_identity=g_strdup(""); } else { strinfo->from_identity=g_strdup(""); strinfo->to_identity=g_strdup(pi->endpointId); } COPY_ADDRESS(&(strinfo->initial_speaker),&(pinfo->src)); strinfo->first_frame_num=pinfo->fd->num; strinfo->selected=FALSE; strinfo->start_sec=pinfo->fd->rel_ts.secs; strinfo->start_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->protocol=VOIP_MGCP; strinfo->prot_info=g_malloc(sizeof(mgcp_calls_info_t)); tmp_mgcpinfo=strinfo->prot_info; tmp_mgcpinfo->endpointId = g_strdup(pi->endpointId); tmp_mgcpinfo->fromEndpoint = fromEndpoint; strinfo->npackets = 0; strinfo->call_num = tapinfo->ncalls++; tapinfo->strinfo_list = g_list_append(tapinfo->strinfo_list, strinfo); } g_assert(tmp_mgcpinfo != NULL); /* change call state and add to graph */ switch (pi->mgcp_type) { case MGCP_REQUEST: if ( (strcmp(pi->code, "NTFY") == 0) && (pi->observedEvents != NULL) ){ frame_label = g_strdup_printf("%s ObsEvt:%s",pi->code, pi->observedEvents); if (tmp_mgcpinfo->fromEndpoint){ /* use the Dialed digits to fill the "To" for the call, but use the first NTFY */ if (strinfo->to_identity[0] == '\0') mgcpDialedDigits(pi->observedEvents, &(strinfo->to_identity)); /* from MGC and the user picked up, the call is connected */ } else if (isSignal("hd", pi->observedEvents)) strinfo->call_state=VOIP_IN_CALL; /* hung up signal */ if (isSignal("hu", pi->observedEvents)) { if ((strinfo->call_state == VOIP_CALL_SETUP) || (strinfo->call_state == VOIP_RINGING)){ strinfo->call_state = VOIP_CANCELLED; } else { strinfo->call_state = VOIP_COMPLETED; } } } else if (strcmp(pi->code, "RQNT") == 0) { /* for calls from Endpoint: if there is a "no signal" RQNT and the call was RINGING, we assume this is the CONNECT */ if ( tmp_mgcpinfo->fromEndpoint && isSignal("", pi->signalReq) && (strinfo->call_state == VOIP_RINGING) ) { strinfo->call_state = VOIP_IN_CALL; } /* if there is ringback or ring tone, change state to ringing */ if ( isSignal("rg", pi->signalReq) || isSignal("rt", pi->signalReq) ) { strinfo->call_state = VOIP_RINGING; } /* if there is a Busy or ReorderTone, and the call was Ringing or Setup the call is Rejected */ if ( (isSignal("ro", pi->signalReq) || isSignal("bz", pi->signalReq)) && ((strinfo->call_state == VOIP_CALL_SETUP) || (strinfo->call_state = VOIP_RINGING)) ) { strinfo->call_state = VOIP_REJECTED; } if (pi->signalReq != NULL) frame_label = g_strdup_printf("%s%sSigReq:%s",pi->code, (pi->hasDigitMap == TRUE)?" DigitMap ":"", pi->signalReq); else frame_label = g_strdup_printf("%s%s",pi->code, (pi->hasDigitMap == TRUE)?" DigitMap ":""); /* use the CallerID info to fill the "From" for the call */ if (!tmp_mgcpinfo->fromEndpoint) mgcpCallerID(pi->signalReq, &(strinfo->from_identity)); } else if (strcmp(pi->code, "DLCX") == 0) { /* if there is a DLCX in a call To an Endpoint and the call was not connected, we use the DLCX as the end of the call */ if (!tmp_mgcpinfo->fromEndpoint){ if ((strinfo->call_state == VOIP_CALL_SETUP) || (strinfo->call_state == VOIP_RINGING)){ strinfo->call_state = VOIP_CANCELLED; } } } if (frame_label == NULL) frame_label = g_strdup_printf("%s",pi->code); break; case MGCP_RESPONSE: frame_label = g_strdup_printf("%d (%s)",pi->rspcode, pi->code); break; case MGCP_OTHERS: /* XXX what to do? */ break; } comment = g_strdup_printf("MGCP %s %s%s", tmp_mgcpinfo->endpointId, (pi->mgcp_type == MGCP_REQUEST)?"Request":"Response", pi->is_duplicate?" Duplicate":""); strinfo->stop_sec=pinfo->fd->rel_ts.secs; strinfo->stop_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->last_frame_num=pinfo->fd->num; ++(strinfo->npackets); /* increment the packets counter of all calls */ ++(tapinfo->npackets); /* add to the graph */ add_to_graph(tapinfo, pinfo, frame_label, comment, strinfo->call_num, &(pinfo->src), &(pinfo->dst), 1); g_free(comment); g_free(frame_label); /* add SDP info if apply */ if ( (sdp_summary != NULL) && (sdp_frame_num == pinfo->fd->num) ){ append_to_frame_graph(tapinfo, pinfo->fd->num, sdp_summary, NULL); g_free(sdp_summary); sdp_summary = NULL; } tapinfo->redraw = TRUE; return 1; /* refresh output */ } /****************************************************************************/ /* TAP INTERFACE */ /****************************************************************************/ static gboolean have_MGCP_tap_listener=FALSE; /****************************************************************************/ void mgcp_calls_init_tap(void) { GString *error_string; if(have_MGCP_tap_listener==FALSE) { /* don't register tap listener, if we have it already */ /* we send an empty filter, to force a non null "tree" in the mgcp dissector */ error_string = register_tap_listener("mgcp", &(the_tapinfo_struct.mgcp_dummy), strdup(""), voip_calls_dlg_reset, MGCPcalls_packet, voip_calls_dlg_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_MGCP_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_mgcp_calls(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_struct.mgcp_dummy)); unprotect_thread_critical_region(); have_MGCP_tap_listener=FALSE; } /****************************************************************************/ /****************************TAP for ACTRACE (AudioCodes trace)**************/ /****************************************************************************/ /* whenever a ACTRACE packet is seen by the tap listener */ static int ACTRACEcalls_packet(void *ptr _U_, packet_info *pinfo, epan_dissect_t *edt _U_, const void *ACTRACEinfo) { voip_calls_tapinfo_t *tapinfo = &the_tapinfo_struct; const actrace_info_t *pi = ACTRACEinfo; GList *list; actrace_cas_calls_info_t *tmp_actrace_cas_info; voip_calls_info_t *tmp_listinfo; voip_calls_info_t *strinfo = NULL; actrace_frame_num = pinfo->fd->num; actrace_trunk = pi->trunk; actrace_direction = pi->direction; if (pi->type == 1){ /* is CAS protocol */ address pstn_add; gchar *comment = NULL; strinfo = NULL; list = g_list_first(tapinfo->strinfo_list); while (list) { tmp_listinfo=list->data; if ( tmp_listinfo->protocol == VOIP_AC_CAS ){ tmp_actrace_cas_info = tmp_listinfo->prot_info; /* TODO: Also check the IP of the Blade, and if the call is complete (no active) */ if ( (tmp_actrace_cas_info->bchannel == pi->cas_bchannel) && (tmp_actrace_cas_info->trunk == actrace_trunk) ) { strinfo = (voip_calls_info_t*)(list->data); break; } } list = g_list_next (list); } SET_ADDRESS(&pstn_add, AT_STRINGZ, 5, g_strdup("PSTN")); /* if it is a new call, add it to the list */ if (!strinfo) { strinfo = g_malloc(sizeof(voip_calls_info_t)); strinfo->call_active_state = VOIP_ACTIVE; strinfo->call_state = VOIP_CALL_SETUP; strinfo->from_identity=g_strdup("N/A"); strinfo->to_identity=g_strdup("N/A"); COPY_ADDRESS(&(strinfo->initial_speaker),actrace_direction?&pstn_add:&(pinfo->src)); strinfo->first_frame_num=pinfo->fd->num; strinfo->selected=FALSE; strinfo->start_sec=pinfo->fd->rel_ts.secs; strinfo->start_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->protocol=VOIP_AC_CAS; strinfo->prot_info=g_malloc(sizeof(actrace_cas_calls_info_t)); tmp_actrace_cas_info=strinfo->prot_info; tmp_actrace_cas_info->bchannel=pi->cas_bchannel; tmp_actrace_cas_info->trunk=actrace_trunk; strinfo->npackets = 0; strinfo->call_num = tapinfo->ncalls++; tapinfo->strinfo_list = g_list_append(tapinfo->strinfo_list, strinfo); } strinfo->stop_sec=pinfo->fd->rel_ts.secs; strinfo->stop_usec=pinfo->fd->rel_ts.nsecs/1000; strinfo->last_frame_num=pinfo->fd->num; ++(strinfo->npackets); /* increment the packets counter of all calls */ ++(tapinfo->npackets); if (!comment) comment = g_strdup_printf("AC_CAS trunk:%u", actrace_trunk ); add_to_graph(tapinfo, pinfo, pi->cas_frame_label , comment, strinfo->call_num, actrace_direction?&pstn_add:&(pinfo->src), actrace_direction?&(pinfo->src):&pstn_add, 1 ); g_free(comment); g_free((char *)pstn_add.data); } tapinfo->redraw = TRUE; return 1; /* refresh output */ } /****************************************************************************/ /* TAP INTERFACE */ /****************************************************************************/ static gboolean have_actrace_tap_listener=FALSE; /****************************************************************************/ void actrace_calls_init_tap(void) { GString *error_string; if(have_actrace_tap_listener==FALSE) { /* don't register tap listener, if we have it already */ error_string = register_tap_listener("actrace", &(the_tapinfo_struct.actrace_dummy), NULL, voip_calls_dlg_reset, ACTRACEcalls_packet, voip_calls_dlg_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_actrace_tap_listener=TRUE; } } /****************************************************************************/ void remove_tap_listener_actrace_calls(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_struct.actrace_dummy)); unprotect_thread_critical_region(); have_actrace_tap_listener=FALSE; } /****************************************************************************/ /* ***************************TAP for OTHER PROTOCOL **********************************/ /****************************************************************************/ /****************************************************************************/ /* whenever a prot_ packet is seen by the tap listener */ /* static int prot_calls_packet(void *ptr _U_, packet_info *pinfo, epan_dissect_t *edt _U_, const void *prot_info _U_) { voip_calls_tapinfo_t *tapinfo = &the_tapinfo_struct; if (strinfo!=NULL){ strinfo->stop_sec=pinfo->fd->rel_secs; strinfo->stop_usec=pinfo->fd->rel_usecs; strinfo->last_frame_num=pinfo->fd->num; ++(strinfo->npackets); ++(tapinfo->npackets); } tapinfo->redraw = TRUE; return 1; } */ /****************************************************************************/ /* static gboolean have_prot__tap_listener=FALSE; void prot_calls_init_tap(void) { GString *error_string; if(have_prot__tap_listener==FALSE) { error_string = register_tap_listener("prot_", &(the_tapinfo_struct.prot__dummy), NULL, voip_calls_dlg_reset, prot__calls_packet, voip_calls_dlg_draw ); if (error_string != NULL) { simple_dialog(ESD_TYPE_ERROR, ESD_BTN_OK, error_string->str); g_string_free(error_string, TRUE); exit(1); } have_prot__tap_listener=TRUE; } } */ /****************************************************************************/ /* void remove_tap_listener_prot__calls(void) { protect_thread_critical_region(); remove_tap_listener(&(the_tapinfo_struct.prot__dummy)); unprotect_thread_critical_region(); have_prot__tap_listener=FALSE; } */