1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
|
/* dissector_filters.c
* Routines for dissector-generated conversation filters for use as
* display and color filters
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "config.h"
#include <glib.h>
#include "packet.h"
#include "dissector_filters.h"
GList *conv_filter_list = NULL;
void register_conversation_filter(const char *proto_name, const char *display_name,
is_filter_valid_func is_filter_valid, build_filter_string_func build_filter_string) {
conversation_filter_t *entry;
entry = (conversation_filter_t *)g_malloc(sizeof(conversation_filter_t));
entry->proto_name = proto_name;
entry->display_name = display_name;
entry->is_filter_valid = is_filter_valid;
entry->build_filter_string = build_filter_string;
conv_filter_list = g_list_append(conv_filter_list, entry);
}
struct conversation_filter_s* find_conversation_filter(const char *name)
{
GList *list_entry = conv_filter_list;
conversation_filter_t* filter;
while (list_entry != NULL) {
filter = (conversation_filter_t*)list_entry->data;
if (!strcmp(filter->proto_name, name))
return filter;
list_entry = g_list_next(list_entry);
}
return NULL;
}
static void conversation_filter_free(gpointer p, gpointer user_data _U_)
{
g_free(p);
}
void conversation_filters_cleanup(void)
{
g_list_foreach(conv_filter_list, conversation_filter_free, NULL);
g_list_free(conv_filter_list);
}
gchar *conversation_filter_from_packet(struct _packet_info *pinfo)
{
const char *layers[] = { "tcp", "udp", "ip", "ipv6", "eth" };
conversation_filter_t *conv_filter;
gchar *filter;
size_t i;
for (i = 0; i < G_N_ELEMENTS(layers); i++) {
conv_filter = find_conversation_filter(layers[i]);
if (conv_filter && conv_filter->is_filter_valid(pinfo)) {
if ((filter = conv_filter->build_filter_string(pinfo)) != NULL)
return filter;
}
}
return NULL;
}
/*
* Editor modelines - http://www.wireshark.org/tools/modelines.html
*
* Local variables:
* c-basic-offset: 4
* tab-width: 8
* indent-tabs-mode: nil
* End:
*
* vi: set shiftwidth=4 tabstop=8 expandtab:
* :indentSize=4:tabSize=8:noTabs=true:
*/
|
