From Stéphane Gorse:

The menu gets a new item (Statistics -> RTSP -> Packet Counter).

Like HTTP, filter can be set and then the dialog windows shows the result of the RTSP analysis.
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=6042

svn path=/trunk/; revision=37741

1 files changed, 282 insertions, 0 deletions

diff --git a/tap-rtspstat.c b/tap-rtspstat.c
new file mode 100644
index 0000000000..feb8c8bd8e
--- /dev/null
+++ b/tap-rtspstat.c
@@ -0,0 +1,282 @@
+/* tap-rtspstat.c
+ * tap-rtspstat   March 2011 
+ *
+ * Stephane GORSE (Orange Labs / France Telecom)
+ * Copied from Jean-Michel FAYARD's works (HTTP)
+ *
+ * $Id$
+ *
+ * Wireshark - Network traffic analyzer
+ * By Gerald Combs <gerald@wireshark.org>
+ * Copyright 1998 Gerald Combs
+ * 
+ * This program is free software; you can redistribute it and/or
+ * modify it under the terms of the GNU General Public License
+ * as published by the Free Software Foundation; either version 2
+ * of the License, or (at your option) any later version.
+ * 
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+ * GNU General Public License for more details.
+ * 
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
+ */
+
+#ifdef HAVE_CONFIG_H
+# include "config.h"
+#endif
+
+#include <stdio.h>
+#include <string.h>
+
+#include "epan/packet_info.h"
+#include "epan/value_string.h"
+#include <epan/tap.h>
+#include <epan/stat_cmd_args.h>
+#include "register.h"
+#include <epan/dissectors/packet-rtsp.h>
+
+	
+/* used to keep track of the statictics for an entire program interface */
+typedef struct _rtsp_stats_t {
+	char 		*filter;
+	GHashTable	*hash_responses;
+	GHashTable	*hash_requests;
+} rtspstat_t;
+
+/* used to keep track of the stats for a specific response code
+ * for example it can be { 3, 404, "Not Found" ,...}
+ * which means we captured 3 reply rtsp/1.1 404 Not Found */
+typedef struct _rtsp_response_code_t {
+	guint32 	 packets;		/* 3 */
+	guint	 	 response_code;	/* 404 */
+	const gchar	*name;			/* Not Found */
+	rtspstat_t	*sp;
+} rtsp_response_code_t;
+
+/* used to keep track of the stats for a specific request string */
+typedef struct _rtsp_request_methode_t {
+	gchar		*response;	/* eg. : SETUP */
+	guint32		 packets;
+	rtspstat_t	*sp;
+} rtsp_request_methode_t;
+
+
+/* insert some entries */
+static void
+rtsp_init_hash( rtspstat_t *sp)
+{
+	int i;
+
+	sp->hash_responses = g_hash_table_new( g_int_hash, g_int_equal);		
+			
+	for (i=0 ; rtsp_status_code_vals[i].strptr ; i++ )
+	{
+		gint *key = g_malloc (sizeof(gint));
+		rtsp_response_code_t *sc = g_malloc (sizeof(rtsp_response_code_t));
+		*key = rtsp_status_code_vals[i].value;
+		sc->packets=0;
+		sc->response_code =  *key;
+		sc->name=rtsp_status_code_vals[i].strptr;
+		sc->sp = sp;
+		g_hash_table_insert( sc->sp->hash_responses, key, sc);
+	}
+	sp->hash_requests = g_hash_table_new( g_str_hash, g_str_equal);
+}
+static void
+rtsp_draw_hash_requests( gchar *key _U_ , rtsp_request_methode_t *data, gchar * format)
+{
+	if (data->packets==0)
+		return;
+	printf( format, data->response, data->packets); 		
+}
+
+static void
+rtsp_draw_hash_responses( gint * key _U_ , rtsp_response_code_t *data, char * format)
+{
+	if (data==NULL) {
+		g_warning("No data available, key=%d\n", *key);
+		exit(EXIT_FAILURE);
+	}
+	if (data->packets==0)
+		return;
+	/* "     RTSP %3d %-35s %9d packets", */
+	printf(format,  data->response_code, data->name, data->packets );
+}
+		
+
+		
+/* NOT USED at this moment */
+/*
+static void
+rtsp_free_hash( gpointer key, gpointer value, gpointer user_data _U_ )
+{
+	g_free(key);
+	g_free(value);
+}
+*/
+static void
+rtsp_reset_hash_responses(gchar *key _U_ , rtsp_response_code_t *data, gpointer ptr _U_ )
+{	
+	data->packets = 0;
+}
+static void
+rtsp_reset_hash_requests(gchar *key _U_ , rtsp_request_methode_t *data, gpointer ptr _U_ )
+{	
+	data->packets = 0;
+}
+
+static void
+rtspstat_reset(void *psp  )
+{
+	rtspstat_t *sp=psp;
+
+	g_hash_table_foreach( sp->hash_responses, (GHFunc)rtsp_reset_hash_responses, NULL);
+	g_hash_table_foreach( sp->hash_requests, (GHFunc)rtsp_reset_hash_requests, NULL);
+
+}
+
+static int
+rtspstat_packet(void *psp , packet_info *pinfo _U_, epan_dissect_t *edt _U_, const void *pri)
+{
+	const rtsp_info_value_t *value=pri;
+	rtspstat_t *sp=(rtspstat_t *) psp;
+
+	/* We are only interested in reply packets with a status code */
+	/* Request or reply packets ? */
+	if (value->response_code!=0) {
+		guint *key=g_malloc( sizeof(guint) );
+		rtsp_response_code_t *sc;
+
+		*key=value->response_code;
+		sc =  g_hash_table_lookup( 
+				sp->hash_responses, 
+				key);
+		if (sc==NULL){
+			/* non standard status code ; we classify it as others
+			 * in the relevant category (Informational,Success,Redirection,Client Error,Server Error)
+			 */
+			int i = value->response_code;
+			if ((i<100) || (i>=600)) {
+				return 0;
+			}
+			else if (i<200){
+				*key=199;	/* Hopefully, this status code will never be used */
+			}
+			else if (i<300){
+				*key=299;
+			}
+			else if (i<400){
+				*key=399;
+			}
+			else if (i<500){
+				*key=499;
+			}
+			else{
+				*key=599;
+			}
+			sc =  g_hash_table_lookup( 
+				sp->hash_responses, 
+				key);
+			if (sc==NULL)
+				return 0;
+		}
+		sc->packets++;
+	} 
+	else if (value->request_method){
+		rtsp_request_methode_t *sc;
+
+		sc =  g_hash_table_lookup( 
+				sp->hash_requests, 
+				value->request_method);
+		if (sc==NULL){
+			sc=g_malloc( sizeof(rtsp_request_methode_t) );
+			sc->response=g_strdup( value->request_method );
+			sc->packets=1;
+			sc->sp = sp;
+			g_hash_table_insert( sp->hash_requests, sc->response, sc);
+		} else {
+			sc->packets++;
+		}
+	} else {
+		return 0;
+	}
+	return 1;
+}
+
+
+static void
+rtspstat_draw(void *psp  )
+{
+	rtspstat_t *sp=psp;
+	printf("\n");
+	printf("===================================================================\n");
+	if (! sp->filter[0])
+		printf("RTSP Statistics\n");
+	else
+		printf("RTSP Statistics with filter %s\n", sp->filter);
+
+	printf(	"* RTSP Status Codes in reply packets\n");
+	g_hash_table_foreach( sp->hash_responses, (GHFunc)rtsp_draw_hash_responses,
+		"    RTSP %3d %s\n");
+	printf("* List of RTSP Request methods\n");
+	g_hash_table_foreach( sp->hash_requests,  (GHFunc)rtsp_draw_hash_requests,
+		"    %9s %d \n");
+	printf("===================================================================\n");
+}
+
+
+
+/* When called, this function will create a new instance of gtk_rtspstat.
+ */
+static void
+gtk_rtspstat_init(const char *optarg,void* userdata _U_)
+{
+	rtspstat_t *sp;
+	const char *filter=NULL;
+	GString	*error_string;
+	
+	if (!strncmp (optarg, "rtsp,stat,", 10)){
+		filter=optarg+10;
+	} else {
+		filter=NULL;
+	}
+	
+	sp = g_malloc( sizeof(rtspstat_t) );
+	if(filter){
+		sp->filter=g_strdup(filter);
+	} else {
+		sp->filter=NULL;
+	}
+	/*g_hash_table_foreach( rtsp_status, (GHFunc)rtsp_reset_hash_responses, NULL);*/
+
+
+	error_string = register_tap_listener( 
+			"rtsp",
+			sp,
+			filter,
+			0,
+			rtspstat_reset,
+			rtspstat_packet,
+			rtspstat_draw);
+	if (error_string){
+		/* error, we failed to attach to the tap. clean up */
+		g_free(sp->filter);
+		g_free(sp);
+		fprintf (stderr, "tshark: Couldn't register rtsp,stat tap: %s\n",
+				error_string->str);
+		g_string_free(error_string, TRUE);
+		exit(1);
+	}
+
+	rtsp_init_hash(sp);
+}
+
+void
+register_tap_listener_gtkrtspstat(void)
+{
+	register_stat_cmd_arg("rtsp,stat,", gtk_rtspstat_init,NULL);
+}