Project

General

Profile

Download (10.3 KB) Statistics
| Branch: | Tag: | Revision:
1 ab6a5cfc Scott Ullrich
<?php
2
/*
3
4
	Redistribution and use in source and binary forms, with or without
5
	modification, are permitted provided that the following conditions are met:
6
7
	1. Redistributions of source code must retain the above copyright notice,
8
	this list of conditions and the following disclaimer.
9
10
	2. Redistributions in binary form must reproduce the above copyright
11
	notice, this list of conditions and the following disclaimer in the
12
	documentation and/or other materials provided with the distribution.
13
14
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
15
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
16
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
17
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
18
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
19
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
20
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
21
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
22
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
23
	POSSIBILITY OF SUCH DAMAGE.
24
*/
25
26 13d193c2 Scott Ullrich
/*	
27
	pfSense_BUILDER_BINARIES:	/bin/ps	/usr/bin/grep	/usr/sbin/tcpdump
28
	pfSense_MODULE:	routing
29
*/
30
31 6b07c15a Matthew Grooms
##|+PRIV
32
##|*IDENT=page-diagnostics-packetcapture
33
##|*NAME=Diagnostics: Packet Capture page
34
##|*DESCR=Allow access to the 'Diagnostics: Packet Capture' page.
35
##|*MATCH=diag_packet_capture.php*
36
##|-PRIV
37
38 1c550bed Renato Botelho
$pgtitle = array(gettext("Diagnostics"), gettext("Packet Capture"));
39 d7cd7129 Scott Ullrich
require_once("guiconfig.inc");
40
require_once("pfsense-utils.inc");
41 ab6a5cfc Scott Ullrich
42 4e7d1665 Scott Ullrich
$fp = "/root/";
43 ab6a5cfc Scott Ullrich
$fn = "packetcapture.cap";
44
$snaplen = 1500;//default packet length
45
$count = 100;//default number of packets to capture
46
47
if ($_POST) {
48
	$do_tcpdump = true;
49
	$host = $_POST['host'];
50
	$selectedif = $_POST['interface'];
51
	$count = $_POST['count'];
52
	$packetlength = $_POST['snaplen'];
53
	$port = $_POST['port'];
54
	$detail = $_POST['detail'];
55 4e7d1665 Scott Ullrich
	
56
	conf_mount_rw();
57 ab6a5cfc Scott Ullrich
58 b39ca83c Scott Ullrich
	if ($_POST['dnsquery']) {
59
		//if dns lookup is checked
60 ab6a5cfc Scott Ullrich
		$disabledns = "";
61 b39ca83c Scott Ullrich
	} else {
62
		//if dns lookup is unchecked
63 ab6a5cfc Scott Ullrich
		$disabledns = "-n";
64
	}
65
66 b39ca83c Scott Ullrich
	if ($_POST['startbtn'] != "" ) {
67 1c550bed Renato Botelho
		$action = gettext("Start");
68 232d6540 Scott Dale
		
69
	 	//delete previous packet capture if it exists
70
	 	if (file_exists($fp.$fn))
71
	 		unlink ($fp.$fn);
72 ab6a5cfc Scott Ullrich
73 b39ca83c Scott Ullrich
	} elseif ($_POST['stopbtn']!= "") {
74 1c550bed Renato Botelho
		$action = gettext("Stop");
75 f426f89e Chris Buechler
		$processes_running = trim(shell_exec('/bin/ps axw -O pid= | /usr/bin/grep tcpdump | /usr/bin/grep $fn | /usr/bin/grep -v pflog'));
76 d5c2fde5 Scott Ullrich
77
		//explode processes into an array, (delimiter is new line)
78
		$processes_running_array = explode("\n", $processes_running);
79
80
		//kill each of the packetcapture processes
81 b39ca83c Scott Ullrich
		foreach ($processes_running_array as $process) {
82 d5c2fde5 Scott Ullrich
			$process_id_pos = strpos($process, ' ');
83
			$process_id = substr($process, 0, $process_id_pos);
84
			exec("kill $process_id");
85
		}
86
87 b39ca83c Scott Ullrich
	} else {
88
		//download file
89 93c86d2b Scott Dale
		$fs = filesize($fp.$fn);
90 ab6a5cfc Scott Ullrich
		header("Content-Type: application/octet-stream");
91 9f3259e0 Scott Dale
        header("Content-Disposition: attachment; filename=$fn");
92 ab6a5cfc Scott Ullrich
		header("Content-Length: $fs");
93
		readfile($fp.$fn);
94
	}
95 b39ca83c Scott Ullrich
} else {
96 ab6a5cfc Scott Ullrich
	$do_tcpdump = false;
97
}
98
include("head.inc"); ?>
99 b39ca83c Scott Ullrich
100 ab6a5cfc Scott Ullrich
<body link="#000000" vlink="#0000CC" alink="#0000CC">
101 b39ca83c Scott Ullrich
102
<?php
103
include("fbegin.inc"); 
104
?>
105 ab6a5cfc Scott Ullrich
106
<table width="100%" border="0" cellpadding="0" cellspacing="0">
107
        <tr>
108
          <td>
109
			<form action="diag_packet_capture.php" method="post" name="iform" id="iform">
110
			  <table width="100%" border="0" cellpadding="6" cellspacing="0">
111 0cece4a2 Scott Ullrich
				<tr>
112 1c550bed Renato Botelho
					<td colspan="2" valign="top" class="listtopic"><?=gettext("Packet capture");?></td>
113 0cece4a2 Scott Ullrich
				</tr>	
114 ab6a5cfc Scott Ullrich
               	<tr>
115 1c550bed Renato Botelho
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Interface");?></td>
116 ab6a5cfc Scott Ullrich
				  <td width="83%" class="vtable">
117 dddf4c16 Scott Ullrich
				<select name="interface">
118 b39ca83c Scott Ullrich
<?php 
119
					$interfaces = get_configured_interface_with_descr();
120
					foreach ($interfaces as $iface => $ifacename): 
121
?>
122 7ec05d27 Ermal Luçi
                      <option value="<?=$iface;?>" <?php if (!link_interface_to_bridge($iface) && $selectedif == $iface) echo "selected"; ?>>
123 ab6a5cfc Scott Ullrich
                      <?php echo $ifacename;?>
124
                      </option>
125
                      <?php endforeach;?>
126
                    </select>
127 1c550bed Renato Botelho
					<br/><?=gettext("Select the interface the traffic will be passing through. Typically this will be the WAN interface.");?>
128 ab6a5cfc Scott Ullrich
				  </td>
129
				</tr>
130
			    <tr>
131 1c550bed Renato Botelho
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Host Address");?></td>
132 ab6a5cfc Scott Ullrich
				  <td width="83%" class="vtable">
133 b5c78501 Seth Mos
                    <input name="host" type="text" class="formfld host" id="host" size="20" value="<?=htmlspecialchars($host);?>">
134 1c550bed Renato Botelho
					<br/><?=gettext("This value is either the Source or Destination IP address. The packet capture will look for this address in either field.");?>
135
					<br/><?=gettext("This value can be a domain name or IP address.");?>
136
					<br/><?=gettext("If you leave this field blank, all packets on the specified interface will be captured. ");?>
137 ab6a5cfc Scott Ullrich
					</td>
138
				</tr>
139
				<tr>
140 1c550bed Renato Botelho
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Port");?></td>
141 ab6a5cfc Scott Ullrich
				  <td width="83%" class="vtable">
142 b5c78501 Seth Mos
                    <input name="port" type="text" class="formfld unknown" id="port" size="5" value="<?=$port;?>">
143 1c550bed Renato Botelho
					<br/><?=gettext("The port can be either the source or destination port. The packet capture will look for this port in either field.");?>
144
					<br/><?=gettext("Leave blank if you do not want to filter by port.");?>
145 ab6a5cfc Scott Ullrich
					</td>
146
				</tr>
147
				<tr>
148 1c550bed Renato Botelho
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Packet Length");?></td>
149 ab6a5cfc Scott Ullrich
				  <td width="83%" class="vtable">
150 b5c78501 Seth Mos
                    <input name="snaplen" type="text" class="formfld unknown" id="snaplen" size="5" value="<?=$snaplen;?>">
151 1c550bed Renato Botelho
					<br/><?=gettext("The Packet length is the number of bytes the packet will capture for each payload. Default value is 1500.");?>
152 ab6a5cfc Scott Ullrich
					</td>
153
				</tr>
154
				<tr>
155 1c550bed Renato Botelho
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Count");?></td>
156 ab6a5cfc Scott Ullrich
				  <td width="83%" class="vtable">
157 b5c78501 Seth Mos
                    <input name="count" type="text" class="formfld unknown" id="count" size="5" value="<?=$count;?>">
158 1c550bed Renato Botelho
					<br/><?=gettext("This is the number of packets the packet capture will grab. Default value is 100.") . "<br/>" . gettext("Enter 0 (zero) for no count limit.");?>
159 ab6a5cfc Scott Ullrich
				</tr>
160
				<tr>
161 1c550bed Renato Botelho
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Level of Detail");?></td>
162 ab6a5cfc Scott Ullrich
				  <td width="83%" class="vtable">
163 b5c78501 Seth Mos
                    <select name="detail" type="text" class="formselect" id="detail" size="1">
164 1c550bed Renato Botelho
						<option value="-q" <?php if ($detail == "-q") echo "selected"; ?>><?=gettext("Normal");?></option>
165
						<option value="-v" <?php if ($detail == "-v") echo "selected"; ?>><?=gettext("Medium");?></option>
166
						<option value="-vv" <?php if ($detail == "-vv") echo "selected"; ?>><?=gettext("High");?></option>
167
						<option value="-vv -e" <?php if ($detail == "-vv -e") echo "selected"; ?>><?=gettext("Full");?></option>
168 ab6a5cfc Scott Ullrich
					</select>
169 1c550bed Renato Botelho
					<br/><?=gettext("This is the level of detail that will be displayed after hitting 'Stop' when the packets have been captured.") .  "<br/><b>" .
170
							gettext("Note") . ":</b> " .
171
							gettext("This option does not affect the level of detail when downloading the packet capture.");?>
172 ab6a5cfc Scott Ullrich
				</tr>
173
				<tr>
174 1c550bed Renato Botelho
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Reverse DNS Lookup");?></td>
175 ab6a5cfc Scott Ullrich
				  <td width="83%" class="vtable">
176
					<input name="dnsquery" type="checkbox"<?php if($_POST['dnsquery']) echo " CHECKED"; ?>>
177 1c550bed Renato Botelho
					<br/><?=gettext("This check box will cause the packet capture to perform a reverse DNS lookup associated with all IP addresses.");?>
178
					<br/><b><?=gettext("Note");?>: </b><?=gettext("This option can cause delays for large packet captures.");?>
179 ab6a5cfc Scott Ullrich
					</td>
180
				</tr>
181
				<tr>
182
				  <td width="17%" valign="top">&nbsp;</td>
183
				  <td width="83%">
184 b39ca83c Scott Ullrich
<?php
185 d5c2fde5 Scott Ullrich
186 b39ca83c Scott Ullrich
                    /* check to see if packet capture tcpdump is already running */
187 00c89b35 Chris Buechler
					$processcheck = (trim(shell_exec('/bin/ps axw -O pid= | /usr/bin/grep tcpdump | /usr/bin/grep $fn | /usr/bin/grep -v pflog')));
188 9b1b06b5 Scott Dale
					
189
					$processisrunning = false;
190 d5c2fde5 Scott Ullrich
191 9b1b06b5 Scott Dale
					if ($processcheck != false)
192
						$processisrunning = true;
193
						
194 1c550bed Renato Botelho
					if (($action == gettext("Stop") or $action == "") and $processisrunning != true)
195
						echo "<input type=\"submit\" name=\"startbtn\" value=\"" . gettext("Start") . "\">&nbsp;";
196 b39ca83c Scott Ullrich
				  	else {
197 1c550bed Renato Botelho
					  	echo "<input type=\"submit\" name=\"stopbtn\" value=\"" . gettext("Stop") . "\">&nbsp;";
198 232d6540 Scott Dale
				  	}
199 b39ca83c Scott Ullrich
					if (file_exists($fp.$fn) and $processisrunning != true) {
200 1c550bed Renato Botelho
						echo "<input type=\"submit\" name=\"downloadbtn\" value=\"" . gettext("Download Capture") . "\">";
201
						echo "&nbsp;&nbsp;(" . gettext("The packet capture file was last updated") . ": " . date("F jS, Y g:i:s a.", filemtime($fp.$fn)) . ")";
202 ab6a5cfc Scott Ullrich
					}
203 b39ca83c Scott Ullrich
?>
204 ab6a5cfc Scott Ullrich
				  </td>
205
				</tr>
206
				<tr>
207
				<td valign="top" colspan="2">
208 b39ca83c Scott Ullrich
<?php
209 9b1b06b5 Scott Dale
				echo "<font face='terminal' size='2'>";
210
				if ($processisrunning == true)
211 1c550bed Renato Botelho
						echo("<strong>" . gettext("Packet Capture is running.") . "</strong><br/>");
212 9b1b06b5 Scott Dale
						
213
				if ($do_tcpdump) {					
214 ab6a5cfc Scott Ullrich
215 b39ca83c Scott Ullrich
					if ($port != "") {
216 232d6540 Scott Dale
                       $searchport = "and port ".$port;
217
                       if($host <> "")                        
218
							$searchport = "and port ".$port;
219
						else
220
							$searchport = "port ".$port;
221 b39ca83c Scott Ullrich
                    } else {
222 232d6540 Scott Dale
                        $searchport = "";
223
                    }
224
225 b39ca83c Scott Ullrich
       				if ($host != "") {
226 bda839a7 Scott Dale
             	       $searchhost = "host " . $host;
227 b39ca83c Scott Ullrich
					} else {
228 232d6540 Scott Dale
                       $searchhost = "";
229 bda839a7 Scott Dale
             		}
230 b39ca83c Scott Ullrich
             		if ($count != "0" ) {
231 bda839a7 Scott Dale
             			 $searchcount = "-c " . $count;
232 b39ca83c Scott Ullrich
             		} else {
233 bda839a7 Scott Dale
             			$searchcount = "";
234
             		}
235 ab6a5cfc Scott Ullrich
236
					$selectedif = convert_friendly_interface_to_real_interface_name($selectedif);
237 b39ca83c Scott Ullrich
	
238 1c550bed Renato Botelho
					if ($action == gettext("Start")) {
239
						echo("<strong>" . gettext("Packet Capture is running.") . "</strong><br/>");
240 9b1b06b5 Scott Dale
					 	mwexec_bg ("/usr/sbin/tcpdump -i $selectedif $searchcount -s $packetlength -w $fp$fn $searchhost $searchport");
241 b39ca83c Scott Ullrich
					} else  {
242
						//action = stop
243 1c550bed Renato Botelho
						echo("<strong>" . gettext("Packet Capture stopped.") . "<br/><br/>" . gettext("Packets Captured") . ":</strong><br/>");
244 b39ca83c Scott Ullrich
?>
245 ab6a5cfc Scott Ullrich
						<textarea style="width:98%" name="code" rows="15" cols="66" wrap="off" readonly="readonly">
246 b39ca83c Scott Ullrich
<?php
247
						system ("/usr/sbin/tcpdump $disabledns $detail -r $fp$fn");
248
249
						conf_mount_ro();
250
?>
251
						</textarea>
252
<?php
253 ab6a5cfc Scott Ullrich
					}
254 b39ca83c Scott Ullrich
				}
255
?>
256 ab6a5cfc Scott Ullrich
				</td>
257
				</tr>
258
				<tr>
259
260
		</table>
261
</form>
262 b39ca83c Scott Ullrich
</td>
263
</tr>
264
</table>
265 4e7d1665 Scott Ullrich
266 b39ca83c Scott Ullrich
<?php 
267 4e7d1665 Scott Ullrich
include("fend.inc"); 
268
?>