Project

General

Profile

Download (10.3 KB) Statistics
| Branch: | Tag: | Revision:
1
<?php
2
/*
3

    
4
	Redistribution and use in source and binary forms, with or without
5
	modification, are permitted provided that the following conditions are met:
6

    
7
	1. Redistributions of source code must retain the above copyright notice,
8
	this list of conditions and the following disclaimer.
9

    
10
	2. Redistributions in binary form must reproduce the above copyright
11
	notice, this list of conditions and the following disclaimer in the
12
	documentation and/or other materials provided with the distribution.
13

    
14
	THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES,
15
	INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
16
	AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
17
	AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
18
	OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
19
	SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
20
	INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
21
	CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
22
	ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
23
	POSSIBILITY OF SUCH DAMAGE.
24
*/
25

    
26
/*	
27
	pfSense_BUILDER_BINARIES:	/bin/ps	/usr/bin/grep	/usr/sbin/tcpdump
28
	pfSense_MODULE:	routing
29
*/
30

    
31
##|+PRIV
32
##|*IDENT=page-diagnostics-packetcapture
33
##|*NAME=Diagnostics: Packet Capture page
34
##|*DESCR=Allow access to the 'Diagnostics: Packet Capture' page.
35
##|*MATCH=diag_packet_capture.php*
36
##|-PRIV
37

    
38
$pgtitle = array(gettext("Diagnostics"), gettext("Packet Capture"));
39
require_once("guiconfig.inc");
40
require_once("pfsense-utils.inc");
41

    
42
$fp = "/root/";
43
$fn = "packetcapture.cap";
44
$snaplen = 0;//default packet length
45
$count = 100;//default number of packets to capture
46

    
47
if ($_POST) {
48
	$do_tcpdump = true;
49
	$host = $_POST['host'];
50
	$selectedif = $_POST['interface'];
51
	$count = $_POST['count'];
52
	$packetlength = $_POST['snaplen'];
53
	$port = $_POST['port'];
54
	$detail = $_POST['detail'];
55
	
56
	conf_mount_rw();
57

    
58
	if ($_POST['dnsquery']) {
59
		//if dns lookup is checked
60
		$disabledns = "";
61
	} else {
62
		//if dns lookup is unchecked
63
		$disabledns = "-n";
64
	}
65

    
66
	if ($_POST['startbtn'] != "" ) {
67
		$action = gettext("Start");
68
		
69
	 	//delete previous packet capture if it exists
70
	 	if (file_exists($fp.$fn))
71
	 		unlink ($fp.$fn);
72

    
73
	} elseif ($_POST['stopbtn']!= "") {
74
		$action = gettext("Stop");
75
		$processes_running = trim(shell_exec('/bin/ps axw -O pid= | /usr/bin/grep tcpdump | /usr/bin/grep '.$fn.' | /usr/bin/grep -v pflog'));
76

    
77
		//explode processes into an array, (delimiter is new line)
78
		$processes_running_array = explode("\n", $processes_running);
79

    
80
		//kill each of the packetcapture processes
81
		foreach ($processes_running_array as $process) {
82
			$process_id_pos = strpos($process, ' ');
83
			$process_id = substr($process, 0, $process_id_pos);
84
			exec("kill $process_id");
85
		}
86

    
87
	} else {
88
		//download file
89
		$fs = filesize($fp.$fn);
90
		header("Content-Type: application/octet-stream");
91
        header("Content-Disposition: attachment; filename=$fn");
92
		header("Content-Length: $fs");
93
		readfile($fp.$fn);
94
	}
95
} else {
96
	$do_tcpdump = false;
97
}
98
include("head.inc"); ?>
99

    
100
<body link="#000000" vlink="#0000CC" alink="#0000CC">
101

    
102
<?php
103
include("fbegin.inc"); 
104
?>
105

    
106
<table width="100%" border="0" cellpadding="0" cellspacing="0">
107
        <tr>
108
          <td>
109
			<form action="diag_packet_capture.php" method="post" name="iform" id="iform">
110
			  <table width="100%" border="0" cellpadding="6" cellspacing="0">
111
				<tr>
112
					<td colspan="2" valign="top" class="listtopic"><?=gettext("Packet capture");?></td>
113
				</tr>	
114
               	<tr>
115
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Interface");?></td>
116
				  <td width="83%" class="vtable">
117
				<select name="interface">
118
<?php 
119
					$interfaces = get_configured_interface_with_descr();
120
					foreach ($interfaces as $iface => $ifacename): 
121
?>
122
                      <option value="<?=$iface;?>" <?php if ($selectedif == $iface) echo "selected"; ?>>
123
                      <?php echo $ifacename;?>
124
                      </option>
125
                      <?php endforeach;?>
126
                    </select>
127
					<br/><?=gettext("Select the interface on which to capture traffic.");?>
128
				  </td>
129
				</tr>
130
			    <tr>
131
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Host Address");?></td>
132
				  <td width="83%" class="vtable">
133
                    <input name="host" type="text" class="formfld host" id="host" size="20" value="<?=htmlspecialchars($host);?>">
134
					<br/><?=gettext("This value is either the Source or Destination IP address. The packet capture will look for this address in either field.");?>
135
					<br/><?=gettext("This value can be a domain name or IP address.");?>
136
					<br/><?=gettext("If you leave this field blank, all packets on the specified interface will be captured.");?>
137
					</td>
138
				</tr>
139
				<tr>
140
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Port");?></td>
141
				  <td width="83%" class="vtable">
142
                    <input name="port" type="text" class="formfld unknown" id="port" size="5" value="<?=$port;?>">
143
					<br/><?=gettext("The port can be either the source or destination port. The packet capture will look for this port in either field.");?>
144
					<br/><?=gettext("Leave blank if you do not want to filter by port.");?>
145
					</td>
146
				</tr>
147
				<tr>
148
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Packet Length");?></td>
149
				  <td width="83%" class="vtable">
150
                    <input name="snaplen" type="text" class="formfld unknown" id="snaplen" size="5" value="<?=$snaplen;?>">
151
					<br/><?=gettext("The Packet length is the number of bytes of each packet that will be captured. Default value is 0, which will capture the entire frame regardless of its size.");?>
152
					</td>
153
				</tr>
154
				<tr>
155
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Count");?></td>
156
				  <td width="83%" class="vtable">
157
                    <input name="count" type="text" class="formfld unknown" id="count" size="5" value="<?=$count;?>">
158
					<br/><?=gettext("This is the number of packets the packet capture will grab. Default value is 100.") . "<br/>" . gettext("Enter 0 (zero) for no count limit.");?>
159
				</tr>
160
				<tr>
161
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Level of Detail");?></td>
162
				  <td width="83%" class="vtable">
163
                    <select name="detail" type="text" class="formselect" id="detail" size="1">
164
						<option value="-q" <?php if ($detail == "-q") echo "selected"; ?>><?=gettext("Normal");?></option>
165
						<option value="-v" <?php if ($detail == "-v") echo "selected"; ?>><?=gettext("Medium");?></option>
166
						<option value="-vv" <?php if ($detail == "-vv") echo "selected"; ?>><?=gettext("High");?></option>
167
						<option value="-vv -e" <?php if ($detail == "-vv -e") echo "selected"; ?>><?=gettext("Full");?></option>
168
					</select>
169
					<br/><?=gettext("This is the level of detail that will be displayed after hitting 'Stop' when the packets have been captured.") .  "<br/><b>" .
170
							gettext("Note:") . "</b> " .
171
							gettext("This option does not affect the level of detail when downloading the packet capture.");?>
172
				</tr>
173
				<tr>
174
				  <td width="17%" valign="top" class="vncellreq"><?=gettext("Reverse DNS Lookup");?></td>
175
				  <td width="83%" class="vtable">
176
					<input name="dnsquery" type="checkbox"<?php if($_POST['dnsquery']) echo " CHECKED"; ?>>
177
					<br/><?=gettext("This check box will cause the packet capture to perform a reverse DNS lookup associated with all IP addresses.");?>
178
					<br/><b><?=gettext("Note");?>: </b><?=gettext("This option can cause delays for large packet captures.");?>
179
					</td>
180
				</tr>
181
				<tr>
182
				  <td width="17%" valign="top">&nbsp;</td>
183
				  <td width="83%">
184
<?php
185

    
186
                    /* check to see if packet capture tcpdump is already running */
187
					$processcheck = (trim(shell_exec('/bin/ps axw -O pid= | /usr/bin/grep tcpdump | /usr/bin/grep $fn | /usr/bin/grep -v pflog')));
188
					
189
					$processisrunning = false;
190

    
191
					if ($processcheck != false)
192
						$processisrunning = true;
193
						
194
					if (($action == "Stop" or $action == "") and $processisrunning != true)
195
						echo "<input type=\"submit\" name=\"startbtn\" value=\"" . gettext("Start") . "\">&nbsp;";
196
				  	else {
197
					  	echo "<input type=\"submit\" name=\"stopbtn\" value=\"" . gettext("Stop") . "\">&nbsp;";
198
				  	}
199
					if (file_exists($fp.$fn) and $processisrunning != true) {
200
						echo "<input type=\"submit\" name=\"downloadbtn\" value=\"" . gettext("Download Capture") . "\">";
201
						echo "&nbsp;&nbsp;(" . gettext("The packet capture file was last updated:") . " " . date("F jS, Y g:i:s a.", filemtime($fp.$fn)) . ")";
202
					}
203
?>
204
				  </td>
205
				</tr>
206
				<tr>
207
				<td valign="top" colspan="2">
208
<?php
209
				echo "<font face='terminal' size='2'>";
210
				if ($processisrunning == true)
211
						echo("<strong>" . gettext("Packet Capture is running.") . "</strong><br/>");
212
						
213
				if ($do_tcpdump) {					
214

    
215
					if ($port != "") {
216
                       $searchport = "and port ".$port;
217
                       if($host <> "")                        
218
							$searchport = "and port ".$port;
219
						else
220
							$searchport = "port ".$port;
221
                    } else {
222
                        $searchport = "";
223
                    }
224

    
225
       				if ($host != "") {
226
             	       $searchhost = "host " . $host;
227
					} else {
228
                       $searchhost = "";
229
             		}
230
             		if ($count != "0" ) {
231
             			 $searchcount = "-c " . $count;
232
             		} else {
233
             			$searchcount = "";
234
             		}
235

    
236
					$selectedif = convert_friendly_interface_to_real_interface_name($selectedif);
237
	
238
					if ($action == gettext("Start")) {
239
						echo("<strong>" . gettext("Packet Capture is running.") . "</strong><br/>");
240
					 	mwexec_bg ("/usr/sbin/tcpdump -i $selectedif $searchcount -s $packetlength -w $fp$fn $searchhost $searchport");
241
					} else  {
242
						//action = stop
243
						echo("<strong>" . gettext("Packet Capture stopped.") . "<br/><br/>" . gettext("Packets Captured:") . "</strong><br/>");
244
?>
245
						<textarea style="width:98%" name="code" rows="15" cols="66" wrap="off" readonly="readonly">
246
<?php
247
						system ("/usr/sbin/tcpdump $disabledns $detail -r $fp$fn");
248

    
249
						conf_mount_ro();
250
?>
251
						</textarea>
252
<?php
253
					}
254
				}
255
?>
256
				</td>
257
				</tr>
258
				<tr>
259

    
260
		</table>
261
</form>
262
</td>
263
</tr>
264
</table>
265

    
266
<?php 
267
include("fend.inc"); 
268
?>
(29-29/222)