/builds/wireshark/wireshark/ui/io_graph

Bug Summary

File:	ui/io_graph_item.h
Warning:	line 214, column 35 The left operand of '==' is a garbage value

Annotated Source Code

Press '?' to see keyboard shortcuts

Show analyzer invocation

clang -cc1 -cc1 -triple x86_64-pc-linux-gnu -analyze -disable-free -clear-ast-before-backend -disable-llvm-verifier -discard-value-names -main-file-name sharkd_session.c -analyzer-checker=core -analyzer-checker=apiModeling -analyzer-checker=unix -analyzer-checker=deadcode -analyzer-checker=security.insecureAPI.UncheckedReturn -analyzer-checker=security.insecureAPI.getpw -analyzer-checker=security.insecureAPI.gets -analyzer-checker=security.insecureAPI.mktemp -analyzer-checker=security.insecureAPI.mkstemp -analyzer-checker=security.insecureAPI.vfork -analyzer-checker=nullability.NullPassedToNonnull -analyzer-checker=nullability.NullReturnedFromNonnull -analyzer-output plist -w -setup-static-analyzer -mrelocation-model pic -pic-level 2 -pic-is-pie -fno-delete-null-pointer-checks -mframe-pointer=all -relaxed-aliasing -fmath-errno -ffp-contract=on -fno-rounding-math -ffloat16-excess-precision=fast -fbfloat16-excess-precision=fast -mconstructor-aliases -funwind-tables=2 -target-cpu x86-64 -tune-cpu generic -debugger-tuning=gdb -fdebug-compilation-dir=/builds/wireshark/wireshark/build -fcoverage-compilation-dir=/builds/wireshark/wireshark/build -resource-dir /usr/lib/llvm-20/lib/clang/20 -isystem /usr/include/glib-2.0 -isystem /usr/lib/x86_64-linux-gnu/glib-2.0/include -D G_DISABLE_DEPRECATED -D G_DISABLE_SINGLE_INCLUDES -D WS_DEBUG -D WS_DEBUG_UTF_8 -I /builds/wireshark/wireshark/build -I /builds/wireshark/wireshark -I /builds/wireshark/wireshark/include -I /builds/wireshark/wireshark/wiretap -D _GLIBCXX_ASSERTIONS -internal-isystem /usr/lib/llvm-20/lib/clang/20/include -internal-isystem /usr/local/include -internal-isystem /usr/lib/gcc/x86_64-linux-gnu/14/../../../../x86_64-linux-gnu/include -internal-externc-isystem /usr/include/x86_64-linux-gnu -internal-externc-isystem /include -internal-externc-isystem /usr/include -fmacro-prefix-map=/builds/wireshark/wireshark/= -fmacro-prefix-map=/builds/wireshark/wireshark/build/= -fmacro-prefix-map=../= -Wno-format-truncation -Wno-format-nonliteral -Wno-pointer-sign -std=gnu11 -ferror-limit 19 -fvisibility=hidden -fwrapv -fwrapv-pointer -fstrict-flex-arrays=3 -stack-protector 2 -fstack-clash-protection -fcf-protection=full -fgnuc-version=4.2.1 -fskip-odr-check-in-gmf -fexceptions -fcolor-diagnostics -analyzer-output=html -faddrsig -D__GCC_HAVE_DWARF2_CFI_ASM=1 -o /builds/wireshark/wireshark/sbout/2025-09-12-100405-3933-1 -x c /builds/wireshark/wireshark/sharkd_session.c

/builds/wireshark/wireshark/sharkd_session.c

→

1/* sharkd_session.c
*
* Copyright (C) 2016 Jakub Zawadzki
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <[email protected]>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/

12#include <config.h>

14#include <stdio.h>
15#include <stdlib.h>
16#include <stdarg.h>
17#include <string.h>
18#include <errno(*__errno_location ()).h>
19#include <inttypes.h>

21#include <glib.h>

23#include <wsutil/wsjson.h>
24#include <wsutil/json_dumper.h>
25#include <wsutil/ws_assert.h>
26#include <wsutil/wsgcrypt.h>

28#include <file.h>
29#include <epan/epan_dissect.h>
30#include <epan/exceptions.h>
31#include <epan/color_filters.h>
32#include <epan/prefs.h>
33#include <epan/prefs-int.h>
34#include <epan/uat-int.h>
35#include <wiretap/wtap.h>

37#include <epan/column.h>
38#include <epan/column-info.h>

40#include <ui/ssl_key_export.h>

42#include <ui/io_graph_item.h>
43#include <epan/stats_tree_priv.h>
44#include <epan/stat_tap_ui.h>
45#include <epan/conversation_table.h>
46#include <epan/sequence_analysis.h>
47#include <epan/expert.h>
48#include <epan/export_object.h>
49#include <epan/follow.h>
50#include <epan/rtd_table.h>
51#include <epan/srt_table.h>
52#include <epan/to_str.h>

54#include <epan/dissectors/packet-h225.h>
55#include <ui/voip_calls.h>
56#include <ui/rtp_stream.h>
57#include <ui/tap-rtp-common.h>
58#include <ui/tap-rtp-analysis.h>
59#include <ui/cli/tap-protohierstat.h>
60#include <ui/cli/tap-voip.h>
61#include <wsutil/version_info.h>
62#include <epan/to_str.h>

64#include <epan/addr_resolv.h>
65#include <epan/dissectors/packet-rtp.h>
66#include <epan/dissectors/packet-rtp_pt.h>
67#include <ui/rtp_media.h>
68#include <ui/mcast_stream.h>
69#include <speex/speex_resampler.h>

71#include <epan/maxmind_db.h>

73#include <wsutil/pint.h>
74#include <wsutil/strnatcmp.h>
75#include <wsutil/strtoi.h>

77#include "globals.h"

79#include "sharkd.h"

81struct sharkd_filter_item
82{
  uint8_t *filtered; /* can be NULL if all frames are matching for given filter. */
84};

86static GHashTable *filter_table;

88static int mode;
89static uint32_t rpcid;

91static json_dumper dumper;


94static const char *
95json_find_attr(const char *buf, const jsmntok_t *tokens, int count, const char *attr)
96{
  int i;

  for (i = 0; i < count; i += 2)
  {
      const char *tok_attr  = &buf[tokens[i + 0].start];
      const char *tok_value = &buf[tokens[i + 1].start];

      if (!strcmp(tok_attr, attr))
          return tok_value;
  }

  return NULL((void*)0);
109}

111static void
112json_print_base64(const uint8_t *data, size_t len)
113{
  json_dumper_begin_base64(&dumper);
  json_dumper_write_base64(&dumper, data, len);
  json_dumper_end_base64(&dumper);
117}

119static void G_GNUC_PRINTF(2, 3)__attribute__((__format__ (__printf__, 2, 3)))
120sharkd_json_value_anyf(const char *key, const char *format, ...)
121{
  if (key)
      json_dumper_set_member_name(&dumper, key);

  va_list ap;
  va_start(ap, format)__builtin_va_start(ap, format);
  json_dumper_value_va_list(&dumper, format, ap);
  va_end(ap)__builtin_va_end(ap);
129}

131static void
132sharkd_json_value_string(const char *key, const char *str)
133{
  if (key)
      json_dumper_set_member_name(&dumper, key);
  json_dumper_value_string(&dumper, str);
137}

139static void
140sharkd_json_value_base64(const char *key, const uint8_t *data, size_t len)
141{
  if (key)
      json_dumper_set_member_name(&dumper, key);
  json_print_base64(data, len);
145}

147static void G_GNUC_PRINTF(2, 3)__attribute__((__format__ (__printf__, 2, 3)))
148sharkd_json_value_stringf(const char *key, const char *format, ...)
149{
  if (key)
      json_dumper_set_member_name(&dumper, key);

  va_list ap;
  va_start(ap, format)__builtin_va_start(ap, format);
  char* sformat = ws_strdup_printf("\"%s\"", format)wmem_strdup_printf(((void*)0), "\"%s\"", format);
  json_dumper_value_va_list(&dumper, sformat, ap);
  g_free(sformat);
  va_end(ap)__builtin_va_end(ap);
159}

161static void
162sharkd_json_array_open(const char *key)
163{
  if (key)
      json_dumper_set_member_name(&dumper, key);
  json_dumper_begin_array(&dumper);
167}

169static void
170sharkd_json_array_close(void)
171{
  json_dumper_end_array(&dumper);
173}

175static void
176sharkd_json_object_open(const char *key)
177{
  if (key)
      json_dumper_set_member_name(&dumper, key);
  json_dumper_begin_object(&dumper);
181}

183static void
184sharkd_json_object_close(void)
185{
  json_dumper_end_object(&dumper);
187}

189static void
190sharkd_json_response_open(uint32_t id)
191{
  json_dumper_begin_object(&dumper);  // start the message
  sharkd_json_value_string("jsonrpc", "2.0");
  sharkd_json_value_anyf("id", "%d", id);
195}

197static void
198sharkd_json_response_close(void)
199{
  json_dumper_end_object(&dumper);  // end the message

  json_dumper_finish(&dumper);

  /*
   * We do an explicit fflush after every line, because
   * we want output to be written to the socket as soon
   * as the line is complete.
   *
   * The stream is fully-buffered by default, so it's
   * only flushed when the buffer fills or the FILE *
   * is closed.  On UN*X, we could set it to be line
   * buffered, but the MSVC standard I/O routines don't
   * support line buffering - they only support *byte*
   * buffering, doing a write for every byte written,
   * which is too inefficient, and full buffering,
   * which is what you get if you request line buffering.
   */
  fflush(stdoutstdout);
219}

221static void
222sharkd_json_result_prologue(uint32_t id)
223{
  sharkd_json_response_open(id);
  sharkd_json_object_open("result");  // start the result object
226}

228static void
229sharkd_json_result_epilogue(void)
230{
  json_dumper_end_object(&dumper);  // end the result object
  sharkd_json_response_close();
233}

235static void
236sharkd_json_result_array_prologue(uint32_t id)
237{
  sharkd_json_response_open(id);
  sharkd_json_array_open("result");   // start the result array
240}

242static void
243sharkd_json_result_array_epilogue(void)
244{
  sharkd_json_array_close();        // end of result array
  sharkd_json_response_close();
247}

249static void
250sharkd_json_simple_ok(uint32_t id)
251{
  sharkd_json_result_prologue(id);
  sharkd_json_value_string("status", "OK");
  sharkd_json_result_epilogue();
255}

257static void
258sharkd_json_warning(uint32_t id, char *warning)
259{
  sharkd_json_result_prologue(id);
  sharkd_json_value_string("status", "Warning");
  sharkd_json_value_string("warning", warning);
  sharkd_json_result_epilogue();
264}

266static void G_GNUC_PRINTF(4, 5)__attribute__((__format__ (__printf__, 4, 5)))
267sharkd_json_error(uint32_t id, int code, char* data, char* format, ...)
268{
  sharkd_json_response_open(id);
  sharkd_json_object_open("error");
  sharkd_json_value_anyf("code", "%d", code);

  if (format)
  {
      // format the text message
      va_list args;

      va_start(args, format)__builtin_va_start(args, format);
      char *error_msg = ws_strdup_vprintf(format, args)wmem_strdup_vprintf(((void*)0), format, args);
      va_end(args)__builtin_va_end(args);

      sharkd_json_value_string("message", error_msg);

      g_free(error_msg);
  }

  sharkd_json_object_close();

  if (data)
      sharkd_json_value_string("data", data);

  sharkd_json_response_close();
293}

295static bool_Bool
296is_param_match(const char *param_in, const char *valid_param)
297{
  char* ptr;

  if ((ptr = g_strrstr(valid_param, "*")))
  {
      size_t prefix_len = ptr - valid_param;
      return !strncmp(param_in, valid_param, prefix_len);
  }
  else
      return !strcmp(param_in, valid_param);
307}

309/*
* json_prep does four things:
*
*   1. check the syntax of the root and parameter members
*   2. tokenize the names and values by zero terminating them
*   3. unescape the names and values
*   4. extracts and saves the rpcid
*      - we have to do it here as it's needed for the error messages
*
* The objective is to minimise the validation work in the functions
* that process each called method.
*
* This gets a little messy as the JSON parser creates a flat list
* of all members rather than create a tree.
*/
324static bool_Bool
325json_prep(char* buf, const jsmntok_t* tokens, int count)
326{
  int i;
  const char* method = NULL((void*)0);
  char* attr_name = NULL((void*)0);
  char* attr_value = NULL((void*)0);

332#define SHARKD_JSON_ANY0      0
333#define SHARKD_JSON_STRING1   1
334#define SHARKD_JSON_INTEGER2  2
335#define SHARKD_JSON_UINTEGER3 3
336#define SHARKD_JSON_FLOAT4    4
337#define SHARKD_JSON_OBJECT5   5
338#define SHARKD_JSON_ARRAY6    6
339#define SHARKD_JSON_BOOLEAN7  7
340#define SHARKD_ARRAY_END99     99

  struct member_attribute {
      const char* parent_ctx;
      const char* name;
      int level;
      jsmntype_t type;
      int value_type;
      bool_Bool is_mandatory;
  };

351#define SHARKD_MANDATORY1 true1
352#define SHARKD_OPTIONAL0 false0

  /*
   * The member attribute structure is key to the syntax checking.  The
   * array contains all of the root level (1) member names, the data
   * types permissible for the value and a boolean that indicates whether
   * or not the member is mandatory.
   *
   * Once we get into the next layer (2) of the json tree, we need to check
   * params member names and data types dependent in the context of the method
   * (parent_ctx).
   */

  struct member_attribute name_array[] = {
      // Root members
      {NULL((void*)0),         "jsonrpc",        1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_MANDATORY1},
      {NULL((void*)0),         "userid",         1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {NULL((void*)0),         "id",             1, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_MANDATORY1},
      {NULL((void*)0),         "method",         1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_MANDATORY1},
      {NULL((void*)0),         "params",         1, JSMN_OBJECT,       SHARKD_JSON_OBJECT5,   SHARKD_OPTIONAL0},

      // Valid methods
      {"method",     "analyse",        1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "bye",            1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "check",          1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "complete",       1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "download",       1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "dumpconf",       1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "follow",         1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "field",          1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "fields",         1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "frame",          1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "frames",         1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "info",           1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "intervals",      1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "iograph",        1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "load",           1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "setcomment",     1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "setconf",        1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "status",         1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"method",     "tap",            1, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},

      // Parameters and their method context
      {"check",      "field",          2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"check",      "filter",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"complete",   "field",          2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"complete",   "pref",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"download",   "token",          2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"dumpconf",   "pref",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"follow",     "follow",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_MANDATORY1},
      {"follow",     "filter",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_MANDATORY1},
      {"follow",     "sub_stream",     2, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_OPTIONAL0},
      {"field",      "name",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_MANDATORY1},
      {"frame",      "frame",          2, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_MANDATORY1},
      {"frame",      "proto",          2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"frame",      "ref_frame",      2, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_OPTIONAL0},
      {"frame",      "prev_frame",     2, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_OPTIONAL0},
      {"frame",      "columns",        2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"frame",      "color",          2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"frame",      "bytes",          2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"frame",      "hidden",         2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"frames",     "column*",        2, JSMN_UNDEFINED,    SHARKD_JSON_ANY0,      SHARKD_OPTIONAL0},
      {"frames",     "filter",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"frames",     "skip",           2, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_OPTIONAL0},
      {"frames",     "limit",          2, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_OPTIONAL0},
      {"frames",     "refs",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"intervals",  "interval",       2, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_OPTIONAL0},
      {"intervals",  "filter",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "interval",       2, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_OPTIONAL0},
      {"iograph",    "interval_units", 2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "filter",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "graph0",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_MANDATORY1},
      {"iograph",    "graph1",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "graph2",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "graph3",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "graph4",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "graph5",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "graph6",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "graph7",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "graph8",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "graph9",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "filter0",        2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "filter1",        2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "filter2",        2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "filter3",        2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "filter4",        2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "filter5",        2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "filter6",        2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "filter7",        2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "filter8",        2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "filter9",        2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"iograph",    "aot0",           2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"iograph",    "aot1",           2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"iograph",    "aot2",           2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"iograph",    "aot3",           2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"iograph",    "aot4",           2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"iograph",    "aot5",           2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"iograph",    "aot6",           2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"iograph",    "aot7",           2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"iograph",    "aot8",           2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"iograph",    "aot9",           2, JSMN_PRIMITIVE,    SHARKD_JSON_BOOLEAN7,  SHARKD_OPTIONAL0},
      {"load",       "file",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_MANDATORY1},
      {"load",       "max_packets",    2, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_OPTIONAL0},
      {"load",       "max_bytes",      2, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_OPTIONAL0},
      {"setcomment", "frame",          2, JSMN_PRIMITIVE,    SHARKD_JSON_UINTEGER3, SHARKD_MANDATORY1},
      {"setcomment", "comment",        2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"setconf",    "name",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_MANDATORY1},
      {"setconf",    "value",          2, JSMN_UNDEFINED,    SHARKD_JSON_ANY0,      SHARKD_MANDATORY1},
      {"tap",        "tap0",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_MANDATORY1},
      {"tap",        "tap1",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap2",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap3",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap4",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap5",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap6",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap7",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap8",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap9",           2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap10",          2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap11",          2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap12",          2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap13",          2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap14",          2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "tap15",          2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},
      {"tap",        "filter",         2, JSMN_STRING,       SHARKD_JSON_STRING1,   SHARKD_OPTIONAL0},

      // End of the name_array
      {NULL((void*)0),         NULL((void*)0),             0, JSMN_STRING,       SHARKD_ARRAY_END99,   SHARKD_OPTIONAL0},
  };

  rpcid = 0;

  /* sanity check, and split strings */
  if (count < 1 || tokens[0].type != JSMN_OBJECT)
  {
      sharkd_json_error(
              rpcid, -32600, NULL((void*)0),
              "The request must an object"
              );
      return false0;
  }

  /* don't need [0] token */
  tokens++;
  count--;

  if (count & 1)
  {
      sharkd_json_error(
              rpcid, -32600, NULL((void*)0),
              "The request must contain name/value pairs"
              );
      return false0;
  }

  for (i = 0; i < count; i += 2)
  {
      buf[tokens[i + 0].end] = '\0';
      buf[tokens[i + 1].end] = '\0';
  }

  // we must get the id as soon as possible so that it's available in all future error messages
  attr_value = (char*)json_find_attr(buf, tokens, count, "id");
  if (attr_value)
  {
      if (!ws_strtou32(attr_value, NULL((void*)0), &rpcid))
      {
          sharkd_json_error(
                  rpcid, -32600, NULL((void*)0),
                  "The id value must be a positive integer"
                  );
          return false0;
      }
  }

  method = json_find_attr(buf, tokens, count, "method");

  if (method)
  {
      bool_Bool is_supported = false0;
      i = 0;  // name array index

      // check that the request method is good
      while (name_array[i].value_type != SHARKD_ARRAY_END99)
      {
          if (name_array[i].parent_ctx)
          {
              if (!strcmp(method, name_array[i].name) && !strcmp(name_array[i].parent_ctx, "method"))
                  is_supported = true1;  // the method is valid
          }

          i++;
      }

      if (!is_supported)
      {
          sharkd_json_error(
                  rpcid, -32601, NULL((void*)0),
                  "The method %s is not supported", method
                  );
          return false0;
      }
  }

  for (i = 0; i < count; i += 2)
  {
      if (tokens[i].type != JSMN_STRING)
      {
          sharkd_json_error(
                  rpcid, -32600, NULL((void*)0),
                  "Member names must be a string - member %d is not string", (i / 2) + 1
                  );
          return false0;
      }

      attr_name = &buf[tokens[i + 0].start];
      attr_value = &buf[tokens[i + 1].start];

      if (!strcmp(attr_name, "jsonrpc"))
      {
          if (strcmp(&buf[tokens[i + 1].start], "2.0"))
          {
              sharkd_json_error(
                      rpcid, -32600, NULL((void*)0),
                      "Only JSON %s is supported", "2.0"
                      );
              return false0;
          }
      }

      /* unescape only value, as keys are simple strings */
      if (tokens[i + 1].type == JSMN_STRING && !json_decode_string_inplace(attr_value))
      {
          sharkd_json_error(
                  rpcid, -32600, NULL((void*)0),
                  "Cannot unescape the value string of member %d", (i / 2) + 1
                  );
          return false0;
      }

      /* Confirm that the member is valid */
      bool_Bool match = false0;

      // We need to check root members (level 1) and parameters (level 2), hence the for loop.

      for (int level = 1; level < 3; level++)
      {
          size_t j = 0;

          while (name_array[j].value_type != SHARKD_ARRAY_END99)  // iterate through the array until we hit the end
          {
              if (is_param_match(attr_name, name_array[j].name) && name_array[j].level == level)
              {
                  // We need to be sure the match is in the correct context
                  // i.e. is this a match for a root member (level 1) or for a parameter (level 2).

                  if (level == 1)
                  {
                      // need to guard against a parameter name matching a method name
                      if (method)
                      {
                          if (name_array[j].parent_ctx)
                          {
                              j++;
                              continue;
                          }

                          if (!strcmp(method, &buf[tokens[i + 0].start]))
                          {
                              j++;
                              continue;
                          }
                      }

                      match = true1;
                  }
                  else if (method)
                  {
                      if (level == 2 && !strcmp(name_array[j].parent_ctx, method))
                          match = true1;
                      else
                      {
                          j++;
                          continue;
                      }
                  }
                  else
                  {
                      j++;
                      continue;
                  }

                  // The match looks good, let's now check the data types

                  if (tokens[i + 1].type != name_array[j].type && name_array[j].type != SHARKD_JSON_ANY0)
                  {
                      sharkd_json_error(
                              rpcid, -32600, NULL((void*)0),
                              "The data type for member %s is not valid", attr_name
                              );
                      return false0;
                  }
                  else if (name_array[j].type == JSMN_PRIMITIVE && name_array[j].value_type == SHARKD_JSON_UINTEGER3)
                  {
                      uint32_t temp;
                      if (!ws_strtou32(attr_value, NULL((void*)0), &temp) || temp <= 0)
                      {
                          sharkd_json_error(
                                  rpcid, -32600, NULL((void*)0),
                                  "The value for %s must be a positive integer", name_array[j].name
                                  );
                          return false0;
                      }
                  }
                  else if (name_array[j].type == JSMN_PRIMITIVE && name_array[j].value_type == SHARKD_JSON_BOOLEAN7)
                  {
                      if (strcmp(attr_value, "true") && strcmp(attr_value, "false"))
                      {
                          sharkd_json_error(
                                  rpcid, -32600, NULL((void*)0),
                                  "The value for %s must be a boolean (true or false)", name_array[j].name
                                  );
                          return false0;
                      }

                  }
                  break; // looks like a valid match
              }
              j++;
          }
      }

      if (!match)
      {
          sharkd_json_error(
                  rpcid, -32600, NULL((void*)0),
                  "%s is not a valid member name", attr_name
                  );
          return false0;
      }
      }

  /* check for mandatory members */
  size_t j = 0;

  while (name_array[j].value_type != SHARKD_ARRAY_END99)
  {
      if (name_array[j].is_mandatory && name_array[j].level == 1)
      {
          if (!json_find_attr(buf, tokens, count, name_array[j].name))
          {
              sharkd_json_error(
                      rpcid, -32600, NULL((void*)0),
                      "Mandatory member %s is missing", name_array[j].name
                      );
              return false0;
          }
      }
      j++;
  }

  // check that the current request contains the mandatory parameters
  j = 0;

  while (name_array[j].value_type != SHARKD_ARRAY_END99)
  {
      if (name_array[j].is_mandatory && name_array[j].level == 2 && !strcmp(method, name_array[j].parent_ctx))
      {
          if (!json_find_attr(buf, tokens, count, name_array[j].name))
          {
              sharkd_json_error(
                      rpcid, -32600, NULL((void*)0),
                      "Mandatory parameter %s is missing", name_array[j].name
                      );
              return false0;
          }
      }
      j++;
  }


  // check that the parameters for the current request are valid for the method and that the data type for the value is valid

  return true1;
736}

738static void
739sharkd_session_filter_free(void *data)
740{
  struct sharkd_filter_item *l = (struct sharkd_filter_item *) data;

  g_free(l->filtered);
  g_free(l);
745}

747static const struct sharkd_filter_item *
748sharkd_session_filter_data(const char *filter)
749{
  struct sharkd_filter_item *l;

  l = (struct sharkd_filter_item *) g_hash_table_lookup(filter_table, filter);
  if (!l)
  {
      uint8_t *filtered = NULL((void*)0);

      int ret = sharkd_filter(filter, &filtered);

      if (ret == -1)
          return NULL((void*)0);

      l = g_new(struct sharkd_filter_item, 1)((struct sharkd_filter_item *) g_malloc_n ((1), sizeof (struct
 sharkd_filter_item)));
      l->filtered = filtered;

      g_hash_table_insert(filter_table, g_strdup(filter)g_strdup_inline (filter), l);
  }

  return l;
769}

771static bool_Bool
772sharkd_rtp_match_init(rtpstream_id_t *id, const char *init_str)
773{
  bool_Bool ret = false0;
  char **arr;
  uint32_t tmp_addr_src, tmp_addr_dst;
  address tmp_src_addr, tmp_dst_addr;

  memset(id, 0, sizeof(*id));

  arr = g_strsplit(init_str, "_", 7); /* pass larger value, so we'll catch incorrect input :) */
  if (g_strv_length(arr) != 5)
      goto fail;

  /* TODO, for now only IPv4 */
  if (!get_host_ipaddr(arr[0], &tmp_addr_src))
      goto fail;

  if (!ws_strtou16(arr[1], NULL((void*)0), &id->src_port))
      goto fail;

  if (!get_host_ipaddr(arr[2], &tmp_addr_dst))
      goto fail;

  if (!ws_strtou16(arr[3], NULL((void*)0), &id->dst_port))
      goto fail;

  if (!ws_hexstrtou32(arr[4], NULL((void*)0), &id->ssrc))
      goto fail;

  set_address(&tmp_src_addr, AT_IPv4, 4, &tmp_addr_src);
  copy_address(&id->src_addr, &tmp_src_addr);
  set_address(&tmp_dst_addr, AT_IPv4, 4, &tmp_addr_dst);
  copy_address(&id->dst_addr, &tmp_dst_addr);

  ret = true1;

808fail:
  g_strfreev(arr);
  return ret;
811}

813static bool_Bool
814sharkd_session_process_info_nstat_cb(const void *key, void *value, void *userdata _U___attribute__((unused)))
815{
  stat_tap_table_ui *stat_tap = (stat_tap_table_ui *) value;

  json_dumper_begin_object(&dumper);
  sharkd_json_value_string("name", stat_tap->title);
  sharkd_json_value_stringf("tap", "nstat:%s", (const char *) key);
  json_dumper_end_object(&dumper);

  return false0;
824}

826static bool_Bool
827sharkd_session_process_info_conv_cb(const void* key, void* value, void* userdata _U___attribute__((unused)))
828{
  struct register_ct *table = (struct register_ct *) value;

  const char *label = (const char *) key;

  if (get_conversation_packet_func(table))
  {
      json_dumper_begin_object(&dumper);
      sharkd_json_value_stringf("name", "Conversation List/%s", label);
      sharkd_json_value_stringf("tap", "conv:%s", label);
      json_dumper_end_object(&dumper);
  }

  if (get_endpoint_packet_func(table))
  {
      json_dumper_begin_object(&dumper);
      sharkd_json_value_stringf("name", "Endpoint/%s", label);
      sharkd_json_value_stringf("tap", "endpt:%s", label);
      json_dumper_end_object(&dumper);
  }
  return false0;
849}

851static bool_Bool
852sharkd_session_seq_analysis_cb(const void *key, void *value, void *userdata _U___attribute__((unused)))
853{
  register_analysis_t *analysis = (register_analysis_t *) value;

  json_dumper_begin_object(&dumper);
  sharkd_json_value_string("name", sequence_analysis_get_ui_name(analysis));
  sharkd_json_value_stringf("tap", "seqa:%s", (const char *) key);
  json_dumper_end_object(&dumper);

  return false0;
862}

864static bool_Bool
865sharkd_export_object_visit_cb(const void *key _U___attribute__((unused)), void *value, void *user_data _U___attribute__((unused)))
866{
  register_eo_t *eo = (register_eo_t *) value;

  const int proto_id = get_eo_proto_id(eo);
  const char *filter = proto_get_protocol_filter_name(proto_id);
  const char *label  = proto_get_protocol_short_name(find_protocol_by_id(proto_id));

  json_dumper_begin_object(&dumper);
  sharkd_json_value_stringf("name", "Export Object/%s", label);
  sharkd_json_value_stringf("tap", "eo:%s", filter);
  json_dumper_end_object(&dumper);

  return false0;
879}

881static bool_Bool
882sharkd_srt_visit_cb(const void *key _U___attribute__((unused)), void *value, void *user_data _U___attribute__((unused)))
883{
  register_srt_t *srt = (register_srt_t *) value;

  const int proto_id = get_srt_proto_id(srt);
  const char *filter = proto_get_protocol_filter_name(proto_id);
  const char *label  = proto_get_protocol_short_name(find_protocol_by_id(proto_id));

  json_dumper_begin_object(&dumper);
  sharkd_json_value_stringf("name", "Service Response Time/%s", label);
  sharkd_json_value_stringf("tap", "srt:%s", filter);
  json_dumper_end_object(&dumper);

  return false0;
896}

898static bool_Bool
899sharkd_rtd_visit_cb(const void *key _U___attribute__((unused)), void *value, void *user_data _U___attribute__((unused)))
900{
  register_rtd_t *rtd = (register_rtd_t *) value;

  const int proto_id = get_rtd_proto_id(rtd);
  const char *filter = proto_get_protocol_filter_name(proto_id);
  const char *label  = proto_get_protocol_short_name(find_protocol_by_id(proto_id));

  json_dumper_begin_object(&dumper);
  sharkd_json_value_stringf("name", "Response Time Delay/%s", label);
  sharkd_json_value_stringf("tap", "rtd:%s", filter);
  json_dumper_end_object(&dumper);

  return false0;
913}

915static bool_Bool
916sharkd_follower_visit_cb(const void *key _U___attribute__((unused)), void *value, void *user_data _U___attribute__((unused)))
917{
  register_follow_t *follower = (register_follow_t *) value;

  const int proto_id = get_follow_proto_id(follower);
  const char *label  = proto_get_protocol_short_name(find_protocol_by_id(proto_id));
  const char *filter = label; /* correct: get_follow_by_name() is registered by short name */

  json_dumper_begin_object(&dumper);
  sharkd_json_value_stringf("name", "Follow/%s", label);
  sharkd_json_value_stringf("tap", "follow:%s", filter);
  json_dumper_end_object(&dumper);

  return false0;
930}

932static void
933sharkd_session_print_capture_types(void)
934{
  unsigned i;
  GArray *writable_type_subtypes;
  writable_type_subtypes = wtap_get_writable_file_types_subtypes(FT_SORT_BY_NAME);
  for (i = 0; i < writable_type_subtypes->len; i++) {
      int ft = g_array_index(writable_type_subtypes, int, i)(((int*) (void *) (writable_type_subtypes)->data) [(i)]);
      sharkd_json_object_open(NULL((void*)0));
      sharkd_json_value_string("name", wtap_file_type_subtype_name(ft));
      sharkd_json_value_string("description", wtap_file_type_subtype_description(ft));
      sharkd_json_object_close();
  }
  g_array_free(writable_type_subtypes, TRUE(!(0)));
946}

948struct encap_type_info
949{
  const char *name;
  const char *description;
952};

954static int
955encap_type_info_nat_compare(const void *a, const void *b)
956{
  return ws_ascii_strnatcmp(((const struct encap_type_info *)a)->name,
                            ((const struct encap_type_info *)b)->name);
959}

961static void
962encap_type_info_visit(void *data, void *user_data _U___attribute__((unused)))
963{
  sharkd_json_object_open(NULL((void*)0));
  sharkd_json_value_string("name", ((struct encap_type_info *)data)->name);
  sharkd_json_value_string("description", ((struct encap_type_info *)data)->description);
  sharkd_json_object_close();
968}

970static void
971sharkd_session_print_encap_types(void)
972{
  int i;
  struct encap_type_info *encaps;
  GSList *list = NULL((void*)0);
  encaps = g_new(struct encap_type_info, WTAP_NUM_ENCAP_TYPES)((struct encap_type_info *) g_malloc_n ((wtap_get_num_encap_types
()), sizeof (struct encap_type_info)));
  for (i = 0; i < WTAP_NUM_ENCAP_TYPESwtap_get_num_encap_types(); i++) {
      encaps[i].name = wtap_encap_name(i);
      if (encaps[i].name != NULL((void*)0)) {
          encaps[i].description = wtap_encap_description(i);
          list = g_slist_insert_sorted(list, &encaps[i], encap_type_info_nat_compare);
      }
  }
  g_slist_foreach(list, encap_type_info_visit, NULL((void*)0));
  g_slist_free(list);
  g_free(encaps);
987}

989/**
* sharkd_session_process_info()
*
* Process info request
*
* Output object with attributes:
*   (m) version - version number
*
*   (m) columns - available column formats, array of object with attributes:
*                  'name'   - column name
*                  'format' - column format-name
*
*   (m) stats   - available statistics, array of object with attributes:
*                  'name' - statistic name
*                  'tap'  - sharkd tap-name for statistic
*
*   (m) convs   - available conversation list, array of object with attributes:
*                  'name' - conversation name
*                  'tap'  - sharkd tap-name for conversation
*
*   (m) eo      - available export object list, array of object with attributes:
*                  'name' - export object name
*                  'tap'  - sharkd tap-name for eo
*
*   (m) srt     - available service response time list, array of object with attributes:
*                  'name' - service response time name
*                  'tap'  - sharkd tap-name for srt
*
*   (m) rtd     - available response time delay list, array of object with attributes:
*                  'name' - response time delay name
*                  'tap'  - sharkd tap-name for rtd
*
*   (m) seqa    - available sequence analysis (flow) list, array of object with attributes:
*                  'name' - sequence analysis name
*                  'tap'  - sharkd tap-name
*
*   (m) taps    - available taps, array of object with attributes:
*                  'name' - tap name
*                  'tap'  - sharkd tap-name
*
*   (m) follow  - available followers, array of object with attributes:
*                  'name' - tap name
*                  'tap'  - sharkd tap-name
*
*   (m) ftypes  - conversation table for FT_ number to string, array of FT_xxx strings.
*
*   (m) nstat   - available table-based taps, array of object with attributes:
*                  'name' - tap name
*                  'tap'  - sharkd tap-name
*
*   (m) capture_types - available capture types, array of object with attributes:
*                        'name'        - capture type name
*                        'description' - capture type description
*
*   (m) encap_types   - available encapsulation types, array of object with attributes:
*                        'name'        - encapsulation type name
*                        'description' - encapsulation type description
*/
1047static void
1048sharkd_session_process_info(void)
1049{
  int i;

  sharkd_json_result_prologue(rpcid);

  sharkd_json_array_open("columns");
  for (i = 0; i < NUM_COL_FMTS; i++)
  {
      const char *col_format = col_format_to_string(i);
      const char *col_descr  = col_format_desc(i);

      json_dumper_begin_object(&dumper);
      sharkd_json_value_string("name", col_descr);
      sharkd_json_value_string("format", col_format);
      json_dumper_end_object(&dumper);
  }
  sharkd_json_array_close();

  sharkd_json_array_open("stats");
  {
      GList *cfg_list = stats_tree_get_cfg_list();
      GList *l;

      for (l = cfg_list; l; l = l->next)
      {
          stats_tree_cfg *cfg = (stats_tree_cfg *) l->data;

          json_dumper_begin_object(&dumper);
          sharkd_json_value_string("name", cfg->title);
          sharkd_json_value_stringf("tap", "stat:%s", cfg->abbr);
          json_dumper_end_object(&dumper);
      }

      g_list_free(cfg_list);
  }
  sharkd_json_array_close();

  sharkd_json_array_open("ftypes");
  for (i = 0; i < FT_NUM_TYPES; i++)
      sharkd_json_value_string(NULL((void*)0), ftype_name((ftenum_t) i));
  sharkd_json_array_close();

  sharkd_json_array_open("capture_types");
  sharkd_session_print_capture_types();
  sharkd_json_array_close();

  sharkd_json_array_open("encap_types");
  sharkd_session_print_encap_types();
  sharkd_json_array_close();

  sharkd_json_value_string("version", get_ws_vcs_version_info_short());

  sharkd_json_array_open("nstat");
  i = 0;
  stat_tap_iterate_tables(sharkd_session_process_info_nstat_cb, &i);
  sharkd_json_array_close();

  sharkd_json_array_open("convs");
  i = 0;
  conversation_table_iterate_tables(sharkd_session_process_info_conv_cb, &i);
  sharkd_json_array_close();

  sharkd_json_array_open("seqa");
  i = 0;
  sequence_analysis_table_iterate_tables(sharkd_session_seq_analysis_cb, &i);
  sharkd_json_array_close();

  sharkd_json_array_open("taps");
  {
      json_dumper_begin_object(&dumper);
      sharkd_json_value_string("name", "UDP Multicast Streams");
      sharkd_json_value_string("tap", "multicast");
      json_dumper_end_object(&dumper);

      json_dumper_begin_object(&dumper);
      sharkd_json_value_string("name", "RTP streams");
      sharkd_json_value_string("tap", "rtp-streams");
      json_dumper_end_object(&dumper);

      json_dumper_begin_object(&dumper);
      sharkd_json_value_string("name", "Protocol Hierarchy Statistics");
      sharkd_json_value_string("tap", "phs");
      json_dumper_end_object(&dumper);

      json_dumper_begin_object(&dumper);
      sharkd_json_value_string("name", "VoIP Calls");
      sharkd_json_value_string("tap", "voip-calls");
      json_dumper_end_object(&dumper);

      json_dumper_begin_object(&dumper);
      sharkd_json_value_string("name", "VoIP Conversations");
      sharkd_json_value_string("tap", "voip-convs");
      json_dumper_end_object(&dumper);

      json_dumper_begin_object(&dumper);
      sharkd_json_value_string("name", "Expert Information");
      sharkd_json_value_string("tap", "expert");
      json_dumper_end_object(&dumper);
  }
  sharkd_json_array_close();

  sharkd_json_array_open("eo");
  i = 0;
  eo_iterate_tables(sharkd_export_object_visit_cb, &i);
  sharkd_json_array_close();

  sharkd_json_array_open("srt");
  i = 0;
  srt_table_iterate_tables(sharkd_srt_visit_cb, &i);
  sharkd_json_array_close();

  sharkd_json_array_open("rtd");
  i = 0;
  rtd_table_iterate_tables(sharkd_rtd_visit_cb, &i);
  sharkd_json_array_close();

  sharkd_json_array_open("follow");
  i = 0;
  follow_iterate_followers(sharkd_follower_visit_cb, &i);
  sharkd_json_array_close();

  sharkd_json_result_epilogue();
1171}

1173static void sharkd_session_print_field(header_field_info* current_header_field_info, gboolean as_object)
1174{
  if (as_object)
  {
      sharkd_json_object_open(NULL((void*)0));
  }
  
  sharkd_json_value_stringf("id", "%i", current_header_field_info->id);
  sharkd_json_value_stringf("parent_id", "%i", current_header_field_info->parent);
  sharkd_json_value_string("name", current_header_field_info->abbrev);
  sharkd_json_value_string("display_name", current_header_field_info->name);
  sharkd_json_value_string("type", ftype_name(current_header_field_info->type));

  if (as_object)
  {
      sharkd_json_object_close();
  }
1190}

1192static void
1193sharkd_session_print_fields(void)
1194{
  void* proto_cookie = NULL((void*)0);
  void* field_cookie = NULL((void*)0);
  int protocol_id = -1;

  for (protocol_id = proto_get_first_protocol(&proto_cookie); protocol_id != -1; protocol_id = proto_get_next_protocol(&proto_cookie))
  {
      protocol_t* protocol = find_protocol_by_id(protocol_id);
      if (!proto_is_protocol_enabled(protocol))
      {
          continue;
      }

      header_field_info* current_header_field_info = proto_registrar_get_nth(proto_get_id(protocol));

      sharkd_session_print_field(current_header_field_info, TRUE(!(0)));

      for (current_header_field_info = proto_get_first_protocol_field(protocol_id, &field_cookie); current_header_field_info != NULL((void*)0); current_header_field_info = proto_get_next_protocol_field(protocol_id, &field_cookie))
      {
          if (current_header_field_info->same_name_prev_id != -1)
          {
              continue;
          }

          sharkd_session_print_field(current_header_field_info, TRUE(!(0)));
      }
  }
1221}

1223/**
* sharkd_session_process_fields()
*
* Process fields request
*
* Output object with attributes:
*   (m) fields  - all fields with their id, name, display_name, type and id of their parent
*/
1231static void
1232sharkd_session_process_fields(void)
1233{
  sharkd_json_result_prologue(rpcid);

  sharkd_json_array_open("fields");
  sharkd_session_print_fields();
  sharkd_json_array_close();

  sharkd_json_result_epilogue();
1241}

1243/**
* sharkd_session_process_field()
*
* Process field request
*
* Input:
*   (m) name - (filter) name of the field
*
* Output object with attributes:
*   (m) id            - id of the field
*   (m) parent_id     - id of the field's parent
*   (m) name          - name of the field
*   (m) display_name  - display_name of the field
*   (m) type          - type of the field
*/
1258static void
1259sharkd_session_process_field(const char* buf, const jsmntok_t* tokens, int count)
1260{
  const char* tok_name = json_find_attr(buf, tokens, count, "name");

  sharkd_json_result_prologue(rpcid);

  if (tok_name)
  {
      header_field_info* current_header_field_info = proto_registrar_get_byname(tok_name);
      if (current_header_field_info == NULL((void*)0))
      {
          sharkd_json_error(
              rpcid, -32602, NULL((void*)0),
              "Unknown field name"
          );
          return;
      }

      sharkd_session_print_field(current_header_field_info, FALSE(0));
  }

  sharkd_json_result_epilogue();
1281}

1283/**
* sharkd_session_process_load()
*
* Process load request
*
* Input:
*   (m) file - file to be loaded
*
* Output object with attributes:
*   (m) err - error code
*/
1294static void
1295sharkd_session_process_load(const char *buf, const jsmntok_t *tokens, int count)
1296{
  const char *tok_file = json_find_attr(buf, tokens, count, "file");
  const char *tok_max_packets = json_find_attr(buf, tokens, count, "max_packets");
  const char *tok_max_bytes = json_find_attr(buf, tokens, count, "max_bytes");
  int err = 0;

  uint32_t max_packets = 0;  /* 0 means unlimited */
  uint64_t max_bytes = 0;    /* 0 means unlimited */

  if (!tok_file)
      return;

  /* Parse optional max_packets parameter */
  if (tok_max_packets)
  {
      if (!ws_strtou32(tok_max_packets, NULL((void*)0), &max_packets))
      {
          sharkd_json_error(
                  rpcid, -32602, NULL((void*)0),
                  "Invalid max_packets parameter"
                  );
          return;
      }
  }

  /* Parse optional max_bytes parameter */
  if (tok_max_bytes)
  {
      if (!ws_strtou64(tok_max_bytes, NULL((void*)0), &max_bytes))
      {
          sharkd_json_error(
                  rpcid, -32602, NULL((void*)0),
                  "Invalid max_bytes parameter"
                  );
          return;
      }
  }

  fprintf(stderrstderr, "load: filename=%s, max_packets=%u, max_bytes=%" PRIu64"l" "u" "\n",
          tok_file, max_packets, max_bytes);

  if (sharkd_cf_open(tok_file, WTAP_TYPE_AUTO0, false0, &err) != CF_OK)
  {
      sharkd_json_error(
              rpcid, -2001, NULL((void*)0),
              "Unable to open the file"
              );
      return;
  }

  TRY{ except_t *volatile exc; volatile int except_state = 0; static
 const except_id_t catch_spec[] = { { 1, 0 } }; { struct except_stacknode
 except_sn; struct except_catch except_ch; except_setup_try(&
except_sn, &except_ch, catch_spec, 1); if (_setjmp (except_ch
.except_jmp)) *(&exc) = &except_ch.except_obj; else *
(&exc) = 0; if(except_state & 1) except_state |= 2; except_state
 &= ~1; if (except_state == 0 && exc == 0)
  {
      if (max_packets > 0 || max_bytes > 0)
      {
          err = sharkd_load_cap_file_with_limits((int)max_packets, (int64_t)max_bytes);
      }
      else
      {
          err = sharkd_load_cap_file();
      }
  }
  CATCH(OutOfMemoryError)if (except_state == 0 && exc != 0 && exc->
except_id.except_code == (8) && (except_state |= 1))
  {
      sharkd_json_error(
              rpcid, -32603, NULL((void*)0),
              "Load failed, out of memory"
              );
      fprintf(stderrstderr, "load: OutOfMemoryError\n");
      err = ENOMEM12;
  }
  ENDTRYif(!(except_state&1) && exc != 0) except_rethrow(
exc); except_free(except_ch.except_obj.except_dyndata); except_pop
(); };};

  if (err == 0)
  {
      sharkd_json_simple_ok(rpcid);
  }
  else
  {
      sharkd_json_result_prologue(rpcid);
      sharkd_json_value_string("status", wtap_strerror(err));
      sharkd_json_value_anyf("err", "%d", err);
      sharkd_json_result_epilogue();
  }

1380}

1382/**
* sharkd_session_process_status()
*
* Process status request
*
* Output object with attributes:
*   (m) frames      - count of currently loaded frames
*   (m) duration    - time difference between time of first frame, and last loaded frame
*   (o) filename    - capture filename
*   (o) filesize    - capture filesize
*   (o) columns     - array of column titles
*   (o) column_info - array of column infos, array of object with attributes:
*                      'title'    - column title
*                      'format'   - column format (%x or %Cus:<expr>:<occurrence> if COL_CUSTOM)
*                      'visible'  - true if column is visible
*                      'display'  - column display format; 'U', 'R' or 'D'
*/
1399static void
1400sharkd_session_process_status(void)
1401{
  sharkd_json_result_prologue(rpcid);

  sharkd_json_value_anyf("frames", "%u", cfile.count);
  sharkd_json_value_anyf("duration", "%.9f", nstime_to_sec(&cfile.elapsed_time));

  if (cfile.filename)
  {
      char *name = g_path_get_basename(cfile.filename);

      sharkd_json_value_string("filename", name);
      g_free(name);
  }

  if (cfile.provider.wth)
  {
      int64_t file_size = wtap_file_size(cfile.provider.wth, NULL((void*)0));

      if (file_size > 0)
          sharkd_json_value_anyf("filesize", "%" PRId64"l" "d", file_size);
  }

  if (cfile.cinfo.num_cols > 0)
  {
      sharkd_json_array_open("columns");
      for (int i = 0; i < cfile.cinfo.num_cols; ++i)
      {
          sharkd_json_value_string(NULL((void*)0), get_column_title(i));
      }
      sharkd_json_array_close();

      sharkd_json_array_open("column_info");
      for (int i = 0; i < cfile.cinfo.num_cols; ++i)
      {
          int fmt = get_column_format(i);
          sharkd_json_object_open(NULL((void*)0));
          sharkd_json_value_string("title", get_column_title(i));
          if (fmt != COL_CUSTOM)
          {
              sharkd_json_value_string("format", col_format_to_string(fmt));
          } else {
              sharkd_json_value_stringf("format", "%s:%s:%d", col_format_to_string(fmt), get_column_custom_fields(i), get_column_custom_occurrence(i));
          }
          sharkd_json_value_anyf("visible", get_column_visible(i) ? "true" : "false");
          sharkd_json_value_stringf("display", "%c", get_column_display_format(i));
          sharkd_json_object_close();
      }
      sharkd_json_array_close();
  }

  sharkd_json_result_epilogue();
1452}

1454struct sharkd_analyse_data
1455{
  GHashTable *protocols_set;
  nstime_t *first_time;
  nstime_t *last_time;
1459};

1461static void
1462sharkd_session_process_analyse_cb(epan_dissect_t *edt, proto_tree *tree _U___attribute__((unused)),
      struct epan_column_info *cinfo _U___attribute__((unused)), const GSList *data_src _U___attribute__((unused)), void *data)
1464{
  struct sharkd_analyse_data *analyser = (struct sharkd_analyse_data *) data;
  packet_info *pi = &edt->pi;
  frame_data *fdata = pi->fd;

  if (analyser->first_time == NULL((void*)0) || nstime_cmp(&fdata->abs_ts, analyser->first_time) < 0)
      analyser->first_time = &fdata->abs_ts;

  if (analyser->last_time == NULL((void*)0) || nstime_cmp(&fdata->abs_ts, analyser->last_time) > 0)
      analyser->last_time = &fdata->abs_ts;

  if (pi->layers)
  {
      wmem_list_frame_t *frame;

      for (frame = wmem_list_head(pi->layers); frame; frame = wmem_list_frame_next(frame))
      {
          int proto_id = GPOINTER_TO_UINT(wmem_list_frame_data(frame))((guint) (gulong) (wmem_list_frame_data(frame)));

          if (!g_hash_table_lookup_extended(analyser->protocols_set, GUINT_TO_POINTER(proto_id)((gpointer) (gulong) (proto_id)), NULL((void*)0), NULL((void*)0)))
          {
              g_hash_table_insert(analyser->protocols_set, GUINT_TO_POINTER(proto_id)((gpointer) (gulong) (proto_id)), GUINT_TO_POINTER(proto_id)((gpointer) (gulong) (proto_id)));
              sharkd_json_value_string(NULL((void*)0), proto_get_protocol_filter_name(proto_id));
          }
      }
  }

1491}

1493/**
* sharkd_session_process_status()
*
* Process analyse request
*
* Output object with attributes:
*   (m) frames  - count of currently loaded frames
*   (m) protocols - protocol list
*   (m) first     - earliest frame time
*   (m) last      - latest frame time
*/
1504static void
1505sharkd_session_process_analyse(void)
1506{
  struct sharkd_analyse_data analyser;
  wtap_rec rec; /* Record information */

  analyser.first_time = NULL((void*)0);
  analyser.last_time  = NULL((void*)0);
  analyser.protocols_set = g_hash_table_new(NULL((void*)0) /* g_direct_hash() */, NULL((void*)0) /* g_direct_equal */);

  sharkd_json_result_prologue(rpcid);

  sharkd_json_value_anyf("frames", "%u", cfile.count);

  sharkd_json_array_open("protocols");

  wtap_rec_init(&rec, 1514);

  for (uint32_t framenum = 1; framenum <= cfile.count; framenum++)
  {
      enum dissect_request_status status;
      int err;
      char *err_info;

      status = sharkd_dissect_request(framenum,
              (framenum != 1) ? 1 : 0, framenum - 1,
              &rec, NULL((void*)0), SHARKD_DISSECT_FLAG_NULL0x00u,
              &sharkd_session_process_analyse_cb, &analyser,
              &err, &err_info);
      switch (status) {

          case DISSECT_REQUEST_SUCCESS:
              break;

          case DISSECT_REQUEST_NO_SUCH_FRAME:
              /* XXX - report the error. */
              break;

          case DISSECT_REQUEST_READ_ERROR:
              /*
               * Free up the error string.
               * XXX - report the error.
               */
              g_free(err_info);
              break;
      }
  }

  sharkd_json_array_close();

  if (analyser.first_time)
      sharkd_json_value_anyf("first", "%.9f", nstime_to_sec(analyser.first_time));

  if (analyser.last_time)
      sharkd_json_value_anyf("last", "%.9f", nstime_to_sec(analyser.last_time));

  sharkd_json_result_epilogue();

  wtap_rec_cleanup(&rec);

  g_hash_table_destroy(analyser.protocols_set);
1565}

1567static column_info *
1568sharkd_session_create_columns(column_info *cinfo, const char *buf, const jsmntok_t *tokens, int count)
1569{
  const char *columns_custom[32];
  uint16_t columns_fmt[32];
  int16_t columns_occur[32];

  int i, cols;

  for (i = 0; i < 32; i++)
  {
      const char *tok_column;
      char tok_column_name[64];
      char *custom_sepa;

      snprintf(tok_column_name, sizeof(tok_column_name), "column%d", i);
      tok_column = json_find_attr(buf, tokens, count, tok_column_name);
      if (tok_column == NULL((void*)0))
          break;

      columns_custom[i] = NULL((void*)0);
      columns_occur[i] = 0;

      if ((custom_sepa = strchr(tok_column, ':')))
      {
          *custom_sepa = '\0'; /* XXX, C abuse: discarding-const */

          columns_fmt[i] = COL_CUSTOM;
          columns_custom[i] = tok_column;

          if (!ws_strtoi16(custom_sepa + 1, NULL((void*)0), &columns_occur[i]))
              return NULL((void*)0);
      }
      else
      {
          if (!ws_strtou16(tok_column, NULL((void*)0), &columns_fmt[i]))
              return NULL((void*)0);

          if (columns_fmt[i] >= NUM_COL_FMTS)
              return NULL((void*)0);

          /* if custom, that it shouldn't be just custom number -> error */
          if (columns_fmt[i] == COL_CUSTOM)
              return NULL((void*)0);
      }
  }

  cols = i;

  col_setup(cinfo, cols);

  for (i = 0; i < cols; i++)
  {
      col_item_t *col_item = &cinfo->columns[i];

      col_item->col_fmt = columns_fmt[i];
      col_item->col_title = NULL((void*)0); /* no need for title */

      if (col_item->col_fmt == COL_CUSTOM)
      {
          col_item->col_custom_fields = g_strdup(columns_custom[i])g_strdup_inline (columns_custom[i]);
          col_item->col_custom_occurrence = columns_occur[i];
      }

      col_item->col_fence = 0;
  }

  col_finalize(cinfo);

  return cinfo;
1637}

1639static void
1640sharkd_session_process_frames_cb(epan_dissect_t *edt, proto_tree *tree _U___attribute__((unused)),
      struct epan_column_info *cinfo, const GSList *data_src _U___attribute__((unused)), void *data _U___attribute__((unused)))
1642{
  packet_info *pi = &edt->pi;
  frame_data *fdata = pi->fd;
  wtap_block_t pkt_block = NULL((void*)0);
  unsigned int i;
  char *comment = NULL((void*)0);

  json_dumper_begin_object(&dumper);

  sharkd_json_array_open("c");
  for (int col = 0; col < cinfo->num_cols; ++col)
  {
      sharkd_json_value_string(NULL((void*)0), get_column_text(cinfo, col));
  }
  sharkd_json_array_close();

  sharkd_json_value_anyf("num", "%u", pi->num);

  /*
   * Get the block for this record, if it has one.
   */
  pkt_block = sharkd_get_packet_block(fdata);

  /*
   * Does this record have any comments?
   */
  if (pkt_block != NULL((void*)0) &&
          WTAP_OPTTYPE_SUCCESS == wtap_block_get_nth_string_option_value(pkt_block, OPT_COMMENT1, 0, &comment))
  {
      sharkd_json_value_anyf("ct", "true");

      sharkd_json_array_open("comments");
      for (i = 0; wtap_block_get_nth_string_option_value(pkt_block, OPT_COMMENT1, i, &comment) == WTAP_OPTTYPE_SUCCESS; i++) {
          sharkd_json_value_string(NULL((void*)0), comment);
      }
      sharkd_json_array_close();
  }

  if (fdata->ignored)
      sharkd_json_value_anyf("i", "true");

  if (fdata->marked)
      sharkd_json_value_anyf("m", "true");

  if (fdata->color_filter)
  {
      sharkd_json_value_stringf("bg", "%06x", color_t_to_rgb(&fdata->color_filter->bg_color));
      sharkd_json_value_stringf("fg", "%06x", color_t_to_rgb(&fdata->color_filter->fg_color));
  }

  wtap_block_unref(pkt_block);
  json_dumper_end_object(&dumper);
1694}

1696/**
* sharkd_session_process_frames()
*
* Process frames request
*
* Input:
*   (o) column0...columnXX - requested columns either number in range [0..NUM_COL_FMTS), or custom (syntax <dfilter>:<occurrence>).
*                            If column0 is not specified default column set will be used.
*   (o) filter - filter to be used
*   (o) skip=N   - skip N frames
*   (o) limit=N  - show only N frames
*   (o) refs  - list (comma separated) with sorted time reference frame numbers.
*
* Output array of frames with attributes:
*   (m) c   - array of column data
*   (m) num - frame number
*   (o) i   - if frame is ignored
*   (o) m   - if frame is marked
*   (o) ct  - if frame is commented
*   (o) comments - array of comment strings
*   (o) bg  - color filter - background color in hex
*   (o) fg  - color filter - foreground color in hex
*/
1719static void
1720sharkd_session_process_frames(const char *buf, const jsmntok_t *tokens, int count)
1721{
  const char *tok_filter = json_find_attr(buf, tokens, count, "filter");
  const char *tok_column = json_find_attr(buf, tokens, count, "column0");
  const char *tok_skip   = json_find_attr(buf, tokens, count, "skip");
  const char *tok_limit  = json_find_attr(buf, tokens, count, "limit");
  const char *tok_refs   = json_find_attr(buf, tokens, count, "refs");

  const uint8_t *filter_data = NULL((void*)0);

  uint32_t prev_dis_num = 0;
  uint32_t current_ref_frame = 0, next_ref_frame = UINT32_MAX(4294967295U);
  uint32_t skip;
  uint32_t limit;

  wtap_rec rec; /* Record information */
  column_info *cinfo = &cfile.cinfo;
  column_info user_cinfo;

  if (tok_column)
  {
      memset(&user_cinfo, 0, sizeof(user_cinfo));
      cinfo = sharkd_session_create_columns(&user_cinfo, buf, tokens, count);
      if (!cinfo)
      {
          sharkd_json_error(
                  rpcid, -13001, NULL((void*)0),
                  "Column definition invalid - note column 6 requires a custom definition"
                  );
          return;
      }
  }

  if (tok_filter)
  {
      const struct sharkd_filter_item *filter_item;

      filter_item = sharkd_session_filter_data(tok_filter);
      if (!filter_item)
      {
          sharkd_json_error(
                  rpcid, -13002, NULL((void*)0),
                  "Filter expression invalid"
                  );
          return;
      }

      filter_data = filter_item->filtered;
  }

  skip = 0;
  if (tok_skip)
  {
      if (!ws_strtou32(tok_skip, NULL((void*)0), &skip))
          return;
  }

  limit = 0;
  if (tok_limit)
  {
      if (!ws_strtou32(tok_limit, NULL((void*)0), &limit))
          return;
  }

  if (tok_refs)
  {
      if (!ws_strtou32(tok_refs, &tok_refs, &next_ref_frame))
          return;
  }

  sharkd_json_result_array_prologue(rpcid);

  wtap_rec_init(&rec, 1514);

  for (uint32_t framenum = 1; framenum <= cfile.count; framenum++)
  {
      frame_data *fdata;
      uint32_t ref_frame = (framenum != 1) ? 1 : 0;
      enum dissect_request_status status;
      int err;
      char *err_info;

      if (filter_data && !(filter_data[framenum / 8] & (1 << (framenum % 8))))
          continue;

      if (skip)
      {
          skip--;
          prev_dis_num = framenum;
          continue;
      }

      if (tok_refs)
      {
          if (framenum >= next_ref_frame)
          {
              current_ref_frame = next_ref_frame;

              if (*tok_refs != ',')
                  next_ref_frame = UINT32_MAX(4294967295U);

              while (*tok_refs == ',' && framenum >= next_ref_frame)
              {
                  current_ref_frame = next_ref_frame;

                  if (!ws_strtou32(tok_refs + 1, &tok_refs, &next_ref_frame))
                  {
                      fprintf(stderrstderr, "sharkd_session_process_frames() wrong format for refs: %s\n", tok_refs);
                      break;
                  }
              }

              if (*tok_refs == '\0' && framenum >= next_ref_frame)
              {
                  current_ref_frame = next_ref_frame;
                  next_ref_frame = UINT32_MAX(4294967295U);
              }
          }

          if (current_ref_frame)
              ref_frame = current_ref_frame;
      }

      fdata = sharkd_get_frame(framenum);
      status = sharkd_dissect_request(framenum,
              ref_frame, prev_dis_num,
              &rec, cinfo,
              (fdata->color_filter == NULL((void*)0)) ? SHARKD_DISSECT_FLAG_COLOR0x08u : SHARKD_DISSECT_FLAG_NULL0x00u,
              &sharkd_session_process_frames_cb, NULL((void*)0),
              &err, &err_info);
      switch (status) {

          case DISSECT_REQUEST_SUCCESS:
              break;

          case DISSECT_REQUEST_NO_SUCH_FRAME:
              /* XXX - report the error. */
              break;

          case DISSECT_REQUEST_READ_ERROR:
              /*
               * Free up the error string.
               * XXX - report the error.
               */
              g_free(err_info);
              break;
      }

      prev_dis_num = framenum;

      if (limit && --limit == 0)
          break;
  }
  sharkd_json_result_array_epilogue();

  if (cinfo != &cfile.cinfo)
      col_cleanup(cinfo);

  wtap_rec_cleanup(&rec);
1879}

1881static void
1882// NOLINTNEXTLINE(misc-no-recursion)
1883sharkd_session_process_tap_stats_node_cb(const char *key, const stat_node *n)
1884{
  stat_node *node;

  sharkd_json_array_open(key);
  for (node = n->children; node; node = node->next)
  {
      json_dumper_begin_object(&dumper);

      /* code based on stats_tree_get_values_from_node() */
      sharkd_json_value_string("name", node->name);
      sharkd_json_value_anyf("count", "%d", node->counter);
      if (node->counter && ((node->st_flags & ST_FLG_AVERAGE0x10000000) || node->rng))
      {
          switch(node->datatype)
          {
              case STAT_DT_INT:
                  sharkd_json_value_anyf("avg", "%.2f", ((float)node->total.int_total) / node->counter);
                  sharkd_json_value_anyf("min", "%d", node->minvalue.int_min);
                  sharkd_json_value_anyf("max", "%d", node->maxvalue.int_max);
                  break;
              case STAT_DT_FLOAT:
                  sharkd_json_value_anyf("avg", "%.2f", node->total.float_total / node->counter);
                  sharkd_json_value_anyf("min", "%f", node->minvalue.float_min);
                  sharkd_json_value_anyf("max", "%f", node->maxvalue.float_max);
                  break;
          }
      }

      if (node->st->elapsed)
          sharkd_json_value_anyf("rate", "%.4f", ((float)node->counter) / node->st->elapsed);

      if (node->parent && node->parent->counter)
          sharkd_json_value_anyf("perc", "%.2f", (node->counter * 100.0) / node->parent->counter);
      else if (node->parent == &(node->st->root))
          sharkd_json_value_anyf("perc", "100");

      if (prefs.st_enable_burstinfo && node->max_burst)
      {
          if (prefs.st_burst_showcount)
              sharkd_json_value_anyf("burstcount", "%d", node->max_burst);
          else
              sharkd_json_value_anyf("burstrate", "%.4f", ((double)node->max_burst) / prefs.st_burst_windowlen);

          sharkd_json_value_anyf("bursttime", "%.3f", (node->burst_time / 1000.0));
      }

      if (node->children)
      {
          // We recurse here but our depth is limited
          sharkd_session_process_tap_stats_node_cb("sub", node);
      }
      json_dumper_end_object(&dumper);
  }
  sharkd_json_array_close();
1938}

1940/**
* sharkd_session_process_tap_stats_cb()
*
* Output stats tap:
*
*   (m) tap        - tap name
*   (m) type:stats - tap output type
*   (m) name       - stat name
*   (m) stats      - array of object with attributes:
*                  (m) name       - stat item name
*                  (m) count      - stat item counter
*                  (o) avg        - stat item averange value
*                  (o) min        - stat item min value
*                  (o) max        - stat item max value
*                  (o) rate       - stat item rate value (ms)
*                  (o) perc       - stat item percentage
*                  (o) burstrate  - stat item burst rate
*                  (o) burstcount - stat item burst count
*                  (o) burstttme  - stat item burst start
*                  (o) sub        - array of object with attributes like in stats node.
*/
1961static void
1962sharkd_session_process_tap_stats_cb(void *psp)
1963{
  stats_tree *st = (stats_tree *) psp;

  json_dumper_begin_object(&dumper);

  sharkd_json_value_stringf("tap", "stats:%s", st->cfg->abbr);
  sharkd_json_value_string("type", "stats");
  sharkd_json_value_string("name", st->cfg->path);

  sharkd_session_process_tap_stats_node_cb("stats", &st->root);

  json_dumper_end_object(&dumper);
1975}

1977static void
1978sharkd_session_free_tap_stats_cb(void *psp)
1979{
  stats_tree *st = (stats_tree *) psp;

  stats_tree_free(st);
1983}

1985struct sharkd_expert_tap
1986{
  GSList *details;
  GStringChunk *text;
1989};

1991/**
* sharkd_session_process_tap_expert_cb()
*
* Output expert tap:
*
*   (m) tap         - tap name
*   (m) type:expert - tap output type
*   (m) details     - array of object with attributes:
*                  (m) f - frame number, which generated expert information
*                  (o) s - severity
*                  (o) g - group
*                  (m) m - expert message
*                  (o) p - protocol
*/
2005static void
2006sharkd_session_process_tap_expert_cb(void *tapdata)
2007{
  struct sharkd_expert_tap *etd = (struct sharkd_expert_tap *) tapdata;
  GSList *list;

  json_dumper_begin_object(&dumper);

  sharkd_json_value_string("tap", "expert");
  sharkd_json_value_string("type", "expert");

  sharkd_json_array_open("details");
  for (list = etd->details; list; list = list->next)
  {
      expert_info_t *ei = (expert_info_t *) list->data;
      const char *tmp;

      json_dumper_begin_object(&dumper);

      sharkd_json_value_anyf("f", "%u", ei->packet_num);

      tmp = try_val_to_str(ei->severity, expert_severity_vals);
      if (tmp)
          sharkd_json_value_string("s", tmp);

      tmp = try_val_to_str(ei->group, expert_group_vals);
      if (tmp)
          sharkd_json_value_string("g", tmp);

      sharkd_json_value_string("m", ei->summary);

      if (ei->protocol)
          sharkd_json_value_string("p", ei->protocol);

      json_dumper_end_object(&dumper);
  }
  sharkd_json_array_close();

  json_dumper_end_object(&dumper);
2044}

2046static tap_packet_status
2047sharkd_session_packet_tap_expert_cb(void *tapdata, packet_info *pinfo _U___attribute__((unused)), epan_dissect_t *edt _U___attribute__((unused)), const void *pointer, tap_flags_t flags _U___attribute__((unused)))
2048{
  struct sharkd_expert_tap *etd = (struct sharkd_expert_tap *) tapdata;
  const expert_info_t *ei       = (const expert_info_t *) pointer;
  expert_info_t *ei_copy;

  if (ei == NULL((void*)0))
      return TAP_PACKET_DONT_REDRAW;

  ei_copy = g_new(expert_info_t, 1)((expert_info_t *) g_malloc_n ((1), sizeof (expert_info_t)));
  /* Note: this is a shallow copy */
  *ei_copy = *ei;

  /* ei->protocol, ei->summary might be allocated in packet scope, make a copy. */
  ei_copy->protocol = g_string_chunk_insert_const(etd->text, ei_copy->protocol);
  ei_copy->summary  = g_string_chunk_insert_const(etd->text, ei_copy->summary);

  etd->details = g_slist_prepend(etd->details, ei_copy);

  return TAP_PACKET_REDRAW;
2067}

2069static void
2070sharkd_session_free_tap_expert_cb(void *tapdata)
2071{
  struct sharkd_expert_tap *etd = (struct sharkd_expert_tap *) tapdata;

  g_slist_free_full(etd->details, g_free);
  g_string_chunk_free(etd->text);
  g_free(etd);
2077}

2079/**
* sharkd_session_process_tap_flow_cb()
*
* Output flow tap:
*   (m) tap         - tap name
*   (m) type:flow   - tap output type
*   (m) nodes       - array of strings with node address
*   (m) flows       - array of object with attributes:
*                  (m) t  - frame time string
*                  (m) n  - array of two numbers with source node index and destination node index
*                  (m) pn - array of two numbers with source and destination port
*                  (o) c  - comment
*/
2092static void
2093sharkd_session_process_tap_flow_cb(void *tapdata)
2094{
  seq_analysis_info_t *graph_analysis = (seq_analysis_info_t *) tapdata;
  GList *flow_list;
  unsigned i;

  sequence_analysis_get_nodes(graph_analysis);

  json_dumper_begin_object(&dumper);
  sharkd_json_value_stringf("tap", "seqa:%s", graph_analysis->name);
  sharkd_json_value_string("type", "flow");

  sharkd_json_array_open("nodes");
  for (i = 0; i < graph_analysis->num_nodes; i++)
  {
      char *addr_str;

      addr_str = address_to_display(NULL((void*)0), &(graph_analysis->nodes[i]));
      sharkd_json_value_string(NULL((void*)0), addr_str);
      wmem_free(NULL((void*)0), addr_str);
  }
  sharkd_json_array_close();

  sharkd_json_array_open("flows");
  flow_list = g_queue_peek_nth_link(graph_analysis->items, 0);
  while (flow_list)
  {
      seq_analysis_item_t *sai = (seq_analysis_item_t *) flow_list->data;

      flow_list = g_list_next(flow_list)((flow_list) ? (((GList *)(flow_list))->next) : ((void*)0)
);

      if (!sai->display)
          continue;

      json_dumper_begin_object(&dumper);

      sharkd_json_value_string("t", sai->time_str);
      sharkd_json_value_anyf("n", "[%u,%u]", sai->src_node, sai->dst_node);
      sharkd_json_value_anyf("pn", "[%u,%u]", sai->port_src, sai->port_dst);

      if (sai->comment)
          sharkd_json_value_string("c", sai->comment);

      json_dumper_end_object(&dumper);
  }
  sharkd_json_array_close();

  json_dumper_end_object(&dumper);
2141}

2143static void
2144sharkd_session_free_tap_flow_cb(void *tapdata)
2145{
  seq_analysis_info_t *graph_analysis = (seq_analysis_info_t *) tapdata;

  sequence_analysis_info_free(graph_analysis);
2149}

2151struct sharkd_conv_tap_data
2152{
  const char *type;
  conv_hash_t hash;
  bool_Bool resolve_name;
  bool_Bool resolve_port;
2157};

2159static bool_Bool
2160sharkd_session_geoip_addr(address *addr, const char *suffix)
2161{
  const mmdb_lookup_t *lookup = NULL((void*)0);
  bool_Bool with_geoip = false0;
  char json_key[64];

  if (addr->type == AT_IPv4)
  {
      const ws_in4_addr *ip4 = (const ws_in4_addr *) addr->data;

      lookup = maxmind_db_lookup_ipv4(ip4);
  }
  else if (addr->type == AT_IPv6)
  {
      const ws_in6_addr *ip6 = (const ws_in6_addr *) addr->data;

      lookup = maxmind_db_lookup_ipv6(ip6);
  }

  if (!lookup || !lookup->found)
      return false0;

  if (lookup->country)
  {
      snprintf(json_key, sizeof(json_key), "geoip_country%s", suffix);
      sharkd_json_value_string(json_key, lookup->country);
      with_geoip = true1;
  }

  if (lookup->country_iso)
  {
      snprintf(json_key, sizeof(json_key), "geoip_country_iso%s", suffix);
      sharkd_json_value_string(json_key, lookup->country_iso);
      with_geoip = true1;
  }

  if (lookup->city)
  {
      snprintf(json_key, sizeof(json_key), "geoip_city%s", suffix);
      sharkd_json_value_string(json_key, lookup->city);
      with_geoip = true1;
  }

  if (lookup->as_org)
  {
      snprintf(json_key, sizeof(json_key), "geoip_as_org%s", suffix);
      sharkd_json_value_string(json_key, lookup->as_org);
      with_geoip = true1;
  }

  if (lookup->as_number > 0)
  {
      snprintf(json_key, sizeof(json_key), "geoip_as%s", suffix);
      sharkd_json_value_anyf(json_key, "%u", lookup->as_number);
      with_geoip = true1;
  }

  if (lookup->latitude >= -90.0 && lookup->latitude <= 90.0)
  {
      snprintf(json_key, sizeof(json_key), "geoip_lat%s", suffix);
      sharkd_json_value_anyf(json_key, "%f", lookup->latitude);
      with_geoip = true1;
  }

  if (lookup->longitude >= -180.0 && lookup->longitude <= 180.0)
  {
      snprintf(json_key, sizeof(json_key), "geoip_lon%s", suffix);
      sharkd_json_value_anyf(json_key, "%f", lookup->longitude);
      with_geoip = true1;
  }

  return with_geoip;
2232}

2234struct sharkd_analyse_rtp_items
2235{
  uint32_t frame_num;
  uint32_t sequence_num;

  double delta;
  double jitter;
  double skew;
  double bandwidth;
  bool_Bool marker;

  double arrive_offset;

  /* from tap_rtp_stat_t */
  uint32_t flags;
  uint16_t pt;
2250};

2252struct sharkd_analyse_rtp
2253{
  const char *tap_name;
  rtpstream_id_t id;

  GSList *packets;
  double start_time;
  tap_rtp_stat_t statinfo;
2260};

2262static void
2263sharkd_session_process_tap_rtp_free_cb(void *tapdata)
2264{
  struct sharkd_analyse_rtp *rtp_req = (struct sharkd_analyse_rtp *) tapdata;

  g_slist_free_full(rtp_req->packets, g_free);
  g_free(rtp_req);
2269}

2271static tap_packet_status
2272sharkd_session_packet_tap_rtp_analyse_cb(void *tapdata, packet_info *pinfo, epan_dissect_t *edt _U___attribute__((unused)), const void *pointer, tap_flags_t flags _U___attribute__((unused)))
2273{
  struct sharkd_analyse_rtp *rtp_req = (struct sharkd_analyse_rtp *) tapdata;
  const struct _rtp_info *rtp_info = (const struct _rtp_info *) pointer;

  if (rtpstream_id_equal_pinfo_rtp_info(&rtp_req->id, pinfo, rtp_info))
  {
      tap_rtp_stat_t *statinfo = &(rtp_req->statinfo);
      struct sharkd_analyse_rtp_items *item;

      rtppacket_analyse(statinfo, pinfo, rtp_info);

      item = g_new(struct sharkd_analyse_rtp_items, 1)((struct sharkd_analyse_rtp_items *) g_malloc_n ((1), sizeof (
struct sharkd_analyse_rtp_items)));

      if (!rtp_req->packets)
          rtp_req->start_time = nstime_to_sec(&pinfo->abs_ts);

      item->frame_num    = pinfo->num;
      item->sequence_num = rtp_info->info_seq_num;
      item->delta        = (statinfo->flags & STAT_FLAG_FIRST0x001) ? 0.0 : statinfo->delta;
      item->jitter       = (statinfo->flags & STAT_FLAG_FIRST0x001) ? 0.0 : statinfo->jitter;
      item->skew         = (statinfo->flags & STAT_FLAG_FIRST0x001) ? 0.0 : statinfo->skew;
      item->bandwidth    = statinfo->bandwidth;
      item->marker       = rtp_info->info_marker_set ? true1 : false0;
      item->arrive_offset= nstime_to_sec(&pinfo->abs_ts) - rtp_req->start_time;

      item->flags = statinfo->flags;
      item->pt    = statinfo->pt;

      /* XXX, O(n) optimize */
      rtp_req->packets = g_slist_append(rtp_req->packets, item);
  }

  return TAP_PACKET_REDRAW;
2306}

2308/**
* sharkd_session_process_tap_rtp_analyse_cb()
*
* Output rtp analyse tap:
*   (m) tap   - tap name
*   (m) type  - tap output type
*   (m) ssrc         - RTP SSRC
*   (m) max_delta    - Max delta (ms)
*   (m) max_delta_nr - Max delta packet #
*   (m) max_jitter   - Max jitter (ms)
*   (m) mean_jitter  - Mean jitter (ms)
*   (m) max_skew     - Max skew (ms)
*   (m) total_nr     - Total number of RTP packets
*   (m) seq_err      - Number of sequence errors
*   (m) duration     - Duration (ms)
*   (m) items      - array of object with attributes:
*                  (m) f    - frame number
*                  (m) o    - arrive offset
*                  (m) sn   - sequence number
*                  (m) d    - delta
*                  (m) j    - jitter
*                  (m) sk   - skew
*                  (m) bw   - bandwidth
*                  (o) s    - status string
*                  (o) t    - status type
*                  (o) mark - rtp mark
*/
2335static void
2336sharkd_session_process_tap_rtp_analyse_cb(void *tapdata)
2337{
  const int RTP_TYPE_CN       = 1;
  const int RTP_TYPE_ERROR    = 2;
  const int RTP_TYPE_WARN     = 3;
  const int RTP_TYPE_PT_EVENT = 4;

  const struct sharkd_analyse_rtp *rtp_req = (struct sharkd_analyse_rtp *) tapdata;
  const tap_rtp_stat_t *statinfo = &rtp_req->statinfo;

  GSList *l;

  json_dumper_begin_object(&dumper);

  sharkd_json_value_string("tap", rtp_req->tap_name);
  sharkd_json_value_string("type", "rtp-analyse");
  sharkd_json_value_stringf("ssrc", "0x%x", rtp_req->id.ssrc);

  sharkd_json_value_anyf("max_delta", "%f", statinfo->max_delta);
  sharkd_json_value_anyf("max_delta_nr", "%u", statinfo->max_nr);
  sharkd_json_value_anyf("max_jitter", "%f", statinfo->max_jitter);
  sharkd_json_value_anyf("mean_jitter", "%f", statinfo->mean_jitter);
  sharkd_json_value_anyf("max_skew", "%f", statinfo->max_skew);
  sharkd_json_value_anyf("total_nr", "%u", statinfo->total_nr);
  sharkd_json_value_anyf("seq_err", "%u", statinfo->sequence);
  sharkd_json_value_anyf("duration", "%f", statinfo->time - statinfo->start_time);

  sharkd_json_array_open("items");
  for (l = rtp_req->packets; l; l = l->next)
  {
      struct sharkd_analyse_rtp_items *item = (struct sharkd_analyse_rtp_items *) l->data;

      json_dumper_begin_object(&dumper);

      sharkd_json_value_anyf("f", "%u", item->frame_num);
      sharkd_json_value_anyf("o", "%.9f", item->arrive_offset);
      sharkd_json_value_anyf("sn", "%u", item->sequence_num);
      sharkd_json_value_anyf("d", "%.2f", item->delta);
      sharkd_json_value_anyf("j", "%.2f", item->jitter);
      sharkd_json_value_anyf("sk", "%.2f", item->skew);
      sharkd_json_value_anyf("bw", "%.2f", item->bandwidth);

      if (item->pt == PT_CN13)
      {
          sharkd_json_value_string("s", "Comfort noise (PT=13, RFC 3389)");
          sharkd_json_value_anyf("t", "%d", RTP_TYPE_CN);
      }
      else if (item->pt == PT_CN_OLD19)
      {
          sharkd_json_value_string("s", "Comfort noise (PT=19, reserved)");
          sharkd_json_value_anyf("t", "%d", RTP_TYPE_CN);
      }
      else if (item->flags & STAT_FLAG_WRONG_SEQ0x004)
      {
          sharkd_json_value_string("s", "Wrong sequence number");
          sharkd_json_value_anyf("t", "%d", RTP_TYPE_ERROR);
      }
      else if (item->flags & STAT_FLAG_DUP_PKT0x200)
      {
          sharkd_json_value_string("s", "Suspected duplicate (MAC address) only delta time calculated");
          sharkd_json_value_anyf("t", "%d", RTP_TYPE_WARN);
      }
      else if (item->flags & STAT_FLAG_REG_PT_CHANGE0x040)
      {
          sharkd_json_value_stringf("s", "Payload changed to PT=%u%s",
                  item->pt,
                  (item->flags & STAT_FLAG_PT_T_EVENT0x100) ? " telephone/event" : "");
          sharkd_json_value_anyf("t", "%d", RTP_TYPE_WARN);
      }
      else if (item->flags & STAT_FLAG_WRONG_TIMESTAMP0x080)
      {
          sharkd_json_value_string("s", "Incorrect timestamp");
          sharkd_json_value_anyf("t", "%d", RTP_TYPE_WARN);
      }
      else if ((item->flags & STAT_FLAG_PT_CHANGE0x008)
              &&  !(item->flags & STAT_FLAG_FIRST0x001)
              &&  !(item->flags & STAT_FLAG_PT_CN0x010)
              &&  (item->flags & STAT_FLAG_FOLLOW_PT_CN0x020)
              &&  !(item->flags & STAT_FLAG_MARKER0x002))
      {
          sharkd_json_value_string("s", "Marker missing?");
          sharkd_json_value_anyf("t", "%d", RTP_TYPE_WARN);
      }
      else if (item->flags & STAT_FLAG_PT_T_EVENT0x100)
      {
          sharkd_json_value_stringf("s", "PT=%u telephone/event", item->pt);
          sharkd_json_value_anyf("t", "%d", RTP_TYPE_PT_EVENT);
      }
      else if (item->flags & STAT_FLAG_MARKER0x002)
      {
          sharkd_json_value_anyf("t", "%d", RTP_TYPE_WARN);
      }

      if (item->marker)
          sharkd_json_value_anyf("mark", "1");

      json_dumper_end_object(&dumper);
  }
  sharkd_json_array_close();

  json_dumper_end_object(&dumper);
2437}

2439/**
* sharkd_session_process_tap_conv_cb()
*
* Output conv tap:
*   (m) tap        - tap name
*   (m) type       - tap output type
*   (m) proto      - protocol short name
*   (o) filter     - filter string
*   (o) geoip      - whether GeoIP information is available, boolean
*
*   (o) convs      - array of object with attributes:
*                  (m) saddr - source address
*                  (m) daddr - destination address
*                  (o) sport - source port
*                  (o) dport - destination port
*                  (m) txf   - TX frame count
*                  (m) txb   - TX bytes
*                  (m) rxf   - RX frame count
*                  (m) rxb   - RX bytes
*                  (m) start - (relative) first packet time
*                  (m) stop  - (relative) last packet time
*                  (o) filter - conversation filter
*
*   (o) hosts      - array of object with attributes:
*                  (m) host - host address
*                  (o) port - host port
*                  (m) txf  - TX frame count
*                  (m) txb  - TX bytes
*                  (m) rxf  - RX frame count
*                  (m) rxb  - RX bytes
*/
2470static void
2471sharkd_session_process_tap_conv_cb(void *arg)
2472{
  conv_hash_t *hash = (conv_hash_t *) arg;
  const struct sharkd_conv_tap_data *iu = (struct sharkd_conv_tap_data *) hash->user_data;
  const char *proto;
  int proto_with_port;
  unsigned i;

  int with_geoip = 0;

  json_dumper_begin_object(&dumper);
  sharkd_json_value_string("tap", iu->type);

  if (!strncmp(iu->type, "conv:", 5))
  {
      sharkd_json_value_string("type", "conv");
      sharkd_json_array_open("convs");
      proto = iu->type + 5;
  }
  else if (!strncmp(iu->type, "endpt:", 6))
  {
      sharkd_json_value_string("type", "host");
      sharkd_json_array_open("hosts");
      proto = iu->type + 6;
  }
  else
  {
      sharkd_json_value_string("type", "err");
      proto = "";
  }

  proto_with_port = (!strcmp(proto, "TCP") || !strcmp(proto, "UDP") || !strcmp(proto, "SCTP"));

  if (iu->hash.conv_array != NULL((void*)0) && !strncmp(iu->type, "conv:", 5))
  {
      for (i = 0; i < iu->hash.conv_array->len; i++)
      {
          conv_item_t *iui = &g_array_index(iu->hash.conv_array, conv_item_t, i)(((conv_item_t*) (void *) (iu->hash.conv_array)->data) [
(i)]);
          char *src_addr, *dst_addr;
          char *src_port, *dst_port;
          char *filter_str;

          json_dumper_begin_object(&dumper);

          sharkd_json_value_string("saddr", (src_addr = get_conversation_address(NULL((void*)0), &iui->src_address, iu->resolve_name)));
          sharkd_json_value_string("daddr", (dst_addr = get_conversation_address(NULL((void*)0), &iui->dst_address, iu->resolve_name)));

          if (proto_with_port)
          {
              sharkd_json_value_string("sport", (src_port = get_conversation_port(NULL((void*)0), iui->src_port, iui->ctype, iu->resolve_port)));
              sharkd_json_value_string("dport", (dst_port = get_conversation_port(NULL((void*)0), iui->dst_port, iui->ctype, iu->resolve_port)));

              wmem_free(NULL((void*)0), src_port);
              wmem_free(NULL((void*)0), dst_port);
          }

          sharkd_json_value_anyf("rxf", "%" PRIu64"l" "u", iui->rx_frames);
          sharkd_json_value_anyf("rxb", "%" PRIu64"l" "u", iui->rx_bytes);

          sharkd_json_value_anyf("txf", "%" PRIu64"l" "u", iui->tx_frames);
          sharkd_json_value_anyf("txb", "%" PRIu64"l" "u", iui->tx_bytes);

          sharkd_json_value_anyf("start", "%.9f", nstime_to_sec(&iui->start_time));
          sharkd_json_value_anyf("stop", "%.9f", nstime_to_sec(&iui->stop_time));

          filter_str = get_conversation_filter(iui, CONV_DIR_A_TO_FROM_B);
          if (filter_str)
          {
              sharkd_json_value_string("filter", filter_str);
              g_free(filter_str);
          }

          wmem_free(NULL((void*)0), src_addr);
          wmem_free(NULL((void*)0), dst_addr);

          if (sharkd_session_geoip_addr(&(iui->src_address), "1"))
              with_geoip = 1;
          if (sharkd_session_geoip_addr(&(iui->dst_address), "2"))
              with_geoip = 1;

          json_dumper_end_object(&dumper);
      }
  }
  else if (iu->hash.conv_array != NULL((void*)0) && !strncmp(iu->type, "endpt:", 6))
  {
      for (i = 0; i < iu->hash.conv_array->len; i++)
      {
          endpoint_item_t *endpoint = &g_array_index(iu->hash.conv_array, endpoint_item_t, i)(((endpoint_item_t*) (void *) (iu->hash.conv_array)->data
) [(i)]);
          char *host_str, *port_str;
          char *filter_str;

          json_dumper_begin_object(&dumper);

          sharkd_json_value_string("host", (host_str = get_conversation_address(NULL((void*)0), &endpoint->myaddress, iu->resolve_name)));

          if (proto_with_port)
          {
              sharkd_json_value_string("port", (port_str = get_endpoint_port(NULL((void*)0), endpoint, iu->resolve_port)));

              wmem_free(NULL((void*)0), port_str);
          }

          sharkd_json_value_anyf("rxf", "%" PRIu64"l" "u", endpoint->rx_frames);
          sharkd_json_value_anyf("rxb", "%" PRIu64"l" "u", endpoint->rx_bytes);

          sharkd_json_value_anyf("txf", "%" PRIu64"l" "u", endpoint->tx_frames);
          sharkd_json_value_anyf("txb", "%" PRIu64"l" "u", endpoint->tx_bytes);

          filter_str = get_endpoint_filter(endpoint);
          if (filter_str)
          {
              sharkd_json_value_string("filter", filter_str);
              g_free(filter_str);
          }

          wmem_free(NULL((void*)0), host_str);

          if (sharkd_session_geoip_addr(&(endpoint->myaddress), ""))
              with_geoip = 1;
          json_dumper_end_object(&dumper);
      }
  }
  sharkd_json_array_close();

  sharkd_json_value_string("proto", proto);
  sharkd_json_value_anyf("geoip", with_geoip ? "true" : "false");

  json_dumper_end_object(&dumper);
2599}

2601static void
2602sharkd_session_free_tap_conv_cb(void *arg)
2603{
  conv_hash_t *hash = (conv_hash_t *) arg;
  struct sharkd_conv_tap_data *iu = (struct sharkd_conv_tap_data *) hash->user_data;

  if (!strncmp(iu->type, "conv:", 5))
  {
      reset_conversation_table_data(hash);
  }
  else if (!strncmp(iu->type, "endpt:", 6))
  {
      reset_endpoint_table_data(hash);
  }

  g_free(iu);
2617}

2619/**
* sharkd_session_process_tap_nstat_cb()
*
* Output nstat tap:
*   (m) tap        - tap name
*   (m) type       - tap output type
*   (m) fields: array of objects with attributes:
*                  (m) c - name
*
*   (m) tables: array of object with attributes:
*                  (m) t - table title
*                  (m) i - array of items
*/
2632static void
2633sharkd_session_process_tap_nstat_cb(void *arg)
2634{
  stat_data_t *stat_data = (stat_data_t *) arg;
  unsigned i, j, k;

  json_dumper_begin_object(&dumper);
  sharkd_json_value_stringf("tap", "nstat:%s", stat_data->stat_tap_data->cli_string);
  sharkd_json_value_string("type", "nstat");

  sharkd_json_array_open("fields");
  for (i = 0; i < stat_data->stat_tap_data->nfields; i++)
  {
      stat_tap_table_item *field = &(stat_data->stat_tap_data->fields[i]);

      json_dumper_begin_object(&dumper);
      sharkd_json_value_string("c", field->column_name);
      json_dumper_end_object(&dumper);
  }
  sharkd_json_array_close();

  sharkd_json_array_open("tables");
  for (i = 0; i < stat_data->stat_tap_data->tables->len; i++)
  {
      stat_tap_table *table = g_array_index(stat_data->stat_tap_data->tables, stat_tap_table *, i)(((stat_tap_table **) (void *) (stat_data->stat_tap_data->
tables)->data) [(i)]);

      json_dumper_begin_object(&dumper);

      sharkd_json_value_string("t", table->title);

      sharkd_json_array_open("i");
      for (j = 0; j < table->num_elements; j++)
      {
          stat_tap_table_item_type *field_data;

          field_data = stat_tap_get_field_data(table, j, 0);
          if (field_data == NULL((void*)0) || field_data->type == TABLE_ITEM_NONE) /* Nothing for us here */
              continue;

          sharkd_json_array_open(NULL((void*)0));
          for (k = 0; k < table->num_fields; k++)
          {
              field_data = stat_tap_get_field_data(table, j, k);

              switch (field_data->type)
              {
                  case TABLE_ITEM_UINT:
                      sharkd_json_value_anyf(NULL((void*)0), "%u", field_data->value.uint_value);
                      break;

                  case TABLE_ITEM_INT:
                      sharkd_json_value_anyf(NULL((void*)0), "%d", field_data->value.int_value);
                      break;

                  case TABLE_ITEM_STRING:
                      sharkd_json_value_string(NULL((void*)0), field_data->value.string_value);
                      break;

                  case TABLE_ITEM_FLOAT:
                      sharkd_json_value_anyf(NULL((void*)0), "%f", field_data->value.float_value);
                      break;

                  case TABLE_ITEM_ENUM:
                      sharkd_json_value_anyf(NULL((void*)0), "%d", field_data->value.enum_value);
                      break;

                  case TABLE_ITEM_NONE:
                      sharkd_json_value_anyf(NULL((void*)0), "null");
                      break;
              }
          }

          sharkd_json_array_close();
      }
      sharkd_json_array_close();
      json_dumper_end_object(&dumper);
  }
  sharkd_json_array_close();

  json_dumper_end_object(&dumper);
2712}

2714static void
2715sharkd_session_free_tap_nstat_cb(void *arg)
2716{
  stat_data_t *stat_data = (stat_data_t *) arg;

  free_stat_tables(stat_data->stat_tap_data);
2720}

2722/**
* sharkd_session_process_tap_rtd_cb()
*
* Output rtd tap:
*   (m) tap        - tap name
*   (m) type       - tap output type
*   (m) stats - statistics rows - array object with attributes:
*                  (m) type - statistic name
*                  (m) num - number of messages
*                  (m) min - minimum SRT time
*                  (m) max - maximum SRT time
*                  (m) tot - total SRT time
*                  (m) min_frame - minimal SRT
*                  (m) max_frame - maximum SRT
*                  (o) open_req - Open Requests
*                  (o) disc_rsp - Discarded Responses
*                  (o) req_dup  - Duplicated Requests
*                  (o) rsp_dup  - Duplicated Responses
*   (o) open_req   - Open Requests
*   (o) disc_rsp   - Discarded Responses
*   (o) req_dup    - Duplicated Requests
*   (o) rsp_dup    - Duplicated Responses
*/
2745static void
2746sharkd_session_process_tap_rtd_cb(void *arg)
2747{
  rtd_data_t *rtd_data = (rtd_data_t *) arg;
  register_rtd_t *rtd  = (register_rtd_t *) rtd_data->user_data;

  unsigned i, j;

  const char *filter = proto_get_protocol_filter_name(get_rtd_proto_id(rtd));

  /* XXX, some dissectors are having single table and multiple timestats (mgcp, megaco),
   *      some multiple table and single timestat (radius, h225)
   *      and it seems that value_string is used one for timestamp-ID, other one for table-ID
   *      I wonder how it will gonna work with multiple timestats and multiple tables...
   * (for usage grep for: register_rtd_table)
   */
  const value_string *vs = get_rtd_value_string(rtd);

  json_dumper_begin_object(&dumper);
  sharkd_json_value_stringf("tap", "rtd:%s", filter);
  sharkd_json_value_string("type", "rtd");

  if (rtd_data->stat_table.num_rtds == 1)
  {
      const rtd_timestat *ms = &rtd_data->stat_table.time_stats[0];

      sharkd_json_value_anyf("open_req", "%u", ms->open_req_num);
      sharkd_json_value_anyf("disc_rsp", "%u", ms->disc_rsp_num);
      sharkd_json_value_anyf("req_dup", "%u", ms->req_dup_num);
      sharkd_json_value_anyf("rsp_dup", "%u", ms->rsp_dup_num);
  }

  sharkd_json_array_open("stats");
  for (i = 0; i < rtd_data->stat_table.num_rtds; i++)
  {
      const rtd_timestat *ms = &rtd_data->stat_table.time_stats[i];

      for (j = 0; j < ms->num_timestat; j++)
      {
          const char *type_str;

          if (ms->rtd[j].num == 0)
              continue;

          json_dumper_begin_object(&dumper);

          if (rtd_data->stat_table.num_rtds == 1)
              type_str = val_to_str_const(j, vs, "Other"); /* 1 table - description per row */
          else
              type_str = val_to_str_const(i, vs, "Other"); /* multiple table - description per table */
          sharkd_json_value_string("type", type_str);

          sharkd_json_value_anyf("num", "%u", ms->rtd[j].num);
          sharkd_json_value_anyf("min", "%.9f", nstime_to_sec(&(ms->rtd[j].min)));
          sharkd_json_value_anyf("max", "%.9f", nstime_to_sec(&(ms->rtd[j].max)));
          sharkd_json_value_anyf("tot", "%.9f", nstime_to_sec(&(ms->rtd[j].tot)));
          sharkd_json_value_anyf("min_frame", "%u", ms->rtd[j].min_num);
          sharkd_json_value_anyf("max_frame", "%u", ms->rtd[j].max_num);

          if (rtd_data->stat_table.num_rtds != 1)
          {
              /* like in tshark, display it on every row */
              sharkd_json_value_anyf("open_req", "%u", ms->open_req_num);
              sharkd_json_value_anyf("disc_rsp", "%u", ms->disc_rsp_num);
              sharkd_json_value_anyf("req_dup", "%u", ms->req_dup_num);
              sharkd_json_value_anyf("rsp_dup", "%u", ms->rsp_dup_num);
          }

          json_dumper_end_object(&dumper);
      }
  }
  sharkd_json_array_close();

  json_dumper_end_object(&dumper);
2819}

2821static void
2822sharkd_session_free_tap_rtd_cb(void *arg)
2823{
  rtd_data_t *rtd_data = (rtd_data_t *) arg;

  free_rtd_table(&rtd_data->stat_table);
  g_free(rtd_data);
2828}

2830/**
* sharkd_session_process_tap_srt_cb()
*
* Output srt tap:
*   (m) tap        - tap name
*   (m) type       - tap output type
*
*   (m) tables - array of object with attributes:
*                  (m) n - table name
*                  (m) f - table filter
*                  (o) c - table column name
*                  (m) r - table rows - array object with attributes:
*                            (m) n   - row name
*                            (m) idx - procedure index
*                            (m) num - number of events
*                            (m) min - minimum SRT time
*                            (m) max - maximum SRT time
*                            (m) tot - total SRT time
*/
2849static void
2850sharkd_session_process_tap_srt_cb(void *arg)
2851{
  srt_data_t *srt_data = (srt_data_t *) arg;
  register_srt_t *srt = (register_srt_t *) srt_data->user_data;

  const char *filter = proto_get_protocol_filter_name(get_srt_proto_id(srt));

  unsigned i;

  json_dumper_begin_object(&dumper);
  sharkd_json_value_stringf("tap", "srt:%s", filter);
  sharkd_json_value_string("type", "srt");

  sharkd_json_array_open("tables");
  for (i = 0; i < srt_data->srt_array->len; i++)
  {
      /* SRT table */
      srt_stat_table *rst = g_array_index(srt_data->srt_array, srt_stat_table *, i)(((srt_stat_table **) (void *) (srt_data->srt_array)->data
) [(i)]);

      int j;

      json_dumper_begin_object(&dumper);

      if (rst->name)
          sharkd_json_value_string("n", rst->name);
      else if (rst->short_name)
          sharkd_json_value_string("n", rst->short_name);
      else
          sharkd_json_value_stringf("n", "table%u", i);

      if (rst->filter_string)
          sharkd_json_value_string("f", rst->filter_string);

      if (rst->proc_column_name)
          sharkd_json_value_string("c", rst->proc_column_name);

      sharkd_json_array_open("r");
      for (j = 0; j < rst->num_procs; j++)
      {
          /* SRT row */
          srt_procedure_t *proc = &rst->procedures[j];

          if (proc->stats.num == 0)
              continue;

          json_dumper_begin_object(&dumper);

          sharkd_json_value_string("n", proc->procedure);

          if (rst->filter_string)
              sharkd_json_value_anyf("idx", "%d", proc->proc_index);

          sharkd_json_value_anyf("num", "%u", proc->stats.num);

          sharkd_json_value_anyf("min", "%.9f", nstime_to_sec(&proc->stats.min));
          sharkd_json_value_anyf("max", "%.9f", nstime_to_sec(&proc->stats.max));
          sharkd_json_value_anyf("tot", "%.9f", nstime_to_sec(&proc->stats.tot));

          json_dumper_end_object(&dumper);
      }
      sharkd_json_array_close();

      json_dumper_end_object(&dumper);
  }
  sharkd_json_array_close();

  json_dumper_end_object(&dumper);
2917}

2919static void
2920sharkd_session_free_tap_srt_cb(void *arg)
2921{
  srt_data_t *srt_data = (srt_data_t *) arg;
  register_srt_t *srt = (register_srt_t *) srt_data->user_data;

  free_srt_table(srt, srt_data->srt_array);
  g_array_free(srt_data->srt_array, TRUE(!(0)));
  g_free(srt_data);
2928}

2930static void
2931// NOLINTNEXTLINE(misc-no-recursion)
2932sharkd_session_process_tap_phs_cb_aux(phs_t *rs)
2933{
  for (; rs; rs = rs->sibling) {
      if (rs->protocol == -1) {
          return;
      }
      sharkd_json_object_open(NULL((void*)0));
      sharkd_json_value_string("proto", rs->proto_name);
      sharkd_json_value_anyf("frames", "%"PRIu32"u", rs->frames);
      sharkd_json_value_anyf("bytes", "%"PRIu64"l" "u", rs->bytes);
      if (rs->child != NULL((void*)0) && rs->child->protocol != -1) {
          sharkd_json_array_open("protos");
          // We recurse here but our depth is limited
          sharkd_session_process_tap_phs_cb_aux(rs->child);
          sharkd_json_array_close();
      }
      sharkd_json_object_close();
  }
2950}

2952/**
* sharkd_session_process_tap_phs_cb()
*
* Output phs tap:
*   (m) tap        - tap name
*   (m) type       - tap output type
*   (m) filter     - tap filter argument
*   (m) protos     - array of proto objects
*
*   proto object:
*   (m) proto      - protocol name
*   (m) frames     - frame count
*   (m) bytes      - bytes count
*   (o) protos     - array of proto objects
*/
2967static void
2968sharkd_session_process_tap_phs_cb(void *arg)
2969{
  phs_t *rs = (phs_t *)arg;
  sharkd_json_object_open(NULL((void*)0));
  sharkd_json_value_string("tap", "phs");
  sharkd_json_value_string("type", "phs");
  sharkd_json_value_string("filter", rs->filter ? rs->filter : "");
  sharkd_json_array_open("protos");
  sharkd_session_process_tap_phs_cb_aux(rs);
  sharkd_json_array_close();
  sharkd_json_object_close();
2979}

2981static void
2982sharkd_session_free_tap_phs_cb(void *arg)
2983{
  phs_t *rs = (phs_t *)arg;
  free_phs(rs);
2986}

2988struct sharkd_export_object_list
2989{
  struct sharkd_export_object_list *next;

  char *type;
  const char *proto;
  GSList *entries;
2995};

2997static struct sharkd_export_object_list *sharkd_eo_list;

2999/**
* sharkd_session_process_tap_eo_cb()
*
* Output eo tap:
*   (m) tap        - tap name
*   (m) type       - tap output type
*   (m) proto      - protocol short name
*   (m) objects    - array of object with attributes:
*                  (m) pkt - packet number
*                  (o) hostname - hostname
*                  (o) type - content type
*                  (o) filename - filename
*                  (m) len - object length
*                  (m) sha1 - object's sha1 sum
*/
3014static void
3015sharkd_session_process_tap_eo_cb(void *tapdata)
3016{
  export_object_list_t *tap_object = (export_object_list_t *) tapdata;
  struct sharkd_export_object_list *object_list = (struct sharkd_export_object_list *) tap_object->gui_data;
  GSList *slist;
  int i = 0;
  char sha1sum_bytes[HASH_SHA1_LENGTH20], *sha1sum_str;

  json_dumper_begin_object(&dumper);
  sharkd_json_value_string("tap", object_list->type);
  sharkd_json_value_string("type", "eo");

  sharkd_json_value_string("proto", object_list->proto);

  sharkd_json_array_open("objects");
  for (slist = object_list->entries; slist; slist = slist->next)
  {
      const export_object_entry_t *eo_entry = (export_object_entry_t *) slist->data;

      json_dumper_begin_object(&dumper);

      sharkd_json_value_anyf("pkt", "%u", eo_entry->pkt_num);

      if (eo_entry->hostname)
          sharkd_json_value_string("hostname", eo_entry->hostname);

      if (eo_entry->content_type)
          sharkd_json_value_string("type", eo_entry->content_type);

      if (eo_entry->filename)
          sharkd_json_value_string("filename", eo_entry->filename);

      sharkd_json_value_stringf("_download", "%s_%d", object_list->type, i);

      sharkd_json_value_anyf("len", "%zu", eo_entry->payload_len);

      gcry_md_hash_buffer(GCRY_MD_SHA1, sha1sum_bytes, eo_entry->payload_data, eo_entry->payload_len);
      sha1sum_str = bytes_to_str(NULL, sha1sum_bytes, HASH_SHA1_LENGTH)bytes_to_str_maxlen(((void*)0), sha1sum_bytes, 20, 36);
      sharkd_json_value_string("sha1", sha1sum_str);
      g_free(sha1sum_str);

      json_dumper_end_object(&dumper);

      i++;
  }
  sharkd_json_array_close();

  json_dumper_end_object(&dumper);
3063}

3065static void
3066sharkd_eo_object_list_add_entry(void *gui_data, export_object_entry_t *entry)
3067{
  struct sharkd_export_object_list *object_list = (struct sharkd_export_object_list *) gui_data;

  object_list->entries = g_slist_append(object_list->entries, entry);
3071}

3073static export_object_entry_t *
3074sharkd_eo_object_list_get_entry(void *gui_data, int row)
3075{
  struct sharkd_export_object_list *object_list = (struct sharkd_export_object_list *) gui_data;

  return (export_object_entry_t *) g_slist_nth_data(object_list->entries, row);
3079}

3081static struct sharkd_export_object_list *
3082sharkd_eo_object_list_get_entry_by_type(void *gui_data, const char *tap_type)
3083{
  struct sharkd_export_object_list *object_list = (struct sharkd_export_object_list *) gui_data;
  for (; object_list; object_list = object_list->next)
  {
      if (!strcmp(object_list->type, tap_type))
          return object_list;
  }
  return NULL((void*)0);
3091}


3094/**
* sharkd_session_process_tap_rtp_cb()
*
* Output RTP streams tap:
*   (m) tap        - tap name
*   (m) type       - tap output type
*   (m) streams    - array of object with attributes:
*                  (m) ssrc        - RTP synchronization source identifier
*                  (m) payload     - stream payload
*                  (m) saddr       - source address
*                  (m) sport       - source port
*                  (m) daddr       - destination address
*                  (m) dport       - destination port
*                  (m) pkts        - packets count
*                  (m) max_delta   - max delta (ms)
*                  (m) max_jitter  - max jitter (ms)
*                  (m) mean_jitter - mean jitter (ms)
*                  (m) expectednr  -
*                  (m) totalnr     -
*                  (m) problem     - if analyser found the problem
*                  (m) ipver       - address IP version (4 or 6)
*/
3116static void
3117sharkd_session_process_tap_rtp_cb(void *arg)
3118{
  rtpstream_tapinfo_t *rtp_tapinfo = (rtpstream_tapinfo_t *) arg;

  GList *listx;

  json_dumper_begin_object(&dumper);
  sharkd_json_value_string("tap", "rtp-streams");
  sharkd_json_value_string("type", "rtp-streams");

  sharkd_json_array_open("streams");
  for (listx = g_list_first(rtp_tapinfo->strinfo_list); listx; listx = listx->next)
  {
      rtpstream_info_t *streaminfo = (rtpstream_info_t *) listx->data;
      rtpstream_info_calc_t calc;

      rtpstream_info_calculate(streaminfo, &calc);

      json_dumper_begin_object(&dumper);

      sharkd_json_value_stringf("ssrc", "0x%x", calc.ssrc);
      sharkd_json_value_string("payload", calc.all_payload_type_names);

      sharkd_json_value_string("saddr", calc.src_addr_str);
      sharkd_json_value_anyf("sport", "%u", calc.src_port);
      sharkd_json_value_string("daddr", calc.dst_addr_str);
      sharkd_json_value_anyf("dport", "%u", calc.dst_port);

      sharkd_json_value_anyf("start_time", "%f", calc.start_time_ms);
      sharkd_json_value_anyf("duration", "%f", calc.duration_ms);

      sharkd_json_value_anyf("pkts", "%u", calc.packet_count);
      sharkd_json_value_anyf("lost", "%u", calc.lost_num);
      sharkd_json_value_anyf("lost_percent", "%f", calc.lost_perc);

      sharkd_json_value_anyf("max_delta", "%f",calc.max_delta);
      sharkd_json_value_anyf("min_delta", "%f",calc.min_delta);
      sharkd_json_value_anyf("mean_delta", "%f",calc.mean_delta);
      sharkd_json_value_anyf("min_jitter", "%f", calc.min_jitter);
      sharkd_json_value_anyf("max_jitter", "%f", calc.max_jitter);
      sharkd_json_value_anyf("mean_jitter", "%f", calc.mean_jitter);

      sharkd_json_value_anyf("expectednr", "%u", calc.packet_expected);
      sharkd_json_value_anyf("totalnr", "%u", calc.total_nr);

      sharkd_json_value_anyf("problem", calc.problem ? "true" : "false");

      /* for filter */
      sharkd_json_value_anyf("ipver", "%d", (streaminfo->id.src_addr.type == AT_IPv6) ? 6 : 4);

      rtpstream_info_calc_free(&calc);

      json_dumper_end_object(&dumper);
  }
  sharkd_json_array_close();

  json_dumper_end_object(&dumper);
3174}

3176/**
3177* sharkd_session_process_tap_multicast_cb()
3178*
3179* Output UDP Multicast streams tap:
3180*   (m) tap                     - tap name
3181*   (m) type                    - tap output type
3182*   (m) bufferThresholdBytes    - byte count for a stream where a buffer alarm should be reported
3183*   (m) burstIntervalMs         - analysis interval in milliseconds
3184*   (m) burstThresholdPackets   - count of packets in an interval that should trigger an alarm
3185*   (m) streams                 - array of streams with metrics:
3186*           (m) saddr       - source address
3187*           (m) sport       - source port
3188*           (m) daddr       - destination address
3189*           (m) dport       - destination port
3190*           (m) packets     - object group for packet metrics with attributes:
3191*                (m) number     - count of packets in the stream
3192*                (m) perSecond  - average number of packets per seconds in the stream
3193*           (m) bandwidth     - object group for bandwidth metrics with attributes:
3194*                (m) average    - average measured bitrate in the stream
3195*                (m) max        - max measured bitrate in the stream
3196*           (m) buffer       - object group for buffer metrics with attributes:
3197*                (m) alarms     - number of times the stream exceeded the buffer threshold
3198*                (m) max        - highest stream buffer utilization
3199*           (m) burst        - object group for burst metrics with attributes:
3200*                (m) alarms     - number of times the stream exceeded the burst threshold
3201*                (m) max        - most stream packets measured in a burst interval
3202*/
3203static void
3204sharkd_session_process_tap_multicast_cb(void *arg)
3205{
  mcaststream_tapinfo_t *tapinfo = (mcaststream_tapinfo_t *)arg;
  GList *list_item;
  char *addr_str;

  json_dumper_begin_object(&dumper);

  sharkd_json_value_string("tap", "multicast");
  sharkd_json_value_string("type", "multicast");

  sharkd_json_value_anyf("bufferThresholdBytes", "%u", mcast_stream_bufferalarm);
  sharkd_json_value_anyf("burstIntervalMs", "%u", mcast_stream_burstint);
  sharkd_json_value_anyf("burstThresholdPackets", "%u", mcast_stream_trigger);

  sharkd_json_array_open("streams");
  for (list_item = g_list_first(tapinfo->strinfo_list); list_item; list_item = list_item->next) {
      mcast_stream_info_t *stream_info = (mcast_stream_info_t *) list_item->data;
      sharkd_json_object_open(NULL((void*)0));
      {
          addr_str = address_to_display(NULL((void*)0), &stream_info->src_addr);
          sharkd_json_value_string("saddr", addr_str);
          wmem_free(NULL((void*)0), addr_str);
          sharkd_json_value_anyf("sport", "%u", stream_info->src_port);
          addr_str = address_to_display(NULL((void*)0), &stream_info->dest_addr);
          sharkd_json_value_string("daddr", addr_str);
          wmem_free(NULL((void*)0), addr_str);
          sharkd_json_value_anyf("dport", "%u", stream_info->dest_port);
          sharkd_json_object_open("packets");
          {
              sharkd_json_value_anyf("number", "%u", stream_info->npackets);
              sharkd_json_value_anyf("perSecond", "%f", stream_info->apackets);
          }
          sharkd_json_object_close();
          sharkd_json_object_open("bandwidth");
          {
              sharkd_json_value_anyf("average", "%f", stream_info->average_bw);
              sharkd_json_value_anyf("max", "%f", stream_info->element.maxbw);
          }
          sharkd_json_object_close();
          sharkd_json_object_open("buffer");
          {
              sharkd_json_value_anyf("alarms", "%u", stream_info->element.numbuffalarms);
              sharkd_json_value_anyf("max", "%u", stream_info->element.topbuffusage);
          }
          sharkd_json_object_close();
          sharkd_json_object_open("burst");
          {
              sharkd_json_value_anyf("alarms", "%u", stream_info->element.numbursts);
              sharkd_json_value_anyf("max", "%u", stream_info->element.topburstsize);
          }
          sharkd_json_object_close();
      }
      sharkd_json_object_close();
  }
  sharkd_json_array_close();

  json_dumper_end_object(&dumper);
3262}

3264static void
3265sharkd_session_process_free_tap_multicast_cb(void *tapdata)
3266{
  mcaststream_tapinfo_t *tapinfo = (mcaststream_tapinfo_t *)tapdata;

  mcaststream_reset(tapinfo);

  g_free(tapinfo);
3272}

3274/**
* sharkd_session_process_tap_voip_calls_cb()
*
* Output VoIP Calls tap:
*   (m) tap                    - tap name
*   (m) type                   - tap output type
*   (m) calls                  - array of objects with attributes:
*                              (m) call            - call number
*                              (m) start_time      - start timestamp
*                              (m) stop_time       - stop timestamp
*                              (m) initial_speaker - address of initial speaker
*                              (m) from            - from address
*                              (m) to              - to address
*                              (m) protocol        - protocol name
*                              (m) packets         - packet count
*                              (m) state           - state string
*                              (m) comment         - comment string
*/
3292static void
3293sharkd_session_process_tap_voip_calls_cb(void *arg)
3294{
  voip_calls_tapinfo_t *tapinfo = (voip_calls_tapinfo_t *)arg;
  char *addr_str;
  GList *cur_call = g_queue_peek_nth_link(tapinfo->callsinfos, 0);
  sharkd_json_object_open(NULL((void*)0));
  sharkd_json_value_string("tap", "voip-calls");
  sharkd_json_value_string("type", "voip-calls");
  sharkd_json_array_open("calls");
  while (cur_call && cur_call->data) {
      voip_calls_info_t *call_info_ = (voip_calls_info_t*) cur_call->data;
      sharkd_json_object_open(NULL((void*)0));
      sharkd_json_value_anyf("call", "%hu", call_info_->call_num);
      sharkd_json_value_anyf("start_time", "%.6f", nstime_to_sec(&(call_info_->start_rel_ts)));
      sharkd_json_value_anyf("stop_time", "%.6f", nstime_to_sec(&(call_info_->stop_rel_ts)));
      addr_str = address_to_display(NULL((void*)0), &(call_info_->initial_speaker));
      sharkd_json_value_string("initial_speaker", addr_str);
      wmem_free(NULL((void*)0), addr_str);
      sharkd_json_value_string("from", call_info_->from_identity);
      sharkd_json_value_string("to", call_info_->to_identity);
      sharkd_json_value_string("protocol", ((call_info_->protocol == VOIP_COMMON) && call_info_->protocol_name) ?
          call_info_->protocol_name : voip_protocol_name[call_info_->protocol]);
      sharkd_json_value_anyf("packets", "%u", call_info_->npackets);
      sharkd_json_value_string("state", voip_call_state_name[call_info_->call_state]);
      sharkd_json_value_string("comment", call_info_->call_comment);
      sharkd_json_object_close();
      cur_call = g_list_next(cur_call)((cur_call) ? (((GList *)(cur_call))->next) : ((void*)0));
  }
  sharkd_json_array_close();
  sharkd_json_object_close();
3323}

3325static void
3326sharkd_session_free_tap_voip_calls_cb(void *tapdata)
3327{
  voip_calls_tapinfo_t *tapinfo = (voip_calls_tapinfo_t *)tapdata;
  voip_calls_remove_all_tap_listeners(tapinfo);
  if (tapinfo->callsinfos != NULL((void*)0)) {
      g_queue_free(tapinfo->callsinfos);
  }
  if (tapinfo->graph_analysis != NULL((void*)0)) {
      sequence_analysis_info_free(tapinfo->graph_analysis);
  }
  memset(tapinfo, 0, sizeof(*tapinfo));
3337}


3340struct sharkd_voip_convs_req {
  voip_calls_tapinfo_t *tapinfo;
  const char *tap_name;
3343};

3345/**
* sharkd_session_process_tap_voip_convs_cb()
*
* Output VoIP Conversations tap:
*   (m) tap                    - tap name
*   (m) type                   - tap output type
*   (m) convs                  - array of objects with attributes:
*                              (m) frame    - frame number
*                              (m) call     - call number
*                              (m) time     - timestamp
*                              (m) dst_addr - destination address
*                              (m) dst_port - destination port
*                              (m) src_addr - source address
*                              (m) src_port - source port
*                              (m) label    - label string
*                              (m) comment  - comment string
*/
3362static void
3363sharkd_session_process_tap_voip_convs_cb(void *arg)
3364{
  struct sharkd_voip_convs_req *voip_convs_req = (struct sharkd_voip_convs_req *)arg;
  voip_calls_tapinfo_t *tapinfo = voip_convs_req->tapinfo;
  seq_analysis_info_t *sainfo = tapinfo->graph_analysis;
  char *addr_str;
  sequence_analysis_list_sort(sainfo);
  sharkd_json_object_open(NULL((void*)0));
  sharkd_json_value_string("tap", voip_convs_req->tap_name);
  sharkd_json_value_string("type", "voip-convs");
  sharkd_json_array_open("convs");
  for (GList *cur = g_queue_peek_nth_link(sainfo->items, 0); cur; cur = g_list_next(cur)((cur) ? (((GList *)(cur))->next) : ((void*)0))) {
      seq_analysis_item_t *sai = (seq_analysis_item_t *) cur->data;
      if ((voip_conv_sel[sai->conv_num / VOIP_CONV_BITS(sizeof(int) * 8)] & (1 << (sai->conv_num % VOIP_CONV_BITS(sizeof(int) * 8)))) == 0)
          continue;
      sharkd_json_object_open(NULL((void*)0));
      sharkd_json_value_anyf("frame", "%d", sai->frame_number);
      sharkd_json_value_anyf("call", "%d", sai->conv_num);
      sharkd_json_value_string("time", sai->time_str);
      addr_str = address_to_display(NULL((void*)0), &(sai->dst_addr));
      sharkd_json_value_string("dst_addr", addr_str);
      wmem_free(NULL((void*)0), addr_str);
      sharkd_json_value_anyf("dst_port", "%d", sai->port_dst);
      addr_str = address_to_display(NULL((void*)0), &(sai->src_addr));
      sharkd_json_value_string("src_addr", addr_str);
      wmem_free(NULL((void*)0), addr_str);
      sharkd_json_value_anyf("src_port", "%d", sai->port_src);
      sharkd_json_value_string("label", sai->frame_label);
      sharkd_json_value_string("comment", sai->comment);
      sharkd_json_object_close();
  }
  sharkd_json_array_close();
  sharkd_json_object_close();
3396}

3398static void
3399sharkd_session_free_tap_voip_convs_cb(void *tapdata)
3400{
  struct sharkd_voip_convs_req *voip_convs_req = (struct sharkd_voip_convs_req *)tapdata;
  voip_calls_tapinfo_t *tapinfo = voip_convs_req->tapinfo;
  voip_calls_remove_all_tap_listeners(tapinfo);
  if (tapinfo->callsinfos != NULL((void*)0)) {
      g_queue_free(tapinfo->callsinfos);
  }
  if (tapinfo->graph_analysis != NULL((void*)0)) {
      sequence_analysis_info_free(tapinfo->graph_analysis);
  }
  memset(tapinfo, 0, sizeof(*tapinfo));
  g_free(voip_convs_req);
3412}

3414struct sharkd_hosts_req {
  const char *tap_name;
  bool_Bool dump_v4;
  bool_Bool dump_v6;
3418};

3420static int
3421sharkd_session_tap_ipv4_host_compare(const void *a, const void *b)
3422{
  return ws_ascii_strnatcmp(((const hashipv4_t *)a)->name,
                            ((const hashipv4_t *)b)->name);
3425}

3427static int
3428sharkd_session_tap_ipv6_host_compare(const void *a, const void *b)
3429{
  return ws_ascii_strnatcmp(((const hashipv6_t *)a)->name,
                            ((const hashipv6_t *)b)->name);
3432}

3434static void
3435sharkd_session_tap_ipv4_host_print(void *data, void *user_data _U___attribute__((unused)))
3436{
  hashipv4_t *ipv4_hash_table_entry = (hashipv4_t *)data;
  sharkd_json_object_open(NULL((void*)0));
  sharkd_json_value_string("name", ipv4_hash_table_entry->name);
  sharkd_json_value_string("addr", ipv4_hash_table_entry->ip);
  sharkd_json_object_close();
3442}

3444static void
3445sharkd_session_tap_ipv6_host_print(void *data, void *user_data _U___attribute__((unused)))
3446{
  hashipv6_t *ipv6_hash_table_entry = (hashipv6_t *)data;
  sharkd_json_object_open(NULL((void*)0));
  sharkd_json_value_string("name", ipv6_hash_table_entry->name);
  sharkd_json_value_string("addr", ipv6_hash_table_entry->ip6);
  sharkd_json_object_close();
3452}

3454static void
3455sharkd_session_tap_ipv4_host_insert_sorted(void *key _U___attribute__((unused)), void *value, void *user_data)
3456{
  hashipv4_t *ipv4_hash_table_entry = (hashipv4_t *)value;
  GSList **list = (GSList **)user_data;
  if ((ipv4_hash_table_entry->flags & NAME_RESOLVED(1U<<1))) {
      *list = g_slist_insert_sorted(*list, ipv4_hash_table_entry, sharkd_session_tap_ipv4_host_compare);
  }
3462}

3464static void
3465sharkd_session_tap_ipv6_host_insert_sorted(void *key _U___attribute__((unused)), void *value, void *user_data)
3466{
  hashipv6_t *ipv6_hash_table_entry = (hashipv6_t *)value;
  GSList **list = (GSList **) user_data;
  if ((ipv6_hash_table_entry->flags & NAME_RESOLVED(1U<<1))) {
      *list = g_slist_insert_sorted(*list, ipv6_hash_table_entry, sharkd_session_tap_ipv6_host_compare);
  }
3472}

3474static void
3475sharkd_session_tap_ipv4_hosts_print(void)
3476{
  wmem_map_t *ipv4_hash_table = get_ipv4_hash_table();
  if (!ipv4_hash_table)
      return;
  GSList *list = NULL((void*)0);
  wmem_map_foreach(ipv4_hash_table, sharkd_session_tap_ipv4_host_insert_sorted, &list);
  g_slist_foreach(list, sharkd_session_tap_ipv4_host_print, NULL((void*)0));
  g_slist_free(list);
3484}

3486static void
3487sharkd_session_tap_ipv6_hosts_print(void)
3488{
  wmem_map_t *ipv6_hash_table = get_ipv6_hash_table();
  if (!ipv6_hash_table)
      return;
  GSList *list = NULL((void*)0);
  wmem_map_foreach(ipv6_hash_table, sharkd_session_tap_ipv6_host_insert_sorted, &list);
  g_slist_foreach(list, sharkd_session_tap_ipv6_host_print, NULL((void*)0));
  g_slist_free(list);
3496}

3498/**
* sharkd_session_process_tap_hosts_cb()
*
* Output Hosts tap:
*   (m) tap                    - tap name
*   (m) type                   - tap output type
*   (o) ipv4_hosts             - array of objects with attributes:
*                              (m) addr - ipv4 address
*                              (m) name - resolved name of address
*   (o) ipv6_hosts             - array of objects with attributes:
*                              (m) addr - ipv6 address
*                              (m) name - resolved name of address
*/
3511static void
3512sharkd_session_process_tap_hosts_cb(void *arg)
3513{
  struct sharkd_hosts_req *hosts_req = (struct sharkd_hosts_req *)arg;
  sharkd_json_object_open(NULL((void*)0));
  sharkd_json_value_string("tap", hosts_req->tap_name);
  sharkd_json_value_string("type", "hosts");
  if (hosts_req->dump_v4) {
      sharkd_json_array_open("ipv4_hosts");
      sharkd_session_tap_ipv4_hosts_print();
      sharkd_json_array_close();
  }
  if (hosts_req->dump_v6) {
      sharkd_json_array_open("ipv6_hosts");
      sharkd_session_tap_ipv6_hosts_print();
      sharkd_json_array_close();
  }
  sharkd_json_object_close();
3529}

3531static void
3532sharkd_session_free_tap_hosts_cb(void *tapdata)
3533{
  struct sharkd_hosts_req *hosts_req = (struct sharkd_hosts_req *)tapdata;
  g_free(hosts_req);
3536}

3538static GString*
3539sharkd_session_eo_register_tap_listener(register_eo_t *eo, const char *tap_type, const char *tap_filter, tap_draw_cb tap_draw, void **ptap_data, GFreeFunc* ptap_free)
3540{
  export_object_list_t *eo_object;
  struct sharkd_export_object_list *object_list;

  object_list = sharkd_eo_object_list_get_entry_by_type(sharkd_eo_list, tap_type);
  if (object_list)
  {
      g_slist_free_full(object_list->entries, (GDestroyNotify) eo_free_entry);
      object_list->entries = NULL((void*)0);
  }
  else
  {
      object_list = g_new(struct sharkd_export_object_list, 1)((struct sharkd_export_object_list *) g_malloc_n ((1), sizeof
 (struct sharkd_export_object_list)));
      object_list->type = g_strdup(tap_type)g_strdup_inline (tap_type);
      object_list->proto = proto_get_protocol_short_name(find_protocol_by_id(get_eo_proto_id(eo)));
      object_list->entries = NULL((void*)0);
      object_list->next = sharkd_eo_list;
      sharkd_eo_list = object_list;
  }

  eo_object  = g_new0(export_object_list_t, 1)((export_object_list_t *) g_malloc0_n ((1), sizeof (export_object_list_t
)));
  eo_object->add_entry = sharkd_eo_object_list_add_entry;
  eo_object->get_entry = sharkd_eo_object_list_get_entry;
  eo_object->gui_data = (void *) object_list;

  *ptap_data = eo_object;
  *ptap_free = g_free; /* need to free only eo_object, object_list need to be kept for potential download */

  return register_tap_listener(get_eo_tap_listener_name(eo), eo_object, tap_filter, 0, NULL((void*)0), get_eo_packet_func(eo), tap_draw, NULL((void*)0));
3569}

3571/**
* sharkd_session_process_tap()
*
* Process tap request
*
* Input:
*   (m) tap0         - First tap request
*   (o) tap1...tap15 - Other tap requests
*
* Output object with attributes:
*   (m) taps  - array of object with attributes:
*                  (m) tap  - tap name
*                  (m) type - tap output type
*                  ...
*                  for type:stats see sharkd_session_process_tap_stats_cb()
*                  for type:nstat see sharkd_session_process_tap_nstat_cb()
*                  for type:conv see sharkd_session_process_tap_conv_cb()
*                  for type:host see sharkd_session_process_tap_conv_cb()
*                  for type:rtp-streams see sharkd_session_process_tap_rtp_cb()
*                  for type:rtp-analyse see sharkd_session_process_tap_rtp_analyse_cb()
*                  for type:eo see sharkd_session_process_tap_eo_cb()
*                  for type:expert see sharkd_session_process_tap_expert_cb()
*                  for type:rtd see sharkd_session_process_tap_rtd_cb()
*                  for type:srt see sharkd_session_process_tap_srt_cb()
*                  for type:flow see sharkd_session_process_tap_flow_cb()
*
*   (m) err   - error code
*/
3599static void
3600sharkd_session_process_tap(char *buf, const jsmntok_t *tokens, int count)
3601{
  void *taps_data[16];
  GFreeFunc taps_free[16];
  int taps_count = 0;
  int i;
  const char *tap_filter = json_find_attr(buf, tokens, count, "filter");

  rtpstream_tapinfo_t rtp_tapinfo =
  { NULL((void*)0), NULL((void*)0), NULL((void*)0), NULL((void*)0), 0, NULL((void*)0), NULL((void*)0), 0, TAP_ANALYSE, NULL((void*)0), NULL((void*)0), NULL((void*)0), false0, false0};

  for (i = 0; i < 16; i++)
  {
      char tapbuf[32];
      const char *tok_tap;

      void *tap_data = NULL((void*)0);
      GFreeFunc tap_free = NULL((void*)0);
      GString *tap_error = NULL((void*)0);

      snprintf(tapbuf, sizeof(tapbuf), "tap%d", i);
      tok_tap = json_find_attr(buf, tokens, count, tapbuf);
      if (!tok_tap)
          break;

      if (!strncmp(tok_tap, "stat:", 5))
      {
          stats_tree_cfg *cfg = stats_tree_get_cfg_by_abbr(tok_tap + 5);
          stats_tree *st;

          if (!cfg)
          {
              sharkd_json_error(
                      rpcid, -11001, NULL((void*)0),
                      "sharkd_session_process_tap() stat %s not found", tok_tap + 5
                      );
              return;
          }

          st = stats_tree_new(cfg, NULL((void*)0), tap_filter);

          tap_error = register_tap_listener(st->cfg->tapname, st, st->filter, st->cfg->flags, stats_tree_reset, stats_tree_packet, sharkd_session_process_tap_stats_cb, NULL((void*)0));

          if (!tap_error && cfg->init)
              cfg->init(st);

          tap_data = st;
          tap_free = sharkd_session_free_tap_stats_cb;
      }
      else if (!strcmp(tok_tap, "expert"))
      {
          struct sharkd_expert_tap *expert_tap;

          expert_tap = g_new0(struct sharkd_expert_tap, 1)((struct sharkd_expert_tap *) g_malloc0_n ((1), sizeof (struct
 sharkd_expert_tap)));
          expert_tap->text = g_string_chunk_new(100);

          tap_error = register_tap_listener("expert", expert_tap, tap_filter, 0, NULL((void*)0), sharkd_session_packet_tap_expert_cb, sharkd_session_process_tap_expert_cb, NULL((void*)0));

          tap_data = expert_tap;
          tap_free = sharkd_session_free_tap_expert_cb;
      }
      else if (!strncmp(tok_tap, "seqa:", 5))
      {
          seq_analysis_info_t *graph_analysis;
          register_analysis_t *analysis;
          const char *tap_name;
          tap_packet_cb tap_func;
          unsigned tap_flags;

          analysis = sequence_analysis_find_by_name(tok_tap + 5);
          if (!analysis)
          {
              sharkd_json_error(
                      rpcid, -11002, NULL((void*)0),
                      "sharkd_session_process_tap() seq analysis %s not found", tok_tap + 5
                      );
              return;
          }

          graph_analysis = sequence_analysis_info_new();
          graph_analysis->name = tok_tap + 5;
          /* TODO, make configurable */
          graph_analysis->any_addr = false0;

          tap_name  = sequence_analysis_get_tap_listener_name(analysis);
          tap_flags = sequence_analysis_get_tap_flags(analysis);
          tap_func  = sequence_analysis_get_packet_func(analysis);

          tap_error = register_tap_listener(tap_name, graph_analysis, tap_filter, tap_flags, NULL((void*)0), tap_func, sharkd_session_process_tap_flow_cb, NULL((void*)0));

          tap_data = graph_analysis;
          tap_free = sharkd_session_free_tap_flow_cb;
      }
      else if (!strncmp(tok_tap, "conv:", 5) || !strncmp(tok_tap, "endpt:", 6))
      {
          struct register_ct *ct = NULL((void*)0);
          const char *ct_tapname;
          struct sharkd_conv_tap_data *ct_data;
          tap_packet_cb tap_func = NULL((void*)0);

          if (!strncmp(tok_tap, "conv:", 5))
          {
              ct = get_conversation_by_proto_id(proto_get_id_by_short_name(tok_tap + 5));

              if (!ct || !(tap_func = get_conversation_packet_func(ct)))
              {
                  sharkd_json_error(
                          rpcid, -11003, NULL((void*)0),
                          "sharkd_session_process_tap() conv %s not found", tok_tap + 5
                          );
                  return;
              }
          }
          else if (!strncmp(tok_tap, "endpt:", 6))
          {
              ct = get_conversation_by_proto_id(proto_get_id_by_short_name(tok_tap + 6));

              if (!ct || !(tap_func = get_endpoint_packet_func(ct)))
              {
                  sharkd_json_error(
                          rpcid, -11004, NULL((void*)0),
                          "sharkd_session_process_tap() endpt %s not found", tok_tap + 6
                          );
                  return;
              }
          }
          else
          {
              sharkd_json_error(
                      rpcid, -11005, NULL((void*)0),
                      "sharkd_session_process_tap() conv/endpt(?): %s not found", tok_tap
                      );
              return;
          }

          ct_tapname = proto_get_protocol_filter_name(get_conversation_proto_id(ct));

          ct_data = g_new0(struct sharkd_conv_tap_data, 1)((struct sharkd_conv_tap_data *) g_malloc0_n ((1), sizeof (struct
 sharkd_conv_tap_data)));
          ct_data->type = tok_tap;
          ct_data->hash.user_data = ct_data;

          /* XXX: make configurable */
          ct_data->resolve_name = true1;
          ct_data->resolve_port = true1;

          tap_error = register_tap_listener(ct_tapname, &ct_data->hash, tap_filter, 0, NULL((void*)0), tap_func, sharkd_session_process_tap_conv_cb, NULL((void*)0));

          tap_data = &ct_data->hash;
          tap_free = sharkd_session_free_tap_conv_cb;
      }
      else if (!strncmp(tok_tap, "nstat:", 6))
      {
          stat_tap_table_ui *stat_tap = stat_tap_by_name(tok_tap + 6);
          stat_data_t *stat_data;

          if (!stat_tap)
          {
              sharkd_json_error(
                      rpcid, -11006, NULL((void*)0),
                      "sharkd_session_process_tap() nstat=%s not found", tok_tap + 6
                      );
              return;
          }

          stat_tap->stat_tap_init_cb(stat_tap);

          stat_data = g_new0(stat_data_t, 1)((stat_data_t *) g_malloc0_n ((1), sizeof (stat_data_t)));
          stat_data->stat_tap_data = stat_tap;
          stat_data->user_data = NULL((void*)0);

          tap_error = register_tap_listener(stat_tap->tap_name, stat_data, tap_filter, 0, NULL((void*)0), stat_tap->packet_func, sharkd_session_process_tap_nstat_cb, NULL((void*)0));

          tap_data = stat_data;
          tap_free = sharkd_session_free_tap_nstat_cb;
      }
      else if (!strncmp(tok_tap, "rtd:", 4))
      {
          register_rtd_t *rtd = get_rtd_table_by_name(tok_tap + 4);
          rtd_data_t *rtd_data;
          char *err;

          if (!rtd)
          {
              sharkd_json_error(
                      rpcid, -11007, NULL((void*)0),
                      "sharkd_session_process_tap() rtd=%s not found", tok_tap + 4
                      );
              return;
          }

          rtd_table_get_filter(rtd, "", &tap_filter, &err);
          if (err != NULL((void*)0))
          {
              sharkd_json_error(
                      rpcid, -11008, NULL((void*)0),
                      "sharkd_session_process_tap() rtd=%s err=%s", tok_tap + 4, err
                      );
              g_free(err);
              return;
          }

          rtd_data = g_new0(rtd_data_t, 1)((rtd_data_t *) g_malloc0_n ((1), sizeof (rtd_data_t)));
          rtd_data->user_data = rtd;
          rtd_table_dissector_init(rtd, &rtd_data->stat_table, NULL((void*)0), NULL((void*)0));

          tap_error = register_tap_listener(get_rtd_tap_listener_name(rtd), rtd_data, tap_filter, 0, NULL((void*)0), get_rtd_packet_func(rtd), sharkd_session_process_tap_rtd_cb, NULL((void*)0));

          tap_data = rtd_data;
          tap_free = sharkd_session_free_tap_rtd_cb;
      }
      else if (!strncmp(tok_tap, "srt:", 4))
      {
          register_srt_t *srt = get_srt_table_by_name(tok_tap + 4);
          srt_data_t *srt_data;
          char *err;

          if (!srt)
          {
              sharkd_json_error(
                      rpcid, -11009, NULL((void*)0),
                      "sharkd_session_process_tap() srt=%s not found", tok_tap + 4
                      );
              return;
          }

          srt_table_get_filter(srt, "", &tap_filter, &err);
          if (err != NULL((void*)0))
          {
              sharkd_json_error(
                      rpcid, -11010, NULL((void*)0),
                      "sharkd_session_process_tap() srt=%s err=%s", tok_tap + 4, err
                      );
              g_free(err);
              return;
          }

          srt_data = g_new0(srt_data_t, 1)((srt_data_t *) g_malloc0_n ((1), sizeof (srt_data_t)));
          srt_data->srt_array = g_array_new(FALSE(0), TRUE(!(0)), sizeof(srt_stat_table *));
          srt_data->user_data = srt;
          srt_table_dissector_init(srt, srt_data->srt_array);

          tap_error = register_tap_listener(get_srt_tap_listener_name(srt), srt_data, tap_filter, 0, NULL((void*)0), get_srt_packet_func(srt), sharkd_session_process_tap_srt_cb, NULL((void*)0));

          tap_data = srt_data;
          tap_free = sharkd_session_free_tap_srt_cb;
      }
      else if (!strncmp(tok_tap, "eo:", 3))
      {
          register_eo_t *eo = get_eo_by_name(tok_tap + 3);

          if (!eo)
          {
              sharkd_json_error(
                      rpcid, -11011, NULL((void*)0),
                      "sharkd_session_process_tap() eo=%s not found", tok_tap + 3
                      );
              return;
          }

          tap_error = sharkd_session_eo_register_tap_listener(eo, tok_tap, tap_filter, sharkd_session_process_tap_eo_cb, &tap_data, &tap_free);

          /* tap_data & tap_free assigned by sharkd_session_eo_register_tap_listener */
      }
      else if (!strcmp(tok_tap, "rtp-streams"))
      {
          tap_error = register_tap_listener("rtp", &rtp_tapinfo, tap_filter, 0, rtpstream_reset_cb, rtpstream_packet_cb, sharkd_session_process_tap_rtp_cb, NULL((void*)0));

          tap_data = &rtp_tapinfo;
          tap_free = rtpstream_reset_cb;
      }
      else if (!strncmp(tok_tap, "rtp-analyse:", 12))
      {
          struct sharkd_analyse_rtp *rtp_req;

          rtp_req = (struct sharkd_analyse_rtp *) g_malloc0(sizeof(*rtp_req));
          if (!sharkd_rtp_match_init(&rtp_req->id, tok_tap + 12))
          {
              rtpstream_id_free(&rtp_req->id);
              g_free(rtp_req);
              continue;
          }

          rtp_req->tap_name = tok_tap;
          rtp_req->statinfo.first_packet = true1;
          rtp_req->statinfo.reg_pt = PT_UNDEFINED-1;

          tap_error = register_tap_listener("rtp", rtp_req, tap_filter, 0, NULL((void*)0), sharkd_session_packet_tap_rtp_analyse_cb, sharkd_session_process_tap_rtp_analyse_cb, NULL((void*)0));

          tap_data = rtp_req;
          tap_free = sharkd_session_process_tap_rtp_free_cb;
      }
      else if (!strcmp(tok_tap, "multicast"))
      {
          mcaststream_tapinfo_t *mcaststream_tapinfo;
          mcaststream_tapinfo = (mcaststream_tapinfo_t *) g_malloc0(sizeof(*mcaststream_tapinfo));

          tap_error = register_tap_listener("udp", mcaststream_tapinfo, tap_filter, 0, NULL((void*)0), mcaststream_packet, sharkd_session_process_tap_multicast_cb, NULL((void*)0));
          tap_data = mcaststream_tapinfo;
          tap_free = sharkd_session_process_free_tap_multicast_cb;
      }
      else if (!strcmp(tok_tap, "phs"))
      {
          phs_t *rs;

          pc_proto_id = proto_registrar_get_id_byname("pkt_comment");

          rs = new_phs_t(NULL((void*)0), tap_filter);

          tap_error = register_tap_listener("frame", rs, tap_filter,
                                            TL_REQUIRES_PROTO_TREE0x00000001|TL_REQUIRES_PROTOCOLS0x00000020,
                                            NULL((void*)0), protohierstat_packet,
                                            sharkd_session_process_tap_phs_cb, NULL((void*)0));

          tap_data = rs;
          tap_free = sharkd_session_free_tap_phs_cb;
      }
      else if (!strcmp(tok_tap, "voip-calls"))
      {
          voip_stat_init_tapinfo();

          tap_error = register_tap_listener("frame", &tapinfo_, tap_filter, 0, NULL((void*)0), NULL((void*)0), sharkd_session_process_tap_voip_calls_cb, NULL((void*)0));

          tapinfo_.session = cfile.epan;
          voip_calls_init_all_taps(&tapinfo_);

          tap_data = &tapinfo_;
          tap_free = sharkd_session_free_tap_voip_calls_cb;
      }
      else if (!strncmp(tok_tap, "voip-convs:", 11))
      {
          int len;
          unsigned int min, max;
          struct sharkd_voip_convs_req *voip_convs_req;
          const char *conv_arg = tok_tap + 11;

          // parse tok_tap to get which call we are asking for
          if (*conv_arg == 0) {
              // set all bits of voip_conv_sel (-1 in binary is all 1's)
              memset(voip_conv_sel, -1, sizeof(voip_conv_sel));
          } else {
              memset(voip_conv_sel, 0, sizeof(voip_conv_sel));

              while (*conv_arg != 0) {
                  if (*conv_arg == ',') {
                      conv_arg++;
                  }
                  if (sscanf(conv_arg, "%u-%u%n", &min, &max, &len) == 2) {
                      conv_arg += len;
                  } else if (sscanf(conv_arg, "%u%n", &min, &len) == 1) {
                      max = min;
                      conv_arg += len;
                  } else {
                      sharkd_json_error(
                              rpcid, -11014, NULL((void*)0),
                              "sharkd_session_process_tap() voip-convs=%s invalid 'convs' parameter", tok_tap
                      );
                      return;
                  }
                  if (min > max || min >= VOIP_CONV_MAX((sizeof(int) * 8) * ((1<<(sizeof(uint16_t) * 8))/(sizeof
(int) * 8))) || max >= VOIP_CONV_MAX((sizeof(int) * 8) * ((1<<(sizeof(uint16_t) * 8))/(sizeof
(int) * 8)))) {
                      sharkd_json_error(
                              rpcid, -11012, NULL((void*)0),
                              "sharkd_session_process_tap() voip-convs=%s invalid 'convs' number range", tok_tap
                      );
                      return;
                  }
                  for(; min <= max; min++) {
                      voip_conv_sel[min / VOIP_CONV_BITS(sizeof(int) * 8)] |= 1 << (min % VOIP_CONV_BITS(sizeof(int) * 8));
                  }
              }
          }

          voip_stat_init_tapinfo();

          voip_convs_req = (struct sharkd_voip_convs_req *) g_malloc0(sizeof(*voip_convs_req));
          voip_convs_req->tapinfo = &tapinfo_;
          voip_convs_req->tap_name = tok_tap;

          tap_error = register_tap_listener("frame", voip_convs_req, tap_filter, 0, NULL((void*)0), NULL((void*)0), sharkd_session_process_tap_voip_convs_cb, NULL((void*)0));

          tapinfo_.session = cfile.epan;
          voip_calls_init_all_taps(&tapinfo_);

          tap_data = voip_convs_req;
          tap_free = sharkd_session_free_tap_voip_convs_cb;
      }
      else if (!strncmp(tok_tap, "hosts:", 6))
      {
          bool_Bool dump_v4;
          bool_Bool dump_v6;
          struct sharkd_hosts_req *hosts_req;
          const char *proto_arg;
          char **proto_tokens;
          int proto_count;

          proto_arg = tok_tap + 6;

          if (strlen(proto_arg) == 0) {
              dump_v4 = true1;
              dump_v6 = true1;
          } else {
              dump_v4 = false0;
              dump_v6 = false0;

              proto_tokens = g_strsplit(proto_arg, ",", 0);
              proto_count = 0;
              while (proto_tokens[proto_count]) {
                  if (!strcmp("ip", proto_tokens[proto_count]) ||
                      !strcmp("ipv4", proto_tokens[proto_count])) {
                      dump_v4 = true1;
                  } else if (!strcmp("ipv6", proto_tokens[proto_count])) {
                      dump_v6 = true1;
                  } else {
                      g_strfreev(proto_tokens);
                      sharkd_json_error(
                              rpcid, -11015, NULL((void*)0),
                              "sharkd_session_process_tap() hosts=%s invalid 'protos' parameter", tok_tap
                      );
                      return;
                  }
                  proto_count++;
              }
              g_strfreev(proto_tokens);
          }

          hosts_req = (struct sharkd_hosts_req *)g_malloc0(sizeof(*hosts_req));
          hosts_req->dump_v4 = dump_v4;
          hosts_req->dump_v6 = dump_v6;
          hosts_req->tap_name = tok_tap;

          tap_error = register_tap_listener("frame", hosts_req, tap_filter, TL_REQUIRES_PROTO_TREE0x00000001, NULL((void*)0), NULL((void*)0), sharkd_session_process_tap_hosts_cb, NULL((void*)0));

          tap_data = hosts_req;
          tap_free = sharkd_session_free_tap_hosts_cb;
      }
      else
      {
          sharkd_json_error(
                  rpcid, -11012, NULL((void*)0),
                  "sharkd_session_process_tap() %s not recognized", tok_tap
                  );
          return;
      }

      if (tap_error)
      {
          sharkd_json_error(
                  rpcid, -11013, NULL((void*)0),
                  "sharkd_session_process_tap() name=%s error=%s", tok_tap, tap_error->str
                  );
          g_string_free(tap_error, TRUE)(__builtin_constant_p ((!(0))) ? (((!(0))) ? (g_string_free) (
(tap_error), ((!(0)))) : g_string_free_and_steal (tap_error))
 : (g_string_free) ((tap_error), ((!(0)))));
          if (tap_free)
              tap_free(tap_data);
          return;
      }

      taps_data[taps_count] = tap_data;
      taps_free[taps_count] = tap_free;
      taps_count++;
  }

  fprintf(stderrstderr, "sharkd_session_process_tap() count=%d\n", taps_count);
  if (taps_count == 0)
  {
      sharkd_json_result_prologue(rpcid);
      sharkd_json_array_open("taps");
      sharkd_json_array_close();
      sharkd_json_result_epilogue();
      return;
  }

  sharkd_json_result_prologue(rpcid);
  sharkd_json_array_open("taps");
  sharkd_retap();
  sharkd_json_array_close();
  sharkd_json_result_epilogue();

  for (i = 0; i < taps_count; i++)
  {
      if (taps_data[i])
          remove_tap_listener(taps_data[i]);

      if (taps_free[i])
          taps_free[i](taps_data[i]);
  }
4084}

4086/**
* sharkd_session_process_follow()
*
* Process follow request
*
* Input:
*   (m) follow     - follow protocol request (e.g. HTTP)
*   (m) filter     - filter request (e.g. tcp.stream == 1)
*   (m) stream     - stream index number
*   (o) sub_stream - follow sub-stream index number (e.g. for HTTP/2 and QUIC streams)
*
* Output object with attributes:
*
*   (m) err    - error code
*   (m) shost  - server host
*   (m) sport  - server port
*   (m) sbytes - server send bytes count
*   (m) chost  - client host
*   (m) cport  - client port
*   (m) cbytes - client send bytes count
*   (o) payloads - array of object with attributes:
*                  (o) s - set if server sent, else client
*                  (m) n - packet number
*                  (m) d - data base64 encoded
*/
4111static void
4112sharkd_session_process_follow(char *buf, const jsmntok_t *tokens, int count)
4113{
  const char *tok_follow = json_find_attr(buf, tokens, count, "follow");
  const char *tok_filter = json_find_attr(buf, tokens, count, "filter");
  const char *tok_sub_stream = json_find_attr(buf, tokens, count, "sub_stream");

  register_follow_t *follower;
  GString *tap_error;

  follow_info_t *follow_info;
  const char *host;
  char *port;

  follower = get_follow_by_name(tok_follow);
  if (!follower)
  {
      sharkd_json_error(
              rpcid, -12001, NULL((void*)0),
              "sharkd_session_process_follow() follower=%s not found", tok_follow
              );
      return;
  }

  uint64_t substream_id = SUBSTREAM_UNUSED0xFFFFFFFFFFFFFFFFUL;
  if (tok_sub_stream)
  {
      ws_strtou64(tok_sub_stream, NULL((void*)0), &substream_id);
  }

  /* follow_reset_stream ? */
  follow_info = g_new0(follow_info_t, 1)((follow_info_t *) g_malloc0_n ((1), sizeof (follow_info_t)));
  follow_info->substream_id = substream_id;
  /* gui_data, filter_out_filter not set, but not used by dissector */

  tap_error = register_tap_listener(get_follow_tap_string(follower), follow_info, tok_filter, 0, NULL((void*)0), get_follow_tap_handler(follower), NULL((void*)0), NULL((void*)0));
  if (tap_error)
  {
      sharkd_json_error(
              rpcid, -12002, NULL((void*)0),
              "sharkd_session_process_follow() name=%s error=%s", tok_follow, tap_error->str
              );
      g_string_free(tap_error, TRUE)(__builtin_constant_p ((!(0))) ? (((!(0))) ? (g_string_free) (
(tap_error), ((!(0)))) : g_string_free_and_steal (tap_error))
 : (g_string_free) ((tap_error), ((!(0)))));
      g_free(follow_info);
      return;
  }

  sharkd_retap();

  sharkd_json_result_prologue(rpcid);

  /* Server information: hostname, port, bytes sent */
  host = address_to_name(&follow_info->server_ip);
  sharkd_json_value_string("shost", host);

  port = get_follow_port_to_display(follower)(NULL((void*)0), follow_info->server_port);
  sharkd_json_value_string("sport", port);
  wmem_free(NULL((void*)0), port);

  sharkd_json_value_anyf("sbytes", "%u", follow_info->bytes_written[0]);

  /* Client information: hostname, port, bytes sent */
  host = address_to_name(&follow_info->client_ip);
  sharkd_json_value_string("chost", host);

  port = get_follow_port_to_display(follower)(NULL((void*)0), follow_info->client_port);
  sharkd_json_value_string("cport", port);
  wmem_free(NULL((void*)0), port);

  sharkd_json_value_anyf("cbytes", "%u", follow_info->bytes_written[1]);

  if (follow_info->payload)
  {
      follow_record_t *follow_record;
      GList *cur;

      sharkd_json_array_open("payloads");
      for (cur = g_list_last(follow_info->payload); cur; cur = g_list_previous(cur)((cur) ? (((GList *)(cur))->prev) : ((void*)0)))
      {
          follow_record = (follow_record_t *) cur->data;

          json_dumper_begin_object(&dumper);

          sharkd_json_value_anyf("n", "%u", follow_record->packet_num);
          sharkd_json_value_base64("d", follow_record->data->data, follow_record->data->len);

          if (follow_record->is_server)
              sharkd_json_value_anyf("s", "%d", 1);

          json_dumper_end_object(&dumper);
      }
      sharkd_json_array_close();
  }

  sharkd_json_result_epilogue();

  remove_tap_listener(follow_info);
  follow_info_free(follow_info);
4209}

4211static void
4212// NOLINTNEXTLINE(misc-no-recursion)
4213sharkd_session_process_frame_cb_tree(const char *key, epan_dissect_t *edt, proto_tree *tree, tvbuff_t **tvbs, bool_Bool display_hidden)
4214{
  proto_node *node;

  sharkd_json_array_open(key);
  for (node = tree->first_child; node; node = node->next)
  {
      field_info *finfo = PNODE_FINFO(node)((node)->finfo);

      if (!finfo)
          continue;

      if (!display_hidden && FI_GET_FLAG(finfo, FI_HIDDEN)((finfo) ? ((finfo)->flags & (0x00000001)) : 0))
          continue;

      json_dumper_begin_object(&dumper);

      if (!finfo->rep)
      {
          char label_str[ITEM_LABEL_LENGTH240];

          label_str[0] = '\0';
          proto_item_fill_label(finfo, label_str, NULL((void*)0));
          sharkd_json_value_string("l", label_str);
      }
      else
      {
          sharkd_json_value_string("l", finfo->rep->representation);
      }

      if (finfo->ds_tvb && tvbs && tvbs[0] != finfo->ds_tvb)
      {
          int idx;

          for (idx = 1; tvbs[idx]; idx++)
          {
              if (tvbs[idx] == finfo->ds_tvb)
              {
                  sharkd_json_value_anyf("ds", "%d", idx);
                  break;
              }
          }
      }

      if (finfo->start >= 0 && finfo->length > 0)
          sharkd_json_value_anyf("h", "[%d,%d]", finfo->start, finfo->length);

      if (finfo->appendix_start >= 0 && finfo->appendix_length > 0)
          sharkd_json_value_anyf("i", "[%d,%d]", finfo->appendix_start, finfo->appendix_length);


      if (finfo->hfinfo)
      {
          char *filter;

          if (finfo->hfinfo->type == FT_PROTOCOL)
          {
              sharkd_json_value_string("t", "proto");
          }
          else if (finfo->hfinfo->type == FT_FRAMENUM)
          {
              sharkd_json_value_string("t", "framenum");
              sharkd_json_value_anyf("fnum", "%u", fvalue_get_uinteger(finfo->value));
          }
          else if (FI_GET_FLAG(finfo, FI_URL)((finfo) ? ((finfo)->flags & (0x00000004)) : 0) && FT_IS_STRING(finfo->hfinfo->type)((finfo->hfinfo->type) == FT_STRING || (finfo->hfinfo
->type) == FT_STRINGZ || (finfo->hfinfo->type) == FT_STRINGZPAD
 || (finfo->hfinfo->type) == FT_STRINGZTRUNC || (finfo->
hfinfo->type) == FT_UINT_STRING || (finfo->hfinfo->type
) == FT_AX25))
          {
              char *url = fvalue_to_string_repr(NULL((void*)0), finfo->value, FTREPR_DISPLAY, finfo->hfinfo->display);

              sharkd_json_value_string("t", "url");
              sharkd_json_value_string("url", url);
              wmem_free(NULL((void*)0), url);
          }

          filter = proto_construct_match_selected_string(finfo, edt);
          if (filter)
          {
              sharkd_json_value_string("f", filter);
              wmem_free(NULL((void*)0), filter);
          }

          if (finfo->hfinfo->abbrev)
                  sharkd_json_value_string("fn", finfo->hfinfo->abbrev);
      }

      if (FI_GET_FLAG(finfo, FI_GENERATED)((finfo) ? ((finfo)->flags & (0x00000002)) : 0))
          sharkd_json_value_anyf("g", "true");

      if (FI_GET_FLAG(finfo, FI_HIDDEN)((finfo) ? ((finfo)->flags & (0x00000001)) : 0))
          sharkd_json_value_anyf("v", "true");

      if (FI_GET_FLAG(finfo, PI_SEVERITY_MASK)((finfo) ? ((finfo)->flags & (0x00F00000)) : 0))
      {
          const char *severity = try_val_to_str(FI_GET_FLAG(finfo, PI_SEVERITY_MASK)((finfo) ? ((finfo)->flags & (0x00F00000)) : 0), expert_severity_vals);

          ws_assert(severity != NULL)do { if ((1) && !(severity != ((void*)0))) ws_log_fatal_full
("", LOG_LEVEL_ERROR, "sharkd_session.c", 4307, __func__, "assertion failed: %s"
, "severity != ((void*)0)"); } while (0);

          sharkd_json_value_string("s", severity);
      }

      if (((proto_tree *) node)->first_child)
      {
          if (finfo->tree_type != -1)
              sharkd_json_value_anyf("e", "%d", finfo->tree_type);

          // We recurse here but our depth is limited
          sharkd_session_process_frame_cb_tree("n", edt, (proto_tree *) node, tvbs, display_hidden);
      }

      json_dumper_end_object(&dumper);
  }
  sharkd_json_array_close();
4324}

4326static bool_Bool
4327sharkd_follower_visit_layers_cb(const void *key _U___attribute__((unused)), void *value, void *user_data)
4328{
  register_follow_t *follower = (register_follow_t *) value;
  epan_dissect_t *edt = (epan_dissect_t *) user_data;
  packet_info *pi = &edt->pi;

  const int proto_id = get_follow_proto_id(follower);

  uint32_t ignore_stream;
  uint32_t ignore_sub_stream;

  if (proto_is_frame_protocol(pi->layers, proto_get_protocol_filter_name(proto_id)))
  {
      const char *layer_proto = proto_get_protocol_short_name(find_protocol_by_id(proto_id));
      char *follow_filter;

      follow_filter = get_follow_conv_func(follower)(edt, pi, &ignore_stream, &ignore_sub_stream);

      json_dumper_begin_array(&dumper);
      json_dumper_value_string(&dumper, layer_proto);
      json_dumper_value_string(&dumper, follow_filter);
      json_dumper_end_array(&dumper);

      g_free(follow_filter);
  }

  return false0;
4354}

4356static bool_Bool
4357sharkd_followers_visit_layers_cb(const void *key _U___attribute__((unused)), void *value, void *user_data)
4358{
  register_follow_t *follower = (register_follow_t *) value;
  epan_dissect_t *edt = (epan_dissect_t *) user_data;
  packet_info *pi = &edt->pi;

  const int proto_id = get_follow_proto_id(follower);

  unsigned stream;
  unsigned sub_stream;

  if (proto_is_frame_protocol(pi->layers, proto_get_protocol_filter_name(proto_id)))
  {
      const char *layer_proto = proto_get_protocol_short_name(find_protocol_by_id(proto_id));
      char *follow_filter;

      follow_filter = get_follow_conv_func(follower)(edt, pi, &stream, &sub_stream);

      sharkd_json_object_open(NULL((void*)0));
      sharkd_json_value_string("protocol", layer_proto);
      sharkd_json_value_string("filter", follow_filter);
      if (get_follow_stream_count_func(follower) != NULL((void*)0))
      {
          sharkd_json_value_anyf("stream", "%u", stream);
      }
      if (get_follow_sub_stream_id_func(follower) != NULL((void*)0))
      {
          sharkd_json_value_anyf("sub_stream", "%u", sub_stream);
      }
      sharkd_json_object_close();

      g_free(follow_filter);
  }

  return false0;
4392}

4394struct sharkd_frame_request_data
4395{
  bool_Bool display_hidden;
4397};

4399static void
4400sharkd_session_process_frame_cb(epan_dissect_t *edt, proto_tree *tree, struct epan_column_info *cinfo, const GSList *data_src, void *data)
4401{
  packet_info *pi = &edt->pi;
  frame_data *fdata = pi->fd;
  wtap_block_t pkt_block = NULL((void*)0);

  const struct sharkd_frame_request_data * const req_data = (const struct sharkd_frame_request_data * const) data;
  const bool_Bool display_hidden = (req_data) ? req_data->display_hidden : false0;

  sharkd_json_result_prologue(rpcid);

  if (fdata->has_modified_block)
      pkt_block = sharkd_get_modified_block(fdata);
  else
      pkt_block = pi->rec->block;

  if (pkt_block)
  {
      unsigned i;
      unsigned n;
      char *comment;

      n = wtap_block_count_option(pkt_block, OPT_COMMENT1);

      sharkd_json_array_open("comment");
      for (i = 0; i < n; i++) {
          if (WTAP_OPTTYPE_SUCCESS == wtap_block_get_nth_string_option_value(pkt_block, OPT_COMMENT1, i, &comment)) {
              sharkd_json_value_string(NULL((void*)0), comment);
          }
      }
      sharkd_json_array_close();
  }

  if (tree)
  {
      tvbuff_t **tvbs = NULL((void*)0);

      /* arrayize data src, to speedup searching for ds_tvb index */
      if (data_src && data_src->next /* only needed if there are more than one data source */)
      {
          unsigned count = g_slist_length((GSList *) data_src);
          unsigned i;

          tvbs = (tvbuff_t **) g_malloc0((count + 1) * sizeof(*tvbs));

          for (i = 0; i < count; i++)
          {
              const struct data_source *src = (const struct data_source *) g_slist_nth_data((GSList *) data_src, i);

              tvbs[i] = get_data_source_tvb(src);
          }

          tvbs[count] = NULL((void*)0);
      }

      sharkd_session_process_frame_cb_tree("tree", edt, tree, tvbs, display_hidden);

      g_free(tvbs);
  }

  if (cinfo)
  {
      int col;

      sharkd_json_array_open("col");
      for (col = 0; col < cinfo->num_cols; ++col)
      {
          sharkd_json_value_string(NULL((void*)0), get_column_text(cinfo, col));
      }
      sharkd_json_array_close();
  }

  if (fdata->ignored)
      sharkd_json_value_anyf("i", "true");

  if (fdata->marked)
      sharkd_json_value_anyf("m", "true");

  if (fdata->color_filter)
  {
      sharkd_json_value_stringf("bg", "%06x", color_t_to_rgb(&fdata->color_filter->bg_color));
      sharkd_json_value_stringf("fg", "%06x", color_t_to_rgb(&fdata->color_filter->fg_color));
  }

  if (data_src)
  {
      struct data_source *src = (struct data_source *) data_src->data;
      bool_Bool ds_open = false0;

      tvbuff_t *tvb;
      unsigned length;

      tvb = get_data_source_tvb(src);
      length = tvb_captured_length(tvb);

      if (length != 0)
      {
          const unsigned char *cp = tvb_get_ptr(tvb, 0, length);

          /* XXX pi.fd->encoding */
          sharkd_json_value_base64("bytes", cp, length);
      }
      else
      {
          sharkd_json_value_base64("bytes", "", 0);
      }

      data_src = data_src->next;
      if (data_src)
      {
          sharkd_json_array_open("ds");
          ds_open = true1;
      }

      while (data_src)
      {
          src = (struct data_source *) data_src->data;

          json_dumper_begin_object(&dumper);

          {
              char *src_description = get_data_source_description(src);

              sharkd_json_value_string("name", src_description);
              wmem_free(NULL((void*)0), src_description);
          }

          tvb = get_data_source_tvb(src);
          length = tvb_captured_length(tvb);

          if (length != 0)
          {
              const unsigned char *cp = tvb_get_ptr(tvb, 0, length);

              /* XXX pi.fd->encoding */
              sharkd_json_value_base64("bytes", cp, length);
          }
          else
          {
              sharkd_json_value_base64("bytes", "", 0);
          }

          json_dumper_end_object(&dumper);

          data_src = data_src->next;
      }

      /* close ds, only if was opened */
      if (ds_open)
          sharkd_json_array_close();
  }

  sharkd_json_array_open("fol");
  follow_iterate_followers(sharkd_follower_visit_layers_cb, edt);
  sharkd_json_array_close();

  sharkd_json_array_open("followers");
  follow_iterate_followers(sharkd_followers_visit_layers_cb, edt);
  sharkd_json_array_close();

  sharkd_json_result_epilogue();
4561}

4563#define SHARKD_IOGRAPH_MAX_ITEMS1 << 25 1 << 25 /* 33,554,432 limit of items, same as max_io_items_ in ui/qt/io_graph_dialog.h */

4565struct sharkd_iograph
4566{
  /* config */
  int hf_index;
  io_graph_item_unit_t calc_type;
  uint32_t interval;
  bool_Bool aot;

  /* result */
  int space_items;
  int num_items;
  io_graph_item_t *items;
  GString *error;
4578};

4580static tap_packet_status
4581sharkd_iograph_packet(void *g, packet_info *pinfo, epan_dissect_t *edt, const void *dummy _U___attribute__((unused)), tap_flags_t flags _U___attribute__((unused)))
4582{
  struct sharkd_iograph *graph = (struct sharkd_iograph *) g;
  int idx;
  bool_Bool update_succeeded;

  int64_t tmp_idx = get_io_graph_index(pinfo, graph->interval);
  if (tmp_idx < 0 || tmp_idx >= SHARKD_IOGRAPH_MAX_ITEMS1 << 25)
1
Assuming 'tmp_idx' is >= 0→
2
←
Assuming the condition is false→
3
←
Taking false branch→
      return TAP_PACKET_DONT_REDRAW;

  idx = (int)tmp_idx;

  if (idx + 1 > graph->num_items)
4
←
Assuming the condition is true→
5
←
Taking true branch→
  {
      if (idx + 1 > graph->space_items)
6
←
Assuming the condition is false→
7
←
Taking false branch→
      {
          int new_size = idx + 1024;

          graph->items = (io_graph_item_t *) g_realloc(graph->items, sizeof(io_graph_item_t) * new_size);
          reset_io_graph_items(&graph->items[graph->space_items], new_size - graph->space_items, graph->hf_index);

          graph->space_items = new_size;
      }
      else if (graph->items == NULL((void*)0))
8
←
Assuming field 'items' is equal to NULL→
9
←
Taking true branch→
      {
          graph->items = g_new(io_graph_item_t, graph->space_items)((io_graph_item_t *) g_malloc_n ((graph->space_items), sizeof
 (io_graph_item_t)));
10
←
Uninitialized value stored to field 'first_frame_in_invl'→
          reset_io_graph_items(graph->items, graph->space_items, graph->hf_index);
11
←
Calling 'reset_io_graph_items'→
14
←
Returning from 'reset_io_graph_items'→
      }

      graph->num_items = idx + 1;
  }

  update_succeeded = update_io_graph_item(graph->items, idx, pinfo, edt, graph->hf_index, graph->calc_type, graph->interval);
15
←
Calling 'update_io_graph_item'→
  /* XXX - TAP_PACKET_FAILED if the item couldn't be updated, with an error message? */
  return update_succeeded ? TAP_PACKET_REDRAW : TAP_PACKET_DONT_REDRAW;
4616}

4618/**
* sharkd_session_process_iograph()
*
* Process iograph request
*
* Input:
*   (o) interval           - interval time, if not specified: 1000
*   (o) interval_units     - units for interval time, must be 's', 'ms' or 'us', if not specified: ms
*   (m) graph0             - First graph request
*   (o) graph1...graph9    - Other graph requests
*   (o) filter0            - First graph filter
*   (o) filter1...filter9  - Other graph filters
*
* Graph requests can be one of: "packets", "bytes", "bits", "sum:<field>", "frames:<field>", "max:<field>", "min:<field>", "avg:<field>", "load:<field>",
* if you use variant with <field>, you need to pass field name in filter request.
*
* Output object with attributes:
*   (m) iograph - array of graph results with attributes:
*                  errmsg - graph cannot be constructed
*                  items  - graph values, zeros are skipped, if value is not a number it's next index encoded as hex string
*/
4639static void
4640sharkd_session_process_iograph(char *buf, const jsmntok_t *tokens, int count)
4641{
  const char *tok_interval = json_find_attr(buf, tokens, count, "interval");
  const char *tok_interval_units = json_find_attr(buf, tokens, count, "interval_units");
  struct sharkd_iograph graphs[10];
  bool_Bool is_any_ok = false0;
  int graph_count;

  int i;

  /* default: 1000ms = one per second */
  uint32_t interval = 1000;
  const char *interval_units = "ms";

  if (tok_interval)
      ws_strtou32(tok_interval, NULL((void*)0), &interval);

  if (tok_interval_units)
  {
      if (strcmp(tok_interval_units, "us") != 0 &&
          strcmp(tok_interval_units, "ms") != 0 &&
          strcmp(tok_interval_units, "s") != 0)
      {
          sharkd_json_error(
                  rpcid, -7003, NULL((void*)0),
                  "Invalid interval_units parameter: '%s', must be 's', 'ms' or 'us'", tok_interval_units
          );
          return;
      }
      interval_units = tok_interval_units;
  }

  uint32_t interval_us = 0;
  if (strcmp(interval_units, "us") == 0)
  {
      interval_us = interval;
  }
  else if (strcmp(interval_units, "ms") == 0)
  {
      interval_us = 1000 * interval;
  }
  else if (strcmp(interval_units, "s") == 0)
  {
      interval_us = 1000000 * interval;
  }

  for (i = graph_count = 0; i < (int) G_N_ELEMENTS(graphs)(sizeof (graphs) / sizeof ((graphs)[0])); i++)
  {
      struct sharkd_iograph *graph = &graphs[graph_count];

      const char *tok_graph;
      const char *tok_filter;
      char tok_format_buf[32];
      const char *field_name;
      const char *tok_aot;

      snprintf(tok_format_buf, sizeof(tok_format_buf), "graph%d", i);
      tok_graph = json_find_attr(buf, tokens, count, tok_format_buf);
      if (!tok_graph)
          break;

      snprintf(tok_format_buf, sizeof(tok_format_buf), "filter%d", i);
      tok_filter = json_find_attr(buf, tokens, count, tok_format_buf);

      if (!strcmp(tok_graph, "packets"))
          graph->calc_type = IOG_ITEM_UNIT_PACKETS;
      else if (!strcmp(tok_graph, "bytes"))
          graph->calc_type = IOG_ITEM_UNIT_BYTES;
      else if (!strcmp(tok_graph, "bits"))
          graph->calc_type = IOG_ITEM_UNIT_BITS;
      else if (g_str_has_prefix(tok_graph, "sum:")(__builtin_constant_p ("sum:")? __extension__ ({ const char *
 const __str = (tok_graph); const char * const __prefix = ("sum:"
); gboolean __result = (0); if (__str == ((void*)0) || __prefix
 == ((void*)0)) __result = (g_str_has_prefix) (__str, __prefix
); else { const size_t __str_len = strlen (((__str) + !(__str
))); const size_t __prefix_len = strlen (((__prefix) + !(__prefix
))); if (__str_len >= __prefix_len) __result = memcmp (((__str
) + !(__str)), ((__prefix) + !(__prefix)), __prefix_len) == 0
; } __result; }) : (g_str_has_prefix) (tok_graph, "sum:") ))
          graph->calc_type = IOG_ITEM_UNIT_CALC_SUM;
      else if (g_str_has_prefix(tok_graph, "frames:")(__builtin_constant_p ("frames:")? __extension__ ({ const char
 * const __str = (tok_graph); const char * const __prefix = (
"frames:"); gboolean __result = (0); if (__str == ((void*)0) ||
 __prefix == ((void*)0)) __result = (g_str_has_prefix) (__str
, __prefix); else { const size_t __str_len = strlen (((__str)
 + !(__str))); const size_t __prefix_len = strlen (((__prefix
) + !(__prefix))); if (__str_len >= __prefix_len) __result
 = memcmp (((__str) + !(__str)), ((__prefix) + !(__prefix)), __prefix_len
) == 0; } __result; }) : (g_str_has_prefix) (tok_graph, "frames:"
) ))
          graph->calc_type = IOG_ITEM_UNIT_CALC_FRAMES;
      else if (g_str_has_prefix(tok_graph, "fields:")(__builtin_constant_p ("fields:")? __extension__ ({ const char
 * const __str = (tok_graph); const char * const __prefix = (
"fields:"); gboolean __result = (0); if (__str == ((void*)0) ||
 __prefix == ((void*)0)) __result = (g_str_has_prefix) (__str
, __prefix); else { const size_t __str_len = strlen (((__str)
 + !(__str))); const size_t __prefix_len = strlen (((__prefix
) + !(__prefix))); if (__str_len >= __prefix_len) __result
 = memcmp (((__str) + !(__str)), ((__prefix) + !(__prefix)), __prefix_len
) == 0; } __result; }) : (g_str_has_prefix) (tok_graph, "fields:"
) ))
          graph->calc_type = IOG_ITEM_UNIT_CALC_FIELDS;
      else if (g_str_has_prefix(tok_graph, "max:")(__builtin_constant_p ("max:")? __extension__ ({ const char *
 const __str = (tok_graph); const char * const __prefix = ("max:"
); gboolean __result = (0); if (__str == ((void*)0) || __prefix
 == ((void*)0)) __result = (g_str_has_prefix) (__str, __prefix
); else { const size_t __str_len = strlen (((__str) + !(__str
))); const size_t __prefix_len = strlen (((__prefix) + !(__prefix
))); if (__str_len >= __prefix_len) __result = memcmp (((__str
) + !(__str)), ((__prefix) + !(__prefix)), __prefix_len) == 0
; } __result; }) : (g_str_has_prefix) (tok_graph, "max:") ))
          graph->calc_type = IOG_ITEM_UNIT_CALC_MAX;
      else if (g_str_has_prefix(tok_graph, "min:")(__builtin_constant_p ("min:")? __extension__ ({ const char *
 const __str = (tok_graph); const char * const __prefix = ("min:"
); gboolean __result = (0); if (__str == ((void*)0) || __prefix
 == ((void*)0)) __result = (g_str_has_prefix) (__str, __prefix
); else { const size_t __str_len = strlen (((__str) + !(__str
))); const size_t __prefix_len = strlen (((__prefix) + !(__prefix
))); if (__str_len >= __prefix_len) __result = memcmp (((__str
) + !(__str)), ((__prefix) + !(__prefix)), __prefix_len) == 0
; } __result; }) : (g_str_has_prefix) (tok_graph, "min:") ))
          graph->calc_type = IOG_ITEM_UNIT_CALC_MIN;
      else if (g_str_has_prefix(tok_graph, "avg:")(__builtin_constant_p ("avg:")? __extension__ ({ const char *
 const __str = (tok_graph); const char * const __prefix = ("avg:"
); gboolean __result = (0); if (__str == ((void*)0) || __prefix
 == ((void*)0)) __result = (g_str_has_prefix) (__str, __prefix
); else { const size_t __str_len = strlen (((__str) + !(__str
))); const size_t __prefix_len = strlen (((__prefix) + !(__prefix
))); if (__str_len >= __prefix_len) __result = memcmp (((__str
) + !(__str)), ((__prefix) + !(__prefix)), __prefix_len) == 0
; } __result; }) : (g_str_has_prefix) (tok_graph, "avg:") ))
          graph->calc_type = IOG_ITEM_UNIT_CALC_AVERAGE;
      else if (g_str_has_prefix(tok_graph, "load:")(__builtin_constant_p ("load:")? __extension__ ({ const char *
 const __str = (tok_graph); const char * const __prefix = ("load:"
); gboolean __result = (0); if (__str == ((void*)0) || __prefix
 == ((void*)0)) __result = (g_str_has_prefix) (__str, __prefix
); else { const size_t __str_len = strlen (((__str) + !(__str
))); const size_t __prefix_len = strlen (((__prefix) + !(__prefix
))); if (__str_len >= __prefix_len) __result = memcmp (((__str
) + !(__str)), ((__prefix) + !(__prefix)), __prefix_len) == 0
; } __result; }) : (g_str_has_prefix) (tok_graph, "load:") ))
          graph->calc_type = IOG_ITEM_UNIT_CALC_LOAD;
      else if (g_str_has_prefix(tok_graph, "throughput:")(__builtin_constant_p ("throughput:")? __extension__ ({ const
 char * const __str = (tok_graph); const char * const __prefix
 = ("throughput:"); gboolean __result = (0); if (__str == ((void
*)0) || __prefix == ((void*)0)) __result = (g_str_has_prefix)
 (__str, __prefix); else { const size_t __str_len = strlen ((
(__str) + !(__str))); const size_t __prefix_len = strlen (((__prefix
) + !(__prefix))); if (__str_len >= __prefix_len) __result
 = memcmp (((__str) + !(__str)), ((__prefix) + !(__prefix)), __prefix_len
) == 0; } __result; }) : (g_str_has_prefix) (tok_graph, "throughput:"
) ))
          graph->calc_type = IOG_ITEM_UNIT_CALC_THROUGHPUT;
      else
          break;

      field_name = strchr(tok_graph, ':');
      if (field_name)
          field_name = field_name + 1;

      /* io_graph_item now supports microseconds (and this parameter
       * is expected to be in microseconds.) */
      graph->interval = interval_us;

      graph->hf_index = -1;
      graph->error = check_field_unit(field_name, &graph->hf_index, graph->calc_type);

      graph->space_items = 0; /* TODO, can avoid realloc()s in sharkd_iograph_packet() by calculating: capture_time / interval */
      graph->num_items = 0;
      graph->items = NULL((void*)0);

      snprintf(tok_format_buf, sizeof(tok_format_buf), "aot%d", i);
      tok_aot = json_find_attr(buf, tokens, count, tok_format_buf);
      if (tok_aot!=NULL((void*)0)) {
          graph->aot = (!strcmp(tok_aot, "true")) ? true1 : false0;
      }
      else {
          graph->aot = false0;
      }

      if (!graph->error)
          graph->error = register_tap_listener("frame", graph, tok_filter, TL_REQUIRES_PROTO_TREE0x00000001, NULL((void*)0), sharkd_iograph_packet, NULL((void*)0), NULL((void*)0));

      graph_count++;

      if (graph->error)
      {
          sharkd_json_error(
                  rpcid, -6001, NULL((void*)0),
                  "%s", graph->error->str
                  );
          g_string_free(graph->error, TRUE)(__builtin_constant_p ((!(0))) ? (((!(0))) ? (g_string_free) (
(graph->error), ((!(0)))) : g_string_free_and_steal (graph
->error)) : (g_string_free) ((graph->error), ((!(0)))));
          return;
      }

      if (graph->error == NULL((void*)0))
          is_any_ok = true1;
  }

  /* retap only if we have at least one ok */
  if (is_any_ok)
      sharkd_retap();

  sharkd_json_result_prologue(rpcid);

  sharkd_json_array_open("iograph");
  for (i = 0; i < graph_count; i++)
  {
      struct sharkd_iograph *graph = &graphs[i];

      json_dumper_begin_object(&dumper);

      if (graph->error)
      {
          fprintf(stderrstderr, "SNAP 6002 - we should never get to here.\n");
          g_string_free(graph->error, TRUE)(__builtin_constant_p ((!(0))) ? (((!(0))) ? (g_string_free) (
(graph->error), ((!(0)))) : g_string_free_and_steal (graph
->error)) : (g_string_free) ((graph->error), ((!(0)))));
          exit(-1);
      }
      else
      {
          int idx;
          int next_idx = 0;

          sharkd_json_array_open("items");
          for (idx = 0; idx < graph->num_items; idx++)
          {
              double val;

              val = get_io_graph_item(graph->items, graph->calc_type, idx, graph->hf_index, &cfile, graph->interval, graph->num_items, graph->aot);

              /* if it's zero, don't display */
              if (val == 0.0)
                  continue;

              /* cause zeros are not printed, need to output index */
              if (next_idx != idx)
                  sharkd_json_value_stringf(NULL((void*)0), "%x", idx);

              sharkd_json_value_anyf(NULL((void*)0), "%f", val);
              next_idx = idx + 1;
          }
          sharkd_json_array_close();
      }
      json_dumper_end_object(&dumper);

      remove_tap_listener(graph);
      g_free(graph->items);
  }
  sharkd_json_array_close();

  sharkd_json_result_epilogue();
4824}

4826/**
* sharkd_session_process_intervals()
*
* Process intervals request - generate basic capture file statistics per requested interval.
*
* Input:
*   (o) interval - interval time in ms, if not specified: 1000ms
*   (o) filter   - filter for generating interval request
*
* Output object with attributes:
*   (m) intervals - array of intervals, with indexes:
*             [0] - index of interval,
*             [1] - number of frames during interval,
*             [2] - number of bytes during interval.
*
*   (m) last   - last interval number.
*   (m) frames - total number of frames
*   (m) bytes  - total number of bytes
*
* NOTE: If frames are not in order, there might be items with same interval index, or even negative one.
*/
4847static void
4848sharkd_session_process_intervals(char *buf, const jsmntok_t *tokens, int count)
4849{
  const char *tok_interval = json_find_attr(buf, tokens, count, "interval");
  const char *tok_filter = json_find_attr(buf, tokens, count, "filter");

  const uint8_t *filter_data = NULL((void*)0);

  struct
  {
      unsigned int frames;
      uint64_t bytes;
  } st, st_total;

  nstime_t *start_ts;

  uint32_t interval_ms = 1000; /* default: one per second */

  int64_t idx;
  int64_t max_idx = 0;

  if (tok_interval)
      ws_strtou32(tok_interval, NULL((void*)0), &interval_ms);  // already validated

  if (tok_filter)
  {
      const struct sharkd_filter_item *filter_item;

      filter_item = sharkd_session_filter_data(tok_filter);
      if (!filter_item)
      {
          sharkd_json_error(
                  rpcid, -7001, NULL((void*)0),
                  "Invalid filter parameter: %s", tok_filter
                  );
          return;
      }
      filter_data = filter_item->filtered;
  }

  st_total.frames = 0;
  st_total.bytes  = 0;

  st.frames = 0;
  st.bytes  = 0;

  idx = 0;

  sharkd_json_result_prologue(rpcid);
  sharkd_json_array_open("intervals");

  start_ts = (cfile.count >= 1) ? &(sharkd_get_frame(1)->abs_ts) : NULL((void*)0);

  for (uint32_t framenum = 1; framenum <= cfile.count; framenum++)
  {
      frame_data *fdata;
      int64_t msec_rel;
      int64_t new_idx;

      if (filter_data && !(filter_data[framenum / 8] & (1 << (framenum % 8))))
          continue;

      fdata = sharkd_get_frame(framenum);

      msec_rel = (fdata->abs_ts.secs - start_ts->secs) * (int64_t) 1000 + (fdata->abs_ts.nsecs - start_ts->nsecs) / 1000000;
      new_idx  = msec_rel / interval_ms;

      if (idx != new_idx)
      {
          if (st.frames != 0)
          {
              sharkd_json_value_anyf(NULL((void*)0), "[%" PRId64"l" "d" ",%u,%" PRIu64"l" "u" "]", idx, st.frames, st.bytes);
          }

          idx = new_idx;
          if (idx > max_idx)
              max_idx = idx;

          st.frames = 0;
          st.bytes  = 0;
      }

      st.frames += 1;
      st.bytes  += fdata->pkt_len;

      st_total.frames += 1;
      st_total.bytes  += fdata->pkt_len;
  }

  if (st.frames != 0)
  {
      sharkd_json_value_anyf(NULL((void*)0), "[%" PRId64"l" "d" ",%u,%" PRIu64"l" "u" "]", idx, st.frames, st.bytes);
  }
  sharkd_json_array_close();

  sharkd_json_value_anyf("last", "%" PRId64"l" "d", max_idx);
  sharkd_json_value_anyf("frames", "%u", st_total.frames);
  sharkd_json_value_anyf("bytes", "%" PRIu64"l" "u", st_total.bytes);

  sharkd_json_result_epilogue();
4947}

4949/**
* sharkd_session_process_frame()
*
* Process frame request
*
* Input:
*   (m) frame - requested frame number
*   (o) ref_frame - time reference frame number
*   (o) prev_frame - previously displayed frame number
*   (o) proto - set if output frame tree
*   (o) columns - set if output frame columns
*   (o) color - set if output color-filter bg/fg
*   (o) bytes - set if output frame bytes
*   (o) hidden - set if output hidden tree fields
*
* Output object with attributes:
*   (m) err   - 0 if succeed
*   (o) tree  - array of frame nodes with attributes:
*                  l - label
*                  t: 'proto', 'framenum', 'url' - type of node
*                  f - filter string
*                  fn - field name
*                  s - severity
*                  e - subtree ett index
*                  n - array of subtree nodes
*                  h - two item array: (item start, item length)
*                  i - two item array: (appendix start, appendix length)
*                  p - [RESERVED] two item array: (protocol start, protocol length)
*                  ds- data src index
*                  url  - only for t:'url', url
*                  fnum - only for t:'framenum', frame number
*                  g - if field is generated by Wireshark
*                  v - if field is hidden
*
*   (o) col   - array of column data
*   (o) bytes - base64 of frame bytes
*   (o) ds    - array of other data srcs
*   (o) comment - frame comment
*   (o) fol   - array of follow filters:
*                  [0] - protocol
*                  [1] - filter string
*   (o) followers - array of followers with attributes:
*                      protocol - protocol string
*                      filter - filter string
*                      stream - stream index number
*                      sub_stream - sub-stream index number (optional, e.g. for HTTP/2 and QUIC streams)
*   (o) i   - if frame is ignored
*   (o) m   - if frame is marked
*   (o) bg  - color filter - background color in hex
*   (o) fg  - color filter - foreground color in hex
*/
5000static void
5001sharkd_session_process_frame(char *buf, const jsmntok_t *tokens, int count)
5002{
  const char *tok_frame = json_find_attr(buf, tokens, count, "frame");
  const char *tok_ref_frame = json_find_attr(buf, tokens, count, "ref_frame");
  const char *tok_prev_frame = json_find_attr(buf, tokens, count, "prev_frame");
  column_info *cinfo = NULL((void*)0);

  uint32_t framenum, ref_frame_num, prev_dis_num;
  uint32_t dissect_flags = SHARKD_DISSECT_FLAG_NULL0x00u;
  struct sharkd_frame_request_data req_data;
  wtap_rec rec; /* Record information */
  enum dissect_request_status status;
  int err;
  char *err_info;

  ws_strtou32(tok_frame, NULL((void*)0), &framenum);  // we have already validated this

  ref_frame_num = (framenum != 1) ? 1 : 0;
  if (tok_ref_frame)
  {
      ws_strtou32(tok_ref_frame, NULL((void*)0), &ref_frame_num);
      if (ref_frame_num > framenum)
      {
          sharkd_json_error(
                  rpcid, -8001, NULL((void*)0),
                  "Invalid ref_frame - The ref_frame occurs after the frame specified"
                  );
          return;
      }
  }

  prev_dis_num = framenum - 1;
  if (tok_prev_frame)
  {
      ws_strtou32(tok_prev_frame, NULL((void*)0), &prev_dis_num);
      if (prev_dis_num >= framenum)
      {
          sharkd_json_error(
                  rpcid, -8002, NULL((void*)0),
                  "Invalid prev_frame - The prev_frame occurs on or after the frame specified"
                  );
          return;
      }
  }

  if (json_find_attr(buf, tokens, count, "proto") != NULL((void*)0))
      dissect_flags |= SHARKD_DISSECT_FLAG_PROTO_TREE0x04u;
  if (json_find_attr(buf, tokens, count, "bytes") != NULL((void*)0))
      dissect_flags |= SHARKD_DISSECT_FLAG_BYTES0x01u;
  if (json_find_attr(buf, tokens, count, "columns") != NULL((void*)0)) {
      dissect_flags |= SHARKD_DISSECT_FLAG_COLUMNS0x02u;
      cinfo = &cfile.cinfo;
  }
  if (json_find_attr(buf, tokens, count, "color") != NULL((void*)0))
      dissect_flags |= SHARKD_DISSECT_FLAG_COLOR0x08u;

  req_data.display_hidden = (json_find_attr(buf, tokens, count, "v") != NULL((void*)0));

  wtap_rec_init(&rec, 1514);

  status = sharkd_dissect_request(framenum, ref_frame_num, prev_dis_num,
          &rec, cinfo, dissect_flags,
          &sharkd_session_process_frame_cb, &req_data, &err, &err_info);
  switch (status) {

      case DISSECT_REQUEST_SUCCESS:
          /* success */
          break;

      case DISSECT_REQUEST_NO_SUCH_FRAME:
          sharkd_json_error(
                  rpcid, -8003, NULL((void*)0),
                  "Invalid frame - The frame number requested is out of range"
                  );
          break;

      case DISSECT_REQUEST_READ_ERROR:
          sharkd_json_error(
                  rpcid, -8003, NULL((void*)0),
                  /* XXX - show the error details */
                  "Read error - The frame could not be read from the file"
                  );
          g_free(err_info);
          break;
  }

  wtap_rec_cleanup(&rec);
5088}

5090/**
* sharkd_session_process_check()
*
* Process check request.
*
* Input:
*   (o) filter - filter to be checked
*   (o) field - field to be checked
*
* Output object with attributes:
*   (m) err - always 0
*   (o) filter - 'ok', 'warn' or error message
*   (o) field - 'ok', or 'notfound'
*/
5104static int
5105sharkd_session_process_check(char *buf, const jsmntok_t *tokens, int count)
5106{
  const char *tok_filter = json_find_attr(buf, tokens, count, "filter");
  const char *tok_field = json_find_attr(buf, tokens, count, "field");

  if (tok_filter != NULL((void*)0))
  {
      dfilter_t *dfp;
      df_error_t *df_err = NULL((void*)0);

      if (dfilter_compile(tok_filter, &dfp, &df_err)dfilter_compile_full(tok_filter, &dfp, &df_err, (1U <<
 1)|(1U << 2), __func__))
      {
          if (dfp && dfilter_deprecated_tokens(dfp))
              sharkd_json_warning(rpcid, "Filter contains deprecated tokens");
          else
              sharkd_json_simple_ok(rpcid);

          dfilter_free(dfp);
          df_error_free(&df_err);
          return 0;
      }
      else
      {
          sharkd_json_error(
                  rpcid, -5001, NULL((void*)0),
                  "Filter invalid - %s", df_err->msg
                  );
          df_error_free(&df_err);
          return -5001;
      }
  }

  if (tok_field != NULL((void*)0))
  {
      header_field_info *hfi = proto_registrar_get_byname(tok_field);

      if (!hfi)
      {
          sharkd_json_error(
                  rpcid, -5002, NULL((void*)0),
                  "Field %s not found", tok_field
                  );
          return -5002;
      }
      else
      {
          sharkd_json_simple_ok(rpcid);
          return 0;
      }
  }

  sharkd_json_simple_ok(rpcid);
  return 0;
5158}

5160struct sharkd_session_process_complete_pref_data
5161{
  const char *module;
  const char *pref;
5164};

5166static unsigned
5167sharkd_session_process_complete_pref_cb(module_t *module, void *d)
5168{
  struct sharkd_session_process_complete_pref_data *data = (struct sharkd_session_process_complete_pref_data *) d;

  if (strncmp(data->pref, module->name, strlen(data->pref)) != 0)
      return 0;

  json_dumper_begin_object(&dumper);
  sharkd_json_value_string("f", module->name);
  sharkd_json_value_string("d", module->title);
  json_dumper_end_object(&dumper);

  return 0;
5180}

5182static unsigned
5183sharkd_session_process_complete_pref_option_cb(pref_t *pref, void *d)
5184{
  struct sharkd_session_process_complete_pref_data *data = (struct sharkd_session_process_complete_pref_data *) d;
  const char *pref_name = prefs_get_name(pref);
  const char *pref_title = prefs_get_title(pref);

  if (strncmp(data->pref, pref_name, strlen(data->pref)) != 0)
      return 0;

  json_dumper_begin_object(&dumper);
  sharkd_json_value_stringf("f", "%s.%s", data->module, pref_name);
  sharkd_json_value_string("d", pref_title);
  json_dumper_end_object(&dumper);

  return 0; /* continue */
5198}

5200/**
* sharkd_session_process_complete()
*
* Process complete request
*
* Input:
*   (o) field - field to be completed
*   (o) pref  - preference to be completed
*
* Output object with attributes:
*   (m) err - always 0
*   (o) field - array of object with attributes:
*                  (m) f - field text
*                  (o) t - field type (FT_ number)
*                  (o) n - field name
*   (o) pref  - array of object with attributes:
*                  (m) f - pref name
*                  (o) d - pref description
*/
5219static int
5220sharkd_session_process_complete(char *buf, const jsmntok_t *tokens, int count)
5221{
  const char *tok_field = json_find_attr(buf, tokens, count, "field");
  const char *tok_pref  = json_find_attr(buf, tokens, count, "pref");

  sharkd_json_result_prologue(rpcid);

  if (tok_field != NULL((void*)0) && tok_field[0])
  {
      const size_t filter_length = strlen(tok_field);
      const int filter_with_dot = !!strchr(tok_field, '.');

      void *proto_cookie;
      void *field_cookie;
      int proto_id;

      sharkd_json_array_open("field");

      for (proto_id = proto_get_first_protocol(&proto_cookie); proto_id != -1; proto_id = proto_get_next_protocol(&proto_cookie))
      {
          protocol_t *protocol = find_protocol_by_id(proto_id);
          const char *protocol_filter;
          const char *protocol_name;
          header_field_info *hfinfo;

          if (!proto_is_protocol_enabled(protocol))
              continue;

          protocol_name   = proto_get_protocol_long_name(protocol);
          protocol_filter = proto_get_protocol_filter_name(proto_id);

          if (strlen(protocol_filter) >= filter_length && !g_ascii_strncasecmp(tok_field, protocol_filter, filter_length))
          {
              json_dumper_begin_object(&dumper);
              {
                  sharkd_json_value_string("f", protocol_filter);
                  sharkd_json_value_anyf("t", "%d", FT_PROTOCOL);
                  sharkd_json_value_string("n", protocol_name);
              }
              json_dumper_end_object(&dumper);
          }

          if (!filter_with_dot)
              continue;

          for (hfinfo = proto_get_first_protocol_field(proto_id, &field_cookie); hfinfo != NULL((void*)0); hfinfo = proto_get_next_protocol_field(proto_id, &field_cookie))
          {
              if (hfinfo->same_name_prev_id != -1) /* ignore duplicate names */
                  continue;

              if (strlen(hfinfo->abbrev) >= filter_length && !g_ascii_strncasecmp(tok_field, hfinfo->abbrev, filter_length))
              {
                  json_dumper_begin_object(&dumper);
                  {
                      sharkd_json_value_string("f", hfinfo->abbrev);

                      /* XXX, skip displaying name, if there are multiple (to not confuse user) */
                      if (hfinfo->same_name_next == NULL((void*)0))
                      {
                          sharkd_json_value_anyf("t", "%d", hfinfo->type);
                          sharkd_json_value_string("n", hfinfo->name);
                      }
                  }
                  json_dumper_end_object(&dumper);
              }
          }
      }

      sharkd_json_array_close();
  }

  if (tok_pref != NULL((void*)0) && tok_pref[0])
  {
      struct sharkd_session_process_complete_pref_data data;
      char *dot_sepa;

      data.module = tok_pref;
      data.pref = tok_pref;

      sharkd_json_array_open("pref");
      if ((dot_sepa = strchr(tok_pref, '.')))
      {
          module_t *pref_mod;

          *dot_sepa = '\0'; /* XXX, C abuse: discarding-const */
          data.pref = dot_sepa + 1;

          pref_mod = prefs_find_module(data.module);
          if (pref_mod)
              prefs_pref_foreach(pref_mod, sharkd_session_process_complete_pref_option_cb, &data);

          *dot_sepa = '.';
      }
      else
      {
          prefs_modules_foreach(sharkd_session_process_complete_pref_cb, &data);
      }
      sharkd_json_array_close();
  }

  sharkd_json_result_epilogue();

  return 0;
5323}

5325/**
* sharkd_session_process_setcomment()
*
* Process setcomment request
*
* Input:
*   (m) frame - frame number
*   (o) comment - user comment
*
* Output object with attributes:
*   (m) err   - error code: 0 succeed
*
* Note:
*   For now, adds comments, doesn't remove or replace them.
*/
5340static void
5341sharkd_session_process_setcomment(char *buf, const jsmntok_t *tokens, int count)
5342{
  const char *tok_frame   = json_find_attr(buf, tokens, count, "frame");
  const char *tok_comment = json_find_attr(buf, tokens, count, "comment");

  uint32_t framenum;
  frame_data *fdata;
  wtap_opttype_return_val ret;
  wtap_block_t pkt_block = NULL((void*)0);

  if (!tok_frame || !ws_strtou32(tok_frame, NULL((void*)0), &framenum) || framenum == 0)
  {
      sharkd_json_error(
              rpcid, -3001, NULL((void*)0),
              "Frame number must be a positive integer"
              );
      return;
  }

  fdata = sharkd_get_frame(framenum);  // BUG HERE - If no file loaded you get a crash
  if (!fdata)
  {
      sharkd_json_error(
              rpcid, -3002, NULL((void*)0),
              "Frame number is out of range"
              );
      return;
  }

  pkt_block = sharkd_get_packet_block(fdata);

  ret = wtap_block_add_string_option(pkt_block, OPT_COMMENT1, tok_comment, strlen(tok_comment));

  if (ret != WTAP_OPTTYPE_SUCCESS)
  {
      sharkd_json_error(
              rpcid, -3003, NULL((void*)0),
              "Unable to set the comment"
              );
  }
  else
  {
      sharkd_set_modified_block(fdata, pkt_block);
      sharkd_json_simple_ok(rpcid);
  }
5386}

5388/**
* sharkd_session_process_setconf()
*
* Process setconf request
*
* Input:
*   (m) name  - preference name
*   (m) value - preference value
*
* Output object with attributes:
*   (m) err   - error code: 0 succeed
*/
5400static void
5401sharkd_session_process_setconf(char *buf, const jsmntok_t *tokens, int count)
5402{
  const char *tok_name = json_find_attr(buf, tokens, count, "name");
  const char *tok_value = json_find_attr(buf, tokens, count, "value");
  char pref[4096];
  char *errmsg = NULL((void*)0);

  prefs_set_pref_e ret;

  if (!tok_name || tok_name[0] == '\0')
  {
      sharkd_json_error(
              rpcid, -4001, NULL((void*)0),
              "Preference name missing"
              );
      return;
  }

  if (!tok_value)
  {
      sharkd_json_error(
              rpcid, -4002, NULL((void*)0),
              "Preference value missing"
              );
      return;
  }

  snprintf(pref, sizeof(pref), "%s:%s", tok_name, tok_value);

  ret = prefs_set_pref(pref, &errmsg);

  switch (ret)
  {
      case PREFS_SET_OK:
          sharkd_json_simple_ok(rpcid);
          break;

      case PREFS_SET_OBSOLETE:
          sharkd_json_error(
                  rpcid, -4003, NULL((void*)0),
                  "The preference specified is obsolete"
                  );
          break;

      case PREFS_SET_NO_SUCH_PREF:
          sharkd_json_error(
                  rpcid, -4004, NULL((void*)0),
                  "No such preference exists"
                  );
          break;

      default:
          sharkd_json_error(
                  rpcid, -4005, NULL((void*)0),
                  "Unable to set the preference%s%s",
                  errmsg ? ": " : "", errmsg ? errmsg : ""
                  );
  }

  g_free(errmsg);
5461}

5463struct sharkd_session_process_dumpconf_data
5464{
  module_t *module;
5466};

5468static unsigned
5469sharkd_session_process_dumpconf_cb(pref_t *pref, void *d)
5470{
  struct sharkd_session_process_dumpconf_data *data = (struct sharkd_session_process_dumpconf_data *) d;
  const char *pref_name = prefs_get_name(pref);

  char json_pref_key[512];

  snprintf(json_pref_key, sizeof(json_pref_key), "%s.%s", data->module->name, pref_name);
  sharkd_json_object_open(json_pref_key);

  if (!prefs_is_preference_obsolete(pref)) {
      switch (prefs_get_type(pref))
      {
          case PREF_UINT:
              sharkd_json_value_anyf("u", "%u", prefs_get_uint_value(pref, pref_current));
              if (prefs_get_uint_base(pref) != 10)
                  sharkd_json_value_anyf("ub", "%u", prefs_get_uint_base(pref));
              break;

          case PREF_BOOL:
              sharkd_json_value_anyf("b", prefs_get_bool_value(pref, pref_current) ? "1" : "0");
              break;

          case PREF_STRING:
          case PREF_SAVE_FILENAME:
          case PREF_OPEN_FILENAME:
          case PREF_DIRNAME:
          case PREF_PASSWORD:
          case PREF_DISSECTOR:
              sharkd_json_value_string("s", prefs_get_string_value(pref, pref_current));
              break;

          case PREF_ENUM:
              {
                  const enum_val_t *enums;

                  sharkd_json_array_open("e");
                  for (enums = prefs_get_enumvals(pref); enums->name; enums++)
                  {
                      json_dumper_begin_object(&dumper);

                      sharkd_json_value_anyf("v", "%d", enums->value);

                      if (enums->value == prefs_get_enum_value(pref, pref_current))
                          sharkd_json_value_anyf("s", "1");

                      sharkd_json_value_string("d", enums->description);

                      json_dumper_end_object(&dumper);
                  }
                  sharkd_json_array_close();
                  break;
              }

          case PREF_RANGE:
          case PREF_DECODE_AS_RANGE:
              {
                  char *range_str = range_convert_range(NULL((void*)0), prefs_get_range_value_real(pref, pref_current));
                  sharkd_json_value_string("r", range_str);
                  wmem_free(NULL((void*)0), range_str);
                  break;
              }

          case PREF_UAT:
              {
                  uat_t *uat = prefs_get_uat_value(pref);
                  unsigned idx;

                  sharkd_json_array_open("t");
                  for (idx = 0; idx < uat->raw_data->len; idx++)
                  {
                      void *rec = UAT_INDEX_PTR(uat, idx)(uat->raw_data->data + (uat->record_size * (idx)));
                      unsigned colnum;

                      sharkd_json_array_open(NULL((void*)0));
                      for (colnum = 0; colnum < uat->ncols; colnum++)
                      {
                          char *str = uat_fld_tostr(rec, &(uat->fields[colnum]));

                          sharkd_json_value_string(NULL((void*)0), str);
                          g_free(str);
                      }

                      sharkd_json_array_close();
                  }

                  sharkd_json_array_close();
                  break;
              }

          case PREF_COLOR:
          case PREF_CUSTOM:
          case PREF_STATIC_TEXT:
              /* TODO */
              break;
      }
  }

5567#if 0
  sharkd_json_value_string("t", prefs_get_title(pref));
5569#endif

  sharkd_json_object_close();

  return 0; /* continue */
5574}

5576static unsigned
5577sharkd_session_process_dumpconf_mod_cb(module_t *module, void *d)
5578{
  struct sharkd_session_process_dumpconf_data *data = (struct sharkd_session_process_dumpconf_data *) d;

  data->module = module;
  prefs_pref_foreach(module, sharkd_session_process_dumpconf_cb, data);

  return 0;
5585}

5587/**
* sharkd_session_process_dumpconf()
*
* Process dumpconf request
*
* Input:
*   (o) pref - module, or preference, NULL for all
*
* Output object with attributes:
*   (o) prefs   - object with module preferences
*                  (m) [KEY] - preference name
*                  (o) u - preference value (for PREF_UINT)
*                  (o) ub - preference value suggested base for display (for PREF_UINT) and if different than 10
*                  (o) b - preference value (only for PREF_BOOL) (1 true, 0 false)
*                  (o) s - preference value (for PREF_STRING, PREF_SAVE_FILENAME, PREF_OPEN_FILENAME, PREF_DIRNAME, PREF_PASSWORD, PREF_DISSECTOR)
*                  (o) e - preference possible values (only for PREF_ENUM)
*                  (o) r - preference value (for PREF_RANGE, PREF_DECODE_AS_RANGE)
*                  (o) t - preference value (only for PREF_UAT)
*/
5606static void
5607sharkd_session_process_dumpconf(char *buf, const jsmntok_t *tokens, int count)
5608{
  const char *tok_pref = json_find_attr(buf, tokens, count, "pref");
  module_t *pref_mod;
  char *dot_sepa;

  if (!tok_pref)
  {
      struct sharkd_session_process_dumpconf_data data;

      data.module = NULL((void*)0);

      sharkd_json_result_prologue(rpcid);

      sharkd_json_object_open("prefs");
      prefs_modules_foreach(sharkd_session_process_dumpconf_mod_cb, &data);
      sharkd_json_object_close();

      sharkd_json_result_epilogue();
      return;
  }

  if ((dot_sepa = strchr(tok_pref, '.')))
  {
      pref_t *pref = NULL((void*)0);

      *dot_sepa = '\0'; /* XXX, C abuse: discarding-const */
      pref_mod = prefs_find_module(tok_pref);
      if (pref_mod)
          pref = prefs_find_preference(pref_mod, dot_sepa + 1);
      *dot_sepa = '.';

      if (pref)
      {
          struct sharkd_session_process_dumpconf_data data;

          data.module = pref_mod;

          sharkd_json_result_prologue(rpcid);

          sharkd_json_object_open("prefs");
          sharkd_session_process_dumpconf_cb(pref, &data);
          sharkd_json_object_close();

          sharkd_json_result_epilogue();
          return;
      }
      else
      {
          sharkd_json_error(
                  rpcid, -9001, NULL((void*)0),
                  "Invalid pref %s.", tok_pref
                  );
          return;
      }

  }

  pref_mod = prefs_find_module(tok_pref);
  if (pref_mod)
  {
      struct sharkd_session_process_dumpconf_data data;

      data.module = pref_mod;

      sharkd_json_result_prologue(rpcid);

      sharkd_json_object_open("prefs");
      prefs_pref_foreach(pref_mod, sharkd_session_process_dumpconf_cb, &data);
      sharkd_json_object_close();

      sharkd_json_result_epilogue();
  }
  else
  {
      sharkd_json_error(
              rpcid, -9002, NULL((void*)0),
              "Invalid pref %s.", tok_pref
              );
  }
5687}

5689struct sharkd_download_rtp
5690{
  rtpstream_id_t id;
  GSList *packets;
  double start_time;
5694};

5696static void
5697sharkd_rtp_download_free_items(void *ptr)
5698{
  rtp_packet_t *rtp_packet = (rtp_packet_t *) ptr;

  g_free(rtp_packet->info);
  g_free(rtp_packet->payload_data);
  g_free(rtp_packet);
5704}

5706static void
5707sharkd_rtp_download_decode(struct sharkd_download_rtp *req)
5708{
  /* based on RtpAudioStream::decode() 6e29d874f8b5e6ebc59f661a0bb0dab8e56f122a */
  /* TODO, for now only without silence (timing_mode_ = Uninterrupted) */

  static const int sample_bytes_ = sizeof(SAMPLE) / sizeof(char);

  uint32_t audio_out_rate_ = 0;
  struct _GHashTable *decoders_hash_ = rtp_decoder_hash_table_new();
  struct SpeexResamplerState_ *audio_resampler_ = NULL((void*)0);

  size_t resample_buff_len = 0x1000;
  SAMPLE *resample_buff = (SAMPLE *) g_malloc(resample_buff_len);
  spx_uint32_t cur_in_rate = 0;
  char *write_buff = NULL((void*)0);
  size_t write_bytes = 0;
  unsigned channels = 0;
  unsigned sample_rate = 0;

  GSList *l;

  for (l = req->packets; l; l = l->next)
  {
      rtp_packet_t *rtp_packet = (rtp_packet_t *) l->data;

      SAMPLE *decode_buff = NULL((void*)0);
      size_t decoded_bytes;

      decoded_bytes = decode_rtp_packet(rtp_packet, &decode_buff, decoders_hash_, &channels, &sample_rate);
      if (decoded_bytes == 0 || sample_rate == 0)
      {
          /* We didn't decode anything. Clean up and prep for the next packet. */
          g_free(decode_buff);
          continue;
      }

      if (audio_out_rate_ == 0)
      {
          uint32_t tmp32;
          uint16_t tmp16;
          char wav_hdr[44];

          /* First non-zero wins */
          audio_out_rate_ = sample_rate;

          RTP_STREAM_DEBUG("Audio sample rate is %u", audio_out_rate_);

          /* write WAVE header */
          memset(&wav_hdr, 0, sizeof(wav_hdr));
          memcpy(&wav_hdr[0], "RIFF", 4);
          memcpy(&wav_hdr[4], "\xFF\xFF\xFF\xFF", 4); /* XXX, unknown */
          memcpy(&wav_hdr[8], "WAVE", 4);

          memcpy(&wav_hdr[12], "fmt ", 4);
          memcpy(&wav_hdr[16], "\x10\x00\x00\x00", 4); /* PCM */
          memcpy(&wav_hdr[20], "\x01\x00", 2);         /* PCM */
          /* # channels */
          tmp16 = channels;
          memcpy(&wav_hdr[22], &tmp16, 2);
          /* sample rate */
          tmp32 = sample_rate;
          memcpy(&wav_hdr[24], &tmp32, 4);
          /* byte rate */
          tmp32 = sample_rate * channels * sample_bytes_;
          memcpy(&wav_hdr[28], &tmp32, 4);
          /* block align */
          tmp16 = channels * sample_bytes_;
          memcpy(&wav_hdr[32], &tmp16, 2);
          /* bits per sample */
          tmp16 = 8 * sample_bytes_;
          memcpy(&wav_hdr[34], &tmp16, 2);

          memcpy(&wav_hdr[36], "data", 4);
          memcpy(&wav_hdr[40], "\xFF\xFF\xFF\xFF", 4); /* XXX, unknown */

          json_dumper_write_base64(&dumper, wav_hdr, sizeof(wav_hdr));
      }

      // Write samples to our file.
      write_buff = (char *) decode_buff;
      write_bytes = decoded_bytes;

      if (audio_out_rate_ != sample_rate)
      {
          spx_uint32_t in_len, out_len;

          /* Resample the audio to match our previous output rate. */
          if (!audio_resampler_)
          {
              audio_resampler_ = speex_resampler_init(1, sample_rate, audio_out_rate_, 10, NULL((void*)0));
              speex_resampler_skip_zeros(audio_resampler_);
              RTP_STREAM_DEBUG("Started resampling from %u to (out) %u Hz.", sample_rate, audio_out_rate_);
          }
          else
          {
              spx_uint32_t audio_out_rate;
              speex_resampler_get_rate(audio_resampler_, &cur_in_rate, &audio_out_rate);

              if (sample_rate != cur_in_rate)
              {
                  speex_resampler_set_rate(audio_resampler_, sample_rate, audio_out_rate);
                  RTP_STREAM_DEBUG("Changed input rate from %u to %u Hz. Out is %u.", cur_in_rate, sample_rate, audio_out_rate_);
              }
          }
          in_len = (spx_uint32_t)rtp_packet->info->info_payload_len;
          out_len = (audio_out_rate_ * (spx_uint32_t)rtp_packet->info->info_payload_len / sample_rate) + (audio_out_rate_ % sample_rate != 0);
          if (out_len * sample_bytes_ > resample_buff_len)
          {
              while ((out_len * sample_bytes_ > resample_buff_len))
                  resample_buff_len *= 2;
              resample_buff = (SAMPLE *) g_realloc(resample_buff, resample_buff_len);
          }

          speex_resampler_process_int(audio_resampler_, 0, decode_buff, &in_len, resample_buff, &out_len);
          write_buff = (char *) resample_buff;
          write_bytes = out_len * sample_bytes_;
      }

      /* Write the decoded, possibly-resampled audio */
      json_dumper_write_base64(&dumper, write_buff, write_bytes);

      g_free(decode_buff);
  }

  g_free(resample_buff);
  g_hash_table_destroy(decoders_hash_);
5833}

5835static tap_packet_status
5836sharkd_session_packet_download_tap_rtp_cb(void *tapdata, packet_info *pinfo, epan_dissect_t *edt _U___attribute__((unused)), const void *data, tap_flags_t flags _U___attribute__((unused)))
5837{
  const struct _rtp_info *rtp_info = (const struct _rtp_info *) data;
  struct sharkd_download_rtp *req_rtp = (struct sharkd_download_rtp *) tapdata;

  /* do not consider RTP packets without a setup frame */
  if (rtp_info->info_setup_frame_num == 0)
      return TAP_PACKET_DONT_REDRAW;

  if (rtpstream_id_equal_pinfo_rtp_info(&req_rtp->id, pinfo, rtp_info))
  {
      rtp_packet_t *rtp_packet;

      rtp_packet = g_new0(rtp_packet_t, 1)((rtp_packet_t *) g_malloc0_n ((1), sizeof (rtp_packet_t)));
      rtp_packet->info = (struct _rtp_info *) g_memdup2(rtp_info, sizeof(struct _rtp_info));

      if (rtp_info->info_all_data_present && rtp_info->info_payload_len != 0)
          rtp_packet->payload_data = (uint8_t *) g_memdup2(&(rtp_info->info_data[rtp_info->info_payload_offset]), rtp_info->info_payload_len);

      if (!req_rtp->packets)
          req_rtp->start_time = nstime_to_sec(&pinfo->abs_ts);

      rtp_packet->frame_num = pinfo->num;
      rtp_packet->arrive_offset = nstime_to_sec(&pinfo->abs_ts) - req_rtp->start_time;

      /* XXX, O(n) optimize */
      req_rtp->packets = g_slist_append(req_rtp->packets, rtp_packet);
  }

  return TAP_PACKET_DONT_REDRAW;
5866}

5868static bool_Bool
5869sharkd_session_eo_retap_listener(const char *tap_type) {
  bool_Bool ok = true1;
  register_eo_t *eo = NULL((void*)0);
  GString *tap_error = NULL((void*)0);
  void *tap_data = NULL((void*)0);
  GFreeFunc tap_free = NULL((void*)0);

  // get <name> from eo:<name>, get_eo_by_name only needs the name (http etc.)
  eo = get_eo_by_name(tap_type + 3);
  if (!eo)
  {
      ok = false0;
      sharkd_json_error(
              rpcid, -11011, NULL((void*)0),
              "sharkd_session_eo_retap_listener() eo=%s not found", tap_type + 3
      );
  }

  if (ok)
  {
      tap_error = sharkd_session_eo_register_tap_listener(eo, tap_type, NULL((void*)0), NULL((void*)0), &tap_data, &tap_free);
      if (tap_error)
      {
          ok = false0;
          sharkd_json_error(
                  rpcid, -10002, NULL((void*)0),
                  "sharkd_session_eo_retap_listener() sharkd_session_eo_register_tap_listener error %s",
                  tap_error->str);
          g_string_free(tap_error, TRUE)(__builtin_constant_p ((!(0))) ? (((!(0))) ? (g_string_free) (
(tap_error), ((!(0)))) : g_string_free_and_steal (tap_error))
 : (g_string_free) ((tap_error), ((!(0)))));
      }
  }

  if (ok)
      sharkd_retap();

  if (!tap_error)
      remove_tap_listener(tap_data);

  if (tap_free)
      tap_free(tap_data);

  return ok;
5911}

5913/**
* sharkd_session_process_download()
*
* Process download request
*
* Input:
*   (m) token  - token to download
*
* Output object with attributes:
*   (o) file - suggested name of file
*   (o) mime - suggested content type
*   (o) data - payload base64 encoded
*/
5926static void
5927sharkd_session_process_download(char *buf, const jsmntok_t *tokens, int count)
5928{
  const char *tok_token      = json_find_attr(buf, tokens, count, "token");

  if (!tok_token)
  {
      sharkd_json_error(
          rpcid, -10005, NULL((void*)0),
          "missing token"
      );
      return;
  }

  if (!strncmp(tok_token, "eo:", 3))
  {
      // get eo:<name> from eo:<name>_<row>
      char *tap_type = g_strdup(tok_token)g_strdup_inline (tok_token);
      char *tmp = strrchr(tap_type, '_');
      if (tmp)
          *tmp = '\0';

      // if eo:<name> not in sharkd_eo_list, retap
      if (!sharkd_eo_object_list_get_entry_by_type(sharkd_eo_list, tap_type) &&
          !sharkd_session_eo_retap_listener(tap_type))
      {
          g_free(tap_type);
          // sharkd_json_error called in sharkd_session_eo_retap_listener
          return;
      }

      g_free(tap_type);

      struct sharkd_export_object_list *object_list;
      const export_object_entry_t *eo_entry = NULL((void*)0);

      for (object_list = sharkd_eo_list; object_list; object_list = object_list->next)
      {
          size_t eo_type_len = strlen(object_list->type);

          if (!strncmp(tok_token, object_list->type, eo_type_len) && tok_token[eo_type_len] == '_')
          {
              int row;

              if (sscanf(&tok_token[eo_type_len + 1], "%d", &row) != 1)
                  break;

              eo_entry = (export_object_entry_t *) g_slist_nth_data(object_list->entries, row);
              break;
          }
      }

      if (eo_entry)
      {
          const char *mime     = (eo_entry->content_type) ? eo_entry->content_type : "application/octet-stream";
          const char *filename = (eo_entry->filename) ? eo_entry->filename : tok_token;

          sharkd_json_result_prologue(rpcid);
          sharkd_json_value_string("file", filename);
          sharkd_json_value_string("mime", mime);
          sharkd_json_value_base64("data", eo_entry->payload_data, eo_entry->payload_len);
          sharkd_json_result_epilogue();
      }
      else
      {
          sharkd_json_result_prologue(rpcid);
          sharkd_json_result_epilogue();
      }
  }
  else if (!strcmp(tok_token, "ssl-secrets"))
  {
      size_t str_len;
      char *str = ssl_export_sessions(&str_len);

      if (str)
      {
          const char *mime     = "text/plain";
          const char *filename = "keylog.txt";

          sharkd_json_result_prologue(rpcid);
          sharkd_json_value_string("file", filename);
          sharkd_json_value_string("mime", mime);
          sharkd_json_value_base64("data", str, str_len);
          sharkd_json_result_epilogue();
      }
      g_free(str);
  }
  else if (!strncmp(tok_token, "rtp:", 4))
  {
      struct sharkd_download_rtp rtp_req;
      GString *tap_error;

      memset(&rtp_req, 0, sizeof(rtp_req));
      if (!sharkd_rtp_match_init(&rtp_req.id, tok_token + 4))
      {
          sharkd_json_error(
                  rpcid, -10001, NULL((void*)0),
                  "sharkd_session_process_download() rtp tokenizing error %s", tok_token
                  );
          return;
      }

      tap_error = register_tap_listener("rtp", &rtp_req, NULL((void*)0), 0, NULL((void*)0), sharkd_session_packet_download_tap_rtp_cb, NULL((void*)0), NULL((void*)0));
      if (tap_error)
      {
          sharkd_json_error(
                  rpcid, -10002, NULL((void*)0),
                  "sharkd_session_process_download() rtp error %s", tap_error->str
                  );
          g_string_free(tap_error, TRUE)(__builtin_constant_p ((!(0))) ? (((!(0))) ? (g_string_free) (
(tap_error), ((!(0)))) : g_string_free_and_steal (tap_error))
 : (g_string_free) ((tap_error), ((!(0)))));
          return;
      }

      sharkd_retap();
      remove_tap_listener(&rtp_req);

      if (rtp_req.packets)
      {
          const char *mime     = "audio/x-wav";
          const char *filename = tok_token;

          sharkd_json_result_prologue(rpcid);
          sharkd_json_value_string("file", filename);
          sharkd_json_value_string("mime", mime);

          json_dumper_set_member_name(&dumper, "data");
          json_dumper_begin_base64(&dumper);
          sharkd_rtp_download_decode(&rtp_req);
          json_dumper_end_base64(&dumper);

          sharkd_json_result_epilogue();

          g_slist_free_full(rtp_req.packets, sharkd_rtp_download_free_items);
      }
      else
      {
          sharkd_json_error(
              rpcid, -10003, NULL((void*)0),
              "no rtp data available"
          );
      }
  }
  else
  {
      sharkd_json_error(
          rpcid, -10004, NULL((void*)0),
          "unrecognized token"
      );
  }
6075}

6077static void
6078sharkd_session_process(char *buf, const jsmntok_t *tokens, int count)
6079{
  if (json_prep(buf, tokens, count))
  {
      /* don't need [0] token */
      tokens++;
      count--;

      const char* tok_method = json_find_attr(buf, tokens, count, "method");

      if (!tok_method) {
          sharkd_json_error(
                  rpcid, -32601, NULL((void*)0),
                  "No method found");
          return;
      }
      if (!strcmp(tok_method, "load"))
          sharkd_session_process_load(buf, tokens, count);
      else if (!strcmp(tok_method, "status"))
          sharkd_session_process_status();
      else if (!strcmp(tok_method, "analyse"))
          sharkd_session_process_analyse();
      else if (!strcmp(tok_method, "info"))
          sharkd_session_process_info();
      else if (!strcmp(tok_method, "fields"))
          sharkd_session_process_fields();
      else if (!strcmp(tok_method, "field"))
          sharkd_session_process_field(buf, tokens, count);
      else if (!strcmp(tok_method, "check"))
          sharkd_session_process_check(buf, tokens, count);
      else if (!strcmp(tok_method, "complete"))
          sharkd_session_process_complete(buf, tokens, count);
      else if (!strcmp(tok_method, "frames"))
          sharkd_session_process_frames(buf, tokens, count);
      else if (!strcmp(tok_method, "tap"))
          sharkd_session_process_tap(buf, tokens, count);
      else if (!strcmp(tok_method, "follow"))
          sharkd_session_process_follow(buf, tokens, count);
      else if (!strcmp(tok_method, "iograph"))
          sharkd_session_process_iograph(buf, tokens, count);
      else if (!strcmp(tok_method, "intervals"))
          sharkd_session_process_intervals(buf, tokens, count);
      else if (!strcmp(tok_method, "frame"))
          sharkd_session_process_frame(buf, tokens, count);
      else if (!strcmp(tok_method, "setcomment"))
          sharkd_session_process_setcomment(buf, tokens, count);
      else if (!strcmp(tok_method, "setconf"))
          sharkd_session_process_setconf(buf, tokens, count);
      else if (!strcmp(tok_method, "dumpconf"))
          sharkd_session_process_dumpconf(buf, tokens, count);
      else if (!strcmp(tok_method, "download"))
          sharkd_session_process_download(buf, tokens, count);
      else if (!strcmp(tok_method, "bye"))
      {
          sharkd_json_simple_ok(rpcid);
          exit(0);
      }
      else
      {
          sharkd_json_error(
                  rpcid, -32601, NULL((void*)0),
                  "The method \"%s\" is unknown", tok_method
                  );
      }
  }
6143}

6145int
6146sharkd_session_main(int mode_setting)
6147{
  char buf[8 * 1024];
  jsmntok_t *tokens = NULL((void*)0);
  int tokens_max = -1;

  mode = mode_setting;

  fprintf(stderrstderr, "Hello in child.\n");

  dumper.output_file = stdoutstdout;

  filter_table = g_hash_table_new_full(g_str_hash, g_str_equal, g_free, sharkd_session_filter_free);

6160#ifdef HAVE_MAXMINDDB1
  /* mmdbresolve was stopped before fork(), force starting it */
  uat_get_table_by_name("MaxMind Database Paths")->post_update_cb();
6163#endif

  set_resolution_synchrony(true1);

  while (fgets(buf, sizeof(buf), stdinstdin))
  {
      /* every command is line separated JSON */
      int ret;

      ret = json_parse(buf, NULL((void*)0), 0);
      if (ret <= 0)
      {
          sharkd_json_error(
                  rpcid, -32600, NULL((void*)0),
                  "Invalid JSON(1)"
                  );
          continue;
      }

      /* fprintf(stderr, "JSON: %d tokens\n", ret); */
      ret += 1;

      if (tokens == NULL((void*)0) || tokens_max < ret)
      {
          tokens_max = ret;
          tokens = (jsmntok_t *) g_realloc(tokens, sizeof(jsmntok_t) * tokens_max);
      }

      memset(tokens, 0, ret * sizeof(jsmntok_t));

      ret = json_parse(buf, tokens, ret);
      if (ret <= 0)
      {
          sharkd_json_error(
                  rpcid, -32600, NULL((void*)0),
                  "Invalid JSON(2)"
                  );
          continue;
      }

      host_name_lookup_process();

      sharkd_session_process(buf, tokens, ret);
  }

  g_hash_table_destroy(filter_table);
  g_free(tokens);

  return 0;
6212}

←

/builds/wireshark/wireshark/ui/io_graph_item.h

1/** @file
*
* Definitions and functions for I/O graph items
*
* Copied from gtk/io_stat.c, (c) 2002 Ronnie Sahlberg
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <[email protected]>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/

14#ifndef __IO_GRAPH_ITEM_H__
15#define __IO_GRAPH_ITEM_H__

17#include "cfile.h"
18#include <wsutil/ws_assert.h>

20#include <epan/epan_dissect.h>

22#ifdef __cplusplus
23extern "C" {
24#endif /* __cplusplus */

26typedef enum {
  IOG_ITEM_UNIT_FIRST,
  IOG_ITEM_UNIT_PACKETS = IOG_ITEM_UNIT_FIRST,
  IOG_ITEM_UNIT_BYTES,
  IOG_ITEM_UNIT_BITS,
  IOG_ITEM_UNIT_CALC_SUM,
  IOG_ITEM_UNIT_CALC_FRAMES,
  IOG_ITEM_UNIT_CALC_FIELDS,
  IOG_ITEM_UNIT_CALC_MAX,
  IOG_ITEM_UNIT_CALC_MIN,
  IOG_ITEM_UNIT_CALC_AVERAGE,
  IOG_ITEM_UNIT_CALC_THROUGHPUT,
  IOG_ITEM_UNIT_CALC_LOAD,
  IOG_ITEM_UNIT_LAST = IOG_ITEM_UNIT_CALC_LOAD,
  NUM_IOG_ITEM_UNITS
41} io_graph_item_unit_t;

43typedef struct _io_graph_item_t {
  uint32_t frames;            /* always calculated, will hold number of frames*/
  uint64_t bytes;             /* always calculated, will hold number of bytes*/
  uint64_t fields;
  /* We use a double for totals because of overflow. For min and max,
   * unsigned 64 bit integers larger than 2^53 cannot all be represented
   * in a double, and this is useful for determining the frame with the
   * min or max value, even though for plotting it will be converted to a
   * double.
   */
  union {
      nstime_t time_max;
      double   double_max;
      int64_t  int_max;
      uint64_t uint_max;
  };
  union {
      nstime_t time_min;
      double   double_min;
      int64_t  int_min;
      uint64_t uint_min;
  };
  union {
      nstime_t time_tot;
      double   double_tot;
  };
  uint32_t  first_frame_in_invl;
  uint32_t  min_frame_in_invl;
  uint32_t  max_frame_in_invl;
  uint32_t  last_frame_in_invl;
73} io_graph_item_t;

75/** Reset (zero) an io_graph_item_t.
*
* @param items [in,out] Array containing the items to reset.
* @param count [in] The number of items in the array.
*/
80static inline void
81reset_io_graph_items(io_graph_item_t *items, size_t count, int hf_index _U___attribute__((unused))) {
  io_graph_item_t *item;
  size_t i;

  for (i = 0; i < count; i++) {
12
←
Assuming 'i' is >= 'count'→
13
←
Loop condition is false. Execution continues on line 4607→
      item = &items[i];

      item->frames     = 0;
      item->bytes      = 0;
      item->fields     = 0;
      item->first_frame_in_invl = 0;
      item->min_frame_in_invl = 0;
      item->max_frame_in_invl = 0;
      item->last_frame_in_invl  = 0;

      nstime_set_zero(&item->time_max);
      nstime_set_zero(&item->time_min);
      nstime_set_zero(&item->time_tot);

100#if 0
      /* XXX - On C, type punning is explicitly allowed since C99 so
       * setting the nstime_t values to 0 is always sufficient.
       * On C++ that appears technically to be undefined behavior (though
       * I don't know of any compilers for which it doesn't work and I
       * can't get UBSAN to complain about it) and this would be safer.
       */
      if (hf_index > 0) {

          switch (proto_registrar_get_ftype(hf_index)) {

          case FT_INT8:
          case FT_INT16:
          case FT_INT24:
          case FT_INT32:
          case FT_INT40:
          case FT_INT48:
          case FT_INT56:
          case FT_INT64:
              item->int_max = 0;
              item->int_min = 0;
              item->double_tot = 0;
              break;

          case FT_UINT8:
          case FT_UINT16:
          case FT_UINT24:
          case FT_UINT32:
          case FT_UINT40:
          case FT_UINT48:
          case FT_UINT56:
          case FT_UINT64:
              item->uint_max = 0;
              item->uint_min = 0;
              item->double_tot = 0;
              break;

          case FT_DOUBLE:
          case FT_FLOAT:
              item->double_max = 0;
              item->double_min = 0;
              item->double_tot = 0;
              break;

          case FT_RELATIVE_TIME:
              nstime_set_zero(&item->time_max);
              nstime_set_zero(&item->time_min);
              nstime_set_zero(&item->time_tot);
              break;

          default:
              break;
          }
      }
154#endif
  }
156}

158/** Get the interval (array index) for a packet
*
* It is up to the caller to determine if the return value is valid.
*
* @param [in] pinfo Packet of interest.
* @param [in] interval Time interval in microseconds
* @return Array index on success, -1 on failure.
*
* @note pinfo->rel_ts, and hence the index, is not affected by ignoring
* frames.
*/
169int64_t get_io_graph_index(packet_info *pinfo, int interval);

171/** Check field and item unit compatibility
*
* @param field_name [in] Header field name to check
* @param hf_index [out] Assigned the header field index corresponding to field_name if valid.
*                       Can be NULL.
* @param item_unit [in] The type of unit to calculate. From IOG_ITEM_UNITS.
* @return NULL if compatible, otherwise an error string. The string must
*         be freed by the caller.
*/
180GString *check_field_unit(const char *field_name, int *hf_index, io_graph_item_unit_t item_unit);

182/** Get the value at the given interval (idx) for the current value unit.
*
* @param items [in] Array containing the item to get.
* @param val_units [in] The type of unit to calculate. From IOG_ITEM_UNITS.
* @param idx [in] Index of the item to get.
* @param hf_index [in] Header field index for advanced statistics.
* @param cap_file [in] Capture file.
* @param interval [in] Timing interval in ms.
* @param cur_idx [in] Current index.
* @param asAOT [in] Interpret when possible the value as an Average Over Time.
*/
193double get_io_graph_item(const io_graph_item_t *items, io_graph_item_unit_t val_units, int idx, int hf_index, const capture_file *cap_file, int interval, int cur_idx, bool_Bool asAOT);

195/** Update the values of an io_graph_item_t.
*
* Frame and byte counts are always calculated. If edt is non-NULL advanced
* statistics are calculated using hfindex.
*
* @param items [in,out] Array containing the item to update.
* @param idx [in] Index of the item to update.
* @param pinfo [in] Packet containing update information.
* @param edt [in] Dissection information for advanced statistics. May be NULL.
* @param hf_index [in] Header field index for advanced statistics.
* @param item_unit [in] The type of unit to calculate. From IOG_ITEM_UNITS.
* @param interval [in] Timing interval in μs.
* @return true if the update was successful, otherwise false.
*/
209static inline bool_Bool
210update_io_graph_item(io_graph_item_t *items, int idx, packet_info *pinfo, epan_dissect_t *edt, int hf_index, int item_unit, uint32_t interval) {
  io_graph_item_t *item = &items[idx];

  /* Set the first and last frame num in current interval matching the target field+filter  */
  if (item->first_frame_in_invl == 0) {
16
←
The left operand of '==' is a garbage value
      item->first_frame_in_invl = pinfo->num;
  }
  item->last_frame_in_invl = pinfo->num;

  if (edt && hf_index >= 0) {
      GPtrArray *gp;
      unsigned i;

      gp = proto_get_finfo_ptr_array(edt->tree, hf_index);
      if (!gp) {
          return false0;
      }

      /* Update the appropriate counters. If fields == 0, this is the first seen
       *  value so set any min/max values accordingly. */
      for (i=0; i < gp->len; i++) {
          int64_t new_int64;
          uint64_t new_uint64;
          float new_float;
          double new_double;
          const nstime_t *new_time;

          switch (proto_registrar_get_ftype(hf_index)) {
          case FT_UINT8:
          case FT_UINT16:
          case FT_UINT24:
          case FT_UINT32:
              new_uint64 = fvalue_get_uinteger(((field_info *)gp->pdata[i])->value);

              if ((new_uint64 > item->uint_max) || (item->fields == 0)) {
                  item->uint_max = new_uint64;
                  item->max_frame_in_invl = pinfo->num;
              }
              if ((new_uint64 < item->uint_min) || (item->fields == 0)) {
                  item->uint_min = new_uint64;
                  item->min_frame_in_invl = pinfo->num;
              }
              item->double_tot += (double)new_uint64;
              item->fields++;
              break;
          case FT_INT8:
          case FT_INT16:
          case FT_INT24:
          case FT_INT32:
              new_int64 = fvalue_get_sinteger(((field_info *)gp->pdata[i])->value);
              if ((new_int64 > item->int_max) || (item->fields == 0)) {
                  item->int_max = new_int64;
                  item->max_frame_in_invl = pinfo->num;
              }
              if ((new_int64 < item->int_min) || (item->fields == 0)) {
                  item->int_min = new_int64;
                  item->min_frame_in_invl = pinfo->num;
              }
              item->double_tot += (double)new_int64;
              item->fields++;
              break;
          case FT_UINT40:
          case FT_UINT48:
          case FT_UINT56:
          case FT_UINT64:
              new_uint64 = fvalue_get_uinteger64(((field_info *)gp->pdata[i])->value);
              if ((new_uint64 > item->uint_max) || (item->fields == 0)) {
                  item->uint_max = new_uint64;
                  item->max_frame_in_invl = pinfo->num;
              }
              if ((new_uint64 < item->uint_min) || (item->fields == 0)) {
                  item->uint_min = new_uint64;
                  item->min_frame_in_invl = pinfo->num;
              }
              item->double_tot += (double)new_uint64;
              item->fields++;
              break;
          case FT_INT40:
          case FT_INT48:
          case FT_INT56:
          case FT_INT64:
              new_int64 = fvalue_get_sinteger64(((field_info *)gp->pdata[i])->value);
              if ((new_int64 > item->int_max) || (item->fields == 0)) {
                  item->int_max = new_int64;
                  item->max_frame_in_invl = pinfo->num;
              }
              if ((new_int64 < item->int_min) || (item->fields == 0)) {
                  item->int_min = new_int64;
                  item->min_frame_in_invl = pinfo->num;
              }
              item->double_tot += (double)new_int64;
              item->fields++;
              break;
          case FT_FLOAT:
              new_float = (float)fvalue_get_floating(((field_info *)gp->pdata[i])->value);
              if ((new_float > item->double_max) || (item->fields == 0)) {
                  item->double_max = new_float;
                  item->max_frame_in_invl = pinfo->num;
              }
              if ((new_float < item->double_min) || (item->fields == 0)) {
                  item->double_min = new_float;
                  item->min_frame_in_invl = pinfo->num;
              }
              item->double_tot += new_float;
              item->fields++;
              break;
          case FT_DOUBLE:
              new_double = fvalue_get_floating(((field_info *)gp->pdata[i])->value);
              if ((new_double > item->double_max) || (item->fields == 0)) {
                  item->double_max = new_double;
                  item->max_frame_in_invl = pinfo->num;
              }
              if ((new_double < item->double_min) || (item->fields == 0)) {
                  item->double_min = new_double;
                  item->min_frame_in_invl = pinfo->num;
              }
              item->double_tot += new_double;
              item->fields++;
              break;
          case FT_RELATIVE_TIME:
              new_time = fvalue_get_time(((field_info *)gp->pdata[i])->value);

              switch (item_unit) {
              case IOG_ITEM_UNIT_CALC_LOAD:
              {
                  uint64_t t, pt; /* time in us */
                  int j;
                  /*
                   * Add the time this call spanned each interval according to
                   * its contribution to that interval.
                   * If the call time is negative (unlikely, requires both an
                   * out of order capture file plus retransmission), ignore.
                   */
                  const nstime_t time_zero = NSTIME_INIT_ZERO{0, 0};
                  if (nstime_cmp(new_time, &time_zero) < 0) {
                      break;
                  }
                  t = new_time->secs;
                  t = t * 1000000 + new_time->nsecs / 1000;
                  j = idx;
                  /*
                   * Handle current interval
                   * This cannot be negative, because get_io_graph_index
                   * returns an invalid interval if so.
                   */
                  pt = pinfo->rel_ts.secs * 1000000 + pinfo->rel_ts.nsecs / 1000;
                  pt = pt % interval;
                  if (pt > t) {
                      pt = t;
                  }
                  while (t) {
                      io_graph_item_t *load_item;

                      load_item = &items[j];
                      load_item->time_tot.nsecs += (int) (pt * 1000);
                      if (load_item->time_tot.nsecs > 1000000000) {
                          load_item->time_tot.secs++;
                          load_item->time_tot.nsecs -= 1000000000;
                      }
                      load_item->fields++;

                      if (j == 0) {
                          break;
                      }
                      j--;
                      t -= pt;
                      if (t > (uint64_t) interval) {
                          pt = (uint64_t) interval;
                      } else {
                          pt = t;
                      }
                  }
                  break;
              }
              default:
                  if ( (nstime_cmp(new_time, &item->time_max) > 0)
                       || (item->fields == 0)) {
                      item->time_max = *new_time;
                      item->max_frame_in_invl = pinfo->num;
                  }
                  if ( (nstime_cmp(new_time, &item->time_min) < 0)
                       || (item->fields == 0)) {
                      item->time_min = *new_time;
                      item->min_frame_in_invl = pinfo->num;
                  }
                  nstime_add(&item->time_tot, new_time)nstime_sum(&item->time_tot, &item->time_tot, new_time
);
                  item->fields++;
              }
              break;
          default:
              if ((item_unit == IOG_ITEM_UNIT_CALC_FRAMES) ||
                  (item_unit == IOG_ITEM_UNIT_CALC_FIELDS)) {
                  /*
                   * It's not an integeresque type, but
                   * all we want to do is count it, so
                   * that's all right.
                   */
                  item->fields++;
              }
              else {
                  /*
                   * "Can't happen"; see the "check that the
                   * type is compatible" check in
                   * filter_callback().
                   */
                  ws_assert_not_reached()ws_log_fatal_full("", LOG_LEVEL_ERROR, "ui/io_graph_item.h", 415
, __func__, "assertion \"not reached\" failed");
              }
              break;
          }
      }
  }

  item->frames++;
  item->bytes += pinfo->fd->pkt_len;

  return true1;
426}


429#ifdef __cplusplus
430}
431#endif /* __cplusplus */

433#endif /* __IO_GRAPH_ITEM_H__ */