C:/work/RevealedSystems/EyeSpy-RS/eyespy/src/swig/extendedTCPTableLib/ExtendedXportTable.cxx File Reference

#include "Winsock2.h"
#include "Iphlpapi.h"
#include <stdio.h>
#include <tchar.h>
#include <psapi.h>

Include dependency graph for ExtendedXportTable.cxx:

Go to the source code of this file.

Classes
struct	V4Table
Defines
#define	MALLOC(x)   HeapAlloc(GetProcessHeap(), 0, (x))
#define	FREE(x)   HeapFree(GetProcessHeap(), 0, (x))
Functions
void	clearERROR_MESSAGE ()
bool	tableArrayOutOfRange (unsigned int idx)
bool	indexOutOfRange (unsigned int idx)
void	populateTCPV4Table ()
void	populateUDPV4Table ()
BOOL	GetProcessName (DWORD processID, TCHAR *szProcessName)
void	updateV4Tables ()
unsigned int	getV4TableSize ()
unsigned int	getV4Pid (unsigned int idx) throw (const char *)
char *	getV4ProcessName (unsigned int idx) throw (const char *)
unsigned int	getV4SrcPort (unsigned int idx) throw (const char *)
unsigned int	getV4State (unsigned int idx) throw (const char *)
char *	getV4Transport (unsigned int idx) throw (const char *)
Variables
char	ERROR_MESSAGE [4096]
const unsigned int	maxSize = 10000
unsigned int	tableSize
V4Table	tableArray [maxSize]

---

Define Documentation

#define FREE

(

x

)

HeapFree(GetProcessHeap(), 0, (x))

Definition at line 26 of file ExtendedXportTable.cxx.

Referenced by populateTCPV4Table(), and populateUDPV4Table().

#define MALLOC

(

x

)

HeapAlloc(GetProcessHeap(), 0, (x))

Definition at line 25 of file ExtendedXportTable.cxx.

Referenced by populateTCPV4Table(), and populateUDPV4Table().

---

Function Documentation

void clearERROR_MESSAGE

(

)

Definition at line 287 of file ExtendedXportTable.cxx.

References ERROR_MESSAGE.

Referenced by getV4Pid(), getV4ProcessName(), getV4SrcPort(), getV4State(), getV4Transport(), populateTCPV4Table(), and populateUDPV4Table().

{
        //Nulls string may cause problems back in Pythonland
        strcpy(ERROR_MESSAGE, "NOERROR");
}

Here is the caller graph for this function:

BOOL GetProcessName	(	DWORD	processID,
		TCHAR *	szProcessName
	)

Definition at line 318 of file ExtendedXportTable.cxx.

Referenced by populateTCPV4Table(), and populateUDPV4Table().

{
 
    BOOL bRC = FALSE;
 
    // Get a handle to the process.
 
    HANDLE hProcess = OpenProcess( PROCESS_QUERY_INFORMATION |
                                   PROCESS_VM_READ,
                                   FALSE, processID );
 
    // Get the process name.
 
    if (NULL != hProcess )
    {
        HMODULE hMod;
        DWORD cbNeeded;
 
        if ( EnumProcessModules( hProcess, &hMod, sizeof(hMod),
             &cbNeeded) )
        {
            GetModuleBaseName( hProcess, hMod, szProcessName,
                               MAX_PATH );
 
            bRC = TRUE;
        }
                else
                {
                        strcpy(szProcessName, "UNKNOWN");
                }
    }
        else
        {
                strcpy(szProcessName, "UNKNOWN");
        }
 
    CloseHandle( hProcess );
 
    return bRC;
}

Here is the caller graph for this function:

unsigned int getV4Pid

(

unsigned int

idx

)

throw (const char *)

Definition at line 66 of file ExtendedXportTable.cxx.

References clearERROR_MESSAGE(), ERROR_MESSAGE, indexOutOfRange(), V4Table.Pid, and tableArrayOutOfRange().

{
        clearERROR_MESSAGE();

        if (tableArrayOutOfRange(idx) || indexOutOfRange(idx)) throw ERROR_MESSAGE;

        clearERROR_MESSAGE();

        return tableArray[idx].Pid;
                
}

Here is the call graph for this function:

char* getV4ProcessName

(

unsigned int

idx

)

throw (const char *)

Definition at line 78 of file ExtendedXportTable.cxx.

References clearERROR_MESSAGE(), ERROR_MESSAGE, indexOutOfRange(), V4Table.processName, and tableArrayOutOfRange().

{
        clearERROR_MESSAGE();

        if (tableArrayOutOfRange(idx) || indexOutOfRange(idx)) throw ERROR_MESSAGE;

        clearERROR_MESSAGE();

        return tableArray[idx].processName;
                
}

Here is the call graph for this function:

unsigned int getV4SrcPort

(

unsigned int

idx

)

throw (const char *)

Definition at line 91 of file ExtendedXportTable.cxx.

References clearERROR_MESSAGE(), ERROR_MESSAGE, indexOutOfRange(), V4Table.srcPort, and tableArrayOutOfRange().

{
        clearERROR_MESSAGE();

        if (tableArrayOutOfRange(idx) || indexOutOfRange(idx)) throw ERROR_MESSAGE;

        clearERROR_MESSAGE();

        return tableArray[idx].srcPort; 
}

Here is the call graph for this function:

unsigned int getV4State

(

unsigned int

idx

)

throw (const char *)

Definition at line 103 of file ExtendedXportTable.cxx.

References clearERROR_MESSAGE(), ERROR_MESSAGE, indexOutOfRange(), V4Table.state, and tableArrayOutOfRange().

{
        clearERROR_MESSAGE();

        if (tableArrayOutOfRange(idx) || indexOutOfRange(idx)) throw ERROR_MESSAGE;

        clearERROR_MESSAGE();

        return tableArray[idx].state;   
}

Here is the call graph for this function:

unsigned int getV4TableSize

(

)

Definition at line 63 of file ExtendedXportTable.cxx.

References tableSize.

{return tableSize;}

char* getV4Transport

(

unsigned int

idx

)

throw (const char *)

Definition at line 114 of file ExtendedXportTable.cxx.

References clearERROR_MESSAGE(), ERROR_MESSAGE, indexOutOfRange(), tableArrayOutOfRange(), and V4Table.transport.

{
        clearERROR_MESSAGE();

        if (tableArrayOutOfRange(idx) || indexOutOfRange(idx)) throw ERROR_MESSAGE;

        clearERROR_MESSAGE();

        return tableArray[idx].transport;       
}

Here is the call graph for this function:

bool indexOutOfRange

(

unsigned int

idx

)

Definition at line 304 of file ExtendedXportTable.cxx.

References ERROR_MESSAGE, and tableSize.

Referenced by getV4Pid(), getV4ProcessName(), getV4SrcPort(), getV4State(), and getV4Transport().

{
        if (idx >= tableSize)
        {
                sprintf(ERROR_MESSAGE, "Index out of Range: Index:%d, Current Table Size:%d", idx, tableSize);
                return true;
        }

        return false;
}

Here is the caller graph for this function:

void populateTCPV4Table

(

)

Definition at line 142 of file ExtendedXportTable.cxx.

References clearERROR_MESSAGE(), ERROR_MESSAGE, FREE, GetProcessName(), MALLOC, V4Table.Pid, V4Table.srcPort, V4Table.state, and tableSize.

Referenced by updateV4Tables().

{       
        clearERROR_MESSAGE();   

        MIB_TCPTABLE_OWNER_PID * pTcpTable;

        DWORD dwSize = 0;
        DWORD dwRetVal = 0;     

        pTcpTable = ( MIB_TCPTABLE_OWNER_PID *) MALLOC(sizeof ( MIB_TCPTABLE_OWNER_PID));

        if (pTcpTable == NULL) 
        {
                strcpy(ERROR_MESSAGE, "Could not allocate memory for TCP Table");
                throw ERROR_MESSAGE;
        }

        dwSize = sizeof (MIB_TCPTABLE_OWNER_PID);

        if ((dwRetVal = GetExtendedTcpTable (pTcpTable, &dwSize, TRUE, AF_INET, TCP_TABLE_OWNER_PID_ALL , 0)) == ERROR_INSUFFICIENT_BUFFER) 
        {
                FREE(pTcpTable);
                pTcpTable = (MIB_TCPTABLE_OWNER_PID *) MALLOC(dwSize);
    
                if (pTcpTable == NULL) 
                {            
                        strcpy(ERROR_MESSAGE, "Could not allocate memory for TCP Table");
                        throw ERROR_MESSAGE;

                        return;
                }
        }

        // Make a second call to GetTcpTable to get
        // the actual data we require

        if ((dwRetVal = GetExtendedTcpTable (pTcpTable, &dwSize, TRUE, AF_INET, TCP_TABLE_OWNER_PID_ALL , 0)) == NO_ERROR)
        {
                //
        }
        else
        {
                strcpy(ERROR_MESSAGE, "Could not allocate memory for TCP Table");
                FREE(pTcpTable);

                throw ERROR_MESSAGE;
        }

        char processName[1024];


        for (int i = 0; i < pTcpTable->dwNumEntries; i++)
        {
                GetProcessName(pTcpTable->table[i].dwOwningPid, processName);                           

                //getTCPProcName(&pTcpTable->table[i], processName, processPath);


                tableArray[tableSize].Pid = pTcpTable->table[i].dwOwningPid;
                strcpy(tableArray[i].processName, processName);
                tableArray[tableSize].srcPort = ntohs(pTcpTable->table[i].dwLocalPort);
                strcpy(tableArray[tableSize].transport, "TCP");
                tableArray[tableSize].state = pTcpTable->table[i].dwState;

                tableSize ++;
        }

        FREE(pTcpTable);
}

Here is the call graph for this function:

Here is the caller graph for this function:

void populateUDPV4Table

(

)

Definition at line 216 of file ExtendedXportTable.cxx.

References clearERROR_MESSAGE(), ERROR_MESSAGE, FREE, GetProcessName(), MALLOC, V4Table.Pid, V4Table.srcPort, V4Table.state, and tableSize.

Referenced by updateV4Tables().

{       
        clearERROR_MESSAGE();

        MIB_UDPTABLE_OWNER_PID* pUDPTable;

        DWORD dwSize = 0;
        DWORD dwRetVal = 0;     

        pUDPTable = ( MIB_UDPTABLE_OWNER_PID  *) MALLOC(sizeof ( MIB_UDPTABLE_OWNER_PID ));

        if (pUDPTable == NULL) 
        {               
                strcpy(ERROR_MESSAGE, "Error allocating UDP table memory");
        throw ERROR_MESSAGE;
        }

        dwSize = sizeof (MIB_UDPTABLE_OWNER_PID);

        if ((dwRetVal = GetExtendedUdpTable (pUDPTable, &dwSize, TRUE, AF_INET,  UDP_TABLE_OWNER_PID, 0)) == ERROR_INSUFFICIENT_BUFFER) 
        {
                FREE(pUDPTable);
                pUDPTable = (MIB_UDPTABLE_OWNER_PID *) MALLOC(dwSize);
    
                if (pUDPTable == NULL) 
                {            
                        strcpy(ERROR_MESSAGE, "Error allocating UDP table memory");
                        throw ERROR_MESSAGE;
                }
        }


        // Make a second call to GetTcpTable to get
        // the actual data we require

        if ((dwRetVal = GetExtendedUdpTable (pUDPTable, &dwSize, TRUE, AF_INET, UDP_TABLE_OWNER_PID, 0)) == NO_ERROR)
        {
                //
        }
        else
        {
                strcpy(ERROR_MESSAGE, "Error allocating UDP table memory");
                FREE(pUDPTable);

        throw ERROR_MESSAGE;
        }

        char procName[1024];

        for (int i = 0; i < pUDPTable->dwNumEntries; i++)
        {
                GetProcessName(pUDPTable->table[i].dwOwningPid, procName);              
                strcpy(tableArray[tableSize].processName, procName);

                tableArray[tableSize].Pid = pUDPTable->table[i].dwOwningPid;            
                tableArray[tableSize].srcPort =  ntohs(pUDPTable->table[i].dwLocalPort);
                tableArray[tableSize].state = -1;
                strcpy(tableArray[tableSize].transport,  "UDP");

                tableSize++;
        }

        FREE(pUDPTable);

}

Here is the call graph for this function:

Here is the caller graph for this function:

bool tableArrayOutOfRange

(

unsigned int

idx

)

Definition at line 293 of file ExtendedXportTable.cxx.

References ERROR_MESSAGE, and maxSize.

Referenced by getV4Pid(), getV4ProcessName(), getV4SrcPort(), getV4State(), and getV4Transport().

{
        if (idx >= maxSize)
        {
                sprintf(ERROR_MESSAGE, "Index exceeded size of table: Index:%d, Max Table Size:%d", idx, maxSize);
                return true;
        }

        return false;
}

Here is the caller graph for this function:

void updateV4Tables

(

)

Definition at line 130 of file ExtendedXportTable.cxx.

References populateTCPV4Table(), populateUDPV4Table(), and tableSize.

{
        tableSize = 0;

        // initialize the table
        memset(tableArray, 0, sizeof(tableArray) );

        populateTCPV4Table();
        populateUDPV4Table();   
}

Here is the call graph for this function:

---

Variable Documentation

char ERROR_MESSAGE[4096]

Definition at line 39 of file ExtendedXportTable.cxx.

Referenced by clearERROR_MESSAGE(), getV4Pid(), getV4ProcessName(), getV4SrcPort(), getV4State(), getV4Transport(), indexOutOfRange(), populateTCPV4Table(), populateUDPV4Table(), and tableArrayOutOfRange().

const unsigned int maxSize = 10000

Definition at line 40 of file ExtendedXportTable.cxx.

Referenced by tableArrayOutOfRange().

V4Table tableArray[maxSize]

Definition at line 55 of file ExtendedXportTable.cxx.

unsigned int tableSize

Definition at line 41 of file ExtendedXportTable.cxx.

Referenced by getV4TableSize(), indexOutOfRange(), populateTCPV4Table(), populateUDPV4Table(), and updateV4Tables().