1 /*
2 * Copyright (c) 2002 - 2003
3 * NetGroup, Politecnico di Torino (Italy)
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions
8 * are met:
9 *
10 * 1. Redistributions of source code must retain the above copyright
11 * notice, this list of conditions and the following disclaimer.
12 * 2. Redistributions in binary form must reproduce the above copyright
13 * notice, this list of conditions and the following disclaimer in the
14 * documentation and/or other materials provided with the distribution.
15 * 3. Neither the name of the Politecnico di Torino nor the names of its
16 * contributors may be used to endorse or promote products derived from
17 * this software without specific prior written permission.
18 *
19 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
20 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
21 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
22 * A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
23 * OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
24 * SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
25 * LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
26 * DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
27 * THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
28 * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
29 * OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
30 *
31 */
32
33
34 #include "rpcapd.h"
35 #include <pcap.h> // for PCAP_ERRBUF_SIZE
36 #include "fmtutils.h"
37 #include "portability.h"
38 #include "fileconf.h"
39 #include "log.h"
40
41 #include "win32-svc.h" // for Win32 service stuff
42
43 static SERVICE_STATUS_HANDLE service_status_handle;
44 static SERVICE_STATUS service_status;
45
46 static void WINAPI svc_main(DWORD argc, char **argv);
47 static void WINAPI svc_control_handler(DWORD Opcode);
48 static void update_svc_status(DWORD state, DWORD progress_indicator);
49
svc_start(void)50 BOOL svc_start(void)
51 {
52 BOOL rc;
53 SERVICE_TABLE_ENTRY ste[] =
54 {
55 { PROGRAM_NAME, svc_main },
56 { NULL, NULL }
57 };
58 char string[PCAP_ERRBUF_SIZE];
59
60 // This call is blocking. A new thread is created which will launch
61 // the svc_main() function
62 if ((rc = StartServiceCtrlDispatcher(ste)) == 0) {
63 pcapint_fmt_errmsg_for_win32_err(string, sizeof (string),
64 GetLastError(), "StartServiceCtrlDispatcher() failed");
65 rpcapd_log(LOGPRIO_ERROR, "%s", string);
66 }
67
68 return rc; // FALSE if this is not started as a service
69 }
70
71 static void WINAPI
svc_control_handler(DWORD Opcode)72 svc_control_handler(DWORD Opcode)
73 {
74 switch(Opcode)
75 {
76 case SERVICE_CONTROL_STOP:
77 //
78 // XXX - is this sufficient to clean up the service?
79 // To be really honest, only the main socket and
80 // such these stuffs are cleared; however the threads
81 // that are running are not stopped.
82 // This can be seen by placing a breakpoint at the
83 // end of svc_main(), in which you will see that is
84 // never reached. However, as soon as you set the
85 // service status to "stopped", the
86 // StartServiceCtrlDispatcher() returns and the main
87 // thread ends. Then, Win32 has a good automatic
88 // cleanup, so that all the threads which are still
89 // running are stopped when the main thread ends.
90 //
91 send_shutdown_notification();
92
93 update_svc_status(SERVICE_STOP_PENDING, 0);
94 break;
95
96 /*
97 Pause and Continue have an usual meaning and they are used just to be able
98 to change the running parameters at run-time. In other words, they act
99 like the SIGHUP signal on UNIX. All the running threads continue to run and
100 they are not paused at all.
101 Particularly,
102 - PAUSE does nothing
103 - CONTINUE re-reads the configuration file and creates the new threads that
104 can be needed according to the new configuration.
105 */
106 case SERVICE_CONTROL_PAUSE:
107 update_svc_status(SERVICE_PAUSED, 0);
108 break;
109
110 case SERVICE_CONTROL_CONTINUE:
111 update_svc_status(SERVICE_RUNNING, 0);
112 //
113 // Tell the main loop to re-read the configuration.
114 //
115 send_reread_configuration_notification();
116 break;
117
118 case SERVICE_CONTROL_INTERROGATE:
119 // Fall through to send current status.
120 // WARNING: not implemented
121 update_svc_status(SERVICE_RUNNING, 0);
122 MessageBox(NULL, "Not implemented", "warning", MB_OK);
123 break;
124
125 case SERVICE_CONTROL_PARAMCHANGE:
126 //
127 // Tell the main loop to re-read the configuration.
128 //
129 send_reread_configuration_notification();
130 break;
131 }
132
133 // Send current status.
134 return;
135 }
136
137 static void WINAPI
svc_main(DWORD argc,char ** argv)138 svc_main(DWORD argc, char **argv)
139 {
140 service_status_handle = RegisterServiceCtrlHandler(PROGRAM_NAME, svc_control_handler);
141
142 if (!service_status_handle)
143 return;
144
145 service_status.dwServiceType = SERVICE_WIN32_OWN_PROCESS | SERVICE_INTERACTIVE_PROCESS;
146 service_status.dwControlsAccepted = SERVICE_ACCEPT_STOP | SERVICE_ACCEPT_PAUSE_CONTINUE | SERVICE_ACCEPT_PARAMCHANGE;
147 // | SERVICE_ACCEPT_SHUTDOWN ;
148 update_svc_status(SERVICE_RUNNING, 0);
149
150 //
151 // Service requests until we're told to stop.
152 //
153 main_startup();
154
155 //
156 // It returned, so we were told to stop.
157 //
158 update_svc_status(SERVICE_STOPPED, 0);
159 }
160
161 static void
update_svc_status(DWORD state,DWORD progress_indicator)162 update_svc_status(DWORD state, DWORD progress_indicator)
163 {
164 service_status.dwWin32ExitCode = NO_ERROR;
165 service_status.dwCurrentState = state;
166 service_status.dwCheckPoint = progress_indicator;
167 service_status.dwWaitHint = 0;
168 SetServiceStatus(service_status_handle, &service_status);
169 }
170
171 /*
172 sc create rpcapd DisplayName= "Remote Packet Capture Protocol v.0 (experimental)" binpath= "C:\cvsroot\winpcap\wpcap\PRJ\Debug\rpcapd -d -f rpcapd.ini"
173 sc description rpcapd "Allows to capture traffic on this host from a remote machine."
174 */
175