diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-10 20:34:10 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-10 20:34:10 +0000 |
commit | e4ba6dbc3f1e76890b22773807ea37fe8fa2b1bc (patch) | |
tree | 68cb5ef9081156392f1dd62a00c6ccc1451b93df /epan/dissectors/packet-db-lsp.c | |
parent | Initial commit. (diff) | |
download | wireshark-e4ba6dbc3f1e76890b22773807ea37fe8fa2b1bc.tar.xz wireshark-e4ba6dbc3f1e76890b22773807ea37fe8fa2b1bc.zip |
Adding upstream version 4.2.2.upstream/4.2.2
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'epan/dissectors/packet-db-lsp.c')
-rw-r--r-- | epan/dissectors/packet-db-lsp.c | 274 |
1 files changed, 274 insertions, 0 deletions
diff --git a/epan/dissectors/packet-db-lsp.c b/epan/dissectors/packet-db-lsp.c new file mode 100644 index 00000000..5b35930c --- /dev/null +++ b/epan/dissectors/packet-db-lsp.c @@ -0,0 +1,274 @@ +/* packet-db-lsp.c + * Routines for Dropbox LAN sync Protocol + * + * Copyright 2010, Stig Bjorlykke <stig@bjorlykke.org> + * + * Wireshark - Network traffic analyzer + * By Gerald Combs <gerald@wireshark.org> + * Copyright 1998 Gerald Combs + * + * SPDX-License-Identifier: GPL-2.0-or-later + */ + +#include "config.h" + +#include <epan/packet.h> +#include <epan/asn1.h> +#include <epan/prefs.h> + +#include "packet-tcp.h" +#include "packet-x509af.h" + +#define PNAME "Dropbox LAN sync Protocol" +#define PSNAME "DB-LSP" +#define PFNAME "db-lsp" + +#define PNAME_DISC "Dropbox LAN sync Discovery Protocol" +#define PSNAME_DISC "DB-LSP-DISC" +#define PFNAME_DISC "db-lsp-disc" + +#define DB_LSP_PORT 17500 + +void proto_register_db_lsp(void); +void proto_reg_handoff_db_lsp(void); + +static int proto_db_lsp = -1; +static int proto_db_lsp_disc = -1; + +static int hf_type = -1; +static int hf_magic = -1; +static int hf_length = -1; +static int hf_opvalue = -1; +static int hf_data = -1; +static int hf_value = -1; +static int hf_text = -1; + +static gint ett_db_lsp = -1; + +static heur_dissector_list_t heur_subdissector_list; + +static dissector_handle_t db_lsp_tcp_handle; +static dissector_handle_t db_lsp_udp_handle; + +/* Use heuristic */ +static gboolean try_heuristic = TRUE; +/* desegmentation of tcp payload */ +static gboolean db_lsp_desegment = TRUE; + +#define TYPE_CONFIG 0x16 +#define TYPE_DATA 0x17 + +static const value_string type_vals[] = { + { TYPE_CONFIG, "Configuration" }, + { TYPE_DATA, "Data" }, + { 0, NULL } +}; + +#define OP_CERT 0x0B + +static const value_string op_vals[] = { + { OP_CERT, "Certificate" }, + { 0, NULL } +}; + +static int +dissect_db_lsp_pdu (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) +{ + proto_tree *db_lsp_tree; + proto_item *db_lsp_item; + gint offset = 0; + guint8 type, opvalue; + guint16 magic, length; + + col_set_str (pinfo->cinfo, COL_PROTOCOL, PSNAME); + col_set_str (pinfo->cinfo, COL_INFO, PNAME); + + db_lsp_item = proto_tree_add_item (tree, proto_db_lsp, tvb, offset, -1, ENC_NA); + db_lsp_tree = proto_item_add_subtree (db_lsp_item, ett_db_lsp); + + type = tvb_get_guint8 (tvb, offset); + proto_tree_add_item (db_lsp_tree, hf_type, tvb, offset, 1, ENC_BIG_ENDIAN); + offset += 1; + + if (type == 0x80) { + /* Two unknown bytes */ + offset += 2; + } + + magic = tvb_get_ntohs (tvb, offset); + proto_tree_add_item (db_lsp_tree, hf_magic, tvb, offset, 2, ENC_BIG_ENDIAN); + offset += 2; + + length = tvb_get_ntohs (tvb, offset); + proto_tree_add_item (db_lsp_tree, hf_length, tvb, offset, 2, ENC_BIG_ENDIAN); + offset += 2; + + if (magic != 0x0301 || length > tvb_reported_length_remaining (tvb, offset)) { + /* Probably an unknown packet */ + /* expert_add_info_format (pinfo, db_lsp_item, PI_UNDECODED, PI_WARN, "Unknown packet"); */ + return 0; + } + + if (type == TYPE_CONFIG) { + opvalue = tvb_get_guint8 (tvb, offset); + proto_tree_add_item (db_lsp_tree, hf_opvalue, tvb, offset, 1, ENC_BIG_ENDIAN); + + if (opvalue == OP_CERT) { + /* X509 Certificate */ + tvbuff_t *cert_tvb = tvb_new_subset_length (tvb, offset+10, length-10); + dissect_x509af_Certificate_PDU (cert_tvb, pinfo, db_lsp_tree, NULL); + } else { + proto_tree_add_item (db_lsp_tree, hf_value, tvb, offset, length, ENC_NA); + } + } else if (type == TYPE_DATA) { + proto_tree_add_item (db_lsp_tree, hf_data, tvb, offset, length, ENC_NA); + } else { + proto_tree_add_item (db_lsp_tree, hf_value, tvb, offset, length, ENC_NA); + } + /*offset += length;*/ + + proto_item_append_text (db_lsp_item, ", Type: %d, Length: %d", type, length); + proto_item_set_len (db_lsp_item, length + 5); + return tvb_reported_length(tvb); +} + +static guint +get_db_lsp_pdu_len (packet_info *pinfo _U_, tvbuff_t *tvb, + int offset, void *data _U_) +{ + if (tvb_get_ntohs (tvb, offset + 1) != 0x0301) { + /* Unknown data, eat remaining data for this frame */ + return tvb_reported_length_remaining (tvb, offset); + } + + return tvb_get_ntohs (tvb, offset + 3) + 5; +} + +static int +dissect_db_lsp_tcp (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data) +{ + tcp_dissect_pdus (tvb, pinfo, tree, db_lsp_desegment, 5, + get_db_lsp_pdu_len, dissect_db_lsp_pdu, data); + return tvb_reported_length(tvb); +} + +static int +dissect_db_lsp_disc (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) +{ + proto_tree *db_lsp_tree; + proto_item *db_lsp_item; + gint offset = 0; + heur_dtbl_entry_t *hdtbl_entry; + proto_tree *data_subtree; + + col_set_str (pinfo->cinfo, COL_PROTOCOL, PSNAME_DISC); + col_set_str (pinfo->cinfo, COL_INFO, PNAME_DISC); + + db_lsp_item = proto_tree_add_item (tree, proto_db_lsp_disc, tvb, offset, -1, ENC_NA); + db_lsp_tree = proto_item_add_subtree (db_lsp_item, ett_db_lsp); + + /* try the heuristic dissectors */ + if (try_heuristic) { + data_subtree = proto_item_add_subtree(db_lsp_item, ett_db_lsp); + if (dissector_try_heuristic(heur_subdissector_list, tvb, pinfo, data_subtree, &hdtbl_entry, NULL)) { + return tvb_captured_length(tvb); + } + } + + /* heuristic failed. Print remaining bytes as text */ + proto_tree_add_item (db_lsp_tree, hf_text, tvb, offset, -1, ENC_ASCII); + return tvb_captured_length(tvb); +} + +void +proto_register_db_lsp (void) +{ + static hf_register_info hf[] = { + { &hf_type, + { "Type", "db-lsp.type", + FT_UINT8, BASE_DEC_HEX, VALS(type_vals), 0x0, + NULL, HFILL } }, + + { &hf_magic, + { "Magic", "db-lsp.magic", + FT_UINT16, BASE_DEC_HEX, NULL, 0x0, + "Magic number", HFILL } }, + + { &hf_length, + { "Length", "db-lsp.length", + FT_UINT16, BASE_DEC_HEX, NULL, 0x0, + "Length in bytes", HFILL } }, + + { &hf_opvalue, + { "OP Value", "db-lsp.op", + FT_UINT8, BASE_DEC_HEX, VALS(op_vals), 0x0, + NULL, HFILL } }, + + { &hf_value, + { "Value", "db-lsp.value", + FT_BYTES, BASE_NONE, NULL, 0x0, + NULL, HFILL } }, + + { &hf_data, + { "Data", "db-lsp.data", + FT_BYTES, BASE_NONE, NULL, 0x0, + NULL, HFILL } }, + + { &hf_text, + { "Text", "db-lsp.text", + FT_STRING, BASE_NONE, NULL, 0x0, + NULL, HFILL } }, + }; + + static gint *ett[] = { + &ett_db_lsp, + }; + + module_t *db_lsp_module; + + proto_db_lsp = proto_register_protocol (PNAME, PSNAME, PFNAME); + proto_db_lsp_disc = proto_register_protocol (PNAME_DISC, PSNAME_DISC, PFNAME_DISC); + db_lsp_tcp_handle = register_dissector ("db-lsp.tcp", dissect_db_lsp_tcp, proto_db_lsp); + db_lsp_udp_handle = register_dissector ("db-lsp.udp", dissect_db_lsp_disc, proto_db_lsp_disc); + + heur_subdissector_list = register_heur_dissector_list("db-lsp", proto_db_lsp); + + proto_register_field_array (proto_db_lsp, hf, array_length (hf)); + proto_register_subtree_array (ett, array_length (ett)); + + /* Register our configuration options */ + db_lsp_module = prefs_register_protocol (proto_db_lsp, NULL); + + prefs_register_bool_preference (db_lsp_module, "desegment_pdus", + "Reassemble PDUs spanning multiple TCP segments", + "Whether the LAN sync dissector should reassemble PDUs" + " spanning multiple TCP segments." + " To use this option, you must also enable \"Allow subdissectors" + " to reassemble TCP streams\" in the TCP protocol settings.", + &db_lsp_desegment); + + prefs_register_bool_preference(db_lsp_module, "try_heuristic", + "Try heuristic sub-dissectors", + "Try to decode the payload using an heuristic sub-dissector", + &try_heuristic); +} + +void +proto_reg_handoff_db_lsp (void) +{ + dissector_add_uint_with_preference("tcp.port", DB_LSP_PORT, db_lsp_tcp_handle); + dissector_add_uint_with_preference("udp.port", DB_LSP_PORT, db_lsp_udp_handle); +} + +/* + * Editor modelines + * + * Local Variables: + * c-basic-offset: 2 + * tab-width: 8 + * indent-tabs-mode: nil + * End: + * + * ex: set shiftwidth=2 tabstop=8 expandtab: + * :indentSize=2:tabSize=8:noTabs=true: + */ |