/* packet-bpdu.c * Routines for BPDU (Spanning Tree Protocol) disassembly * * Copyright 1999 Christophe Tronche * * Wireshark - Network traffic analyzer * By Gerald Combs * Copyright 1998 Gerald Combs * * SPDX-License-Identifier: GPL-2.0-or-later */ #include "config.h" #include #include #include #include #include #include #include #include #include /* Offsets of fields within a BPDU */ #define BPDU_IDENTIFIER 0 #define BPDU_VERSION_IDENTIFIER 2 #define BPDU_TYPE 3 #define BPDU_FLAGS 4 #define BPDU_ROOT_IDENTIFIER 5 #define BPDU_ROOT_PATH_COST 13 #define BPDU_BRIDGE_IDENTIFIER 17 #define BPDU_PORT_IDENTIFIER 25 #define BPDU_MESSAGE_AGE 27 #define BPDU_MAX_AGE 29 #define BPDU_HELLO_TIME 31 #define BPDU_FORWARD_DELAY 33 #define BPDU_VERSION_1_LENGTH 35 #define BPDU_VERSION_3_LENGTH 36 #define BPDU_MST_CONFIG_FORMAT_SELECTOR 38 #define BPDU_MST_CONFIG_NAME 39 #define BPDU_MST_CONFIG_REVISION_LEVEL 71 #define BPDU_MST_CONFIG_DIGEST 73 #define BPDU_CIST_INTERNAL_ROOT_PATH_COST 89 #define BPDU_CIST_BRIDGE_IDENTIFIER 93 #define BPDU_CIST_REMAINING_HOPS 101 #define BPDU_MSTI 102 #define BPDU_PVST_TLV 36 #define MSTI_FLAGS 0 #define MSTI_REGIONAL_ROOT 1 #define MSTI_INTERNAL_ROOT_PATH_COST 9 #define MSTI_BRIDGE_IDENTIFIER_PRIORITY 13 #define MSTI_PORT_IDENTIFIER_PRIORITY 14 #define MSTI_REMAINING_HOPS 15 #define CONF_BPDU_SIZE 35 #define TC_BPDU_SIZE 4 #define MST_BPDU_SIZE 38 #define VERSION_3_STATIC_LENGTH 64 #define MSTI_MESSAGE_SIZE 16 /* Values for the Alternative MSTI format */ #define ALT_BPDU_CIST_BRIDGE_IDENTIFIER 89 #define ALT_BPDU_CIST_INTERNAL_ROOT_PATH_COST 97 #define ALT_MSTI_MSTID 0 #define ALT_MSTI_FLAGS 2 #define ALT_MSTI_REGIONAL_ROOT 3 #define ALT_MSTI_INTERNAL_ROOT_PATH_COST 11 #define ALT_MSTI_BRIDGE_IDENTIFIER 15 #define ALT_MSTI_PORT_IDENTIFIER 23 #define ALT_MSTI_REMAINING_HOPS 25 #define ALT_MSTI_MESSAGE_SIZE 26 /* Flag bits */ #define BPDU_FLAGS_TCACK 0x80 #define BPDU_FLAGS_AGREEMENT 0x40 #define BPDU_FLAGS_FORWARDING 0x20 #define BPDU_FLAGS_LEARNING 0x10 #define BPDU_FLAGS_PORT_ROLE_MASK 0x0C #define BPDU_FLAGS_PORT_ROLE_SHIFT 2 #define BPDU_FLAGS_PROPOSAL 0x02 #define BPDU_FLAGS_TC 0x01 void proto_register_bpdu(void); void proto_reg_handoff_bpdu(void); static int proto_bpdu; static int hf_bpdu_proto_id; static int hf_bpdu_version_id; static int hf_bpdu_type; static int hf_bpdu_flags; static int hf_bpdu_flags_tcack; static int hf_bpdu_flags_agreement; static int hf_bpdu_flags_forwarding; static int hf_bpdu_flags_learning; static int hf_bpdu_flags_port_role; static int hf_bpdu_flags_proposal; static int hf_bpdu_flags_tc; static int hf_bpdu_root_prio; static int hf_bpdu_root_sys_id_ext; static int hf_bpdu_root_mac; static int hf_bpdu_root_cost; static int hf_bpdu_bridge_prio; static int hf_bpdu_bridge_sys_id_ext; static int hf_bpdu_bridge_mac; static int hf_bpdu_port_id; static int hf_bpdu_msg_age; static int hf_bpdu_max_age; static int hf_bpdu_hello_time; static int hf_bpdu_forward_delay; static int hf_bpdu_version_1_length; static int hf_bpdu_version_3_length; static int hf_bpdu_mst_config_format_selector; static int hf_bpdu_mst_config_name; static int hf_bpdu_mst_config_revision_level; static int hf_bpdu_mst_config_digest; static int hf_bpdu_cist_internal_root_path_cost; static int hf_bpdu_cist_bridge_prio; static int hf_bpdu_cist_bridge_sys_id_ext; static int hf_bpdu_cist_bridge_mac; static int hf_bpdu_cist_remaining_hops; static int hf_bpdu_msti_flags; static int hf_bpdu_msti_id; static int hf_bpdu_msti_id_FFF; static int hf_bpdu_mst_priority; static int hf_bpdu_msti_regional_root_id; static int hf_bpdu_msti_regional_root_mac; static int hf_bpdu_msti_internal_root_path_cost; static int hf_bpdu_msti_bridge_identifier_priority; static int hf_bpdu_msti_port_identifier_priority; static int hf_bpdu_msti_port_id; static int hf_bpdu_msti_bridge_id; static int hf_bpdu_msti_bridge_id_priority; static int hf_bpdu_msti_bridge_id_mac; static int hf_bpdu_msti_remaining_hops; static int hf_bpdu_version_4_length; static int hf_bpdu_spt_config_format_selector; static int hf_bpdu_spt_config_name; static int hf_bpdu_spt_config_revision_level; static int hf_bpdu_spt_config_digest; static int hf_bpdu_flags_agree_num; static int hf_bpdu_flags_dagree_num; static int hf_bpdu_flags_agree_valid; static int hf_bpdu_flags_restricted_role; static int hf_bpdu_spt_agreement_digest; static int hf_bpdu_agreement_digest_format_id; static int hf_bpdu_agreement_digest_format_capabilities; static int hf_bpdu_agreement_digest_convention_id; static int hf_bpdu_agreement_digest_convention_capabilities; static int hf_bpdu_agreement_digest_edge_count; static int hf_bpdu_pvst_tlvtype; static int hf_bpdu_pvst_tlvlength; static int hf_bpdu_pvst_tlvvalue; static int hf_bpdu_pvst_tlv_origvlan; static int ett_bpdu; static int ett_bpdu_flags; static int ett_root_id; static int ett_bridge_id; static int ett_mstp; static int ett_msti; static int ett_cist_bridge_id; static int ett_spt; static int ett_aux_mcid; static int ett_agreement; static int ett_bpdu_pvst_tlv; static expert_field ei_pvst_tlv_length_invalid; static expert_field ei_pvst_tlv_origvlan_missing; static expert_field ei_pvst_tlv_truncated; static expert_field ei_pvst_tlv_unknown; static expert_field ei_bpdu_type; static expert_field ei_bpdu_version_support; static bool bpdu_use_system_id_extensions = true; static dissector_handle_t gvrp_handle; static dissector_handle_t gmrp_handle; static dissector_handle_t bpdu_handle; static dissector_handle_t bpdu_cisco_handle; static const value_string protocol_id_vals[] = { { 0, "Spanning Tree Protocol" }, { 0, NULL } }; #define BPDU_PVST_TLV_ORIGVLAN 0 /* Originating VLAN TLV in Cisco (R)PVST+ BPDUs */ static const value_string bpdu_pvst_tlv_vals[] = { { BPDU_PVST_TLV_ORIGVLAN, "Originating VLAN" }, { 0, NULL } }; #define BPDU_TYPE_CONF 0x00 /* STP Configuration BPDU */ #define BPDU_TYPE_RST 0x02 /* RST BPDU (or MST) */ #define BPDU_TYPE_TOPOLOGY_CHANGE 0x80 /* STP TCN (Topology change notify) BPDU */ static const value_string bpdu_type_vals[] = { { BPDU_TYPE_CONF, "Configuration" }, { BPDU_TYPE_RST, "Rapid/Multiple Spanning Tree" }, { BPDU_TYPE_TOPOLOGY_CHANGE, "Topology Change Notification" }, { 0, NULL } }; #define PROTO_VERSION_STP 0 #define PROTO_VERSION_RSTP 2 #define PROTO_VERSION_MSTP 3 #define PROTO_VERSION_SPB 4 #define MSTI_FORMAT_UNKNOWN 0 #define MSTI_FORMAT_IEEE_8021S 1 #define MSTI_FORMAT_ALTERNATIVE 2 static const value_string version_id_vals[] = { { PROTO_VERSION_STP, "Spanning Tree" }, { PROTO_VERSION_RSTP, "Rapid Spanning Tree" }, { PROTO_VERSION_MSTP, "Multiple Spanning Tree" }, { PROTO_VERSION_SPB, "Shortest Path Tree" }, { 0, NULL} }; static const value_string role_vals[] = { { 1, "Alternate or Backup" }, { 2, "Root" }, { 3, "Designated" }, { 0, NULL } }; static const char initial_sep[] = " ("; static const char cont_sep[] = ", "; static void dissect_bpdu_pvst_tlv(packet_info *pinfo, proto_tree *tree, tvbuff_t *tvb) { bool pvst_tlv_origvlan_present = false; uint16_t tlv_type, tlv_length; int offset = BPDU_PVST_TLV; proto_item * ti = NULL; proto_item * tlv_length_item = NULL; proto_tree * tlv_tree = NULL; if (tvb_reported_length_remaining(tvb, offset) < 4) /* TLV Type and Length fields occupy 4 bytes in total */ expert_add_info(pinfo, tree, &ei_pvst_tlv_truncated); while (tvb_reported_length_remaining(tvb, offset) >= 4) { /* TLV Type and Length fields occupy 4 bytes in total */ tlv_type = tvb_get_ntohs(tvb, offset); tlv_length = tvb_get_ntohs(tvb, offset + 2); tlv_tree = proto_tree_add_subtree(tree, tvb, offset, 4 + tlv_length, ett_bpdu_pvst_tlv, &ti, val_to_str(tlv_type, bpdu_pvst_tlv_vals, "Unknown TLV type: 0x%04x")); proto_tree_add_item(tlv_tree, hf_bpdu_pvst_tlvtype, tvb, offset, 2, ENC_BIG_ENDIAN); tlv_length_item = proto_tree_add_item(tlv_tree, hf_bpdu_pvst_tlvlength, tvb, offset + 2, 2, ENC_BIG_ENDIAN); if (tvb_reported_length_remaining(tvb, offset + 4) < tlv_length) { expert_add_info(pinfo, tlv_length_item, &ei_pvst_tlv_truncated); break; } offset += 4; switch (tlv_type) { case BPDU_PVST_TLV_ORIGVLAN: if (tlv_length == 2) { /* Originating VLAN ID must be 2 bytes long */ proto_item_append_text(ti, " (PVID): %u", tvb_get_ntohs(tvb, offset)); proto_tree_add_item(tlv_tree, hf_bpdu_pvst_tlv_origvlan, tvb, offset, tlv_length, ENC_BIG_ENDIAN); pvst_tlv_origvlan_present = true; } else expert_add_info(pinfo, tlv_length_item, &ei_pvst_tlv_length_invalid); break; default: proto_tree_add_item(tlv_tree, hf_bpdu_pvst_tlvvalue, tvb, offset, tlv_length, ENC_NA); expert_add_info(pinfo, tlv_tree, &ei_pvst_tlv_unknown); break; } offset += tlv_length; } if (pvst_tlv_origvlan_present == false) /* If a (R)PVST+ BPDU lacks the Originating VLAN TLV, it is malformed */ expert_add_info(pinfo, tree, &ei_pvst_tlv_origvlan_missing); } static void dissect_bpdu(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, bool is_bpdu_pvst) { uint16_t protocol_identifier; uint8_t protocol_version_identifier; uint8_t bpdu_type; uint8_t flags; uint16_t root_identifier_bridge_priority; uint16_t root_identifier_system_id_extension = 0; const char *root_identifier_mac_str; uint32_t root_path_cost; uint16_t bridge_identifier_bridge_priority; uint16_t bridge_identifier_system_id_extension = 0; const char *bridge_identifier_mac_str; uint16_t port_identifier; double message_age; double max_age; double hello_time; double forward_delay; uint8_t version_1_length; uint16_t version_3_length; uint16_t version_4_length = 0; uint16_t bpdu_version_4_length = 0; uint8_t config_format_selector; uint16_t cist_bridge_identifier_bridge_priority; uint16_t cist_bridge_identifier_system_id_extension = 0; const char *cist_bridge_identifier_mac_str; uint32_t msti_regional_root_mstid, msti_regional_root_priority; const char *msti_regional_root_mac_str; uint16_t msti_bridge_identifier_priority, msti_port_identifier_priority; int total_msti_length, offset, msti_format; int msti_length_remaining; int spt_offset = 0; int MCID_LEN = 51; uint8_t spt_agree_data = 0; proto_tree *bpdu_tree; proto_tree *mstp_tree, *msti_tree, *spt_tree = NULL, *aux_mcid_tree = NULL, *agreement_tree = NULL; proto_item *bpdu_item; proto_item *agreement_item, *proto_id_item, *type_item; proto_tree *root_id_tree; proto_tree *bridge_id_tree; proto_tree *cist_bridge_id_tree; const char *sep; static int * const bpdu_flags[] = { &hf_bpdu_flags_tcack, &hf_bpdu_flags_tc, NULL }; static int * const rst_flags[] = { &hf_bpdu_flags_tcack, &hf_bpdu_flags_agreement, &hf_bpdu_flags_forwarding, &hf_bpdu_flags_learning, &hf_bpdu_flags_port_role, &hf_bpdu_flags_proposal, &hf_bpdu_flags_tc, NULL }; /* GARP application frames require special interpretation of the destination address field; otherwise, they will be mistaken as BPDU frames. Fortunately, they can be recognized by checking the first 6 octets of the destination address, which are in the range from 01-80-C2-00-00-20 to 01-80-C2-00-00-2F. Yes - we *do* need to check the destination address type; on Linux cooked captures, there *is* no destination address, so it's AT_NONE. */ if (pinfo->dl_dst.type == AT_ETHER) { const uint8_t *dstaddr; dstaddr = (const uint8_t *)pinfo->dl_dst.data; if(dstaddr[0] == 0x01 && dstaddr[1] == 0x80 && dstaddr[2] == 0xC2 && dstaddr[3] == 0x00 && dstaddr[4] == 0x00 && ((dstaddr[5] == 0x0D) || ((dstaddr[5] & 0xF0) == 0x20))) { switch (dstaddr[5]) { case 0x20: /* for GMRP */ call_dissector(gmrp_handle, tvb, pinfo, tree); return; case 0x21: case 0x0D: /* for GVRP */ call_dissector(gvrp_handle, tvb, pinfo, tree); return; } col_set_str(pinfo->cinfo, COL_PROTOCOL, "GARP"); /* Generic Attribute Registration Protocol */ col_add_fstr(pinfo->cinfo, COL_INFO, "Unknown GARP application (0x%02X)", dstaddr[5]); return; } } col_set_str(pinfo->cinfo, COL_PROTOCOL, "STP"); /* Spanning Tree Protocol */ col_clear(pinfo->cinfo, COL_INFO); bpdu_type = tvb_get_uint8(tvb, BPDU_TYPE); protocol_version_identifier = tvb_get_uint8(tvb, BPDU_VERSION_IDENTIFIER); switch (bpdu_type) { case BPDU_TYPE_CONF: case BPDU_TYPE_RST: flags = tvb_get_uint8(tvb, BPDU_FLAGS); root_identifier_bridge_priority = tvb_get_ntohs(tvb,BPDU_ROOT_IDENTIFIER); if (bpdu_use_system_id_extensions ) { root_identifier_system_id_extension = root_identifier_bridge_priority & 0x0fff; root_identifier_bridge_priority &= 0xf000; } root_identifier_mac_str = tvb_ether_to_str(pinfo->pool, tvb, BPDU_ROOT_IDENTIFIER + 2); root_path_cost = tvb_get_ntohl(tvb, BPDU_ROOT_PATH_COST); port_identifier = tvb_get_ntohs(tvb, BPDU_PORT_IDENTIFIER); break; default: /* Squelch GCC complaints. */ flags = 0; root_identifier_bridge_priority = 0; root_identifier_mac_str = NULL; root_path_cost = 0; port_identifier = 0; break; } switch (bpdu_type) { case BPDU_TYPE_CONF: if (bpdu_use_system_id_extensions ) { col_add_fstr(pinfo->cinfo, COL_INFO, "Conf. %sRoot = %d/%d/%s Cost = %d Port = 0x%04x", flags & 0x1 ? "TC + " : "", root_identifier_bridge_priority, root_identifier_system_id_extension, root_identifier_mac_str, root_path_cost, port_identifier); } else { col_add_fstr(pinfo->cinfo, COL_INFO, "Conf. %sRoot = %d/%s Cost = %d Port = 0x%04x", flags & 0x1 ? "TC + " : "", root_identifier_bridge_priority, root_identifier_mac_str, root_path_cost, port_identifier); } break; case BPDU_TYPE_TOPOLOGY_CHANGE: col_set_str(pinfo->cinfo, COL_INFO, "Topology Change Notification"); break; case BPDU_TYPE_RST: if (bpdu_use_system_id_extensions ) { col_add_fstr(pinfo->cinfo, COL_INFO, "%sT. %sRoot = %d/%d/%s Cost = %d Port = 0x%04x", protocol_version_identifier == 3 ? "MS": (protocol_version_identifier == 4 ? "SP":"RS"), flags & 0x1 ? "TC + " : "", root_identifier_bridge_priority, root_identifier_system_id_extension, root_identifier_mac_str, root_path_cost, port_identifier); } else { col_add_fstr(pinfo->cinfo, COL_INFO, "%sT. %sRoot = %d/%s Cost = %d Port = 0x%04x", protocol_version_identifier == 3 ? "MS": (protocol_version_identifier == 4 ? "SP":"RS"), flags & 0x1 ? "TC + " : "", root_identifier_bridge_priority, root_identifier_mac_str, root_path_cost, port_identifier); } break; default: col_add_fstr(pinfo->cinfo, COL_INFO, "Unknown BPDU type (%u)", bpdu_type); break; } bpdu_item = proto_tree_add_protocol_format(tree, proto_bpdu, tvb, 0, -1, "Spanning Tree Protocol"); bpdu_tree = proto_item_add_subtree(bpdu_item, ett_bpdu); protocol_identifier = tvb_get_ntohs(tvb, BPDU_IDENTIFIER); proto_tree_add_uint(bpdu_tree, hf_bpdu_proto_id, tvb, BPDU_IDENTIFIER, 2, protocol_identifier); proto_id_item = proto_tree_add_uint(bpdu_tree, hf_bpdu_version_id, tvb, BPDU_VERSION_IDENTIFIER, 1, protocol_version_identifier); switch (protocol_version_identifier) { case 0: break; case 2: case 3: case 4: break; default: expert_add_info(pinfo, proto_id_item, &ei_bpdu_version_support); break; } type_item = proto_tree_add_uint(bpdu_tree, hf_bpdu_type, tvb, BPDU_TYPE, 1, bpdu_type); if (bpdu_type == BPDU_TYPE_TOPOLOGY_CHANGE) { set_actual_length(tvb, TC_BPDU_SIZE); return; } if (bpdu_type != BPDU_TYPE_CONF && bpdu_type != BPDU_TYPE_RST) { /* Unknown BPDU type - just display the rest of the PDU as data */ expert_add_info(pinfo, type_item, &ei_bpdu_type); return; } bridge_identifier_bridge_priority = tvb_get_ntohs(tvb, BPDU_BRIDGE_IDENTIFIER); if (bpdu_use_system_id_extensions ) { bridge_identifier_system_id_extension = bridge_identifier_bridge_priority & 0x0fff; bridge_identifier_bridge_priority &= 0xf000; } bridge_identifier_mac_str = tvb_ether_to_str(pinfo->pool, tvb, BPDU_BRIDGE_IDENTIFIER + 2); if (bpdu_type == BPDU_TYPE_RST) { proto_tree_add_bitmask_value_with_flags(bpdu_tree, tvb, BPDU_FLAGS, hf_bpdu_flags, ett_bpdu_flags, rst_flags, flags, BMT_NO_FALSE|BMT_NO_TFS); } else { proto_tree_add_bitmask_value_with_flags(bpdu_tree, tvb, BPDU_FLAGS, hf_bpdu_flags, ett_bpdu_flags, bpdu_flags, flags, BMT_NO_FALSE|BMT_NO_TFS); } /* add Identifier with format based on preference value * bpdu_use_system_id_extensions * */ if (bpdu_use_system_id_extensions) { root_id_tree = proto_tree_add_subtree_format(bpdu_tree, tvb, BPDU_ROOT_IDENTIFIER, 8, ett_root_id, NULL, "Root Identifier: %d / %d / %s", root_identifier_bridge_priority, root_identifier_system_id_extension, root_identifier_mac_str); proto_tree_add_uint(root_id_tree, hf_bpdu_root_prio, tvb, BPDU_ROOT_IDENTIFIER , 1, root_identifier_bridge_priority); proto_tree_add_uint(root_id_tree, hf_bpdu_root_sys_id_ext, tvb, BPDU_ROOT_IDENTIFIER , 2, root_identifier_system_id_extension); proto_tree_add_item(root_id_tree, hf_bpdu_root_mac, tvb, BPDU_ROOT_IDENTIFIER + 2, 6, ENC_NA); } else { root_id_tree = proto_tree_add_subtree_format(bpdu_tree, tvb, BPDU_ROOT_IDENTIFIER, 8, ett_root_id, NULL, "Root Identifier: %d / %s", root_identifier_bridge_priority, root_identifier_mac_str); proto_tree_add_uint(root_id_tree, hf_bpdu_root_prio, tvb, BPDU_ROOT_IDENTIFIER , 2, root_identifier_bridge_priority); proto_tree_add_item(root_id_tree, hf_bpdu_root_mac, tvb, BPDU_ROOT_IDENTIFIER + 2, 6, ENC_NA); } /* end of Identifier formatting */ proto_tree_add_uint(bpdu_tree, hf_bpdu_root_cost, tvb, BPDU_ROOT_PATH_COST, 4, root_path_cost); /* add Identifier with format based on preference value * bpdu_use_system_id_extensions * */ if (bpdu_use_system_id_extensions) { bridge_id_tree = proto_tree_add_subtree_format(bpdu_tree, tvb, BPDU_BRIDGE_IDENTIFIER, 8, ett_bridge_id, NULL, "Bridge Identifier: %d / %d / %s", bridge_identifier_bridge_priority, bridge_identifier_system_id_extension, bridge_identifier_mac_str); proto_tree_add_uint(bridge_id_tree, hf_bpdu_bridge_prio, tvb, BPDU_BRIDGE_IDENTIFIER , 1, bridge_identifier_bridge_priority); proto_tree_add_uint(bridge_id_tree, hf_bpdu_bridge_sys_id_ext, tvb, BPDU_BRIDGE_IDENTIFIER , 2, bridge_identifier_system_id_extension); proto_tree_add_item(bridge_id_tree, hf_bpdu_bridge_mac, tvb, BPDU_BRIDGE_IDENTIFIER + 2, 6, ENC_NA); } else { bridge_id_tree = proto_tree_add_subtree_format(bpdu_tree, tvb, BPDU_BRIDGE_IDENTIFIER, 8, ett_bridge_id, NULL, "Bridge Identifier: %d / %s", bridge_identifier_bridge_priority, bridge_identifier_mac_str); proto_tree_add_uint(bridge_id_tree, hf_bpdu_bridge_prio, tvb, BPDU_BRIDGE_IDENTIFIER , 2, bridge_identifier_bridge_priority); proto_tree_add_item(bridge_id_tree, hf_bpdu_bridge_mac, tvb, BPDU_BRIDGE_IDENTIFIER + 2, 6, ENC_NA); } /* end of Identifier formatting */ proto_tree_add_uint(bpdu_tree, hf_bpdu_port_id, tvb, BPDU_PORT_IDENTIFIER, 2, port_identifier); message_age = tvb_get_ntohs(tvb, BPDU_MESSAGE_AGE) / 256.0; proto_tree_add_double(bpdu_tree, hf_bpdu_msg_age, tvb, BPDU_MESSAGE_AGE, 2, message_age); max_age = tvb_get_ntohs(tvb, BPDU_MAX_AGE) / 256.0; proto_tree_add_double(bpdu_tree, hf_bpdu_max_age, tvb, BPDU_MAX_AGE, 2, max_age); hello_time = tvb_get_ntohs(tvb, BPDU_HELLO_TIME) / 256.0; proto_tree_add_double(bpdu_tree, hf_bpdu_hello_time, tvb, BPDU_HELLO_TIME, 2, hello_time); forward_delay = tvb_get_ntohs(tvb, BPDU_FORWARD_DELAY) / 256.0; proto_tree_add_double(bpdu_tree, hf_bpdu_forward_delay, tvb, BPDU_FORWARD_DELAY, 2, forward_delay); if (bpdu_type == BPDU_TYPE_CONF) { if (is_bpdu_pvst) dissect_bpdu_pvst_tlv(pinfo, bpdu_tree, tvb); /* Nothing more in this BPDU */ set_actual_length(tvb, CONF_BPDU_SIZE); return; } /* RST or MST BPDU */ version_1_length = tvb_get_uint8(tvb, BPDU_VERSION_1_LENGTH); proto_tree_add_uint(bpdu_tree, hf_bpdu_version_1_length, tvb, BPDU_VERSION_1_LENGTH, 1, version_1_length); /* Is this an MST BPDU? */ if (protocol_version_identifier >= 3 && version_1_length == 0 && tvb_reported_length(tvb) >= 102) { /* * OK, it passes the "Protocol Identifier is 0000 0000 * 0000 0000", "Protocol Version Identifier is 3 or * greater", "BPDU Type is 0000 0010", "contains 102 or * more octets", and "a Version 1 Length of 0" tests. */ version_3_length = tvb_get_ntohs(tvb, BPDU_VERSION_3_LENGTH); proto_tree_add_uint(bpdu_tree, hf_bpdu_version_3_length, tvb, BPDU_VERSION_3_LENGTH, 2, version_3_length); /* * Check the Version 3 Length, and see whether it's a * multiple of the MSTI Configuration Message length. Also * check the config_format_selector because some MST BPDU's * have BPDU_VERSION_3_LENGTH set to 0 and use the * field BPDU_MST_CONFIG_FORMAT_SELECTOR as a length-field * for the MSTI data. */ config_format_selector = tvb_get_uint8(tvb, BPDU_MST_CONFIG_FORMAT_SELECTOR); if (version_3_length != 0) { msti_format = MSTI_FORMAT_IEEE_8021S; if (version_3_length >= VERSION_3_STATIC_LENGTH) { total_msti_length = version_3_length - VERSION_3_STATIC_LENGTH; } else { /* * XXX - there appears to be an ambiguity in the 802.3Q-2003 * standard and at least some of the 802.3s drafts. * * The "Version 3 Length" field is defined to be "the number of * octets taken by the parameters that follow in the BPDU", but * it's spoken of as "representing an integral number, from 0 to * 64 inclusive, of MSTI Configuration Messages". * * According to mail from a member of the stds-802-1@ieee.org list, * the latter of those is just saying that the length must not have * a value that implies that there's a partial MSTI message in the * packet; it's still in units of octets, not messages. * * However, it appears that Cisco's C3550 software (C3550-I5Q3L2-M, * Version 12.1(12c)EA1) might be sending out lengths in units of * messages. * * This length can't be the number of octets taken by the parameters * that follow in the BPDU, because it's less than the fixed-length * portion of those parameters, so we assume the length is a count of * messages. */ total_msti_length = version_3_length * MSTI_MESSAGE_SIZE; } } else { if (tvb_reported_length(tvb) == (unsigned)config_format_selector + MST_BPDU_SIZE + 1 ) { msti_format = MSTI_FORMAT_ALTERNATIVE; total_msti_length = config_format_selector - VERSION_3_STATIC_LENGTH; } else { /* * XXX - Unknown MSTI format, since version_3_length is 0 * lets assume there are no msti instances in the packet. */ msti_format = MSTI_FORMAT_UNKNOWN; total_msti_length = 0; } } if (protocol_version_identifier == 3) { set_actual_length(tvb, BPDU_MSTI + total_msti_length); } mstp_tree = proto_tree_add_subtree(bpdu_tree, tvb, BPDU_VERSION_3_LENGTH, -1, ett_mstp, NULL, "MST Extension"); proto_tree_add_item(mstp_tree, hf_bpdu_mst_config_format_selector, tvb, BPDU_MST_CONFIG_FORMAT_SELECTOR, 1, ENC_BIG_ENDIAN); proto_tree_add_item(mstp_tree, hf_bpdu_mst_config_name, tvb, BPDU_MST_CONFIG_NAME, 32, ENC_ASCII|ENC_NA); proto_tree_add_item(mstp_tree, hf_bpdu_mst_config_revision_level, tvb, BPDU_MST_CONFIG_REVISION_LEVEL, 2, ENC_BIG_ENDIAN); proto_tree_add_item(mstp_tree, hf_bpdu_mst_config_digest, tvb, BPDU_MST_CONFIG_DIGEST, 16, ENC_NA); switch(msti_format) { case MSTI_FORMAT_IEEE_8021S: proto_tree_add_item(mstp_tree, hf_bpdu_cist_internal_root_path_cost, tvb, BPDU_CIST_INTERNAL_ROOT_PATH_COST, 4, ENC_BIG_ENDIAN); cist_bridge_identifier_bridge_priority = tvb_get_ntohs(tvb,BPDU_CIST_BRIDGE_IDENTIFIER); cist_bridge_identifier_mac_str = tvb_ether_to_str(pinfo->pool, tvb, BPDU_CIST_BRIDGE_IDENTIFIER + 2); /* add Identifier with format based on preference value * bpdu_use_system_id_extensions * */ if (bpdu_use_system_id_extensions ) { cist_bridge_identifier_system_id_extension = cist_bridge_identifier_bridge_priority & 0x0fff; cist_bridge_identifier_bridge_priority &= 0xf000; cist_bridge_id_tree = proto_tree_add_subtree_format(mstp_tree, tvb, BPDU_CIST_BRIDGE_IDENTIFIER, 8, ett_cist_bridge_id, NULL, "CIST Bridge Identifier: %d / %d / %s", cist_bridge_identifier_bridge_priority, cist_bridge_identifier_system_id_extension, cist_bridge_identifier_mac_str); proto_tree_add_uint(cist_bridge_id_tree, hf_bpdu_cist_bridge_prio, tvb, BPDU_CIST_BRIDGE_IDENTIFIER , 1, cist_bridge_identifier_bridge_priority); proto_tree_add_uint(cist_bridge_id_tree, hf_bpdu_cist_bridge_sys_id_ext, tvb, BPDU_CIST_BRIDGE_IDENTIFIER , 2, cist_bridge_identifier_system_id_extension); proto_tree_add_item(cist_bridge_id_tree, hf_bpdu_cist_bridge_mac, tvb, BPDU_CIST_BRIDGE_IDENTIFIER + 2, 6, ENC_NA); } else { cist_bridge_id_tree = proto_tree_add_subtree_format(mstp_tree, tvb, BPDU_CIST_BRIDGE_IDENTIFIER, 8, ett_cist_bridge_id, NULL, "CIST Bridge Identifier: %d / %s", cist_bridge_identifier_bridge_priority, cist_bridge_identifier_mac_str); proto_tree_add_uint(cist_bridge_id_tree, hf_bpdu_cist_bridge_prio, tvb, BPDU_CIST_BRIDGE_IDENTIFIER , 2, cist_bridge_identifier_bridge_priority); proto_tree_add_item(cist_bridge_id_tree, hf_bpdu_cist_bridge_mac, tvb, BPDU_CIST_BRIDGE_IDENTIFIER + 2, 6, ENC_NA); } /* end of Identifier formatting */ break; case MSTI_FORMAT_ALTERNATIVE: cist_bridge_identifier_bridge_priority = tvb_get_ntohs(tvb,ALT_BPDU_CIST_BRIDGE_IDENTIFIER); cist_bridge_identifier_mac_str = tvb_ether_to_str(pinfo->pool, tvb, ALT_BPDU_CIST_BRIDGE_IDENTIFIER + 2); /* add Identifier with format based on preference value * bpdu_use_system_id_extensions * */ if (bpdu_use_system_id_extensions ) { cist_bridge_identifier_system_id_extension = cist_bridge_identifier_bridge_priority & 0x0fff; cist_bridge_identifier_bridge_priority &= 0xf000; cist_bridge_id_tree = proto_tree_add_subtree_format(mstp_tree, tvb, ALT_BPDU_CIST_BRIDGE_IDENTIFIER, 8, ett_cist_bridge_id, NULL, "CIST Bridge Identifier: %d / %d / %s", cist_bridge_identifier_bridge_priority, cist_bridge_identifier_system_id_extension, cist_bridge_identifier_mac_str); proto_tree_add_uint(cist_bridge_id_tree, hf_bpdu_cist_bridge_prio, tvb, ALT_BPDU_CIST_BRIDGE_IDENTIFIER , 1, cist_bridge_identifier_bridge_priority); proto_tree_add_uint(cist_bridge_id_tree, hf_bpdu_cist_bridge_sys_id_ext, tvb, ALT_BPDU_CIST_BRIDGE_IDENTIFIER , 2, cist_bridge_identifier_system_id_extension); proto_tree_add_item(cist_bridge_id_tree, hf_bpdu_cist_bridge_mac, tvb, ALT_BPDU_CIST_BRIDGE_IDENTIFIER + 2, 6, ENC_NA); } else { cist_bridge_id_tree = proto_tree_add_subtree_format(mstp_tree, tvb, ALT_BPDU_CIST_BRIDGE_IDENTIFIER, 8, ett_cist_bridge_id, NULL, "CIST Bridge Identifier: %d / %s", cist_bridge_identifier_bridge_priority, cist_bridge_identifier_mac_str); proto_tree_add_uint(cist_bridge_id_tree, hf_bpdu_cist_bridge_prio, tvb, ALT_BPDU_CIST_BRIDGE_IDENTIFIER , 2, cist_bridge_identifier_bridge_priority); proto_tree_add_item(cist_bridge_id_tree, hf_bpdu_cist_bridge_mac, tvb, ALT_BPDU_CIST_BRIDGE_IDENTIFIER + 2, 6, ENC_NA); } /* end of Identifier formatting */ proto_tree_add_item(mstp_tree, hf_bpdu_cist_internal_root_path_cost, tvb, ALT_BPDU_CIST_INTERNAL_ROOT_PATH_COST, 4, ENC_BIG_ENDIAN); break; } proto_tree_add_item(mstp_tree, hf_bpdu_cist_remaining_hops, tvb, BPDU_CIST_REMAINING_HOPS, 1, ENC_BIG_ENDIAN); /* MSTI messages */ offset = BPDU_MSTI; msti_length_remaining = total_msti_length; while (msti_length_remaining > 0) { switch(msti_format) { case MSTI_FORMAT_IEEE_8021S: msti_regional_root_mstid = tvb_get_uint8(tvb, offset+ MSTI_REGIONAL_ROOT); msti_regional_root_priority = (msti_regional_root_mstid &0xf0) << 8; msti_regional_root_mstid = ((msti_regional_root_mstid & 0x0f) << 8) + tvb_get_uint8(tvb, offset+ MSTI_REGIONAL_ROOT+1); msti_regional_root_mac_str = tvb_ether_to_str(pinfo->pool, tvb, offset + MSTI_REGIONAL_ROOT + 2); msti_tree = proto_tree_add_subtree_format(mstp_tree, tvb, offset, 16, ett_msti, NULL, "MSTID %d, Regional Root Identifier %d / %s", msti_regional_root_mstid, msti_regional_root_priority, msti_regional_root_mac_str); /* flags */ proto_tree_add_bitmask_with_flags(msti_tree, tvb, offset+MSTI_FLAGS, hf_bpdu_msti_flags, ett_bpdu_flags, rst_flags, ENC_NA, BMT_NO_FALSE|BMT_NO_TFS); /* pri, MSTID, Regional root */ proto_tree_add_item(msti_tree, hf_bpdu_mst_priority, tvb, offset + MSTI_REGIONAL_ROOT, 1, ENC_BIG_ENDIAN); proto_tree_add_item(msti_tree, hf_bpdu_msti_id_FFF, tvb, offset + MSTI_REGIONAL_ROOT, 2, ENC_BIG_ENDIAN); proto_tree_add_item(msti_tree, hf_bpdu_msti_regional_root_mac, tvb, offset + MSTI_REGIONAL_ROOT + 2, 6, ENC_NA); proto_tree_add_item(msti_tree, hf_bpdu_msti_internal_root_path_cost, tvb, offset+MSTI_INTERNAL_ROOT_PATH_COST, 4, ENC_BIG_ENDIAN); msti_bridge_identifier_priority = tvb_get_uint8(tvb, offset+MSTI_BRIDGE_IDENTIFIER_PRIORITY) >> 4; msti_port_identifier_priority = tvb_get_uint8(tvb, offset+MSTI_PORT_IDENTIFIER_PRIORITY) >> 4; proto_tree_add_uint(msti_tree, hf_bpdu_msti_bridge_identifier_priority, tvb, offset+MSTI_BRIDGE_IDENTIFIER_PRIORITY, 1, msti_bridge_identifier_priority); proto_tree_add_uint(msti_tree, hf_bpdu_msti_port_identifier_priority, tvb, offset+MSTI_PORT_IDENTIFIER_PRIORITY, 1, msti_port_identifier_priority); proto_tree_add_item(msti_tree, hf_bpdu_msti_remaining_hops, tvb, offset + MSTI_REMAINING_HOPS, 1, ENC_BIG_ENDIAN); msti_length_remaining -= MSTI_MESSAGE_SIZE; offset += MSTI_MESSAGE_SIZE; break; case MSTI_FORMAT_ALTERNATIVE: msti_regional_root_mstid = tvb_get_uint8(tvb, offset+ ALT_MSTI_REGIONAL_ROOT); msti_regional_root_priority = (msti_regional_root_mstid &0xf0) << 8; msti_regional_root_mstid = ((msti_regional_root_mstid & 0x0f) << 8) + tvb_get_uint8(tvb, offset+ ALT_MSTI_REGIONAL_ROOT+1); msti_regional_root_mac_str = tvb_ether_to_str(pinfo->pool, tvb, offset+ ALT_MSTI_REGIONAL_ROOT + 2); msti_tree = proto_tree_add_subtree_format(mstp_tree, tvb, offset, 16, ett_msti, NULL, "MSTID %d, Regional Root Identifier %d / %s", msti_regional_root_mstid, msti_regional_root_priority, msti_regional_root_mac_str); proto_tree_add_item(msti_tree, hf_bpdu_msti_id, tvb, offset+ALT_MSTI_MSTID, 2, ENC_BIG_ENDIAN); /* flags */ proto_tree_add_bitmask_with_flags(msti_tree, tvb, offset+ALT_MSTI_FLAGS, hf_bpdu_msti_flags, ett_bpdu_flags, rst_flags, ENC_NA, BMT_NO_FALSE|BMT_NO_TFS); /* pri, MSTID, Regional root */ proto_tree_add_item(msti_tree, hf_bpdu_mst_priority, tvb, offset + ALT_MSTI_REGIONAL_ROOT, 1, ENC_BIG_ENDIAN); proto_tree_add_item(msti_tree, hf_bpdu_msti_regional_root_id, tvb, offset + ALT_MSTI_REGIONAL_ROOT, 2, ENC_BIG_ENDIAN); proto_tree_add_item(msti_tree, hf_bpdu_msti_regional_root_mac, tvb, offset + ALT_MSTI_REGIONAL_ROOT + 2, 6, ENC_NA); proto_tree_add_item(msti_tree, hf_bpdu_msti_internal_root_path_cost, tvb, offset+ALT_MSTI_INTERNAL_ROOT_PATH_COST, 4, ENC_BIG_ENDIAN); proto_tree_add_item(msti_tree, hf_bpdu_msti_bridge_id, tvb, offset + ALT_MSTI_BRIDGE_IDENTIFIER, 2, ENC_BIG_ENDIAN); proto_tree_add_item(msti_tree, hf_bpdu_msti_bridge_id_priority, tvb, offset + ALT_MSTI_BRIDGE_IDENTIFIER, 2, ENC_BIG_ENDIAN); proto_tree_add_item(msti_tree, hf_bpdu_msti_bridge_id_mac, tvb, offset + ALT_MSTI_BRIDGE_IDENTIFIER + 2, 6, ENC_NA); proto_tree_add_item(msti_tree, hf_bpdu_msti_port_id, tvb, offset+ALT_MSTI_PORT_IDENTIFIER, 2, ENC_BIG_ENDIAN); proto_tree_add_item(msti_tree, hf_bpdu_msti_remaining_hops, tvb, offset + ALT_MSTI_REMAINING_HOPS, 1, ENC_BIG_ENDIAN); msti_length_remaining -= ALT_MSTI_MESSAGE_SIZE; offset += ALT_MSTI_MESSAGE_SIZE; break; } } if (protocol_version_identifier >= 4 && version_1_length == 0 && tvb_reported_length(tvb) >= 106) { /* * OK, it passes the "Protocol Identifier is 0000 0000 * 0000 0000", "Protocol Version Identifier is 4 or * greater", "BPDU Type is 0000 0010", "contains 106 or * more octets", and "a Version 1 Length of 0" tests. */ bpdu_version_4_length = BPDU_MSTI + total_msti_length; version_4_length = tvb_get_ntohs(tvb, bpdu_version_4_length); proto_tree_add_uint(bpdu_tree, hf_bpdu_version_4_length, tvb, bpdu_version_4_length, 2, version_4_length); /* version 4 length is 55 or more. */ if (version_4_length >= 53) { static int * const agreements[] = { &hf_bpdu_flags_agree_num, &hf_bpdu_flags_dagree_num, &hf_bpdu_flags_agree_valid, &hf_bpdu_flags_restricted_role, NULL }; spt_tree = proto_tree_add_subtree(bpdu_tree, tvb, bpdu_version_4_length, -1, ett_spt, NULL, "SPT Extension"); spt_offset = (bpdu_version_4_length + 2); /* Aux MCID: */ aux_mcid_tree = proto_tree_add_subtree(spt_tree, tvb, spt_offset, MCID_LEN, ett_aux_mcid, NULL, "MCID Data"); proto_tree_add_item(aux_mcid_tree, hf_bpdu_spt_config_format_selector, tvb, spt_offset, 1, ENC_BIG_ENDIAN); proto_tree_add_item(aux_mcid_tree, hf_bpdu_spt_config_name, tvb, spt_offset + 1, 32, ENC_ASCII | ENC_NA); proto_tree_add_item(aux_mcid_tree, hf_bpdu_spt_config_revision_level, tvb, spt_offset + 33, 2, ENC_BIG_ENDIAN); proto_tree_add_item(aux_mcid_tree, hf_bpdu_spt_config_digest, tvb, spt_offset + 35, 16, ENC_NA); spt_offset += MCID_LEN; /* Agreement Data */ agreement_tree = proto_tree_add_subtree(spt_tree, tvb, spt_offset, -1, ett_agreement, &agreement_item, "Agreement Data"); spt_agree_data = tvb_get_uint8(tvb, spt_offset); sep = initial_sep; proto_item_append_text(agreement_item, "%sAN: %d", sep, (spt_agree_data & 0x03)); proto_tree_add_bitmask_list_value(agreement_tree, tvb, spt_offset, 1, agreements, spt_agree_data); sep = cont_sep; proto_item_append_text(agreement_item, "%sDAN: %d", sep, ((spt_agree_data & 0x0C) >> 2)); if (sep != initial_sep) { proto_item_append_text(agreement_item, ")"); } spt_offset += 2; proto_tree_add_item(agreement_tree, hf_bpdu_agreement_digest_format_id, tvb, spt_offset, 1, ENC_NA); proto_tree_add_item(agreement_tree, hf_bpdu_agreement_digest_format_capabilities, tvb, spt_offset, 1, ENC_NA); spt_offset += 1; proto_tree_add_item(agreement_tree, hf_bpdu_agreement_digest_convention_id, tvb, spt_offset, 1, ENC_NA); proto_tree_add_item(agreement_tree, hf_bpdu_agreement_digest_convention_capabilities, tvb, spt_offset, 1, ENC_NA); spt_offset += 1; proto_tree_add_item(agreement_tree, hf_bpdu_agreement_digest_edge_count, tvb, spt_offset, 2, ENC_BIG_ENDIAN); spt_offset += 10; proto_tree_add_item(agreement_tree, hf_bpdu_spt_agreement_digest, tvb, spt_offset, 20, ENC_NA); /*spt_offset += 20;*/ if (protocol_version_identifier == 4) { set_actual_length(tvb, (bpdu_version_4_length + version_4_length + 2)); } } } } else { /* It is RSTP BPDU and may still be Rapid PVST+ */ if (is_bpdu_pvst) dissect_bpdu_pvst_tlv(pinfo, bpdu_tree, tvb); } } static int dissect_bpdu_cisco(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) { dissect_bpdu(tvb, pinfo, tree, true); return tvb_captured_length(tvb); } static int dissect_bpdu_generic(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) { dissect_bpdu(tvb, pinfo, tree, false); return tvb_captured_length(tvb); } void proto_register_bpdu(void) { static hf_register_info hf[] = { { &hf_bpdu_proto_id, { "Protocol Identifier", "stp.protocol", FT_UINT16, BASE_HEX, VALS(protocol_id_vals), 0x0, NULL, HFILL }}, { &hf_bpdu_version_id, { "Protocol Version Identifier", "stp.version", FT_UINT8, BASE_DEC, VALS(version_id_vals), 0x0, NULL, HFILL }}, { &hf_bpdu_type, { "BPDU Type", "stp.type", FT_UINT8, BASE_HEX, VALS(bpdu_type_vals), 0x0, NULL, HFILL }}, { &hf_bpdu_flags, { "BPDU flags", "stp.flags", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_flags_tcack, { "Topology Change Acknowledgment", "stp.flags.tcack", FT_BOOLEAN, 8, TFS(&tfs_yes_no), BPDU_FLAGS_TCACK, NULL, HFILL }}, { &hf_bpdu_flags_agreement, { "Agreement", "stp.flags.agreement", FT_BOOLEAN, 8, TFS(&tfs_yes_no), BPDU_FLAGS_AGREEMENT, NULL, HFILL }}, { &hf_bpdu_flags_forwarding, { "Forwarding", "stp.flags.forwarding", FT_BOOLEAN, 8, TFS(&tfs_yes_no), BPDU_FLAGS_FORWARDING, NULL, HFILL }}, { &hf_bpdu_flags_learning, { "Learning", "stp.flags.learning", FT_BOOLEAN, 8, TFS(&tfs_yes_no), BPDU_FLAGS_LEARNING, NULL, HFILL }}, { &hf_bpdu_flags_port_role, { "Port Role", "stp.flags.port_role", FT_UINT8, BASE_DEC, VALS(role_vals), BPDU_FLAGS_PORT_ROLE_MASK, NULL, HFILL }}, { &hf_bpdu_flags_proposal, { "Proposal", "stp.flags.proposal", FT_BOOLEAN, 8, TFS(&tfs_yes_no), BPDU_FLAGS_PROPOSAL, NULL, HFILL }}, { &hf_bpdu_flags_tc, { "Topology Change", "stp.flags.tc", FT_BOOLEAN, 8, TFS(&tfs_yes_no), BPDU_FLAGS_TC, NULL, HFILL }}, { &hf_bpdu_root_prio, { "Root Bridge Priority", "stp.root.prio", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_root_sys_id_ext, { "Root Bridge System ID Extension", "stp.root.ext", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_root_mac, { "Root Bridge System ID", "stp.root.hw", FT_ETHER, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_root_cost, { "Root Path Cost", "stp.root.cost", FT_UINT32, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_bridge_prio, { "Bridge Priority", "stp.bridge.prio", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_bridge_sys_id_ext, { "Bridge System ID Extension", "stp.bridge.ext", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_bridge_mac, { "Bridge System ID", "stp.bridge.hw", FT_ETHER, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_port_id, { "Port identifier", "stp.port", FT_UINT16, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_msg_age, { "Message Age", "stp.msg_age", FT_DOUBLE, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_max_age, { "Max Age", "stp.max_age", FT_DOUBLE, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_hello_time, { "Hello Time", "stp.hello", FT_DOUBLE, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_forward_delay, { "Forward Delay", "stp.forward", FT_DOUBLE, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_version_1_length, { "Version 1 Length", "stp.version_1_length", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_pvst_tlvtype, { "Type", "stp.pvst.tlvtype", FT_UINT16, BASE_HEX, VALS(bpdu_pvst_tlv_vals), 0x0, NULL, HFILL }}, { &hf_bpdu_pvst_tlvlength, { "Length", "stp.pvst.tlvlen", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_pvst_tlv_origvlan, { "Originating VLAN", "stp.pvst.origvlan", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_pvst_tlvvalue, { "Value", "stp.pvst.tlvval", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_version_3_length, { "Version 3 Length", "mstp.version_3_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_mst_config_format_selector, { "MST Config ID format selector", "mstp.config_format_selector", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_mst_config_name, { "MST Config name", "mstp.config_name", FT_STRINGZPAD, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_mst_config_revision_level, { "MST Config revision", "mstp.config_revision_level", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_mst_config_digest, { "MST Config digest", "mstp.config_digest", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_cist_internal_root_path_cost, { "CIST Internal Root Path Cost", "mstp.cist_internal_root_path_cost", FT_UINT32, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_cist_bridge_prio, { "CIST Bridge Priority", "mstp.cist_bridge.prio", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_cist_bridge_sys_id_ext, { "CIST Bridge Identifier System ID Extension", "mstp.cist_bridge.ext", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_cist_bridge_mac, { "CIST Bridge Identifier System ID", "mstp.cist_bridge.hw", FT_ETHER, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_cist_remaining_hops, { "CIST Remaining hops", "mstp.cist_remaining_hops", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_msti_flags, { "MSTI flags", "mstp.msti.flags", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_mst_priority, { "Priority", "mstp.msti.priority", FT_UINT8, BASE_HEX, NULL, 0xF0, NULL, HFILL }}, { &hf_bpdu_msti_id_FFF, { "MSTID", "mstp.msti.msti_id", FT_UINT16, BASE_DEC, NULL, 0x0FFF, NULL, HFILL }}, { &hf_bpdu_msti_id, { "MSTID", "mstp.msti.msti_id", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_msti_regional_root_id, { "MSTI Regional Root Identifier", "mstp.msti.regional_root_id", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_msti_regional_root_mac, { "Regional Root", "mstp.msti.root.hw", FT_ETHER, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_msti_internal_root_path_cost, { "Internal root path cost", "mstp.msti.root_cost", FT_UINT32, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_msti_bridge_id, { "MSTI Bridge Identifier", "mstp.msti.bridge_id", FT_UINT16, BASE_DEC, NULL, 0x0FFF, NULL, HFILL }}, { &hf_bpdu_msti_bridge_id_priority, { "MSTI Bridge Priority", "mstp.msti.bridge_id_priority", FT_UINT16, BASE_DEC, NULL, 0xF000, NULL, HFILL }}, { &hf_bpdu_msti_bridge_id_mac, { "MSTI Bridge MAC", "mstp.msti.bridge_id_mac", FT_ETHER, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_msti_bridge_identifier_priority, { "Bridge Identifier Priority", "mstp.msti.bridge_priority", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_msti_port_identifier_priority, { "Port identifier priority", "mstp.msti.port_priority", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_msti_port_id, { "Port identifier", "mstp.msti.port", FT_UINT16, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_msti_remaining_hops, { "Remaining hops", "mstp.msti.remaining_hops", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_version_4_length, { "Version 4 Length", "mstp.version_4_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_spt_config_format_selector, { "SPT Config ID format selector", "mstp.config_format_selector", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_bpdu_spt_config_name, {"SPT Config name", "mstp.config_name", FT_STRINGZPAD, BASE_NONE, NULL, 0x0, NULL, HFILL } }, { &hf_bpdu_spt_config_revision_level, { "SPT Config revision", "mstp.config_revision_level", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL } }, { &hf_bpdu_spt_config_digest, { "SPT Config digest", "mstp.config_digest", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL } }, { &hf_bpdu_flags_agree_num, { "Agreement Number", "mstp.agree_flags.agreement_num", FT_UINT8, BASE_DEC, NULL, 0x03, NULL, HFILL } }, { &hf_bpdu_flags_dagree_num, { "Disagreement Number", "mstp.agree_flags.dagreement_num", FT_UINT8, BASE_DEC, NULL, 0x0C, NULL, HFILL } }, { &hf_bpdu_flags_agree_valid, { "Agreement Valid Flag", "mstp.agree_flags.agreement_valid", FT_BOOLEAN, 8, TFS(&tfs_yes_no), 0x10, NULL, HFILL } }, { &hf_bpdu_flags_restricted_role, { "Restricted Role", "mstp.agree_flags.rest_role", FT_BOOLEAN, 8, TFS(&tfs_yes_no), 0x20, NULL, HFILL } }, { &hf_bpdu_spt_agreement_digest, { "Agreement Digest", "mstp.agreement_digest", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL } }, { &hf_bpdu_agreement_digest_format_id, { "Agreement Digest Format Id", "bpdu.agreement_digest_format_id", FT_UINT8, BASE_DEC, NULL, 0xF0, NULL, HFILL }}, { &hf_bpdu_agreement_digest_format_capabilities, { "Agreement Digest Format Capabilities", "bpdu.agreement_digest_format_capabilities", FT_UINT8, BASE_DEC, NULL, 0x0F, NULL, HFILL }}, { &hf_bpdu_agreement_digest_convention_id, { "Agreement Digest Convention Id", "bpdu.agreement_digest_convention_id", FT_UINT8, BASE_DEC, NULL, 0xF0, NULL, HFILL }}, { &hf_bpdu_agreement_digest_convention_capabilities, { "Agreement Digest Convention Capabilities", "bpdu.agreement_digest_convention_capabilities", FT_UINT8, BASE_DEC, NULL, 0x0F, NULL, HFILL }}, { &hf_bpdu_agreement_digest_edge_count, { "Agreement Digest Edge Count", "bpdu.agreement_digest_edge_count", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, }; static int *ett[] = { &ett_bpdu, &ett_bpdu_flags, &ett_root_id, &ett_bridge_id, &ett_mstp, &ett_msti, &ett_cist_bridge_id, &ett_spt, &ett_aux_mcid, &ett_agreement, &ett_bpdu_pvst_tlv }; static ei_register_info ei[] = { { &ei_pvst_tlv_length_invalid, { "stp.pvst.tlvlen.invalid", PI_MALFORMED, PI_ERROR, "Indicated length is not valid for this record type", EXPFILL }}, { &ei_pvst_tlv_origvlan_missing, { "stp.pvst.origvlan.missing", PI_MALFORMED, PI_ERROR, "Originating (PVID) VLAN TLV is missing or corrupt", EXPFILL }}, { &ei_pvst_tlv_truncated, { "stp.pvst.tlv.truncated", PI_MALFORMED, PI_ERROR, "TLV record is truncated prematurely", EXPFILL }}, { &ei_pvst_tlv_unknown, { "stp.pvst.tlv.unknown", PI_UNDECODED, PI_COMMENT, "TLV type is unknown", EXPFILL }}, { &ei_bpdu_version_support, { "bpdu.version_support", PI_PROTOCOL, PI_WARN, "This version of Wireshark only knows about versions 0, 2, 3 & 4", EXPFILL }}, { &ei_bpdu_type, { "stp.type.unknown", PI_PROTOCOL, PI_WARN, "Unknown BPDU type data", EXPFILL }}, }; module_t *bpdu_module; expert_module_t *expert_bpdu; proto_bpdu = proto_register_protocol("Spanning Tree Protocol", "STP", "stp"); proto_register_field_array(proto_bpdu, hf, array_length(hf)); proto_register_subtree_array(ett, array_length(ett)); bpdu_handle = register_dissector("bpdu", dissect_bpdu_generic, proto_bpdu); bpdu_cisco_handle = register_dissector("bpdu_cisco", dissect_bpdu_cisco, proto_bpdu); expert_bpdu = expert_register_protocol(proto_bpdu); expert_register_field_array(expert_bpdu, ei, array_length(ei)); bpdu_module = prefs_register_protocol(proto_bpdu, NULL); prefs_register_bool_preference(bpdu_module, "use_system_id_extension", "Use 802.1t System ID Extensions", "Whether the BPDU dissector should use 802.1t System ID Extensions when dissecting the Bridge Identifier", &bpdu_use_system_id_extensions); } void proto_reg_handoff_bpdu(void) { /* * Get handle for the GVRP dissector. */ gvrp_handle = find_dissector("gvrp"); /* * Get handle for the GMRP dissector. */ gmrp_handle = find_dissector_add_dependency("gmrp", proto_bpdu); dissector_add_uint("llc.dsap", SAP_BPDU, bpdu_handle); dissector_add_uint("chdlc.protocol", CHDLCTYPE_BPDU, bpdu_handle); dissector_add_uint("ethertype", ETHERTYPE_STP, bpdu_handle); dissector_add_uint("llc.cisco_pid", CISCO_PID_RLQ_REQ, bpdu_handle); /* Cisco's RLQ is just plain STP */ dissector_add_uint("llc.cisco_pid", CISCO_PID_RLQ_RESP, bpdu_handle); /* Cisco's RLQ is just plain STP */ dissector_add_uint("llc.cisco_pid", CISCO_PID_VLAN_BRIDGE, bpdu_handle); /* Cisco's VLAN-bridge STP is just plain STP */ dissector_add_uint("llc.cisco_pid", CISCO_PID_PVSTPP, bpdu_cisco_handle); /* Handle Cisco's (R)PVST+ TLV extensions */ } /* * Editor modelines - https://www.wireshark.org/tools/modelines.html * * Local Variables: * c-basic-offset: 2 * tab-width: 8 * indent-tabs-mode: nil * End: * * ex: set shiftwidth=2 tabstop=8 expandtab: * :indentSize=2:tabSize=8:noTabs=true: */