/* packet-uasip.c * Routines for UA/UDP (Universal Alcatel over UDP) and NOE/SIP packet dissection. * Copyright 2012, Alcatel-Lucent Enterprise * * Wireshark - Network traffic analyzer * By Gerald Combs * Copyright 1998 Gerald Combs * * SPDX-License-Identifier: GPL-2.0-or-later */ #include "config.h" #include "epan/packet.h" #include "epan/prefs.h" #include "epan/expert.h" #if 0 #include #endif #include #include #include "packet-uaudp.h" void proto_register_uasip(void); void proto_reg_handoff_uasip(void); static tap_struct_uaudp ua_tap_info; #if 0 static int uasip_tap; #endif static int proto_uasip; static int hf_uasip_opcode; static int hf_uasip_version; static int hf_uasip_window_size; static int hf_uasip_mtu; static int hf_uasip_udp_lost; static int hf_uasip_udp_lost_reinit; static int hf_uasip_keepalive; static int hf_uasip_qos_ip_tos; static int hf_uasip_qos_8021_vlid; static int hf_uasip_qos_8021_pri; static int hf_uasip_expseq; static int hf_uasip_sntseq; static int hf_uasip_type; static int hf_uasip_length; static int ett_uasip; static int ett_uasip_tlv; static expert_field ei_uasip_tlv_length; static uint8_t proxy_ipaddr[4]; static const char *pref_proxy_ipaddr_s; static bool use_proxy_ipaddr; static bool noesip_enabled; static dissector_handle_t uasip_handle; static dissector_handle_t ua_sys_to_term_handle; static dissector_handle_t ua_term_to_sys_handle; static void _dissect_uasip(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, e_ua_direction direction) { proto_item *uasip_item, *tlv_item, *tlv_len_item; proto_tree *uasip_tree, *connect_tree; uint8_t opcode; uint32_t type, length; int offset = 0; if (noesip_enabled) { col_append_str(pinfo->cinfo, COL_PROTOCOL, "/NOE"); } else { col_append_str(pinfo->cinfo, COL_PROTOCOL, "/DL"); } opcode = tvb_get_uint8(tvb, offset); offset++; ua_tap_info.opcode = opcode; ua_tap_info.expseq = 0; ua_tap_info.sntseq = 0; col_add_str(pinfo->cinfo, COL_INFO, val_to_str_ext(opcode, &uaudp_opcode_str_ext, "unknown (0x%02x)")); uasip_item = proto_tree_add_protocol_format(tree, proto_uasip, tvb, 0, 5, "SIP/NOE Protocol, %s", val_to_str_ext(opcode, &uaudp_opcode_str_ext, "unknown (0x%02x)")); uasip_tree = proto_item_add_subtree(uasip_item, ett_uasip); proto_tree_add_uint(uasip_tree, hf_uasip_opcode, tvb, 0, 1, opcode); switch(opcode) { case UAUDP_CONNECT: { while(tvb_reported_length_remaining(tvb, offset) > 0) { type = tvb_get_uint8(tvb, offset+0); connect_tree = proto_tree_add_subtree(uasip_tree, tvb, offset, 0, ett_uasip_tlv, &tlv_item, val_to_str_ext(type, &uaudp_connect_vals_ext, "Unknown %d")); proto_tree_add_uint(connect_tree, hf_uasip_type, tvb, offset, 1, type); offset++; tlv_len_item = proto_tree_add_item_ret_uint(connect_tree, hf_uasip_length, tvb, offset, 1, ENC_NA, &length); proto_item_set_len(tlv_item, length+2); offset++; switch(type) { case UAUDP_CONNECT_VERSION: if ((length >= 1) && (length <= 4)) { proto_tree_add_item(connect_tree, hf_uasip_version, tvb, offset, length, ENC_BIG_ENDIAN); } else { expert_add_info_format(pinfo, tlv_len_item, &ei_uasip_tlv_length, "Invalid length %d", length); } break; case UAUDP_CONNECT_WINDOW_SIZE: if ((length >= 1) && (length <= 4)) { proto_tree_add_item(connect_tree, hf_uasip_window_size, tvb, offset, length, ENC_BIG_ENDIAN); } else { expert_add_info_format(pinfo, tlv_len_item, &ei_uasip_tlv_length, "Invalid length %d", length); } break; case UAUDP_CONNECT_MTU: if ((length >= 1) && (length <= 4)) { proto_tree_add_item(connect_tree, hf_uasip_mtu, tvb, offset, length, ENC_BIG_ENDIAN); } else { expert_add_info_format(pinfo, tlv_len_item, &ei_uasip_tlv_length, "Invalid length %d", length); } break; case UAUDP_CONNECT_UDP_LOST: if ((length >= 1) && (length <= 4)) { proto_tree_add_item(connect_tree, hf_uasip_udp_lost, tvb, offset, length, ENC_BIG_ENDIAN); } else { expert_add_info_format(pinfo, tlv_len_item, &ei_uasip_tlv_length, "Invalid length %d", length); } break; case UAUDP_CONNECT_UDP_LOST_REINIT: if ((length >= 1) && (length <= 4)) { proto_tree_add_item(connect_tree, hf_uasip_udp_lost_reinit, tvb, offset, length, ENC_BIG_ENDIAN); } else { expert_add_info_format(pinfo, tlv_len_item, &ei_uasip_tlv_length, "Invalid length %d", length); } break; case UAUDP_CONNECT_KEEPALIVE: if ((length >= 1) && (length <= 4)) { proto_tree_add_item(connect_tree, hf_uasip_keepalive, tvb, offset, length, ENC_BIG_ENDIAN); } else { expert_add_info_format(pinfo, tlv_len_item, &ei_uasip_tlv_length, "Invalid length %d", length); } break; case UAUDP_CONNECT_QOS_IP_TOS: if ((length >= 1) && (length <= 4)) { proto_tree_add_item(connect_tree, hf_uasip_qos_ip_tos, tvb, offset, length, ENC_BIG_ENDIAN); } else { expert_add_info_format(pinfo, tlv_len_item, &ei_uasip_tlv_length, "Invalid length %d", length); } break; case UAUDP_CONNECT_QOS_8021_VLID: if ((length >= 1) && (length <= 4)) { proto_tree_add_item(connect_tree, hf_uasip_qos_8021_vlid, tvb, offset, length, ENC_BIG_ENDIAN); } else { expert_add_info_format(pinfo, tlv_len_item, &ei_uasip_tlv_length, "Invalid length %d", length); } break; case UAUDP_CONNECT_QOS_8021_PRI: if ((length >= 1) && (length <= 4)) { proto_tree_add_item(connect_tree, hf_uasip_qos_8021_pri, tvb, offset, length, ENC_BIG_ENDIAN); } else { expert_add_info_format(pinfo, tlv_len_item, &ei_uasip_tlv_length, "Invalid length %d", length); } break; default: break; } offset += length; } } break; case UAUDP_NACK: { proto_tree_add_item_ret_uint(uasip_tree, hf_uasip_expseq, tvb, offset, 2, ENC_BIG_ENDIAN, &ua_tap_info.expseq); /*offset += 2;*/ if (noesip_enabled) { col_set_str(pinfo->cinfo, COL_INFO, "NACK"); } else { col_add_fstr(pinfo->cinfo, COL_INFO, "NACK exp:%d", ua_tap_info.expseq); } } break; case UAUDP_DATA: { int datalen; proto_tree_add_item_ret_uint(uasip_tree, hf_uasip_expseq, tvb, offset+0, 2, ENC_BIG_ENDIAN, &ua_tap_info.expseq); proto_tree_add_item_ret_uint(uasip_tree, hf_uasip_sntseq, tvb, offset+2, 2, ENC_BIG_ENDIAN, &ua_tap_info.sntseq); offset += 4; datalen = tvb_reported_length_remaining(tvb, offset); if (noesip_enabled) { if (datalen > 0) { if (direction == SYS_TO_TERM) { call_dissector(ua_sys_to_term_handle, tvb_new_subset_length(tvb, offset, datalen), pinfo, tree); } else if (direction == TERM_TO_SYS) { call_dissector(ua_term_to_sys_handle, tvb_new_subset_length(tvb, offset, datalen), pinfo, tree); } else { col_set_str(pinfo->cinfo, COL_INFO, "DATA - Couldn't resolve direction."); } } else { col_set_str(pinfo->cinfo, COL_INFO, "ACK"); } } else { if (datalen > 0) { col_add_fstr(pinfo->cinfo, COL_INFO, "DATA exp:%d", ua_tap_info.expseq); col_append_fstr(pinfo->cinfo, COL_INFO, " snt:%d", ua_tap_info.sntseq); } else { col_add_fstr(pinfo->cinfo, COL_INFO, "ACK exp:%d", ua_tap_info.expseq); col_append_fstr(pinfo->cinfo, COL_INFO, " snt:%d", ua_tap_info.sntseq); } } } break; default: break; } #if 0 tap_queue_packet(uasip_tap, pinfo, &ua_tap_info); #endif } static int dissect_uasip(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) { if (use_proxy_ipaddr) { if (memcmp((pinfo->src).data, proxy_ipaddr, sizeof(proxy_ipaddr)) == 0) { _dissect_uasip(tvb, pinfo, tree, SYS_TO_TERM); return tvb_captured_length(tvb); } else if (memcmp((pinfo->dst).data, proxy_ipaddr, sizeof(proxy_ipaddr)) == 0) { _dissect_uasip(tvb, pinfo, tree, TERM_TO_SYS); return tvb_captured_length(tvb); } } _dissect_uasip(tvb, pinfo, tree, DIR_UNKNOWN); return tvb_captured_length(tvb); } void proto_register_uasip(void) { module_t *uasip_module; static hf_register_info hf_uasip[] = { { &hf_uasip_opcode, { "Opcode", "uasip.opcode", FT_UINT8, BASE_DEC | BASE_EXT_STRING, &uaudp_opcode_str_ext, 0x0, "UA/SIP Opcode", HFILL } }, { &hf_uasip_version, { "Version", "uasip.version", FT_UINT8, BASE_DEC, NULL, 0x0, "UA/SIP Version", HFILL } }, { &hf_uasip_window_size, { "Window Size", "uasip.window_size", FT_UINT8, BASE_DEC, NULL, 0x0, "UA/SIP Window Size", HFILL } }, { &hf_uasip_mtu, { "MTU", "uasip.mtu", FT_UINT8, BASE_DEC, NULL, 0x0, "UA/SIP MTU", HFILL } }, { &hf_uasip_udp_lost, { "UDP Lost", "uasip.udp_lost", FT_UINT8, BASE_DEC, NULL, 0x0, "UA/SIP Lost", HFILL } }, { &hf_uasip_udp_lost_reinit, { "UDP lost reinit", "uasip.udp_lost_reinit", FT_UINT8, BASE_DEC, NULL, 0x0, "UA/SIP Lost Re-Init", HFILL } }, { &hf_uasip_keepalive, { "Keepalive", "uasip.keepalive", FT_UINT8, BASE_DEC, NULL, 0x0, "UA/SIP Keepalive", HFILL } }, { &hf_uasip_qos_ip_tos, { "QoS IP TOS", "uasip.qos_ip_tos", FT_UINT8, BASE_DEC, NULL, 0x0, "UA/SIP QoS IP TOS", HFILL } }, { &hf_uasip_qos_8021_vlid, { "QoS 802.1 VLID", "uasip.qos_8021_vlid", FT_UINT8, BASE_DEC, NULL, 0x0, "UA/SIP QoS 802.1 VLID", HFILL } }, { &hf_uasip_qos_8021_pri, { "QoS 802.1 PRI", "uasip.qos_8021_pri", FT_UINT8, BASE_DEC, NULL, 0x0, "UA/SIP QoS 802.1 PRI", HFILL } }, { &hf_uasip_expseq, { "Sequence Number (expected)", "uasip.expseq", FT_UINT16, BASE_DEC, NULL, 0x0, "UA/SIP Expected Sequence Number", HFILL } }, { &hf_uasip_sntseq, { "Sequence Number (sent)", "uasip.sntseq", FT_UINT16, BASE_DEC, NULL, 0x0, "UA/SIP Sent Sequence Number", HFILL } }, { &hf_uasip_type, { "Type", "uasip.type", FT_UINT8, BASE_DEC|BASE_EXT_STRING, &uaudp_connect_vals_ext, 0x0, NULL, HFILL } }, { &hf_uasip_length, { "Length", "uasip.length", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL } }, }; static int *ett[] = { &ett_uasip, &ett_uasip_tlv, }; static ei_register_info ei[] = { { &ei_uasip_tlv_length, { "uasip.tlv_length_invalid", PI_PROTOCOL, PI_WARN, "Invalid length", EXPFILL }}, }; expert_module_t* expert_uasip; proto_uasip = proto_register_protocol("UA/SIP Protocol", "UASIP", "uasip"); uasip_handle = register_dissector("uasip", dissect_uasip, proto_uasip); proto_register_field_array(proto_uasip, hf_uasip, array_length(hf_uasip)); proto_register_subtree_array(ett, array_length(ett)); expert_uasip = expert_register_protocol(proto_uasip); expert_register_field_array(expert_uasip, ei, array_length(ei)); uasip_module = prefs_register_protocol(proto_uasip, proto_reg_handoff_uasip); prefs_register_obsolete_preference(uasip_module, "application_octet_stream"); prefs_register_bool_preference(uasip_module, "noesip", "Try to decode SIP NOE", "NOE SIP Protocol", &noesip_enabled); prefs_register_string_preference(uasip_module, "proxy_ipaddr", "Proxy IP Address", "IPv4 address of the proxy (Invalid values will be ignored)", &pref_proxy_ipaddr_s); #if 0 uasip_tap = register_tap("uasip"); #endif } void proto_reg_handoff_uasip(void) { static bool prefs_initialized = false; if (!prefs_initialized) { ua_sys_to_term_handle = find_dissector_add_dependency("ua_sys_to_term", proto_uasip); ua_term_to_sys_handle = find_dissector_add_dependency("ua_term_to_sys", proto_uasip); /* Enable decoding "Internet media type" as UASIP */ dissector_add_for_decode_as("media_type", uasip_handle); prefs_initialized = true; } use_proxy_ipaddr = false; memset(proxy_ipaddr, 0, sizeof(proxy_ipaddr)); if (strcmp(pref_proxy_ipaddr_s, "") != 0) { if (str_to_ip(pref_proxy_ipaddr_s, proxy_ipaddr)) { use_proxy_ipaddr = true; } else { report_failure("uasip: Invalid 'Proxy IP Address': \"%s\"", pref_proxy_ipaddr_s); } } } /* * Editor modelines - https://www.wireshark.org/tools/modelines.html * * Local variables: * c-basic-offset: 4 * tab-width: 8 * indent-tabs-mode: nil * End: * * vi: set shiftwidth=4 tabstop=8 expandtab: * :indentSize=4:tabSize=8:noTabs=true: */