1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
|
/* packet-aruba-adp.c
* Routines for Aruba ADP header disassembly
*
* Giles Scott < gscott <at> arubanetworks dot com>
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "config.h"
#include <epan/packet.h>
#include <epan/addr_resolv.h>
#define UDP_PORT_ADP 8200 /* Not IANA registered */
#define ADP_REQUEST 1
#define ADP_RESPONSE 2
void proto_register_aruba_adp(void);
void proto_reg_handoff_aruba_adp(void);
static dissector_handle_t adp_handle;
static int proto_aruba_adp = -1;
static gint ett_aruba_adp = -1;
static int hf_adp_version = -1;
static int hf_adp_type = -1;
static int hf_adp_id = -1;
static int hf_adp_mac = -1;
static int hf_adp_switchip = -1;
static const value_string adp_type_val[] =
{
{1, "Request"},
{2, "Response"},
{0, NULL},
};
static int
dissect_aruba_adp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
proto_tree *ti = NULL;
proto_tree *aruba_adp_tree = NULL;
guint16 type;
const gchar *mac_str;
const gchar *switchip;
col_set_str(pinfo->cinfo, COL_PROTOCOL, "ADP");
col_clear(pinfo->cinfo, COL_INFO);
if (tree) {
ti = proto_tree_add_item(tree, proto_aruba_adp, tvb, 0, -1, ENC_NA);
aruba_adp_tree = proto_item_add_subtree(ti, ett_aruba_adp);
}
proto_tree_add_item(aruba_adp_tree, hf_adp_version, tvb, 0, 2, ENC_BIG_ENDIAN);
proto_tree_add_item(aruba_adp_tree, hf_adp_type, tvb, 2, 2, ENC_BIG_ENDIAN);
type = tvb_get_ntohs(tvb, 2);
proto_tree_add_item(aruba_adp_tree, hf_adp_id, tvb, 4, 2, ENC_BIG_ENDIAN);
switch(type){
case ADP_REQUEST:
proto_tree_add_item(aruba_adp_tree, hf_adp_mac, tvb, 6, 6, ENC_NA);
mac_str = tvb_ether_to_str(pinfo->pool, tvb, 6);
col_add_fstr(pinfo->cinfo, COL_INFO, "ADP Request Src MAC: %s", mac_str);
proto_item_append_text(ti, ", Request Src MAC: %s", mac_str);
break;
case ADP_RESPONSE:
proto_tree_add_item(aruba_adp_tree, hf_adp_switchip, tvb, 6, 4, ENC_BIG_ENDIAN);
switchip = tvb_ip_to_str(pinfo->pool, tvb, 6);
col_add_fstr(pinfo->cinfo, COL_INFO, "ADP Response Switch IP: %s", switchip);
proto_item_append_text(ti, ", Response Switch IP: %s", switchip);
break;
default:
break;
}
return tvb_captured_length(tvb);
}
void
proto_register_aruba_adp(void)
{
static hf_register_info hf[] = {
{ &hf_adp_version,
{ "Version", "adp.version", FT_UINT16, BASE_DEC, NULL,0x0,
"ADP version", HFILL}},
{ &hf_adp_type,
{ "Type", "adp.type", FT_UINT16, BASE_DEC, VALS(adp_type_val), 0x0,
"ADP type", HFILL}},
{ &hf_adp_id,
{ "Transaction ID", "adp.id", FT_UINT16, BASE_DEC, NULL, 0x0,
"ADP transaction ID", HFILL}},
{ &hf_adp_mac,
{ "MAC address", "adp.mac", FT_ETHER, BASE_NONE, NULL, 0x0,
NULL, HFILL}},
{ &hf_adp_switchip,
{ "Switch IP", "adp.switch", FT_IPv4, BASE_NONE, NULL, 0x0,
"Switch IP address", HFILL}},
};
static gint *ett[] = {
&ett_aruba_adp,
};
proto_aruba_adp = proto_register_protocol("Aruba Discovery Protocol",
"ADP", "adp");
proto_register_field_array(proto_aruba_adp, hf, array_length(hf));
proto_register_subtree_array(ett, array_length(ett));
adp_handle = register_dissector("adp", dissect_aruba_adp, proto_aruba_adp);
}
void
proto_reg_handoff_aruba_adp(void)
{
dissector_add_uint_with_preference("udp.port", UDP_PORT_ADP, adp_handle);
}
/*
* Editor modelines - https://www.wireshark.org/tools/modelines.html
*
* Local variables:
* c-basic-offset: 4
* tab-width: 8
* indent-tabs-mode: nil
* End:
*
* vi: set shiftwidth=4 tabstop=8 expandtab:
* :indentSize=4:tabSize=8:noTabs=true:
*/
|
