1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
|
/* packet-llt.c
* Routines for Veritas Low Latency Transport (LLT) dissection
* Copyright 2006, Stephen Fisher (see AUTHORS file)
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "config.h"
#include <epan/packet.h>
#include <epan/prefs.h>
#include <epan/etypes.h>
void proto_register_llt(void);
void proto_reg_handoff_llt(void);
static dissector_handle_t llt_handle;
static const value_string message_type_vs[] = {
{ 0x0a, "heartbeat" },
{ 0, NULL}
};
/* Variables for our preferences */
static guint preference_alternate_ethertype = 0x0;
/* Initialize the protocol and registered fields */
static int proto_llt = -1;
static int hf_llt_cluster_num = -1;
static int hf_llt_node_id = -1;
static int hf_llt_message_type = -1;
static int hf_llt_sequence_num = -1;
static int hf_llt_message_time = -1;
static int hf_llt_dst_node_id = -1;
static int hf_llt_src_node_id = -1;
/* Initialize the subtree pointers */
static gint ett_llt = -1;
/* Code to actually dissect the packets */
static int
dissect_llt(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
/* Set up structures needed to add the protocol subtree and manage it */
proto_item *ti;
proto_tree *llt_tree;
guint8 message_type;
guint16 magic;
/* Make entries in Protocol column and Info column on summary display */
col_set_str(pinfo->cinfo, COL_PROTOCOL, "LLT");
magic = tvb_get_guint16(tvb, 0, ENC_BIG_ENDIAN);
if(magic == 0x0602){ /* v2 ? */
ti = proto_tree_add_item(tree, proto_llt, tvb, 0, -1, ENC_NA);
llt_tree = proto_item_add_subtree(ti, ett_llt);
proto_tree_add_item(llt_tree, hf_llt_cluster_num, tvb, 2, 2, ENC_LITTLE_ENDIAN);
proto_tree_add_item(llt_tree, hf_llt_dst_node_id, tvb, 6, 1, ENC_LITTLE_ENDIAN);
proto_tree_add_item(llt_tree, hf_llt_src_node_id, tvb, 8, 1, ENC_LITTLE_ENDIAN);
} else {
message_type = tvb_get_guint8(tvb, 3);
col_add_fstr(pinfo->cinfo, COL_INFO, "Message type: %s", val_to_str(message_type, message_type_vs, "Unknown (0x%02x)"));
ti = proto_tree_add_item(tree, proto_llt, tvb, 0, -1, ENC_NA);
llt_tree = proto_item_add_subtree(ti, ett_llt);
proto_tree_add_item(llt_tree, hf_llt_cluster_num, tvb, 2, 1, ENC_BIG_ENDIAN);
proto_tree_add_item(llt_tree, hf_llt_message_type, tvb, 3, 1, ENC_BIG_ENDIAN);
proto_tree_add_item(llt_tree, hf_llt_node_id, tvb, 7, 1, ENC_BIG_ENDIAN);
proto_tree_add_item(llt_tree, hf_llt_sequence_num, tvb, 24, 4, ENC_BIG_ENDIAN);
proto_tree_add_item(llt_tree, hf_llt_message_time, tvb, 40, 4, ENC_BIG_ENDIAN);
}
return tvb_captured_length(tvb);
}
/* Register the protocol with Wireshark */
void
proto_register_llt(void)
{
module_t *llt_module;
static hf_register_info hf[] = {
{ &hf_llt_cluster_num, { "Cluster number", "llt.cluster_num",
FT_UINT16, BASE_DEC, NULL, 0,
"Cluster number that this node belongs to", HFILL } },
{ &hf_llt_message_type, { "Message type", "llt.message_type",
FT_UINT8, BASE_HEX, VALS(message_type_vs), 0,
"Type of LLT message contained in this frame", HFILL } },
{ &hf_llt_node_id, { "Node ID", "llt.node_id",
FT_UINT8, BASE_DEC, NULL, 0,
"Number identifying this node within the cluster", HFILL } },
{ &hf_llt_sequence_num, { "Sequence number", "llt.sequence_num",
FT_UINT32, BASE_DEC, NULL, 0,
"Sequence number of this frame", HFILL } },
{ &hf_llt_message_time, { "Message time", "llt.message_time",
FT_UINT32, BASE_DEC, NULL, 0,
"Number of ticks since this node was last rebooted", HFILL } },
{ &hf_llt_dst_node_id, { "Destination Node ID", "llt.dst.node_id",
FT_UINT8, BASE_DEC, NULL, 0,
"Number identifying destination node within the cluster", HFILL } },
{ &hf_llt_src_node_id, { "Source Node ID", "llt.src.node_id",
FT_UINT8, BASE_DEC, NULL, 0,
"Number identifying source node within the cluster", HFILL } },
};
/* Setup protocol subtree array */
static gint *ett[] = {
&ett_llt,
};
/* Register the protocol name and description */
proto_llt = proto_register_protocol("Veritas Low Latency Transport (LLT)", "LLT", "llt");
/* Required function calls to register the header fields and subtrees used */
proto_register_field_array(proto_llt, hf, array_length(hf));
proto_register_subtree_array(ett, array_length(ett));
/* Register preferences module */
llt_module = prefs_register_protocol(proto_llt, proto_reg_handoff_llt);
/* Register our preferences */
prefs_register_uint_preference(llt_module, "alternate_ethertype", "Alternate ethertype value (in hex)",
"Dissect this ethertype as LLT traffic in addition to the default, 0xCAFE.",
16, &preference_alternate_ethertype); /* A base-16 (hexadecimal) value */
/* Register our dissector */
llt_handle = register_dissector("llt", dissect_llt, proto_llt);
}
void
proto_reg_handoff_llt(void)
{
static gboolean initialized = FALSE;
static guint preference_alternate_ethertype_last;
if (!initialized) {
dissector_add_uint("ethertype", ETHERTYPE_LLT, llt_handle);
initialized = TRUE;
} else {
if (preference_alternate_ethertype_last != 0x0) {
dissector_delete_uint("ethertype", preference_alternate_ethertype_last, llt_handle);
}
}
/* Save the setting to see if it has changed later */
preference_alternate_ethertype_last = preference_alternate_ethertype;
if (preference_alternate_ethertype != 0x0) {
/* Register the new ethertype setting */
dissector_add_uint("ethertype", preference_alternate_ethertype, llt_handle);
}
}
/*
* Editor modelines - https://www.wireshark.org/tools/modelines.html
*
* Local variables:
* c-basic-offset: 8
* tab-width: 8
* indent-tabs-mode: t
* End:
*
* vi: set shiftwidth=8 tabstop=8 noexpandtab:
* :indentSize=8:tabSize=8:noTabs=false:
*/
|
