1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
|
/* packet-ndp.c
* Routines for the disassembly of the Nortel Discovery Protocol, formerly
* the SynOptics Network Management Protocol (SONMP).
* (c) Copyright Giles Scott <giles.scott1 [AT] arubanetworks.com>
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*
* This protocol has gone by many names over the years:
*
* Bay Discovery Protocol (BDP), Bay Topology Protocol, Bay Network Management
* Protocol (BNMP), Nortel Management MIB (NMM), Nortel Topology Discovery
* Protocol (NTDP), SynOptics Network Management Protocol (SONMP).
* (source: Wikipedia article on "Nortel Discovery Protocol")
*
*/
#include "config.h"
#include <epan/packet.h>
void proto_register_ndp(void);
void proto_reg_handoff_ndp(void);
/* Although this protocol is proprietary it is documented in the SynOptics MIB's
* So I'm not giving anything away :-)
* The only thing I have not done is decode the segment identifier;
* This changes so much depending on whether the chassis supports
* multi-segment autotopology. As the 5000 is now EOL don't see much point.
*
* MIB's s5emt104.mib, s5tcs112.mib, synro199.mib these should be available via
* http://www.nortelnetworks.com
*/
/* chassis types */
/* Last updated from version 229 ("200609010000Z") of SnpxChassisType in SYNOPTICS-ROOT-MIB.mib */
static const value_string ndp_chassis_val[] =
{
{ 1, "other"},
{ 2, "3000"},
{ 3, "3030"},
{ 4, "2310"},
{ 5, "2810"},
{ 6, "2912"},
{ 7, "2914"},
{ 8, "271x"},
{ 9, "2813"},
{ 10, "2814"},
{ 11, "2915"},
{ 12, "5000"},
{ 13, "2813SA"},
{ 14, "2814SA"},
{ 15, "810M"},
{ 16, "Ethercell"},
{ 17, "5005"},
{ 18, "Alcatel Ethernet workgroup conc."},
{ 20, "2715SA"},
{ 21, "2486"},
{ 22, "28000 series"},
{ 23, "23000 series"},
{ 24, "5DN00x series"},
{ 25, "BayStack Ethernet"},
{ 26, "23100 series"},
{ 27, "100Base-T Hub"},
{ 28, "3000 Fast Ethernet"},
{ 29, "Orion switch"},
/* 30 is "not used" */
{ 31, "DDS"},
{ 32, "Centillion (6 slot)"},
{ 33, "Centillion (12 slot)"},
{ 34, "Centillion (1 slot)"},
{ 35, "BayStack 301"},
{ 36, "BayStack TokenRing Hub"},
{ 37, "FVC Multimedia Switch"},
{ 38, "Switch Node"},
{ 39, "BayStack 302 Switch"},
{ 40, "BayStack 350 Switch"},
{ 41, "BayStack 150 Ethernet Hub"},
{ 42, "Centillion 50N switch"},
{ 43, "Centillion 50T switch"},
{ 44, "BayStack 303 and 304 Switches"},
{ 45, "BayStack 200 Ethernet Hub"},
{ 46, "BayStack 250 10/100 Ethernet Hub"},
/*{ 47, "StackProbe"}, XXX - No longer listed */
{ 48, "BayStack 450 10/100/1000 Switches"},
{ 49, "BayStack 410 10/100 Switches"},
{ 50, "Passport 1200 L3 Switch"},
{ 51, "Passport 1250 L3 Switch"},
{ 52, "Passport 1100 L3 Switch"},
{ 53, "Passport 1150 L3 Switch"},
{ 54, "Passport 1050 L3 Switch"},
{ 55, "Passport 1051 L3 Switch"},
{ 56, "Passport 8610 L3 Switch"},
{ 57, "Passport 8606 L3 Switch"},
{ 58, "Passport 8010"},
{ 59, "Passport 8006"},
{ 60, "BayStack 670 wireless access point"},
{ 61, "Passport 740"},
{ 62, "Passport 750"},
{ 63, "Passport 790"},
{ 64, "Business Policy Switch 2000 10/100 Switches"},
{ 65, "Passport 8110 L2 Switch"},
{ 66, "Passport 8106 L2 Switch"},
{ 67, "BayStack 3580 Gig Switch"},
{ 68, "BayStack 10 Power Supply Unit"},
{ 69, "BayStack 420 10/100 Switch"},
{ 70, "OPTera Metro 1200 Ethernet Service Module"},
{ 71, "OPTera 8010co"},
{ 72, "OPTera 8610co L3 switch"},
{ 73, "OPTera 8110co L2 switch"},
{ 74, "OPTera 8003"},
{ 75, "OPTera 8603 L3 switch"},
{ 76, "OPTera 8103 L2 switch"},
{ 77, "BayStack 380 10/100/1000 Switch"},
{ 78, "Ethernet Switch 470-48T"},
{ 79, "OPTera Metro 1450 Ethernet Service Module"},
{ 80, "OPTera Metro 1400 Ethernet Service Module"},
{ 81, "Alteon Switch Family"},
{ 82, "Ethernet Switch 460-24T-PWR"},
{ 83, "OPTera Metro 8010 OPM L2 Switch"},
{ 84, "OPTera Metro 8010co OPM L2 Switch"},
{ 85, "OPTera Metro 8006 OPM L2 Switch"},
{ 86, "OPTera Metro 8003 OPM L2 Switch"},
{ 87, "Alteon 180e"},
{ 88, "Alteon AD3"},
{ 89, "Alteon 184"},
{ 90, "Alteon AD4"},
{ 91, "Passport 1424 L3 switch"},
{ 92, "Passport 1648 L3 switch"},
{ 93, "Passport 1612 L3 switch"},
{ 94, "Passport 1624 L3 switch"},
{ 95, "BayStack 380-24F Fiber 1000 Switch"},
{ 96, "Ethernet Routing Switch 5510-24T"},
{ 97, "Ethernet Routing Switch 5510-48T"},
{ 98, "Ethernet Switch 470-24T"},
{ 99, "Nortel Networks Wireless LAN Access Point 2220"},
{100, "Passport RBS 2402 L3 switch"},
{101, "Alteon Application Switch 2424"},
{102, "Alteon Application Switch 2224"},
{103, "Alteon Application Switch 2208"},
{104, "Alteon Application Switch 2216"},
{105, "Alteon Application Switch 3408"},
{106, "Alteon Application Switch 3416"},
{107, "Nortel Networks Wireless LAN SecuritySwitch 2250"},
{108, "Ethernet Switch 425-48T"},
{109, "Ethernet Switch 425-24T"},
{110, "Nortel Networks Wireless LAN Access Point 2221"},
{111, "Nortel Metro Ethernet Service Unit 24-T SPF switch"},
{112, " Nortel Metro Ethernet Service Unit 24-T LX DC switch"},
{113, "Passport 8300 10-slot chassis"},
{114, "Passport 8300 6-slot chassis"},
{115, "Ethernet Routing Switch 5520-24T-PWR"},
{116, "Ethernet Routing Switch 5520-48T-PWR"},
{117, "Nortel Networks VPN Gateway 3050"},
{118, "Alteon SSL 310 10/100"},
{119, "Alteon SSL 310 10/100 Fiber"},
{120, "Alteon SSL 310 10/100 FIPS"},
{121, "Alteon SSL 410 10/100/1000"},
{122, "Alteon SSL 410 10/100/1000 Fiber"},
{123, "Alteon Application Switch 2424-SSL"},
{124, "Ethernet Switch 325-24T"},
{125, "Ethernet Switch 325-24G"},
{126, "Nortel Networks Wireless LAN Access Point 2225"},
{127, "Nortel Networks Wireless LAN SecuritySwitch 2270"},
{128, "24-port Ethernet Switch 470-24T-PWR"},
{129, "48-port Ethernet Switch 470-48T-PWR"},
{130, "Ethernet Routing Switch 5530-24TFD"},
{131, "Ethernet Switch 3510-24T"},
{132, "Nortel Metro Ethernet Service Unit 12G AC L3 switch"},
{133, "Nortel Metro Ethernet Service Unit 12G DC L3 switch"},
{134, "Nortel Secure Access Switch"},
{135, "Nortel Networks VPN Gateway 3070"},
{136, "OPTera Metro 3500"},
{137, "SMB BES 1010 24T"},
{138, "SMB BES 1010 48T"},
{139, "SMB BES 1020 24T PWR"},
{140, "SMB BES 1020 48T PWR"},
{141, "SMB BES 2010 24T"},
{142, "SMB BES 2010 48T"},
{143, "SMB BES 2020 24T PWR"},
{144, "SMB BES 2020 48T PWR"},
{145, "SMB BES 110 24T"},
{146, "SMB BES 110 48T"},
{147, "SMB BES 120 24T PWR"},
{148, "SMB BES 120 48T PWR"},
{149, "SMB BES 210 24T"},
{150, "SMB BES 210 48T"},
{151, "SMB BES 220 24T PWR"},
{152, "SMB BES 220 48T PWR"},
{153, "OME 6500"},
{154, "Ethernet Routing Switch 4548GT"},
{155, "Ethernet Routing Switch 4548GT-PWR"},
{156, "Ethernet Routing Switch 4550T"},
{157, "Ethernet Routing Switch 4550T-PWR"},
{158, "Ethernet Routing Switch 4526FX"},
{159, "Ethernet Routing Switch 2500-26T"},
{160, "Ethernet Routing Switch 2500-26T-PWR"},
{161, "Ethernet Routing Switch 2500-50T"},
{162, "Ethernet Routing Switch 2500-50T-PWR"},
{213, "Virtual Services Platform 8284XSQ"},
{0, NULL}
};
static value_string_ext ndp_chassis_val_ext = VALUE_STRING_EXT_INIT(ndp_chassis_val);
/* from synro179.mib - SnpxBackplaneType */
static const value_string ndp_backplane_val[] =
{
{ 1, "Other"},
{ 2, "Ethernet"},
{ 3, "Ethernet and Tokenring"},
{ 4, "Ethernet and FDDI"},
{ 5, "Ethernet, Tokenring and FDDI"},
{ 6, "Ethernet and Tokenring with redundant power"},
{ 7, "Ethernet, Tokenring, FDDI with redundant power"},
{ 8, "Token Ring"},
{ 9, "Ethernet, Tokenring and Fast Ethernet"},
{10, "Ethernet and Fast Ethernet"},
{11, "Ethernet, Tokenring, Fast Ethernet with redundant power"},
{12, "Ethernet, Fast Ethernet and Gigabit Ethernet"},
{0, NULL}
};
static value_string_ext ndp_backplane_val_ext = VALUE_STRING_EXT_INIT(ndp_backplane_val);
static const value_string ndp_state_val[] =
{
{1, "Topology Change"},
{2, "Heartbeat"},
{3, "New"},
{0, NULL}
};
/* Offsets in NDP Hello structure. */
#define NDP_IP_ADDRESS 0
#define NDP_SEGMENT_IDENTIFIER 4
#define NDP_CHASSIS_TYPE 7
#define NDP_BACKPLANE_TYPE 8
#define NDP_STATE 9
#define NDP_NUMBER_OF_LINKS 10
static int proto_ndp = -1;
static int hf_ndp_ip_address = -1;
static int hf_ndp_segment_identifier = -1;
static int hf_ndp_chassis_type = -1;
static int hf_ndp_backplane_type = -1;
static int hf_ndp_state = -1;
static int hf_ndp_number_of_links = -1;
static gint ett_ndp = -1;
static dissector_handle_t ndp_handle;
static int
dissect_ndp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
const char *hello_type;
proto_tree *ndp_tree = NULL;
proto_item *ti;
col_set_str(pinfo->cinfo, COL_PROTOCOL, "NDP");
hello_type = "";
if (pinfo->dl_dst.type == AT_ETHER) {
const guint8 *dstmac = (const guint8 *)pinfo->dl_dst.data;
switch (dstmac[5]) {
case 0:
hello_type = "Segment ";
break;
case 1:
hello_type = "FlatNet ";
break;
}
}
col_add_fstr(pinfo->cinfo, COL_INFO, "%sHello", hello_type);
if (tree) {
ti = proto_tree_add_protocol_format(tree, proto_ndp, tvb, 0, 11,
"Nortel Discovery Protocol");
ndp_tree = proto_item_add_subtree(ti, ett_ndp);
proto_tree_add_item(ndp_tree, hf_ndp_ip_address, tvb,
NDP_IP_ADDRESS, 4, ENC_BIG_ENDIAN);
proto_tree_add_item(ndp_tree, hf_ndp_segment_identifier, tvb,
NDP_SEGMENT_IDENTIFIER, 3, ENC_BIG_ENDIAN);
proto_tree_add_item(ndp_tree, hf_ndp_chassis_type, tvb,
NDP_CHASSIS_TYPE, 1, ENC_BIG_ENDIAN);
proto_tree_add_item(ndp_tree, hf_ndp_backplane_type, tvb,
NDP_BACKPLANE_TYPE, 1, ENC_BIG_ENDIAN);
proto_tree_add_item(ndp_tree, hf_ndp_state, tvb,
NDP_STATE, 1, ENC_BIG_ENDIAN);
proto_tree_add_item(ndp_tree, hf_ndp_number_of_links, tvb,
NDP_NUMBER_OF_LINKS, 1, ENC_BIG_ENDIAN);
}
return tvb_captured_length(tvb);
}
void
proto_register_ndp(void)
{
static hf_register_info hf[] = {
{ &hf_ndp_ip_address,
{ "IP address", "ndp.ipaddress", FT_IPv4, BASE_NONE, NULL, 0x0,
"IP address of the Network Management Module (NMM)", HFILL }},
{ &hf_ndp_segment_identifier,
{ "Segment Identifier", "ndp.segmentident", FT_UINT24, BASE_HEX, NULL, 0x0,
"Segment id of the segment from which the agent is sending the topology message", HFILL }},
{ &hf_ndp_chassis_type,
{ "Chassis type", "ndp.chassis", FT_UINT8, BASE_DEC|BASE_EXT_STRING,
&ndp_chassis_val_ext, 0x0,
"Chassis type of the agent sending the topology message", HFILL }},
{ &hf_ndp_backplane_type,
{ "Backplane type", "ndp.backplane", FT_UINT8, BASE_DEC|BASE_EXT_STRING,
&ndp_backplane_val_ext, 0x0,
"Backplane type of the agent sending the topology message", HFILL }},
{ &hf_ndp_state,
{ "State", "ndp.state", FT_UINT8, BASE_DEC,
VALS(ndp_state_val), 0x0,
"Current state of this Network Management Module (NMM)", HFILL }},
{ &hf_ndp_number_of_links,
{ "Number of links", "ndp.numberoflinks", FT_UINT8, BASE_DEC, NULL, 0x0,
"Number of interconnect ports", HFILL }},
};
static gint *ett[] = {
&ett_ndp,
};
proto_ndp = proto_register_protocol("Nortel Discovery Protocol", "NDP", "ndp");
proto_register_field_array(proto_ndp, hf, array_length(hf));
proto_register_subtree_array(ett, array_length(ett));
ndp_handle = register_dissector("ndp", dissect_ndp, proto_ndp);
}
void
proto_reg_handoff_ndp(void)
{
dissector_add_uint("llc.nortel_pid", 0x01a1, ndp_handle); /* flatnet hello */
dissector_add_uint("llc.nortel_pid", 0x01a2, ndp_handle); /* Segment hello */
/* not got round to adding this but it's really old, so I'm not sure people will see it */
/* it uses a different packet format */
/* dissector_add_uint("llc.nortel_pid", 0x01a3, ndp_handle); */ /* Bridge hello */
}
/*
* Editor modelines - https://www.wireshark.org/tools/modelines.html
*
* Local variables:
* c-basic-offset: 8
* tab-width: 8
* indent-tabs-mode: t
* End:
*
* vi: set shiftwidth=8 tabstop=8 noexpandtab:
* :indentSize=8:tabSize=8:noTabs=false:
*/
|
