2005-12-07 23:20:11 +00:00
|
|
|
/* packet-dop.c
|
|
|
|
* Routines for X.501 (DSA Operational Attributes) packet dissection
|
|
|
|
* Graeme Lunt 2005
|
|
|
|
*
|
|
|
|
* $Id$
|
|
|
|
*
|
2006-05-21 05:12:17 +00:00
|
|
|
* Wireshark - Network traffic analyzer
|
|
|
|
* By Gerald Combs <gerald@wireshark.org>
|
2005-12-07 23:20:11 +00:00
|
|
|
* Copyright 1998 Gerald Combs
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU General Public License
|
|
|
|
* as published by the Free Software Foundation; either version 2
|
|
|
|
* of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
* along with this program; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
|
|
# include "config.h"
|
|
|
|
#endif
|
|
|
|
|
|
|
|
#include <glib.h>
|
|
|
|
#include <epan/packet.h>
|
|
|
|
#include <epan/prefs.h>
|
|
|
|
#include <epan/conversation.h>
|
|
|
|
|
|
|
|
#include <stdio.h>
|
|
|
|
#include <string.h>
|
|
|
|
|
|
|
|
#include "packet-ber.h"
|
|
|
|
#include "packet-acse.h"
|
|
|
|
#include "packet-ros.h"
|
|
|
|
|
|
|
|
#include "packet-x509sat.h"
|
|
|
|
#include "packet-x509af.h"
|
|
|
|
#include "packet-x509if.h"
|
|
|
|
#include "packet-dap.h"
|
|
|
|
#include "packet-dsp.h"
|
2006-04-30 12:53:26 +00:00
|
|
|
#include "packet-crmf.h"
|
2005-12-07 23:20:11 +00:00
|
|
|
|
|
|
|
|
|
|
|
#include "packet-dop.h"
|
|
|
|
|
|
|
|
#define PNAME "X.501 Directory Operational Binding Management Protocol"
|
|
|
|
#define PSNAME "DOP"
|
|
|
|
#define PFNAME "dop"
|
|
|
|
|
|
|
|
static guint global_dop_tcp_port = 102;
|
|
|
|
static guint tcp_port = 0;
|
|
|
|
static dissector_handle_t tpkt_handle = NULL;
|
|
|
|
void prefs_register_dop(void); /* forwad declaration for use in preferences registration */
|
|
|
|
|
|
|
|
/* Initialize the protocol and registered fields */
|
|
|
|
int proto_dop = -1;
|
|
|
|
|
|
|
|
static struct SESSION_DATA_STRUCTURE* session = NULL;
|
|
|
|
static const char *binding_type = NULL; /* binding_type */
|
|
|
|
|
2005-12-14 21:02:56 +00:00
|
|
|
static int call_dop_oid_callback(char *base_oid, tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, char *col_info);
|
2005-12-07 23:20:11 +00:00
|
|
|
|
|
|
|
#include "packet-dop-hf.c"
|
|
|
|
|
|
|
|
/* Initialize the subtree pointers */
|
|
|
|
static gint ett_dop = -1;
|
|
|
|
#include "packet-dop-ett.c"
|
|
|
|
|
|
|
|
#include "packet-dop-fn.c"
|
|
|
|
|
|
|
|
static int
|
2005-12-14 21:02:56 +00:00
|
|
|
call_dop_oid_callback(char *base_oid, tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, char *col_info)
|
2005-12-07 23:20:11 +00:00
|
|
|
{
|
|
|
|
char binding_param[BER_MAX_OID_STR_LEN];
|
|
|
|
|
2005-12-14 21:02:56 +00:00
|
|
|
g_snprintf(binding_param, BER_MAX_OID_STR_LEN, "%s.%s", base_oid, binding_type ? binding_type : "");
|
2005-12-07 23:20:11 +00:00
|
|
|
|
2005-12-14 21:02:56 +00:00
|
|
|
if (col_info && (check_col(pinfo->cinfo, COL_INFO)))
|
|
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, " %s", col_info);
|
2005-12-07 23:20:11 +00:00
|
|
|
|
|
|
|
return call_ber_oid_callback(binding_param, tvb, offset, pinfo, tree);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
* Dissect DOP PDUs inside a ROS PDUs
|
|
|
|
*/
|
|
|
|
static void
|
|
|
|
dissect_dop(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree)
|
|
|
|
{
|
|
|
|
int offset = 0;
|
|
|
|
int old_offset;
|
|
|
|
proto_item *item=NULL;
|
|
|
|
proto_tree *tree=NULL;
|
|
|
|
int (*dop_dissector)(gboolean implicit_tag _U_, tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree *tree, int hf_index _U_) = NULL;
|
|
|
|
char *dop_op_name;
|
|
|
|
|
|
|
|
/* do we have operation information from the ROS dissector? */
|
|
|
|
if( !pinfo->private_data ){
|
|
|
|
if(parent_tree){
|
|
|
|
proto_tree_add_text(parent_tree, tvb, offset, -1,
|
|
|
|
"Internal error: can't get operation information from ROS dissector.");
|
|
|
|
}
|
|
|
|
return ;
|
|
|
|
} else {
|
|
|
|
session = ( (struct SESSION_DATA_STRUCTURE*)(pinfo->private_data) );
|
|
|
|
}
|
|
|
|
|
|
|
|
if(parent_tree){
|
|
|
|
item = proto_tree_add_item(parent_tree, proto_dop, tvb, 0, -1, FALSE);
|
|
|
|
tree = proto_item_add_subtree(item, ett_dop);
|
|
|
|
}
|
|
|
|
if (check_col(pinfo->cinfo, COL_PROTOCOL))
|
|
|
|
col_set_str(pinfo->cinfo, COL_PROTOCOL, "DOP");
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO))
|
|
|
|
col_clear(pinfo->cinfo, COL_INFO);
|
|
|
|
|
|
|
|
switch(session->ros_op & ROS_OP_MASK) {
|
|
|
|
case (ROS_OP_BIND | ROS_OP_ARGUMENT): /* BindInvoke */
|
|
|
|
dop_dissector = dissect_dop_DSAOperationalManagementBindArgument;
|
|
|
|
dop_op_name = "DSA-Operational-Bind-Argument";
|
|
|
|
break;
|
|
|
|
case (ROS_OP_BIND | ROS_OP_RESULT): /* BindResult */
|
|
|
|
dop_dissector = dissect_dop_DSAOperationalManagementBindResult;
|
|
|
|
dop_op_name = "DSA-Operational-Bind-Result";
|
|
|
|
break;
|
|
|
|
case (ROS_OP_BIND | ROS_OP_ERROR): /* BindError */
|
|
|
|
dop_dissector = dissect_dop_DSAOperationalManagementBindError;
|
|
|
|
dop_op_name = "DSA-Operational-Management-Bind-Error";
|
|
|
|
break;
|
|
|
|
case (ROS_OP_INVOKE | ROS_OP_ARGUMENT): /* Invoke Argument */
|
|
|
|
switch(session->ros_op & ROS_OP_OPCODE_MASK) {
|
|
|
|
case 100: /* establish */
|
|
|
|
dop_dissector = dissect_dop_EstablishOperationalBindingArgument;
|
|
|
|
dop_op_name = "Establish-Operational-Binding-Argument";
|
|
|
|
break;
|
|
|
|
case 101: /* terminate */
|
|
|
|
dop_dissector = dissect_dop_TerminateOperationalBindingArgument;
|
|
|
|
dop_op_name = "Terminate-Operational-Binding-Argument";
|
|
|
|
break;
|
|
|
|
case 102: /* modify */
|
|
|
|
dop_dissector = dissect_dop_ModifyOperationalBindingArgument;
|
|
|
|
dop_op_name = "Modify-Operational-Binding-Argument";
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
proto_tree_add_text(tree, tvb, offset, -1,"Unsupported DOP Argument opcode (%d)",
|
|
|
|
session->ros_op & ROS_OP_OPCODE_MASK);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
case (ROS_OP_INVOKE | ROS_OP_RESULT): /* Return Result */
|
|
|
|
switch(session->ros_op & ROS_OP_OPCODE_MASK) {
|
|
|
|
case 100: /* establish */
|
|
|
|
dop_dissector = dissect_dop_EstablishOperationalBindingResult;
|
|
|
|
dop_op_name = "Establish-Operational-Binding-Result";
|
|
|
|
break;
|
|
|
|
case 101: /* terminate */
|
|
|
|
dop_dissector = dissect_dop_TerminateOperationalBindingResult;
|
|
|
|
dop_op_name = "Terminate-Operational-Binding-Result";
|
|
|
|
break;
|
|
|
|
case 102: /* modify */
|
|
|
|
dop_dissector = dissect_dop_ModifyOperationalBindingResult;
|
|
|
|
dop_op_name = "Modify-Operational-Binding-Result";
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
proto_tree_add_text(tree, tvb, offset, -1,"Unsupported DOP Result opcode (%d)",
|
|
|
|
session->ros_op & ROS_OP_OPCODE_MASK);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
case (ROS_OP_INVOKE | ROS_OP_ERROR): /* Return Error */
|
|
|
|
switch(session->ros_op & ROS_OP_OPCODE_MASK) {
|
|
|
|
case 100: /* operational-binding */
|
|
|
|
dop_dissector = dissect_dop_OpBindingErrorParam;
|
|
|
|
dop_op_name = "Operational-Binding-Error";
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
proto_tree_add_text(tree, tvb, offset, -1,"Unsupported DOP Error opcode (%d)",
|
|
|
|
session->ros_op & ROS_OP_OPCODE_MASK);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
proto_tree_add_text(tree, tvb, offset, -1,"Unsupported DOP PDU");
|
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
|
|
|
if(dop_dissector) {
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO))
|
|
|
|
col_add_str(pinfo->cinfo, COL_INFO, dop_op_name);
|
|
|
|
|
|
|
|
while (tvb_reported_length_remaining(tvb, offset) > 0){
|
|
|
|
old_offset=offset;
|
|
|
|
offset=(*dop_dissector)(FALSE, tvb, offset, pinfo , tree, -1);
|
|
|
|
if(offset == old_offset){
|
|
|
|
proto_tree_add_text(tree, tvb, offset, -1,"Internal error, zero-byte DOP PDU");
|
|
|
|
offset = tvb_length(tvb);
|
|
|
|
break;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/*--- proto_register_dop -------------------------------------------*/
|
|
|
|
void proto_register_dop(void) {
|
|
|
|
|
|
|
|
/* List of fields */
|
|
|
|
static hf_register_info hf[] =
|
|
|
|
{
|
|
|
|
#include "packet-dop-hfarr.c"
|
|
|
|
};
|
|
|
|
|
|
|
|
/* List of subtrees */
|
|
|
|
static gint *ett[] = {
|
|
|
|
&ett_dop,
|
|
|
|
#include "packet-dop-ettarr.c"
|
|
|
|
};
|
|
|
|
|
|
|
|
module_t *dop_module;
|
|
|
|
|
|
|
|
/* Register protocol */
|
|
|
|
proto_dop = proto_register_protocol(PNAME, PSNAME, PFNAME);
|
|
|
|
|
|
|
|
register_dissector("dop", dissect_dop, proto_dop);
|
|
|
|
|
|
|
|
/* Register fields and subtrees */
|
|
|
|
proto_register_field_array(proto_dop, hf, array_length(hf));
|
|
|
|
proto_register_subtree_array(ett, array_length(ett));
|
|
|
|
|
|
|
|
/* Register our configuration options for DOP, particularly our port */
|
|
|
|
|
|
|
|
#ifdef PREFERENCE_GROUPING
|
|
|
|
dop_module = prefs_register_protocol_subtree("OSI/X.500", proto_dop, prefs_register_dop);
|
|
|
|
#else
|
|
|
|
dop_module = prefs_register_protocol(proto_dop, prefs_register_dop);
|
|
|
|
#endif
|
|
|
|
|
|
|
|
prefs_register_uint_preference(dop_module, "tcp.port", "DOP TCP Port",
|
|
|
|
"Set the port for DOP operations (if other"
|
|
|
|
" than the default of 102)",
|
|
|
|
10, &global_dop_tcp_port);
|
|
|
|
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/*--- proto_reg_handoff_dop --- */
|
|
|
|
void proto_reg_handoff_dop(void) {
|
|
|
|
dissector_handle_t handle = NULL;
|
|
|
|
|
|
|
|
#include "packet-dop-dis-tab.c"
|
|
|
|
/* APPLICATION CONTEXT */
|
|
|
|
|
|
|
|
register_ber_oid_name("2.5.3.3", "id-ac-directory-operational-binding-management");
|
|
|
|
|
|
|
|
/* ABSTRACT SYNTAXES */
|
|
|
|
|
|
|
|
/* Register DOP with ROS (with no use of RTSE) */
|
|
|
|
if((handle = find_dissector("dop"))) {
|
|
|
|
register_ros_oid_dissector_handle("2.5.9.4", handle, 0, "id-as-directory-operational-binding-management", FALSE);
|
|
|
|
}
|
|
|
|
|
2005-12-14 21:02:56 +00:00
|
|
|
/* BINDING TYPES */
|
|
|
|
|
|
|
|
register_ber_oid_name("2.5.19.1", "shadow-agreement");
|
|
|
|
register_ber_oid_name("2.5.19.2", "hierarchical-agreement");
|
|
|
|
register_ber_oid_name("2.5.19.3", "non-specific-hierarchical-agreement");
|
|
|
|
|
2006-04-30 12:53:26 +00:00
|
|
|
/* ACCESS CONTROL SCHEMES */
|
|
|
|
register_ber_oid_name("2.5.28.1", "basic-ACS");
|
|
|
|
register_ber_oid_name("2.5.28.2", "simplified-ACS");
|
|
|
|
register_ber_oid_name("2.5.28.3", "ruleBased-ACS");
|
|
|
|
register_ber_oid_name("2.5.28.4", "ruleAndBasic-ACS");
|
|
|
|
register_ber_oid_name("2.5.28.5", "ruleAndSimple-ACS");
|
|
|
|
|
|
|
|
/* ADMINISTRATIVE ROLES */
|
|
|
|
register_ber_oid_name("2.5.23.1", "id-ar-autonomousArea");
|
|
|
|
register_ber_oid_name("2.5.23.2", "id-ar-accessControlSpecificArea");
|
|
|
|
register_ber_oid_name("2.5.23.3", "id-ar-accessControlInnerArea");
|
|
|
|
register_ber_oid_name("2.5.23.4", "id-ar-subschemaAdminSpecificArea");
|
|
|
|
register_ber_oid_name("2.5.23.5", "id-ar-collectiveAttributeSpecificArea");
|
|
|
|
register_ber_oid_name("2.5.23.6", "id-ar-collectiveAttributeInnerArea");
|
|
|
|
register_ber_oid_name("2.5.23.7", "id-ar-contextDefaultSpecificArea");
|
|
|
|
register_ber_oid_name("2.5.23.8", "id-ar-serviceSpecificArea");
|
|
|
|
|
2005-12-07 23:20:11 +00:00
|
|
|
/* remember the tpkt handler for change in preferences */
|
|
|
|
tpkt_handle = find_dissector("tpkt");
|
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
void prefs_register_dop(void) {
|
|
|
|
|
|
|
|
/* de-register the old port */
|
|
|
|
/* port 102 is registered by TPKT - don't undo this! */
|
|
|
|
if((tcp_port != 102) && tpkt_handle)
|
|
|
|
dissector_delete("tcp.port", tcp_port, tpkt_handle);
|
|
|
|
|
|
|
|
/* Set our port number for future use */
|
|
|
|
tcp_port = global_dop_tcp_port;
|
|
|
|
|
|
|
|
if((tcp_port > 0) && (tcp_port != 102) && tpkt_handle)
|
|
|
|
dissector_add("tcp.port", global_dop_tcp_port, tpkt_handle);
|
|
|
|
|
|
|
|
}
|