2001-04-01 04:50:42 +00:00
|
|
|
/* packet_info.h
|
|
|
|
* Definitions for packet info structures and routines
|
|
|
|
*
|
Have a flag in the "packet_info" structure, which indicates whether the
stuff currently being dissected is part of a packet included in an error
packet (e.g., an ICMP Unreachable packet). Have the TCP dissector not
bother doing reassembly if the TCP segment is part of an error packet,
rather than an actual TCP transmission; other dissectors might want to
treat those packets specially as well.
Add to the "tcpinfo" structure a flag indicating whether the URG flag
was set, rather than having the zero or non-zero value of the urgent
pointer indicate that. (Yes, at least as I read RFC 793, a zero urgent
pointer value isn't useful, as it means "the stuff before this segment
is urgent", but it's certainly possible to put onto the wire a TCP
segment with URG set and a zero urgent pointer.)
Don't dissect the TCP header by grabbing the entire header with
"tvb_memcpy()" and then pulling stuff out of it - extract stuff with
individual tvbuff calls, and put stuff into the protocol tree and the
Info column as we extract it, so that we can dissect a partial header.
This lets us, for example, get the source and destination ports from the
TCP header of the part of a TCP segment included in a minimum-length
ICMPv4 error packet.
svn path=/trunk/; revision=3986
2001-10-01 08:29:37 +00:00
|
|
|
* $Id: packet_info.h,v 1.7 2001/10/01 08:29:37 guy Exp $
|
2001-04-01 04:50:42 +00:00
|
|
|
*
|
|
|
|
* Ethereal - Network traffic analyzer
|
2001-06-04 06:46:07 +00:00
|
|
|
* By Gerald Combs <gerald@ethereal.com>
|
2001-04-01 04:50:42 +00:00
|
|
|
* Copyright 1998 Gerald Combs
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU General Public License
|
|
|
|
* as published by the Free Software Foundation; either version 2
|
|
|
|
* of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
* along with this program; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#ifndef __PACKET_INFO_H__
|
|
|
|
#define __PACKET_INFO_H__
|
|
|
|
|
|
|
|
#include "frame_data.h"
|
|
|
|
#include "tvbuff.h"
|
|
|
|
|
|
|
|
/* Types of addresses Ethereal knows about. */
|
|
|
|
typedef enum {
|
|
|
|
AT_NONE, /* no link-layer address */
|
|
|
|
AT_ETHER, /* MAC (Ethernet, 802.x, FDDI) address */
|
|
|
|
AT_IPv4, /* IPv4 */
|
|
|
|
AT_IPv6, /* IPv6 */
|
|
|
|
AT_IPX, /* IPX */
|
|
|
|
AT_SNA, /* SNA */
|
|
|
|
AT_ATALK, /* Appletalk DDP */
|
|
|
|
AT_VINES, /* Banyan Vines */
|
|
|
|
AT_OSI, /* OSI NSAP */
|
|
|
|
AT_DLCI /* Frame Relay DLCI */
|
|
|
|
} address_type;
|
|
|
|
|
|
|
|
typedef struct _address {
|
|
|
|
address_type type; /* type of address */
|
|
|
|
int len; /* length of address, in bytes */
|
|
|
|
const guint8 *data; /* bytes that constitute address */
|
|
|
|
} address;
|
|
|
|
|
|
|
|
#define SET_ADDRESS(addr, addr_type, addr_len, addr_data) { \
|
|
|
|
(addr)->type = (addr_type); \
|
|
|
|
(addr)->len = (addr_len); \
|
|
|
|
(addr)->data = (addr_data); \
|
|
|
|
}
|
|
|
|
|
2001-06-04 07:27:50 +00:00
|
|
|
/*
|
|
|
|
* Given two addresses, return "true" if they're equal, "false" otherwise.
|
|
|
|
*/
|
2001-06-04 06:46:07 +00:00
|
|
|
#define ADDRESSES_EQUAL(addr1, addr2) \
|
|
|
|
((addr1)->type == (addr2)->type && \
|
|
|
|
(addr1)->len == (addr2)->len && \
|
|
|
|
memcmp((addr1)->data, (addr2)->data, (addr1)->len) == 0)
|
|
|
|
|
2001-06-04 07:27:50 +00:00
|
|
|
/*
|
|
|
|
* Copy an address, allocating a new buffer for the address data.
|
|
|
|
*/
|
|
|
|
#define COPY_ADDRESS(to, from) { \
|
|
|
|
guint8 *COPY_ADDRESS_data; \
|
|
|
|
(to)->type = (from)->type; \
|
|
|
|
(to)->len = (from)->len; \
|
|
|
|
COPY_ADDRESS_data = g_malloc((from)->len); \
|
|
|
|
memcpy(COPY_ADDRESS_data, (from)->data, (from)->len); \
|
|
|
|
(to)->data = COPY_ADDRESS_data; \
|
|
|
|
}
|
|
|
|
|
2001-04-01 04:50:42 +00:00
|
|
|
/* Types of port numbers Ethereal knows about. */
|
|
|
|
typedef enum {
|
|
|
|
PT_NONE, /* no port number */
|
|
|
|
PT_SCTP, /* SCTP */
|
|
|
|
PT_TCP, /* TCP */
|
|
|
|
PT_UDP, /* UDP */
|
|
|
|
PT_NCP /* NCP connection */
|
|
|
|
} port_type;
|
|
|
|
|
|
|
|
#define P2P_DIR_UNKNOWN -1
|
|
|
|
#define P2P_DIR_SENT 0
|
|
|
|
#define P2P_DIR_RECV 1
|
|
|
|
|
|
|
|
typedef struct _packet_info {
|
|
|
|
const char *current_proto; /* name of protocol currently being dissected */
|
|
|
|
frame_data *fd;
|
|
|
|
tvbuff_t *compat_top_tvb; /* only needed while converting Ethereal to use tvbuffs */
|
|
|
|
union wtap_pseudo_header *pseudo_header;
|
|
|
|
int len;
|
|
|
|
int captured_len;
|
|
|
|
address dl_src; /* link-layer source address */
|
|
|
|
address dl_dst; /* link-layer destination address */
|
|
|
|
address net_src; /* network-layer source address */
|
|
|
|
address net_dst; /* network-layer destination address */
|
|
|
|
address src; /* source address (net if present, DL otherwise )*/
|
|
|
|
address dst; /* destination address (net if present, DL otherwise )*/
|
|
|
|
guint32 ethertype; /* Ethernet Type Code, if this is an Ethernet packet */
|
|
|
|
guint32 ipproto; /* IP protocol, if this is an IP packet */
|
|
|
|
guint32 ipxptype; /* IPX packet type, if this is an IPX packet */
|
|
|
|
gboolean fragmented; /* TRUE if the protocol is only a fragment */
|
Have a flag in the "packet_info" structure, which indicates whether the
stuff currently being dissected is part of a packet included in an error
packet (e.g., an ICMP Unreachable packet). Have the TCP dissector not
bother doing reassembly if the TCP segment is part of an error packet,
rather than an actual TCP transmission; other dissectors might want to
treat those packets specially as well.
Add to the "tcpinfo" structure a flag indicating whether the URG flag
was set, rather than having the zero or non-zero value of the urgent
pointer indicate that. (Yes, at least as I read RFC 793, a zero urgent
pointer value isn't useful, as it means "the stuff before this segment
is urgent", but it's certainly possible to put onto the wire a TCP
segment with URG set and a zero urgent pointer.)
Don't dissect the TCP header by grabbing the entire header with
"tvb_memcpy()" and then pulling stuff out of it - extract stuff with
individual tvbuff calls, and put stuff into the protocol tree and the
Info column as we extract it, so that we can dissect a partial header.
This lets us, for example, get the source and destination ports from the
TCP header of the part of a TCP segment included in a minimum-length
ICMPv4 error packet.
svn path=/trunk/; revision=3986
2001-10-01 08:29:37 +00:00
|
|
|
gboolean in_error_pkt; /* TRUE if we're inside an {ICMP,CLNP,...} error packet */
|
2001-04-01 04:50:42 +00:00
|
|
|
port_type ptype; /* type of the following two port numbers */
|
|
|
|
guint32 srcport; /* source port */
|
|
|
|
guint32 destport; /* destination port */
|
|
|
|
guint32 match_port;
|
2001-09-13 07:56:53 +00:00
|
|
|
gboolean can_desegment; /* TRUE if this segment could be desegmented */
|
|
|
|
int desegment_offset; /* offset of stuff needing desegmentation */
|
|
|
|
guint32 desegment_len; /* requested desegmentation additional length */
|
2001-04-01 04:50:42 +00:00
|
|
|
int iplen;
|
|
|
|
int iphdrlen;
|
|
|
|
int p2p_dir;
|
2001-08-04 04:04:35 +00:00
|
|
|
void *private; /* pointer to data passed from one dissector to another */
|
2001-04-01 04:50:42 +00:00
|
|
|
} packet_info;
|
|
|
|
|
|
|
|
void blank_packetinfo(void);
|
|
|
|
|
|
|
|
extern packet_info pi;
|
|
|
|
|
|
|
|
#endif /* __PACKET_INFO_H__ */
|