forked from osmocom/wireshark
![Jaap Keuter](/assets/img/avatar_default.png)
Bug: 14966 Change-Id: I9c5c1da923a0cc2881465bcc484850d042a314d6 Signed-off-by: Jaap Keuter <jaap.keuter@xs4all.nl> Reviewed-on: https://code.wireshark.org/review/28694 Tested-by: Petri Dish Buildbot Reviewed-by: Roland Knall <rknall@gmail.com>
1335 lines
44 KiB
C
1335 lines
44 KiB
C
/* packet-coap.c
|
|
* Routines for CoAP packet disassembly
|
|
* draft-ietf-core-coap-14.txt
|
|
* draft-ietf-core-block-10.txt
|
|
* draft-ietf-core-observe-16.txt
|
|
* draft-ietf-core-link-format-06.txt
|
|
* Shoichi Sakane <sakane@tanu.org>
|
|
*
|
|
* Changes for draft-ietf-core-coap-17.txt
|
|
* Hauke Mehrtens <hauke@hauke-m.de>
|
|
*
|
|
* Wireshark - Network traffic analyzer
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
* Copyright 1998 Gerald Combs
|
|
*
|
|
* SPDX-License-Identifier: GPL-2.0-or-later
|
|
*/
|
|
|
|
#include "config.h"
|
|
|
|
|
|
#include <epan/conversation.h>
|
|
#include <epan/packet.h>
|
|
#include <epan/proto_data.h>
|
|
#include <epan/expert.h>
|
|
#include <epan/wmem/wmem.h>
|
|
#include <epan/to_str.h>
|
|
#include "packet-dtls.h"
|
|
#include "packet-coap.h"
|
|
#include "packet-http.h"
|
|
|
|
void proto_register_coap(void);
|
|
|
|
static dissector_table_t media_type_dissector_table;
|
|
|
|
static int proto_coap = -1;
|
|
|
|
static int hf_coap_version = -1;
|
|
static int hf_coap_ttype = -1;
|
|
static int hf_coap_token_len = -1;
|
|
static int hf_coap_token = -1;
|
|
static int hf_coap_mid = -1;
|
|
|
|
static int hf_coap_response_in = -1;
|
|
static int hf_coap_response_to = -1;
|
|
static int hf_coap_response_time = -1;
|
|
static int hf_coap_oscore_kid = -1;
|
|
static int hf_coap_oscore_kid_context = -1;
|
|
static int hf_coap_oscore_piv = -1;
|
|
|
|
static gint ett_coap = -1;
|
|
|
|
static COAP_COMMON_LIST_T(dissect_coap_hf);
|
|
|
|
static dissector_handle_t coap_handle;
|
|
static dissector_handle_t oscore_handle;
|
|
|
|
/* CoAP's IANA-assigned port (UDP only) number */
|
|
#define DEFAULT_COAP_PORT 5683
|
|
#define DEFAULT_COAPS_PORT 5684
|
|
|
|
/* indicators whether those are to be showed or not */
|
|
#define DEFAULT_COAP_CTYPE_VALUE ~0U
|
|
#define DEFAULT_COAP_BLOCK_NUMBER ~0U
|
|
|
|
/*
|
|
* Transaction Type
|
|
*/
|
|
static const value_string vals_ttype[] = {
|
|
{ 0, "Confirmable" },
|
|
{ 1, "Non-Confirmable" },
|
|
{ 2, "Acknowledgement" },
|
|
{ 3, "Reset" },
|
|
{ 0, NULL },
|
|
};
|
|
static const value_string vals_ttype_short[] = {
|
|
{ 0, "CON" },
|
|
{ 1, "NON" },
|
|
{ 2, "ACK" },
|
|
{ 3, "RST" },
|
|
{ 0, NULL },
|
|
};
|
|
|
|
/*
|
|
* Method Code
|
|
* Response Code
|
|
*/
|
|
static const value_string vals_code[] = {
|
|
{ 0, "Empty Message" },
|
|
|
|
/* method code */
|
|
{ 1, "GET" },
|
|
{ 2, "POST" },
|
|
{ 3, "PUT" },
|
|
{ 4, "DELETE" },
|
|
{ 5, "FETCH" }, /* RFC8132 */
|
|
{ 6, "PATCH" }, /* RFC8132 */
|
|
{ 7, "iPATCH" }, /* RFC8132 */
|
|
|
|
/* response code */
|
|
{ 65, "2.01 Created" },
|
|
{ 66, "2.02 Deleted" },
|
|
{ 67, "2.03 Valid" },
|
|
{ 68, "2.04 Changed" },
|
|
{ 69, "2.05 Content" },
|
|
{ 95, "2.31 Continue" },
|
|
{ 128, "4.00 Bad Request" },
|
|
{ 129, "4.01 Unauthorized" },
|
|
{ 130, "4.02 Bad Option" },
|
|
{ 131, "4.03 Forbidden" },
|
|
{ 132, "4.04 Not Found" },
|
|
{ 133, "4.05 Method Not Allowed" },
|
|
{ 134, "4.06 Not Acceptable" },
|
|
{ 136, "4.08 Request Entity Incomplete" }, /* core-block-10 */
|
|
{ 137, "4.09 Conflict" }, /* RFC8132 */
|
|
{ 140, "4.12 Precondition Failed" },
|
|
{ 141, "4.13 Request Entity Too Large" },
|
|
{ 143, "4.15 Unsupported Content-Format" },
|
|
{ 150, "4.22 Unprocessable Entity" }, /* RFC8132 */
|
|
{ 160, "5.00 Internal Server Error" },
|
|
{ 161, "5.01 Not Implemented" },
|
|
{ 162, "5.02 Bad Gateway" },
|
|
{ 163, "5.03 Service Unavailable" },
|
|
{ 164, "5.04 Gateway Timeout" },
|
|
{ 165, "5.05 Proxying Not Supported" },
|
|
|
|
{ 0, NULL },
|
|
};
|
|
value_string_ext coap_vals_code_ext = VALUE_STRING_EXT_INIT(vals_code);
|
|
|
|
const value_string coap_vals_observe_options[] = {
|
|
{ 0, "Register" },
|
|
{ 1, "Deregister" },
|
|
{ 0, NULL },
|
|
};
|
|
|
|
/*
|
|
* Option Headers
|
|
* No-Option must not be included in this structure, is handled in the function
|
|
* of the dissector, especially.
|
|
*/
|
|
#define COAP_OPT_IF_MATCH 1
|
|
#define COAP_OPT_URI_HOST 3
|
|
#define COAP_OPT_ETAG 4
|
|
#define COAP_OPT_IF_NONE_MATCH 5
|
|
#define COAP_OPT_OBSERVE 6 /* core-observe-16 */
|
|
#define COAP_OPT_URI_PORT 7
|
|
#define COAP_OPT_LOCATION_PATH 8
|
|
#define COAP_OPT_URI_PATH 11
|
|
#define COAP_OPT_CONTENT_TYPE 12
|
|
#define COAP_OPT_MAX_AGE 14
|
|
#define COAP_OPT_URI_QUERY 15
|
|
#define COAP_OPT_ACCEPT 17
|
|
#define COAP_OPT_LOCATION_QUERY 20
|
|
#define COAP_OPT_OBJECT_SECURITY 21 /* value used in OSCORE plugtests */
|
|
#define COAP_OPT_BLOCK2 23 /* core-block-10 */
|
|
#define COAP_OPT_BLOCK_SIZE 28 /* core-block-10 */
|
|
#define COAP_OPT_BLOCK1 27 /* core-block-10 */
|
|
#define COAP_OPT_PROXY_URI 35
|
|
#define COAP_OPT_PROXY_SCHEME 39
|
|
#define COAP_OPT_SIZE1 60
|
|
|
|
static const value_string vals_opt_type[] = {
|
|
{ COAP_OPT_IF_MATCH, "If-Match" },
|
|
{ COAP_OPT_URI_HOST, "Uri-Host" },
|
|
{ COAP_OPT_ETAG, "Etag" },
|
|
{ COAP_OPT_IF_NONE_MATCH, "If-None-Match" },
|
|
{ COAP_OPT_URI_PORT, "Uri-Port" },
|
|
{ COAP_OPT_LOCATION_PATH, "Location-Path" },
|
|
{ COAP_OPT_URI_PATH, "Uri-Path" },
|
|
{ COAP_OPT_CONTENT_TYPE, "Content-Format" },
|
|
{ COAP_OPT_MAX_AGE, "Max-age" },
|
|
{ COAP_OPT_URI_QUERY, "Uri-Query" },
|
|
{ COAP_OPT_ACCEPT, "Accept" },
|
|
{ COAP_OPT_LOCATION_QUERY, "Location-Query" },
|
|
{ COAP_OPT_OBJECT_SECURITY,"Object-Security" },
|
|
{ COAP_OPT_PROXY_URI, "Proxy-Uri" },
|
|
{ COAP_OPT_PROXY_SCHEME, "Proxy-Scheme" },
|
|
{ COAP_OPT_SIZE1, "Size1" },
|
|
{ COAP_OPT_OBSERVE, "Observe" },
|
|
{ COAP_OPT_BLOCK2, "Block2" },
|
|
{ COAP_OPT_BLOCK1, "Block1" },
|
|
{ COAP_OPT_BLOCK_SIZE, "Block Size" },
|
|
{ 0, NULL },
|
|
};
|
|
|
|
struct coap_option_range_t {
|
|
guint type;
|
|
gint min;
|
|
gint max;
|
|
} coi[] = {
|
|
{ COAP_OPT_IF_MATCH, 0, 8 },
|
|
{ COAP_OPT_URI_HOST, 1, 255 },
|
|
{ COAP_OPT_ETAG, 1, 8 },
|
|
{ COAP_OPT_IF_NONE_MATCH, 0, 0 },
|
|
{ COAP_OPT_URI_PORT, 0, 2 },
|
|
{ COAP_OPT_LOCATION_PATH, 0, 255 },
|
|
{ COAP_OPT_URI_PATH, 0, 255 },
|
|
{ COAP_OPT_CONTENT_TYPE, 0, 2 },
|
|
{ COAP_OPT_MAX_AGE, 0, 4 },
|
|
{ COAP_OPT_URI_QUERY, 1, 255 },
|
|
{ COAP_OPT_ACCEPT, 0, 2 },
|
|
{ COAP_OPT_LOCATION_QUERY, 0, 255 },
|
|
{ COAP_OPT_OBJECT_SECURITY, 0, 255 },
|
|
{ COAP_OPT_PROXY_URI, 1,1034 },
|
|
{ COAP_OPT_PROXY_SCHEME, 1, 255 },
|
|
{ COAP_OPT_SIZE1, 0, 4 },
|
|
{ COAP_OPT_OBSERVE, 0, 3 },
|
|
{ COAP_OPT_BLOCK2, 0, 3 },
|
|
{ COAP_OPT_BLOCK1, 0, 3 },
|
|
{ COAP_OPT_BLOCK_SIZE, 0, 4 },
|
|
};
|
|
|
|
static const value_string vals_ctype[] = {
|
|
{ 0, "text/plain; charset=utf-8" },
|
|
{ 40, "application/link-format" },
|
|
{ 41, "application/xml" },
|
|
{ 42, "application/octet-stream" },
|
|
{ 47, "application/exi" },
|
|
{ 50, "application/json" },
|
|
{ 60, "application/cbor" },
|
|
{ 1542, "application/vnd.oma.lwm2m+tlv" },
|
|
{ 1543, "application/vnd.oma.lwm2m+json" },
|
|
{ 11542, "application/vnd.oma.lwm2m+tlv" },
|
|
{ 11543, "application/vnd.oma.lwm2m+json" },
|
|
{ 0, NULL },
|
|
};
|
|
|
|
static const char *nullstr = "(null)";
|
|
|
|
void proto_reg_handoff_coap(void);
|
|
|
|
static conversation_t *
|
|
find_or_create_conversation_noaddrb(packet_info *pinfo, gboolean request)
|
|
{
|
|
conversation_t *conv=NULL;
|
|
address *addr_a;
|
|
address *addr_b;
|
|
guint32 port_a;
|
|
guint32 port_b;
|
|
|
|
if (request) {
|
|
addr_a = &pinfo->src;
|
|
addr_b = &pinfo->dst;
|
|
port_a = pinfo->srcport;
|
|
port_b = pinfo->destport;
|
|
} else {
|
|
addr_a = &pinfo->dst;
|
|
addr_b = &pinfo->src;
|
|
port_a = pinfo->destport;
|
|
port_b = pinfo->srcport;
|
|
}
|
|
/* Have we seen this conversation before? */
|
|
if((conv = find_conversation(pinfo->num, addr_a, addr_b,
|
|
conversation_pt_to_endpoint_type(pinfo->ptype), port_a,
|
|
port_b, NO_ADDR_B|NO_PORT_B)) != NULL) {
|
|
if (pinfo->num > conv->last_frame) {
|
|
conv->last_frame = pinfo->num;
|
|
}
|
|
} else {
|
|
/* No, this is a new conversation. */
|
|
conv = conversation_new(pinfo->num, &pinfo->src,
|
|
&pinfo->dst, conversation_pt_to_endpoint_type(pinfo->ptype),
|
|
pinfo->srcport, pinfo->destport, NO_ADDR_B|NO_PORT_B);
|
|
}
|
|
return conv;
|
|
}
|
|
|
|
static gint
|
|
coap_get_opt_uint(tvbuff_t *tvb, gint offset, gint length)
|
|
{
|
|
switch (length) {
|
|
case 0:
|
|
return 0;
|
|
case 1:
|
|
return (guint)tvb_get_guint8(tvb, offset);
|
|
case 2:
|
|
return (guint)tvb_get_ntohs(tvb, offset);
|
|
case 3:
|
|
return (guint)tvb_get_ntoh24(tvb, offset);
|
|
case 4:
|
|
return (guint)tvb_get_ntohl(tvb, offset);
|
|
default:
|
|
return -1;
|
|
}
|
|
}
|
|
|
|
static gint
|
|
coap_opt_check(packet_info *pinfo, proto_tree *subtree, guint opt_num, gint opt_length, coap_common_dissect_t *dissect_hf)
|
|
{
|
|
int i;
|
|
|
|
for (i = 0; i < (int)(array_length(coi)); i++) {
|
|
if (coi[i].type == opt_num)
|
|
break;
|
|
}
|
|
if (i == (int)(array_length(coi))) {
|
|
expert_add_info_format(pinfo, subtree, &dissect_hf->ei.opt_invalid_number,
|
|
"Invalid Option Number %u", opt_num);
|
|
return -1;
|
|
}
|
|
if (opt_length < coi[i].min || opt_length > coi[i].max) {
|
|
expert_add_info_format(pinfo, subtree, &dissect_hf->ei.opt_invalid_range,
|
|
"Invalid Option Range: %d (%d < x < %d)", opt_length, coi[i].min, coi[i].max);
|
|
}
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_hex_string(tvbuff_t *tvb, proto_item *item, proto_tree *subtree, gint offset, gint opt_length, int hf)
|
|
{
|
|
const guint8 *str;
|
|
|
|
if (opt_length == 0)
|
|
str = nullstr;
|
|
else
|
|
str = tvb_bytes_to_str_punct(wmem_packet_scope(), tvb, offset, opt_length, ' ');
|
|
|
|
proto_tree_add_item(subtree, hf, tvb, offset, opt_length, ENC_NA);
|
|
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(item, ": %s", str);
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_uint(tvbuff_t *tvb, proto_item *head_item, proto_tree *subtree, gint offset, gint opt_length, int hf)
|
|
{
|
|
guint i = 0;
|
|
|
|
if (opt_length != 0) {
|
|
i = coap_get_opt_uint(tvb, offset, opt_length);
|
|
}
|
|
|
|
proto_tree_add_uint(subtree, hf, tvb, offset, opt_length, i);
|
|
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(head_item, ": %u", i);
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_uri_host(tvbuff_t *tvb, proto_item *head_item, proto_tree *subtree, gint offset, gint opt_length, coap_info *coinfo, int hf)
|
|
{
|
|
const guint8 *str;
|
|
|
|
proto_tree_add_item_ret_string(subtree, hf, tvb, offset, opt_length, ENC_ASCII, wmem_packet_scope(), &str);
|
|
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(head_item, ": %s", str);
|
|
|
|
/* forming a uri-string
|
|
* If the 'uri host' looks an IPv6 address, assuming that the address has
|
|
* to be enclosed by brackets.
|
|
*/
|
|
if (strchr(str, ':') == NULL) {
|
|
wmem_strbuf_append_printf(coinfo->uri_str_strbuf, "coap://%s", str);
|
|
} else {
|
|
wmem_strbuf_append_printf(coinfo->uri_str_strbuf, "coap://[%s]", str);
|
|
}
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_uri_path(tvbuff_t *tvb, proto_item *head_item, proto_tree *subtree, gint offset, gint opt_length, coap_info *coinfo, int hf)
|
|
{
|
|
const guint8 *str = NULL;
|
|
|
|
wmem_strbuf_append_c(coinfo->uri_str_strbuf, '/');
|
|
|
|
if (opt_length == 0) {
|
|
str = nullstr;
|
|
} else {
|
|
str = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, opt_length, ENC_ASCII);
|
|
wmem_strbuf_append(coinfo->uri_str_strbuf, str);
|
|
}
|
|
|
|
proto_tree_add_string(subtree, hf, tvb, offset, opt_length, str);
|
|
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(head_item, ": %s", str);
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_uri_query(tvbuff_t *tvb, proto_item *head_item,proto_tree *subtree, gint offset, gint opt_length, coap_info *coinfo, int hf)
|
|
{
|
|
const guint8 *str = NULL;
|
|
|
|
wmem_strbuf_append_c(coinfo->uri_query_strbuf,
|
|
(wmem_strbuf_get_len(coinfo->uri_query_strbuf) == 0) ? '?' : '&');
|
|
|
|
if (opt_length == 0) {
|
|
str = nullstr;
|
|
} else {
|
|
str = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, opt_length, ENC_ASCII);
|
|
wmem_strbuf_append(coinfo->uri_query_strbuf, str);
|
|
}
|
|
|
|
proto_tree_add_string(subtree, hf, tvb, offset, opt_length, str);
|
|
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(head_item, ": %s", str);
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_location_path(tvbuff_t *tvb, proto_item *head_item, proto_tree *subtree, gint offset, gint opt_length, int hf)
|
|
{
|
|
const guint8 *str = NULL;
|
|
|
|
if (opt_length == 0) {
|
|
str = nullstr;
|
|
} else {
|
|
str = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, opt_length, ENC_ASCII);
|
|
}
|
|
|
|
proto_tree_add_string(subtree, hf, tvb, offset, opt_length, str);
|
|
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(head_item, ": %s", str);
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_location_query(tvbuff_t *tvb, proto_item *head_item, proto_tree *subtree, gint offset, gint opt_length, int hf)
|
|
{
|
|
const guint8 *str = NULL;
|
|
|
|
if (opt_length == 0) {
|
|
str = nullstr;
|
|
} else {
|
|
str = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, opt_length, ENC_ASCII);
|
|
}
|
|
|
|
proto_tree_add_string(subtree, hf, tvb, offset, opt_length, str);
|
|
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(head_item, ": %s", str);
|
|
}
|
|
|
|
/* draft-ietf-core-object-security-07 */
|
|
static void
|
|
dissect_coap_opt_object_security(tvbuff_t *tvb, proto_item *head_item, proto_tree *subtree, gint offset, gint opt_length, packet_info *pinfo, coap_info *coinfo, coap_common_dissect_t *dissect_hf)
|
|
{
|
|
guint8 flag_byte = 0;
|
|
gboolean non_compressed = FALSE;
|
|
gboolean expand = FALSE;
|
|
gboolean signature_present = FALSE;
|
|
gboolean kid_context_present = FALSE;
|
|
gboolean kid_present = FALSE;
|
|
guint8 piv_len = 0;
|
|
guint8 kid_context_len = 0;
|
|
guint8 kid_len = 0;
|
|
|
|
coinfo->object_security = TRUE;
|
|
|
|
coinfo->oscore_info->piv = NULL;
|
|
coinfo->oscore_info->kid_context = NULL;
|
|
coinfo->oscore_info->kid = NULL;
|
|
|
|
if (opt_length == 0) { /* option length is zero, means flag byte is 0x00*/
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(head_item, ": 00 (no Flag Byte)");
|
|
} else {
|
|
flag_byte = tvb_get_guint8(tvb, offset);
|
|
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_object_security_non_compressed, tvb, offset, 1, ENC_BIG_ENDIAN);
|
|
non_compressed = flag_byte & COAP_OBJECT_SECURITY_NON_COMPRESSED_MASK;
|
|
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_object_security_expand, tvb, offset, 1, ENC_BIG_ENDIAN);
|
|
expand = flag_byte & COAP_OBJECT_SECURITY_EXPAND_MASK;
|
|
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_object_security_signature, tvb, offset, 1, ENC_BIG_ENDIAN);
|
|
signature_present = flag_byte & COAP_OBJECT_SECURITY_SIGNATURE_MASK;
|
|
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_object_security_kid_context_present, tvb, offset, 1, ENC_BIG_ENDIAN);
|
|
kid_context_present = flag_byte & COAP_OBJECT_SECURITY_KID_CONTEXT_MASK;
|
|
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_object_security_kid_present, tvb, offset, 1, ENC_BIG_ENDIAN);
|
|
kid_present = flag_byte & COAP_OBJECT_SECURITY_KID_MASK;
|
|
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_object_security_piv_len, tvb, offset, 1, ENC_BIG_ENDIAN);
|
|
piv_len = (flag_byte & COAP_OBJECT_SECURITY_PIVLEN_MASK) >> 0;
|
|
|
|
/* kid_len is what remains in the option after all other fields are parsed
|
|
we calculate kid_len by subtracting from option length as we parse individual fields */
|
|
kid_len = opt_length;
|
|
|
|
offset += 1;
|
|
kid_len -= 1;
|
|
|
|
if (non_compressed || expand || signature_present) {
|
|
/* how these bits are handled is not yet specified */
|
|
expert_add_info_format(pinfo, subtree, &dissect_hf->ei.opt_object_security_bad, "Unsupported format");
|
|
}
|
|
|
|
if (piv_len > 0) {
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_object_security_piv, tvb, offset, piv_len, ENC_NA);
|
|
coinfo->oscore_info->piv = (guint8 *) tvb_memdup(wmem_packet_scope(), tvb, offset, piv_len);
|
|
coinfo->oscore_info->piv_len = piv_len;
|
|
|
|
offset += piv_len;
|
|
kid_len -= piv_len;
|
|
}
|
|
|
|
if (kid_context_present) {
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_object_security_kid_context_len, tvb, offset, 1, ENC_BIG_ENDIAN);
|
|
kid_context_len = tvb_get_guint8(tvb, offset);
|
|
|
|
offset += 1;
|
|
kid_len -= 1;
|
|
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_object_security_kid_context, tvb, offset, kid_context_len, ENC_NA);
|
|
coinfo->oscore_info->kid_context = (guint8 *) tvb_memdup(wmem_packet_scope(), tvb, offset, kid_context_len);
|
|
coinfo->oscore_info->kid_context_len = kid_context_len;
|
|
|
|
offset += kid_context_len;
|
|
kid_len -= kid_context_len;
|
|
}
|
|
|
|
if (kid_present) {
|
|
if(kid_len > 0) {
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_object_security_kid, tvb, offset, kid_len, ENC_NA);
|
|
coinfo->oscore_info->kid = (guint8 *) tvb_memdup(wmem_packet_scope(), tvb, offset, kid_len);
|
|
coinfo->oscore_info->kid_len = kid_len;
|
|
|
|
} else {
|
|
expert_add_info_format(pinfo, subtree, &dissect_hf->ei.opt_object_security_bad, "Key ID flag is set but there are no remaining bytes to be processed");
|
|
}
|
|
}
|
|
|
|
proto_item_append_text(head_item, ": Key ID:%s, Key ID Context:%s, Partial IV:%s",
|
|
coinfo->oscore_info->kid == NULL ? nullstr : bytes_to_str(wmem_packet_scope(), coinfo->oscore_info->kid, coinfo->oscore_info->kid_len),
|
|
coinfo->oscore_info->kid_context == NULL ? nullstr : bytes_to_str(wmem_packet_scope(), coinfo->oscore_info->kid_context, coinfo->oscore_info->kid_context_len),
|
|
coinfo->oscore_info->piv == NULL ? nullstr : bytes_to_str(wmem_packet_scope(), coinfo->oscore_info->piv, coinfo->oscore_info->piv_len));
|
|
}
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_proxy_uri(tvbuff_t *tvb, proto_item *head_item, proto_tree *subtree, gint offset, gint opt_length, int hf)
|
|
{
|
|
const guint8 *str = NULL;
|
|
|
|
if (opt_length == 0) {
|
|
str = nullstr;
|
|
} else {
|
|
str = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, opt_length, ENC_ASCII);
|
|
}
|
|
|
|
proto_tree_add_string(subtree, hf, tvb, offset, opt_length, str);
|
|
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(head_item, ": %s", str);
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_proxy_scheme(tvbuff_t *tvb, proto_item *head_item, proto_tree *subtree, gint offset, gint opt_length, int hf)
|
|
{
|
|
const guint8 *str = NULL;
|
|
|
|
if (opt_length == 0) {
|
|
str = nullstr;
|
|
} else {
|
|
str = tvb_get_string_enc(wmem_packet_scope(), tvb, offset, opt_length, ENC_ASCII);
|
|
}
|
|
|
|
proto_tree_add_string(subtree, hf, tvb, offset, opt_length, str);
|
|
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(head_item, ": %s", str);
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_ctype(tvbuff_t *tvb, proto_item *head_item, proto_tree *subtree, gint offset, gint opt_length, int hf, coap_info *coinfo)
|
|
{
|
|
if (opt_length == 0) {
|
|
coinfo->ctype_value = 0;
|
|
} else {
|
|
coinfo->ctype_value = coap_get_opt_uint(tvb, offset, opt_length);
|
|
}
|
|
|
|
coinfo->ctype_str = val_to_str(coinfo->ctype_value, vals_ctype, "Unknown Type %u");
|
|
|
|
proto_tree_add_string(subtree, hf, tvb, offset, opt_length, coinfo->ctype_str);
|
|
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(head_item, ": %s", coinfo->ctype_str);
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_block(tvbuff_t *tvb, proto_item *head_item, proto_tree *subtree, gint offset, gint opt_length, coap_info *coinfo, coap_common_dissect_t *dissect_hf)
|
|
{
|
|
guint8 val = 0;
|
|
guint encoded_block_size;
|
|
guint block_esize;
|
|
|
|
if (opt_length == 0) {
|
|
coinfo->block_number = 0;
|
|
val = 0;
|
|
} else {
|
|
coinfo->block_number = coap_get_opt_uint(tvb, offset, opt_length) >> 4;
|
|
val = tvb_get_guint8(tvb, offset + opt_length - 1) & 0x0f;
|
|
}
|
|
|
|
proto_tree_add_uint(subtree, dissect_hf->hf.opt_block_number,
|
|
tvb, offset, opt_length, coinfo->block_number);
|
|
|
|
/* More flag in the end of the option */
|
|
coinfo->block_mflag = (val & COAP_BLOCK_MFLAG_MASK) >> 3;
|
|
proto_tree_add_uint(subtree, dissect_hf->hf.opt_block_mflag,
|
|
tvb, offset + opt_length - 1, 1, coinfo->block_mflag);
|
|
|
|
/* block size */
|
|
encoded_block_size = val & COAP_BLOCK_SIZE_MASK;
|
|
block_esize = 1 << (encoded_block_size + 4);
|
|
proto_tree_add_uint_format(subtree, dissect_hf->hf.opt_block_size,
|
|
tvb, offset + opt_length - 1, 1, encoded_block_size, "Block Size: %u (%u encoded)", block_esize, encoded_block_size);
|
|
|
|
/* add info to the head of the packet detail */
|
|
proto_item_append_text(head_item, ": NUM:%u, M:%u, SZX:%u",
|
|
coinfo->block_number, coinfo->block_mflag, block_esize);
|
|
}
|
|
|
|
static void
|
|
dissect_coap_opt_uri_port(tvbuff_t *tvb, proto_item *head_item, proto_tree *subtree, gint offset, gint opt_length, coap_info *coinfo, int hf)
|
|
{
|
|
guint port = 0;
|
|
|
|
if (opt_length != 0) {
|
|
port = coap_get_opt_uint(tvb, offset, opt_length);
|
|
}
|
|
|
|
proto_tree_add_uint(subtree, hf, tvb, offset, opt_length, port);
|
|
|
|
proto_item_append_text(head_item, ": %u", port);
|
|
|
|
/* forming a uri-string */
|
|
wmem_strbuf_append_printf(coinfo->uri_str_strbuf, ":%u", port);
|
|
}
|
|
|
|
/*
|
|
* dissector for each option of CoAP.
|
|
* return the total length of the option including the header (e.g. delta and length).
|
|
*/
|
|
static int
|
|
dissect_coap_options_main(tvbuff_t *tvb, packet_info *pinfo, proto_tree *coap_tree, gint offset, guint8 opt_count, guint *opt_num, gint offset_end, coap_info *coinfo, coap_common_dissect_t *dissect_hf)
|
|
{
|
|
guint8 opt_jump;
|
|
gint opt_length, opt_length_ext, opt_delta, opt_delta_ext;
|
|
gint opt_length_ext_off = 0;
|
|
gint8 opt_length_ext_len = 0;
|
|
gint opt_delta_ext_off = 0;
|
|
gint8 opt_delta_ext_len = 0;
|
|
gint orig_offset = offset;
|
|
proto_tree *subtree;
|
|
proto_item *item;
|
|
char strbuf[56];
|
|
|
|
opt_jump = tvb_get_guint8(tvb, offset);
|
|
if (0xff == opt_jump)
|
|
return offset;
|
|
offset += 1;
|
|
|
|
/*
|
|
* section 3.1 in coap-17:
|
|
* Option Delta: 4-bit unsigned integer. A value between 0 and 12
|
|
* indicates the Option Delta. Three values are reserved for special
|
|
* constructs:
|
|
*
|
|
* 13: An 8-bit unsigned integer follows the initial byte and
|
|
* indicates the Option Delta minus 13.
|
|
*
|
|
* 14: A 16-bit unsigned integer in network byte order follows the
|
|
* initial byte and indicates the Option Delta minus 269.
|
|
*
|
|
* 15: Reserved for the Payload Marker. If the field is set to this
|
|
* value but the entire byte is not the payload marker, this MUST
|
|
* be processed as a message format error.
|
|
*/
|
|
switch (opt_jump & 0xf0) {
|
|
case 0xd0:
|
|
opt_delta_ext = tvb_get_guint8(tvb, offset);
|
|
opt_delta_ext_off = offset;
|
|
opt_delta_ext_len = 1;
|
|
offset += 1;
|
|
|
|
opt_delta = 13;
|
|
opt_delta += opt_delta_ext;
|
|
break;
|
|
case 0xe0:
|
|
opt_delta_ext = coap_get_opt_uint(tvb, offset, 2);
|
|
opt_delta_ext_off = offset;
|
|
opt_delta_ext_len = 2;
|
|
offset += 2;
|
|
|
|
opt_delta = 269;
|
|
opt_delta += opt_delta_ext;
|
|
break;
|
|
case 0xf0:
|
|
expert_add_info_format(pinfo, coap_tree, &dissect_hf->ei.opt_length_bad,
|
|
"end-of-options marker found, but option length isn't 15");
|
|
return -1;
|
|
default:
|
|
opt_delta = ((opt_jump & 0xf0) >> 4);
|
|
break;
|
|
}
|
|
*opt_num += opt_delta;
|
|
|
|
/*
|
|
* section 3.1 in coap-17:
|
|
* Option Length: 4-bit unsigned integer. A value between 0 and 12
|
|
* indicates the length of the Option Value, in bytes. Three values
|
|
* are reserved for special constructs:
|
|
*
|
|
* 13: An 8-bit unsigned integer precedes the Option Value and
|
|
* indicates the Option Length minus 13.
|
|
*
|
|
* 14: A 16-bit unsigned integer in network byte order precedes the
|
|
* Option Value and indicates the Option Length minus 269.
|
|
*
|
|
* 15: Reserved for future use. If the field is set to this value,
|
|
* it MUST be processed as a message format error.
|
|
*/
|
|
switch (opt_jump & 0x0f) {
|
|
case 0x0d:
|
|
opt_length_ext = tvb_get_guint8(tvb, offset);
|
|
opt_length_ext_off = offset;
|
|
opt_length_ext_len = 1;
|
|
offset += 1;
|
|
|
|
opt_length = 13;
|
|
opt_length += opt_length_ext;
|
|
break;
|
|
case 0x0e:
|
|
opt_length_ext = coap_get_opt_uint(tvb, offset, 2);
|
|
opt_length_ext_off = offset;
|
|
opt_length_ext_len = 2;
|
|
offset += 2;
|
|
|
|
opt_length = 269;
|
|
opt_length += opt_length_ext;
|
|
break;
|
|
case 0x0f:
|
|
expert_add_info_format(pinfo, coap_tree, &dissect_hf->ei.opt_length_bad,
|
|
"end-of-options marker found, but option delta isn't 15");
|
|
return -1;
|
|
default:
|
|
opt_length = (opt_jump & 0x0f);
|
|
break;
|
|
}
|
|
if (opt_length > offset_end - offset) {
|
|
expert_add_info_format(pinfo, coap_tree, &dissect_hf->ei.opt_length_bad,
|
|
"option longer than the package");
|
|
return -1;
|
|
}
|
|
|
|
coap_opt_check(pinfo, coap_tree, *opt_num, opt_length, dissect_hf);
|
|
|
|
g_snprintf(strbuf, sizeof(strbuf),
|
|
"#%u: %s", opt_count, val_to_str_const(*opt_num, vals_opt_type,
|
|
*opt_num % 14 == 0 ? "No-Op" : "Unknown Option"));
|
|
item = proto_tree_add_string(coap_tree, dissect_hf->hf.opt_name,
|
|
tvb, orig_offset, offset - orig_offset + opt_length, strbuf);
|
|
subtree = proto_item_add_subtree(item, dissect_hf->ett.option);
|
|
|
|
g_snprintf(strbuf, sizeof(strbuf),
|
|
"Type %u, %s, %s%s", *opt_num,
|
|
(*opt_num & 1) ? "Critical" : "Elective",
|
|
(*opt_num & 2) ? "Unsafe" : "Safe",
|
|
((*opt_num & 0x1e) == 0x1c) ? ", NoCacheKey" : "");
|
|
proto_tree_add_string(subtree, dissect_hf->hf.opt_desc,
|
|
tvb, orig_offset, offset - orig_offset + opt_length, strbuf);
|
|
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_delta, tvb, orig_offset, 1, ENC_BIG_ENDIAN);
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_length, tvb, orig_offset, 1, ENC_BIG_ENDIAN);
|
|
|
|
if (opt_delta_ext_off && opt_delta_ext_len)
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_delta_ext, tvb, opt_delta_ext_off, opt_delta_ext_len, ENC_BIG_ENDIAN);
|
|
|
|
if (opt_length_ext_off && opt_length_ext_len)
|
|
proto_tree_add_item(subtree, dissect_hf->hf.opt_length_ext, tvb, opt_length_ext_off, opt_length_ext_len, ENC_BIG_ENDIAN);
|
|
|
|
/* offset points the next to its option header */
|
|
switch (*opt_num) {
|
|
case COAP_OPT_CONTENT_TYPE:
|
|
dissect_coap_opt_ctype(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_ctype, coinfo);
|
|
break;
|
|
case COAP_OPT_MAX_AGE:
|
|
dissect_coap_opt_uint(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_max_age);
|
|
break;
|
|
case COAP_OPT_PROXY_URI:
|
|
dissect_coap_opt_proxy_uri(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_proxy_uri);
|
|
break;
|
|
case COAP_OPT_PROXY_SCHEME:
|
|
dissect_coap_opt_proxy_scheme(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_proxy_scheme);
|
|
break;
|
|
case COAP_OPT_SIZE1:
|
|
dissect_coap_opt_uint(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_size1);
|
|
break;
|
|
case COAP_OPT_ETAG:
|
|
dissect_coap_opt_hex_string(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_etag);
|
|
break;
|
|
case COAP_OPT_URI_HOST:
|
|
dissect_coap_opt_uri_host(tvb, item, subtree, offset,
|
|
opt_length, coinfo, dissect_hf->hf.opt_uri_host);
|
|
break;
|
|
case COAP_OPT_LOCATION_PATH:
|
|
dissect_coap_opt_location_path(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_location_path);
|
|
break;
|
|
case COAP_OPT_URI_PORT:
|
|
dissect_coap_opt_uri_port(tvb, item, subtree, offset,
|
|
opt_length, coinfo, dissect_hf->hf.opt_uri_port);
|
|
break;
|
|
case COAP_OPT_LOCATION_QUERY:
|
|
dissect_coap_opt_location_query(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_location_query);
|
|
break;
|
|
case COAP_OPT_OBJECT_SECURITY:
|
|
dissect_coap_opt_object_security(tvb, item, subtree, offset,
|
|
opt_length, pinfo, coinfo, dissect_hf);
|
|
break;
|
|
case COAP_OPT_URI_PATH:
|
|
dissect_coap_opt_uri_path(tvb, item, subtree, offset,
|
|
opt_length, coinfo, dissect_hf->hf.opt_uri_path);
|
|
break;
|
|
case COAP_OPT_OBSERVE:
|
|
dissect_coap_opt_uint(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_observe);
|
|
break;
|
|
case COAP_OPT_ACCEPT:
|
|
dissect_coap_opt_ctype(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_accept, coinfo);
|
|
break;
|
|
case COAP_OPT_IF_MATCH:
|
|
dissect_coap_opt_hex_string(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_if_match);
|
|
break;
|
|
case COAP_OPT_URI_QUERY:
|
|
dissect_coap_opt_uri_query(tvb, item, subtree, offset,
|
|
opt_length, coinfo, dissect_hf->hf.opt_uri_query);
|
|
break;
|
|
case COAP_OPT_BLOCK2:
|
|
dissect_coap_opt_block(tvb, item, subtree, offset,
|
|
opt_length, coinfo, dissect_hf);
|
|
break;
|
|
case COAP_OPT_BLOCK1:
|
|
dissect_coap_opt_block(tvb, item, subtree, offset,
|
|
opt_length, coinfo, dissect_hf);
|
|
break;
|
|
case COAP_OPT_IF_NONE_MATCH:
|
|
break;
|
|
case COAP_OPT_BLOCK_SIZE:
|
|
dissect_coap_opt_uint(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_block_size);
|
|
break;
|
|
default:
|
|
dissect_coap_opt_hex_string(tvb, item, subtree, offset,
|
|
opt_length, dissect_hf->hf.opt_unknown);
|
|
break;
|
|
}
|
|
|
|
return offset + opt_length;
|
|
}
|
|
|
|
/*
|
|
* options dissector.
|
|
* return offset pointing the next of options. (i.e. the top of the paylaod
|
|
* or the end of the data.
|
|
*/
|
|
int
|
|
dissect_coap_options(tvbuff_t *tvb, packet_info *pinfo, proto_tree *coap_tree, gint offset, gint offset_end, coap_info *coinfo, coap_common_dissect_t *dissect_hf)
|
|
{
|
|
guint opt_num = 0;
|
|
int i;
|
|
guint8 endmarker;
|
|
|
|
/* loop for dissecting options */
|
|
for (i = 1; offset < offset_end; i++) {
|
|
offset = dissect_coap_options_main(tvb, pinfo, coap_tree,
|
|
offset, i, &opt_num, offset_end, coinfo, dissect_hf);
|
|
if (offset == -1)
|
|
return -1;
|
|
if (offset >= offset_end)
|
|
break;
|
|
endmarker = tvb_get_guint8(tvb, offset);
|
|
if (endmarker == 0xff) {
|
|
proto_tree_add_item(coap_tree, dissect_hf->hf.opt_end_marker, tvb, offset, 1, ENC_BIG_ENDIAN);
|
|
offset += 1;
|
|
break;
|
|
}
|
|
}
|
|
|
|
return offset;
|
|
}
|
|
|
|
/*
|
|
* CoAP code dissector.
|
|
* return code value and updates the offset
|
|
* */
|
|
guint8
|
|
dissect_coap_code(tvbuff_t *tvb, proto_tree *tree, gint *offset, coap_common_dissect_t *dissect_hf, guint8 *code_class)
|
|
{
|
|
guint8 code;
|
|
|
|
proto_tree_add_item(tree, dissect_hf->hf.code, tvb, *offset, 1, ENC_BIG_ENDIAN);
|
|
code = tvb_get_guint8(tvb, *offset);
|
|
*code_class = code >> 5;
|
|
*offset += 1;
|
|
|
|
return code;
|
|
}
|
|
|
|
void
|
|
dissect_coap_payload(tvbuff_t *tvb, packet_info *pinfo, proto_tree *coap_tree, proto_tree *parent_tree, gint offset, gint offset_end, guint8 code_class, coap_info *coinfo, coap_common_dissect_t *dissect_hf, gboolean oscore)
|
|
{
|
|
proto_tree *payload_tree;
|
|
proto_item *payload_item, *length_item;
|
|
tvbuff_t *payload_tvb;
|
|
guint payload_length = offset_end - offset;
|
|
const char *coap_ctype_str_dis;
|
|
http_message_info_t message_info;
|
|
char str_payload[80];
|
|
|
|
/* coinfo->ctype_value == DEFAULT_COAP_CTYPE_VALUE: No Content-Format option present */
|
|
if (coinfo->ctype_value == DEFAULT_COAP_CTYPE_VALUE) {
|
|
/*
|
|
* 5.5.2. Diagnostic Payload
|
|
*
|
|
* If no Content-Format option is given, the payload of responses
|
|
* indicating a client or server error is a brief human-readable
|
|
* diagnostic message, explaining the error situation. This diagnostic
|
|
* message MUST be encoded using UTF-8 [RFC3629], more specifically
|
|
* using Net-Unicode form [RFC5198].
|
|
*/
|
|
if ((code_class >= 4) && (code_class <= 5)) {
|
|
coinfo->ctype_str = "text/plain; charset=utf-8";
|
|
coap_ctype_str_dis = "text/plain";
|
|
} else {
|
|
/* Assume no Content-Format is opaque octet stream */
|
|
coinfo->ctype_str = "application/octet-stream";
|
|
coap_ctype_str_dis = coinfo->ctype_str;
|
|
}
|
|
}
|
|
/* coinfo->ctype_value == 0: Content-Format option present with length 0 */
|
|
else if (coinfo->ctype_value == 0) {
|
|
/* coinfo->ctype_str is already set by option parsing routine */
|
|
coap_ctype_str_dis = "text/plain";
|
|
} else {
|
|
coap_ctype_str_dis = coinfo->ctype_str;
|
|
}
|
|
|
|
g_snprintf(str_payload, sizeof(str_payload),
|
|
"Payload Content-Format: %s%s, Length: %u",
|
|
coinfo->ctype_str, coinfo->ctype_value == DEFAULT_COAP_CTYPE_VALUE ?
|
|
" (no Content-Format)" : "", payload_length);
|
|
|
|
payload_item = proto_tree_add_string(coap_tree, dissect_hf->hf.payload,
|
|
tvb, offset, payload_length,
|
|
str_payload);
|
|
payload_tree = proto_item_add_subtree(payload_item, dissect_hf->ett.payload);
|
|
|
|
proto_tree_add_string(payload_tree, dissect_hf->hf.payload_desc, tvb, offset, 0, coinfo->ctype_str);
|
|
length_item = proto_tree_add_uint(payload_tree, dissect_hf->hf.payload_length, tvb, offset, 0, payload_length);
|
|
PROTO_ITEM_SET_GENERATED(length_item);
|
|
payload_tvb = tvb_new_subset_length(tvb, offset, payload_length);
|
|
|
|
message_info.type = HTTP_OTHERS;
|
|
message_info.media_str = wmem_strbuf_get_str(coinfo->uri_str_strbuf);
|
|
dissector_try_string(media_type_dissector_table, coap_ctype_str_dis,
|
|
payload_tvb, pinfo, parent_tree, &message_info);
|
|
|
|
if (coinfo->object_security && !oscore) {
|
|
proto_item_set_text(payload_item, "Encrypted OSCORE Data");
|
|
call_dissector_with_data(oscore_handle, payload_tvb, pinfo, parent_tree, coinfo->oscore_info);
|
|
}
|
|
}
|
|
|
|
static int
|
|
dissect_coap(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree, void* data _U_)
|
|
{
|
|
gint offset = 0;
|
|
proto_item *coap_root;
|
|
proto_item *pi;
|
|
proto_tree *coap_tree;
|
|
guint8 ttype;
|
|
guint8 token_len;
|
|
guint8 code;
|
|
guint8 code_class;
|
|
guint16 mid;
|
|
gint coap_length;
|
|
gchar *coap_token_str;
|
|
coap_info *coinfo;
|
|
conversation_t *conversation;
|
|
coap_conv_info *ccinfo;
|
|
coap_transaction *coap_trans = NULL;
|
|
|
|
/* Allocate information for upper layers */
|
|
coinfo = (coap_info *)p_get_proto_data(wmem_file_scope(), pinfo, proto_coap, 0);
|
|
|
|
if (coinfo == NULL)
|
|
{
|
|
coinfo = wmem_new0(wmem_file_scope(), coap_info);
|
|
p_add_proto_data(wmem_file_scope(), pinfo, proto_coap, 0, coinfo);
|
|
}
|
|
|
|
/* initialize the CoAP length and the content-Format */
|
|
/*
|
|
* the length of CoAP message is not specified in the CoAP header.
|
|
* It has to be from the lower layer.
|
|
* Currently, the length is just copied from the reported length of the tvbuffer.
|
|
*/
|
|
coap_length = tvb_reported_length(tvb);
|
|
coinfo->ctype_str = "";
|
|
coinfo->ctype_value = DEFAULT_COAP_CTYPE_VALUE;
|
|
|
|
col_set_str(pinfo->cinfo, COL_PROTOCOL, "CoAP");
|
|
col_clear(pinfo->cinfo, COL_INFO);
|
|
|
|
coap_root = proto_tree_add_item(parent_tree, proto_coap, tvb, offset, -1, ENC_NA);
|
|
coap_tree = proto_item_add_subtree(coap_root, ett_coap);
|
|
|
|
proto_tree_add_item(coap_tree, hf_coap_version, tvb, offset, 1, ENC_BIG_ENDIAN);
|
|
|
|
proto_tree_add_item(coap_tree, hf_coap_ttype, tvb, offset, 1, ENC_BIG_ENDIAN);
|
|
ttype = (tvb_get_guint8(tvb, offset) & COAP_TYPE_MASK) >> 4;
|
|
|
|
proto_tree_add_item(coap_tree, hf_coap_token_len, tvb, offset, 1, ENC_BIG_ENDIAN);
|
|
token_len = tvb_get_guint8(tvb, offset) & COAP_TOKEN_LEN_MASK;
|
|
|
|
offset += 1;
|
|
|
|
code = dissect_coap_code(tvb, coap_tree, &offset, &dissect_coap_hf, &code_class);
|
|
|
|
proto_tree_add_item(coap_tree, hf_coap_mid, tvb, offset, 2, ENC_BIG_ENDIAN);
|
|
mid = tvb_get_ntohs(tvb, offset);
|
|
|
|
col_add_fstr(pinfo->cinfo, COL_INFO,
|
|
"%s, MID:%u, %s",
|
|
val_to_str(ttype, vals_ttype_short, "Unknown %u"),
|
|
mid,
|
|
val_to_str_ext(code, &coap_vals_code_ext, "Unknown %u"));
|
|
|
|
/* append the header information */
|
|
proto_item_append_text(coap_root,
|
|
", %s, %s, MID:%u",
|
|
val_to_str(ttype, vals_ttype, "Unknown %u"),
|
|
val_to_str_ext(code, &coap_vals_code_ext, "Unknown %u"),
|
|
mid);
|
|
|
|
offset += 2;
|
|
|
|
/* initialize the external value */
|
|
coinfo->block_number = DEFAULT_COAP_BLOCK_NUMBER;
|
|
coinfo->block_mflag = 0;
|
|
coinfo->uri_str_strbuf = wmem_strbuf_sized_new(wmem_packet_scope(), 0, 1024);
|
|
coinfo->uri_query_strbuf = wmem_strbuf_sized_new(wmem_packet_scope(), 0, 1024);
|
|
/* Allocate pointers and static elements of oscore_info_t, arrays are allocated only if object security option is found during option parsing */
|
|
coinfo->oscore_info = wmem_new0(wmem_packet_scope(), oscore_info_t);
|
|
coinfo->object_security = FALSE;
|
|
coap_token_str = NULL;
|
|
|
|
if (token_len > 0)
|
|
{
|
|
/* This has to be file scope as the token string is stored in the map
|
|
* for conversation lookup */
|
|
coap_token_str = tvb_bytes_to_str_punct(wmem_file_scope(), tvb, offset, token_len, ' ');
|
|
proto_tree_add_item(coap_tree, hf_coap_token,
|
|
tvb, offset, token_len, ENC_NA);
|
|
offset += token_len;
|
|
}
|
|
|
|
/* process options */
|
|
offset = dissect_coap_options(tvb, pinfo, coap_tree, offset, coap_length, coinfo, &dissect_coap_hf);
|
|
if (offset == -1)
|
|
return tvb_captured_length(tvb);
|
|
|
|
/* Use conversations to track state for request/response */
|
|
conversation = find_or_create_conversation_noaddrb(pinfo, (code_class == 0));
|
|
|
|
/* Retrieve or create state structure for this conversation */
|
|
ccinfo = (coap_conv_info *)conversation_get_proto_data(conversation, proto_coap);
|
|
if (!ccinfo) {
|
|
/* No state structure - create it */
|
|
ccinfo = wmem_new(wmem_file_scope(), coap_conv_info);
|
|
ccinfo->messages = wmem_map_new(wmem_file_scope(), g_str_hash, g_str_equal);
|
|
conversation_add_proto_data(conversation, proto_coap, ccinfo);
|
|
}
|
|
|
|
/* Everything based on tokens */
|
|
if (coap_token_str != NULL) {
|
|
/* Process request/response in conversation */
|
|
if (code != 0) { /* Ignore empty messages */
|
|
/* Try and look up a matching token. If it's the first
|
|
* sight of a request, there shouldn't be one */
|
|
coap_trans = (coap_transaction *)wmem_map_lookup(ccinfo->messages, coap_token_str);
|
|
if (!coap_trans) {
|
|
if ((!PINFO_FD_VISITED(pinfo)) && (code_class == 0)) {
|
|
/* New request - log it */
|
|
coap_trans = wmem_new0(wmem_file_scope(), coap_transaction);
|
|
coap_trans->req_frame = pinfo->num;
|
|
coap_trans->rsp_frame = 0;
|
|
coap_trans->req_time = pinfo->fd->abs_ts;
|
|
if (coinfo->uri_str_strbuf) {
|
|
/* Store the URI into CoAP transaction info */
|
|
coap_trans->uri_str_strbuf = wmem_strbuf_new(wmem_file_scope(), wmem_strbuf_get_str(coinfo->uri_str_strbuf));
|
|
}
|
|
if (coinfo->oscore_info) {
|
|
coap_trans->oscore_info = (oscore_info_t *) wmem_memdup(wmem_file_scope(), coinfo->oscore_info, sizeof(oscore_info_t));
|
|
if (coinfo->oscore_info->kid) {
|
|
coap_trans->oscore_info->kid = (guint8 *) wmem_memdup(wmem_file_scope(), coinfo->oscore_info->kid, coinfo->oscore_info->kid_len);
|
|
}
|
|
if (coinfo->oscore_info->kid_context) {
|
|
coap_trans->oscore_info->kid_context = (guint8 *) wmem_memdup(wmem_file_scope(), coinfo->oscore_info->kid_context, coinfo->oscore_info->kid_context_len);
|
|
}
|
|
if (coinfo->oscore_info->piv) {
|
|
coap_trans->oscore_info->piv = (guint8 *) wmem_memdup(wmem_file_scope(), coinfo->oscore_info->piv, coinfo->oscore_info->piv_len);
|
|
}
|
|
}
|
|
wmem_map_insert(ccinfo->messages, coap_token_str, (void *)coap_trans);
|
|
}
|
|
} else {
|
|
if ((code_class >= 2) && (code_class <= 5)) {
|
|
if (!PINFO_FD_VISITED(pinfo)) {
|
|
/* Log the first matching response frame */
|
|
coap_trans->rsp_frame = pinfo->num;
|
|
}
|
|
if (coap_trans->uri_str_strbuf) {
|
|
/* Copy the URI stored in matching transaction info into CoAP packet info */
|
|
coinfo->uri_str_strbuf = wmem_strbuf_new(wmem_packet_scope(), wmem_strbuf_get_str(coap_trans->uri_str_strbuf));
|
|
}
|
|
if (coap_trans->oscore_info) {
|
|
/* Copy OSCORE info in matching transaction info into CoAP packet info */
|
|
if (coap_trans->oscore_info->kid) {
|
|
coinfo->oscore_info->kid = (guint8 *) wmem_memdup(wmem_packet_scope(), coap_trans->oscore_info->kid, coap_trans->oscore_info->kid_len);
|
|
}
|
|
coinfo->oscore_info->kid_len = coap_trans->oscore_info->kid_len;
|
|
|
|
if (coap_trans->oscore_info->kid_context) {
|
|
coinfo->oscore_info->kid_context = (guint8 *) wmem_memdup(wmem_packet_scope(), coap_trans->oscore_info->kid_context, coap_trans->oscore_info->kid_context_len);
|
|
}
|
|
coinfo->oscore_info->kid_context_len = coap_trans->oscore_info->kid_context_len;
|
|
|
|
/* If PIV is present within the response (current dissection), do not overwrite it! */
|
|
if (coinfo->oscore_info->piv_len > 0) {
|
|
/* Indicate to OSCORE that this response contains its own PIV */
|
|
coinfo->oscore_info->piv_in_response = TRUE;
|
|
coap_trans->oscore_info->piv_in_response = TRUE;
|
|
} else {
|
|
if (coap_trans->oscore_info->piv) {
|
|
/* Use the PIV from the request */
|
|
coinfo->oscore_info->piv = (guint8 *) wmem_memdup(wmem_packet_scope(), coap_trans->oscore_info->piv, coap_trans->oscore_info->piv_len);
|
|
}
|
|
coinfo->oscore_info->piv_len = coap_trans->oscore_info->piv_len;
|
|
}
|
|
coinfo->oscore_info->response = TRUE;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if (coap_trans != NULL) {
|
|
/* Print state tracking in the tree */
|
|
if (code_class == 0) {
|
|
/* This is a request */
|
|
if (coap_trans->rsp_frame) {
|
|
proto_item *it;
|
|
|
|
it = proto_tree_add_uint(coap_tree, hf_coap_response_in,
|
|
tvb, 0, 0, coap_trans->rsp_frame);
|
|
PROTO_ITEM_SET_GENERATED(it);
|
|
}
|
|
} else if ((code_class >= 2) && (code_class <= 5)) {
|
|
/* This is a reply */
|
|
if (coap_trans->req_frame) {
|
|
proto_item *it;
|
|
nstime_t ns;
|
|
|
|
it = proto_tree_add_uint(coap_tree, hf_coap_response_to,
|
|
tvb, 0, 0, coap_trans->req_frame);
|
|
PROTO_ITEM_SET_GENERATED(it);
|
|
|
|
nstime_delta(&ns, &pinfo->fd->abs_ts, &coap_trans->req_time);
|
|
it = proto_tree_add_time(coap_tree, hf_coap_response_time, tvb, 0, 0, &ns);
|
|
PROTO_ITEM_SET_GENERATED(it);
|
|
}
|
|
if (coinfo->object_security && coap_trans->oscore_info) {
|
|
proto_item *it;
|
|
|
|
it = proto_tree_add_bytes(coap_tree, hf_coap_oscore_kid, tvb, 0, coap_trans->oscore_info->kid_len, coap_trans->oscore_info->kid);
|
|
PROTO_ITEM_SET_GENERATED(it);
|
|
|
|
it = proto_tree_add_bytes(coap_tree, hf_coap_oscore_kid_context, tvb, 0, coap_trans->oscore_info->kid_context_len, coap_trans->oscore_info->kid_context);
|
|
PROTO_ITEM_SET_GENERATED(it);
|
|
|
|
if (coap_trans->oscore_info->piv_in_response) {
|
|
it = proto_tree_add_bytes(coap_tree, hf_coap_oscore_piv, tvb, 0, coinfo->oscore_info->piv_len, coinfo->oscore_info->piv);
|
|
} else {
|
|
it = proto_tree_add_bytes(coap_tree, hf_coap_oscore_piv, tvb, 0, coap_trans->oscore_info->piv_len, coap_trans->oscore_info->piv);
|
|
}
|
|
PROTO_ITEM_SET_GENERATED(it);
|
|
}
|
|
}
|
|
}
|
|
|
|
/* add informations to the packet list */
|
|
if (coap_token_str != NULL)
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ", TKN:%s", coap_token_str);
|
|
if (coinfo->block_number != DEFAULT_COAP_BLOCK_NUMBER)
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ", %sBlock #%u",
|
|
coinfo->block_mflag ? "" : "End of ", coinfo->block_number);
|
|
if (wmem_strbuf_get_len(coinfo->uri_str_strbuf) > 0) {
|
|
col_append_fstr(pinfo->cinfo, COL_INFO, ", %s", wmem_strbuf_get_str(coinfo->uri_str_strbuf));
|
|
/* Add a generated protocol item as well */
|
|
pi = proto_tree_add_string(coap_tree, dissect_coap_hf.hf.opt_uri_path_recon, tvb, 0, 0, wmem_strbuf_get_str(coinfo->uri_str_strbuf));
|
|
PROTO_ITEM_SET_GENERATED(pi);
|
|
}
|
|
if (wmem_strbuf_get_len(coinfo->uri_query_strbuf) > 0)
|
|
col_append_str(pinfo->cinfo, COL_INFO, wmem_strbuf_get_str(coinfo->uri_query_strbuf));
|
|
|
|
/* dissect the payload */
|
|
if (coap_length > offset) {
|
|
dissect_coap_payload(tvb, pinfo, coap_tree, parent_tree, offset, coap_length, code_class, coinfo, &dissect_coap_hf, FALSE);
|
|
}
|
|
|
|
return tvb_captured_length(tvb);
|
|
}
|
|
|
|
/*
|
|
* Protocol initialization
|
|
*/
|
|
void
|
|
proto_register_coap(void)
|
|
{
|
|
static hf_register_info hf[] = {
|
|
{ &hf_coap_version,
|
|
{ "Version", "coap.version",
|
|
FT_UINT8, BASE_DEC, NULL, COAP_VERSION_MASK,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_coap_ttype,
|
|
{ "Type", "coap.type",
|
|
FT_UINT8, BASE_DEC, VALS(vals_ttype), COAP_TYPE_MASK,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_coap_token_len,
|
|
{ "Token Length", "coap.token_len",
|
|
FT_UINT8, BASE_DEC, NULL, COAP_TOKEN_LEN_MASK,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_coap_token,
|
|
{ "Token", "coap.token",
|
|
FT_BYTES, BASE_NONE, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_coap_mid,
|
|
{ "Message ID", "coap.mid",
|
|
FT_UINT16, BASE_DEC, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_coap_response_in,
|
|
{ "Response In", "coap.response_in",
|
|
FT_FRAMENUM, BASE_NONE, NULL, 0x0,
|
|
"The response to this CoAP request is in this frame", HFILL }
|
|
},
|
|
{ &hf_coap_response_to,
|
|
{ "Request In", "coap.response_to",
|
|
FT_FRAMENUM, BASE_NONE, NULL, 0x0,
|
|
"This is a response to the CoAP request in this frame", HFILL }
|
|
},
|
|
{ &hf_coap_response_time,
|
|
{ "Response Time", "coap.response_time",
|
|
FT_RELATIVE_TIME, BASE_NONE, NULL, 0x0,
|
|
"The time between the Call and the Reply", HFILL }
|
|
},
|
|
{ &hf_coap_oscore_kid,
|
|
{ "OSCORE Key ID", "coap.oscore_kid", FT_BYTES, BASE_NONE, NULL, 0x0,
|
|
"Matched OSCORE Key ID", HFILL }
|
|
},
|
|
{ &hf_coap_oscore_kid_context,
|
|
{ "OSCORE Key ID Context", "coap.oscore_kid_context", FT_BYTES, BASE_NONE, NULL, 0x0,
|
|
"Matched OSCORE Key ID Context", HFILL }
|
|
},
|
|
{ &hf_coap_oscore_piv,
|
|
{ "OSCORE Partial IV", "coap.oscore_piv", FT_BYTES, BASE_NONE, NULL, 0x0,
|
|
"Matched OSCORE Partial IV", HFILL }
|
|
},
|
|
COAP_COMMON_HF_LIST(dissect_coap_hf, "coap")
|
|
};
|
|
|
|
static gint *ett[] = {
|
|
&ett_coap,
|
|
COAP_COMMON_ETT_LIST(dissect_coap_hf)
|
|
};
|
|
|
|
static ei_register_info ei[] = {
|
|
COAP_COMMON_EI_LIST(dissect_coap_hf, "coap")
|
|
};
|
|
|
|
expert_module_t *expert_coap;
|
|
|
|
proto_coap = proto_register_protocol("Constrained Application Protocol", "CoAP", "coap");
|
|
proto_register_field_array(proto_coap, hf, array_length(hf));
|
|
proto_register_subtree_array(ett, array_length(ett));
|
|
expert_coap = expert_register_protocol(proto_coap);
|
|
expert_register_field_array(expert_coap, ei, array_length(ei));
|
|
|
|
coap_handle = register_dissector("coap", dissect_coap, proto_coap);
|
|
}
|
|
|
|
void
|
|
proto_reg_handoff_coap(void)
|
|
{
|
|
media_type_dissector_table = find_dissector_table("media_type");
|
|
dissector_add_uint_with_preference("udp.port", DEFAULT_COAP_PORT, coap_handle);
|
|
dtls_dissector_add(DEFAULT_COAPS_PORT, coap_handle);
|
|
oscore_handle = find_dissector("oscore");
|
|
}
|
|
|
|
/*
|
|
* Editor modelines - http://www.wireshark.org/tools/modelines.html
|
|
*
|
|
* Local variables:
|
|
* c-basic-offset: 8
|
|
* tab-width: 8
|
|
* indent-tabs-mode: t
|
|
* End:
|
|
*
|
|
* vi: set shiftwidth=8 tabstop=8 noexpandtab:
|
|
* :indentSize=8:tabSize=8:noTabs=false:
|
|
*/
|