forked from osmocom/wireshark
7a3dadf042
EtherNet/IP 1. Only decode 32-bit header if there is enough data. Previously, this would show malformed data, even for I/O packets that have no data, eg: heartbeat data. 2. Typos CIP 1. Many Time Sync attribute responses were flagged incorrectly as malformed. 2. Create service response highlighted the instance number incorrectly, and showed warnings. 3. Set Attribute List Request should exit early if it doesn't know about a particular attribute. 4. Incorrect format for Safety Network Segment: Router Format. 5. Typos Change-Id: I506dbb053c247bc8efcbde2cce6ab24d9550c897 Reviewed-on: https://code.wireshark.org/review/12321 Reviewed-by: Michael Mann <mmann78@netscape.net> Petri-Dish: Michael Mann <mmann78@netscape.net> Tested-by: Petri Dish Buildbot <buildbot-no-reply@wireshark.org> Reviewed-by: Anders Broman <a.broman58@gmail.com>
118 lines
3.7 KiB
C
118 lines
3.7 KiB
C
/* packet-enip.h
|
|
* Routines for EtherNet/IP (Industrial Protocol) dissection
|
|
* EtherNet/IP Home: www.odva.org
|
|
*
|
|
* Conversation data support for CIP
|
|
* Jan Bartels, Siempelkamp Maschinen- und Anlagenbau GmbH & Co. KG
|
|
* Copyright 2007
|
|
*
|
|
* Wireshark - Network traffic analyzer
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
* Copyright 1998 Gerald Combs
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*/
|
|
|
|
#ifndef PACKET_ENIP_H
|
|
#define PACKET_ENIP_H
|
|
|
|
/* Offsets of fields within the DLR Common Frame Header */
|
|
#define DLR_CFH_SUB_TYPE 0
|
|
#define DLR_CFH_PROTO_VERSION 1
|
|
|
|
/* Offsets (from beginning of the packet) of fields within the DLR Message
|
|
* Payload Fields
|
|
*/
|
|
#define DLR_MPF_FRAME_TYPE 2
|
|
#define DLR_MPF_SOURCE_PORT 3
|
|
#define DLR_MPF_SOURCE_IP 4
|
|
#define DLR_MPF_SEQUENCE_ID 8
|
|
|
|
/* Offset for Beacon frames */
|
|
#define DLR_BE_RING_STATE 12
|
|
#define DLR_BE_SUPERVISOR_PRECEDENCE 13
|
|
#define DLR_BE_BEACON_INTERVAL 14
|
|
#define DLR_BE_BEACON_TIMEOUT 18
|
|
#define DLR_BE_RESERVED 22
|
|
|
|
/* Offset for Neighbor_Check_Request frames */
|
|
#define DLR_NREQ_RESERVED 12
|
|
|
|
/* Offset for Neighbor_Check_Response frames */
|
|
#define DLR_NRES_SOURCE_PORT 12
|
|
#define DLR_NRES_RESERVED 13
|
|
|
|
/* Offset for Link_Status/Neighbor_Status frames */
|
|
#define DLR_LNS_SOURCE_PORT 12
|
|
#define DLR_LNS_RESERVED 13
|
|
|
|
/* Offset for Locate_Fault frames */
|
|
#define DLR_LF_RESERVED 12
|
|
|
|
/* Offset for Announce frames */
|
|
#define DLR_AN_RING_STATE 12
|
|
#define DLR_AN_RESERVED 13
|
|
|
|
/* Offset for Sign_On frames */
|
|
#define DLR_SO_NUM_NODES 12
|
|
#define DLR_SO_NODE_1_MAC 14
|
|
|
|
/* Offset for Advertise frames */
|
|
#define DLR_ADV_GATEWAY_STATE 12
|
|
#define DLR_ADV_GATEWAY_PRECEDENCE 13
|
|
#define DLR_ADV_ADVERTISE_INTERVAL 14
|
|
#define DLR_ADV_ADVERTISE_TIMEOUT 18
|
|
#define DLR_ADV_LEARNING_UPDATE_ENABLE 22
|
|
#define DLR_ADV_RESERVED 23
|
|
|
|
/* Offset for Advertise frames */
|
|
#define DLR_FLUSH_LEARNING_UPDATE_ENABLE 12
|
|
#define DLR_FLUSH_RESERVED 13
|
|
|
|
/* Offset for Advertise frames */
|
|
#define DLR_LEARN_RESERVED 12
|
|
|
|
/* DLR commands */
|
|
#define DLR_FT_BEACON 1
|
|
#define DLR_FT_NEIGHBOR_REQ 2
|
|
#define DLR_FT_NEIGHBOR_RES 3
|
|
#define DLR_FT_LINK_STAT 4
|
|
#define DLR_FT_LOCATE_FLT 5
|
|
#define DLR_FT_ANNOUNCE 6
|
|
#define DLR_FT_SIGN_ON 7
|
|
#define DLR_FT_ADVERTISE 8
|
|
#define DLR_FT_FLUSH_TABLES 9
|
|
#define DLR_FT_LEARNING_UPDATE 10
|
|
|
|
|
|
typedef struct {
|
|
guint32 req_num, rep_num;
|
|
nstime_t req_time;
|
|
cip_req_info_t* cip_info;
|
|
} enip_request_info_t;
|
|
|
|
enum enip_connid_type {ECIDT_UNKNOWN, ECIDT_O2T, ECIDT_T2O};
|
|
|
|
/* proto_data types */
|
|
#define ENIP_REQUEST_INFO 0
|
|
#define ENIP_CONNECTION_INFO 1
|
|
|
|
void enip_close_cip_connection( packet_info *pinfo, guint16 ConnSerialNumber, guint16 VendorID, guint32 DeviceSerialNumber );
|
|
void enip_mark_connection_triad( packet_info *pinfo, guint16 ConnSerialNumber, guint16 VendorID, guint32 DeviceSerialNumber );
|
|
|
|
extern attribute_info_t enip_attribute_vals[45];
|
|
|
|
#endif /* PACKET_ENIP_H */
|