osmith
/
wireshark
forked from osmocom/wireshark
1
0
Fork 0
Code Pull Requests Releases Wiki Activity
wireshark/epan/dissectors/packet-mysql.c

5019 lines
168 KiB
C
Raw Blame History

/* packet-mysql.c
* Routines for mysql packet dissection
*
* Huagang XIE <huagang@intruvert.com>
*
* MySQL 4.1+ protocol by Axel Schwenke <axel@mysql.com>
* MariaDB protocol by Georg Richter <georg@mariadb.com>
* & Diego Dupin <diego.dupin@mariadb.com>
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* Copied from packet-tftp.c
*
* SPDX-License-Identifier: GPL-2.0-or-later
*
*
* the protocol specifications
* For MySQL at
* https://dev.mysql.com/doc/dev/mysql-server/latest/PAGE_PROTOCOL.html
* For MariaDB at
* https://mariadb.com/kb/en/clientserver-protocol/
* and MySQL source code
*/
/* create extra output for conversation tracking */
/* #define CTDEBUG 1 */
#include "config.h"
#include <epan/packet.h>
#include <epan/prefs.h>
#include <epan/expert.h>
#include <epan/strutil.h>
#include <epan/proto_data.h>
#include "packet-tcp.h"
#include "packet-tls-utils.h"
void proto_register_mysql(void);
void proto_reg_handoff_mysql(void);
/* port for protocol registration */
#define TCP_PORT_MySQL 3306
/* MariaDB Server >= 10.0 sends a 5.5.5- prefix for the version, since
replication doesn't support a two digit version number. Version 5.5.5
was never released in MySQL and MariaDB */
#define MARIADB_RPL_VERSION_HACK "5.5.5-"
/* client/server capabilities
* Source: http://dev.mysql.com/doc/internals/en/capability-flags.html
* Source: mysql_com.h
*/
#define MYSQL_CAPS_LP 0x0001 /* CLIENT_LONG_PASSWORD/CLIENT_IS_MYSQL */
#define MYSQL_CAPS_FR 0x0002 /* CLIENT_FOUND_ROWS */
#define MYSQL_CAPS_LF 0x0004 /* CLIENT_LONG_FLAG */
#define MYSQL_CAPS_CD 0x0008 /* CLIENT_CONNECT_WITH_DB */
#define MYSQL_CAPS_NS 0x0010 /* CLIENT_NO_SCHEMA */
#define MYSQL_CAPS_CP 0x0020 /* CLIENT_COMPRESS */
#define MYSQL_CAPS_OB 0x0040 /* CLIENT_ODBC */
#define MYSQL_CAPS_LI 0x0080 /* CLIENT_LOCAL_FILES */
#define MYSQL_CAPS_IS 0x0100 /* CLIENT_IGNORE_SPACE */
#define MYSQL_CAPS_CU 0x0200 /* CLIENT_PROTOCOL_41 */
#define MYSQL_CAPS_IA 0x0400 /* CLIENT_INTERACTIVE */
#define MYSQL_CAPS_SL 0x0800 /* CLIENT_SSL */
#define MYSQL_CAPS_II 0x1000 /* CLIENT_IGNORE_SPACE */
#define MYSQL_CAPS_TA 0x2000 /* CLIENT_TRANSACTIONS */
#define MYSQL_CAPS_RS 0x4000 /* CLIENT_RESERVED */
#define MYSQL_CAPS_SC 0x8000 /* CLIENT_SECURE_CONNECTION */
/* field flags */
#define MYSQL_FLD_NOT_NULL_FLAG 0x0001
#define MYSQL_FLD_PRI_KEY_FLAG 0x0002
#define MYSQL_FLD_UNIQUE_KEY_FLAG 0x0004
#define MYSQL_FLD_MULTIPLE_KEY_FLAG 0x0008
#define MYSQL_FLD_BLOB_FLAG 0x0010
#define MYSQL_FLD_UNSIGNED_FLAG 0x0020
#define MYSQL_FLD_ZEROFILL_FLAG 0x0040
#define MYSQL_FLD_BINARY_FLAG 0x0080
#define MYSQL_FLD_ENUM_FLAG 0x0100
#define MYSQL_FLD_AUTO_INCREMENT_FLAG 0x0200
#define MYSQL_FLD_TIMESTAMP_FLAG 0x0400
#define MYSQL_FLD_SET_FLAG 0x0800
/* extended capabilities: 4.1+ client only
*
* These are libmysqlclient flags and NOT present
* in the protocol:
* CLIENT_SSL_VERIFY_SERVER_CERT (1UL << 30)
* CLIENT_REMEMBER_OPTIONS (1UL << 31)
*/
#define MYSQL_CAPS_MS 0x0001 /* CLIENT_MULTI_STATMENTS */
#define MYSQL_CAPS_MR 0x0002 /* CLIENT_MULTI_RESULTS */
#define MYSQL_CAPS_PM 0x0004 /* CLIENT_PS_MULTI_RESULTS */
#define MYSQL_CAPS_PA 0x0008 /* CLIENT_PLUGIN_AUTH */
#define MYSQL_CAPS_CA 0x0010 /* CLIENT_CONNECT_ATTRS */
#define MYSQL_CAPS_AL 0x0020 /* CLIENT_PLUGIN_AUTH_LENENC_CLIENT_DATA */
#define MYSQL_CAPS_EP 0x0040 /* CLIENT_CAN_HANDLE_EXPIRED_PASSWORDS */
#define MYSQL_CAPS_ST 0x0080 /* CLIENT_SESSION_TRACK */
#define MYSQL_CAPS_DE 0x0100 /* CLIENT_DEPRECATE_EOF */
#define MYSQL_CAPS_QA 0x0800 /* CLIENT_QUERY_ATTRIBUTES */
#define MYSQL_CAPS_UNUSED 0xFE00
/* status bitfield */
#define MYSQL_STAT_IT 0x0001
#define MYSQL_STAT_AC 0x0002
#define MYSQL_STAT_MU 0x0004
#define MYSQL_STAT_MR 0x0008
#define MYSQL_STAT_BI 0x0010
#define MYSQL_STAT_NI 0x0020
#define MYSQL_STAT_CR 0x0040
#define MYSQL_STAT_LR 0x0080
#define MYSQL_STAT_DR 0x0100
#define MYSQL_STAT_BS 0x0200
#define MYSQL_STAT_MC 0x0400
#define MYSQL_STAT_QUERY_WAS_SLOW 0x0800
#define MYSQL_STAT_PS_OUT_PARAMS 0x1000
#define MYSQL_STAT_TRANS_READONLY 0x2000
#define MYSQL_STAT_SESSION_STATE_CHANGED 0x4000
/* bitfield for MYSQL_REFRESH */
#define MYSQL_RFSH_GRANT 1 /* Refresh grant tables */
#define MYSQL_RFSH_LOG 2 /* Start on new log file */
#define MYSQL_RFSH_TABLES 4 /* close all tables */
#define MYSQL_RFSH_HOSTS 8 /* Flush host cache */
#define MYSQL_RFSH_STATUS 16 /* Flush status variables */
#define MYSQL_RFSH_THREADS 32 /* Flush thread cache */
#define MYSQL_RFSH_SLAVE 64 /* Reset master info and restart slave thread */
#define MYSQL_RFSH_MASTER 128 /* Remove all bin logs in the index and truncate the index */
/* MySQL command codes (enum_server_command in mysql-server.git:include/my_command.h) */
#define MYSQL_SLEEP 0 /* not from client */
#define MYSQL_QUIT 1
#define MYSQL_INIT_DB 2
#define MYSQL_QUERY 3
#define MYSQL_FIELD_LIST 4
#define MYSQL_CREATE_DB 5
#define MYSQL_DROP_DB 6
#define MYSQL_REFRESH 7
#define MYSQL_SHUTDOWN 8
#define MYSQL_STATISTICS 9
#define MYSQL_PROCESS_INFO 10
#define MYSQL_CONNECT 11 /* not from client */
#define MYSQL_PROCESS_KILL 12
#define MYSQL_DEBUG 13
#define MYSQL_PING 14
#define MYSQL_TIME 15 /* not from client */
#define MYSQL_DELAY_INSERT 16 /* not from client */
#define MYSQL_CHANGE_USER 17
#define MYSQL_BINLOG_DUMP 18 /* replication */
#define MYSQL_TABLE_DUMP 19 /* replication */
#define MYSQL_CONNECT_OUT 20 /* replication */
#define MYSQL_REGISTER_SLAVE 21 /* replication */
#define MYSQL_STMT_PREPARE 22
#define MYSQL_STMT_EXECUTE 23
#define MYSQL_STMT_SEND_LONG_DATA 24
#define MYSQL_STMT_CLOSE 25
#define MYSQL_STMT_RESET 26
#define MYSQL_SET_OPTION 27
#define MYSQL_STMT_FETCH 28
#define MYSQL_DAEMON 29
#define MYSQL_BINLOG_DUMP_GTID 30 /* replication */
#define MYSQL_RESET_CONNECTION 31
/* MariaDB specific commands */
#define MARIADB_STMT_BULK_EXECUTE 250
/* MariaDB bulk execute flags */
#define MARIADB_BULK_AUTOID 64
#define MARIADB_BULK_SEND_TYPES 128
/* MariaDB extended capabilities */
#define MARIADB_CAPS_PR 0x0001 /* MARIADB_CLIENT_PROGRESS */
#define MARIADB_CAPS_CM 0x0002 /* MARIADB_CLIENT_COM_MULTI */
#define MARIADB_CAPS_BO 0x0004 /* MARIADB_CLIENT_STMT_BULK_OPERATIONS */
#define MARIADB_CAPS_EM 0x0008 /* MARIADB_CLIENT_EXTENDED_METADATA */
#define MARIADB_CAPS_ME 0x0010 /* MARIADB_CLIENT_CACHE_METADATA */
/* MariaDB bulk indicators */
#define MARIADB_INDICATOR_NONE 0
#define MARIADB_INDICATOR_NULL 1
#define MARIADB_INDICATOR_DEFAULT 2
#define MARIADB_INDICATOR_IGNORE 3
#define MARIADB_INDICATIR_IGNORE_ROW 4
/* MySQL cursor types */
#define MYSQL_CURSOR_TYPE_NO_CURSOR 0
#define MYSQL_CURSOR_TYPE_READ_ONLY 1
#define MYSQL_CURSOR_TYPE_FOR_UPDATE 2
#define MYSQL_CURSOR_TYPE_SCROLLABLE 4
/* MySQL parameter flags -- used internally by the dissector */
#define MYSQL_PARAM_FLAG_STREAMED 0x01
/* Compression states, internal to the dissector */
#define MYSQL_COMPRESS_NONE 0
#define MYSQL_COMPRESS_INIT 1
#define MYSQL_COMPRESS_ACTIVE 2
/* Generic Response Codes */
#define MYSQL_RESPONSE_OK 0x00
#define MYSQL_RESPONSE_ERR 0xFF
#define MYSQL_RESPONSE_EOF 0xFE
/* mariadb extended keys */
#define MARIADB_EXT_META_TYPE 0
#define MARIADB_EXT_META_FORMAT 1
/* decoding table: command */
static const value_string mysql_command_vals[] = {
{MYSQL_SLEEP, "SLEEP"},
{MYSQL_QUIT, "Quit"},
{MYSQL_INIT_DB, "Use Database"},
{MYSQL_QUERY, "Query"},
{MYSQL_FIELD_LIST, "Show Fields"},
{MYSQL_CREATE_DB, "Create Database"},
{MYSQL_DROP_DB , "Drop Database"},
{MYSQL_REFRESH , "Refresh"},
{MYSQL_SHUTDOWN , "Shutdown"},
{MYSQL_STATISTICS , "Statistics"},
{MYSQL_PROCESS_INFO , "Process List"},
{MYSQL_CONNECT , "Connect"},
{MYSQL_PROCESS_KILL , "Kill Server Thread"},
{MYSQL_DEBUG , "Dump Debuginfo"},
{MYSQL_PING , "Ping"},
{MYSQL_TIME , "Time"},
{MYSQL_DELAY_INSERT , "Insert Delayed"},
{MYSQL_CHANGE_USER , "Change User"},
{MYSQL_BINLOG_DUMP , "Send Binlog"},
{MYSQL_TABLE_DUMP, "Send Table"},
{MYSQL_CONNECT_OUT, "Slave Connect"},
{MYSQL_REGISTER_SLAVE, "Register Slave"},
{MYSQL_STMT_PREPARE, "Prepare Statement"},
{MYSQL_STMT_EXECUTE, "Execute Statement"},
{MYSQL_STMT_SEND_LONG_DATA, "Send BLOB"},
{MYSQL_STMT_CLOSE, "Close Statement"},
{MYSQL_STMT_RESET, "Reset Statement"},
{MYSQL_SET_OPTION, "Set Option"},
{MYSQL_STMT_FETCH, "Fetch Data"},
{MYSQL_DAEMON, "Daemon"},
{MYSQL_BINLOG_DUMP_GTID, "Send Binlog GTID"},
{MYSQL_RESET_CONNECTION, "Reset Connection"},
{MARIADB_STMT_BULK_EXECUTE, "Execute Bulk Statement"},
{0, NULL}
};
static value_string_ext mysql_command_vals_ext = VALUE_STRING_EXT_INIT(mysql_command_vals);
/* decoding table: exec_flags */
static const value_string mysql_exec_flags_vals[] = {
{MYSQL_CURSOR_TYPE_NO_CURSOR, "Defaults"},
{MYSQL_CURSOR_TYPE_READ_ONLY, "Read-only cursor"},
{MYSQL_CURSOR_TYPE_FOR_UPDATE, "Cursor for update"},
{MYSQL_CURSOR_TYPE_SCROLLABLE, "Scrollable cursor"},
{0, NULL}
};
/* decoding table: new_parameter_bound_flag */
static const value_string mysql_new_parameter_bound_flag_vals[] = {
{0, "Subsequent call"},
{1, "First call or rebound"},
{0, NULL}
};
/*
static const value_string mariadb_bulk_flags_vals[] = {
{MARIADB_BULK_AUTOID, "Return auto generated IDs"},
{MARIADB_BULK_SEND_TYPES, "Send types to server"},
{0, NULL}
};
*/
static const value_string mariadb_bulk_indicator_vals[] = {
{MARIADB_INDICATOR_NONE, "Not set"},
{MARIADB_INDICATOR_NULL, "Null Value"},
{MARIADB_INDICATOR_DEFAULT, "Default Value"},
{MARIADB_INDICATOR_IGNORE, "Don't Update Value"},
{MARIADB_INDICATIR_IGNORE_ROW, "Ignore Row"},
{0, NULL}
};
/* decoding table: exec_time_sign */
static const value_string mysql_exec_time_sign_vals[] = {
{0, "Positive"},
{1, "Negative"},
{0, NULL}
};
#if 0
/* charset: pre-4.1 used the term 'charset', later changed to 'collation' */
static const value_string mysql_charset_vals[] = {
{1, "big5"},
{2, "czech"},
{3, "dec8"},
{4, "dos" },
{5, "german1"},
{6, "hp8"},
{7, "koi8_ru"},
{8, "latin1"},
{9, "latin2"},
{9, "swe7 "},
{10, "usa7"},
{11, "ujis"},
{12, "sjis"},
{13, "cp1251"},
{14, "danish"},
{15, "hebrew"},
{16, "win1251"},
{17, "tis620"},
{18, "euc_kr"},
{19, "estonia"},
{20, "hungarian"},
{21, "koi8_ukr"},
{22, "win1251ukr"},
{23, "gb2312"},
{24, "greek"},
{25, "win1250"},
{26, "croat"},
{27, "gbk"},
{28, "cp1257"},
{29, "latin5"},
{0, NULL}
};
#endif
/* collation codes may change over time, recreate with the following SQL
SELECT CONCAT(' {', ID, ',"', CHARACTER_SET_NAME, ' COLLATE ', COLLATION_NAME, '"},')
FROM INFORMATION_SCHEMA.COLLATIONS
ORDER BY ID
INTO OUTFILE '/tmp/mysql-collations';
Last Update from MySQL 8.0.20
*/
static const value_string mysql_collation_vals[] = {
{3, "dec8 COLLATE dec8_swedish_ci"},
{4, "cp850 COLLATE cp850_general_ci"},
{5, "latin1 COLLATE latin1_german1_ci"},
{6, "hp8 COLLATE hp8_english_ci"},
{7, "koi8r COLLATE koi8r_general_ci"},
{8, "latin1 COLLATE latin1_swedish_ci"},
{9, "latin2 COLLATE latin2_general_ci"},
{10, "swe7 COLLATE swe7_swedish_ci"},
{11, "ascii COLLATE ascii_general_ci"},
{14, "cp1251 COLLATE cp1251_bulgarian_ci"},
{15, "latin1 COLLATE latin1_danish_ci"},
{16, "hebrew COLLATE hebrew_general_ci"},
{20, "latin7 COLLATE latin7_estonian_cs"},
{21, "latin2 COLLATE latin2_hungarian_ci"},
{22, "koi8u COLLATE koi8u_general_ci"},
{23, "cp1251 COLLATE cp1251_ukrainian_ci"},
{25, "greek COLLATE greek_general_ci"},
{26, "cp1250 COLLATE cp1250_general_ci"},
{27, "latin2 COLLATE latin2_croatian_ci"},
{29, "cp1257 COLLATE cp1257_lithuanian_ci"},
{30, "latin5 COLLATE latin5_turkish_ci"},
{31, "latin1 COLLATE latin1_german2_ci"},
{32, "armscii8 COLLATE armscii8_general_ci"},
{33, "utf8 COLLATE utf8_general_ci"},
{36, "cp866 COLLATE cp866_general_ci"},
{37, "keybcs2 COLLATE keybcs2_general_ci"},
{38, "macce COLLATE macce_general_ci"},
{39, "macroman COLLATE macroman_general_ci"},
{40, "cp852 COLLATE cp852_general_ci"},
{41, "latin7 COLLATE latin7_general_ci"},
{42, "latin7 COLLATE latin7_general_cs"},
{43, "macce COLLATE macce_bin"},
{44, "cp1250 COLLATE cp1250_croatian_ci"},
{45, "utf8mb4 COLLATE utf8mb4_general_ci"},
{46, "utf8mb4 COLLATE utf8mb4_bin"},
{47, "latin1 COLLATE latin1_bin"},
{48, "latin1 COLLATE latin1_general_ci"},
{49, "latin1 COLLATE latin1_general_cs"},
{50, "cp1251 COLLATE cp1251_bin"},
{51, "cp1251 COLLATE cp1251_general_ci"},
{52, "cp1251 COLLATE cp1251_general_cs"},
{53, "macroman COLLATE macroman_bin"},
{57, "cp1256 COLLATE cp1256_general_ci"},
{58, "cp1257 COLLATE cp1257_bin"},
{59, "cp1257 COLLATE cp1257_general_ci"},
{63, "binary COLLATE binary"},
{64, "armscii8 COLLATE armscii8_bin"},
{65, "ascii COLLATE ascii_bin"},
{66, "cp1250 COLLATE cp1250_bin"},
{67, "cp1256 COLLATE cp1256_bin"},
{68, "cp866 COLLATE cp866_bin"},
{69, "dec8 COLLATE dec8_bin"},
{70, "greek COLLATE greek_bin"},
{71, "hebrew COLLATE hebrew_bin"},
{72, "hp8 COLLATE hp8_bin"},
{73, "keybcs2 COLLATE keybcs2_bin"},
{74, "koi8r COLLATE koi8r_bin"},
{75, "koi8u COLLATE koi8u_bin"},
{77, "latin2 COLLATE latin2_bin"},
{78, "latin5 COLLATE latin5_bin"},
{79, "latin7 COLLATE latin7_bin"},
{80, "cp850 COLLATE cp850_bin"},
{81, "cp852 COLLATE cp852_bin"},
{82, "swe7 COLLATE swe7_bin"},
{83, "utf8 COLLATE utf8_bin"},
{92, "geostd8 COLLATE geostd8_general_ci"},
{93, "geostd8 COLLATE geostd8_bin"},
{94, "latin1 COLLATE latin1_spanish_ci"},
{99, "cp1250 COLLATE cp1250_polish_ci"},
{192, "utf8 COLLATE utf8_unicode_ci"},
{193, "utf8 COLLATE utf8_icelandic_ci"},
{194, "utf8 COLLATE utf8_latvian_ci"},
{195, "utf8 COLLATE utf8_romanian_ci"},
{196, "utf8 COLLATE utf8_slovenian_ci"},
{197, "utf8 COLLATE utf8_polish_ci"},
{198, "utf8 COLLATE utf8_estonian_ci"},
{199, "utf8 COLLATE utf8_spanish_ci"},
{200, "utf8 COLLATE utf8_swedish_ci"},
{201, "utf8 COLLATE utf8_turkish_ci"},
{202, "utf8 COLLATE utf8_czech_ci"},
{203, "utf8 COLLATE utf8_danish_ci"},
{204, "utf8 COLLATE utf8_lithuanian_ci"},
{205, "utf8 COLLATE utf8_slovak_ci"},
{206, "utf8 COLLATE utf8_spanish2_ci"},
{207, "utf8 COLLATE utf8_roman_ci"},
{208, "utf8 COLLATE utf8_persian_ci"},
{209, "utf8 COLLATE utf8_esperanto_ci"},
{210, "utf8 COLLATE utf8_hungarian_ci"},
{211, "utf8 COLLATE utf8_sinhala_ci"},
{212, "utf8 COLLATE utf8_german2_ci"},
{213, "utf8 COLLATE utf8_croatian_ci"},
{214, "utf8 COLLATE utf8_unicode_520_ci"},
{215, "utf8 COLLATE utf8_vietnamese_ci"},
{223, "utf8 COLLATE utf8_general_mysql500_ci"},
{224, "utf8mb4 COLLATE utf8mb4_unicode_ci"},
{225, "utf8mb4 COLLATE utf8mb4_icelandic_ci"},
{226, "utf8mb4 COLLATE utf8mb4_latvian_ci"},
{227, "utf8mb4 COLLATE utf8mb4_romanian_ci"},
{228, "utf8mb4 COLLATE utf8mb4_slovenian_ci"},
{229, "utf8mb4 COLLATE utf8mb4_polish_ci"},
{230, "utf8mb4 COLLATE utf8mb4_estonian_ci"},
{231, "utf8mb4 COLLATE utf8mb4_spanish_ci"},
{232, "utf8mb4 COLLATE utf8mb4_swedish_ci"},
{233, "utf8mb4 COLLATE utf8mb4_turkish_ci"},
{234, "utf8mb4 COLLATE utf8mb4_czech_ci"},
{235, "utf8mb4 COLLATE utf8mb4_danish_ci"},
{236, "utf8mb4 COLLATE utf8mb4_lithuanian_ci"},
{237, "utf8mb4 COLLATE utf8mb4_slovak_ci"},
{238, "utf8mb4 COLLATE utf8mb4_spanish2_ci"},
{239, "utf8mb4 COLLATE utf8mb4_roman_ci"},
{240, "utf8mb4 COLLATE utf8mb4_persian_ci"},
{241, "utf8mb4 COLLATE utf8mb4_esperanto_ci"},
{242, "utf8mb4 COLLATE utf8mb4_hungarian_ci"},
{243, "utf8mb4 COLLATE utf8mb4_sinhala_ci"},
{244, "utf8mb4 COLLATE utf8mb4_german2_ci"},
{245, "utf8mb4 COLLATE utf8mb4_croatian_ci"},
{246, "utf8mb4 COLLATE utf8mb4_unicode_520_ci"},
{247, "utf8mb4 COLLATE utf8mb4_vietnamese_ci"},
{248,"gb18030 COLLATE gb18030_chinese_ci"},
{249,"gb18030 COLLATE gb18030_bin"},
{250,"gb18030 COLLATE gb18030_unicode_520_ci"},
{255,"utf8mb4 COLLATE utf8mb4_0900_ai_ci"},
{256,"utf8mb4 COLLATE utf8mb4_de_pb_0900_ai_ci"},
{257,"utf8mb4 COLLATE utf8mb4_is_0900_ai_ci"},
{258,"utf8mb4 COLLATE utf8mb4_lv_0900_ai_ci"},
{259,"utf8mb4 COLLATE utf8mb4_ro_0900_ai_ci"},
{260,"utf8mb4 COLLATE utf8mb4_sl_0900_ai_ci"},
{261,"utf8mb4 COLLATE utf8mb4_pl_0900_ai_ci"},
{262,"utf8mb4 COLLATE utf8mb4_et_0900_ai_ci"},
{263,"utf8mb4 COLLATE utf8mb4_es_0900_ai_ci"},
{264,"utf8mb4 COLLATE utf8mb4_sv_0900_ai_ci"},
{265,"utf8mb4 COLLATE utf8mb4_tr_0900_ai_ci"},
{266,"utf8mb4 COLLATE utf8mb4_cs_0900_ai_ci"},
{267,"utf8mb4 COLLATE utf8mb4_da_0900_ai_ci"},
{268,"utf8mb4 COLLATE utf8mb4_lt_0900_ai_ci"},
{269,"utf8mb4 COLLATE utf8mb4_sk_0900_ai_ci"},
{270,"utf8mb4 COLLATE utf8mb4_es_trad_0900_ai_ci"},
{271,"utf8mb4 COLLATE utf8mb4_la_0900_ai_ci"},
{273,"utf8mb4 COLLATE utf8mb4_eo_0900_ai_ci"},
{274,"utf8mb4 COLLATE utf8mb4_hu_0900_ai_ci"},
{275,"utf8mb4 COLLATE utf8mb4_hr_0900_ai_ci"},
{277,"utf8mb4 COLLATE utf8mb4_vi_0900_ai_ci"},
{278,"utf8mb4 COLLATE utf8mb4_0900_as_cs"},
{279,"utf8mb4 COLLATE utf8mb4_de_pb_0900_as_cs"},
{280,"utf8mb4 COLLATE utf8mb4_is_0900_as_cs"},
{281,"utf8mb4 COLLATE utf8mb4_lv_0900_as_cs"},
{282,"utf8mb4 COLLATE utf8mb4_ro_0900_as_cs"},
{283,"utf8mb4 COLLATE utf8mb4_sl_0900_as_cs"},
{284,"utf8mb4 COLLATE utf8mb4_pl_0900_as_cs"},
{285,"utf8mb4 COLLATE utf8mb4_et_0900_as_cs"},
{286,"utf8mb4 COLLATE utf8mb4_es_0900_as_cs"},
{287,"utf8mb4 COLLATE utf8mb4_sv_0900_as_cs"},
{288,"utf8mb4 COLLATE utf8mb4_tr_0900_as_cs"},
{289,"utf8mb4 COLLATE utf8mb4_cs_0900_as_cs"},
{290,"utf8mb4 COLLATE utf8mb4_da_0900_as_cs"},
{291,"utf8mb4 COLLATE utf8mb4_lt_0900_as_cs"},
{292,"utf8mb4 COLLATE utf8mb4_sk_0900_as_cs"},
{293,"utf8mb4 COLLATE utf8mb4_es_trad_0900_as_cs"},
{294,"utf8mb4 COLLATE utf8mb4_la_0900_as_cs"},
{296,"utf8mb4 COLLATE utf8mb4_eo_0900_as_cs"},
{297,"utf8mb4 COLLATE utf8mb4_hu_0900_as_cs"},
{298,"utf8mb4 COLLATE utf8mb4_hr_0900_as_cs"},
{300,"utf8mb4 COLLATE utf8mb4_vi_0900_as_cs"},
{303,"utf8mb4 COLLATE utf8mb4_ja_0900_as_cs"},
{304,"utf8mb4 COLLATE utf8mb4_ja_0900_as_cs_ks"},
{305,"utf8mb4 COLLATE utf8mb4_0900_as_ci"},
{306,"utf8mb4 COLLATE utf8mb4_ru_0900_ai_ci"},
{307,"utf8mb4 COLLATE utf8mb4_ru_0900_as_cs"},
{308,"utf8mb4 COLLATE utf8mb4_zh_0900_as_cs"},
{309,"utf8mb4 COLLATE utf8mb4_0900_bin"},
{0, NULL}
};
static value_string_ext mysql_collation_vals_ext = VALUE_STRING_EXT_INIT(mysql_collation_vals);
/* MariaDB specific character sets and collations
Last Update: MariaDB 10.5.4 */
static const value_string mariadb_collation_vals[] = {
{1,"big5 COLLATE big5_chinese_ci"},
{2,"latin2 COLLATE latin2_czech_cs"},
{3,"dec8 COLLATE dec8_swedish_ci"},
{4,"cp850 COLLATE cp850_general_ci"},
{5,"latin1 COLLATE latin1_german1_ci"},
{6,"hp8 COLLATE hp8_english_ci"},
{7,"koi8r COLLATE koi8r_general_ci"},
{8,"latin1 COLLATE latin1_swedish_ci"},
{9,"latin2 COLLATE latin2_general_ci"},
{10,"swe7 COLLATE swe7_swedish_ci"},
{11,"ascii COLLATE ascii_general_ci"},
{12,"ujis COLLATE ujis_japanese_ci"},
{13,"sjis COLLATE sjis_japanese_ci"},
{14,"cp1251 COLLATE cp1251_bulgarian_ci"},
{15,"latin1 COLLATE latin1_danish_ci"},
{16,"hebrew COLLATE hebrew_general_ci"},
{18,"tis620 COLLATE tis620_thai_ci"},
{19,"euckr COLLATE euckr_korean_ci"},
{20,"latin7 COLLATE latin7_estonian_cs"},
{21,"latin2 COLLATE latin2_hungarian_ci"},
{22,"koi8u COLLATE koi8u_general_ci"},
{23,"cp1251 COLLATE cp1251_ukrainian_ci"},
{24,"gb2312 COLLATE gb2312_chinese_ci"},
{25,"greek COLLATE greek_general_ci"},
{26,"cp1250 COLLATE cp1250_general_ci"},
{27,"latin2 COLLATE latin2_croatian_ci"},
{28,"gbk COLLATE gbk_chinese_ci"},
{29,"cp1257 COLLATE cp1257_lithuanian_ci"},
{30,"latin5 COLLATE latin5_turkish_ci"},
{31,"latin1 COLLATE latin1_german2_ci"},
{32,"armscii8 COLLATE armscii8_general_ci"},
{33,"utf8 COLLATE utf8_general_ci"},
{34,"cp1250 COLLATE cp1250_czech_cs"},
{35,"ucs2 COLLATE ucs2_general_ci"},
{36,"cp866 COLLATE cp866_general_ci"},
{37,"keybcs2 COLLATE keybcs2_general_ci"},
{38,"macce COLLATE macce_general_ci"},
{39,"macroman COLLATE macroman_general_ci"},
{40,"cp852 COLLATE cp852_general_ci"},
{41,"latin7 COLLATE latin7_general_ci"},
{42,"latin7 COLLATE latin7_general_cs"},
{43,"macce COLLATE macce_bin"},
{44,"cp1250 COLLATE cp1250_croatian_ci"},
{45,"utf8mb4 COLLATE utf8mb4_general_ci"},
{46,"utf8mb4 COLLATE utf8mb4_bin"},
{47,"latin1 COLLATE latin1_bin"},
{48,"latin1 COLLATE latin1_general_ci"},
{49,"latin1 COLLATE latin1_general_cs"},
{50,"cp1251 COLLATE cp1251_bin"},
{51,"cp1251 COLLATE cp1251_general_ci"},
{52,"cp1251 COLLATE cp1251_general_cs"},
{53,"macroman COLLATE macroman_bin"},
{54,"utf16 COLLATE utf16_general_ci"},
{55,"utf16 COLLATE utf16_bin"},
{56,"utf16le COLLATE utf16le_general_ci"},
{57,"cp1256 COLLATE cp1256_general_ci"},
{58,"cp1257 COLLATE cp1257_bin"},
{59,"cp1257 COLLATE cp1257_general_ci"},
{60,"utf32 COLLATE utf32_general_ci"},
{61,"utf32 COLLATE utf32_bin"},
{62,"utf16le COLLATE utf16le_bin"},
{63,"binary COLLATE binary"},
{64,"armscii8 COLLATE armscii8_bin"},
{65,"ascii COLLATE ascii_bin"},
{66,"cp1250 COLLATE cp1250_bin"},
{67,"cp1256 COLLATE cp1256_bin"},
{68,"cp866 COLLATE cp866_bin"},
{69,"dec8 COLLATE dec8_bin"},
{70,"greek COLLATE greek_bin"},
{71,"hebrew COLLATE hebrew_bin"},
{72,"hp8 COLLATE hp8_bin"},
{73,"keybcs2 COLLATE keybcs2_bin"},
{74,"koi8r COLLATE koi8r_bin"},
{75,"koi8u COLLATE koi8u_bin"},
{77,"latin2 COLLATE latin2_bin"},
{78,"latin5 COLLATE latin5_bin"},
{79,"latin7 COLLATE latin7_bin"},
{80,"cp850 COLLATE cp850_bin"},
{81,"cp852 COLLATE cp852_bin"},
{82,"swe7 COLLATE swe7_bin"},
{83,"utf8 COLLATE utf8_bin"},
{84,"big5 COLLATE big5_bin"},
{85,"euckr COLLATE euckr_bin"},
{86,"gb2312 COLLATE gb2312_bin"},
{87,"gbk COLLATE gbk_bin"},
{88,"sjis COLLATE sjis_bin"},
{89,"tis620 COLLATE tis620_bin"},
{90,"ucs2 COLLATE ucs2_bin"},
{91,"ujis COLLATE ujis_bin"},
{92,"geostd8 COLLATE geostd8_general_ci"},
{93,"geostd8 COLLATE geostd8_bin"},
{94,"latin1 COLLATE latin1_spanish_ci"},
{95,"cp932 COLLATE cp932_japanese_ci"},
{96,"cp932 COLLATE cp932_bin"},
{97,"eucjpms COLLATE eucjpms_japanese_ci"},
{98,"eucjpms COLLATE eucjpms_bin"},
{99,"cp1250 COLLATE cp1250_polish_ci"},
{101,"utf16 COLLATE utf16_unicode_ci"},
{102,"utf16 COLLATE utf16_icelandic_ci"},
{103,"utf16 COLLATE utf16_latvian_ci"},
{104,"utf16 COLLATE utf16_romanian_ci"},
{105,"utf16 COLLATE utf16_slovenian_ci"},
{106,"utf16 COLLATE utf16_polish_ci"},
{107,"utf16 COLLATE utf16_estonian_ci"},
{108,"utf16 COLLATE utf16_spanish_ci"},
{109,"utf16 COLLATE utf16_swedish_ci"},
{110,"utf16 COLLATE utf16_turkish_ci"},
{111,"utf16 COLLATE utf16_czech_ci"},
{112,"utf16 COLLATE utf16_danish_ci"},
{113,"utf16 COLLATE utf16_lithuanian_ci"},
{114,"utf16 COLLATE utf16_slovak_ci"},
{115,"utf16 COLLATE utf16_spanish2_ci"},
{116,"utf16 COLLATE utf16_roman_ci"},
{117,"utf16 COLLATE utf16_persian_ci"},
{118,"utf16 COLLATE utf16_esperanto_ci"},
{119,"utf16 COLLATE utf16_hungarian_ci"},
{120,"utf16 COLLATE utf16_sinhala_ci"},
{121,"utf16 COLLATE utf16_german2_ci"},
{122,"utf16 COLLATE utf16_croatian_mysql561_ci"},
{123,"utf16 COLLATE utf16_unicode_520_ci"},
{124,"utf16 COLLATE utf16_vietnamese_ci"},
{128,"ucs2 COLLATE ucs2_unicode_ci"},
{129,"ucs2 COLLATE ucs2_icelandic_ci"},
{130,"ucs2 COLLATE ucs2_latvian_ci"},
{131,"ucs2 COLLATE ucs2_romanian_ci"},
{132,"ucs2 COLLATE ucs2_slovenian_ci"},
{133,"ucs2 COLLATE ucs2_polish_ci"},
{134,"ucs2 COLLATE ucs2_estonian_ci"},
{135,"ucs2 COLLATE ucs2_spanish_ci"},
{136,"ucs2 COLLATE ucs2_swedish_ci"},
{137,"ucs2 COLLATE ucs2_turkish_ci"},
{138,"ucs2 COLLATE ucs2_czech_ci"},
{139,"ucs2 COLLATE ucs2_danish_ci"},
{140,"ucs2 COLLATE ucs2_lithuanian_ci"},
{141,"ucs2 COLLATE ucs2_slovak_ci"},
{142,"ucs2 COLLATE ucs2_spanish2_ci"},
{143,"ucs2 COLLATE ucs2_roman_ci"},
{144,"ucs2 COLLATE ucs2_persian_ci"},
{145,"ucs2 COLLATE ucs2_esperanto_ci"},
{146,"ucs2 COLLATE ucs2_hungarian_ci"},
{147,"ucs2 COLLATE ucs2_sinhala_ci"},
{148,"ucs2 COLLATE ucs2_german2_ci"},
{149,"ucs2 COLLATE ucs2_croatian_mysql561_ci"},
{150,"ucs2 COLLATE ucs2_unicode_520_ci"},
{151,"ucs2 COLLATE ucs2_vietnamese_ci"},
{159,"ucs2 COLLATE ucs2_general_mysql500_ci"},
{160,"utf32 COLLATE utf32_unicode_ci"},
{161,"utf32 COLLATE utf32_icelandic_ci"},
{162,"utf32 COLLATE utf32_latvian_ci"},
{163,"utf32 COLLATE utf32_romanian_ci"},
{164,"utf32 COLLATE utf32_slovenian_ci"},
{165,"utf32 COLLATE utf32_polish_ci"},
{166,"utf32 COLLATE utf32_estonian_ci"},
{167,"utf32 COLLATE utf32_spanish_ci"},
{168,"utf32 COLLATE utf32_swedish_ci"},
{169,"utf32 COLLATE utf32_turkish_ci"},
{170,"utf32 COLLATE utf32_czech_ci"},
{171,"utf32 COLLATE utf32_danish_ci"},
{172,"utf32 COLLATE utf32_lithuanian_ci"},
{173,"utf32 COLLATE utf32_slovak_ci"},
{174,"utf32 COLLATE utf32_spanish2_ci"},
{175,"utf32 COLLATE utf32_roman_ci"},
{176,"utf32 COLLATE utf32_persian_ci"},
{177,"utf32 COLLATE utf32_esperanto_ci"},
{178,"utf32 COLLATE utf32_hungarian_ci"},
{179,"utf32 COLLATE utf32_sinhala_ci"},
{180,"utf32 COLLATE utf32_german2_ci"},
{181,"utf32 COLLATE utf32_croatian_mysql561_ci"},
{182,"utf32 COLLATE utf32_unicode_520_ci"},
{183,"utf32 COLLATE utf32_vietnamese_ci"},
{192,"utf8 COLLATE utf8_unicode_ci"},
{193,"utf8 COLLATE utf8_icelandic_ci"},
{194,"utf8 COLLATE utf8_latvian_ci"},
{195,"utf8 COLLATE utf8_romanian_ci"},
{196,"utf8 COLLATE utf8_slovenian_ci"},
{197,"utf8 COLLATE utf8_polish_ci"},
{198,"utf8 COLLATE utf8_estonian_ci"},
{199,"utf8 COLLATE utf8_spanish_ci"},
{200,"utf8 COLLATE utf8_swedish_ci"},
{201,"utf8 COLLATE utf8_turkish_ci"},
{202,"utf8 COLLATE utf8_czech_ci"},
{203,"utf8 COLLATE utf8_danish_ci"},
{204,"utf8 COLLATE utf8_lithuanian_ci"},
{205,"utf8 COLLATE utf8_slovak_ci"},
{206,"utf8 COLLATE utf8_spanish2_ci"},
{207,"utf8 COLLATE utf8_roman_ci"},
{208,"utf8 COLLATE utf8_persian_ci"},
{209,"utf8 COLLATE utf8_esperanto_ci"},
{210,"utf8 COLLATE utf8_hungarian_ci"},
{211,"utf8 COLLATE utf8_sinhala_ci"},
{212,"utf8 COLLATE utf8_german2_ci"},
{213,"utf8 COLLATE utf8_croatian_mysql561_ci"},
{214,"utf8 COLLATE utf8_unicode_520_ci"},
{215,"utf8 COLLATE utf8_vietnamese_ci"},
{223,"utf8 COLLATE utf8_general_mysql500_ci"},
{224,"utf8mb4 COLLATE utf8mb4_unicode_ci"},
{225,"utf8mb4 COLLATE utf8mb4_icelandic_ci"},
{226,"utf8mb4 COLLATE utf8mb4_latvian_ci"},
{227,"utf8mb4 COLLATE utf8mb4_romanian_ci"},
{228,"utf8mb4 COLLATE utf8mb4_slovenian_ci"},
{229,"utf8mb4 COLLATE utf8mb4_polish_ci"},
{230,"utf8mb4 COLLATE utf8mb4_estonian_ci"},
{231,"utf8mb4 COLLATE utf8mb4_spanish_ci"},
{232,"utf8mb4 COLLATE utf8mb4_swedish_ci"},
{233,"utf8mb4 COLLATE utf8mb4_turkish_ci"},
{234,"utf8mb4 COLLATE utf8mb4_czech_ci"},
{235,"utf8mb4 COLLATE utf8mb4_danish_ci"},
{236,"utf8mb4 COLLATE utf8mb4_lithuanian_ci"},
{237,"utf8mb4 COLLATE utf8mb4_slovak_ci"},
{238,"utf8mb4 COLLATE utf8mb4_spanish2_ci"},
{239,"utf8mb4 COLLATE utf8mb4_roman_ci"},
{240,"utf8mb4 COLLATE utf8mb4_persian_ci"},
{241,"utf8mb4 COLLATE utf8mb4_esperanto_ci"},
{242,"utf8mb4 COLLATE utf8mb4_hungarian_ci"},
{243,"utf8mb4 COLLATE utf8mb4_sinhala_ci"},
{244,"utf8mb4 COLLATE utf8mb4_german2_ci"},
{245,"utf8mb4 COLLATE utf8mb4_croatian_mysql561_ci"},
{246,"utf8mb4 COLLATE utf8mb4_unicode_520_ci"},
{247,"utf8mb4 COLLATE utf8mb4_vietnamese_ci"},
{576,"utf8 COLLATE utf8_croatian_ci"},
{577,"utf8 COLLATE utf8_myanmar_ci"},
{578,"utf8 COLLATE utf8_thai_520_w2"},
{608,"utf8mb4 COLLATE utf8mb4_croatian_ci"},
{609,"utf8mb4 COLLATE utf8mb4_myanmar_ci"},
{610,"utf8mb4 COLLATE utf8mb4_thai_520_w2"},
{640,"ucs2 COLLATE ucs2_croatian_ci"},
{641,"ucs2 COLLATE ucs2_myanmar_ci"},
{642,"ucs2 COLLATE ucs2_thai_520_w2"},
{672,"utf16 COLLATE utf16_croatian_ci"},
{673,"utf16 COLLATE utf16_myanmar_ci"},
{674,"utf16 COLLATE utf16_thai_520_w2"},
{736,"utf32 COLLATE utf32_croatian_ci"},
{737,"utf32 COLLATE utf32_myanmar_ci"},
{738,"utf32 COLLATE utf32_thai_520_w2"},
{1025,"big5 COLLATE big5_chinese_nopad_ci"},
{1027,"dec8 COLLATE dec8_swedish_nopad_ci"},
{1028,"cp850 COLLATE cp850_general_nopad_ci"},
{1030,"hp8 COLLATE hp8_english_nopad_ci"},
{1031,"koi8r COLLATE koi8r_general_nopad_ci"},
{1032,"latin1 COLLATE latin1_swedish_nopad_ci"},
{1033,"latin2 COLLATE latin2_general_nopad_ci"},
{1034,"swe7 COLLATE swe7_swedish_nopad_ci"},
{1035,"ascii COLLATE ascii_general_nopad_ci"},
{1036,"ujis COLLATE ujis_japanese_nopad_ci"},
{1037,"sjis COLLATE sjis_japanese_nopad_ci"},
{1040,"hebrew COLLATE hebrew_general_nopad_ci"},
{1042,"tis620 COLLATE tis620_thai_nopad_ci"},
{1043,"euckr COLLATE euckr_korean_nopad_ci"},
{1046,"koi8u COLLATE koi8u_general_nopad_ci"},
{1048,"gb2312 COLLATE gb2312_chinese_nopad_ci"},
{1049,"greek COLLATE greek_general_nopad_ci"},
{1050,"cp1250 COLLATE cp1250_general_nopad_ci"},
{1052,"gbk COLLATE gbk_chinese_nopad_ci"},
{1054,"latin5 COLLATE latin5_turkish_nopad_ci"},
{1056,"armscii8 COLLATE armscii8_general_nopad_ci"},
{1057,"utf8 COLLATE utf8_general_nopad_ci"},
{1059,"ucs2 COLLATE ucs2_general_nopad_ci"},
{1060,"cp866 COLLATE cp866_general_nopad_ci"},
{1061,"keybcs2 COLLATE keybcs2_general_nopad_ci"},
{1062,"macce COLLATE macce_general_nopad_ci"},
{1063,"macroman COLLATE macroman_general_nopad_ci"},
{1064,"cp852 COLLATE cp852_general_nopad_ci"},
{1065,"latin7 COLLATE latin7_general_nopad_ci"},
{1067,"macce COLLATE macce_nopad_bin"},
{1069,"utf8mb4 COLLATE utf8mb4_general_nopad_ci"},
{1070,"utf8mb4 COLLATE utf8mb4_nopad_bin"},
{1071,"latin1 COLLATE latin1_nopad_bin"},
{1074,"cp1251 COLLATE cp1251_nopad_bin"},
{1075,"cp1251 COLLATE cp1251_general_nopad_ci"},
{1077,"macroman COLLATE macroman_nopad_bin"},
{1078,"utf16 COLLATE utf16_general_nopad_ci"},
{1079,"utf16 COLLATE utf16_nopad_bin"},
{1080,"utf16le COLLATE utf16le_general_nopad_ci"},
{1081,"cp1256 COLLATE cp1256_general_nopad_ci"},
{1082,"cp1257 COLLATE cp1257_nopad_bin"},
{1083,"cp1257 COLLATE cp1257_general_nopad_ci"},
{1084,"utf32 COLLATE utf32_general_nopad_ci"},
{1085,"utf32 COLLATE utf32_nopad_bin"},
{1086,"utf16le COLLATE utf16le_nopad_bin"},
{1088,"armscii8 COLLATE armscii8_nopad_bin"},
{1089,"ascii COLLATE ascii_nopad_bin"},
{1090,"cp1250 COLLATE cp1250_nopad_bin"},
{1091,"cp1256 COLLATE cp1256_nopad_bin"},
{1092,"cp866 COLLATE cp866_nopad_bin"},
{1093,"dec8 COLLATE dec8_nopad_bin"},
{1094,"greek COLLATE greek_nopad_bin"},
{1095,"hebrew COLLATE hebrew_nopad_bin"},
{1096,"hp8 COLLATE hp8_nopad_bin"},
{1097,"keybcs2 COLLATE keybcs2_nopad_bin"},
{1098,"koi8r COLLATE koi8r_nopad_bin"},
{1099,"koi8u COLLATE koi8u_nopad_bin"},
{1101,"latin2 COLLATE latin2_nopad_bin"},
{1102,"latin5 COLLATE latin5_nopad_bin"},
{1103,"latin7 COLLATE latin7_nopad_bin"},
{1104,"cp850 COLLATE cp850_nopad_bin"},
{1105,"cp852 COLLATE cp852_nopad_bin"},
{1106,"swe7 COLLATE swe7_nopad_bin"},
{1107,"utf8 COLLATE utf8_nopad_bin"},
{1108,"big5 COLLATE big5_nopad_bin"},
{1109,"euckr COLLATE euckr_nopad_bin"},
{1110,"gb2312 COLLATE gb2312_nopad_bin"},
{1111,"gbk COLLATE gbk_nopad_bin"},
{1112,"sjis COLLATE sjis_nopad_bin"},
{1113,"tis620 COLLATE tis620_nopad_bin"},
{1114,"ucs2 COLLATE ucs2_nopad_bin"},
{1115,"ujis COLLATE ujis_nopad_bin"},
{1116,"geostd8 COLLATE geostd8_general_nopad_ci"},
{1117,"geostd8 COLLATE geostd8_nopad_bin"},
{1119,"cp932 COLLATE cp932_japanese_nopad_ci"},
{1120,"cp932 COLLATE cp932_nopad_bin"},
{1121,"eucjpms COLLATE eucjpms_japanese_nopad_ci"},
{1122,"eucjpms COLLATE eucjpms_nopad_bin"},
{1125,"utf16 COLLATE utf16_unicode_nopad_ci"},
{1147,"utf16 COLLATE utf16_unicode_520_nopad_ci"},
{1152,"ucs2 COLLATE ucs2_unicode_nopad_ci"},
{1174,"ucs2 COLLATE ucs2_unicode_520_nopad_ci"},
{1184,"utf32 COLLATE utf32_unicode_nopad_ci"},
{1206,"utf32 COLLATE utf32_unicode_520_nopad_ci"},
{1216,"utf8 COLLATE utf8_unicode_nopad_ci"},
{1238,"utf8 COLLATE utf8_unicode_520_nopad_ci"},
{1248,"utf8mb4 COLLATE utf8mb4_unicode_nopad_ci"},
{1270,"utf8mb4 COLLATE utf8mb4_unicode_520_nopad_ci"},
{0, NULL}
};
static value_string_ext mariadb_collation_vals_ext = VALUE_STRING_EXT_INIT(mariadb_collation_vals);
/* allowed MYSQL_SHUTDOWN levels */
static const value_string mysql_shutdown_vals[] = {
{0, "default"},
{1, "wait for connections to finish"},
{2, "wait for transactions to finish"},
{8, "wait for updates to finish"},
{16, "wait flush all buffers"},
{17, "wait flush critical buffers"},
{254, "kill running queries"},
{255, "kill connections"},
{0, NULL}
};
/* allowed MYSQL_SET_OPTION values */
static const value_string mysql_option_vals[] = {
{0, "multi statements on"},
{1, "multi statements off"},
{0, NULL}
};
static const value_string mysql_session_track_type_vals[] = {
{0, "SESSION_SYSVARS_TRACKER"},
{1, "CURRENT_SCHEMA_TRACKER"},
{2, "SESSION_STATE_CHANGE_TRACKER"},
{3, "SESSION_TRACK_GTIDS"},
{4, "SESSION_TRACK_TRANSACTION_CHARACTERISTICS"},
{5, "SESSION_TRACK_TRANSACTION_STATE"},
{0, NULL}
};
static const value_string mysql_response_code_vals[] = {
{ MYSQL_RESPONSE_OK, "OK Packet" },
{ MYSQL_RESPONSE_ERR, "ERR Packet" },
{ MYSQL_RESPONSE_EOF, "EOF Packet" },
{ 0, NULL }
};
/* protocol id */
static int proto_mysql = -1;
/* dissector configuration */
static gboolean mysql_desegment = TRUE;
static gboolean mysql_showquery = FALSE;
/* expand-the-tree flags */
static gint ett_mysql = -1;
static gint ett_server_greeting = -1;
static gint ett_login_request = -1;
static gint ett_caps = -1;
static gint ett_extcaps = -1;
static gint ett_stat = -1;
static gint ett_row_value = -1;
static gint ett_request = -1;
static gint ett_query_attributes = -1;
static gint ett_refresh = -1;
static gint ett_field_flags = -1;
static gint ett_exec_param = -1;
static gint ett_bulk_param = -1;
static gint ett_session_track = -1;
static gint ett_session_track_data = -1;
static gint ett_extmeta = -1;
static gint ett_extmeta_data = -1;
static gint ett_connattrs = -1;
static gint ett_connattrs_attr = -1;
static gint ett_mysql_field = -1;
static gint ett_binlog_event = -1;
static gint ett_binlog_event_hb_v2 = -1;
/* protocol fields */
static int hf_mysql_caps_server = -1;
static int hf_mysql_caps_client = -1;
static int hf_mysql_cap_long_password = -1;
static int hf_mysql_cap_found_rows = -1;
static int hf_mysql_cap_long_flag = -1;
static int hf_mysql_cap_connect_with_db = -1;
static int hf_mysql_cap_no_schema = -1;
static int hf_mysql_cap_compress = -1;
static int hf_mysql_cap_odbc = -1;
static int hf_mysql_cap_local_files = -1;
static int hf_mysql_cap_ignore_space = -1;
static int hf_mysql_cap_change_user = -1;
static int hf_mysql_cap_interactive = -1;
static int hf_mysql_cap_ssl = -1;
static int hf_mysql_cap_ignore_sigpipe = -1;
static int hf_mysql_cap_transactions = -1;
static int hf_mysql_cap_reserved = -1;
static int hf_mysql_cap_secure_connect = -1;
static int hf_mysql_extcaps_server = -1;
static int hf_mysql_extcaps_client = -1;
static int hf_mysql_cap_multi_statements = -1;
static int hf_mysql_cap_multi_results = -1;
static int hf_mysql_cap_ps_multi_results = -1;
static int hf_mysql_cap_plugin_auth = -1;
static int hf_mysql_cap_connect_attrs = -1;
static int hf_mysql_cap_plugin_auth_lenenc_client_data = -1;
static int hf_mysql_cap_client_can_handle_expired_passwords = -1;
static int hf_mysql_cap_session_track = -1;
static int hf_mysql_cap_deprecate_eof = -1;
static int hf_mysql_cap_unused = -1;
static int hf_mysql_server_language = -1;
static int hf_mysql_server_status = -1;
static int hf_mysql_stat_it = -1;
static int hf_mysql_stat_ac = -1;
static int hf_mysql_stat_mr = -1;
static int hf_mysql_stat_mu = -1;
static int hf_mysql_stat_bi = -1;
static int hf_mysql_stat_ni = -1;
static int hf_mysql_stat_cr = -1;
static int hf_mysql_stat_lr = -1;
static int hf_mysql_stat_dr = -1;
static int hf_mysql_stat_bs = -1;
static int hf_mysql_stat_mc = -1;
static int hf_mysql_stat_session_state_changed = -1;
static int hf_mysql_stat_query_was_slow = -1;
static int hf_mysql_stat_ps_out_params = -1;
static int hf_mysql_stat_trans_readonly = -1;
static int hf_mysql_refresh = -1;
static int hf_mysql_rfsh_grants = -1;
static int hf_mysql_rfsh_log = -1;
static int hf_mysql_rfsh_tables = -1;
static int hf_mysql_rfsh_hosts = -1;
static int hf_mysql_rfsh_status = -1;
static int hf_mysql_rfsh_threads = -1;
static int hf_mysql_rfsh_slave = -1;
static int hf_mysql_rfsh_master = -1;
static int hf_mysql_packet_length = -1;
static int hf_mysql_packet_number = -1;
static int hf_mysql_request = -1;
static int hf_mysql_command = -1;
static int hf_mysql_response_code = -1;
static int hf_mysql_error_code = -1;
static int hf_mysql_error_string = -1;
static int hf_mysql_sqlstate = -1;
static int hf_mysql_message = -1;
static int hf_mysql_payload = -1;
static int hf_mysql_server_greeting = -1;
static int hf_mysql_session_track = -1;
static int hf_mysql_session_track_type = -1;
static int hf_mysql_session_track_length = -1;
static int hf_mysql_session_track_data = -1;
static int hf_mysql_session_track_data_length = -1;
static int hf_mysql_session_track_sysvar_length = -1;
static int hf_mysql_session_track_sysvar_name = -1;
static int hf_mysql_session_track_sysvar_value = -1;
static int hf_mysql_session_track_schema = -1;
static int hf_mysql_session_track_schema_length = -1;
static int hf_mysql_session_state_change = -1;
static int hf_mysql_session_track_gtids = -1;
static int hf_mysql_session_track_gtids_encoding = -1;
static int hf_mysql_session_track_gtids_length = -1;
static int hf_mysql_session_track_transaction_characteristics = -1;
static int hf_mysql_session_track_transaction_characteristics_length = -1;
static int hf_mysql_session_track_transaction_state = -1;
static int hf_mysql_session_track_transaction_state_length = -1;
static int hf_mysql_protocol = -1;
static int hf_mysql_version = -1;
static int hf_mysql_login_request = -1;
static int hf_mysql_max_packet = -1;
static int hf_mysql_user = -1;
static int hf_mysql_table_name = -1;
static int hf_mysql_schema = -1;
static int hf_mysql_client_auth_plugin = -1;
static int hf_mysql_connattrs = -1;
static int hf_mysql_connattrs_length = -1;
static int hf_mysql_connattrs_attr = -1;
static int hf_mysql_connattrs_name_length = -1;
static int hf_mysql_connattrs_name = -1;
static int hf_mysql_connattrs_value_length = -1;
static int hf_mysql_connattrs_value = -1;
static int hf_mysql_thread_id = -1;
static int hf_mysql_salt = -1;
static int hf_mysql_salt2 = -1;
static int hf_mysql_auth_plugin_length = -1;
static int hf_mysql_auth_plugin = -1;
static int hf_mysql_charset = -1;
static int hf_mysql_passwd = -1;
static int hf_mysql_unused = -1;
static int hf_mysql_affected_rows = -1;
static int hf_mysql_insert_id = -1;
static int hf_mysql_num_warn = -1;
static int hf_mysql_stmt_id = -1;
static int hf_mysql_query_attributes = -1;
static int hf_mysql_query_attributes_count = -1;
static int hf_mysql_query_attributes_send_types_to_server = -1;
static int hf_mysql_query_attribute_name_type = -1;
static int hf_mysql_query_attribute_name = -1;
static int hf_mysql_query_attribute_value = -1;
static int hf_mysql_query = -1;
static int hf_mysql_shutdown = -1;
static int hf_mysql_option = -1;
static int hf_mysql_num_rows = -1;
static int hf_mysql_param = -1;
static int hf_mysql_num_params = -1;
static int hf_mysql_exec_flags4 = -1;
static int hf_mysql_exec_flags5 = -1;
static int hf_mysql_exec_iter = -1;
static int hf_mysql_binlog_position = -1;
static int hf_mysql_binlog_flags = -1;
static int hf_mysql_binlog_server_id = -1;
static int hf_mysql_binlog_file_name = -1;
static int hf_mysql_binlog_slave_hostname_length = -1;
static int hf_mysql_binlog_slave_hostname = -1;
static int hf_mysql_binlog_slave_user_length = -1;
static int hf_mysql_binlog_slave_user = -1;
static int hf_mysql_binlog_slave_password_length = -1;
static int hf_mysql_binlog_slave_password = -1;
static int hf_mysql_binlog_slave_mysql_port = -1;
static int hf_mysql_binlog_replication_rank = -1;
static int hf_mysql_binlog_master_id = -1;
static int hf_mysql_binlog_event_header_timestamp = -1;
static int hf_mysql_binlog_event_header_event_type = -1;
static int hf_mysql_binlog_event_header_server_id = -1;
static int hf_mysql_binlog_event_header_event_size = -1;
static int hf_mysql_binlog_event_header_log_position = -1;
static int hf_mysql_binlog_event_header_flags = -1;
static int hf_mysql_binlog_event_checksum = -1;
static int hf_mysql_binlog_event_heartbeat_v2 = -1;
static int hf_mysql_binlog_event_heartbeat_v2_otw = -1;
static int hf_mysql_binlog_event_heartbeat_v2_otw_type = -1;
static int hf_mysql_binlog_hb_event_filename = -1;
static int hf_mysql_binlog_hb_event_log_position = -1;
static int hf_mysql_eof = -1;
static int hf_mysql_num_fields = -1;
static int hf_mysql_extra = -1;
static int hf_mysql_fld_catalog = -1;
static int hf_mysql_fld_db = -1;
static int hf_mysql_fld_table = -1;
static int hf_mysql_fld_org_table = -1;
static int hf_mysql_fld_name = -1;
static int hf_mysql_fld_org_name = -1;
static int hf_mysql_fld_charsetnr = -1;
static int hf_mysql_fld_length = -1;
static int hf_mysql_fld_type = -1;
static int hf_mysql_fld_flags = -1;
static int hf_mysql_fld_not_null = -1;
static int hf_mysql_fld_primary_key = -1;
static int hf_mysql_fld_unique_key = -1;
static int hf_mysql_fld_multiple_key = -1;
static int hf_mysql_fld_blob = -1;
static int hf_mysql_fld_unsigned = -1;
static int hf_mysql_fld_zero_fill = -1;
static int hf_mysql_exec_field_null = -1;
static int hf_mysql_null_buffer = -1;
static int hf_mysql_fld_enum = -1;
static int hf_mysql_fld_auto_increment = -1;
static int hf_mysql_fld_timestamp = -1;
static int hf_mysql_fld_set = -1;
static int hf_mysql_fld_decimals = -1;
static int hf_mysql_fld_default = -1;
static int hf_mysql_row_text = -1;
static int hf_mysql_new_parameter_bound_flag = -1;
static int hf_mysql_exec_param = -1;
static int hf_mysql_exec_unsigned = -1;
static int hf_mysql_exec_field_longlong = -1;
static int hf_mysql_exec_field_unsigned_longlong = -1;
static int hf_mysql_exec_field_string = -1;
static int hf_mysql_exec_field_double = -1;
static int hf_mysql_exec_field_datetime_length = -1;
static int hf_mysql_exec_field_year = -1;
static int hf_mysql_exec_field_month = -1;
static int hf_mysql_exec_field_day = -1;
static int hf_mysql_exec_field_hour = -1;
static int hf_mysql_exec_field_minute = -1;
static int hf_mysql_exec_field_second = -1;
static int hf_mysql_exec_field_second_b = -1;
static int hf_mysql_exec_field_long = -1;
static int hf_mysql_exec_field_unsigned_long = -1;
static int hf_mysql_exec_field_tiny = -1;
static int hf_mysql_exec_field_unsigned_tiny = -1;
static int hf_mysql_exec_field_short = -1;
static int hf_mysql_exec_field_unsigned_short = -1;
static int hf_mysql_exec_field_float = -1;
static int hf_mysql_exec_field_time_length = -1;
static int hf_mysql_exec_field_time_sign = -1;
static int hf_mysql_exec_field_time_days = -1;
static int hf_mysql_auth_switch_request_status = -1;
static int hf_mysql_auth_switch_request_name = -1;
static int hf_mysql_auth_switch_request_data = -1;
static int hf_mysql_auth_switch_response_data = -1;
static int hf_mysql_compressed_packet_length = -1;
static int hf_mysql_compressed_packet_length_uncompressed = -1;
static int hf_mysql_compressed_packet_number = -1;
static int hf_mysql_prefix = -1;
static int hf_mysql_length = -1;
//static int hf_mariadb_fld_charsetnr = -1;
static int hf_mariadb_server_language = -1;
static int hf_mariadb_charset = -1;
static int hf_mariadb_cap_progress = -1;
static int hf_mariadb_cap_commulti = -1;
static int hf_mariadb_cap_bulk = -1;
static int hf_mariadb_cap_extmetadata = -1;
static int hf_mariadb_cap_cache_metadata = -1;
static int hf_mariadb_extcaps_server = -1;
static int hf_mariadb_extcaps_client = -1;
static int hf_mariadb_bulk_flag_autoid = -1;
static int hf_mariadb_bulk_flag_sendtypes = -1;
static int hf_mariadb_bulk_caps_flags = -1;
static int hf_mariadb_bulk_paramtypes = -1;
static int hf_mariadb_bulk_indicator = -1;
static int hf_mariadb_bulk_row_nr = -1;
static int hf_mariadb_send_meta = -1;
static int hf_mariadb_extmeta = -1;
static int hf_mariadb_extmeta_data = -1;
static int hf_mariadb_extmeta_length = -1;
static int hf_mariadb_extmeta_key = -1;
static int hf_mariadb_extmeta_type = -1;
static int hf_mariadb_extmeta_format = -1;
static dissector_handle_t mysql_handle;
static dissector_handle_t tls_handle;
static expert_field ei_mysql_dissector_incomplete = EI_INIT;
static expert_field ei_mysql_streamed_param = EI_INIT;
static expert_field ei_mysql_prepare_response_needed = EI_INIT;
static expert_field ei_mysql_unknown_response = EI_INIT;
static expert_field ei_mysql_command = EI_INIT;
static expert_field ei_mysql_invalid_length = EI_INIT;
/* type constants */
static const value_string type_constants[] = {
{0x00, "FIELD_TYPE_DECIMAL" },
{0x01, "FIELD_TYPE_TINY" },
{0x02, "FIELD_TYPE_SHORT" },
{0x03, "FIELD_TYPE_LONG" },
{0x04, "FIELD_TYPE_FLOAT" },
{0x05, "FIELD_TYPE_DOUBLE" },
{0x06, "FIELD_TYPE_NULL" },
{0x07, "FIELD_TYPE_TIMESTAMP" },
{0x08, "FIELD_TYPE_LONGLONG" },
{0x09, "FIELD_TYPE_INT24" },
{0x0a, "FIELD_TYPE_DATE" },
{0x0b, "FIELD_TYPE_TIME" },
{0x0c, "FIELD_TYPE_DATETIME" },
{0x0d, "FIELD_TYPE_YEAR" },
{0x0e, "FIELD_TYPE_NEWDATE" },
{0x0f, "FIELD_TYPE_VARCHAR" },
{0x10, "FIELD_TYPE_BIT" },
{0xf6, "FIELD_TYPE_NEWDECIMAL" },
{0xf7, "FIELD_TYPE_ENUM" },
{0xf8, "FIELD_TYPE_SET" },
{0xf9, "FIELD_TYPE_TINY_BLOB" },
{0xfa, "FIELD_TYPE_MEDIUM_BLOB"},
{0xfb, "FIELD_TYPE_LONG_BLOB" },
{0xfc, "FIELD_TYPE_BLOB" },
{0xfd, "FIELD_TYPE_VAR_STRING" },
{0xfe, "FIELD_TYPE_STRING" },
{0xff, "FIELD_TYPE_GEOMETRY" },
{0, NULL}
};
typedef enum mysql_state {
UNDEFINED,
LOGIN,
REQUEST,
RESPONSE_OK,
RESPONSE_ERROR,
RESPONSE_EOF,
INTERMEDIATE_EOF,
RESPONSE_MESSAGE,
RESPONSE_TABULAR,
RESPONSE_SHOW_FIELDS,
FIELD_PACKET,
ROW_PACKET,
COLUMN_COUNT,
RESPONSE_PREPARE,
PREPARED_PARAMETERS,
PREPARED_FIELDS,
AUTH_SWITCH_REQUEST,
AUTH_SWITCH_RESPONSE,
BINLOG_DUMP
} mysql_state_t;
static const value_string state_vals[] = {
{UNDEFINED, "undefined"},
{LOGIN, "login"},
{REQUEST, "request"},
{RESPONSE_OK, "response OK"},
{RESPONSE_ERROR, "response ERROR"},
{RESPONSE_EOF, "response EOF"},
{INTERMEDIATE_EOF, "intermediate EOF"},
{RESPONSE_MESSAGE, "response message"},
{RESPONSE_TABULAR, "tabular response"},
{RESPONSE_SHOW_FIELDS, "response to SHOW FIELDS"},
{FIELD_PACKET, "field packet"},
{ROW_PACKET, "row packet"},
{COLUMN_COUNT, "column count"},
{RESPONSE_PREPARE, "response to PREPARE"},
{PREPARED_PARAMETERS, "parameters in response to PREPARE"},
{PREPARED_FIELDS, "fields in response to PREPARE"},
{AUTH_SWITCH_REQUEST, "authentication switch request"},
{AUTH_SWITCH_RESPONSE, "authentication switch response"},
{BINLOG_DUMP, "binlog event"},
{0, NULL}
};
#define MAX_MY_METADATA_COUNT G_MAXINT16 // Arbitrary; is 32k enough?
typedef struct {
guint16 count;
guint16* flags;
guint8* types;
} my_metadata_list_t;
typedef struct mysql_conn_data {
guint16 srv_caps;
guint16 srv_caps_ext;
guint16 clnt_caps;
guint16 clnt_caps_ext;
mysql_state_t state;
guint32 stmt_id;
guint16 stmt_num_params;
guint16 stmt_num_fields;
wmem_tree_t* stmts;
#ifdef CTDEBUG
guint32 generation;
#endif
guint8 major_version;
guint32 frame_start_ssl;
guint32 frame_start_compressed;
guint8 compressed_state;
gboolean is_mariadb_server; /* set to 1, if connected to a MariaDB server */
gboolean is_mariadb_client; /* set to 1, if connected from a MariaDB client */
guint32 mariadb_server_ext_caps;
guint32 mariadb_client_ext_caps;
guint64 remaining_field_packet_count;
my_metadata_list_t field_metas;
} mysql_conn_data_t;
struct mysql_frame_data {
mysql_state_t state;
};
typedef struct my_stmt_data {
my_metadata_list_t param_metas;
my_metadata_list_t field_metas;
guint16 bulk_flags;
} my_stmt_data_t;
typedef struct mysql_exec_dissector {
guint8 type;
guint8 unsigned_flag;
void (*dissector)(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
} mysql_exec_dissector_t;
/* function prototypes */
static int mysql_dissect_error_packet(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree);
static int mysql_dissect_ok_packet(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree, mysql_conn_data_t *conn_data);
static int mysql_dissect_server_status(tvbuff_t *tvb, int offset, proto_tree *tree, guint16 *server_status);
static int mysql_dissect_caps(tvbuff_t *tvb, int offset, proto_tree *tree, int mysql_caps, guint16 *caps);
static int mysql_dissect_extcaps(tvbuff_t *tvb, int offset, proto_tree *tree, int mysql_extcaps, guint16 *caps);
static int mysql_dissect_result_header(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree, mysql_conn_data_t *conn_data);
static int mysql_dissect_field_packet(tvbuff_t *tvb, proto_item *pi, int offset, proto_tree *tree, packet_info *pinfo, mysql_conn_data_t *conn_data, mysql_state_t current_state);
static int mysql_dissect_text_row_packet(tvbuff_t *tvb, int offset, proto_tree *tree);
static int mysql_dissect_binary_row_packet(tvbuff_t *tvb, packet_info *pinfo, proto_item *pi, int offset, proto_tree *tree, mysql_conn_data_t *conn_data);
static int mysql_dissect_binlog_event_packet(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree);
static int mysql_dissect_response_prepare(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree, mysql_conn_data_t *conn_data);
static int mysql_dissect_auth_switch_request(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree, mysql_conn_data_t *conn_data);
static int mysql_dissect_eof(tvbuff_t *tvb, packet_info *pinfo, proto_item *pi, int offset, proto_tree *tree, mysql_conn_data_t *conn_data);
static int mysql_dissect_auth_switch_response(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree, mysql_conn_data_t *conn_data);
static void mysql_dissect_exec_string(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_datetime(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_tiny(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_unsigned_tiny(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_short(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_unsigned_short(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_long(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_unsigned_long(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_float(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_double(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_longlong(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_unsigned_longlong(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static void mysql_dissect_exec_null(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static char mysql_dissect_exec_param(proto_item *req_tree, tvbuff_t *tvb, int *offset,
int *param_offset, guint8 param_flags, packet_info *pinfo);
static char mysql_dissect_binary_row_value(tvbuff_t *tvb, packet_info *pinfo, proto_item *pi, int *offset,
proto_item *tree, guint8 field_type, guint16 field_flag);
static void mysql_dissect_exec_primitive(tvbuff_t *tvb, int *param_offset,
proto_item *field_tree, const int hfindex, const int offset);
static void mysql_dissect_exec_time(tvbuff_t *tvb, int *param_offset, proto_item *field_tree);
static int mariadb_dissect_caps_or_flags(tvbuff_t *tvb, int offset, enum ftenum type, proto_tree *tree,
int mariadb_caps, int * const *fields, void *value);
static gint my_tvb_strsize(tvbuff_t *tvb, int offset);
static int tvb_get_fle(tvbuff_t *tvb, proto_tree* tree, int offset, guint64 *res, guint8 *is_null);
static int mysql_field_add_lestring(tvbuff_t *tvb, int offset, proto_tree *tree, int field);
static const mysql_exec_dissector_t mysql_exec_dissectors[] = {
{ 0x01, 0, mysql_dissect_exec_tiny },
{ 0x01, 1, mysql_dissect_exec_unsigned_tiny },
{ 0x02, 0, mysql_dissect_exec_short },
{ 0x02, 1, mysql_dissect_exec_unsigned_short },
{ 0x03, 0, mysql_dissect_exec_long },
{ 0x03, 1, mysql_dissect_exec_unsigned_long },
{ 0x04, 0, mysql_dissect_exec_float },
{ 0x05, 0, mysql_dissect_exec_double },
{ 0x06, 0, mysql_dissect_exec_null },
{ 0x07, 0, mysql_dissect_exec_datetime },
{ 0x08, 0, mysql_dissect_exec_longlong },
{ 0x08, 1, mysql_dissect_exec_unsigned_longlong },
{ 0x0a, 0, mysql_dissect_exec_datetime },
{ 0x0b, 0, mysql_dissect_exec_time },
{ 0x0c, 0, mysql_dissect_exec_datetime },
{ 0xf6, 0, mysql_dissect_exec_string },
{ 0xfc, 0, mysql_dissect_exec_string },
{ 0xfd, 0, mysql_dissect_exec_string },
{ 0xfe, 0, mysql_dissect_exec_string },
{ 0x00, 0, NULL },
};
static int * const mysql_rfsh_flags[] = {
&hf_mysql_rfsh_grants,
&hf_mysql_rfsh_log,
&hf_mysql_rfsh_tables,
&hf_mysql_rfsh_hosts,
&hf_mysql_rfsh_status,
&hf_mysql_rfsh_threads,
&hf_mysql_rfsh_slave,
&hf_mysql_rfsh_master,
NULL
};
static int * const mysql_stat_flags[] = {
&hf_mysql_stat_it,
&hf_mysql_stat_ac,
&hf_mysql_stat_mu,
&hf_mysql_stat_mr,
&hf_mysql_stat_bi,
&hf_mysql_stat_ni,
&hf_mysql_stat_cr,
&hf_mysql_stat_lr,
&hf_mysql_stat_dr,
&hf_mysql_stat_bs,
&hf_mysql_stat_mc,
&hf_mysql_stat_query_was_slow,
&hf_mysql_stat_ps_out_params,
&hf_mysql_stat_trans_readonly,
&hf_mysql_stat_session_state_changed,
NULL
};
static int * const mysql_caps_flags[] = {
&hf_mysql_cap_long_password,
&hf_mysql_cap_found_rows,
&hf_mysql_cap_long_flag,
&hf_mysql_cap_connect_with_db,
&hf_mysql_cap_no_schema,
&hf_mysql_cap_compress,
&hf_mysql_cap_odbc,
&hf_mysql_cap_local_files,
&hf_mysql_cap_ignore_space,
&hf_mysql_cap_change_user,
&hf_mysql_cap_interactive,
&hf_mysql_cap_ssl,
&hf_mysql_cap_ignore_sigpipe,
&hf_mysql_cap_transactions,
&hf_mysql_cap_reserved,
&hf_mysql_cap_secure_connect,
NULL
};
static int * const mysql_extcaps_flags[] = {
&hf_mysql_cap_multi_statements,
&hf_mysql_cap_multi_results,
&hf_mysql_cap_ps_multi_results,
&hf_mysql_cap_plugin_auth,
&hf_mysql_cap_connect_attrs,
&hf_mysql_cap_plugin_auth_lenenc_client_data,
&hf_mysql_cap_client_can_handle_expired_passwords,
&hf_mysql_cap_session_track,
&hf_mysql_cap_deprecate_eof,
&hf_mysql_cap_unused,
NULL
};
static int * const mariadb_extcaps_flags[] = {
&hf_mariadb_cap_progress,
&hf_mariadb_cap_commulti,
&hf_mariadb_cap_bulk,
&hf_mariadb_cap_extmetadata,
&hf_mariadb_cap_cache_metadata,
NULL
};
static int * const mariadb_bulk_caps_flags[] = {
&hf_mariadb_bulk_flag_autoid,
&hf_mariadb_bulk_flag_sendtypes,
NULL
};
static int * const mysql_fld_flags[] = {
&hf_mysql_fld_not_null,
&hf_mysql_fld_primary_key,
&hf_mysql_fld_unique_key,
&hf_mysql_fld_multiple_key,
&hf_mysql_fld_blob,
&hf_mysql_fld_unsigned,
&hf_mysql_fld_zero_fill,
&hf_mysql_fld_enum,
&hf_mysql_fld_auto_increment,
&hf_mysql_fld_timestamp,
&hf_mysql_fld_set,
NULL
};
/* Helper function to only set state on first pass */
static void mysql_set_conn_state(packet_info *pinfo, mysql_conn_data_t *conn_data, mysql_state_t state)
{
if (!pinfo->fd->visited)
{
conn_data->state = state;
}
}
static guint64 mysql_get_remaining_field_packet_count(mysql_conn_data_t *conn_data)
{
return conn_data->remaining_field_packet_count;
}
static void mysql_dec_remaining_field_packet_count(mysql_conn_data_t *conn_data)
{
conn_data->remaining_field_packet_count--;
}
static void mysql_set_remaining_field_packet_count(mysql_conn_data_t *conn_data, guint64 num_fields)
{
conn_data->remaining_field_packet_count = num_fields;
}
static int
mysql_dissect_greeting(tvbuff_t *tvb, packet_info *pinfo, int offset,
proto_tree *tree, mysql_conn_data_t *conn_data)
{
gint protocol;
gint lenstr;
int ver_offset;
proto_item *tf;
proto_item *greeting_tree;
char buffer[7];
protocol= tvb_get_guint8(tvb, offset);
if (protocol == 0xff) {
return mysql_dissect_error_packet(tvb, pinfo, offset+1, tree);
}
mysql_set_conn_state(pinfo, conn_data, LOGIN);
tf = proto_tree_add_item(tree, hf_mysql_server_greeting, tvb, offset, -1, ENC_NA);
greeting_tree = proto_item_add_subtree(tf, ett_server_greeting);
col_append_fstr(pinfo->cinfo, COL_INFO, " proto=%d", protocol) ;
proto_tree_add_item(greeting_tree, hf_mysql_protocol, tvb, offset, 1, ENC_NA);
offset += 1;
/* version string */
lenstr = tvb_strsize(tvb,offset);
/* check if it is a MariaDB Server: MariaDB always sends 5.5.5- before real version number */
tvb_get_raw_bytes_as_string(tvb, offset, buffer, 7);
if (lenstr > 6 && strncmp(buffer, MARIADB_RPL_VERSION_HACK, sizeof(MARIADB_RPL_VERSION_HACK) - 1) == 0)
{
conn_data->is_mariadb_server= 1;
col_append_fstr(pinfo->cinfo, COL_INFO, " version=%s ",
tvb_format_text(pinfo->pool, tvb, offset + 6, lenstr - 7));
} else {
col_append_fstr(pinfo->cinfo, COL_INFO, " version=%s ",
tvb_format_text(pinfo->pool, tvb, offset, lenstr-1));
}
col_set_fence(pinfo->cinfo, COL_INFO);
proto_tree_add_item(greeting_tree, hf_mysql_version, tvb, offset, lenstr, ENC_ASCII);
conn_data->major_version = 0;
for (ver_offset = 0; ver_offset < lenstr; ver_offset++) {
guint8 ver_char = tvb_get_guint8(tvb, offset + ver_offset);
if (ver_char == '.') break;
conn_data->major_version = conn_data->major_version * 10 + ver_char - '0';
}
offset += lenstr;
/* 4 bytes little endian thread_id */
proto_tree_add_item(greeting_tree, hf_mysql_thread_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
/* salt string */
lenstr = tvb_strsize(tvb,offset);
proto_tree_add_item(greeting_tree, hf_mysql_salt, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
/* rest is optional */
if (!tvb_reported_length_remaining(tvb, offset)) return offset;
/* 2 bytes CAPS */
offset = mysql_dissect_caps(tvb, offset, greeting_tree, hf_mysql_caps_server, &conn_data->srv_caps);
/* MariaDB server don't have the CLIENT_MYSQL/CLIENT_LONG_PASSWORD capability */
if (!(conn_data->srv_caps & MYSQL_CAPS_LP))
{
conn_data->is_mariadb_server= 1;
}
/* rest is optional */
if (!tvb_reported_length_remaining(tvb, offset)) return offset;
proto_tree_add_item(greeting_tree, conn_data->is_mariadb_server ? hf_mariadb_server_language : hf_mysql_server_language, tvb, offset, 1, ENC_NA);
offset += 1; /* for charset */
offset = mysql_dissect_server_status(tvb, offset, greeting_tree, NULL);
/* 2 bytes ExtCAPS */
offset = mysql_dissect_extcaps(tvb, offset, greeting_tree, hf_mysql_extcaps_server, &conn_data->srv_caps_ext);
/* 1 byte Auth Plugin Length */
proto_tree_add_item(greeting_tree, hf_mysql_auth_plugin_length, tvb, offset, 1, ENC_NA);
offset += 1;
if (conn_data->is_mariadb_server)
{
/* 6 bytes unused */
proto_tree_add_item(greeting_tree, hf_mysql_unused, tvb, offset, 6, ENC_NA);
offset += 6;
/* MariaDB specific extended capabilities */
offset= mariadb_dissect_caps_or_flags(tvb, offset, FT_UINT32, greeting_tree,
hf_mariadb_extcaps_server, mariadb_extcaps_flags, &conn_data->mariadb_server_ext_caps);
} else {
/* 10 bytes unused */
proto_tree_add_item(greeting_tree, hf_mysql_unused, tvb, offset, 10, ENC_NA);
offset += 10;
}
/* 4.1+ server: rest of salt */
if (tvb_reported_length_remaining(tvb, offset)) {
lenstr = tvb_strsize(tvb,offset);
proto_tree_add_item(greeting_tree, hf_mysql_salt2, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
}
/* 5.x server: auth plugin */
if (tvb_reported_length_remaining(tvb, offset)) {
lenstr = tvb_strsize(tvb,offset);
proto_tree_add_item(greeting_tree, hf_mysql_auth_plugin, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
}
return offset;
}
/*
Add a connect attributes entry to the connattrs subtree
return bytes read
*/
static int
add_connattrs_entry_to_tree(tvbuff_t *tvb, packet_info *pinfo _U_, proto_item *tree, int offset) {
guint64 lenstr;
int orig_offset = offset, lenfle;
proto_item *ti;
proto_tree *connattrs_tree;
const guint8 *str;
ti = proto_tree_add_item(tree, hf_mysql_connattrs_attr, tvb, offset, 1, ENC_NA);
connattrs_tree = proto_item_add_subtree(ti, ett_connattrs_attr);
lenfle = tvb_get_fle(tvb, connattrs_tree, offset, &lenstr, NULL);
proto_tree_add_uint64(connattrs_tree, hf_mysql_connattrs_name_length, tvb, offset, lenfle, lenstr);
offset += lenfle;
proto_tree_add_item_ret_string(connattrs_tree, hf_mysql_connattrs_name, tvb, offset, (gint)lenstr, ENC_ASCII|ENC_NA, pinfo->pool, &str);
proto_item_append_text(ti, " - %s", str);
offset += (int)lenstr;
lenfle = tvb_get_fle(tvb, connattrs_tree, offset, &lenstr, NULL);
proto_tree_add_uint64(connattrs_tree, hf_mysql_connattrs_value_length, tvb, offset, lenfle, lenstr);
offset += lenfle;
proto_tree_add_item_ret_string(connattrs_tree, hf_mysql_connattrs_value, tvb, offset, (gint)lenstr, ENC_ASCII|ENC_NA, pinfo->pool, &str);
proto_item_append_text(ti, ": %s", str);
offset += (int)lenstr;
proto_item_set_len(ti, offset - orig_offset);
return (offset - orig_offset);
}
static int
mysql_dissect_login(tvbuff_t *tvb, packet_info *pinfo, int offset,
proto_tree *tree, mysql_conn_data_t *conn_data)
{
gint lenstr;
proto_item *tf;
proto_item *login_tree;
/* after login there can be OK or DENIED */
mysql_set_conn_state(pinfo, conn_data, RESPONSE_OK);
tf = proto_tree_add_item(tree, hf_mysql_login_request, tvb, offset, -1, ENC_NA);
login_tree = proto_item_add_subtree(tf, ett_login_request);
offset = mysql_dissect_caps(tvb, offset, login_tree, hf_mysql_caps_client, &conn_data->clnt_caps);
/* MariaDB clients don't have the CLIENT_MYSQL/CLIENT_LONG_PASSWORD capability */
if (!(conn_data->clnt_caps & MYSQL_CAPS_LP))
{
conn_data->is_mariadb_client= 1;
}
if (!(conn_data->frame_start_ssl) && conn_data->clnt_caps & MYSQL_CAPS_SL) /* Next packet will be use SSL */
{
col_set_str(pinfo->cinfo, COL_INFO, "Response: SSL Handshake");
conn_data->frame_start_ssl = pinfo->num;
ssl_starttls_ack(tls_handle, pinfo, mysql_handle);
}
if (conn_data->clnt_caps & MYSQL_CAPS_CU) /* 4.1 protocol */{
offset = mysql_dissect_extcaps(tvb, offset, login_tree, hf_mysql_extcaps_client, &conn_data->clnt_caps_ext);
proto_tree_add_item(login_tree, hf_mysql_max_packet, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
proto_tree_add_item(login_tree, conn_data->is_mariadb_server ? hf_mariadb_charset : hf_mysql_charset, tvb, offset, 1, ENC_NA);
offset += 1; /* for charset */
if (conn_data->is_mariadb_client){
/* 19 bytes unused */
proto_tree_add_item(login_tree, hf_mysql_unused, tvb, offset, 19, ENC_NA);
offset += 19;
offset= mariadb_dissect_caps_or_flags(tvb, offset, FT_UINT32, login_tree, hf_mariadb_extcaps_client, mariadb_extcaps_flags, &conn_data->mariadb_client_ext_caps);
} else {
/* 23 bytes unused */
proto_tree_add_item(login_tree, hf_mysql_unused, tvb, offset, 23, ENC_NA);
offset += 23;
}
} else { /* pre-4.1 */
proto_tree_add_item(login_tree, hf_mysql_max_packet, tvb, offset, 3, ENC_LITTLE_ENDIAN);
offset += 3;
}
/* User name */
lenstr = my_tvb_strsize(tvb, offset);
col_append_fstr(pinfo->cinfo, COL_INFO, " user=%s ",
tvb_format_text(pinfo->pool, tvb, offset, lenstr-1));
proto_tree_add_item(login_tree, hf_mysql_user, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
/* rest is optional */
if (!tvb_reported_length_remaining(tvb, offset)) {
col_set_fence(pinfo->cinfo, COL_INFO);
return offset;
}
/* password: asciiz or length+ascii */
if (conn_data->clnt_caps & MYSQL_CAPS_SC) {
lenstr = tvb_get_guint8(tvb, offset);
offset += 1;
} else {
lenstr = my_tvb_strsize(tvb, offset);
}
if (tree && lenstr > 1) {
proto_tree_add_item(login_tree, hf_mysql_passwd, tvb, offset, lenstr, ENC_NA);
}
offset += lenstr;
/* optional: initial schema */
if (conn_data->clnt_caps & MYSQL_CAPS_CD)
{
lenstr= my_tvb_strsize(tvb,offset);
if(lenstr<0){
return offset;
}
col_append_fstr(pinfo->cinfo, COL_INFO, "db=%s ",
tvb_format_text(pinfo->pool, tvb, offset, lenstr-1));
col_set_fence(pinfo->cinfo, COL_INFO);
proto_tree_add_item(login_tree, hf_mysql_schema, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
}
/* optional: authentication plugin */
if (conn_data->clnt_caps_ext & MYSQL_CAPS_PA)
{
mysql_set_conn_state(pinfo, conn_data, AUTH_SWITCH_REQUEST);
lenstr= my_tvb_strsize(tvb,offset);
proto_tree_add_item(login_tree, hf_mysql_client_auth_plugin, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
}
/* optional: connection attributes */
if (conn_data->clnt_caps_ext & MYSQL_CAPS_CA && tvb_reported_length_remaining(tvb, offset))
{
proto_tree *connattrs_tree;
int lenfle;
guint64 connattrs_length;
int length;
lenfle = tvb_get_fle(tvb, login_tree, offset, &connattrs_length, NULL);
tf = proto_tree_add_item(login_tree, hf_mysql_connattrs, tvb, offset, (guint32)connattrs_length, ENC_NA);
connattrs_tree = proto_item_add_subtree(tf, ett_connattrs);
proto_tree_add_uint64(connattrs_tree, hf_mysql_connattrs_length, tvb, offset, lenfle, connattrs_length);
offset += lenfle;
while (connattrs_length > 0) {
length = add_connattrs_entry_to_tree(tvb, pinfo, connattrs_tree, offset);
offset += length;
connattrs_length -= length;
}
}
return offset;
}
static void
mysql_dissect_exec_string(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
guint32 param_len32;
guint8 param_len;
param_len = tvb_get_guint8(tvb, *param_offset);
switch (param_len) {
case 0xfc: /* 252 - 64k chars */
*param_offset += 1;
param_len32 = tvb_get_letohs(tvb, *param_offset);
proto_tree_add_item(field_tree, hf_mysql_exec_field_string,
tvb, *param_offset, 2, ENC_ASCII | ENC_LITTLE_ENDIAN);
*param_offset += param_len32 + 2;
break;
case 0xfd: /* 64k - 16M chars */
*param_offset += 1;
param_len32 = tvb_get_letoh24(tvb, *param_offset);
proto_tree_add_item(field_tree, hf_mysql_exec_field_string,
tvb, *param_offset, 3, ENC_ASCII | ENC_LITTLE_ENDIAN);
*param_offset += param_len32 + 3;
break;
default: /* < 252 chars */
proto_tree_add_item(field_tree, hf_mysql_exec_field_string,
tvb, *param_offset, 1, ENC_ASCII | ENC_NA);
*param_offset += param_len + 1;
break;
}
}
static void
mysql_dissect_exec_time(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
guint8 param_len;
param_len = tvb_get_guint8(tvb, *param_offset);
proto_tree_add_item(field_tree, hf_mysql_exec_field_time_length, tvb, *param_offset, 1, ENC_NA);
*param_offset += 1;
if (param_len >= 1) {
proto_tree_add_item(field_tree, hf_mysql_exec_field_time_sign, tvb, *param_offset, 1, ENC_NA);
}
if (param_len >= 5) {
proto_tree_add_item(field_tree, hf_mysql_exec_field_time_days, tvb, *param_offset + 1, 4, ENC_LITTLE_ENDIAN);
}
if (param_len >= 8) {
proto_tree_add_item(field_tree, hf_mysql_exec_field_hour, tvb, *param_offset + 5, 1, ENC_NA);
proto_tree_add_item(field_tree, hf_mysql_exec_field_minute, tvb, *param_offset + 6, 1, ENC_NA);
proto_tree_add_item(field_tree, hf_mysql_exec_field_second, tvb, *param_offset + 7, 1, ENC_NA);
}
if (param_len >= 12) {
proto_tree_add_item(field_tree, hf_mysql_exec_field_second_b, tvb, *param_offset + 8, 4, ENC_LITTLE_ENDIAN);
}
*param_offset += param_len;
}
static void
mysql_dissect_exec_datetime(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
guint8 param_len;
param_len = tvb_get_guint8(tvb, *param_offset);
proto_tree_add_item(field_tree, hf_mysql_exec_field_datetime_length, tvb, *param_offset, 1, ENC_NA);
*param_offset += 1;
if (param_len >= 2) {
proto_tree_add_item(field_tree, hf_mysql_exec_field_year, tvb, *param_offset, 2, ENC_LITTLE_ENDIAN);
}
if (param_len >= 4) {
proto_tree_add_item(field_tree, hf_mysql_exec_field_month, tvb, *param_offset + 2, 1, ENC_NA);
proto_tree_add_item(field_tree, hf_mysql_exec_field_day, tvb, *param_offset + 3, 1, ENC_NA);
}
if (param_len >= 7) {
proto_tree_add_item(field_tree, hf_mysql_exec_field_hour, tvb, *param_offset + 4, 1, ENC_NA);
proto_tree_add_item(field_tree, hf_mysql_exec_field_minute, tvb, *param_offset + 5, 1, ENC_NA);
proto_tree_add_item(field_tree, hf_mysql_exec_field_second, tvb, *param_offset + 6, 1, ENC_NA);
}
if (param_len >= 11) {
proto_tree_add_item(field_tree, hf_mysql_exec_field_second_b, tvb, *param_offset + 7, 4, ENC_LITTLE_ENDIAN);
}
*param_offset += param_len;
}
static void
mysql_dissect_exec_primitive(tvbuff_t *tvb, int *param_offset, proto_item *field_tree, const int hfindex, const int offset)
{
proto_tree_add_item(field_tree, hfindex, tvb, *param_offset, offset, ENC_LITTLE_ENDIAN);
*param_offset += offset;
}
static void
mysql_dissect_exec_tiny(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
mysql_dissect_exec_primitive(tvb, param_offset, field_tree, hf_mysql_exec_field_tiny, 1);
}
static void
mysql_dissect_exec_unsigned_tiny(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
mysql_dissect_exec_primitive(tvb, param_offset, field_tree, hf_mysql_exec_field_unsigned_tiny, 1);
}
static void
mysql_dissect_exec_short(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
mysql_dissect_exec_primitive(tvb, param_offset, field_tree, hf_mysql_exec_field_short, 2);
}
static void
mysql_dissect_exec_unsigned_short(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
mysql_dissect_exec_primitive(tvb, param_offset, field_tree, hf_mysql_exec_field_unsigned_short, 2);
}
static void
mysql_dissect_exec_long(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
mysql_dissect_exec_primitive(tvb, param_offset, field_tree, hf_mysql_exec_field_long, 4);
}
static void
mysql_dissect_exec_unsigned_long(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
mysql_dissect_exec_primitive(tvb, param_offset, field_tree, hf_mysql_exec_field_unsigned_long, 4);
}
static void
mysql_dissect_exec_float(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
mysql_dissect_exec_primitive(tvb, param_offset, field_tree, hf_mysql_exec_field_float, 4);
}
static void
mysql_dissect_exec_double(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
mysql_dissect_exec_primitive(tvb, param_offset, field_tree, hf_mysql_exec_field_double, 8);
}
static void
mysql_dissect_exec_longlong(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
mysql_dissect_exec_primitive(tvb, param_offset, field_tree, hf_mysql_exec_field_longlong, 8);
}
static void
mysql_dissect_exec_unsigned_longlong(tvbuff_t *tvb, int *param_offset, proto_item *field_tree)
{
mysql_dissect_exec_primitive(tvb, param_offset, field_tree, hf_mysql_exec_field_unsigned_longlong, 8);
}
static void
mysql_dissect_exec_null(tvbuff_t *tvb _U_, int *param_offset _U_, proto_item *field_tree _U_)
{}
static char
mysql_dissect_exec_param(proto_item *req_tree, tvbuff_t *tvb, int *offset,
int *param_offset, guint8 param_flags,
packet_info *pinfo)
{
guint8 param_type, param_unsigned;
proto_item *tf;
proto_item *field_tree;
int dissector_index = 0;
tf = proto_tree_add_item(req_tree, hf_mysql_exec_param, tvb, *offset, 2, ENC_NA);
field_tree = proto_item_add_subtree(tf, ett_stat);
proto_tree_add_item(field_tree, hf_mysql_fld_type, tvb, *offset, 1, ENC_NA);
param_type = tvb_get_guint8(tvb, *offset);
*offset += 1; /* type */
proto_tree_add_item(field_tree, hf_mysql_exec_unsigned, tvb, *offset, 1, ENC_NA);
param_unsigned = tvb_get_guint8(tvb, *offset);
*offset += 1; /* signedness */
if ((param_flags & MYSQL_PARAM_FLAG_STREAMED) == MYSQL_PARAM_FLAG_STREAMED) {
expert_add_info(pinfo, field_tree, &ei_mysql_streamed_param);
return 1;
}
while (mysql_exec_dissectors[dissector_index].dissector != NULL) {
if (mysql_exec_dissectors[dissector_index].type == param_type &&
mysql_exec_dissectors[dissector_index].unsigned_flag == param_unsigned) {
mysql_exec_dissectors[dissector_index].dissector(tvb, param_offset, field_tree);
return 1;
}
dissector_index++;
}
return 0;
}
static int
mysql_dissect_request(tvbuff_t *tvb,packet_info *pinfo, int offset, proto_tree *tree, mysql_conn_data_t *conn_data, mysql_state_t current_state)
{
gint opcode;
gint lenstr;
proto_item *request_item, *tf = NULL, *ti;
proto_item *req_tree;
guint32 stmt_id;
my_stmt_data_t *stmt_data;
int stmt_pos, param_offset;
if(current_state == AUTH_SWITCH_RESPONSE){
return mysql_dissect_auth_switch_response(tvb, pinfo, offset, tree, conn_data);
}
request_item = proto_tree_add_item(tree, hf_mysql_request, tvb, offset, -1, ENC_NA);
req_tree = proto_item_add_subtree(request_item, ett_request);
opcode = tvb_get_guint8(tvb, offset);
col_append_fstr(pinfo->cinfo, COL_INFO, " %s", val_to_str_ext(opcode, &mysql_command_vals_ext, "Unknown (%u) "));
proto_tree_add_item(req_tree, hf_mysql_command, tvb, offset, 1, ENC_NA);
proto_item_append_text(request_item, " %s", val_to_str_ext(opcode, &mysql_command_vals_ext, "Unknown (%u)"));
offset += 1;
switch (opcode) {
case MYSQL_QUIT:
break;
case MYSQL_PROCESS_INFO:
mysql_set_conn_state(pinfo, conn_data, RESPONSE_TABULAR);
break;
case MYSQL_DEBUG:
case MYSQL_PING:
mysql_set_conn_state(pinfo, conn_data, RESPONSE_OK);
break;
case MYSQL_STATISTICS:
mysql_set_conn_state(pinfo, conn_data, RESPONSE_MESSAGE);
break;
case MYSQL_INIT_DB:
case MYSQL_CREATE_DB:
case MYSQL_DROP_DB:
lenstr = my_tvb_strsize(tvb, offset);
proto_tree_add_item(req_tree, hf_mysql_schema, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
mysql_set_conn_state(pinfo, conn_data, RESPONSE_OK);
break;
case MYSQL_QUERY:
if (conn_data->clnt_caps_ext & MYSQL_CAPS_QA) {
proto_item *query_attrs_item = proto_tree_add_item(req_tree, hf_mysql_query_attributes, tvb, offset, -1, ENC_NA);
proto_item *query_attrs_tree = proto_item_add_subtree(query_attrs_item, ett_query_attributes);
gint n_params = tvb_get_guint8(tvb, offset);
proto_tree_add_item(query_attrs_tree, hf_mysql_query_attributes_count, tvb, offset, 1, ENC_ASCII);
offset += 2;
if (n_params > 0) {
gint null_count = (n_params + 7) / 8;
proto_tree_add_item(query_attrs_tree, hf_mysql_unused, tvb, offset, null_count, ENC_ASCII);
offset += null_count;
proto_tree_add_item(query_attrs_tree, hf_mysql_query_attributes_send_types_to_server, tvb, offset, 1, ENC_ASCII);
offset += 1;
for (int i = 0; i < n_params; ++i) {
proto_tree_add_item(query_attrs_tree, hf_mysql_query_attribute_name_type, tvb, offset, 2, ENC_ASCII);
offset += 2;
offset = mysql_field_add_lestring(tvb, offset, query_attrs_tree, hf_mysql_query_attribute_name);
}
for (int i = 0; i < n_params; ++i) {
offset = mysql_field_add_lestring(tvb, offset, query_attrs_tree, hf_mysql_query_attribute_value);
}
}
}
lenstr = my_tvb_strsize(tvb, offset);
proto_tree_add_item(req_tree, hf_mysql_query, tvb, offset, lenstr, ENC_ASCII);
if (mysql_showquery) {
col_append_fstr(pinfo->cinfo, COL_INFO, " { %s } ",
tvb_format_text(pinfo->pool, tvb, offset, lenstr));
col_set_fence(pinfo->cinfo, COL_INFO);
}
offset += lenstr;
mysql_set_conn_state(pinfo, conn_data, RESPONSE_TABULAR);
break;
case MYSQL_STMT_PREPARE:
lenstr = my_tvb_strsize(tvb, offset);
proto_tree_add_item(req_tree, hf_mysql_query, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
mysql_set_conn_state(pinfo, conn_data, RESPONSE_PREPARE);
break;
case MYSQL_STMT_CLOSE:
proto_tree_add_item(req_tree, hf_mysql_stmt_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
mysql_set_conn_state(pinfo, conn_data, REQUEST);
break;
case MYSQL_STMT_RESET:
proto_tree_add_item(req_tree, hf_mysql_stmt_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
mysql_set_conn_state(pinfo, conn_data, RESPONSE_OK);
break;
case MYSQL_FIELD_LIST:
lenstr = my_tvb_strsize(tvb, offset);
proto_tree_add_item(req_tree, hf_mysql_table_name, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
mysql_set_conn_state(pinfo, conn_data, RESPONSE_SHOW_FIELDS);
break;
case MYSQL_PROCESS_KILL:
proto_tree_add_item(req_tree, hf_mysql_thread_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
mysql_set_conn_state(pinfo, conn_data, RESPONSE_OK);
break;
case MYSQL_CHANGE_USER:
lenstr = tvb_strsize(tvb, offset);
proto_tree_add_item(req_tree, hf_mysql_user, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
if (conn_data->clnt_caps & MYSQL_CAPS_SC) {
lenstr = tvb_get_guint8(tvb, offset);
offset += 1;
} else {
lenstr = tvb_strsize(tvb, offset);
}
proto_tree_add_item(req_tree, hf_mysql_passwd, tvb, offset, lenstr, ENC_NA);
offset += lenstr;
lenstr = my_tvb_strsize(tvb, offset);
proto_tree_add_item(req_tree, hf_mysql_schema, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
if (tvb_reported_length_remaining(tvb, offset) > 0) {
proto_tree_add_item(req_tree, conn_data->is_mariadb_server ? hf_mariadb_charset : hf_mysql_charset, tvb, offset, 1, ENC_NA);
offset += 2; /* for charset */
}
mysql_set_conn_state(pinfo, conn_data, RESPONSE_OK);
/* optional: authentication plugin */
if (conn_data->clnt_caps_ext & MYSQL_CAPS_PA)
{
mysql_set_conn_state(pinfo, conn_data, AUTH_SWITCH_REQUEST);
lenstr= my_tvb_strsize(tvb,offset);
proto_tree_add_item(req_tree, hf_mysql_client_auth_plugin, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
}
/* optional: connection attributes */
if (conn_data->clnt_caps_ext & MYSQL_CAPS_CA)
{
proto_tree *connattrs_tree;
int lenfle;
guint64 connattrs_length;
int length;
lenfle = tvb_get_fle(tvb, req_tree, offset, &connattrs_length, NULL);
tf = proto_tree_add_item(req_tree, hf_mysql_connattrs, tvb, offset, (guint32)connattrs_length, ENC_NA);
connattrs_tree = proto_item_add_subtree(tf, ett_connattrs);
proto_tree_add_uint64(connattrs_tree, hf_mysql_connattrs_length, tvb, offset, lenfle, connattrs_length);
offset += lenfle;
while (connattrs_length > 0) {
length = add_connattrs_entry_to_tree(tvb, pinfo, connattrs_tree, offset);
offset += length;
connattrs_length -= length;
}
}
break;
case MYSQL_REFRESH:
proto_tree_add_bitmask_with_flags(req_tree, tvb, offset,
hf_mysql_refresh, ett_refresh, mysql_rfsh_flags,
ENC_BIG_ENDIAN, BMT_NO_APPEND);
offset += 1;
mysql_set_conn_state(pinfo, conn_data, RESPONSE_OK);
break;
case MYSQL_SHUTDOWN:
proto_tree_add_item(req_tree, hf_mysql_shutdown, tvb, offset, 1, ENC_NA);
offset += 1;
mysql_set_conn_state(pinfo, conn_data, RESPONSE_OK);
break;
case MYSQL_SET_OPTION:
proto_tree_add_item(req_tree, hf_mysql_option, tvb, offset, 2, ENC_LITTLE_ENDIAN);
offset += 2;
mysql_set_conn_state(pinfo, conn_data, RESPONSE_OK);
break;
case MYSQL_STMT_FETCH:
proto_tree_add_item(req_tree, hf_mysql_stmt_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
proto_tree_add_item(req_tree, hf_mysql_num_rows, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
mysql_set_conn_state(pinfo, conn_data, RESPONSE_TABULAR);
break;
case MYSQL_STMT_SEND_LONG_DATA:
proto_tree_add_item(req_tree, hf_mysql_stmt_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
stmt_id = tvb_get_letohl(tvb, offset);
offset += 4;
stmt_data = (my_stmt_data_t *)wmem_tree_lookup32(conn_data->stmts, stmt_id);
if (stmt_data != NULL) {
guint16 data_param = tvb_get_letohs(tvb, offset);
if (stmt_data->param_metas.count > data_param) {
stmt_data->param_metas.flags[data_param] |= MYSQL_PARAM_FLAG_STREAMED;
}
}
proto_tree_add_item(req_tree, hf_mysql_param, tvb, offset, 2, ENC_LITTLE_ENDIAN);
offset += 2;
/* rest is data */
lenstr = tvb_reported_length_remaining(tvb, offset);
if (tree && lenstr > 0) {
proto_tree_add_item(req_tree, hf_mysql_payload, tvb, offset, lenstr, ENC_NA);
}
offset += lenstr;
if (conn_data->state != RESPONSE_PREPARE) {
// if pipelinning, keeping PREPARE state
mysql_set_conn_state(pinfo, conn_data, REQUEST);
}
break;
case MARIADB_STMT_BULK_EXECUTE:
proto_tree_add_item(req_tree, hf_mysql_stmt_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
stmt_id = tvb_get_letohl(tvb, offset);
offset += 4;
// use last prepared statement
if (stmt_id == 0xffffffff) {
stmt_id = conn_data->stmt_id;
}
stmt_data = (my_stmt_data_t *)wmem_tree_lookup32(conn_data->stmts, stmt_id);
if (stmt_data != NULL) {
guint32 row_nr = 1;
proto_item *param_tree;
mariadb_dissect_caps_or_flags(tvb, offset, FT_UINT16, req_tree, hf_mariadb_bulk_caps_flags, mariadb_bulk_caps_flags, &stmt_data->bulk_flags);
offset += 2;
if ((stmt_data->bulk_flags & MARIADB_BULK_SEND_TYPES) && stmt_data->param_metas.count)
{
tf = proto_tree_add_item(req_tree, hf_mariadb_bulk_paramtypes, tvb, offset, -1, ENC_NA);
param_tree = proto_item_add_subtree(tf, ett_exec_param);
for (stmt_pos = 0; stmt_pos < stmt_data->param_metas.count; stmt_pos++) {
stmt_data->param_metas.types[stmt_pos] = tvb_get_guint8(tvb, offset);
proto_tree_add_item(param_tree, hf_mysql_fld_type, tvb, offset, 1, ENC_NA);
offset+= 1;
stmt_data->param_metas.flags[stmt_pos] = tvb_get_guint8(tvb, offset);
proto_tree_add_item(param_tree, hf_mysql_exec_unsigned, tvb, offset, 1, ENC_NA);
offset+= 1;
}
}
while (tvb_reported_length_remaining(tvb, offset) > 0){
tf = proto_tree_add_uint_format(req_tree, hf_mariadb_bulk_row_nr, tvb, offset, 0, row_nr, "%d. Dataset", row_nr);
proto_item_set_generated(tf);
param_tree = proto_item_add_subtree(tf, ett_bulk_param);
for (stmt_pos = 0; stmt_pos < stmt_data->param_metas.count; stmt_pos++)
{
guint8 indicator= tvb_get_guint8(tvb, offset);
proto_tree_add_item(param_tree, hf_mariadb_bulk_indicator, tvb, offset, 1, ENC_NA);
offset++;
/* If no indicator was specified, data will follow */
if (!indicator) {
int dissector_index= 0;
while (mysql_exec_dissectors[dissector_index].dissector != NULL) {
if (mysql_exec_dissectors[dissector_index].type == stmt_data->param_metas.types[stmt_pos])
/* &&
mysql_exec_dissectors[dissector_index].unsigned_flag == stmt_data->param_flags[stmt_pos]) */
{
mysql_exec_dissectors[dissector_index].dissector(tvb, &offset, param_tree);
break;
}
dissector_index++;
}
}
}
row_nr++;
}
}
if (conn_data->state != RESPONSE_PREPARE) {
// if pipelinning, keeping PREPARE state
mysql_set_conn_state(pinfo, conn_data, REQUEST);
}
break;
case MYSQL_STMT_EXECUTE:
proto_tree_add_item(req_tree, hf_mysql_stmt_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
stmt_id = tvb_get_letohl(tvb, offset);
offset += 4;
if (conn_data->major_version >= 5) {
proto_tree_add_item(req_tree, hf_mysql_exec_flags5, tvb, offset, 1, ENC_NA);
} else {
proto_tree_add_item(req_tree, hf_mysql_exec_flags4, tvb, offset, 1, ENC_NA);
}
offset += 1;
proto_tree_add_item(req_tree, hf_mysql_exec_iter, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
// use last prepared statement
if (stmt_id == 0xffffffff) {
stmt_id = conn_data->stmt_id;
}
stmt_data = (my_stmt_data_t *)wmem_tree_lookup32(conn_data->stmts, stmt_id);
if (stmt_data != NULL) {
if (stmt_data->param_metas.count != 0) {
guint8 stmt_bound;
offset += (stmt_data->param_metas.count + 7) / 8; /* NULL bitmap */
proto_tree_add_item(req_tree, hf_mysql_new_parameter_bound_flag, tvb, offset, 1, ENC_NA);
stmt_bound = tvb_get_guint8(tvb, offset);
offset += 1;
if (stmt_bound == 1) {
param_offset = offset + stmt_data->param_metas.count * 2;
guint8 flags;
for (stmt_pos = 0; stmt_pos < stmt_data->param_metas.count; stmt_pos++) {
flags = (guint8)stmt_data->param_metas.flags[stmt_pos];
if (!mysql_dissect_exec_param(req_tree, tvb, &offset, &param_offset,
flags, pinfo))
break;
}
offset = param_offset;
}
}
} else {
lenstr = tvb_reported_length_remaining(tvb, offset);
if (tree && lenstr > 0) {
ti = proto_tree_add_item(req_tree, hf_mysql_payload, tvb, offset, lenstr, ENC_NA);
expert_add_info(pinfo, ti, &ei_mysql_prepare_response_needed);
}
offset += lenstr;
}
if (conn_data->state != RESPONSE_PREPARE) {
// if pipelinning, keeping PREPARE state
mysql_set_conn_state(pinfo, conn_data, RESPONSE_TABULAR);
}
break;
case MYSQL_BINLOG_DUMP_GTID:
case MYSQL_BINLOG_DUMP:
proto_tree_add_item(req_tree, hf_mysql_binlog_position, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
proto_tree_add_item(req_tree, hf_mysql_binlog_flags, tvb, offset, 2, ENC_BIG_ENDIAN);
offset += 2;
proto_tree_add_item(req_tree, hf_mysql_binlog_server_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
/* binlog file name ? */
lenstr = tvb_reported_length_remaining(tvb, offset);
if (tree && lenstr > 0) {
proto_tree_add_item(req_tree, hf_mysql_binlog_file_name, tvb, offset, lenstr, ENC_ASCII);
}
offset += lenstr;
mysql_set_conn_state(pinfo, conn_data, BINLOG_DUMP);
break;
case MYSQL_REGISTER_SLAVE:
proto_tree_add_item(req_tree, hf_mysql_binlog_server_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
lenstr = tvb_get_guint8(tvb, offset);
proto_tree_add_item(req_tree, hf_mysql_binlog_slave_hostname_length, tvb, offset, 1, ENC_LITTLE_ENDIAN);
offset += 1;
proto_tree_add_item(req_tree, hf_mysql_binlog_slave_hostname, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
lenstr = tvb_get_guint8(tvb, offset);
proto_tree_add_item(req_tree, hf_mysql_binlog_slave_user_length, tvb, offset, 1, ENC_LITTLE_ENDIAN);
offset += 1;
proto_tree_add_item(req_tree, hf_mysql_binlog_slave_user, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
lenstr = tvb_get_guint8(tvb, offset);
proto_tree_add_item(req_tree, hf_mysql_binlog_slave_password_length, tvb, offset, 1, ENC_LITTLE_ENDIAN);
offset += 1;
proto_tree_add_item(req_tree, hf_mysql_binlog_slave_password, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
proto_tree_add_item(req_tree, hf_mysql_binlog_slave_mysql_port, tvb, offset, 2, ENC_LITTLE_ENDIAN);
offset += 2;
proto_tree_add_item(req_tree, hf_mysql_binlog_replication_rank, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
proto_tree_add_item(req_tree, hf_mysql_binlog_master_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
mysql_set_conn_state(pinfo, conn_data, REQUEST);
break;
/* FIXME: implement replication packets */
case MYSQL_TABLE_DUMP:
case MYSQL_CONNECT_OUT:
ti = proto_tree_add_item(req_tree, hf_mysql_payload, tvb, offset, -1, ENC_NA);
expert_add_info_format(pinfo, ti, &ei_mysql_dissector_incomplete, "FIXME: implement replication packets");
offset += tvb_reported_length_remaining(tvb, offset);
mysql_set_conn_state(pinfo, conn_data, REQUEST);
break;
default:
ti = proto_tree_add_item(req_tree, hf_mysql_payload, tvb, offset, -1, ENC_NA);
expert_add_info(pinfo, ti, &ei_mysql_command);
offset += tvb_reported_length_remaining(tvb, offset);
mysql_set_conn_state(pinfo, conn_data, UNDEFINED);
}
proto_item_set_end(request_item, tvb, offset);
return offset;
}
/*
* Decode the header of a compressed packet
* https://dev.mysql.com/doc/internals/en/compressed-packet-header.html
*/
static int
mysql_dissect_compressed_header(tvbuff_t *tvb, int offset, proto_tree *mysql_tree)
{
proto_tree_add_item(mysql_tree, hf_mysql_compressed_packet_length, tvb, offset, 3, ENC_LITTLE_ENDIAN);
offset += 3;
proto_tree_add_item(mysql_tree, hf_mysql_compressed_packet_number, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(mysql_tree, hf_mysql_compressed_packet_length_uncompressed, tvb, offset, 3, ENC_LITTLE_ENDIAN);
offset += 3;
return offset;
}
static int
mysql_dissect_response(tvbuff_t *tvb, packet_info *pinfo, int offset,
proto_tree *tree, mysql_conn_data_t *conn_data, proto_item *pi, mysql_state_t current_state)
{
gint response_code;
gint lenstr;
proto_item *ti;
response_code = tvb_get_guint8(tvb, offset);
switch (response_code) {
case 0xff:
proto_tree_add_item(tree, hf_mysql_response_code, tvb, offset, 1, ENC_NA);
proto_item_append_text(pi, " - %s", val_to_str(RESPONSE_ERROR, state_vals, "Unknown (%u)"));
offset = mysql_dissect_error_packet(tvb, pinfo, offset+1, tree);
mysql_set_conn_state(pinfo, conn_data, REQUEST);
break;
case 0xfe:
proto_tree_add_item(tree, hf_mysql_response_code, tvb, offset, 1, ENC_NA);
proto_tree_add_item(tree, hf_mysql_eof, tvb, offset, 1, ENC_NA);
offset += 1;
if (tvb_reported_length_remaining(tvb, offset) <= 5) {
// real EOF packet
offset = mysql_dissect_eof(tvb, pinfo, pi, offset, tree, conn_data);
if (current_state == PREPARED_PARAMETERS) {
if (conn_data->stmt_num_fields > 0) {
proto_item_append_text(pi, " - %s", val_to_str(INTERMEDIATE_EOF, state_vals, "Unknown (%u)"));
mysql_set_remaining_field_packet_count(conn_data, conn_data->stmt_num_fields);
mysql_set_conn_state(pinfo, conn_data, PREPARED_FIELDS);
} else {
proto_item_append_text(pi, " - %s", val_to_str(RESPONSE_EOF, state_vals, "Unknown (%u)"));
mysql_set_conn_state(pinfo, conn_data, REQUEST);
}
} else if (current_state == FIELD_PACKET) {
// intermediate EOF packet
proto_item_append_text(pi, " - %s", val_to_str(INTERMEDIATE_EOF, state_vals, "Unknown (%u)"));
mysql_set_conn_state(pinfo, conn_data, ROW_PACKET);
} else {
// ending EOF packet
proto_item_append_text(pi, " - %s", val_to_str(RESPONSE_EOF, state_vals, "Unknown (%u)"));
mysql_set_conn_state(pinfo, conn_data, REQUEST);
}
} else if (tvb_reported_length_remaining(tvb, offset) < 0xffffff) {
// not an EOF
if (current_state == AUTH_SWITCH_REQUEST) {
proto_item_append_text(pi, " - %s", val_to_str(AUTH_SWITCH_REQUEST, state_vals, "Unknown (%u)"));
offset = mysql_dissect_auth_switch_request(tvb, pinfo, offset, tree, conn_data);
} else {
proto_item_append_text(pi, " - %s", val_to_str(RESPONSE_OK, state_vals, "Unknown (%u)"));
offset = mysql_dissect_ok_packet(tvb, pinfo, offset, tree, conn_data);
}
mysql_set_conn_state(pinfo, conn_data, REQUEST);
} else {
// text row packet
proto_item_append_text(pi, " - %s", val_to_str(ROW_PACKET, state_vals, "Unknown (%u)"));
mysql_set_conn_state(pinfo, conn_data, ROW_PACKET);
offset = mysql_dissect_text_row_packet(tvb, offset, tree);
}
break;
case 0x00:
proto_tree_add_item(tree, hf_mysql_response_code, tvb, offset, 1, ENC_NA);
offset+=1;
switch (current_state) {
case RESPONSE_PREPARE:
proto_item_append_text(pi, " - %s", val_to_str(RESPONSE_PREPARE, state_vals, "Unknown (%u)"));
offset = mysql_dissect_response_prepare(tvb, pinfo, offset, tree, conn_data);
break;
case ROW_PACKET:
proto_item_append_text(pi, " - %s", val_to_str(ROW_PACKET, state_vals, "Unknown (%u)"));
offset = mysql_dissect_binary_row_packet(tvb, pinfo, pi, offset, tree, conn_data);
break;
case BINLOG_DUMP:
proto_item_append_text(pi, " - %s", val_to_str(BINLOG_DUMP, state_vals, "Unknown (%u)"));
offset = mysql_dissect_binlog_event_packet(tvb, pinfo, offset, tree);
break;
default:
proto_item_append_text(pi, " - %s", val_to_str(RESPONSE_OK, state_vals, "Unknown (%u)"));
offset = mysql_dissect_ok_packet(tvb, pinfo, offset, tree, conn_data);
if (conn_data->compressed_state == MYSQL_COMPRESS_INIT) {
/* This is the OK packet which follows the compressed protocol setup */
conn_data->compressed_state = MYSQL_COMPRESS_ACTIVE;
}
break;
}
break;
default:
switch (current_state) {
case RESPONSE_MESSAGE:
if ((lenstr = tvb_reported_length_remaining(tvb, offset))) {
proto_tree_add_item(tree, hf_mysql_message, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
}
mysql_set_conn_state(pinfo, conn_data, REQUEST);
break;
case RESPONSE_TABULAR:
case REQUEST: /* That shouldn't be the case; maybe two requests in a row (s. bug 15074) */
proto_item_append_text(pi, " - %s", val_to_str(COLUMN_COUNT, state_vals, "Unknown (%u)"));
offset = mysql_dissect_result_header(tvb, pinfo, offset, tree, conn_data);
break;
case PREPARED_PARAMETERS:
proto_item_append_text(pi, " - %s", val_to_str(current_state, state_vals, "Unknown (%u)"));
offset = mysql_dissect_field_packet(tvb, pi, offset, tree, pinfo, conn_data, current_state);
mysql_dec_remaining_field_packet_count(conn_data);
if (mysql_get_remaining_field_packet_count(conn_data) == 0) {
if (conn_data->clnt_caps_ext & MYSQL_CAPS_DE) {
if (conn_data->stmt_num_fields > 0) {
mysql_set_remaining_field_packet_count(conn_data, conn_data->stmt_num_fields);
mysql_set_conn_state(pinfo, conn_data, PREPARED_FIELDS);
} else {
mysql_set_conn_state(pinfo, conn_data, REQUEST);
}
}
}
break;
case FIELD_PACKET:
case RESPONSE_SHOW_FIELDS:
proto_item_append_text(pi, " - %s", val_to_str(current_state, state_vals, "Unknown (%u)"));
offset = mysql_dissect_field_packet(tvb, pi, offset, tree, pinfo, conn_data, current_state);
mysql_dec_remaining_field_packet_count(conn_data);
if ((conn_data->clnt_caps_ext & MYSQL_CAPS_DE) && (mysql_get_remaining_field_packet_count(conn_data) == 0)) {
mysql_set_conn_state(pinfo, conn_data, ROW_PACKET);
}
break;
case ROW_PACKET:
proto_item_append_text(pi, " - %s", val_to_str(current_state, state_vals, "Unknown (%u)"));
offset = mysql_dissect_text_row_packet(tvb, offset, tree);
break;
case PREPARED_FIELDS:
proto_item_append_text(pi, " - %s", val_to_str(current_state, state_vals, "Unknown (%u)"));
offset = mysql_dissect_field_packet(tvb, pi, offset, tree, pinfo, conn_data, current_state);
mysql_dec_remaining_field_packet_count(conn_data);
if ((conn_data->clnt_caps_ext & MYSQL_CAPS_DE) && (mysql_get_remaining_field_packet_count(conn_data) == 0)) {
mysql_set_conn_state(pinfo, conn_data, REQUEST);
}
break;
case AUTH_SWITCH_REQUEST:
proto_item_append_text(pi, " - %s", val_to_str(AUTH_SWITCH_REQUEST, state_vals, "Unknown (%u)"));
offset = mysql_dissect_auth_switch_request(tvb, pinfo, offset, tree, conn_data);
break;
default:
ti = proto_tree_add_item(tree, hf_mysql_payload, tvb, offset, -1, ENC_NA);
expert_add_info(pinfo, ti, &ei_mysql_unknown_response);
offset += tvb_reported_length_remaining(tvb, offset);
mysql_set_conn_state(pinfo, conn_data, UNDEFINED);
}
}
return offset;
}
static int
mysql_dissect_error_packet(tvbuff_t *tvb, packet_info *pinfo,
int offset, proto_tree *tree)
{
col_append_fstr(pinfo->cinfo, COL_INFO, " Error %d ", tvb_get_letohs(tvb, offset));
col_set_fence(pinfo->cinfo, COL_INFO);
proto_tree_add_item(tree, hf_mysql_error_code, tvb, offset, 2, ENC_LITTLE_ENDIAN);
offset += 2;
if (tvb_get_guint8(tvb, offset) == '#')
{
offset += 1;
proto_tree_add_item(tree, hf_mysql_sqlstate, tvb, offset, 5, ENC_ASCII);
offset += 5;
}
proto_tree_add_item(tree, hf_mysql_error_string, tvb, offset, -1, ENC_ASCII);
offset += tvb_reported_length_remaining(tvb, offset);
return offset;
}
/*
Add a session track entry to the session tracking subtree
return bytes read
*/
static int
add_session_tracker_entry_to_tree(tvbuff_t *tvb, packet_info *pinfo, proto_item *tree, int offset) {
guint8 data_type; /* session tracker type */
guint64 length; /* complete length of session tracking entry */
guint64 lenstr;
int orig_offset = offset, lenfle;
proto_item *item, *ti;
proto_tree *session_track_tree;
ti = proto_tree_add_item(tree, hf_mysql_session_track, tvb, offset, 1, ENC_NA);
session_track_tree = proto_item_add_subtree(ti, ett_session_track);
proto_tree_add_item(session_track_tree, hf_mysql_session_track_type, tvb, offset, 1, ENC_BIG_ENDIAN);
data_type = tvb_get_guint8(tvb, offset);
offset += 1;
lenfle = tvb_get_fle(tvb, session_track_tree, offset, &length, NULL);
proto_tree_add_uint64(session_track_tree, hf_mysql_session_track_length, tvb, offset, lenfle, length);
offset += lenfle;
switch (data_type) {
case 0: /* SESSION_SYSVARS_TRACKER */
lenfle = tvb_get_fle(tvb, session_track_tree, offset, &lenstr, NULL);
proto_tree_add_uint64(session_track_tree, hf_mysql_session_track_sysvar_length, tvb, offset, lenfle, lenstr);
offset += lenfle;
proto_tree_add_item(session_track_tree, hf_mysql_session_track_sysvar_name, tvb, offset, (gint)lenstr, ENC_ASCII);
offset += (int)lenstr;
lenfle = tvb_get_fle(tvb, session_track_tree, offset, &lenstr, NULL);
proto_tree_add_uint64(session_track_tree, hf_mysql_session_track_sysvar_length, tvb, offset, lenfle, lenstr);
offset += lenfle;
proto_tree_add_item(session_track_tree, hf_mysql_session_track_sysvar_value, tvb, offset, (gint)lenstr, ENC_ASCII);
offset += (int)lenstr;
break;
case 1: /* CURRENT_SCHEMA_TRACKER */
lenfle = tvb_get_fle(tvb, session_track_tree, offset, &lenstr, NULL);
proto_tree_add_uint64(session_track_tree, hf_mysql_session_track_schema_length, tvb, offset, lenfle, lenstr);
offset += lenfle;
proto_tree_add_item(session_track_tree, hf_mysql_session_track_schema, tvb, offset, (gint)lenstr, ENC_ASCII);
offset += (int)lenstr;
break;
case 2: /* SESSION_STATE_CHANGE_TRACKER */
proto_tree_add_item(session_track_tree, hf_mysql_session_state_change, tvb, offset, 1, ENC_ASCII);
offset++;
break;
case 3: /* SESSION_TRACK_GTIDS */
proto_tree_add_item(session_track_tree, hf_mysql_session_track_gtids_encoding, tvb, offset, 1, ENC_NA);
offset++;
lenfle = tvb_get_fle(tvb, session_track_tree, offset, &lenstr, NULL);
proto_tree_add_uint64(session_track_tree, hf_mysql_session_track_gtids_length, tvb, offset, lenfle, lenstr);
offset += lenfle;
proto_tree_add_item(session_track_tree, hf_mysql_session_track_gtids, tvb, offset, (gint)lenstr, ENC_ASCII);
offset += (int)lenstr;
break;
case 4: /* SESSION_TRACK_TRANSACTION_CHARACTERISTICS */
lenfle = tvb_get_fle(tvb, session_track_tree, offset, &lenstr, NULL);
proto_tree_add_uint64(session_track_tree, hf_mysql_session_track_transaction_characteristics_length, tvb, offset, lenfle, lenstr);
offset += lenfle;
proto_tree_add_item(session_track_tree, hf_mysql_session_track_transaction_characteristics, tvb, offset, (gint)lenstr, ENC_ASCII);
offset += (int)lenstr;
break;
case 5: /* SESSION_TRACK_TRANSACTION_STATE */
lenfle = tvb_get_fle(tvb, session_track_tree, offset, &lenstr, NULL);
proto_tree_add_uint64(session_track_tree, hf_mysql_session_track_transaction_state_length, tvb, offset, lenfle, lenstr);
offset += lenfle;
proto_tree_add_item(session_track_tree, hf_mysql_session_track_transaction_state, tvb, offset, (gint)lenstr, ENC_ASCII);
offset += (int)lenstr;
break;
default: /* unsupported types skipped */
item = proto_tree_add_item(session_track_tree, hf_mysql_payload, tvb, offset, (gint)length, ENC_NA);
expert_add_info_format(pinfo, item, &ei_mysql_dissector_incomplete, "FIXME: unrecognized session tracker data");
offset += (int)length;
}
proto_item_set_len(ti, offset - orig_offset);
return (offset - orig_offset);
}
/*
Add a extended metadata entry to the extended meta subtree
return bytes read
*/
static int
add_extended_meta_entry_to_tree(tvbuff_t *tvb, packet_info *pinfo, proto_item *tree, int offset) {
guint8 data_type;
guint64 lenstr;
int orig_offset = offset, lenfle;
proto_item *item, *ti;
proto_tree *extmeta_tree;
ti = proto_tree_add_item(tree, hf_mariadb_extmeta, tvb, offset, 1, ENC_NA);
extmeta_tree = proto_item_add_subtree(ti, ett_extmeta);
proto_tree_add_item(extmeta_tree, hf_mariadb_extmeta_key, tvb, offset, 1, ENC_BIG_ENDIAN);
data_type = tvb_get_guint8(tvb, offset);
offset += 1;
lenfle = tvb_get_fle(tvb, extmeta_tree, offset, &lenstr, NULL);
proto_tree_add_uint64(extmeta_tree, hf_mariadb_extmeta_length, tvb, offset, lenfle, lenstr);
offset += lenfle;
switch (data_type) {
case 0: /* TYPE */
proto_tree_add_item(extmeta_tree, hf_mariadb_extmeta_type, tvb, offset, (gint)lenstr, ENC_ASCII);
offset += (int)lenstr;
break;
case 1: /* FORMAT */
proto_tree_add_item(extmeta_tree, hf_mariadb_extmeta_format, tvb, offset, (gint)lenstr, ENC_ASCII);
offset += (int)lenstr;
break;
default: /* unsupported types skipped */
item = proto_tree_add_item(extmeta_tree, hf_mysql_payload, tvb, offset, (gint)lenstr, ENC_NA);
expert_add_info_format(pinfo, item, &ei_mysql_dissector_incomplete, "FIXME: unrecognized extended metadata data");
offset += (int)lenstr;
}
proto_item_set_len(ti, offset - orig_offset);
return (offset - orig_offset);
}
static int
mysql_dissect_ok_packet(tvbuff_t *tvb, packet_info *pinfo, int offset,
proto_tree *tree, mysql_conn_data_t *conn_data)
{
guint64 lenstr = 0;
guint64 affected_rows;
guint64 insert_id;
int fle;
guint16 server_status = 0;
col_append_str(pinfo->cinfo, COL_INFO, " OK " );
col_set_fence(pinfo->cinfo, COL_INFO);
fle = tvb_get_fle(tvb, tree, offset, &affected_rows, NULL);
proto_tree_add_uint64(tree, hf_mysql_affected_rows, tvb, offset, fle, affected_rows);
offset += fle;
fle= tvb_get_fle(tvb, tree, offset, &insert_id, NULL);
if (tree && insert_id) {
proto_tree_add_uint64(tree, hf_mysql_insert_id, tvb, offset, fle, insert_id);
}
offset += fle;
if (tvb_reported_length_remaining(tvb, offset) > 0) {
offset = mysql_dissect_server_status(tvb, offset, tree, &server_status);
/* 4.1+ protocol only: 2 bytes number of warnings */
if (conn_data->clnt_caps & conn_data->srv_caps & MYSQL_CAPS_CU) {
proto_tree_add_item(tree, hf_mysql_num_warn, tvb, offset, 2, ENC_LITTLE_ENDIAN);
lenstr = tvb_get_ntohs(tvb, offset);
offset += 2;
}
}
if (conn_data->clnt_caps_ext & MYSQL_CAPS_ST) {
if (tvb_reported_length_remaining(tvb, offset) > 0) {
guint64 session_track_length;
proto_item *tf;
proto_item *session_track_tree = NULL;
int length;
offset += tvb_get_fle(tvb, tree, offset, &lenstr, NULL);
/* first read the optional message */
if (lenstr) {
proto_tree_add_item(tree, hf_mysql_message, tvb, offset, (gint)lenstr, ENC_ASCII);
offset += (int)lenstr;
}
/* session state tracking */
if (server_status & MYSQL_STAT_SESSION_STATE_CHANGED) {
fle = tvb_get_fle(tvb, tree, offset, &session_track_length, NULL);
tf = proto_tree_add_item(tree, hf_mysql_session_track_data, tvb, offset, -1, ENC_NA);
session_track_tree = proto_item_add_subtree(tf, ett_session_track_data);
proto_tree_add_uint64(tf, hf_mysql_session_track_data_length, tvb, offset, fle, session_track_length);
offset += fle;
while (session_track_length > 0) {
length = add_session_tracker_entry_to_tree(tvb, pinfo, session_track_tree, offset);
offset += length;
session_track_length -= length;
}
}
}
} else {
/* optional: message string */
if (tvb_reported_length_remaining(tvb, offset) > 0) {
if(lenstr > (guint64)tvb_reported_length_remaining(tvb, offset))
lenstr = tvb_reported_length_remaining(tvb, offset);
proto_tree_add_item(tree, hf_mysql_message, tvb, offset, (gint)lenstr, ENC_ASCII);
offset += (int)lenstr;
}
}
mysql_set_conn_state(pinfo, conn_data, REQUEST);
return offset;
}
static int
mysql_dissect_server_status(tvbuff_t *tvb, int offset, proto_tree *tree, guint16 *server_status)
{
if (server_status) {
*server_status = tvb_get_letohs(tvb, offset);
}
proto_tree_add_bitmask_with_flags(tree, tvb, offset, hf_mysql_server_status, ett_stat, mysql_stat_flags, ENC_LITTLE_ENDIAN, BMT_NO_APPEND);
offset += 2;
return offset;
}
static int
mysql_dissect_caps(tvbuff_t *tvb, int offset, proto_tree *tree, int mysql_caps, guint16 *caps)
{
*caps= tvb_get_letohs(tvb, offset);
proto_tree_add_bitmask_with_flags(tree, tvb, offset, mysql_caps, ett_caps, mysql_caps_flags, ENC_LITTLE_ENDIAN, BMT_NO_APPEND);
offset += 2;
return offset;
}
static int
mysql_dissect_extcaps(tvbuff_t *tvb, int offset, proto_tree *tree, int mysql_extcaps, guint16 *ext_caps)
{
*ext_caps= tvb_get_letohs(tvb, offset);
proto_tree_add_bitmask_with_flags(tree, tvb, offset, mysql_extcaps, ett_extcaps, mysql_extcaps_flags, ENC_LITTLE_ENDIAN, BMT_NO_APPEND);
offset += 2;
return offset;
}
static int mariadb_dissect_caps_or_flags(tvbuff_t *tvb, int offset, enum ftenum type, proto_tree *tree,
int mariadb_caps, int * const *fields, void *value)
{
guint8 diff= 0;
switch (type) {
case FT_UINT8:
*((guint8 *)value)= tvb_get_guint8(tvb, offset);
diff= 1;
break;
case FT_UINT16:
*((guint16 *)value)= tvb_get_letohs(tvb, offset);
diff= 2;
break;
case FT_UINT32:
*((guint32 *)value)= tvb_get_letohl(tvb, offset);
diff= 4;
break;
default:
return 0;
}
proto_tree_add_bitmask_with_flags(tree, tvb, offset, mariadb_caps, ett_extcaps, fields, ENC_LITTLE_ENDIAN, BMT_NO_APPEND);
offset+= diff;
return offset;
}
static int
mysql_dissect_result_header(tvbuff_t *tvb, packet_info *pinfo, int offset,
proto_tree *tree, mysql_conn_data_t *conn_data)
{
gint fle;
guint64 num_fields, extra;
guint8 send_meta= 0;
my_metadata_list_t *field_metas;
my_stmt_data_t *stmt_data;
col_append_str(pinfo->cinfo, COL_INFO, "TABULAR " );
col_set_fence(pinfo->cinfo, COL_INFO);
fle = tvb_get_fle(tvb, tree, offset, &num_fields, NULL);
proto_tree_add_uint64(tree, hf_mysql_num_fields, tvb, offset, fle, num_fields);
offset += fle;
/** skip info flag **/
send_meta = 1;
if (conn_data->mariadb_client_ext_caps & MARIADB_CAPS_ME
&& conn_data->mariadb_server_ext_caps & MARIADB_CAPS_ME
&& tvb_reported_length_remaining(tvb, offset)) {
send_meta = tvb_get_guint8(tvb, offset);
proto_tree_add_item(tree, hf_mariadb_send_meta, tvb, offset, 1, ENC_NA);
offset += 1;
}
if (num_fields > MAX_MY_METADATA_COUNT) {
expert_add_info_format(pinfo, tree, &ei_mysql_invalid_length, "Invalid length: %" G_GUINT64_FORMAT, num_fields);
return tvb_reported_length_remaining(tvb, 0);
} else if (send_meta) {
field_metas = wmem_new(wmem_file_scope(), my_metadata_list_t);
field_metas->count = (guint16)num_fields;
field_metas->flags = (guint16 *)wmem_alloc0_array(wmem_file_scope(), guint16, (size_t)num_fields);
field_metas->types = (guint8 *)wmem_alloc0_array(wmem_file_scope(), guint8, (size_t)num_fields);
conn_data->field_metas = *field_metas;
} else {
if (conn_data->stmt_id) {
stmt_data = (my_stmt_data_t *)wmem_tree_lookup32(conn_data->stmts, conn_data->stmt_id);
if (stmt_data != NULL) {
field_metas = &stmt_data->field_metas;
conn_data->field_metas = *field_metas;
}
}
}
if (tvb_reported_length_remaining(tvb, offset)) {
fle = tvb_get_fle(tvb, tree, offset, &extra, NULL);
proto_tree_add_uint64(tree, hf_mysql_extra, tvb, offset, fle, extra);
offset += fle;
}
if (num_fields) {
if (send_meta) {
mysql_set_conn_state(pinfo, conn_data, FIELD_PACKET);
mysql_set_remaining_field_packet_count(conn_data, num_fields);
} else {
mysql_set_remaining_field_packet_count(conn_data, 0);
if (conn_data->clnt_caps_ext & MYSQL_CAPS_DE) {
mysql_set_conn_state(pinfo, conn_data, ROW_PACKET);
} else {
/** Intermediate EOF follow **/
mysql_set_conn_state(pinfo, conn_data, FIELD_PACKET);
}
}
} else {
mysql_set_conn_state(pinfo, conn_data, ROW_PACKET);
}
return offset;
}
/*
* Add length encoded string to tree
*/
static int
mysql_field_add_lestring(tvbuff_t *tvb, int offset, proto_tree *tree, int field)
{
guint64 lelen;
guint8 is_null;
header_field_info* hfi;
proto_item* ti;
proto_tree* sub_tree;
int start_offset = offset;
hfi = proto_registrar_get_nth(field);
DISSECTOR_ASSERT(hfi != NULL);
sub_tree = proto_tree_add_subtree_format(tree, tvb, offset, -1, ett_mysql_field, &ti, "%s", hfi->name);
offset += tvb_get_fle(tvb, sub_tree, offset, &lelen, &is_null);
if(is_null)
proto_tree_add_string(sub_tree, field, tvb, offset, 0, "NULL");
else
{
proto_tree_add_item(sub_tree, field, tvb, offset, (int)lelen, ENC_NA);
/* Prevent infinite loop due to overflow */
if (offset + (int)lelen < offset) {
offset = tvb_reported_length(tvb);
}
else {
offset += (int)lelen;
}
}
proto_item_set_len(ti, offset -start_offset);
return offset;
}
static int
mysql_dissect_field_packet(tvbuff_t *tvb, proto_item *pi _U_, int offset, proto_tree *tree, packet_info *pinfo _U_, mysql_conn_data_t *conn_data, mysql_state_t current_state)
{
guint8 fld_type;
guint16 fld_flag;
int length = tvb_reported_length(tvb);
/* Are these fields optional? a trace suggests they are...*/
offset = mysql_field_add_lestring(tvb, offset, tree, hf_mysql_fld_catalog);
if (offset >= length) {
return offset;
}
offset = mysql_field_add_lestring(tvb, offset, tree, hf_mysql_fld_db);
offset = mysql_field_add_lestring(tvb, offset, tree, hf_mysql_fld_table);
offset = mysql_field_add_lestring(tvb, offset, tree, hf_mysql_fld_org_table);
offset = mysql_field_add_lestring(tvb, offset, tree, hf_mysql_fld_name);
offset = mysql_field_add_lestring(tvb, offset, tree, hf_mysql_fld_org_name);
// mariadb extended metadata infos
if (conn_data->mariadb_client_ext_caps & MARIADB_CAPS_EM
&& conn_data->mariadb_server_ext_caps & MARIADB_CAPS_EM) {
guint64 extended_length;
proto_item *extended_tree = NULL;
proto_item *tf;
int fle;
fle = tvb_get_fle(tvb, tree, offset, &extended_length, NULL);
tf = proto_tree_add_item(tree, hf_mariadb_extmeta_data, tvb, offset, fle + (guint32) extended_length, ENC_NA);
extended_tree = proto_item_add_subtree(tf, ett_extmeta_data);
proto_tree_add_uint64(tf, hf_mariadb_extmeta_length, tvb, offset, fle, extended_length);
offset += fle;
while (extended_length > 0) {
length = add_extended_meta_entry_to_tree(tvb, pinfo, extended_tree, offset);
offset += length;
extended_length -= length;
}
}
offset +=1; /* filler */
proto_tree_add_item(tree, hf_mysql_fld_charsetnr, tvb, offset, 2, ENC_LITTLE_ENDIAN);
offset += 2; /* charset */
proto_tree_add_item(tree, hf_mysql_fld_length, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4; /* length */
proto_tree_add_item(tree, hf_mysql_fld_type, tvb, offset, 1, ENC_NA);
fld_type = tvb_get_guint8(tvb, offset);
offset += 1; /* type */
proto_tree_add_bitmask_with_flags(tree, tvb, offset, hf_mysql_fld_flags, ett_field_flags, mysql_fld_flags, ENC_LITTLE_ENDIAN, BMT_NO_APPEND);
fld_flag = tvb_get_letohs(tvb, offset);
offset += 2; /* flags */
proto_tree_add_item(tree, hf_mysql_fld_decimals, tvb, offset, 1, ENC_NA);
offset += 1; /* decimals */
offset += 2; /* filler */
if (current_state == FIELD_PACKET || current_state == PREPARED_FIELDS) {
if (conn_data->field_metas.count) {
guint64 fieldpos = conn_data->field_metas.count - mysql_get_remaining_field_packet_count(conn_data);
if (fieldpos >= conn_data->field_metas.count) {
expert_add_info_format(pinfo, tree, &ei_mysql_invalid_length, "Invalid length: %" G_GUINT64_FORMAT, fieldpos);
return tvb_reported_length_remaining(tvb, 0);
}
conn_data->field_metas.types[fieldpos] = fld_type;
conn_data->field_metas.flags[fieldpos] = fld_flag;
}
}
/* default (Only use for show fields) */
if (tree && tvb_reported_length_remaining(tvb, offset) > 0) {
offset = mysql_field_add_lestring(tvb, offset, tree, hf_mysql_fld_default);
}
return offset;
}
static int
mysql_dissect_text_row_packet(tvbuff_t *tvb, int offset, proto_tree *tree)
{
while (tvb_reported_length_remaining(tvb, offset) > 0) {
offset = mysql_field_add_lestring(tvb, offset, tree, hf_mysql_row_text);
}
return offset;
}
static int
mysql_dissect_binary_row_packet(tvbuff_t *tvb, packet_info *pinfo, proto_item *pi, int offset, proto_tree *tree, mysql_conn_data_t *conn_data)
{
int fieldpos;
if (conn_data->field_metas.count) {
/* null bitmap */
int nfields = conn_data->field_metas.count;
int null_len = (nfields + 9) / 8;
char *null_buffer;
null_buffer = (guint8 *)wmem_alloc(wmem_packet_scope(), (size_t)null_len + 1);
tvb_get_raw_bytes_as_string(tvb, offset, null_buffer, (size_t)null_len + 1);
proto_tree_add_bytes_with_length(tree, hf_mysql_null_buffer, tvb, offset, null_len, null_buffer, null_len);
offset += null_len;
for (fieldpos = 0; fieldpos < nfields; fieldpos++) {
if ((null_buffer[(fieldpos + 2) / 8] & (1 << ((fieldpos + 2) % 8))) == 0) {
// data is not null
if (tvb_reported_length_remaining(tvb, offset) > 0) {
if (!mysql_dissect_binary_row_value(tvb, pinfo, pi, &offset, tree, conn_data->field_metas.types[fieldpos], conn_data->field_metas.flags[fieldpos]))
break;
}
} else {
proto_tree_add_item(tree, hf_mysql_exec_field_null, tvb, offset, 0, ENC_NA);
}
}
}
return offset;
}
static char
mysql_dissect_binary_row_value(tvbuff_t *tvb, packet_info *pinfo _U_, proto_item *pi _U_, int *offset, proto_item *tree, guint8 field_type, guint16 field_flag)
{
int dissector_index = 0;
guint8 param_unsigned = 0;
if (field_flag & MYSQL_FLD_UNSIGNED_FLAG) {
param_unsigned = 1;
}
while (mysql_exec_dissectors[dissector_index].dissector != NULL) {
if (mysql_exec_dissectors[dissector_index].type == field_type &&
mysql_exec_dissectors[dissector_index].unsigned_flag == param_unsigned) {
mysql_exec_dissectors[dissector_index].dissector(tvb, offset, tree);
return 1;
}
dissector_index++;
}
return 0;
}
static int
mysql_dissect_response_prepare(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree, mysql_conn_data_t *conn_data)
{
my_stmt_data_t *stmt_data;
my_metadata_list_t *field_metas;
my_metadata_list_t *param_metas;
guint32 stmt_id;
proto_tree_add_item(tree, hf_mysql_stmt_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
stmt_id = tvb_get_letohl(tvb, offset);
conn_data->stmt_id=stmt_id;
offset += 4;
proto_tree_add_item(tree, hf_mysql_num_fields, tvb, offset, 2, ENC_LITTLE_ENDIAN);
conn_data->stmt_num_fields = tvb_get_letohs(tvb, offset);
offset += 2;
proto_tree_add_item(tree, hf_mysql_num_params, tvb, offset, 2, ENC_LITTLE_ENDIAN);
conn_data->stmt_num_params = tvb_get_letohs(tvb, offset);
stmt_data = wmem_new(wmem_file_scope(), struct my_stmt_data);
param_metas = wmem_new(wmem_file_scope(), my_metadata_list_t);
param_metas->count = conn_data->stmt_num_params;
param_metas->flags = (guint16 *)wmem_alloc0_array(wmem_file_scope(), guint16, param_metas->count);
param_metas->types = (guint8 *)wmem_alloc0_array(wmem_file_scope(), guint8, param_metas->count);
stmt_data->param_metas = *param_metas;
field_metas = wmem_new(wmem_file_scope(), my_metadata_list_t);
field_metas->count = conn_data->stmt_num_fields;
field_metas->flags = (guint16 *)wmem_alloc0_array(wmem_file_scope(), guint16, field_metas->count);
field_metas->types = (guint8 *)wmem_alloc0_array(wmem_file_scope(), guint8, field_metas->count);
stmt_data->field_metas = *field_metas;
conn_data->field_metas = *field_metas;
wmem_tree_insert32(conn_data->stmts, stmt_id, stmt_data);
offset += 2;
/* Filler */
offset += 1;
proto_tree_add_item(tree, hf_mysql_num_warn, tvb, offset, 2, ENC_LITTLE_ENDIAN);
if (conn_data->stmt_num_params > 0) {
mysql_set_remaining_field_packet_count(conn_data, conn_data->stmt_num_params);
mysql_set_conn_state(pinfo, conn_data, PREPARED_PARAMETERS);
} else if (conn_data->stmt_num_fields > 0) {
mysql_set_remaining_field_packet_count(conn_data, conn_data->stmt_num_fields);
mysql_set_conn_state(pinfo, conn_data, PREPARED_FIELDS);
} else {
mysql_set_remaining_field_packet_count(conn_data, 0);
mysql_set_conn_state(pinfo, conn_data, REQUEST);
}
return offset + tvb_reported_length_remaining(tvb, offset);
}
/**
Enumeration type for the different types of log events.
*/
enum Log_event_type {
/**
Every time you add a type, you have to
- Assign it a number explicitly. Otherwise it will cause trouble
if a event type before is deprecated and removed directly from
the enum.
- Fix Format_description_event::Format_description_event().
*/
UNKNOWN_EVENT = 0,
/*
Deprecated since mysql 8.0.2. It is just a placeholder,
should not be used anywhere else.
*/
START_EVENT_V3 = 1,
QUERY_EVENT = 2,
STOP_EVENT = 3,
ROTATE_EVENT = 4,
INTVAR_EVENT = 5,
SLAVE_EVENT = 7,
APPEND_BLOCK_EVENT = 9,
DELETE_FILE_EVENT = 11,
RAND_EVENT = 13,
USER_VAR_EVENT = 14,
FORMAT_DESCRIPTION_EVENT = 15,
XID_EVENT = 16,
BEGIN_LOAD_QUERY_EVENT = 17,
EXECUTE_LOAD_QUERY_EVENT = 18,
TABLE_MAP_EVENT = 19,
/**
The V1 event numbers are used from 5.1.16 until mysql-5.6.
*/
WRITE_ROWS_EVENT_V1 = 23,
UPDATE_ROWS_EVENT_V1 = 24,
DELETE_ROWS_EVENT_V1 = 25,
/**
Something out of the ordinary happened on the master
*/
INCIDENT_EVENT = 26,
/**
Heartbeat event to be send by master at its idle time
to ensure master's online status to slave
*/
HEARTBEAT_LOG_EVENT = 27,
/**
In some situations, it is necessary to send over ignorable
data to the slave: data that a slave can handle in case there
is code for handling it, but which can be ignored if it is not
recognized.
*/
IGNORABLE_LOG_EVENT = 28,
ROWS_QUERY_LOG_EVENT = 29,
/** Version 2 of the Row events */
WRITE_ROWS_EVENT = 30,
UPDATE_ROWS_EVENT = 31,
DELETE_ROWS_EVENT = 32,
GTID_LOG_EVENT = 33,
ANONYMOUS_GTID_LOG_EVENT = 34,
PREVIOUS_GTIDS_LOG_EVENT = 35,
TRANSACTION_CONTEXT_EVENT = 36,
VIEW_CHANGE_EVENT = 37,
/* Prepared XA transaction terminal event similar to Xid */
XA_PREPARE_LOG_EVENT = 38,
/**
Extension of UPDATE_ROWS_EVENT, allowing partial values according
to binlog_row_value_options.
*/
PARTIAL_UPDATE_ROWS_EVENT = 39,
TRANSACTION_PAYLOAD_EVENT = 40,
HEARTBEAT_LOG_EVENT_V2 = 41,
/**
Add new events here - right above this comment!
Existing events (except ENUM_END_EVENT) should never change their numbers
*/
ENUM_END_EVENT /* end marker */
};
static const value_string mysql_binlog_event_type_vals[] = {
{0, "Unknown"},
{1, "START_EVENT_V3"},
{2, "Query"},
{3, "Stop"},
{4, "Rotate"},
{5, "Intvar"},
{7, "SLAVE_EVENT"},
{9, "Append_block"},
{11, "Delete_file"},
{13, "RAND"},
{14, "User_var"},
{15, "Format_desc"},
{16, "Xid"},
{17, "Begin_load_query"},
{18, "Execute_load_query"},
{19, "Table_map"},
{23, "Write_rows_v1"},
{24, "Update_rows_v1"},
{25, "Delete_rows_v1"},
{26, "Incident"},
{27, "Heartbeat"},
{28, "Ignorable"},
{29, "Rows_query"},
{30, "Write_rows"},
{31, "Update_rows"},
{32, "Delete_rows"},
{33, "Gtid"},
{34, "Anonymous_Gtid"},
{35, "Previous_gtids"},
{36, "Transaction_context"},
{37, "View_change"},
{38, "XA_prepare"},
{39, "Update_rows_partial"},
{40, "Transaction_payload"},
{41, "Heartbeat_v2"},
{0, NULL},
};
static int
mysql_dissect_binlog_event_heartbeat_v2(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree)
{
int fle;
guint64 num;
proto_item *item, *parent_item;
proto_item *hb_v2_tree, *hb_v2_subtree;
col_append_str(pinfo->cinfo, COL_INFO, "Heartbeat_v2 ");
col_set_fence(pinfo->cinfo, COL_INFO);
item = proto_tree_add_item(tree, hf_mysql_binlog_event_heartbeat_v2, tvb, offset, -1, ENC_NA);
hb_v2_tree = proto_item_add_subtree(item, ett_binlog_event);
// OTW_HB_LOG_FILENAME_FIELD
parent_item = proto_tree_add_item(hb_v2_tree, hf_mysql_binlog_event_heartbeat_v2_otw, tvb, offset, -1, ENC_NA);
hb_v2_subtree = proto_item_add_subtree(parent_item, ett_binlog_event_hb_v2);
item = proto_tree_add_item(hb_v2_subtree, hf_mysql_binlog_event_heartbeat_v2_otw_type, tvb, offset, 1, ENC_NA);
proto_item_append_text(item, " (OTW_HB_LOG_FILENAME_FIELD)");
proto_item_append_text(parent_item, " OTW_HB_LOG_FILENAME_FIELD");
offset += 1;
fle = tvb_get_fle(tvb, hb_v2_subtree, offset, &num, ENC_NA);
offset += fle;
proto_tree_add_item(hb_v2_subtree, hf_mysql_binlog_hb_event_filename, tvb, offset, (gint) num, ENC_ASCII);
offset += (gint)num;
// OTW_HB_LOG_POSITION_FIELD
parent_item = proto_tree_add_item(hb_v2_tree, hf_mysql_binlog_event_heartbeat_v2_otw, tvb, offset, -1, ENC_NA);
hb_v2_subtree = proto_item_add_subtree(parent_item, ett_binlog_event_hb_v2);
item = proto_tree_add_item(hb_v2_subtree, hf_mysql_binlog_event_heartbeat_v2_otw_type, tvb, offset, 1, ENC_NA);
proto_item_append_text(item, " (OTW_HB_LOG_POSITION_FIELD)");
proto_item_append_text(parent_item, " OTW_HB_LOG_POSITION_FIELD");
offset += 1;
fle = tvb_get_fle(tvb, hb_v2_subtree, offset, &num, NULL);
offset += fle;
fle = tvb_get_fle(tvb, hb_v2_subtree, offset, &num, NULL);
proto_tree_add_uint64(hb_v2_subtree, hf_mysql_binlog_hb_event_log_position, tvb, offset, fle, num);
offset += fle;
// OTW_HB_LOG_FILENAME_FIELD
parent_item = proto_tree_add_item(hb_v2_tree, hf_mysql_binlog_event_heartbeat_v2_otw, tvb, offset, -1, ENC_NA);
hb_v2_subtree = proto_item_add_subtree(parent_item, ett_binlog_event_hb_v2);
item = proto_tree_add_item(hb_v2_subtree, hf_mysql_binlog_event_heartbeat_v2_otw_type, tvb, offset, 1, ENC_NA);
proto_item_append_text(item, " (OTW_HB_HEADER_END_MARK)");
proto_item_append_text(parent_item, " OTW_HB_HEADER_END_MARK");
offset += 1;
return offset;
}
static int
mysql_dissect_binlog_event_header(tvbuff_t *tvb, int offset, proto_tree *tree)
{
proto_tree_add_item(tree, hf_mysql_binlog_event_header_timestamp, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
proto_tree_add_item(tree, hf_mysql_binlog_event_header_event_type, tvb, offset, 1, ENC_LITTLE_ENDIAN);
offset += 1;
proto_tree_add_item(tree, hf_mysql_binlog_event_header_server_id, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
proto_tree_add_item(tree, hf_mysql_binlog_event_header_event_size, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
proto_tree_add_item(tree, hf_mysql_binlog_event_header_log_position, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
proto_tree_add_item(tree, hf_mysql_binlog_event_header_flags, tvb, offset, 2, ENC_LITTLE_ENDIAN);
offset += 2;
return offset;
}
static int
mysql_dissect_binlog_event_packet(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree)
{
guint8 event_type;
int fle;
col_append_str(pinfo->cinfo, COL_INFO, "Binlog Event " );
col_set_fence(pinfo->cinfo, COL_INFO);
event_type = tvb_get_guint8(tvb, offset + 4);
offset = mysql_dissect_binlog_event_header(tvb, offset, tree);
switch (event_type) {
case HEARTBEAT_LOG_EVENT_V2:
offset = mysql_dissect_binlog_event_heartbeat_v2(tvb, pinfo, offset, tree);
break;
default:
fle = tvb_reported_length_remaining(tvb, offset);
offset += fle - 4;
break;
}
// checksum
proto_tree_add_item(tree, hf_mysql_binlog_event_checksum, tvb, offset, 4, ENC_LITTLE_ENDIAN);
offset += 4;
return offset;
}
static int
mysql_dissect_eof(tvbuff_t *tvb, packet_info *pinfo _U_, proto_item *pi _U_, int offset, proto_tree *tree, mysql_conn_data_t *conn_data _U_)
{
guint16 server_status = 0;
proto_tree_add_item(tree, hf_mysql_num_warn, tvb, offset, 2, ENC_LITTLE_ENDIAN);
offset += 2;
offset = mysql_dissect_server_status(tvb, offset, tree, &server_status);
return offset + tvb_reported_length_remaining(tvb, offset);
}
static int
mysql_dissect_auth_switch_request(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree, mysql_conn_data_t *conn_data _U_)
{
gint lenstr;
col_set_str(pinfo->cinfo, COL_INFO, "Auth Switch Request " );
col_set_fence(pinfo->cinfo, COL_INFO);
mysql_set_conn_state(pinfo, conn_data, AUTH_SWITCH_RESPONSE);
/* Status (Always 0xfe) */
proto_tree_add_item(tree, hf_mysql_auth_switch_request_status, tvb, offset, 1, ENC_LITTLE_ENDIAN);
offset += 1;
/* name */
lenstr = my_tvb_strsize(tvb, offset);
proto_tree_add_item(tree, hf_mysql_auth_switch_request_name, tvb, offset, lenstr, ENC_ASCII);
offset += lenstr;
/* Data */
lenstr = my_tvb_strsize(tvb, offset);
proto_tree_add_item(tree, hf_mysql_auth_switch_request_data, tvb, offset, lenstr, ENC_NA);
offset += lenstr;
return offset + tvb_reported_length_remaining(tvb, offset);
}
static int
mysql_dissect_auth_switch_response(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree, mysql_conn_data_t *conn_data _U_)
{
gint lenstr;
col_set_str(pinfo->cinfo, COL_INFO, "Auth Switch Response " );
col_set_fence(pinfo->cinfo, COL_INFO);
/* Data */
lenstr = my_tvb_strsize(tvb, offset);
proto_tree_add_item(tree, hf_mysql_auth_switch_response_data, tvb, offset, lenstr, ENC_NA);
offset += lenstr;
return offset + tvb_reported_length_remaining(tvb, offset);
}
/*
get length of string in packet buffer
SYNOPSIS
my_tvb_strsize()
tvb packet buffer
offset current offset
DESCRIPTION
deliver length of string, delimited by either \0 or end of buffer
RETURN VALUE
length of string found, including \0 (if present)
*/
static gint
my_tvb_strsize(tvbuff_t *tvb, int offset)
{
gint len = tvb_strnlen(tvb, offset, -1);
if (len == -1) {
len = tvb_reported_length_remaining(tvb, offset);
} else {
len++; /* the trailing \0 */
}
return len;
}
/*
read "field length encoded" value from packet buffer
SYNOPSIS
tvb_get_fle()
tvb in packet buffer
tree in....protocol tree
offset in offset in buffer
res out where to store FLE value, may be NULL
is_null out where to store ISNULL flag, may be NULL
DESCRIPTION
read FLE from packet buffer and store its value and ISNULL flag
in caller provided variables
RETURN VALUE
length of FLE
*/
static int
tvb_get_fle(tvbuff_t *tvb, proto_tree *tree, int offset, guint64 *res, guint8 *is_null)
{
guint32 prefix;
proto_item* ti;
int num_bytes, len_len;
guint64 length;
ti = proto_tree_add_item_ret_uint(tree, hf_mysql_prefix, tvb, offset, 1, ENC_BIG_ENDIAN, &prefix);
if (is_null) {
*is_null = 0;
}
switch (prefix) {
case 251:
if (res)
*res = 0;
if (is_null)
*is_null = 1;
proto_item_append_text(ti, "(NULL)");
return 1;
case 252:
proto_item_append_text(ti, " Length in following 2 bytes");
num_bytes = 3;
len_len = 2;
offset++;
break;
case 253:
proto_item_append_text(ti, " Length in following 3 bytes");
num_bytes = 4;
len_len = 3;
offset++;
break;
case 254:
proto_item_append_text(ti, " Length in following 8 bytes");
num_bytes = 9;
len_len = 8;
offset++;
break;
default:
len_len = 1;
num_bytes = 1;
}
proto_tree_add_item_ret_uint64(tree, hf_mysql_length, tvb, offset, len_len, ENC_LITTLE_ENDIAN, &length);
if (res) {
*res = length;
}
return num_bytes;
}
/* dissector helper: length of PDU */
static guint
get_mysql_pdu_len(packet_info *pinfo, tvbuff_t *tvb, int offset, void *data _U_)
{
/* Regular packet header: length (3) + sequence number (1) */
conversation_t *conversation;
mysql_conn_data_t *conn_data;
guint len = 4 + tvb_get_letoh24(tvb, offset);
conversation = find_conversation_pinfo(pinfo, 0);
if (conversation) {
conn_data = (mysql_conn_data_t *)conversation_get_proto_data(conversation, proto_mysql);
if (conn_data && conn_data->compressed_state == MYSQL_COMPRESS_ACTIVE &&
pinfo->num > conn_data->frame_start_compressed) {
/* Compressed packet header includes uncompressed packet length (3) */
len += 3;
}
}
return len;
}
/* dissector main function: handle one PDU */
static int
dissect_mysql_pdu(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
proto_tree *mysql_tree= NULL;
proto_item *ti;
conversation_t *conversation;
int offset = 0;
guint packet_number;
gboolean is_response, is_tls = FALSE;
mysql_conn_data_t *conn_data;
#ifdef CTDEBUG
mysql_state_t conn_state_in, conn_state_out, frame_state;
guint64 generation;
proto_item *pi;
#endif
struct mysql_frame_data *mysql_frame_data_p;
/* get conversation, create if necessary*/
conversation= find_or_create_conversation(pinfo);
/* get associated state information, create if necessary */
conn_data= (mysql_conn_data_t *)conversation_get_proto_data(conversation, proto_mysql);
if (!conn_data) {
conn_data = wmem_new0(wmem_file_scope(), mysql_conn_data_t);
conn_data->stmts = wmem_tree_new(wmem_file_scope());
conversation_add_proto_data(conversation, proto_mysql, conn_data);
}
/* Using tvb_raw_offset(tvb) allows storage of multiple "proto data" in a single frame
* (when there are multiple MySQL pdus in a single frame) */
mysql_frame_data_p = (struct mysql_frame_data *)p_get_proto_data(wmem_file_scope(), pinfo, proto_mysql, tvb_raw_offset(tvb));
if (!mysql_frame_data_p) {
/* We haven't seen this frame before. Store the state of the
* conversation now so if/when we dissect the frame again
* we'll start with the same state.
*/
mysql_frame_data_p = wmem_new(wmem_file_scope(), struct mysql_frame_data);
mysql_frame_data_p->state = conn_data->state;
p_add_proto_data(wmem_file_scope(), pinfo, proto_mysql, tvb_raw_offset(tvb), mysql_frame_data_p);
}
if ((conn_data->frame_start_compressed) && (pinfo->num > conn_data->frame_start_compressed)) {
if (conn_data->compressed_state == MYSQL_COMPRESS_ACTIVE) {
offset = mysql_dissect_compressed_header(tvb, offset, tree);
}
}
ti = proto_tree_add_item(tree, proto_mysql, tvb, offset, -1, ENC_NA);
mysql_tree = proto_item_add_subtree(ti, ett_mysql);
proto_tree_add_item(mysql_tree, hf_mysql_packet_length, tvb, offset, 3, ENC_LITTLE_ENDIAN);
offset+= 3;
col_set_str(pinfo->cinfo, COL_PROTOCOL, "MySQL");
if (pinfo->destport == pinfo->match_uint) {
is_response= FALSE;
} else {
is_response= TRUE;
}
packet_number = tvb_get_guint8(tvb, offset);
proto_tree_add_item(mysql_tree, hf_mysql_packet_number, tvb, offset, 1, ENC_NA);
offset += 1;
#ifdef CTDEBUG
conn_state_in= conn_data->state;
frame_state = mysql_frame_data_p->state;
generation= conn_data->generation;
if (tree) {
pi = proto_tree_add_debug_text(mysql_tree, "conversation: %p", conversation);
proto_item_set_generated(pi);
pi = proto_tree_add_debug_text(mysql_tree, "generation: %" PRId64, generation);
proto_item_set_generated(pi);
pi = proto_tree_add_debug_text(mysql_tree, "conn state: %s (%u)",
val_to_str(conn_state_in, state_vals, "Unknown (%u)"),
conn_state_in);
proto_item_set_generated(pi);
pi = proto_tree_add_debug_text(mysql_tree, "frame state: %s (%u)",
val_to_str(frame_state, state_vals, "Unknown (%u)"),
frame_state);
proto_item_set_generated(pi);
}
#endif
is_tls = proto_is_frame_protocol(pinfo->layers, "tls");
if (is_response) {
if (packet_number == 0 && mysql_frame_data_p->state == UNDEFINED) {
col_set_str(pinfo->cinfo, COL_INFO, "Server Greeting ");
offset = mysql_dissect_greeting(tvb, pinfo, offset, mysql_tree, conn_data);
} else {
col_set_str(pinfo->cinfo, COL_INFO, "Response ");
offset = mysql_dissect_response(tvb, pinfo, offset, mysql_tree, conn_data, ti, mysql_frame_data_p->state);
}
} else {
if (mysql_frame_data_p->state == LOGIN && (packet_number == 1 || (packet_number == 2 && is_tls))) {
col_set_str(pinfo->cinfo, COL_INFO, "Login Request");
offset = mysql_dissect_login(tvb, pinfo, offset, mysql_tree, conn_data);
if (conn_data->srv_caps & MYSQL_CAPS_CP) {
if (conn_data->clnt_caps & MYSQL_CAPS_CP) {
conn_data->frame_start_compressed = pinfo->num;
conn_data->compressed_state = MYSQL_COMPRESS_INIT;
}
}
} else {
col_set_str(pinfo->cinfo, COL_INFO, "Request");
offset = mysql_dissect_request(tvb, pinfo, offset, mysql_tree, conn_data, mysql_frame_data_p->state);
}
}
#ifdef CTDEBUG
conn_state_out= conn_data->state;
++(conn_data->generation);
pi = proto_tree_add_debug_text(mysql_tree, "next proto state: %s (%u)",
val_to_str(conn_state_out, state_vals, "Unknown (%u)"),
conn_state_out);
proto_item_set_generated(pi);
#endif
/* remaining payload indicates an error */
if (tvb_reported_length_remaining(tvb, offset) > 0) {
ti = proto_tree_add_item(mysql_tree, hf_mysql_payload, tvb, offset, -1, ENC_NA);
expert_add_info(pinfo, ti, &ei_mysql_dissector_incomplete);
}
return tvb_reported_length(tvb);
}
/* dissector entrypoint, handles TCP-desegmentation */
static int
dissect_mysql(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data)
{
tcp_dissect_pdus(tvb, pinfo, tree, mysql_desegment, 3,
get_mysql_pdu_len, dissect_mysql_pdu, data);
return tvb_reported_length(tvb);
}
/* protocol registration */
void proto_register_mysql(void)
{
static hf_register_info hf[]=
{
{ &hf_mysql_packet_length,
{ "Packet Length", "mysql.packet_length",
FT_UINT24, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_packet_number,
{ "Packet Number", "mysql.packet_number",
FT_UINT8, BASE_DEC, NULL, 0x0,
"Packet Number (now called: Sequence ID)", HFILL }},
{ &hf_mysql_request,
{ "Request Command", "mysql.request",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_command,
{ "Command", "mysql.command",
FT_UINT8, BASE_DEC|BASE_EXT_STRING, &mysql_command_vals_ext, 0x0,
NULL, HFILL }},
{ &hf_mysql_response_code,
{ "Response Code", "mysql.response_code",
FT_UINT8, BASE_HEX, VALS(mysql_response_code_vals), 0x0,
NULL, HFILL }},
{ &hf_mysql_error_code,
{ "Error Code", "mysql.error_code",
FT_UINT16, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_error_string,
{ "Error message", "mysql.error.message",
FT_STRING, BASE_NONE, NULL, 0x0,
"Error string in case of MySQL error message", HFILL }},
{ &hf_mysql_sqlstate,
{ "SQL state", "mysql.sqlstate",
FT_STRING, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_message,
{ "Message", "mysql.message",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_server_greeting,
{ "Server Greeting", "mysql.server_greeting",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_protocol,
{ "Protocol", "mysql.protocol",
FT_UINT8, BASE_DEC, NULL, 0x0,
"Protocol Version", HFILL }},
{ &hf_mysql_version,
{ "Version", "mysql.version",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
"MySQL Version", HFILL }},
{ &hf_mysql_session_track,
{ "Session Track", "mysql.session_track",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_type,
{ "Session tracking type", "mysql.session_track.type",
FT_UINT8, BASE_DEC, VALS(mysql_session_track_type_vals), 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_length,
{ "Session tracking length", "mysql.session_track.length",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_data,
{ "Session tracking data", "mysql.session_track.data",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_data_length,
{ "Session tracking data length", "mysql.session_track.data.length",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_sysvar_length,
{ "System variable change Length", "mysql.session_track.sysvar.length",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_sysvar_name,
{ "System variable change Name", "mysql.session_track.sysvar.name",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_sysvar_value,
{ "System variable change Value", "mysql.session_track.sysvar.value",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_schema_length,
{ "Schema change length", "mysql.session_track.schema.length",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_schema,
{ "Schema change", "mysql.session_track.schema",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_state_change,
{ "State change", "mysql.session_track.state_change",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_gtids_encoding,
{ "GTIDs encoding", "mysql.session_track.gtids.encoding",
FT_UINT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_gtids_length,
{ "GTIDs length", "mysql.session_track.gtids.length",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_gtids,
{ "GTIDs", "mysql.session_track.gtids",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_transaction_characteristics_length,
{ "Transaction characteristics length", "mysql.session_track.transaction_characteristics.length",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_transaction_characteristics,
{ "Transaction characteristics", "mysql.session_track.transaction_characteristics",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_transaction_state_length,
{ "Transaction state length", "mysql.session_track.transaction_state.length",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_session_track_transaction_state,
{ "Transaction state", "mysql.session_track.transaction_state",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_caps_server,
{ "Server Capabilities", "mysql.caps.server",
FT_UINT16, BASE_HEX, NULL, 0x0,
"MySQL Capabilities", HFILL }},
{ &hf_mysql_caps_client,
{ "Client Capabilities", "mysql.caps.client",
FT_UINT16, BASE_HEX, NULL, 0x0,
"MySQL Capabilities", HFILL }},
{ &hf_mysql_cap_long_password,
{ "Long Password","mysql.caps.lp",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_LP,
NULL, HFILL }},
{ &hf_mysql_cap_found_rows,
{ "Found Rows","mysql.caps.fr",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_FR,
NULL, HFILL }},
{ &hf_mysql_cap_long_flag,
{ "Long Column Flags","mysql.caps.lf",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_LF,
NULL, HFILL }},
{ &hf_mysql_cap_connect_with_db,
{ "Connect With Database","mysql.caps.cd",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_CD,
NULL, HFILL }},
{ &hf_mysql_cap_no_schema,
{ "Don't Allow database.table.column","mysql.caps.ns",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_NS,
NULL, HFILL }},
{ &hf_mysql_cap_compress,
{ "Can use compression protocol","mysql.caps.cp",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_CP,
NULL, HFILL }},
{ &hf_mysql_cap_odbc,
{ "ODBC Client","mysql.caps.ob",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_OB,
NULL, HFILL }},
{ &hf_mysql_cap_local_files,
{ "Can Use LOAD DATA LOCAL","mysql.caps.li",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_LI,
NULL, HFILL }},
{ &hf_mysql_cap_ignore_space,
{ "Ignore Spaces before '('","mysql.caps.is",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_IS,
NULL, HFILL }},
{ &hf_mysql_cap_change_user,
{ "Speaks 4.1 protocol (new flag)","mysql.caps.cu",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_CU,
NULL, HFILL }},
{ &hf_mysql_cap_interactive,
{ "Interactive Client","mysql.caps.ia",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_IA,
NULL, HFILL }},
{ &hf_mysql_cap_ssl,
{ "Switch to SSL after handshake","mysql.caps.sl",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_SL,
NULL, HFILL }},
{ &hf_mysql_cap_ignore_sigpipe,
{ "Ignore sigpipes","mysql.caps.ii",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_II,
NULL, HFILL }},
{ &hf_mysql_cap_transactions,
{ "Knows about transactions","mysql.caps.ta",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_TA,
NULL, HFILL }},
{ &hf_mysql_cap_reserved,
{ "Speaks 4.1 protocol (old flag)","mysql.caps.rs",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_RS,
NULL, HFILL }},
{ &hf_mysql_cap_secure_connect,
{ "Can do 4.1 authentication","mysql.caps.sc",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_SC,
NULL, HFILL }},
{ &hf_mysql_extcaps_server,
{ "Extended Server Capabilities", "mysql.extcaps.server",
FT_UINT16, BASE_HEX, NULL, 0x0,
"MySQL Extended Capabilities", HFILL }},
{ &hf_mysql_extcaps_client,
{ "Extended Client Capabilities", "mysql.extcaps.client",
FT_UINT16, BASE_HEX, NULL, 0x0,
"MySQL Extended Capabilities", HFILL }},
{ &hf_mysql_cap_multi_statements,
{ "Multiple statements","mysql.caps.ms",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_MS,
NULL, HFILL }},
{ &hf_mysql_cap_multi_results,
{ "Multiple results","mysql.caps.mr",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_MR,
NULL, HFILL }},
{ &hf_mysql_cap_ps_multi_results,
{ "PS Multiple results","mysql.caps.pm",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_PM,
NULL, HFILL }},
{ &hf_mysql_cap_plugin_auth,
{ "Plugin Auth","mysql.caps.pa",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_PA,
NULL, HFILL }},
{ &hf_mysql_cap_connect_attrs,
{ "Connect attrs","mysql.caps.ca",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_CA,
NULL, HFILL }},
{ &hf_mysql_cap_plugin_auth_lenenc_client_data,
{ "Plugin Auth LENENC Client Data","mysql.caps.pm",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_AL,
NULL, HFILL }},
{ &hf_mysql_cap_client_can_handle_expired_passwords,
{ "Client can handle expired passwords","mysql.caps.ep",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_EP,
NULL, HFILL }},
{ &hf_mysql_cap_session_track,
{ "Session variable tracking","mysql.caps.session_track",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_ST,
NULL, HFILL }},
{ &hf_mysql_cap_deprecate_eof,
{ "Deprecate EOF","mysql.caps.deprecate_eof",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_CAPS_DE,
NULL, HFILL }},
{ &hf_mysql_cap_unused,
{ "Unused","mysql.caps.unused",
FT_UINT16, BASE_HEX, NULL, MYSQL_CAPS_UNUSED,
NULL, HFILL }},
{ &hf_mysql_login_request,
{ "Login Request", "mysql.login_request",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_max_packet,
{ "MAX Packet", "mysql.max_packet",
FT_UINT32, BASE_DEC, NULL, 0x0,
"MySQL Max packet", HFILL }},
{ &hf_mysql_charset,
{ "Charset", "mysql.charset",
FT_UINT8, BASE_DEC|BASE_EXT_STRING, &mysql_collation_vals_ext, 0x0,
"MySQL Charset", HFILL }},
{ &hf_mariadb_charset,
{ "Charset", "mariadb.charset",
FT_UINT8, BASE_DEC|BASE_EXT_STRING, &mariadb_collation_vals_ext, 0x0,
"MySQL Charset", HFILL }},
{ &hf_mysql_table_name,
{ "Table Name", "mysql.table_name",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_user,
{ "Username", "mysql.user",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
"Login Username", HFILL }},
{ &hf_mysql_schema,
{ "Schema", "mysql.schema",
FT_STRING, BASE_NONE, NULL, 0x0,
"Login Schema", HFILL }},
{ &hf_mysql_client_auth_plugin,
{ "Client Auth Plugin", "mysql.client_auth_plugin",
FT_STRING, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_connattrs,
{ "Connection Attributes", "mysql.connattrs",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_connattrs_length,
{ "Connection Attributes length", "mysql.connattrs.length",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_connattrs_attr,
{ "Connection Attribute", "mysql.connattrs.attr",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_connattrs_name_length,
{ "Connection Attribute Name Length", "mysql.connattrs.name.length",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_connattrs_name,
{ "Connection Attribute Name", "mysql.connattrs.name",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_connattrs_value_length,
{ "Connection Attribute Value Length", "mysql.connattrs.value.length",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_connattrs_value,
{ "Connection Attribute Value", "mysql.connattrs.value",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_extmeta_data,
{ "Extended metadata data", "mysql.extmeta_data",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_extmeta,
{ "Extended metadata", "mysql.extmeta",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_extmeta_length,
{ "Extended metadata length", "mysql.extmeta.length",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_extmeta_key,
{ "Extended metadata key", "mysql.extmeta.key",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_extmeta_type,
{ "Extended metadata type", "mysql.extmeta.type",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_extmeta_format,
{ "Extended metadata format", "mysql.extmeta.format",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_salt,
{ "Salt", "mysql.salt",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_salt2,
{ "Salt", "mysql.salt2",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_auth_plugin_length,
{ "Authentication Plugin Length", "mysql.auth_plugin.length",
FT_UINT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_auth_plugin,
{ "Authentication Plugin", "mysql.auth_plugin",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_thread_id,
{ "Thread ID", "mysql.thread_id",
FT_UINT32, BASE_DEC, NULL, 0x0,
"MySQL Thread ID", HFILL }},
{ &hf_mysql_server_language,
{ "Server Language", "mysql.server_language",
FT_UINT8, BASE_DEC|BASE_EXT_STRING, &mysql_collation_vals_ext, 0x0,
"MySQL Charset", HFILL }},
{ &hf_mariadb_server_language,
{ "Server Language", "mariadb.server_language",
FT_UINT8, BASE_DEC|BASE_EXT_STRING, &mariadb_collation_vals_ext, 0x0,
"MySQL Charset", HFILL }},
{ &hf_mysql_server_status,
{ "Server Status", "mysql.server_status",
FT_UINT16, BASE_HEX, NULL, 0x0,
"MySQL Status", HFILL }},
{ &hf_mysql_stat_it,
{ "In transaction", "mysql.stat.it",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_IT,
NULL, HFILL }},
{ &hf_mysql_stat_ac,
{ "AUTO_COMMIT", "mysql.stat.ac",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_AC,
NULL, HFILL }},
{ &hf_mysql_stat_mr,
{ "More results", "mysql.stat.mr",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_MR,
NULL, HFILL }},
{ &hf_mysql_stat_mu,
{ "Multi query / Unused", "mysql.stat.mu",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_MU,
"Multi query / Unused with MySQL >= 5.6", HFILL }},
{ &hf_mysql_stat_bi,
{ "Bad index used", "mysql.stat.bi",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_BI,
NULL, HFILL }},
{ &hf_mysql_stat_ni,
{ "No index used", "mysql.stat.ni",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_NI,
NULL, HFILL }},
{ &hf_mysql_stat_cr,
{ "Cursor exists", "mysql.stat.cr",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_CR,
NULL, HFILL }},
{ &hf_mysql_stat_lr,
{ "Last row sent", "mysql.stat.lr",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_LR,
NULL, HFILL }},
{ &hf_mysql_stat_dr,
{ "Database dropped", "mysql.stat.dr",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_DR,
NULL, HFILL }},
{ &hf_mysql_stat_bs,
{ "No backslash escapes", "mysql.stat.bs",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_BS,
NULL, HFILL }},
{ &hf_mysql_stat_mc,
{ "Metadata changed", "mysql.stat.mc",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_MC,
NULL, HFILL }},
{ &hf_mysql_stat_session_state_changed,
{ "Session state changed", "mysql.stat.session_state_changed",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_SESSION_STATE_CHANGED,
NULL, HFILL }},
{ &hf_mysql_stat_query_was_slow,
{ "Query was slow", "mysql.stat.query_was_slow",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_QUERY_WAS_SLOW,
NULL, HFILL }},
{ &hf_mysql_stat_ps_out_params,
{ "PS Out Params", "mysql.stat.ps_out_params",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_PS_OUT_PARAMS,
NULL, HFILL }},
{ &hf_mysql_stat_trans_readonly,
{ "In Trans Readonly", "mysql.stat.trans_readonly",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_STAT_TRANS_READONLY,
NULL, HFILL }},
{ &hf_mysql_refresh,
{ "Refresh Option", "mysql.refresh",
FT_UINT8, BASE_HEX, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_rfsh_grants,
{ "reload permissions", "mysql.rfsh.grants",
FT_BOOLEAN, 8, TFS(&tfs_set_notset), MYSQL_RFSH_GRANT,
NULL, HFILL }},
{ &hf_mysql_rfsh_log,
{ "flush logfiles", "mysql.rfsh.log",
FT_BOOLEAN, 8, TFS(&tfs_set_notset), MYSQL_RFSH_LOG,
NULL, HFILL }},
{ &hf_mysql_rfsh_tables,
{ "flush tables", "mysql.rfsh.tables",
FT_BOOLEAN, 8, TFS(&tfs_set_notset), MYSQL_RFSH_TABLES,
NULL, HFILL }},
{ &hf_mysql_rfsh_hosts,
{ "flush hosts", "mysql.rfsh.hosts",
FT_BOOLEAN, 8, TFS(&tfs_set_notset), MYSQL_RFSH_HOSTS,
NULL, HFILL }},
{ &hf_mysql_rfsh_status,
{ "reset statistics", "mysql.rfsh.status",
FT_BOOLEAN, 8, TFS(&tfs_set_notset), MYSQL_RFSH_STATUS,
NULL, HFILL }},
{ &hf_mysql_rfsh_threads,
{ "empty thread cache", "mysql.rfsh.threads",
FT_BOOLEAN, 8, TFS(&tfs_set_notset), MYSQL_RFSH_THREADS,
NULL, HFILL }},
{ &hf_mysql_rfsh_slave,
{ "flush slave status", "mysql.rfsh.slave",
FT_BOOLEAN, 8, TFS(&tfs_set_notset), MYSQL_RFSH_SLAVE,
NULL, HFILL }},
{ &hf_mysql_rfsh_master,
{ "flush master status", "mysql.rfsh.master",
FT_BOOLEAN, 8, TFS(&tfs_set_notset), MYSQL_RFSH_MASTER,
NULL, HFILL }},
{ &hf_mysql_unused,
{ "Unused", "mysql.unused",
FT_BYTES, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_passwd,
{ "Password", "mysql.passwd",
FT_BYTES, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_payload,
{ "Payload", "mysql.payload",
FT_BYTES, BASE_NONE, NULL, 0x0,
"Additional Payload", HFILL }},
{ &hf_mysql_affected_rows,
{ "Affected Rows", "mysql.affected_rows",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_insert_id,
{ "Last INSERT ID", "mysql.insert_id",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_num_warn,
{ "Warnings", "mysql.warnings",
FT_UINT16, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_stmt_id,
{ "Statement ID", "mysql.stmt_id",
FT_UINT32, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_query_attributes,
{ "Query Attributes", "mysql.query_attrs",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_query_attributes_count,
{ "Count", "mysql.query_attrs_count",
FT_UINT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_query_attributes_send_types_to_server,
{ "Send types to server", "mysql.query_attrs_send_types_to_server",
FT_BOOLEAN, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_query_attribute_name_type,
{ "Attribute Name Type", "mysql.query_attr_name_type",
FT_UINT16, BASE_HEX, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_query_attribute_name,
{ "Attribute Name", "mysql.query_attr_name",
FT_STRING, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_query_attribute_value,
{ "Attribute Value", "mysql.query_attr_value",
FT_STRING, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_query,
{ "Statement", "mysql.query",
FT_STRING, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_shutdown,
{ "Shutdown Level", "mysql.shutdown",
FT_UINT8, BASE_DEC, VALS(mysql_shutdown_vals), 0x0,
NULL, HFILL }},
{ &hf_mysql_option,
{ "Option", "mysql.option",
FT_UINT16, BASE_DEC, VALS(mysql_option_vals), 0x0,
NULL, HFILL }},
{ &hf_mysql_param,
{ "Parameter", "mysql.param",
FT_UINT16, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_num_params,
{ "Number of parameter", "mysql.num_params",
FT_UINT16, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_num_rows,
{ "Rows to fetch", "mysql.num_rows",
FT_UINT32, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_flags4,
{ "Flags (unused)", "mysql.exec_flags",
FT_UINT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_flags5,
{ "Flags", "mysql.exec_flags",
FT_UINT8, BASE_DEC, VALS(mysql_exec_flags_vals), 0x0,
NULL, HFILL }},
{ &hf_mysql_new_parameter_bound_flag,
{ "New parameter bound flag", "mysql.new_parameter_bound_flag",
FT_UINT8, BASE_DEC, VALS(mysql_new_parameter_bound_flag_vals), 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_iter,
{ "Iterations (unused)", "mysql.exec_iter",
FT_UINT32, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_binlog_position,
{ "Binlog Position", "mysql.binlog.position",
FT_UINT32, BASE_DEC, NULL, 0x0,
"Position to start at", HFILL }},
{ &hf_mysql_binlog_flags,
{ "Binlog Flags", "mysql.binlog.flags",
FT_UINT16, BASE_HEX, NULL, 0x0,
"(currently not used; always 0)", HFILL }},
{ &hf_mysql_binlog_server_id,
{ "Binlog server id", "mysql.binlog.server_id",
FT_UINT32, BASE_HEX, NULL, 0x0,
"server_id of the slave", HFILL }},
{ &hf_mysql_binlog_slave_hostname_length,
{ "Slave hostname length", "mysql.binlog.slave_hostname_length",
FT_UINT8, BASE_DEC, NULL, 0x0,
"slave_hostname field length", HFILL }},
{ &hf_mysql_binlog_slave_hostname,
{ "Slave hostname", "mysql.binlog.slave_hostname",
FT_STRING, BASE_NONE, NULL, 0x0,
"slave_hostname", HFILL }},
{ &hf_mysql_binlog_slave_user_length,
{ "Slave user length", "mysql.binlog.slave_user_length",
FT_UINT8, BASE_DEC, NULL, 0x0,
"slave_hostname field length", HFILL }},
{ &hf_mysql_binlog_slave_user,
{ "Slave user", "mysql.binlog.slave_user",
FT_STRING, BASE_NONE, NULL, 0x0,
"slave_user", HFILL }},
{ &hf_mysql_binlog_slave_password_length,
{ "Slave password length", "mysql.binlog.slave_password_length",
FT_UINT8, BASE_DEC, NULL, 0x0,
"slave_password field length", HFILL }},
{ &hf_mysql_binlog_slave_password,
{ "Slave password", "mysql.binlog.slave_password",
FT_STRING, BASE_NONE, NULL, 0x0,
"slave_password", HFILL }},
{ &hf_mysql_binlog_slave_mysql_port,
{ "Slave MySQL port", "mysql.binlog.slave_mysql_port",
FT_UINT16, BASE_DEC, NULL, 0x0,
"slave's mysql port", HFILL }},
{ &hf_mysql_binlog_replication_rank,
{ "Replication rank", "mysql.binlog.replication_rank",
FT_UINT32, BASE_DEC, NULL, 0x0,
"ignored", HFILL }},
{ &hf_mysql_binlog_master_id,
{ "Master id", "mysql.binlog.master_id",
FT_UINT32, BASE_HEX, NULL, 0x0,
"master_id of the slave", HFILL }},
{ &hf_mysql_binlog_file_name,
{ "Binlog file name", "mysql.binlog.file_name",
FT_STRINGZ, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_binlog_event_header_timestamp,
{ "Timestamp", "mysql.binlog.event_header.timestamp",
FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_binlog_event_header_event_type,
{ "Binlog Event Type", "mysql.binlog.event_header.event_type",
FT_UINT8, BASE_DEC, VALS(mysql_binlog_event_type_vals), 0x0,
"event type", HFILL }},
{ &hf_mysql_binlog_event_header_server_id,
{ "Server ID", "mysql.binlog.event_header.server_id",
FT_UINT32, BASE_DEC, NULL, 0x0,
"server-id of the originating mysql-server", HFILL }},
{ &hf_mysql_binlog_event_header_event_size,
{ "Event Size", "mysql.binlog.event_header.event_size",
FT_UINT32, BASE_DEC, NULL, 0x0,
"size of the event (header, post-header, body)", HFILL }},
{ &hf_mysql_binlog_event_header_log_position,
{ "Binlog Position", "mysql.binlog.event_header.log_position",
FT_UINT32, BASE_DEC, NULL, 0x0,
"position of the next event", HFILL }},
{ &hf_mysql_binlog_event_header_flags,
{ "Binlog Event Flags", "mysql.binlog.event_header.flags",
FT_UINT16, BASE_HEX, NULL, 0x0,
"flag", HFILL }},
{ &hf_mysql_binlog_event_checksum,
{ "Checksum", "mysql.binlog.event_checksum",
FT_UINT32, BASE_HEX, NULL, 0x0,
"binlog event checksum", HFILL }},
{ &hf_mysql_binlog_event_heartbeat_v2,
{ "Binlog Event: HEARTBEAT_LOG_EVENT_V2", "mysql.binlog.event_heartbeat_v2",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_binlog_event_heartbeat_v2_otw,
{ "Entry", "mysql.binlog.event_heartbeat_v2_otw",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_binlog_event_heartbeat_v2_otw_type,
{ "Type", "mysql.binlog.event_heartbeat_v2_otw_type",
FT_UINT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_binlog_hb_event_filename,
{ "Binlog Filename", "mysql.binlog.hb_event.filename",
FT_STRING, BASE_NONE, NULL, 0x0,
"filename", HFILL }},
{ &hf_mysql_binlog_hb_event_log_position,
{ "Binlog Position", "mysql.binlog.hb_event.log_position",
FT_UINT64, BASE_DEC, NULL, 0x0,
"position of the next event", HFILL }},
{ &hf_mysql_eof,
{ "EOF marker", "mysql.eof",
FT_UINT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_num_fields,
{ "Number of fields", "mysql.num_fields",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_send_meta,
{ "send metadata", "mysql.metadata_follows",
FT_UINT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_extra,
{ "Extra data", "mysql.extra",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_fld_catalog,
{ "Catalog", "mysql.field.catalog",
FT_STRING, BASE_NONE, NULL, 0x0,
"Field: catalog", HFILL }},
{ &hf_mysql_fld_db,
{ "Database", "mysql.field.db",
FT_STRING, BASE_NONE, NULL, 0x0,
"Field: database", HFILL }},
{ &hf_mysql_fld_table,
{ "Table", "mysql.field.table",
FT_STRING, BASE_NONE, NULL, 0x0,
"Field: table", HFILL }},
{ &hf_mysql_fld_org_table,
{ "Original table", "mysql.field.org_table",
FT_STRING, BASE_NONE, NULL, 0x0,
"Field: original table", HFILL }},
{ &hf_mysql_fld_name,
{ "Name", "mysql.field.name",
FT_STRING, BASE_NONE, NULL, 0x0,
"Field: name", HFILL }},
{ &hf_mysql_fld_org_name,
{ "Original name", "mysql.field.org_name",
FT_STRING, BASE_NONE, NULL, 0x0,
"Field: original name", HFILL }},
{ &hf_mysql_fld_charsetnr,
{ "Charset number", "mysql.field.charsetnr",
FT_UINT16, BASE_DEC|BASE_EXT_STRING, &mysql_collation_vals_ext, 0x0,
"Field: charset number", HFILL }},
//{ &hf_mariadb_fld_charsetnr,
//{ "Charset number", "mariadb.field.charsetnr",
//FT_UINT16, BASE_DEC|BASE_EXT_STRING, &mariadb_collation_vals_ext, 0x0,
//"Field: charset number", HFILL }},
{ &hf_mysql_fld_length,
{ "Length", "mysql.field.length",
FT_UINT32, BASE_DEC, NULL, 0x0,
"Field: length", HFILL }},
{ &hf_mysql_fld_type,
{ "Type", "mysql.field.type",
FT_UINT8, BASE_DEC, VALS(type_constants), 0x0,
"Field: type", HFILL }},
{ &hf_mysql_fld_flags,
{ "Flags", "mysql.field.flags",
FT_UINT16, BASE_HEX, NULL, 0x0,
"Field: flags", HFILL }},
{ &hf_mysql_fld_not_null,
{ "Not null", "mysql.field.flags.not_null",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_FLD_NOT_NULL_FLAG,
"Field: flag not null", HFILL }},
{ &hf_mysql_fld_primary_key,
{ "Primary key", "mysql.field.flags.primary_key",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_FLD_PRI_KEY_FLAG,
"Field: flag primary key", HFILL }},
{ &hf_mysql_fld_unique_key,
{ "Unique key", "mysql.field.flags.unique_key",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_FLD_UNIQUE_KEY_FLAG,
"Field: flag unique key", HFILL }},
{ &hf_mysql_fld_multiple_key,
{ "Multiple key", "mysql.field.flags.multiple_key",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_FLD_MULTIPLE_KEY_FLAG,
"Field: flag multiple key", HFILL }},
{ &hf_mysql_fld_blob,
{ "Blob", "mysql.field.flags.blob",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_FLD_BLOB_FLAG,
"Field: flag blob", HFILL }},
{ &hf_mysql_fld_unsigned,
{ "Unsigned", "mysql.field.flags.unsigned",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_FLD_UNSIGNED_FLAG,
"Field: flag unsigned", HFILL }},
{ &hf_mysql_fld_zero_fill,
{ "Zero fill", "mysql.field.flags.zero_fill",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_FLD_ZEROFILL_FLAG,
"Field: flag zero fill", HFILL }},
{ &hf_mysql_null_buffer,
{ "Row null buffer", "mysql.row.nullbuffer",
FT_BYTES, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_fld_enum,
{ "Enum", "mysql.field.flags.enum",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_FLD_ENUM_FLAG,
"Field: flag enum", HFILL }},
{ &hf_mysql_fld_auto_increment,
{ "Auto increment", "mysql.field.flags.auto_increment",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_FLD_AUTO_INCREMENT_FLAG,
"Field: flag auto increment", HFILL }},
{ &hf_mysql_fld_timestamp,
{ "Timestamp", "mysql.field.flags.timestamp",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_FLD_TIMESTAMP_FLAG,
"Field: flag timestamp", HFILL }},
{ &hf_mysql_fld_set,
{ "Set", "mysql.field.flags.set",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MYSQL_FLD_SET_FLAG,
"Field: flag set", HFILL }},
{ &hf_mysql_fld_decimals,
{ "Decimals", "mysql.field.decimals",
FT_UINT8, BASE_DEC, NULL, 0x0,
"Field: decimals", HFILL }},
{ &hf_mysql_fld_default,
{ "Default", "mysql.field.default",
FT_STRING, BASE_NONE, NULL, 0x0,
"Field: default", HFILL }},
{ &hf_mysql_row_text,
{ "text", "mysql.row.text",
FT_STRING, BASE_NONE, NULL, 0x0,
"Field: row packet text", HFILL }},
{ &hf_mysql_exec_param,
{ "Parameter", "mysql.exec_param",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_unsigned,
{ "Unsigned", "mysql.exec.unsigned",
FT_UINT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_longlong,
{ "Value (INT64)", "mysql.exec.field.longlong",
FT_INT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_unsigned_longlong,
{ "Value (UINT64)", "mysql.exec.field.unsigned_longlong",
FT_UINT64, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_string,
{ "Value (String)", "mysql.exec.field.string",
FT_UINT_STRING, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_double,
{ "Value (Double)", "mysql.exec.field.double",
FT_DOUBLE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_datetime_length,
{ "Length", "mysql.exec.field.datetime.length",
FT_INT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_year,
{ "Year", "mysql.exec.field.year",
FT_INT16, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_month,
{ "Month", "mysql.exec.field.month",
FT_INT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_day,
{ "Day", "mysql.exec.field.day",
FT_INT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_hour,
{ "Hour", "mysql.exec.field.hour",
FT_INT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_minute,
{ "Minute", "mysql.exec.field.minute",
FT_INT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_second,
{ "Second", "mysql.exec.field.second",
FT_INT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_second_b,
{ "Billionth of a second", "mysql.exec.field.secondb",
FT_INT32, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_long,
{ "Value (INT32)", "mysql.exec.field.long",
FT_INT32, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_unsigned_long,
{ "Value (UINT32)", "mysql.exec.field.unsigned_long",
FT_UINT32, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_tiny,
{ "Value (INT8)", "mysql.exec.field.tiny",
FT_INT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_unsigned_tiny,
{ "Value (UINT8)", "mysql.exec.field.unsigned_tiny",
FT_UINT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_short,
{ "Value (INT16)", "mysql.exec.field.short",
FT_INT16, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_unsigned_short,
{ "Value (UINT16)", "mysql.exec.field.unsigned_short",
FT_UINT16, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_float,
{ "Value (Float)", "mysql.exec.field.float",
FT_FLOAT, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_null,
{ "Value: -NULL-", "mysql.exec.field.null",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_time_length,
{ "Length", "mysql.exec.field.time.length",
FT_INT8, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_time_sign,
{ "Flags", "mysql.exec.field.time.sign",
FT_UINT8, BASE_DEC, VALS(mysql_exec_time_sign_vals), 0x0,
NULL, HFILL }},
{ &hf_mysql_exec_field_time_days,
{ "Days", "mysql.exec.field.time.days",
FT_INT32, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_auth_switch_request_status,
{ "Status", "mysql.auth_switch_request.status",
FT_UINT8, BASE_HEX, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_auth_switch_request_name,
{ "Auth Method Name", "mysql.auth_switch_request.name",
FT_STRING, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_auth_switch_request_data,
{ "Auth Method Data", "mysql.auth_switch_request.data",
FT_BYTES, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_auth_switch_response_data,
{ "Auth Method Data", "mysql.auth_switch_response.data",
FT_BYTES, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_compressed_packet_length,
{ "Compressed Packet Length", "mysql.compressed_packet_length",
FT_UINT24, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_compressed_packet_number,
{ "Compressed Packet Number", "mysql.compressed_packet_number",
FT_UINT24, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mysql_compressed_packet_length_uncompressed,
{ "Uncompressed Packet Length", "mysql.compressed_packet_length_uncompressed",
FT_UINT24, BASE_DEC, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_cap_progress,
{ "Progress indication", "mariadb.caps.pr",
FT_BOOLEAN, 32, TFS(&tfs_set_notset), MARIADB_CAPS_PR,
NULL, HFILL }},
{ &hf_mariadb_cap_commulti,
{ "Multi commands", "mariadb.caps.cm",
FT_BOOLEAN, 32, TFS(&tfs_set_notset), MARIADB_CAPS_CM,
NULL, HFILL }},
{ &hf_mariadb_cap_bulk,
{ "Bulk Operations", "mariadb.caps.bo",
FT_BOOLEAN, 32, TFS(&tfs_set_notset), MARIADB_CAPS_BO,
NULL, HFILL }},
{ &hf_mariadb_cap_extmetadata,
{ "Extended metadata", "mariadb.caps.em",
FT_BOOLEAN, 32, TFS(&tfs_set_notset), MARIADB_CAPS_EM,
NULL, HFILL }},
{ &hf_mariadb_cap_cache_metadata,
{ "Cache metadata", "mariadb.caps.me",
FT_BOOLEAN, 32, TFS(&tfs_set_notset), MARIADB_CAPS_ME,
NULL, HFILL }},
{ &hf_mariadb_extcaps_server,
{ "MariaDB Extended Server Capabilities", "mariadb.extcaps.server",
FT_UINT32, BASE_HEX, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_extcaps_client,
{ "MariaDB Extended Client Capabilities", "mariadb.extcaps.client",
FT_UINT32, BASE_HEX, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_bulk_flag_autoid,
{ "Return Generated Autoincrement IDs", "mariadb.bulk.flag.autoid",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MARIADB_BULK_AUTOID,
NULL, HFILL }},
{ &hf_mariadb_bulk_flag_sendtypes,
{ "Send Parameter Types", "mariadb.bulk.flag.sendtypes",
FT_BOOLEAN, 16, TFS(&tfs_set_notset), MARIADB_BULK_SEND_TYPES,
NULL, HFILL }},
{ &hf_mariadb_bulk_caps_flags,
{ "MariaDB Bulk Capabilities", "mariadb.bulk.flags",
FT_UINT16, BASE_HEX, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_bulk_paramtypes,
{ "Bulk Parameter Types", "mariadb.bulk.paramtypesg",
FT_NONE, BASE_NONE, NULL, 0x0,
NULL, HFILL }},
{ &hf_mariadb_bulk_indicator,
{ "Indicator", "mariadb.bulk.indicators",
FT_UINT8, BASE_HEX, VALS(mariadb_bulk_indicator_vals), 0x00,
NULL, HFILL }},
{ &hf_mariadb_bulk_row_nr,
{ "Row nr", "mariadb.bulk.row_nr",
FT_UINT32, BASE_DEC, NULL, 0x00,
NULL, HFILL }},
{ &hf_mysql_prefix,
{ "Prefix", "mariadb.prefix",
FT_UINT8, BASE_DEC, NULL, 0x00,
NULL, HFILL }},
{ &hf_mysql_length,
{ "Length", "mariadb.length",
FT_UINT64, BASE_DEC, NULL, 0x00,
NULL, HFILL }}
};
static gint *ett[]=
{
&ett_mysql,
&ett_server_greeting,
&ett_login_request,
&ett_caps,
&ett_extcaps,
&ett_stat,
&ett_row_value,
&ett_request,
&ett_refresh,
&ett_field_flags,
&ett_exec_param,
&ett_bulk_param,
&ett_session_track,
&ett_session_track_data,
&ett_extmeta,
&ett_extmeta_data,
&ett_connattrs,
&ett_connattrs_attr,
&ett_mysql_field,
&ett_query_attributes,
&ett_binlog_event,
&ett_binlog_event_hb_v2
};
static ei_register_info ei[] = {
{ &ei_mysql_dissector_incomplete, { "mysql.dissector_incomplete", PI_UNDECODED, PI_WARN, "FIXME - dissector is incomplete", EXPFILL }},
{ &ei_mysql_streamed_param, { "mysql.streamed_param", PI_SEQUENCE, PI_CHAT, "This parameter was streamed, its value can be found in Send BLOB packets", EXPFILL }},
{ &ei_mysql_prepare_response_needed, { "mysql.prepare_response_needed", PI_UNDECODED, PI_WARN, "PREPARE Response packet is needed to dissect the payload", EXPFILL }},
{ &ei_mysql_command, { "mysql.command.invalid", PI_PROTOCOL, PI_WARN, "Unknown/invalid command code", EXPFILL }},
{ &ei_mysql_unknown_response, { "mysql.unknown_response", PI_UNDECODED, PI_WARN, "unknown/invalid response", EXPFILL }},
{ &ei_mysql_invalid_length, { "mysql.invalid_length", PI_MALFORMED, PI_ERROR, "Invalid length", EXPFILL }},
};
module_t *mysql_module;
expert_module_t* expert_mysql;
proto_mysql = proto_register_protocol("MySQL Protocol", "MySQL", "mysql");
proto_register_field_array(proto_mysql, hf, array_length(hf));
proto_register_subtree_array(ett, array_length(ett));
expert_mysql = expert_register_protocol(proto_mysql);
expert_register_field_array(expert_mysql, ei, array_length(ei));
mysql_module = prefs_register_protocol(proto_mysql, NULL);
prefs_register_bool_preference(mysql_module, "desegment_buffers",
"Reassemble MySQL buffers spanning multiple TCP segments",
"Whether the MySQL dissector should reassemble MySQL buffers spanning multiple TCP segments."
" To use this option, you must also enable \"Allow subdissectors to reassemble TCP streams\" in the TCP protocol settings.",
&mysql_desegment);
prefs_register_bool_preference(mysql_module, "show_sql_query",
"Show SQL Query string in INFO column",
"Whether the MySQL dissector should display the SQL query string in the INFO column.",
&mysql_showquery);
mysql_handle = register_dissector("mysql", dissect_mysql, proto_mysql);
}
/* dissector registration */
void proto_reg_handoff_mysql(void)
{
tls_handle = find_dissector("tls");
dissector_add_uint_with_preference("tcp.port", TCP_PORT_MySQL, mysql_handle);
}
/*
* Editor modelines - https://www.wireshark.org/tools/modelines.html
*
* Local variables:
* c-basic-offset: 8
* tab-width: 8
* indent-tabs-mode: t
* End:
*
* vi: set shiftwidth=8 tabstop=8 noexpandtab:
* :indentSize=8:tabSize=8:noTabs=false:
*/
View Git Blame Copy Permalink