wireshark/packet-ismp.c

875 lines
30 KiB
C

/* packet-ismp.c
* Routines for ISMP dissection
* Enterasys Networks Home: http://www.enterasys.com/
* Copyright 2003, Joshua Craig Douglas <jdouglas@enterasys.com>
*
* $Id: packet-ismp.c,v 1.4 2004/02/18 10:11:51 guy Exp $
*
* Ethereal - Network traffic analyzer
* By Gerald Combs <gerald@ethereal.com>
* Copyright 1998 Gerald Combs
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*/
#ifdef HAVE_CONFIG_H
# include "config.h"
#endif
#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <glib.h>
#ifdef NEED_SNPRINTF_H
# include "snprintf.h"
#endif
#include <epan/packet.h>
#include <epan/strutil.h>
#include "etypes.h"
/* Initialize the protocol and registered fields */
static int proto_ismp = -1;
static int hf_ismp_version = -1;
static int hf_ismp_message_type = -1;
static int hf_ismp_seq_num = -1;
static int hf_ismp_code_length = -1;
static int hf_ismp_auth_data = -1;
/* Enterasys/Cabletron Dicovery Protocol fields*/
static int hf_ismp_edp_version = -1;
static int hf_ismp_edp_module_ip = -1;
static int hf_ismp_edp_module_mac = -1;
static int hf_ismp_edp_module_port = -1;
static int hf_ismp_edp_chassis_mac =-1;
static int hf_ismp_edp_chassis_ip = -1;
static int hf_ismp_edp_device_type = -1;
static int hf_ismp_edp_module_rev = -1;
static int hf_ismp_edp_options = -1;
static int hf_ismp_edp_sfs_option_unused1 = -1;
static int hf_ismp_edp_sfs_option_sfssup = -1;
static int hf_ismp_edp_sfs_option_lsp = -1;
static int hf_ismp_edp_sfs_option_flood = -1;
static int hf_ismp_edp_sfs_option_resolve = -1;
static int hf_ismp_edp_sfs_option_unused2 = -1;
static int hf_ismp_edp_sfs_option_tagflood = -1;
static int hf_ismp_edp_sfs_option_calltap = -1;
static int hf_ismp_edp_sfs_option_conmsg = -1;
static int hf_ismp_edp_sfs_option_redun = -1;
static int hf_ismp_edp_sfs_option_isolated = -1;
static int hf_ismp_edp_sfs_option_uplink_switch = -1;
static int hf_ismp_edp_sfs_option_uplink_core = -1;
static int hf_ismp_edp_sfs_option_uplink_port = -1;
static int hf_ismp_edp_sfs_option_uplink_flood = -1;
static int hf_ismp_edp_rtr_option_ssr = -1;
static int hf_ismp_edp_rtr_option_igmp = -1;
static int hf_ismp_edp_rtr_option_rip = -1;
static int hf_ismp_edp_rtr_option_bgp = -1;
static int hf_ismp_edp_rtr_option_ospf = -1;
static int hf_ismp_edp_rtr_option_dvmrp = -1;
static int hf_ismp_edp_rtr_option_8021q = -1;
static int hf_ismp_edp_rtr_option_gvrp = -1;
static int hf_ismp_edp_rtr_option_gmrp = -1;
static int hf_ismp_edp_rtr_option_igmp_snoop = -1;
static int hf_ismp_edp_rtr_option_route = -1;
static int hf_ismp_edp_rtr_option_trans = -1;
static int hf_ismp_edp_rtr_option_level1 = -1;
static int hf_ismp_edp_switch_option_8021q = -1;
static int hf_ismp_edp_switch_option_gvrp = -1;
static int hf_ismp_edp_switch_option_gmrp = -1;
static int hf_ismp_edp_switch_option_igmp = -1;
static int hf_ismp_edp_switch_option_route = -1;
static int hf_ismp_edp_switch_option_trans = -1;
static int hf_ismp_edp_switch_option_level1 = -1;
static int hf_ismp_edp_end_station_option_dhcp = -1;
static int hf_ismp_edp_end_station_option_dns = -1;
static int hf_ismp_edp_end_station_option_ad = -1;
static int hf_ismp_edp_num_neighbors = -1;
static int hf_ismp_edp_neighbors = -1;
static int hf_ismp_edp_num_tuples = -1;
static int hf_ismp_edp_tuples = -1;
/* Initialize the subtree pointers */
static gint ett_ismp = -1;
static gint ett_ismp_edp = -1;
static gint ett_ismp_edp_options = -1;
static gint ett_ismp_edp_neighbors = -1;
static gint ett_ismp_edp_neighbors_leaf = -1;
static gint ett_ismp_edp_tuples = -1;
static gint ett_ismp_edp_tuples_leaf = -1;
/* ISMP TYPES */
#define ISMPTYPE_EDP 2
/* EDP DEVICE TYPES */
#define EDP_DEVICE_TYPE_SFS17 1
#define EDP_DEVICE_TYPE_SFS18 2
#define EDP_DEVICE_TYPE_ROUTER 3
#define EDP_DEVICE_TYPE_BRIDGE 4
#define EDP_DEVICE_TYPE_VLANMAN 5
#define EDP_DEVICE_TYPE_NTSERVER 6
#define EDP_DEVICE_TYPE_NTCLIENT 7
#define EDP_DEVICE_TYPE_WIN95 8
#define EDP_DEVICE_TYPE_WIN98 9
#define EDP_DEVICE_TYPE_UNIXSERVER 10
#define EDP_DEVICE_TYPE_UNIXCLIENT 11
#define EDP_DEVICE_TYPE_ACCESSPOINT 12
static const value_string edp_device_types[] = {
{ EDP_DEVICE_TYPE_SFS17, "Network Switch running SecureFast version 1.7 or lower" },
{ EDP_DEVICE_TYPE_SFS18, "Network Switch running SecureFast version 1.8 or greater" },
{ EDP_DEVICE_TYPE_ROUTER, "Router" },
{ EDP_DEVICE_TYPE_BRIDGE, "Bridge" },
{ EDP_DEVICE_TYPE_VLANMAN, "Cabletron VLAN Manager" },
{ EDP_DEVICE_TYPE_NTSERVER, "Network Server (NT)" },
{ EDP_DEVICE_TYPE_NTCLIENT, "Network Workstation (NT)" },
{ EDP_DEVICE_TYPE_WIN95, "Windows95" },
{ EDP_DEVICE_TYPE_WIN98, "Windows98" },
{ EDP_DEVICE_TYPE_UNIXSERVER, "UNIX Server" },
{ EDP_DEVICE_TYPE_UNIXCLIENT, "UNIX Workstation" },
{ EDP_DEVICE_TYPE_ACCESSPOINT, "Roamabout wireless access point" },
{ 0, NULL },
};
/* EDP SFS Options */
#define EDP_SFS_OPTION_UNUSED1 0x1
#define EDP_SFS_OPTION_SFSSUP 0x2
#define EDP_SFS_OPTION_LSP 0x4
#define EDP_SFS_OPTION_FLOOD 0x8
#define EDP_SFS_OPTION_RESOLVE 0x10
#define EDP_SFS_OPTION_UNUSED2 0x20
#define EDP_SFS_OPTION_TAGFLOOD 0x40
#define EDP_SFS_OPTION_CALLTAP 0x80
#define EDP_SFS_OPTION_CONMSG 0x100
#define EDP_SFS_OPTION_REDUN 0x200
#define EDP_SFS_OPTION_ISOLATED 0x400
#define EDP_SFS_OPTION_UPLINK_SWITCH 0x800
#define EDP_SFS_OPTION_UPLINK_CORE 0x1000
#define EDP_SFS_OPTION_UPLINK_PORT 0x2000
#define EDP_SFS_OPTION_UPLINK_FLOOD 0x4000
/* EDP Router Options */
#define EDP_RTR_OPTION_SSR 0x1
#define EDP_RTR_OPTION_IGMP 0x2
#define EDP_RTR_OPTION_RIP 0x4
#define EDP_RTR_OPTION_BGP 0x8
#define EDP_RTR_OPTION_OSPF 0x10
#define EDP_RTR_OPTION_DVMRP 0x20
#define EDP_RTR_OPTION_8021Q 0x40
#define EDP_RTR_OPTION_GVRP 0x80
#define EDP_RTR_OPTION_GMRP 0x100
#define EDP_RTR_OPTION_IGMP_SNOOP 0x200
#define EDP_RTR_OPTION_ROUTE 0x400
#define EDP_RTR_OPTION_TRANS 0x800
#define EDP_RTR_OPTION_LEVEL1 0x1000
/* EDP Switch Options */
#define EDP_SWITCH_OPTION_8021Q 0x1
#define EDP_SWITCH_OPTION_GVRP 0x2
#define EDP_SWITCH_OPTION_GMRP 0x4
#define EDP_SWITCH_OPTION_IGMP 0x8
#define EDP_SWITCH_OPTION_ROUTE 0x10
#define EDP_SWITCH_OPTION_TRANS 0x20
#define EDP_SWITCH_OPTION_LEVEL1 0x40
/* EDP End Station and Server Options */
#define EDP_END_STATION_OPTION_DHCP 0x1
#define EDP_END_STATION_OPTION_DNS 0x2
#define EDP_END_STATION_OPTION_AD 0x4
/* EDP Tuple Types */
#define EDP_TUPLE_UNKNOWN 0
#define EDP_TUPLE_HOLD 1
#define EDP_TUPLE_INT_NAME 2
#define EDP_TUPLE_SYS_DESCRIPT 3
#define EDP_TUPLE_IPX_ADDR 4
static const value_string edp_tuple_types[] =
{
{ EDP_TUPLE_UNKNOWN,"Unknown" },
{ EDP_TUPLE_HOLD,"Hold Time" },
{ EDP_TUPLE_INT_NAME,"Interface Name" },
{ EDP_TUPLE_SYS_DESCRIPT,"System Description" },
{ EDP_TUPLE_IPX_ADDR,"IPX Address" },
{ 0,NULL }
};
/* Is value set? */
static const true_false_string is_set = {
"set",
"not set"
};
/* Function to dissect EDP portion of ISMP message */
static void
dissect_ismp_edp(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *ismp_tree)
{
/* local variables used for EDP dissection */
int neighbors_count = 0;
int tuples_count = 0;
guint16 device_type = 0;
guint32 options = 0;
guint16 num_neighbors = 0;
guint16 num_tuples = 0;
guint16 tuple_type = 0;
guint16 tuple_length = 0;
const guint8 *neighbors_ptr;
const guint8 *tuples_ptr;
/* Set up structures needed to add the protocol subtree and manage it */
proto_item *edp_ti;
proto_tree *ismp_edp_tree;
proto_item *edp_options_ti;
proto_tree *edp_options_tree;
proto_item *edp_neighbors_ti;
proto_tree *edp_neighbors_tree;
proto_item *edp_neighbors_leaf_ti;
proto_tree *edp_neighbors_leaf_tree;
proto_item *edp_tuples_ti;
proto_tree *edp_tuples_tree;
proto_item *edp_tuples_leaf_ti;
proto_tree *edp_tuples_leaf_tree;
/* add column iformation marking this as EDP (Enterasys Discover Protocol */
if (check_col(pinfo->cinfo, COL_PROTOCOL))
col_set_str(pinfo->cinfo, COL_PROTOCOL, "EDP Message");
if (check_col(pinfo->cinfo, COL_INFO))
col_clear(pinfo->cinfo, COL_INFO);
/* create display subtree for EDP */
if (ismp_tree) {
edp_ti = proto_tree_add_text(ismp_tree, tvb, offset, 0, "Enterasys Discovery Protocol");
ismp_edp_tree = proto_item_add_subtree(edp_ti, ett_ismp_edp);
proto_tree_add_item(ismp_edp_tree, hf_ismp_edp_version, tvb, offset, 2, FALSE);
offset += 2;
proto_tree_add_item(ismp_edp_tree, hf_ismp_edp_module_ip, tvb, offset, 4, FALSE);
offset += 4;
proto_tree_add_item(ismp_edp_tree, hf_ismp_edp_module_mac, tvb, offset, 6, FALSE);
offset += 6;
proto_tree_add_item(ismp_edp_tree, hf_ismp_edp_module_port, tvb, offset, 4, FALSE);
offset += 4;
proto_tree_add_item(ismp_edp_tree, hf_ismp_edp_chassis_mac, tvb, offset, 6, FALSE);
offset += 6;
proto_tree_add_item(ismp_edp_tree, hf_ismp_edp_chassis_ip, tvb, offset, 4, FALSE);
offset += 4;
device_type = tvb_get_ntohs(tvb, offset);
proto_tree_add_item(ismp_edp_tree, hf_ismp_edp_device_type, tvb, offset, 2, FALSE);
offset += 2;
proto_tree_add_uint_format(ismp_edp_tree, hf_ismp_edp_module_rev, tvb, offset, 4, tvb_get_ntohl(tvb, offset),
"Module Firmware Revision: %02x.%02x.%02x.%02x", tvb_get_guint8(tvb, offset),
tvb_get_guint8(tvb, offset+1), tvb_get_guint8(tvb, offset+2), tvb_get_guint8(tvb, offset+3));
offset += 4;
/* create display subtree for EDP options */
options = tvb_get_ntohl(tvb, offset);
edp_options_ti = proto_tree_add_uint_format(ismp_edp_tree, hf_ismp_edp_options, tvb, offset, 4,
options,"Options: 0x%08x",options);
edp_options_tree = proto_item_add_subtree(edp_options_ti, ett_ismp_edp_options);
/* depending on device_type, show the appropriate options */
switch (device_type) {
case EDP_DEVICE_TYPE_SFS17:
case EDP_DEVICE_TYPE_SFS18:
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_uplink_flood, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_uplink_port, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_uplink_core, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_uplink_switch, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_isolated, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_redun, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_conmsg, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_calltap, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_tagflood, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_unused2, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_resolve, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_flood, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_lsp, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_sfssup, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_sfs_option_unused1, tvb, offset, 4, FALSE);
break;
case EDP_DEVICE_TYPE_ROUTER:
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_level1, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_trans, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_route, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_igmp_snoop, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_gmrp, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_gvrp, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_8021q, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_dvmrp, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_ospf, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_bgp, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_rip, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_igmp, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_rtr_option_ssr, tvb, offset, 4, FALSE);
break;
case EDP_DEVICE_TYPE_BRIDGE:
proto_tree_add_item(edp_options_tree, hf_ismp_edp_switch_option_level1, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_switch_option_trans, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_switch_option_route, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_switch_option_igmp, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_switch_option_gmrp, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_switch_option_gvrp, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_switch_option_8021q, tvb, offset, 4, FALSE);
break;
case EDP_DEVICE_TYPE_VLANMAN:
break;
case EDP_DEVICE_TYPE_NTSERVER:
case EDP_DEVICE_TYPE_NTCLIENT:
case EDP_DEVICE_TYPE_WIN95:
case EDP_DEVICE_TYPE_WIN98:
case EDP_DEVICE_TYPE_UNIXSERVER:
case EDP_DEVICE_TYPE_UNIXCLIENT:
proto_tree_add_item(edp_options_tree, hf_ismp_edp_end_station_option_ad, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_end_station_option_dns, tvb, offset, 4, FALSE);
proto_tree_add_item(edp_options_tree, hf_ismp_edp_end_station_option_dhcp, tvb, offset, 4, FALSE);
break;
case EDP_DEVICE_TYPE_ACCESSPOINT:
default:
break;
}
offset += 4;
/* determine the number of neighbors and create EDP neighbors subtree */
num_neighbors = tvb_get_ntohs(tvb, offset);
proto_tree_add_item(ismp_edp_tree, hf_ismp_edp_num_neighbors, tvb, offset, 2, FALSE);
offset += 2;
if (num_neighbors > 0)
{
if (tvb_reported_length_remaining(tvb, offset) >= (num_neighbors *10))
{
neighbors_ptr = tvb_get_ptr( tvb, offset, (num_neighbors*10) );
edp_neighbors_ti = proto_tree_add_bytes_format(ismp_edp_tree, hf_ismp_edp_neighbors, tvb,
offset, num_neighbors*10, neighbors_ptr, "Neighbors:");
}
else
{
neighbors_ptr = tvb_get_ptr( tvb, offset, tvb_reported_length_remaining(tvb, offset) );
edp_neighbors_ti = proto_tree_add_bytes_format(ismp_edp_tree, hf_ismp_edp_neighbors, tvb,
offset, num_neighbors *10, neighbors_ptr, "Neighbors:");
}
edp_neighbors_tree = proto_item_add_subtree(edp_neighbors_ti, ett_ismp_edp_neighbors);
while ( neighbors_count < num_neighbors && tvb_reported_length_remaining(tvb, offset) >= 10)
{
edp_neighbors_leaf_ti = proto_tree_add_text(edp_neighbors_tree, tvb, offset, 10,
"Neighbor%d", (neighbors_count+1));
edp_neighbors_leaf_tree = proto_item_add_subtree(edp_neighbors_leaf_ti, ett_ismp_edp_neighbors_leaf);
proto_tree_add_text(edp_neighbors_leaf_tree, tvb, offset, 6,
"MAC Address: %s", ether_to_str(tvb_get_ptr(tvb, offset, 6)));
proto_tree_add_text(edp_neighbors_leaf_tree, tvb, offset, 4,
"Assigned Neighbor State 0x%04x",tvb_get_ntohl(tvb, offset));
offset += 10;
neighbors_count++;
}
if (neighbors_count != num_neighbors)
{
proto_tree_add_text(ismp_edp_tree, tvb, offset, tvb_reported_length_remaining(tvb, offset),
"MALFORMED PACKET");
return;
}
}
/* determine data remains, if so, count tuples
and create EDP tuples subtree */
if (tvb_reported_length_remaining(tvb, offset) != 0 &&
tvb_reported_length_remaining(tvb, offset) >= 2)
{
num_tuples = tvb_get_ntohs(tvb, offset);
proto_tree_add_item(ismp_edp_tree, hf_ismp_edp_num_tuples, tvb, offset, 2, FALSE);
offset += 2;
}
else if (tvb_reported_length_remaining(tvb, offset) > 0) {
proto_tree_add_text(ismp_edp_tree, tvb, offset,
tvb_reported_length_remaining(tvb, offset), "MALFORMED PACKET");
return;
}
else
{
return;
}
/* start populating tuple information */
if (num_tuples && tvb_reported_length_remaining(tvb, offset) >= 4)
{
tuples_ptr = tvb_get_ptr(tvb, offset, tvb_reported_length_remaining(tvb, offset));
edp_tuples_ti = proto_tree_add_bytes_format(ismp_edp_tree, hf_ismp_edp_tuples, tvb,
offset, tvb_reported_length_remaining(tvb, offset), tuples_ptr, "Tuples:");
edp_tuples_tree = proto_item_add_subtree(edp_tuples_ti, ett_ismp_edp_tuples);
while ( (tuples_count < num_tuples) && (tvb_reported_length_remaining(tvb, offset) >= 4) )
{
tuple_length = tvb_get_ntohs(tvb, offset+2);
edp_tuples_leaf_ti = proto_tree_add_text(edp_tuples_tree, tvb, offset, tuple_length,
"Tuple%d", tuples_count+1);
edp_tuples_leaf_tree = proto_item_add_subtree(edp_tuples_leaf_ti, ett_ismp_edp_tuples_leaf);
tuple_type = tvb_get_ntohs(tvb, offset);
proto_tree_add_text(edp_tuples_leaf_tree, tvb, offset, 2,
"Tuple Type: %s(%d)", val_to_str( tuple_type, edp_tuple_types, "Unknown"), tuple_type );
offset += 2;
proto_tree_add_text(edp_tuples_leaf_tree, tvb, offset, 2,
"Tuple Length: %d", tuple_length);
tuple_length -= 4;
offset += 2;
if (tvb_reported_length_remaining(tvb, offset) >= tuple_length)
{
switch (tuple_type)
{
case EDP_TUPLE_HOLD:
proto_tree_add_text(edp_tuples_leaf_tree, tvb, offset, tuple_length,
"Hold Time = %d", tvb_get_ntohs(tvb, offset));
break;
case EDP_TUPLE_INT_NAME:
proto_tree_add_text(edp_tuples_leaf_tree, tvb, offset, tuple_length,
"Interface Name = %s", tvb_format_text(tvb, offset, tuple_length));
break;
case EDP_TUPLE_SYS_DESCRIPT:
proto_tree_add_text(edp_tuples_leaf_tree, tvb, offset, tuple_length,
"System Description = %s", tvb_format_text(tvb, offset, tuple_length));
break;
case EDP_TUPLE_IPX_ADDR:
proto_tree_add_text(edp_tuples_leaf_tree, tvb, offset, tuple_length,
"Interface IPX_address = %s",
ipx_addr_to_str(tvb_get_ntohl(tvb, offset),
tvb_get_ptr(tvb, offset+4, tuple_length-4)));
break;
case EDP_TUPLE_UNKNOWN:
default:
proto_tree_add_text(edp_tuples_leaf_tree, tvb, offset, tuple_length,
"Unknown Tuple Data %s", tvb_format_text(tvb, offset, tuple_length));
break;
}
}
offset += tuple_length;
tuples_count++;
tuple_type = 0;
tuple_length = 0;
}
if (tuples_count != num_tuples)
{
proto_tree_add_text(ismp_edp_tree, tvb, offset,
tvb_reported_length_remaining(tvb, offset), "MALFORMED PACKET");
return;
}
else
{
return;
}
}
}
}
/* Code to actually dissect the packets */
static void
dissect_ismp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
{
int offset = 0;
guint16 message_type = 0;
guint8 code_length = 0;
guint8 weird_stuff[3] = { 0x42, 0x42, 0x03 };
/* Set up structures needed to add the protocol subtree and manage it */
proto_item *ti;
proto_tree *ismp_tree;
/* Make entries in Protocol column and Info column on summary display */
if (check_col(pinfo->cinfo, COL_PROTOCOL))
col_set_str(pinfo->cinfo, COL_PROTOCOL, "ISMP");
if (check_col(pinfo->cinfo, COL_INFO))
col_clear(pinfo->cinfo, COL_INFO);
/*
* XXX - I've seen captures with packets that have the ISMP
* Ethernet frame type, but with the payload being 0x42 0x42 0x03
* followed by what appears to be an ISMP frame.
*
* 0x4242 is not a valid ISMP version number.
*/
if (tvb_memeql(tvb, offset, weird_stuff, sizeof weird_stuff) == 0)
offset += 3; /* skip the weird stuff, for now */
if (tree) {
/* create display subtree for ismp */
ti = proto_tree_add_item(tree, proto_ismp, tvb, offset, -1, FALSE);
ismp_tree = proto_item_add_subtree(ti, ett_ismp);
/* add an items to the subtree */
proto_tree_add_item(ismp_tree, hf_ismp_version, tvb, offset, 2, FALSE);
offset += 2;
message_type = tvb_get_ntohs(tvb, offset);
proto_tree_add_item(ismp_tree, hf_ismp_message_type, tvb, offset, 2, FALSE);
offset += 2;
proto_tree_add_item(ismp_tree, hf_ismp_seq_num, tvb, offset, 2, FALSE);
offset += 2;
code_length = tvb_get_guint8(tvb, offset);
proto_tree_add_item(ismp_tree, hf_ismp_code_length, tvb, offset, 1, FALSE);
offset += 1;
proto_tree_add_item(ismp_tree, hf_ismp_auth_data, tvb, offset, code_length, FALSE);
offset += code_length;
/* if Enterasys Discover Protocol, dissect it */
if(message_type == ISMPTYPE_EDP)
dissect_ismp_edp(tvb, pinfo, offset, ismp_tree);
}
}
/* Register this protocol with Ethereal */
void
proto_register_ismp(void)
{
/* Setup list of header fields See Section 1.6.1 for details*/
static hf_register_info hf[] = {
{ &hf_ismp_version,
{ "Version", "ismp.version",
FT_UINT16, BASE_DEC, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_message_type,
{ "Message Type", "ismp.msgtype",
FT_UINT16, BASE_DEC, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_seq_num,
{ "Sequence Number", "ismp.seqnum",
FT_UINT16, BASE_DEC, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_code_length,
{ "Auth Code Length", "ismp.codelen",
FT_UINT8, BASE_DEC, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_auth_data,
{ "Auth Data", "ismp.authdata",
FT_BYTES, BASE_HEX, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_version,
{ "Version", "ismp.edp.version",
FT_UINT16, BASE_DEC, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_module_ip,
{ "Module IP Address", "ismp.edp.modip",
FT_IPv4, BASE_NONE, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_module_mac,
{ "Module MAC Address", "ismp.edp.modmac",
FT_ETHER, BASE_NONE, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_module_port,
{ "Module Port (ifIndex num)", "ismp.edp.modport",
FT_UINT32, BASE_DEC, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_chassis_mac,
{ "Chassis MAC Address", "ismp.edp.chassismac",
FT_ETHER, BASE_NONE, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_chassis_ip,
{ "Chassis IP Address", "ismp.edp.chassisip",
FT_IPv4, BASE_NONE, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_device_type,
{ "Device Type", "ismp.edp.devtype",
FT_UINT16, BASE_DEC, edp_device_types, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_module_rev,
{ "Module Firmware Revision", "ismp.edp.rev",
FT_UINT32, BASE_DEC, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_options,
{ "Device Options", "ismp.edp.opts",
FT_UINT32, BASE_DEC, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_unused1,
{ "Unused", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_UNUSED1,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_sfssup,
{ "SFS Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_SFSSUP,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_lsp,
{ "LSP Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_LSP,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_flood,
{ "Flood Path Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_FLOOD,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_resolve,
{ "Resolve Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_RESOLVE,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_unused2,
{ "Unused", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_UNUSED2,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_tagflood,
{ "Tagged Flood Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_TAGFLOOD,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_calltap,
{ "Call Tap Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_CALLTAP,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_conmsg,
{ "Connection Message Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_CONMSG,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_redun,
{ "Redundant Access Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_REDUN,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_isolated,
{ "Isolated Switch", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_ISOLATED,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_uplink_switch,
{ "Uplink Switch", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_UPLINK_SWITCH,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_uplink_core,
{ "Uplink Core", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_UPLINK_CORE,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_uplink_port,
{ "Uplink Port", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_UPLINK_PORT,
"", HFILL }
},
{ &hf_ismp_edp_sfs_option_uplink_flood,
{ "Uplink Flood Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SFS_OPTION_UPLINK_FLOOD,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_ssr,
{ "SSR Type Device", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_SSR,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_igmp,
{ "IGMP Active", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_IGMP,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_rip,
{ "RIP Active", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_RIP,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_bgp,
{ "BGP Active", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_BGP,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_ospf,
{ "OSPF Active", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_OSPF,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_dvmrp,
{ "DVMRP Active", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_DVMRP,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_8021q,
{ "802.1Q Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_8021Q,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_gvrp,
{ "GVRP Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_GVRP,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_gmrp,
{ "GMRP Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_GMRP,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_igmp_snoop,
{ "IGMP Snooping Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_IGMP_SNOOP,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_route,
{ "Route Bridging", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_ROUTE,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_trans,
{ "Transparent Bridging", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_TRANS,
"", HFILL }
},
{ &hf_ismp_edp_rtr_option_level1,
{ "Level 1 Functionality", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_RTR_OPTION_LEVEL1,
"", HFILL }
},
{ &hf_ismp_edp_switch_option_8021q,
{ "802.1Q Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SWITCH_OPTION_8021Q,
"", HFILL }
},
{ &hf_ismp_edp_switch_option_gvrp,
{ "GVRP Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SWITCH_OPTION_GVRP,
"", HFILL }
},
{ &hf_ismp_edp_switch_option_gmrp,
{ "GMRP Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SWITCH_OPTION_GMRP,
"", HFILL }
},
{ &hf_ismp_edp_switch_option_igmp,
{ "IGMP Snooping Support", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SWITCH_OPTION_IGMP,
"", HFILL }
},
{ &hf_ismp_edp_switch_option_route,
{ "Route Bridging", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SWITCH_OPTION_ROUTE,
"", HFILL }
},
{ &hf_ismp_edp_switch_option_trans,
{ "Transparent Bridging", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SWITCH_OPTION_TRANS,
"", HFILL }
},
{ &hf_ismp_edp_switch_option_level1,
{ "Level 1 Functionality", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_SWITCH_OPTION_LEVEL1,
"", HFILL }
},
{ &hf_ismp_edp_end_station_option_dhcp,
{ "DHCP Enabled", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_END_STATION_OPTION_DHCP,
"", HFILL }
},
{ &hf_ismp_edp_end_station_option_dns,
{ "DNS Enabled", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_END_STATION_OPTION_DNS,
"", HFILL }
},
{ &hf_ismp_edp_end_station_option_ad,
{ "Active Directory Enabled", "ismp.edp.opts",
FT_BOOLEAN, 32, TFS(&is_set), EDP_END_STATION_OPTION_AD,
"", HFILL }
},
{ &hf_ismp_edp_num_neighbors,
{ "Number of Known Neighbors", "ismp.edp.maccount",
FT_UINT16, BASE_DEC, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_neighbors,
{ "Neighbors", "ismp.edp.nbrs",
FT_BYTES, BASE_NONE, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_num_tuples,
{ "Number of Tuples", "ismp.edp.numtups",
FT_UINT16, BASE_DEC, NULL, 0x0,
"", HFILL }
},
{ &hf_ismp_edp_tuples,
{ "Number of Tuples", "ismp.edp.tups",
FT_BYTES, BASE_NONE, NULL, 0x0,
"", HFILL }
},
};
/* Setup protocol subtree array */
static gint *ett[] = {
&ett_ismp,
&ett_ismp_edp,
&ett_ismp_edp_options,
&ett_ismp_edp_neighbors,
&ett_ismp_edp_neighbors_leaf,
&ett_ismp_edp_tuples,
&ett_ismp_edp_tuples_leaf,
};
/* Register the protocol name and description */
proto_ismp = proto_register_protocol("InterSwitch Message Protocol",
"ISMP", "ismp");
/* Required function calls to register the header fields and subtrees used */
proto_register_field_array(proto_ismp, hf, array_length(hf));
proto_register_subtree_array(ett, array_length(ett));
}
/* If this dissector uses sub-dissector registration add a registration routine.
This format is required because a script is used to find these routines and
create the code that calls these routines.
*/
void
proto_reg_handoff_ismp(void)
{
dissector_handle_t ismp_handle;
ismp_handle = create_dissector_handle(dissect_ismp,
proto_ismp);
dissector_add("ethertype", ETHERTYPE_ISMP, ismp_handle);
}