wireshark/epan/dissectors/packet-ypserv.c

652 lines
18 KiB
C

/* packet-ypserv.c
* Routines for ypserv dissection
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* Copied from packet-smb.c
*
* 2001 Ronnie Sahlberg <See AUTHORS for email>
* Added all remaining dissectors for this protocol
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#include "config.h"
#include "packet-rpc.h"
#include "packet-ypserv.h"
void proto_register_ypserv(void);
void proto_reg_handoff_ypserv(void);
static int proto_ypserv = -1;
static int hf_ypserv_procedure_v1 = -1;
static int hf_ypserv_procedure_v2 = -1;
static int hf_ypserv_domain = -1;
static int hf_ypserv_servesdomain = -1;
static int hf_ypserv_map = -1;
static int hf_ypserv_key = -1;
static int hf_ypserv_peer = -1;
static int hf_ypserv_more = -1;
static int hf_ypserv_ordernum = -1;
static int hf_ypserv_transid = -1;
static int hf_ypserv_prog = -1;
static int hf_ypserv_port = -1;
static int hf_ypserv_value = -1;
static int hf_ypserv_status = -1;
static int hf_ypserv_map_parms = -1;
static int hf_ypserv_xfrstat = -1;
static gint ett_ypserv = -1;
static gint ett_ypserv_map_parms = -1;
static const value_string ypstat[] =
{
{ 1, "YP_TRUE" },
{ 2, "YP_NOMORE" },
{ 0, "YP_FALSE" },
{ -1, "YP_NOMAP" },
{ -2, "YP_NODOM" },
{ -3, "YP_NOKEY" },
{ -4, "YP_BADOP" },
{ -5, "YP_BADDB" },
{ -6, "YP_YPERR" },
{ -7, "YP_BADARGS" },
{ -8, "YP_VERS" },
{ 0, NULL },
};
static const value_string xfrstat[] =
{
{ 1, "YPXFR_SUCC" },
{ 2, "YPXFR_AGE" },
{ -1, "YPXFR_NOMAP" },
{ -2, "YPXFR_NODOM" },
{ -3, "YPXFR_RSRC" },
{ -4, "YPXFR_RPC" },
{ -5, "YPXFR_MADDR" },
{ -6, "YPXFR_YPERR" },
{ -7, "YPXFR_BADARGS" },
{ -8, "YPXFR_DBM" },
{ -9, "YPXFR_FILE" },
{ -10, "YPXFR_SKEW" },
{ -11, "YPXFR_CLEAR" },
{ -12, "YPXFR_FORCE" },
{ -13, "YPXFR_XFRERR" },
{ -14, "YPXFR_REFUSED" },
{ 0, NULL },
};
static int
dissect_ypserv_status(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree *tree, gint32 *rstatus)
{
gint32 status;
const char *err;
status=tvb_get_ntohl(tvb, offset);
if(rstatus){
*rstatus=status;
}
offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_status, offset);
if(status<0){
err=val_to_str(status, ypstat, "Unknown error:%u");
col_append_fstr(pinfo->cinfo, COL_INFO," %s", err);
proto_item_append_text(tree, " Error:%s", err);
}
return offset;
}
static int
dissect_domain_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
proto_item_append_text(tree, " DOMAIN call");
return dissect_rpc_string(tvb,tree,hf_ypserv_domain,0,NULL);
}
static int
dissect_domain_nonack_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
proto_item_append_text(tree, " DOMAIN_NONACK call");
return dissect_rpc_string(tvb,tree,hf_ypserv_domain,0,NULL);
}
static int
dissect_maplist_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
proto_item_append_text(tree, " MAPLIST call");
return dissect_rpc_string(tvb,tree,hf_ypserv_domain,0,NULL);
}
static int
dissect_domain_reply(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " DOMAIN reply");
proto_tree_add_item(tree, hf_ypserv_servesdomain, tvb,
offset, 4, ENC_BIG_ENDIAN);
offset += 4;
return offset;
}
static int
dissect_domain_nonack_reply(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " DOMAIN_NONACK reply");
proto_tree_add_item(tree, hf_ypserv_servesdomain, tvb,
offset, 4, ENC_BIG_ENDIAN);
offset += 4;
return offset;
}
static int
dissect_match_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
const char *str;
int offset = 0;
proto_item_append_text(tree, " MATCH call");
/*domain*/
offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, &str);
col_append_fstr(pinfo->cinfo, COL_INFO," %s/", str);
proto_item_append_text(tree, " %s/", str);
/*map*/
offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, &str);
col_append_fstr(pinfo->cinfo, COL_INFO,"%s/", str);
proto_item_append_text(tree, "%s/", str);
/*key*/
offset = dissect_rpc_string(tvb, tree, hf_ypserv_key, offset, &str);
col_append_str(pinfo->cinfo, COL_INFO, str);
proto_item_append_text(tree, "%s", str);
return offset;
}
static int
dissect_match_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
gint32 status;
const char *str;
int offset = 0;
proto_item_append_text(tree, " MATCH reply");
offset = dissect_ypserv_status(tvb, offset, pinfo, tree, &status);
if(status>=0){
offset = dissect_rpc_string(tvb, tree, hf_ypserv_value,offset, &str);
col_append_fstr(pinfo->cinfo, COL_INFO," %s", str);
proto_item_append_text(tree, " %s", str);
} else {
offset = dissect_rpc_string(tvb, tree, hf_ypserv_value,offset, NULL);
}
return offset;
}
static int
dissect_first_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " FIRST call");
/*
* XXX - does Sun's "yp.x" lie, and claim that the argument to a
* FIRST call is a "ypreq_key" rather than a "ypreq_nokey"?
* You presumably need the key for NEXT, as "next" is "next
* after some entry", and the key tells you which entry, but
* you don't need a key for FIRST, as there's only one entry that
* is the first entry.
*
* The NIS server originally used DBM, which has a "firstkey()"
* call, with no argument, and a "nextkey()" argument, with
* a key argument. (Heck, it might *still* use DBM.)
*
* Given that, and given that at least one FIRST call from a Sun
* running Solaris 8 (the Sun on which I'm typing this, in fact)
* had a "ypreq_nokey" as the argument, I'm assuming that "yp.x"
* is buggy.
*/
offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, NULL);
return offset;
}
static int
dissect_first_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " FIRST reply");
offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_value, offset, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_key, offset, NULL);
return offset;
}
static int
dissect_next_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " NEXT reply");
offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_value, offset, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_key, offset, NULL);
return offset;
}
static int
dissect_next_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " NEXT call");
offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_key, offset, NULL);
return offset;
}
static int
dissect_xfr_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
proto_item *sub_item=NULL;
proto_tree *sub_tree=NULL;
int offset = 0;
int start_offset = offset;
proto_item_append_text(tree, " XFR call");
if(tree){
sub_item = proto_tree_add_item(tree, hf_ypserv_map_parms, tvb,
offset, -1, ENC_NA);
if(sub_item)
sub_tree = proto_item_add_subtree(sub_item, ett_ypserv_map_parms);
}
offset = dissect_rpc_string(tvb, sub_tree, hf_ypserv_domain, offset, NULL);
offset = dissect_rpc_string(tvb, sub_tree, hf_ypserv_map, offset, NULL);
offset = dissect_rpc_uint32(tvb, sub_tree, hf_ypserv_ordernum, offset);
offset = dissect_rpc_string(tvb, sub_tree, hf_ypserv_peer, offset, NULL);
proto_tree_add_item(tree, hf_ypserv_transid, tvb, offset, 4, ENC_BIG_ENDIAN);
offset += 4;
offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_prog, offset);
offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_port, offset);
if(sub_item)
proto_item_set_len(sub_item, offset - start_offset);
return offset;
}
static int
dissect_clear_call(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " CLEAR call");
return offset;
}
static int
dissect_clear_reply(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
proto_item_append_text(tree, " CLEAR reply");
return 0;
}
static int
dissect_xfr_reply(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " XFR reply");
proto_tree_add_item(tree, hf_ypserv_transid, tvb, offset, 4, ENC_BIG_ENDIAN);
offset += 4;
offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_xfrstat, offset);
return offset;
}
static int
dissect_order_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
const char *str;
int offset = 0;
proto_item_append_text(tree, " ORDER call");
/*domain*/
offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, &str);
col_append_fstr(pinfo->cinfo, COL_INFO," %s/", str);
proto_item_append_text(tree, " %s/", str);
/*map*/
offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, &str);
col_append_str(pinfo->cinfo, COL_INFO, str);
proto_item_append_text(tree, "%s", str);
return offset;
}
static int
dissect_all_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " ALL call");
offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, NULL);
return offset;
}
static int
dissect_master_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " MASTER call");
offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, NULL);
return offset;
}
static int
dissect_all_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
guint32 more;
int offset = 0;
proto_item_append_text(tree, " ALL reply");
for (;;) {
more = tvb_get_ntohl(tvb, offset);
offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_more, offset);
if (!more)
break;
offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_value, offset, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_key, offset, NULL);
}
return offset;
}
static int
dissect_master_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " MASTER reply");
offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_peer, offset, NULL);
return offset;
}
static int
dissect_order_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
guint32 num;
int offset = 0;
proto_item_append_text(tree, " ORDER reply");
offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL);
/*order number*/
num=tvb_get_ntohl(tvb, offset);
offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_ordernum, offset);
col_append_fstr(pinfo->cinfo, COL_INFO," 0x%08x", num);
proto_item_append_text(tree, " 0x%08x", num);
return offset;
}
static int
dissect_maplist_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
{
int offset = 0;
proto_item_append_text(tree, " MAPLIST reply");
offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL);
while(tvb_get_ntohl(tvb,offset)){
offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_more, offset);
offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, NULL);
}
offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_more, offset);
return offset;
}
/* proc number, "proc name", dissect_request, dissect_reply */
/* someone please get me a version 1 trace */
static const vsff ypserv1_proc[] = {
{ 0, "NULL",
dissect_rpc_void, dissect_rpc_void },
{ YPPROC_DOMAIN, "DOMAIN",
dissect_rpc_unknown, dissect_rpc_unknown },
{ YPPROC_DOMAIN_NONACK, "DOMAIN_NONACK",
dissect_rpc_unknown, dissect_rpc_unknown },
{ YPPROC_MATCH, "MATCH",
dissect_rpc_unknown, dissect_rpc_unknown },
{ YPPROC_FIRST, "FIRST",
dissect_rpc_unknown, dissect_rpc_unknown },
{ YPPROC_NEXT, "NEXT",
dissect_rpc_unknown, dissect_rpc_unknown },
{ YPPROC_XFR, "XFR",
dissect_rpc_unknown, dissect_rpc_unknown },
{ YPPROC_CLEAR, "CLEAR",
dissect_rpc_unknown, dissect_rpc_unknown },
{ YPPROC_ALL, "ALL",
dissect_rpc_unknown, dissect_rpc_unknown },
{ YPPROC_MASTER, "MASTER",
dissect_rpc_unknown, dissect_rpc_unknown },
{ YPPROC_ORDER, "ORDER",
dissect_rpc_unknown, dissect_rpc_unknown },
{ YPPROC_MAPLIST, "MAPLIST",
dissect_rpc_unknown, dissect_rpc_unknown },
{ 0, NULL, NULL, NULL }
};
static const value_string ypserv1_proc_vals[] = {
{ YPPROC_DOMAIN, "DOMAIN" },
{ YPPROC_DOMAIN_NONACK, "DOMAIN_NONACK" },
{ YPPROC_MATCH, "MATCH" },
{ YPPROC_FIRST, "FIRST" },
{ YPPROC_NEXT, "NEXT" },
{ YPPROC_XFR, "XFR" },
{ YPPROC_CLEAR, "CLEAR" },
{ YPPROC_ALL, "ALL" },
{ YPPROC_MASTER, "MASTER" },
{ YPPROC_ORDER, "ORDER" },
{ YPPROC_MAPLIST, "MAPLIST" },
{ 0, NULL }
};
/* end of YPServ version 1 */
/* proc number, "proc name", dissect_request, dissect_reply */
static const vsff ypserv2_proc[] = {
{ 0, "NULL",
dissect_rpc_void, dissect_rpc_void },
{ YPPROC_DOMAIN, "DOMAIN",
dissect_domain_call, dissect_domain_reply },
{ YPPROC_DOMAIN_NONACK, "DOMAIN_NONACK",
dissect_domain_nonack_call, dissect_domain_nonack_reply },
{ YPPROC_MATCH, "MATCH",
dissect_match_call, dissect_match_reply },
{ YPPROC_FIRST, "FIRST",
dissect_first_call, dissect_first_reply },
{ YPPROC_NEXT, "NEXT",
dissect_next_call, dissect_next_reply },
{ YPPROC_XFR, "XFR",
dissect_xfr_call, dissect_xfr_reply },
{ YPPROC_CLEAR, "CLEAR",
dissect_clear_call, dissect_clear_reply },
{ YPPROC_ALL, "ALL",
dissect_all_call, dissect_all_reply },
{ YPPROC_MASTER, "MASTER",
dissect_master_call, dissect_master_reply },
{ YPPROC_ORDER, "ORDER",
dissect_order_call, dissect_order_reply },
{ YPPROC_MAPLIST, "MAPLIST",
dissect_maplist_call, dissect_maplist_reply },
{ 0, NULL, NULL, NULL }
};
static const value_string ypserv2_proc_vals[] = {
{ YPPROC_DOMAIN, "DOMAIN" },
{ YPPROC_DOMAIN_NONACK, "DOMAIN_NONACK" },
{ YPPROC_MATCH, "MATCH" },
{ YPPROC_FIRST, "FIRST" },
{ YPPROC_NEXT, "NEXT" },
{ YPPROC_XFR, "XFR" },
{ YPPROC_CLEAR, "CLEAR" },
{ YPPROC_ALL, "ALL" },
{ YPPROC_MASTER, "MASTER" },
{ YPPROC_ORDER, "ORDER" },
{ YPPROC_MAPLIST, "MAPLIST" },
{ 0, NULL }
};
/* end of YPServ version 2 */
static const rpc_prog_vers_info ypserv_vers_info[] = {
{ 1, ypserv1_proc, &hf_ypserv_procedure_v1 },
{ 2, ypserv2_proc, &hf_ypserv_procedure_v2 },
};
void
proto_register_ypserv(void)
{
static hf_register_info hf[] = {
{ &hf_ypserv_procedure_v1, {
"V1 Procedure", "ypserv.procedure_v1", FT_UINT32, BASE_DEC,
VALS(ypserv1_proc_vals), 0, NULL, HFILL }},
{ &hf_ypserv_procedure_v2, {
"V2 Procedure", "ypserv.procedure_v2", FT_UINT32, BASE_DEC,
VALS(ypserv2_proc_vals), 0, NULL, HFILL }},
{ &hf_ypserv_domain, {
"Domain", "ypserv.domain", FT_STRING, BASE_NONE,
NULL, 0, NULL, HFILL }},
{ &hf_ypserv_servesdomain, {
"Serves Domain", "ypserv.servesdomain", FT_BOOLEAN, BASE_NONE,
TFS(&tfs_yes_no), 0x0, NULL, HFILL }},
{ &hf_ypserv_map, {
"Map Name", "ypserv.map", FT_STRING, BASE_NONE,
NULL, 0, NULL, HFILL }},
{ &hf_ypserv_peer, {
"Peer Name", "ypserv.peer", FT_STRING, BASE_NONE,
NULL, 0, NULL, HFILL }},
{ &hf_ypserv_more, {
"More", "ypserv.more", FT_BOOLEAN, BASE_NONE,
TFS(&tfs_yes_no), 0x0, NULL, HFILL }},
{ &hf_ypserv_ordernum, {
"Order Number", "ypserv.ordernum", FT_UINT32, BASE_DEC,
NULL, 0, "Order Number for XFR", HFILL }},
{ &hf_ypserv_transid, {
"Host Transport ID", "ypserv.transid", FT_IPv4, BASE_NONE,
NULL, 0, "Host Transport ID to use for XFR Callback", HFILL }},
{ &hf_ypserv_prog, {
"Program Number", "ypserv.prog", FT_UINT32, BASE_DEC,
NULL, 0, "Program Number to use for XFR Callback", HFILL }},
{ &hf_ypserv_port, {
"Port", "ypserv.port", FT_UINT32, BASE_DEC,
NULL, 0, "Port to use for XFR Callback", HFILL }},
{ &hf_ypserv_key, {
"Key", "ypserv.key", FT_STRING, BASE_NONE,
NULL, 0, NULL, HFILL }},
{ &hf_ypserv_value, {
"Value", "ypserv.value", FT_STRING, BASE_NONE,
NULL, 0, NULL, HFILL }},
{ &hf_ypserv_status, {
"Status", "ypserv.status", FT_INT32, BASE_DEC,
VALS(ypstat) , 0, NULL, HFILL }},
{ &hf_ypserv_map_parms, {
"YP Map Parameters", "ypserv.map_parms", FT_NONE, BASE_NONE,
NULL, 0, NULL, HFILL }},
{ &hf_ypserv_xfrstat, {
"Xfrstat", "ypserv.xfrstat", FT_INT32, BASE_DEC,
VALS(xfrstat), 0, NULL, HFILL }},
};
static gint *ett[] = {
&ett_ypserv,
&ett_ypserv_map_parms,
};
proto_ypserv = proto_register_protocol("Yellow Pages Service",
"YPSERV", "ypserv");
proto_register_field_array(proto_ypserv, hf, array_length(hf));
proto_register_subtree_array(ett, array_length(ett));
}
void
proto_reg_handoff_ypserv(void)
{
/* Register the protocol as RPC */
rpc_init_prog(proto_ypserv, YPSERV_PROGRAM, ett_ypserv,
G_N_ELEMENTS(ypserv_vers_info), ypserv_vers_info);
}
/*
* Editor modelines - https://www.wireshark.org/tools/modelines.html
*
* Local variables:
* c-basic-offset: 8
* tab-width: 8
* indent-tabs-mode: t
* End:
*
* vi: set shiftwidth=8 tabstop=8 noexpandtab:
* :indentSize=8:tabSize=8:noTabs=false:
*/