2008-09-29 16:49:14 +00:00
|
|
|
/* packet-iec104.c
|
|
|
|
* Routines for IEC-60870-5-104 (iec104) Protocol disassembly
|
2008-09-30 16:03:18 +00:00
|
|
|
*
|
2008-09-29 16:49:14 +00:00
|
|
|
*
|
|
|
|
* $Id$
|
|
|
|
*
|
|
|
|
* Copyright (c) 2008 by Joan Ramio <joan@ramio.cat>
|
|
|
|
* Joan is a masculine catalan name. Search the Internet for Joan Pujol (alias Garbo).
|
|
|
|
*
|
2010-09-23 21:46:31 +00:00
|
|
|
* Copyright (c) 2009 by Kjell Hultman <kjell.hultman@gmail.com>
|
2009-09-20 21:08:04 +00:00
|
|
|
* Added dissection of signal (ASDU) information.
|
|
|
|
* Kjell is also a masculine name, but a Scandinavian one.
|
|
|
|
*
|
2008-09-29 16:49:14 +00:00
|
|
|
* Wireshark - Network traffic analyzer
|
|
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
|
|
* Copyright 1999 Gerald Combs
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU General Public License
|
|
|
|
* as published by the Free Software Foundation; either version 2
|
|
|
|
* of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
* along with this program; if not, write to the Free Software
|
2012-06-28 22:56:06 +00:00
|
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
2008-09-29 16:49:14 +00:00
|
|
|
*/
|
|
|
|
|
|
|
|
#include "config.h"
|
|
|
|
|
|
|
|
#include <string.h>
|
|
|
|
#include <glib.h>
|
2009-09-20 21:08:04 +00:00
|
|
|
#include <math.h> /* floor */
|
2008-09-29 16:49:14 +00:00
|
|
|
|
|
|
|
#include <epan/packet.h>
|
2013-04-21 23:20:10 +00:00
|
|
|
#include <epan/expert.h>
|
2008-09-29 16:49:14 +00:00
|
|
|
#include <epan/dissectors/packet-tcp.h>
|
|
|
|
#include <epan/emem.h>
|
|
|
|
|
|
|
|
/* IEC-104 comment: Fields are little endian. */
|
|
|
|
|
|
|
|
#define MAXS 256
|
|
|
|
|
|
|
|
static dissector_handle_t iec104asdu_handle;
|
|
|
|
|
|
|
|
/* the asdu header structure */
|
|
|
|
struct asduheader {
|
2013-04-21 23:20:10 +00:00
|
|
|
guint16 Addr;
|
2008-09-29 16:49:14 +00:00
|
|
|
guint8 OA;
|
|
|
|
guint8 TypeId;
|
|
|
|
guint8 TNCause;
|
|
|
|
guint32 IOA;
|
|
|
|
guint8 NumIx;
|
|
|
|
guint8 SQ;
|
|
|
|
};
|
|
|
|
|
2009-09-20 21:08:04 +00:00
|
|
|
/* asdu command value/status structure */
|
|
|
|
typedef struct {
|
|
|
|
gboolean OFF;
|
|
|
|
gboolean ON;
|
2010-09-23 21:46:31 +00:00
|
|
|
|
2011-10-21 02:10:19 +00:00
|
|
|
gboolean UP;
|
2010-12-22 23:28:23 +00:00
|
|
|
gboolean DOWN;
|
|
|
|
|
2009-09-20 21:08:04 +00:00
|
|
|
/* QOC qualifier-bits */
|
|
|
|
guint16 QU; /* qualifier-value */
|
|
|
|
gboolean ZeroP; /* No pulse */
|
|
|
|
gboolean ShortP; /* Short Pulse */
|
|
|
|
gboolean LongP; /* Long Pulse */
|
|
|
|
gboolean Persist; /* Persistent output */
|
|
|
|
gboolean SE; /* Select (1) / Execute (0) */
|
|
|
|
|
|
|
|
|
|
|
|
} td_CmdInfo;
|
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
#define IEC104_PORT 2404
|
2008-09-29 16:49:14 +00:00
|
|
|
|
|
|
|
/* Define the iec104 proto */
|
|
|
|
static int proto_iec104apci = -1;
|
|
|
|
static int proto_iec104asdu = -1;
|
|
|
|
|
|
|
|
/* Protocol constants */
|
|
|
|
#define APCI_START 0x68
|
|
|
|
#define APCI_LEN 6
|
2009-07-10 05:40:02 +00:00
|
|
|
#define APCI_START_LEN 2
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
#define APCI_DATA_LEN (APCI_LEN - APCI_START_LEN)
|
2008-09-29 16:49:14 +00:00
|
|
|
#define APDU_MIN_LEN 4
|
|
|
|
#define APDU_MAX_LEN 253
|
|
|
|
|
|
|
|
/* ASDU_HEAD_LEN: Includes Asdu head and first IOA */
|
|
|
|
#define ASDU_HEAD_LEN 9
|
|
|
|
#define F_TEST 0x80
|
|
|
|
#define F_NEGA 0x40
|
|
|
|
#define F_CAUSE 0x3F
|
|
|
|
#define F_SQ 0x80
|
|
|
|
|
|
|
|
/* APCI types */
|
2013-04-21 23:20:10 +00:00
|
|
|
|
|
|
|
/* Type I is only lowest bit set to 0 */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define I_TYPE 0
|
2013-04-21 23:20:10 +00:00
|
|
|
#define I_TYPE2 2
|
2008-09-29 16:49:14 +00:00
|
|
|
#define S_TYPE 1
|
|
|
|
#define U_TYPE 3
|
|
|
|
#define APCI_TYPE_UNKNOWN 4
|
|
|
|
static const value_string apci_types [] = {
|
|
|
|
{ I_TYPE, "I" },
|
|
|
|
{ S_TYPE, "S" },
|
2013-04-21 23:20:10 +00:00
|
|
|
{ I_TYPE2, "I" },
|
2008-09-29 16:49:14 +00:00
|
|
|
{ U_TYPE, "U" },
|
|
|
|
{ 0, NULL }
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
/* Constants relative to the filed, independent of the field position in the byte */
|
|
|
|
/* U (Unnombered) constants */
|
|
|
|
#define U_STARTDT_ACT 0x01
|
|
|
|
#define U_STARTDT_CON 0x02
|
|
|
|
#define U_STOPDT_ACT 0x04
|
|
|
|
#define U_STOPDT_CON 0x08
|
|
|
|
#define U_TESTFR_ACT 0x10
|
|
|
|
#define U_TESTFR_CON 0x20
|
|
|
|
static const value_string u_types[] = {
|
|
|
|
{ U_STARTDT_ACT, "STARTDT act" },
|
|
|
|
{ U_STARTDT_CON, "STARTDT con" },
|
|
|
|
{ U_STOPDT_ACT, "STOPDT act" },
|
|
|
|
{ U_STOPDT_CON, "STOPDT con" },
|
|
|
|
{ U_TESTFR_ACT, "TESTFR act" },
|
|
|
|
{ U_TESTFR_CON, "TESTFR con" },
|
|
|
|
{ 0, NULL }
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
/* ASDU types (TypeId) */
|
|
|
|
#define M_SP_NA_1 1 /* single-point information */
|
|
|
|
#define M_DP_NA_1 3 /* double-point information */
|
|
|
|
#define M_ST_NA_1 5 /* step position information */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define M_BO_NA_1 7 /* bitstring of 32 bits */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define M_ME_NA_1 9 /* measured value, normalized value */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define M_ME_NB_1 11 /* measured value, scaled value */
|
|
|
|
#define M_ME_NC_1 13 /* measured value, short floating point number */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define M_IT_NA_1 15 /* integrated totals */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define M_PS_NA_1 20 /* packed single-point information with status change detection */
|
|
|
|
#define M_ME_ND_1 21 /* measured value, normalized value without quality descriptor */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define M_SP_TB_1 30 /* single-point information with time tag CP56Time2a */
|
|
|
|
#define M_DP_TB_1 31 /* double-point information with time tag CP56Time2a */
|
|
|
|
#define M_ST_TB_1 32 /* step position information with time tag CP56Time2a */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define M_BO_TB_1 33 /* bitstring of 32 bit with time tag CP56Time2a */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define M_ME_TD_1 34 /* measured value, normalized value with time tag CP56Time2a */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define M_ME_TE_1 35 /* measured value, scaled value with time tag CP56Time2a */
|
|
|
|
#define M_ME_TF_1 36 /* measured value, short floating point number with time tag CP56Time2a */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define M_IT_TB_1 37 /* integrated totals with time tag CP56Time2a */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define M_EP_TD_1 38 /* event of protection equipment with time tag CP56Time2a */
|
|
|
|
#define M_EP_TE_1 39 /* packed start events of protection equipment with time tag CP56Time2a */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define M_EP_TF_1 40 /* packed output circuit information of protection equipment with time tag CP56Time2a */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define C_SC_NA_1 45 /* single command */
|
|
|
|
#define C_DC_NA_1 46 /* double command */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define C_RC_NA_1 47 /* regulating step command */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define C_SE_NA_1 48 /* set point command, normalized value */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define C_SE_NB_1 49 /* set point command, scaled value */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define C_SE_NC_1 50 /* set point command, short floating point number */
|
|
|
|
#define C_BO_NA_1 51 /* bitstring of 32 bits */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define C_SC_TA_1 58 /* single command with time tag CP56Time2a */
|
|
|
|
#define C_DC_TA_1 59 /* double command with time tag CP56Time2a */
|
|
|
|
#define C_RC_TA_1 60 /* regulating step command with time tag CP56Time2a */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define C_SE_TA_1 61 /* set point command, normalized value with time tag CP56Time2a */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define C_SE_TB_1 62 /* set point command, scaled value with time tag CP56Time2a */
|
|
|
|
#define C_SE_TC_1 63 /* set point command, short floating-point number with time tag CP56Time2a */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define C_BO_TA_1 64 /* bitstring of 32 bits with time tag CP56Time2a */
|
|
|
|
#define M_EI_NA_1 70 /* end of initialization */
|
|
|
|
#define C_IC_NA_1 100 /* interrogation command */
|
|
|
|
#define C_CI_NA_1 101 /* counter interrogation command */
|
|
|
|
#define C_RD_NA_1 102 /* read command */
|
|
|
|
#define C_CS_NA_1 103 /* clock synchronization command */
|
|
|
|
#define C_RP_NA_1 105 /* reset process command */
|
|
|
|
#define C_TS_TA_1 107 /* test command with time tag CP56Time2a */
|
|
|
|
#define P_ME_NA_1 110 /* parameter of measured value, normalized value */
|
|
|
|
#define P_ME_NB_1 111 /* parameter of measured value, scaled value */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define P_ME_NC_1 112 /* parameter of measured value, short floating-point number */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define P_AC_NA_1 113 /* parameter activation */
|
|
|
|
#define F_FR_NA_1 120 /* file ready */
|
|
|
|
#define F_SR_NA_1 121 /* section ready */
|
|
|
|
#define F_SC_NA_1 122 /* call directory, select file, call file, call section */
|
|
|
|
#define F_LS_NA_1 123 /* last section, last segment */
|
|
|
|
#define F_AF_NA_1 124 /* ack file, ack section */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define F_SG_NA_1 125 /* segment */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define F_DR_TA_1 126 /* directory */
|
2008-09-29 16:49:14 +00:00
|
|
|
#define F_SC_NB_1 127 /* Query Log - Request archive file */
|
|
|
|
static const value_string asdu_types [] = {
|
|
|
|
{ M_SP_NA_1, "M_SP_NA_1" },
|
|
|
|
{ M_DP_NA_1, "M_DP_NA_1" },
|
|
|
|
{ M_ST_NA_1, "M_ST_NA_1" },
|
|
|
|
{ M_BO_NA_1, "M_BO_NA_1" },
|
|
|
|
{ M_ME_NA_1, "M_ME_NA_1" },
|
|
|
|
{ M_ME_NB_1, "M_ME_NB_1" },
|
|
|
|
{ M_ME_NC_1, "M_ME_NC_1" },
|
|
|
|
{ M_IT_NA_1, "M_IT_NA_1" },
|
2008-09-30 16:03:18 +00:00
|
|
|
{ M_PS_NA_1, "M_PS_NA_1" },
|
|
|
|
{ M_ME_ND_1, "M_ME_ND_1" },
|
|
|
|
{ M_SP_TB_1, "M_SP_TB_1" },
|
|
|
|
{ M_DP_TB_1, "M_DP_TB_1" },
|
|
|
|
{ M_ST_TB_1, "M_ST_TB_1" },
|
|
|
|
{ M_BO_TB_1, "M_BO_TB_1" },
|
|
|
|
{ M_ME_TD_1, "M_ME_TD_1" },
|
|
|
|
{ M_ME_TE_1, "M_ME_TE_1" },
|
|
|
|
{ M_ME_TF_1, "M_ME_TF_1" },
|
|
|
|
{ M_IT_TB_1, "M_IT_TB_1" },
|
|
|
|
{ M_EP_TD_1, "M_EP_TD_1" },
|
|
|
|
{ M_EP_TE_1, "M_EP_TE_1" },
|
|
|
|
{ M_EP_TF_1, "M_EP_TF_1" },
|
|
|
|
{ C_SC_NA_1, "C_SC_NA_1" },
|
|
|
|
{ C_DC_NA_1, "C_DC_NA_1" },
|
|
|
|
{ C_RC_NA_1, "C_RC_NA_1" },
|
|
|
|
{ C_SE_NA_1, "C_SE_NA_1" },
|
|
|
|
{ C_SE_NB_1, "C_SE_NB_1" },
|
|
|
|
{ C_SE_NC_1, "C_SE_NC_1" },
|
|
|
|
{ C_BO_NA_1, "C_BO_NA_1" },
|
|
|
|
{ C_SC_TA_1, "C_SC_TA_1" },
|
|
|
|
{ C_DC_TA_1, "C_DC_TA_1" },
|
|
|
|
{ C_RC_TA_1, "C_RC_TA_1" },
|
|
|
|
{ C_SE_TA_1, "C_SE_TA_1" },
|
|
|
|
{ C_SE_TB_1, "C_SE_TB_1" },
|
|
|
|
{ C_SE_TC_1, "C_SE_TC_1" },
|
|
|
|
{ C_BO_TA_1, "C_BO_TA_1" },
|
|
|
|
{ M_EI_NA_1, "M_EI_NA_1" },
|
|
|
|
{ C_IC_NA_1, "C_IC_NA_1" },
|
|
|
|
{ C_CI_NA_1, "C_CI_NA_1" },
|
|
|
|
{ C_RD_NA_1, "C_RD_NA_1" },
|
|
|
|
{ C_CS_NA_1, "C_CS_NA_1" },
|
|
|
|
{ C_RP_NA_1, "C_RP_NA_1" },
|
|
|
|
{ C_TS_TA_1, "C_TS_TA_1" },
|
|
|
|
{ P_ME_NA_1, "P_ME_NA_1" },
|
|
|
|
{ P_ME_NB_1, "P_ME_NB_1" },
|
|
|
|
{ P_ME_NC_1, "P_ME_NC_1" },
|
|
|
|
{ P_AC_NA_1, "P_AC_NA_1" },
|
|
|
|
{ F_FR_NA_1, "F_FR_NA_1" },
|
|
|
|
{ F_SR_NA_1, "F_SR_NA_1" },
|
|
|
|
{ F_SC_NA_1, "F_SC_NA_1" },
|
|
|
|
{ F_LS_NA_1, "F_LS_NA_1" },
|
|
|
|
{ F_AF_NA_1, "F_AF_NA_1" },
|
|
|
|
{ F_SG_NA_1, "F_SG_NA_1" },
|
|
|
|
{ F_DR_TA_1, "F_DR_TA_1" },
|
|
|
|
{ F_SC_NB_1, "F_SC_NB_1" },
|
2008-09-29 16:49:14 +00:00
|
|
|
{ 0, NULL }
|
|
|
|
};
|
|
|
|
static const value_string asdu_lngtypes [] = {
|
|
|
|
{ M_SP_NA_1, "single-point information" },
|
|
|
|
{ M_DP_NA_1, "double-point information" },
|
|
|
|
{ M_ST_NA_1, "step position information" },
|
|
|
|
{ M_BO_NA_1, "bitstring of 32 bits" },
|
|
|
|
{ M_ME_NA_1, "measured value, normalized value" },
|
|
|
|
{ M_ME_NB_1, "measured value, scaled value" },
|
|
|
|
{ M_ME_NC_1, "measured value, short floating point number" },
|
|
|
|
{ M_IT_NA_1, "integrated totals" },
|
|
|
|
{ M_PS_NA_1, "packed single-point information with status change detection" },
|
|
|
|
{ M_ME_ND_1, "measured value, normalized value without quality descriptor" },
|
|
|
|
{ M_SP_TB_1, "single-point information with time tag CP56Time2a" },
|
|
|
|
{ M_DP_TB_1, "double-point information with time tag CP56Time2a" },
|
|
|
|
{ M_ST_TB_1, "step position information with time tag CP56Time2a" },
|
|
|
|
{ M_BO_TB_1, "bitstring of 32 bit with time tag CP56Time2a" },
|
|
|
|
{ M_ME_TD_1, "measured value, normalized value with time tag CP56Time2a" },
|
|
|
|
{ M_ME_TE_1, "measured value, scaled value with time tag CP56Time2a" },
|
|
|
|
{ M_ME_TF_1, "measured value, short floating point number with time tag CP56Time2a" },
|
|
|
|
{ M_IT_TB_1, "integrated totals with time tag CP56Time2a" },
|
|
|
|
{ M_EP_TD_1, "event of protection equipment with time tag CP56Time2a" },
|
|
|
|
{ M_EP_TE_1, "packed start events of protection equipment with time tag CP56Time2a" },
|
|
|
|
{ M_EP_TF_1, "packed output circuit information of protection equipment with time tag CP56Time2a" },
|
|
|
|
{ C_SC_NA_1, "single command" },
|
|
|
|
{ C_DC_NA_1, "double command" },
|
|
|
|
{ C_RC_NA_1, "regulating step command" },
|
|
|
|
{ C_SE_NA_1, "set point command, normalized value" },
|
|
|
|
{ C_SE_NB_1, "set point command, scaled value" },
|
|
|
|
{ C_SE_NC_1, "set point command, short floating point number" },
|
|
|
|
{ C_BO_NA_1, "bitstring of 32 bits" },
|
|
|
|
{ C_SC_TA_1, "single command with time tag CP56Time2a" },
|
|
|
|
{ C_DC_TA_1, "double command with time tag CP56Time2a" },
|
|
|
|
{ C_RC_TA_1, "regulating step command with time tag CP56Time2a" },
|
|
|
|
{ C_SE_TA_1, "set point command, normalized value with time tag CP56Time2a" },
|
|
|
|
{ C_SE_TB_1, "set point command, scaled value with time tag CP56Time2a" },
|
|
|
|
{ C_SE_TC_1, "set point command, short floating-point number with time tag CP56Time2a" },
|
|
|
|
{ C_BO_TA_1, "bitstring of 32 bits with time tag CP56Time2a" },
|
|
|
|
{ M_EI_NA_1, "end of initialization" },
|
|
|
|
{ C_IC_NA_1, "interrogation command" },
|
|
|
|
{ C_CI_NA_1, "counter interrogation command" },
|
|
|
|
{ C_RD_NA_1, "read command" },
|
|
|
|
{ C_CS_NA_1, "clock synchronization command" },
|
|
|
|
{ C_RP_NA_1, "reset process command" },
|
|
|
|
{ C_TS_TA_1, "test command with time tag CP56Time2a" },
|
|
|
|
{ P_ME_NA_1, "parameter of measured value, normalized value" },
|
|
|
|
{ P_ME_NB_1, "parameter of measured value, scaled value" },
|
|
|
|
{ P_ME_NC_1, "parameter of measured value, short floating-point number" },
|
|
|
|
{ P_AC_NA_1, "parameter activation" },
|
|
|
|
{ F_FR_NA_1, "file ready" },
|
|
|
|
{ F_SR_NA_1, "section ready" },
|
|
|
|
{ F_SC_NA_1, "call directory, select file, call file, call section" },
|
|
|
|
{ F_LS_NA_1, "last section, last segment" },
|
|
|
|
{ F_AF_NA_1, "ack file, ack section" },
|
|
|
|
{ F_SG_NA_1, "segment" },
|
|
|
|
{ F_DR_TA_1, "directory" },
|
|
|
|
{ F_SC_NB_1, "Query Log - Request archive file" },
|
|
|
|
{ 0, NULL }
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
/* Cause of Transmision (CauseTx) */
|
2008-09-30 16:03:18 +00:00
|
|
|
#define Per_Cyc 1
|
|
|
|
#define Back 2
|
|
|
|
#define Spont 3
|
|
|
|
#define Init 4
|
|
|
|
#define Req 5
|
|
|
|
#define Act 6
|
|
|
|
#define ActCon 7
|
|
|
|
#define Deact 8
|
|
|
|
#define DeactCon 9
|
|
|
|
#define ActTerm 10
|
|
|
|
#define Retrem 11
|
|
|
|
#define Retloc 12
|
|
|
|
#define File 13
|
|
|
|
#define Inrogen 20
|
|
|
|
#define Inro1 21
|
|
|
|
#define Inro2 22
|
|
|
|
#define Inro3 23
|
|
|
|
#define Inro4 24
|
|
|
|
#define Inro5 25
|
|
|
|
#define Inro6 26
|
|
|
|
#define Inro7 27
|
|
|
|
#define Inro8 28
|
|
|
|
#define Inro9 29
|
|
|
|
#define Inro10 30
|
|
|
|
#define Inro11 31
|
|
|
|
#define Inro12 32
|
|
|
|
#define Inro13 33
|
|
|
|
#define Inro14 34
|
|
|
|
#define Inro15 35
|
|
|
|
#define Inro16 36
|
|
|
|
#define Reqcogen 37
|
|
|
|
#define Reqco1 38
|
|
|
|
#define Reqco2 39
|
|
|
|
#define Reqco3 40
|
|
|
|
#define Reqco4 41
|
|
|
|
#define UkTypeId 44
|
|
|
|
#define UkCauseTx 45
|
|
|
|
#define UkComAdrASDU 46
|
|
|
|
#define UkIOA 47
|
2008-09-29 16:49:14 +00:00
|
|
|
static const value_string causetx_types [] = {
|
|
|
|
{ Per_Cyc ,"Per/Cyc" },
|
|
|
|
{ Back ,"Back" },
|
|
|
|
{ Spont ,"Spont" },
|
|
|
|
{ Init ,"Init" },
|
|
|
|
{ Req ,"Req" },
|
|
|
|
{ Act ,"Act" },
|
|
|
|
{ ActCon ,"ActCon" },
|
|
|
|
{ Deact ,"Deact" },
|
|
|
|
{ DeactCon ,"DeactCon" },
|
|
|
|
{ ActTerm ,"ActTerm" },
|
|
|
|
{ Retrem ,"Retrem" },
|
|
|
|
{ Retloc ,"Retloc" },
|
|
|
|
{ File ,"File" },
|
|
|
|
{ Inrogen ,"Inrogen" },
|
|
|
|
{ Inro1 ,"Inro1" },
|
|
|
|
{ Inro2 ,"Inro2" },
|
|
|
|
{ Inro3 ,"Inro3" },
|
|
|
|
{ Inro4 ,"Inro4" },
|
|
|
|
{ Inro5 ,"Inro5" },
|
|
|
|
{ Inro6 ,"Inro6" },
|
|
|
|
{ Inro7 ,"Inro7" },
|
|
|
|
{ Inro8 ,"Inro8" },
|
|
|
|
{ Inro9 ,"Inro9" },
|
|
|
|
{ Inro10 ,"Inro10" },
|
|
|
|
{ Inro11 ,"Inro11" },
|
|
|
|
{ Inro12 ,"Inro12" },
|
|
|
|
{ Inro13 ,"Inro13" },
|
|
|
|
{ Inro14 ,"Inro14" },
|
|
|
|
{ Inro15 ,"Inro15" },
|
|
|
|
{ Inro16 ,"Inro16" },
|
|
|
|
{ Reqcogen ,"Reqcogen" },
|
|
|
|
{ Reqco1 ,"Reqco1" },
|
|
|
|
{ Reqco2 ,"Reqco2" },
|
|
|
|
{ Reqco3 ,"Reqco3" },
|
|
|
|
{ Reqco4 ,"Reqco4" },
|
|
|
|
{ UkTypeId ,"UkTypeId" },
|
|
|
|
{ UkCauseTx ,"UkCauseTx" },
|
|
|
|
{ UkComAdrASDU ,"UkComAdrASDU" },
|
|
|
|
{ UkIOA ,"UkIOA" },
|
|
|
|
{ 0, NULL }
|
|
|
|
};
|
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
static const value_string diq_types[] = {
|
|
|
|
{ 0, "IPOS0" },
|
|
|
|
{ 1, "OFF" },
|
|
|
|
{ 2, "ON" },
|
|
|
|
{ 3, "IPOS3" },
|
|
|
|
{ 0, NULL }
|
|
|
|
};
|
|
|
|
|
|
|
|
static const value_string qos_qu_types[] = {
|
|
|
|
{ 0, "No pulse defined" },
|
|
|
|
{ 1, "Short Pulse" },
|
|
|
|
{ 2, "Long Pulse" },
|
|
|
|
{ 3, "Persistent Output" },
|
|
|
|
{ 0, NULL }
|
|
|
|
};
|
|
|
|
|
|
|
|
static const value_string dco_on_types[] = {
|
|
|
|
{ 0, "(None)" },
|
|
|
|
{ 1, "OFF" },
|
|
|
|
{ 2, "ON" },
|
|
|
|
{ 3, "Error: On/Off not defined" },
|
|
|
|
{ 0, NULL }
|
|
|
|
};
|
|
|
|
|
|
|
|
static const value_string rco_up_types[] = {
|
|
|
|
{ 0, "(None)" },
|
|
|
|
{ 1, "DOWN" },
|
|
|
|
{ 2, "UP" },
|
|
|
|
{ 3, "Error: Up/Down not defined" },
|
|
|
|
{ 0, NULL }
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
static const true_false_string tfs_blocked_not_blocked = { "Blocked", "Not blocked" };
|
|
|
|
static const true_false_string tfs_substituted_not_substituted = { "Substituted", "Not Substituted" };
|
|
|
|
static const true_false_string tfs_not_topical_topical = { "Not Topical", "Topical" };
|
|
|
|
static const true_false_string tfs_invalid_valid = { "Invalid", "Valid" };
|
|
|
|
static const true_false_string tfs_overflow_no_overflow = { "Overflow", "No overflow" };
|
|
|
|
static const true_false_string tfs_select_execute = { "Select", "Execute" };
|
2008-09-29 16:49:14 +00:00
|
|
|
|
|
|
|
/* Protocol fields to be filtered */
|
|
|
|
static int hf_apdulen = -1;
|
|
|
|
static int hf_apcitype = -1;
|
2013-04-21 23:20:10 +00:00
|
|
|
static int hf_apciutype = -1;
|
|
|
|
static int hf_apcitx = -1;
|
|
|
|
static int hf_apcirx = -1;
|
|
|
|
static int hf_apcidata = -1;
|
2008-09-29 16:49:14 +00:00
|
|
|
|
|
|
|
static int hf_addr = -1;
|
|
|
|
static int hf_oa = -1;
|
|
|
|
static int hf_typeid = -1;
|
|
|
|
static int hf_causetx = -1;
|
|
|
|
static int hf_nega = -1;
|
|
|
|
static int hf_test = -1;
|
|
|
|
static int hf_ioa = -1;
|
|
|
|
static int hf_numix = -1;
|
|
|
|
static int hf_sq = -1;
|
2013-04-21 23:20:10 +00:00
|
|
|
static int hf_cp56time = -1;
|
|
|
|
static int hf_siq = -1;
|
|
|
|
static int hf_siq_on = -1;
|
|
|
|
static int hf_siq_bl = -1;
|
|
|
|
static int hf_siq_sb = -1;
|
|
|
|
static int hf_siq_nt = -1;
|
|
|
|
static int hf_siq_iv = -1;
|
|
|
|
static int hf_diq = -1;
|
|
|
|
static int hf_diq_value = -1;
|
|
|
|
static int hf_diq_bl = -1;
|
|
|
|
static int hf_diq_sb = -1;
|
|
|
|
static int hf_diq_nt = -1;
|
|
|
|
static int hf_diq_iv = -1;
|
|
|
|
static int hf_qds = -1;
|
|
|
|
static int hf_qds_ov = -1;
|
|
|
|
static int hf_qds_bl = -1;
|
|
|
|
static int hf_qds_sb = -1;
|
|
|
|
static int hf_qds_nt = -1;
|
|
|
|
static int hf_qds_iv = -1;
|
|
|
|
static int hf_vti = -1;
|
|
|
|
static int hf_vti_tr = -1;
|
|
|
|
static int hf_qos_ql = -1;
|
|
|
|
static int hf_qos_se = -1;
|
|
|
|
static int hf_sco = -1;
|
|
|
|
static int hf_sco_on = -1;
|
|
|
|
static int hf_sco_qu = -1;
|
|
|
|
static int hf_sco_se = -1;
|
|
|
|
static int hf_dco = -1;
|
|
|
|
static int hf_dco_on = -1;
|
|
|
|
static int hf_dco_qu = -1;
|
|
|
|
static int hf_dco_se = -1;
|
|
|
|
static int hf_rco = -1;
|
|
|
|
static int hf_rco_up = -1;
|
|
|
|
static int hf_rco_qu = -1;
|
|
|
|
static int hf_rco_se = -1;
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2010-12-22 23:28:23 +00:00
|
|
|
static gint hf_asdu_bitstring = -1;
|
|
|
|
static gint hf_asdu_float = -1;
|
|
|
|
static gint hf_asdu_normval = -1;
|
2008-09-29 16:49:14 +00:00
|
|
|
|
|
|
|
static gint ett_apci = -1;
|
|
|
|
static gint ett_asdu = -1;
|
2013-04-21 23:20:10 +00:00
|
|
|
static gint ett_asdu_objects = -1;
|
|
|
|
static gint ett_siq = -1;
|
|
|
|
static gint ett_diq = -1;
|
|
|
|
static gint ett_qds = -1;
|
|
|
|
static gint ett_sco = -1;
|
|
|
|
static gint ett_dco = -1;
|
|
|
|
static gint ett_rco = -1;
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2013-05-26 03:29:07 +00:00
|
|
|
static expert_field ei_iec104_short_asdu = EI_INIT;
|
|
|
|
static expert_field ei_iec104_apdu_min_len = EI_INIT;
|
|
|
|
|
2009-09-20 21:08:04 +00:00
|
|
|
/* Misc. functions for dissection of signal values */
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
void get_CP56Time( td_CP56Time *cp56t, tvbuff_t *tvb, guint8 offset)
|
|
|
|
|
|
|
|
Dissects the CP56Time2a time (Seven octet binary time)
|
|
|
|
that starts 'offset' bytes in 'tvb'.
|
|
|
|
The time and date is put in struct 'cp56t'
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_CP56Time(tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
|
|
|
guint16 ms;
|
2013-04-21 23:20:10 +00:00
|
|
|
guint8 valid;
|
|
|
|
struct tm tm;
|
|
|
|
nstime_t datetime;
|
|
|
|
proto_item* ti;
|
|
|
|
|
2009-09-20 21:08:04 +00:00
|
|
|
ms = tvb_get_letohs( tvb , *offset );
|
|
|
|
(*offset) += 2;
|
2013-04-21 23:20:10 +00:00
|
|
|
tm.tm_sec = ms / 1000;
|
|
|
|
datetime.nsecs = ms * 1000000;
|
2010-09-23 21:46:31 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
tm.tm_min = tvb_get_guint8(tvb, *offset);
|
2009-09-20 21:08:04 +00:00
|
|
|
/* "Invalid" -- Todo: test */
|
2013-04-21 23:20:10 +00:00
|
|
|
valid = tm.tm_min & 0x80;
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
tm.tm_min &= 0x3F;
|
2009-09-20 21:08:04 +00:00
|
|
|
(*offset)++;
|
2013-04-21 23:20:10 +00:00
|
|
|
tm.tm_hour = 0x1F & tvb_get_guint8(tvb, *offset);
|
2009-09-20 21:08:04 +00:00
|
|
|
(*offset)++;
|
2013-04-21 23:20:10 +00:00
|
|
|
tm.tm_mday = tvb_get_guint8(tvb, *offset) & 0x1F;
|
2009-09-20 21:08:04 +00:00
|
|
|
(*offset)++;
|
2013-04-21 23:20:10 +00:00
|
|
|
tm.tm_mon = 0x0F & tvb_get_guint8(tvb, *offset);
|
2009-09-20 21:08:04 +00:00
|
|
|
(*offset)++;
|
2013-04-21 23:20:10 +00:00
|
|
|
tm.tm_year = 0x7F & tvb_get_guint8(tvb, *offset);
|
2009-09-20 21:08:04 +00:00
|
|
|
(*offset)++;
|
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
tm.tm_isdst = -1; /* there's no info on whether DST was in force; assume it's
|
|
|
|
* the same as currently */
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
datetime.secs = mktime(&tm);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
ti = proto_tree_add_time(iec104_header_tree, hf_cp56time, tvb, (*offset)-7, 7, &datetime);
|
|
|
|
proto_item_append_text(ti, "%s", valid ? "Invalid":"Valid");
|
2009-09-20 21:08:04 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
Information object address (Identifier)
|
|
|
|
ASDU -> Inform Object #1 -> Information object address
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static proto_item* get_InfoObjectAddress( guint32 *asdu_info_obj_addr, tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_item* ti;
|
|
|
|
|
2009-09-20 21:08:04 +00:00
|
|
|
/* -------- Information object address */
|
|
|
|
*asdu_info_obj_addr = tvb_get_letoh24(tvb, *offset);
|
2013-04-21 23:20:10 +00:00
|
|
|
ti = proto_tree_add_item(iec104_header_tree, hf_ioa, tvb, *offset, 3, ENC_LITTLE_ENDIAN);
|
2010-09-23 21:46:31 +00:00
|
|
|
(*offset) += 3;
|
2013-04-21 23:20:10 +00:00
|
|
|
|
|
|
|
return ti;
|
2009-09-20 21:08:04 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
SIQ: Single-point information (IEV 371-02-07) w quality descriptor
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_SIQ( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_item* ti;
|
|
|
|
proto_tree* siq_tree;
|
|
|
|
|
|
|
|
ti = proto_tree_add_item(iec104_header_tree, hf_siq, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
siq_tree = proto_item_add_subtree( ti, ett_siq );
|
|
|
|
|
|
|
|
proto_tree_add_item(siq_tree, hf_siq_on, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(siq_tree, hf_siq_bl, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(siq_tree, hf_siq_sb, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(siq_tree, hf_siq_nt, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(siq_tree, hf_siq_iv, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
|
|
|
(*offset)++;
|
|
|
|
}
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
DIQ: Double-point information (IEV 371-02-08) w quality descriptor
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_DIQ( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_item* ti;
|
|
|
|
proto_tree* diq_tree;
|
|
|
|
|
|
|
|
ti = proto_tree_add_item(iec104_header_tree, hf_diq, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
diq_tree = proto_item_add_subtree( ti, ett_diq );
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_tree_add_item(diq_tree, hf_diq_value, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(diq_tree, hf_diq_bl, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(diq_tree, hf_diq_sb, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(diq_tree, hf_diq_nt, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(diq_tree, hf_diq_iv, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
|
|
|
(*offset)++;
|
|
|
|
|
|
|
|
}
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
|
|
|
QDS: Quality descriptor (separate octet)
|
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_QDS( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_item* ti;
|
|
|
|
proto_tree* qds_tree;
|
|
|
|
|
|
|
|
ti = proto_tree_add_item(iec104_header_tree, hf_qds, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
qds_tree = proto_item_add_subtree( ti, ett_qds );
|
|
|
|
|
|
|
|
proto_tree_add_item(qds_tree, hf_qds_ov, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(qds_tree, hf_qds_bl, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(qds_tree, hf_qds_sb, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(qds_tree, hf_qds_nt, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(qds_tree, hf_qds_iv, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
|
|
|
(*offset)++;
|
|
|
|
}
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
QDP: Quality descriptor for events of protection equipment
|
|
|
|
(separate octet)
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2010-10-10 23:28:40 +00:00
|
|
|
#if 0
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_QDP( tvbuff_t *tvb _U_, guint8 *offset _U_, proto_tree *iec104_header_tree _U_ )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
|
|
|
/* todo */
|
|
|
|
|
|
|
|
}
|
2010-10-10 23:28:40 +00:00
|
|
|
#endif
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
VTI: Value with transient state indication
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_VTI( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree)
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_tree_add_item(iec104_header_tree, hf_vti, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(iec104_header_tree, hf_vti_tr, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2010-12-22 23:28:23 +00:00
|
|
|
(*offset)++;
|
2009-09-20 21:08:04 +00:00
|
|
|
}
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
NVA: Normalized value
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_NVA( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
|
|
|
/* Normalized value F16[1..16]<-1..+1-2^-15> */
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_tree_add_item(iec104_header_tree, hf_asdu_normval, tvb, *offset, 2, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
/* todo ... presentation as float +/- 1 (val/32767) ... */
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
(*offset) += 2;
|
2009-09-20 21:08:04 +00:00
|
|
|
}
|
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_NVAspt( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
|
|
|
/* Normalized value F16[1..16]<-1..+1-2^-15> */
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_tree_add_item(iec104_header_tree, hf_asdu_normval, tvb, *offset, 2, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
/* todo ... presentation as float +/- 1 */
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
(*offset) += 2;
|
2009-09-20 21:08:04 +00:00
|
|
|
}
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
SVA: Scaled value
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_SVA( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
|
|
|
/* Scaled value I16[1..16]<-2^15..+2^15-1> */
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_tree_add_item(iec104_header_tree, hf_asdu_normval, tvb, *offset, 2, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
(*offset) += 2;
|
2009-09-20 21:08:04 +00:00
|
|
|
}
|
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_SVAspt( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
|
|
|
/* Scaled value I16[1..16]<-2^15..+2^15-1> */
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_tree_add_item(iec104_header_tree, hf_asdu_normval, tvb, *offset, 2, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
(*offset) += 2;
|
2009-09-20 21:08:04 +00:00
|
|
|
}
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
"FLT": Short floating point number
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_FLT( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
/* -------- IEEE 754 float value */
|
|
|
|
proto_tree_add_item(iec104_header_tree, hf_asdu_float, tvb, *offset, 4, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
(*offset) += 4;
|
2009-09-20 21:08:04 +00:00
|
|
|
}
|
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_FLTspt( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
/* -------- IEEE 754 float value */
|
|
|
|
proto_tree_add_item(iec104_header_tree, hf_asdu_float, tvb, *offset, 4, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
(*offset) += 4;
|
2009-09-20 21:08:04 +00:00
|
|
|
}
|
|
|
|
|
2010-12-22 23:28:23 +00:00
|
|
|
/* ====================================================================
|
|
|
|
"BSI": Binary state information, 32 bit
|
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_BSI( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2010-12-22 23:28:23 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_tree_add_bits_item(iec104_header_tree, hf_asdu_bitstring, tvb, *offset*8, 32, ENC_BIG_ENDIAN);
|
2010-12-22 23:28:23 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
(*offset) += 4;
|
2010-12-22 23:28:23 +00:00
|
|
|
}
|
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_BSIspt( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2010-12-22 23:28:23 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_tree_add_bits_item(iec104_header_tree, hf_asdu_bitstring, tvb, *offset*8, 32, ENC_BIG_ENDIAN);
|
2010-12-22 23:28:23 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
(*offset) += 4;
|
2010-12-22 23:28:23 +00:00
|
|
|
}
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
todo -- BCR: Binary counter reading
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
/* void get_BCR( guint8 *offset,
|
2009-09-20 21:08:04 +00:00
|
|
|
proto_tree *iec104_header_tree ); */
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
todo -- SEP: Single event of protection equipment
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2010-10-10 23:28:40 +00:00
|
|
|
#if 0
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_SEP( tvbuff_t *tvb _U_, guint8 *offset _U_, proto_tree *iec104_header_tree _U_ )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
/* todo */
|
2009-09-20 21:08:04 +00:00
|
|
|
|
|
|
|
}
|
2010-10-10 23:28:40 +00:00
|
|
|
#endif
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
QOS: Qualifier Of Set-point command
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_QOS( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_tree_add_item(iec104_header_tree, hf_qos_ql, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(iec104_header_tree, hf_qos_se, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
|
|
|
(*offset)++;
|
|
|
|
}
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
SCO: Single Command (IEV 371-03-02)
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_SCO( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_item* ti;
|
|
|
|
proto_tree* sco_tree;
|
|
|
|
|
|
|
|
ti = proto_tree_add_item(iec104_header_tree, hf_sco, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
sco_tree = proto_item_add_subtree( ti, ett_sco );
|
|
|
|
|
|
|
|
proto_tree_add_item(sco_tree, hf_sco_on, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(sco_tree, hf_sco_qu, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(sco_tree, hf_sco_se, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
|
|
|
(*offset)++;
|
|
|
|
}
|
|
|
|
|
2010-09-23 21:46:31 +00:00
|
|
|
/* ====================================================================
|
2009-09-20 21:08:04 +00:00
|
|
|
DCO: Double Command (IEV 371-03-03)
|
2010-09-23 21:46:31 +00:00
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_DCO( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_item* ti;
|
|
|
|
proto_tree* dco_tree;
|
|
|
|
|
|
|
|
ti = proto_tree_add_item(iec104_header_tree, hf_dco, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
dco_tree = proto_item_add_subtree( ti, ett_dco );
|
|
|
|
|
|
|
|
proto_tree_add_item(dco_tree, hf_dco_on, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(dco_tree, hf_dco_qu, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(dco_tree, hf_dco_se, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
2009-09-20 21:08:04 +00:00
|
|
|
|
|
|
|
(*offset)++;
|
2010-12-22 23:28:23 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
/* ====================================================================
|
|
|
|
RCO: Regulating step command (IEV 371-03-13)
|
|
|
|
==================================================================== */
|
2013-04-21 23:20:10 +00:00
|
|
|
static void get_RCO( tvbuff_t *tvb, guint8 *offset, proto_tree *iec104_header_tree )
|
2010-12-22 23:28:23 +00:00
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_item* ti;
|
|
|
|
proto_tree* rco_tree;
|
|
|
|
|
|
|
|
ti = proto_tree_add_item(iec104_header_tree, hf_rco, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
rco_tree = proto_item_add_subtree( ti, ett_rco );
|
|
|
|
|
|
|
|
proto_tree_add_item(rco_tree, hf_rco_up, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(rco_tree, hf_rco_qu, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(rco_tree, hf_rco_se, tvb, *offset, 1, ENC_LITTLE_ENDIAN);
|
2010-12-22 23:28:23 +00:00
|
|
|
|
|
|
|
(*offset)++;
|
2009-09-20 21:08:04 +00:00
|
|
|
}
|
|
|
|
/* .... end Misc. functions for dissection of signal values */
|
|
|
|
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-09-30 16:03:18 +00:00
|
|
|
/* Find the APDU 104 (APDU=APCI+ASDU) length.
|
2008-09-29 16:49:14 +00:00
|
|
|
Includes possible tvb_length-1 bytes that don't form an APDU */
|
|
|
|
static guint get_iec104apdu_len(packet_info *pinfo _U_, tvbuff_t *tvb, int offset)
|
|
|
|
{
|
|
|
|
guint8 Val;
|
2008-09-30 16:03:18 +00:00
|
|
|
guint32 Off;
|
2008-09-29 16:49:14 +00:00
|
|
|
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
for (Off = 0; Off <= tvb_reported_length(tvb) - 2; Off++) {
|
|
|
|
Val = tvb_get_guint8(tvb, offset + Off);
|
2008-09-29 16:49:14 +00:00
|
|
|
if (Val == APCI_START) {
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
return (guint)(Off + tvb_get_guint8(tvb, offset + Off + 1) + 2);
|
2008-09-29 16:49:14 +00:00
|
|
|
}
|
|
|
|
}
|
2008-09-30 16:03:18 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
return (guint)(tvb_reported_length(tvb));
|
2008-09-29 16:49:14 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/* Is is called twice: For 'Packet List' and for 'Packet Details' */
|
|
|
|
static void dissect_iec104asdu(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
|
|
|
|
{
|
2009-03-31 07:10:17 +00:00
|
|
|
guint Len = tvb_reported_length(tvb);
|
2013-04-21 23:20:10 +00:00
|
|
|
guint8 Bytex;
|
2009-03-31 07:10:17 +00:00
|
|
|
const char *cause_str;
|
2013-04-21 23:20:10 +00:00
|
|
|
size_t Ind;
|
|
|
|
struct asduheader asduh;
|
|
|
|
proto_item *it104, *ioa_item;
|
|
|
|
proto_tree *it104tree;
|
2010-09-23 21:46:31 +00:00
|
|
|
|
|
|
|
|
2009-09-20 21:08:04 +00:00
|
|
|
guint8 offset = 0; /* byte offset, signal dissection */
|
|
|
|
guint8 offset_start_ioa = 0; /* position first ioa */
|
|
|
|
guint8 i;
|
|
|
|
guint32 asdu_info_obj_addr = 0;
|
|
|
|
proto_item * itSignal = NULL;
|
|
|
|
proto_tree * trSignal;
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2009-08-09 07:59:51 +00:00
|
|
|
col_set_str(pinfo->cinfo, COL_PROTOCOL, "104asdu");
|
2009-08-09 08:14:59 +00:00
|
|
|
col_clear(pinfo->cinfo, COL_INFO);
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
it104 = proto_tree_add_item(tree, proto_iec104asdu, tvb, 0, -1, ENC_NA);
|
|
|
|
it104tree = proto_item_add_subtree(it104, ett_asdu);
|
|
|
|
|
|
|
|
asduh.TypeId = tvb_get_guint8(tvb, 0);
|
|
|
|
proto_tree_add_item(it104tree, hf_typeid, tvb, 0, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
Bytex = tvb_get_guint8(tvb, 1);
|
|
|
|
asduh.NumIx = Bytex & 0x7F;
|
|
|
|
asduh.SQ = Bytex & F_SQ;
|
|
|
|
proto_tree_add_item(it104tree, hf_numix, tvb, 1, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
if (asduh.NumIx > 1)
|
|
|
|
proto_tree_add_item(it104tree, hf_sq, tvb, 1, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
asduh.TNCause = tvb_get_guint8(tvb, 2);
|
|
|
|
proto_tree_add_item(it104tree, hf_causetx, tvb, 2, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(it104tree, hf_nega, tvb, 2, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(it104tree, hf_test, tvb, 2, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
asduh.OA = tvb_get_guint8(tvb, 3);
|
|
|
|
proto_tree_add_item(it104tree, hf_oa, tvb, 3, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
asduh.Addr = tvb_get_letohs(tvb, 4);
|
|
|
|
proto_tree_add_item(it104tree, hf_addr, tvb, 4, 2, ENC_LITTLE_ENDIAN);
|
|
|
|
asduh.IOA = tvb_get_letoh24(tvb, 6);
|
|
|
|
proto_tree_add_item(it104tree, hf_ioa, tvb, 6, 3, ENC_LITTLE_ENDIAN);
|
|
|
|
|
|
|
|
cause_str = val_to_str(asduh.TNCause & F_CAUSE, causetx_types, " <CauseTx=%u>");
|
|
|
|
col_append_fstr( pinfo->cinfo, COL_INFO, "%u %s %u %s %s", asduh.Addr, pinfo->srcport == IEC104_PORT ? "->" : "<-",
|
|
|
|
asduh.OA, val_to_str(asduh.TypeId, asdu_types, "<TypeId=%u>"), cause_str);
|
|
|
|
if (asduh.TNCause & F_NEGA)
|
|
|
|
col_append_str( pinfo->cinfo, COL_INFO, "_NEGA");
|
|
|
|
if (asduh.TNCause & F_TEST)
|
|
|
|
col_append_str( pinfo->cinfo, COL_INFO, "_TEST");
|
|
|
|
|
|
|
|
if (asduh.TNCause & (F_TEST | F_NEGA)) {
|
|
|
|
for (Ind=strlen(cause_str); Ind< 7; Ind++)
|
|
|
|
col_append_str( pinfo->cinfo, COL_INFO, " ");
|
2008-09-29 16:49:14 +00:00
|
|
|
}
|
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
col_append_fstr( pinfo->cinfo, COL_INFO, " IOA=%d", asduh.IOA);
|
|
|
|
if (asduh.NumIx > 1) {
|
|
|
|
if (asduh.SQ == F_SQ)
|
|
|
|
col_append_fstr( pinfo->cinfo, COL_INFO, "-%d", asduh.IOA + asduh.NumIx - 1);
|
|
|
|
else
|
|
|
|
col_append_str( pinfo->cinfo, COL_INFO, ",...");
|
|
|
|
col_append_fstr( pinfo->cinfo, COL_INFO, " (%u) ", asduh.NumIx);
|
|
|
|
} else {
|
|
|
|
col_append_str( pinfo->cinfo, COL_INFO, " ");
|
2008-09-29 16:49:14 +00:00
|
|
|
}
|
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
col_set_fence(pinfo->cinfo, COL_INFO);
|
2010-09-23 21:46:31 +00:00
|
|
|
|
2009-09-20 21:08:04 +00:00
|
|
|
/* 'Signal Details': TREE */
|
|
|
|
offset = 6; /* offset position after DUI, already stored in asduh struct */
|
|
|
|
/* -------- get signal value and status based on ASDU type id */
|
2010-09-23 21:46:31 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
switch (asduh.TypeId) {
|
2009-09-20 21:08:04 +00:00
|
|
|
case M_SP_NA_1:
|
|
|
|
case M_DP_NA_1:
|
2010-12-22 23:28:23 +00:00
|
|
|
case M_ST_NA_1:
|
|
|
|
case M_BO_NA_1:
|
2010-09-23 21:46:31 +00:00
|
|
|
case M_SP_TB_1:
|
|
|
|
case M_DP_TB_1:
|
2010-12-22 23:28:23 +00:00
|
|
|
case M_ST_TB_1:
|
|
|
|
case M_BO_TB_1:
|
2010-09-23 21:46:31 +00:00
|
|
|
case M_ME_NA_1:
|
|
|
|
case M_ME_NB_1:
|
2009-09-20 21:08:04 +00:00
|
|
|
case M_ME_NC_1:
|
2010-09-23 21:46:31 +00:00
|
|
|
case M_ME_ND_1:
|
|
|
|
case M_ME_TD_1:
|
|
|
|
case M_ME_TE_1:
|
|
|
|
case M_ME_TF_1:
|
2009-09-20 21:08:04 +00:00
|
|
|
case C_SC_NA_1:
|
|
|
|
case C_DC_NA_1:
|
2010-12-22 23:28:23 +00:00
|
|
|
case C_RC_NA_1:
|
2010-09-23 21:46:31 +00:00
|
|
|
case C_SE_NA_1:
|
|
|
|
case C_SE_NB_1:
|
|
|
|
case C_SE_NC_1:
|
2010-12-22 23:28:23 +00:00
|
|
|
case C_BO_NA_1:
|
2010-09-23 21:46:31 +00:00
|
|
|
case C_SC_TA_1:
|
|
|
|
case C_DC_TA_1:
|
2010-12-22 23:28:23 +00:00
|
|
|
case C_RC_TA_1:
|
2010-09-23 21:46:31 +00:00
|
|
|
case C_SE_TA_1:
|
|
|
|
case C_SE_TB_1:
|
|
|
|
case C_SE_TC_1:
|
2010-12-22 23:28:23 +00:00
|
|
|
case C_BO_TA_1:
|
2010-09-23 21:46:31 +00:00
|
|
|
case C_CS_NA_1:
|
|
|
|
|
2009-09-20 21:08:04 +00:00
|
|
|
/* create subtree for the signal values ... */
|
2013-04-21 23:20:10 +00:00
|
|
|
itSignal = proto_tree_add_text(it104tree, tvb, offset, -1, "Object values");
|
|
|
|
trSignal = proto_item_add_subtree( itSignal, ett_asdu_objects );
|
2010-09-23 21:46:31 +00:00
|
|
|
|
2009-09-20 21:08:04 +00:00
|
|
|
/* -- object values */
|
2013-04-21 23:20:10 +00:00
|
|
|
for(i = 0; i < asduh.NumIx; i++)
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
|
|
|
/* -------- First Information object address */
|
|
|
|
if (!i)
|
|
|
|
{
|
|
|
|
offset_start_ioa = offset;
|
|
|
|
/* -------- Information object address */
|
2013-04-21 23:20:10 +00:00
|
|
|
asdu_info_obj_addr = asduh.IOA;
|
|
|
|
ioa_item = proto_tree_add_uint(trSignal, hf_ioa, tvb, offset_start_ioa, 3, asdu_info_obj_addr);
|
2009-09-20 21:08:04 +00:00
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+3) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
|
|
|
offset += 3; /* step over IOA bytes */
|
|
|
|
} else {
|
|
|
|
/* -------- following Information object address depending on SQ */
|
2013-04-21 23:20:10 +00:00
|
|
|
if (asduh.SQ) /* <=> SQ=1, info obj addr = startaddr++ */
|
2009-09-20 21:08:04 +00:00
|
|
|
{
|
|
|
|
asdu_info_obj_addr++;
|
2013-04-21 23:20:10 +00:00
|
|
|
ioa_item = proto_tree_add_uint(trSignal, hf_ioa, tvb, offset_start_ioa, 3, asdu_info_obj_addr);
|
2009-09-20 21:08:04 +00:00
|
|
|
} else { /* SQ=0, info obj addr given */
|
|
|
|
/* -------- Information object address */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+3) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, itSignal, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
ioa_item = get_InfoObjectAddress( &asdu_info_obj_addr, tvb, &offset, trSignal);
|
2010-09-23 21:46:31 +00:00
|
|
|
|
2009-09-20 21:08:04 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
switch (asduh.TypeId) {
|
2009-09-20 21:08:04 +00:00
|
|
|
case M_SP_NA_1: /* 1 Single-point information */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+1) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_SIQ( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case M_DP_NA_1: /* 3 Double-point information */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+1) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_DIQ( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
2010-12-22 23:28:23 +00:00
|
|
|
case M_ST_NA_1: /* 5 Step position information */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+2) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2010-12-22 23:28:23 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_VTI( tvb, &offset, trSignal );
|
|
|
|
get_QDS( tvb, &offset, trSignal );
|
2010-12-22 23:28:23 +00:00
|
|
|
break;
|
|
|
|
case M_BO_NA_1: /* 7 Bitstring of 32 bits */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+5) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2010-12-22 23:28:23 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_BSI( tvb, &offset, trSignal );
|
|
|
|
get_QDS( tvb, &offset, trSignal );
|
2010-12-22 23:28:23 +00:00
|
|
|
break;
|
2009-09-20 21:08:04 +00:00
|
|
|
case M_ME_NA_1: /* 9 Measured value, normalized value */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+3) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_NVA( tvb, &offset, trSignal );
|
|
|
|
get_QDS( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case M_ME_NB_1: /* 11 Measured value, scaled value */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+3) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_SVA( tvb, &offset, trSignal );
|
|
|
|
get_QDS( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case M_ME_NC_1: /* 13 Measured value, short floating point value */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+5) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_FLT( tvb, &offset, trSignal );
|
|
|
|
get_QDS( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case M_ME_ND_1: /* 21 Measured value, normalized value without quality descriptor */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+2) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_NVA( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case M_SP_TB_1: /* 30 Single-point information with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+8) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_SIQ( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case M_DP_TB_1: /* 31 Double-point information with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+8) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_DIQ( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
2010-12-22 23:28:23 +00:00
|
|
|
case M_ST_TB_1: /* 32 Step position information with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+9) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2010-12-22 23:28:23 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_VTI( tvb, &offset, trSignal );
|
|
|
|
get_QDS( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2010-12-22 23:28:23 +00:00
|
|
|
break;
|
|
|
|
case M_BO_TB_1: /* 33 bitstring of 32 bit with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+12) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2010-12-22 23:28:23 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_BSI( tvb, &offset, trSignal );
|
|
|
|
get_QDS( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2010-12-22 23:28:23 +00:00
|
|
|
break;
|
2009-09-20 21:08:04 +00:00
|
|
|
case M_ME_TD_1: /* 34 Measured value, normalized value with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+10) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_NVA( tvb, &offset, trSignal );
|
|
|
|
get_QDS( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case M_ME_TE_1: /* 35 Measured value, scaled value with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+10) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_SVA( tvb, &offset, trSignal );
|
|
|
|
get_QDS( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case M_ME_TF_1: /* 36 Measured value, short floating point value with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+12) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_FLT( tvb, &offset, trSignal );
|
|
|
|
get_QDS( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case C_SC_NA_1: /* 45 Single command */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+1) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_SCO( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case C_DC_NA_1: /* 46 Double command */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+1) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_DCO( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
2010-12-22 23:28:23 +00:00
|
|
|
case C_RC_NA_1: /* 47 Regulating step command */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+1) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2010-12-22 23:28:23 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_RCO( tvb, &offset, trSignal );
|
2010-12-22 23:28:23 +00:00
|
|
|
break;
|
2009-09-20 21:08:04 +00:00
|
|
|
case C_SE_NA_1: /* 48 Set point command, normalized value */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+3) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_NVAspt( tvb, &offset, trSignal );
|
|
|
|
get_QOS( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case C_SE_NB_1: /* 49 Set point command, scaled value */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+3) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_SVAspt( tvb, &offset, trSignal );
|
|
|
|
get_QOS( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case C_SE_NC_1: /* 50 Set point command, short floating point value */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+5) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_FLTspt( tvb, &offset, trSignal );
|
|
|
|
get_QOS( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
2010-12-22 23:28:23 +00:00
|
|
|
case C_BO_NA_1: /* 51 Bitstring of 32 bits */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+4) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2010-12-22 23:28:23 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_BSIspt( tvb, &offset, trSignal );
|
2010-12-22 23:28:23 +00:00
|
|
|
break;
|
2009-09-20 21:08:04 +00:00
|
|
|
case C_SC_TA_1: /* 58 Single command with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+8) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_SCO( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case C_DC_TA_1: /* 59 Double command with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+8) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_DCO( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2010-09-23 21:46:31 +00:00
|
|
|
break;
|
2010-12-22 23:28:23 +00:00
|
|
|
case C_RC_TA_1: /* 60 Regulating step command with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+8) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2010-12-22 23:28:23 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_RCO( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2010-12-22 23:28:23 +00:00
|
|
|
break;
|
2009-09-20 21:08:04 +00:00
|
|
|
case C_SE_TA_1: /* 61 Set point command, normalized value with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+10) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_NVAspt( tvb, &offset, trSignal );
|
|
|
|
get_QOS( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case C_SE_TB_1: /* 62 Set point command, scaled value with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+10) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_SVAspt( tvb, &offset, trSignal );
|
|
|
|
get_QOS( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
case C_SE_TC_1: /* 63 Set point command, short floating point value with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+12) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_FLTspt( tvb, &offset, trSignal );
|
|
|
|
get_QOS( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
2010-12-22 23:28:23 +00:00
|
|
|
case C_BO_TA_1: /* 64 Bitstring of 32 bits with time tag CP56Time2a */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+11) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2010-12-22 23:28:23 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_BSIspt( tvb, &offset, trSignal );
|
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2010-12-22 23:28:23 +00:00
|
|
|
break;
|
2009-09-20 21:08:04 +00:00
|
|
|
case C_CS_NA_1: /* 103 clock synchronization command */
|
|
|
|
/* check length */
|
|
|
|
if( Len < (guint)(offset+7) ) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info(pinfo, ioa_item, &ei_iec104_short_asdu);
|
2009-09-20 21:08:04 +00:00
|
|
|
return;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
get_CP56Time( tvb, &offset, trSignal );
|
2009-09-20 21:08:04 +00:00
|
|
|
break;
|
|
|
|
|
|
|
|
default:
|
|
|
|
break;
|
2013-04-21 23:20:10 +00:00
|
|
|
} /* end 'switch (asduh.TypeId)' */
|
2009-09-20 21:08:04 +00:00
|
|
|
} /* end 'for(i = 0; i < dui.asdu_vsq_no_of_obj; i++)' */
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
break;
|
|
|
|
} /* end 'switch (asdu_typeid)' */
|
|
|
|
|
2008-09-29 16:49:14 +00:00
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/* Is is called twice: For 'Packet List' and for 'Packet Details' */
|
|
|
|
static void dissect_iec104apci(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
|
|
|
|
{
|
2013-04-21 23:20:10 +00:00
|
|
|
guint TcpLen = tvb_reported_length(tvb);
|
|
|
|
guint8 Start = 0, len, type = 0, temp8;
|
|
|
|
guint8 temp16;
|
2010-08-02 13:09:01 +00:00
|
|
|
guint Off;
|
2013-04-21 23:20:10 +00:00
|
|
|
proto_item *it104, *ti;
|
|
|
|
proto_tree *it104tree;
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2009-08-09 07:59:51 +00:00
|
|
|
col_set_str(pinfo->cinfo, COL_PROTOCOL, "104apci");
|
2009-08-09 08:14:59 +00:00
|
|
|
col_clear(pinfo->cinfo, COL_INFO);
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
it104 = proto_tree_add_item(tree, proto_iec104apci, tvb, 0, -1, ENC_NA);
|
|
|
|
it104tree = proto_item_add_subtree(it104, ett_apci);
|
2009-03-31 07:10:17 +00:00
|
|
|
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
for (Off = 0; Off <= TcpLen - 2; Off++) {
|
2008-09-30 16:03:18 +00:00
|
|
|
Start = tvb_get_guint8(tvb, Off);
|
2008-09-29 16:49:14 +00:00
|
|
|
if (Start == APCI_START) {
|
2013-04-21 23:20:10 +00:00
|
|
|
if (Off > 0)
|
|
|
|
{
|
|
|
|
proto_tree_add_item(it104tree, hf_apcidata, tvb, 0, Off, ENC_NA);
|
|
|
|
col_append_fstr( pinfo->cinfo, COL_INFO, "<ERR prefix %u bytes> ", Off);
|
2008-09-29 16:49:14 +00:00
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
proto_item_set_len(it104, Off + APCI_LEN);
|
2013-04-21 23:20:10 +00:00
|
|
|
|
|
|
|
proto_tree_add_text(it104tree, tvb, Off, 1, "START");
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
ti = proto_tree_add_item(it104tree, hf_apdulen, tvb, Off + 1, 1, ENC_LITTLE_ENDIAN);
|
|
|
|
proto_tree_add_item(it104tree, hf_apcitype, tvb, Off + 2, 1, ENC_LITTLE_ENDIAN);
|
2013-04-21 23:20:10 +00:00
|
|
|
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
len = tvb_get_guint8(tvb, Off + 1);
|
2013-04-21 23:20:10 +00:00
|
|
|
if (len < APDU_MIN_LEN) {
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_add_info_format_text(pinfo, ti, &ei_iec104_apdu_min_len, "APDU less than %d bytes", APDU_MIN_LEN);
|
2013-04-21 23:20:10 +00:00
|
|
|
col_append_fstr( pinfo->cinfo, COL_INFO, "<ERR ApduLen=%u bytes> ", len);
|
|
|
|
return;
|
2008-09-29 16:49:14 +00:00
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
temp8 = tvb_get_guint8(tvb, Off + 2);
|
2013-04-21 23:20:10 +00:00
|
|
|
type = temp8 & 0x03;
|
|
|
|
|
|
|
|
if (len <= APDU_MAX_LEN) {
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
col_append_fstr( pinfo->cinfo, COL_INFO, "%s %s (",
|
|
|
|
(pinfo->srcport == IEC104_PORT ? "->" : "<-"),
|
2013-04-21 23:20:10 +00:00
|
|
|
val_to_str_const(type, apci_types, "<ERR>"));
|
|
|
|
}
|
|
|
|
else {
|
|
|
|
col_append_fstr( pinfo->cinfo, COL_INFO, "<ERR ApduLen=%u bytes> ", len);
|
|
|
|
}
|
|
|
|
|
|
|
|
switch(type) {
|
2008-09-29 16:49:14 +00:00
|
|
|
case I_TYPE:
|
2013-04-21 23:20:10 +00:00
|
|
|
case I_TYPE2:
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
temp16 = tvb_get_letohs(tvb, Off + 2) >> 1;
|
2013-04-21 23:20:10 +00:00
|
|
|
col_append_fstr( pinfo->cinfo, COL_INFO, "%2.2d,", temp16);
|
|
|
|
proto_tree_add_uint(it104tree, hf_apcitx, tvb, Off+2, 2, temp16);
|
2008-09-29 16:49:14 +00:00
|
|
|
case S_TYPE:
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
temp16 = tvb_get_letohs(tvb, Off + 4) >> 1;
|
2013-04-21 23:20:10 +00:00
|
|
|
col_append_fstr( pinfo->cinfo, COL_INFO, "%2.2d) ", temp16);
|
|
|
|
proto_tree_add_uint(it104tree, hf_apcirx, tvb, Off+4, 2, temp16);
|
2008-09-29 16:49:14 +00:00
|
|
|
break;
|
|
|
|
case U_TYPE:
|
2013-04-21 23:20:10 +00:00
|
|
|
col_append_fstr( pinfo->cinfo, COL_INFO, "%s) ", val_to_str_const((temp8 >> 2) & 0x3F, u_types, "<ERR>"));
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
proto_tree_add_item(it104tree, hf_apciutype, tvb, Off + 2, 1, ENC_LITTLE_ENDIAN);
|
2008-09-29 16:49:14 +00:00
|
|
|
break;
|
|
|
|
}
|
2013-04-21 23:20:10 +00:00
|
|
|
/* Don't search more the APCI_START */
|
|
|
|
break;
|
2008-09-29 16:49:14 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
if (Start != APCI_START) {
|
|
|
|
/* Everything is bad (no APCI found) */
|
|
|
|
proto_tree_add_item(it104tree, hf_apcidata, tvb, 0, Off, ENC_NA);
|
|
|
|
return;
|
2009-07-06 14:09:52 +00:00
|
|
|
}
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
if ((type == I_TYPE) || (type == I_TYPE2)) {
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
call_dissector(iec104asdu_handle, tvb_new_subset(tvb, Off + APCI_LEN, -1, len - APCI_DATA_LEN), pinfo, tree);
|
2013-04-21 23:20:10 +00:00
|
|
|
} else {
|
|
|
|
col_set_fence(pinfo->cinfo, COL_INFO);
|
2008-09-29 16:49:14 +00:00
|
|
|
}
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
static void dissect_iec104reas(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
|
|
|
|
{
|
2010-09-23 21:46:31 +00:00
|
|
|
/* 5th parameter = 6 = minimum bytes received to calculate the length.
|
2009-07-06 14:09:52 +00:00
|
|
|
* (Not 2 in order to find more APCIs in case of 'noisy' bytes between the APCIs)
|
|
|
|
*/
|
2008-09-30 16:03:18 +00:00
|
|
|
tcp_dissect_pdus(tvb, pinfo, tree, TRUE, APCI_LEN,
|
2008-09-29 16:49:14 +00:00
|
|
|
get_iec104apdu_len, dissect_iec104apci);
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/* The protocol has two subprotocols: Register APCI */
|
|
|
|
void
|
|
|
|
proto_register_iec104apci(void)
|
|
|
|
{
|
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
static hf_register_info hf_ap[] = {
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_apdulen,
|
|
|
|
{ "ApduLen", "104apci.apdulen", FT_UINT8, BASE_DEC, NULL, 0x0,
|
|
|
|
"APDU Len", HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_apcitype,
|
2013-04-21 23:20:10 +00:00
|
|
|
{ "Type", "104apci.type", FT_UINT8, BASE_HEX, VALS(apci_types), 0x03,
|
2008-10-05 23:08:54 +00:00
|
|
|
"APCI type", HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_apciutype,
|
2013-04-21 23:20:10 +00:00
|
|
|
{ "UType", "104apci.utype", FT_UINT8, BASE_HEX, VALS(u_types), 0xFC,
|
2008-10-05 23:08:54 +00:00
|
|
|
"Apci U type", HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
{ &hf_apcitx,
|
|
|
|
{ "Tx", "104apci.tx", FT_UINT16, BASE_DEC, NULL, 0,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_apcirx,
|
|
|
|
{ "Rx", "104apci.rx", FT_UINT16, BASE_DEC, NULL, 0,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_apcidata,
|
|
|
|
{ "Data", "104apci.data", FT_BYTES, BASE_NONE, NULL, 0,
|
|
|
|
NULL, HFILL }},
|
2008-10-05 23:08:54 +00:00
|
|
|
};
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
static gint *ett_ap[] = {
|
|
|
|
&ett_apci,
|
|
|
|
};
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
proto_iec104apci = proto_register_protocol(
|
2009-07-10 05:40:02 +00:00
|
|
|
"IEC 60870-5-104-Apci",
|
2008-10-05 23:08:54 +00:00
|
|
|
"104apci",
|
|
|
|
"104apci"
|
|
|
|
);
|
|
|
|
proto_register_field_array(proto_iec104apci, hf_ap, array_length(hf_ap));
|
|
|
|
proto_register_subtree_array(ett_ap, array_length(ett_ap));
|
2008-09-29 16:49:14 +00:00
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
/* The protocol has two subprotocols: Register ASDU */
|
|
|
|
void
|
|
|
|
proto_register_iec104asdu(void)
|
|
|
|
{
|
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
static hf_register_info hf_as[] = {
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_addr,
|
|
|
|
{ "Addr", "104asdu.addr", FT_UINT16, BASE_DEC, NULL, 0x0,
|
|
|
|
"Common Address of Asdu", HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_oa,
|
From Kovarththanan Rajaratnam via bug 3548:
(1) Trailing/leading spaces are removed from 'name's/'blurb's
(2) Duplicate 'blurb's are replaced with NULL
(3) Empty ("") 'blurb's are replaced with NULL
(4) BASE_NONE, NULL, 0x0 are used for 'display', 'strings' and 'bitmask' fields
for FT_NONE, FT_BYTES, FT_IPv4, FT_IPv6, FT_ABSOLUTE_TIME, FT_RELATIVE_TIME,
FT_PROTOCOL, FT_STRING and FT_STRINGZ field types
(5) Only allow non-zero value for 'display' if 'bitmask' is non-zero
svn path=/trunk/; revision=28770
2009-06-18 21:30:42 +00:00
|
|
|
{ "OA", "104asdu.oa", FT_UINT8, BASE_DEC, NULL, 0x0,
|
2008-10-05 23:08:54 +00:00
|
|
|
"Originator Address", HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_typeid,
|
From Kovarththanan Rajaratnam via bug 3548:
(1) Trailing/leading spaces are removed from 'name's/'blurb's
(2) Duplicate 'blurb's are replaced with NULL
(3) Empty ("") 'blurb's are replaced with NULL
(4) BASE_NONE, NULL, 0x0 are used for 'display', 'strings' and 'bitmask' fields
for FT_NONE, FT_BYTES, FT_IPv4, FT_IPv6, FT_ABSOLUTE_TIME, FT_RELATIVE_TIME,
FT_PROTOCOL, FT_STRING and FT_STRINGZ field types
(5) Only allow non-zero value for 'display' if 'bitmask' is non-zero
svn path=/trunk/; revision=28770
2009-06-18 21:30:42 +00:00
|
|
|
{ "TypeId", "104asdu.typeid", FT_UINT8, BASE_DEC, VALS(asdu_types), 0x0,
|
2008-10-05 23:08:54 +00:00
|
|
|
"Asdu Type Id", HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_causetx,
|
2013-04-21 23:20:10 +00:00
|
|
|
{ "CauseTx", "104asdu.causetx", FT_UINT8, BASE_DEC, VALS(causetx_types), F_CAUSE,
|
2008-10-05 23:08:54 +00:00
|
|
|
"Cause of Transmision", HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_nega,
|
|
|
|
{ "Negative", "104asdu.nega", FT_BOOLEAN, 8, NULL, F_NEGA,
|
From Kovarththanan Rajaratnam via bug 3548:
(1) Trailing/leading spaces are removed from 'name's/'blurb's
(2) Duplicate 'blurb's are replaced with NULL
(3) Empty ("") 'blurb's are replaced with NULL
(4) BASE_NONE, NULL, 0x0 are used for 'display', 'strings' and 'bitmask' fields
for FT_NONE, FT_BYTES, FT_IPv4, FT_IPv6, FT_ABSOLUTE_TIME, FT_RELATIVE_TIME,
FT_PROTOCOL, FT_STRING and FT_STRINGZ field types
(5) Only allow non-zero value for 'display' if 'bitmask' is non-zero
svn path=/trunk/; revision=28770
2009-06-18 21:30:42 +00:00
|
|
|
NULL, HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_test,
|
|
|
|
{ "Test", "104asdu.test", FT_BOOLEAN, 8, NULL, F_TEST,
|
From Kovarththanan Rajaratnam via bug 3548:
(1) Trailing/leading spaces are removed from 'name's/'blurb's
(2) Duplicate 'blurb's are replaced with NULL
(3) Empty ("") 'blurb's are replaced with NULL
(4) BASE_NONE, NULL, 0x0 are used for 'display', 'strings' and 'bitmask' fields
for FT_NONE, FT_BYTES, FT_IPv4, FT_IPv6, FT_ABSOLUTE_TIME, FT_RELATIVE_TIME,
FT_PROTOCOL, FT_STRING and FT_STRINGZ field types
(5) Only allow non-zero value for 'display' if 'bitmask' is non-zero
svn path=/trunk/; revision=28770
2009-06-18 21:30:42 +00:00
|
|
|
NULL, HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_ioa,
|
From Kovarththanan Rajaratnam via bug 3548:
(1) Trailing/leading spaces are removed from 'name's/'blurb's
(2) Duplicate 'blurb's are replaced with NULL
(3) Empty ("") 'blurb's are replaced with NULL
(4) BASE_NONE, NULL, 0x0 are used for 'display', 'strings' and 'bitmask' fields
for FT_NONE, FT_BYTES, FT_IPv4, FT_IPv6, FT_ABSOLUTE_TIME, FT_RELATIVE_TIME,
FT_PROTOCOL, FT_STRING and FT_STRINGZ field types
(5) Only allow non-zero value for 'display' if 'bitmask' is non-zero
svn path=/trunk/; revision=28770
2009-06-18 21:30:42 +00:00
|
|
|
{ "IOA", "104asdu.ioa", FT_UINT24, BASE_DEC, NULL, 0x0,
|
2008-10-05 23:08:54 +00:00
|
|
|
"Information Object Address", HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_numix,
|
|
|
|
{ "NumIx", "104asdu.numix", FT_UINT8, BASE_DEC, NULL, 0x7F,
|
|
|
|
"Number of Information Objects/Elements", HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
{ &hf_sq,
|
|
|
|
{ "SQ", "104asdu.sq", FT_BOOLEAN, 8, NULL, F_SQ,
|
|
|
|
"Sequence", HFILL }},
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
{ &hf_cp56time,
|
|
|
|
{ "CP56Time", "104asdu.cp56time", FT_ABSOLUTE_TIME, ABSOLUTE_TIME_LOCAL, NULL, 0,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_siq,
|
|
|
|
{ "SIQ", "104asdu.siq", FT_UINT8, BASE_HEX, NULL, 0,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_siq_on,
|
|
|
|
{ "SQ", "104asdu.siq.on", FT_BOOLEAN, 8, TFS(&tfs_on_off), 0x01,
|
|
|
|
"SIQ SQ", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_siq_bl,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "BL", "104asdu.siq.bl", FT_BOOLEAN, 8, TFS(&tfs_blocked_not_blocked), 0x10,
|
2013-04-21 23:20:10 +00:00
|
|
|
"SIQ BL", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_siq_sb,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "SB", "104asdu.siq.sb", FT_BOOLEAN, 8, TFS(&tfs_substituted_not_substituted), 0x20,
|
2013-04-21 23:20:10 +00:00
|
|
|
"SIQ SB", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_siq_nt,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "NT", "104asdu.siq.nt", FT_BOOLEAN, 8, TFS(&tfs_not_topical_topical), 0x40,
|
2013-04-21 23:20:10 +00:00
|
|
|
"SIQ NT", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_siq_iv,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "IV", "104asdu.siq.iv", FT_BOOLEAN, 8, TFS(&tfs_invalid_valid), 0x80,
|
2013-04-21 23:20:10 +00:00
|
|
|
"SIQ IV", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_diq,
|
|
|
|
{ "DIQ", "104asdu.diq", FT_UINT8, BASE_HEX, NULL, 0,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_diq_value,
|
|
|
|
{ "Value", "104asdu.diq.value", FT_UINT8, BASE_DEC, VALS(diq_types), 0x03,
|
|
|
|
"DIQ Value", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_diq_bl,
|
|
|
|
{ "BL", "104asdu.diq.bl", FT_BOOLEAN, 8, TFS(&tfs_blocked_not_blocked), 0x10,
|
|
|
|
"DIQ BL", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_diq_sb,
|
|
|
|
{ "SB", "104asdu.diq.sb", FT_BOOLEAN, 8, TFS(&tfs_substituted_not_substituted), 0x20,
|
|
|
|
"DIQ SB", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_diq_nt,
|
|
|
|
{ "NT", "104asdu.diq.nt", FT_BOOLEAN, 8, TFS(&tfs_not_topical_topical), 0x40,
|
|
|
|
"DIQ NT", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_diq_iv,
|
|
|
|
{ "IV", "104asdu.diq.iv", FT_BOOLEAN, 8, TFS(&tfs_invalid_valid), 0x80,
|
|
|
|
"DIQ IV", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_qds,
|
|
|
|
{ "QDS", "104asdu.qds", FT_UINT8, BASE_HEX, NULL, 0,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_qds_ov,
|
|
|
|
{ "OV", "104asdu.qds.ov", FT_BOOLEAN, 8, TFS(&tfs_overflow_no_overflow), 0x01,
|
|
|
|
"QDS OV", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_qds_bl,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "BL", "104asdu.qds.bl", FT_BOOLEAN, 8, TFS(&tfs_blocked_not_blocked), 0x10,
|
2013-04-21 23:20:10 +00:00
|
|
|
"QDS BL", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_qds_sb,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "SB", "104asdu.qds.sb", FT_BOOLEAN, 8, TFS(&tfs_substituted_not_substituted), 0x20,
|
2013-04-21 23:20:10 +00:00
|
|
|
"QDS SB", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_qds_nt,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "NT", "104asdu.qds.nt", FT_BOOLEAN, 8, TFS(&tfs_not_topical_topical), 0x40,
|
2013-04-21 23:20:10 +00:00
|
|
|
"QDS NT", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_qds_iv,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "IV", "104asdu.qds.iv", FT_BOOLEAN, 8, TFS(&tfs_invalid_valid), 0x80,
|
2013-04-21 23:20:10 +00:00
|
|
|
"QDS IV", HFILL }},
|
|
|
|
|
|
|
|
{ &hf_vti,
|
|
|
|
{ "VTI", "104asdu.vti", FT_UINT8, BASE_DEC, NULL, 0x7F,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_vti_tr,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "VTI Transient", "104asdu.vti.ov", FT_BOOLEAN, 8, TFS(&tfs_yes_no), 0x80,
|
2013-04-21 23:20:10 +00:00
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_qos_ql,
|
|
|
|
{ "QOS Qualifier", "104asdu.qos_ql", FT_UINT8, BASE_DEC, NULL, 0x7F,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_qos_se,
|
|
|
|
{ "QOS S/E", "104asdu.qos_se", FT_BOOLEAN, 8, TFS(&tfs_select_execute), 0x80,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_sco,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "SCO", "104asdu.sco", FT_UINT8, BASE_HEX, NULL, 0,
|
2013-04-21 23:20:10 +00:00
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_sco_on,
|
|
|
|
{ "SCO ON/OFF", "104asdu.sco.on", FT_BOOLEAN, 8, TFS(&tfs_on_off), 0x01,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_sco_qu,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "SCO QU", "104asdu.sco.qu", FT_UINT8, BASE_DEC, VALS(qos_qu_types), 0x7C,
|
2013-04-21 23:20:10 +00:00
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_sco_se,
|
|
|
|
{ "SCO S/E", "104asdu.sco.se", FT_BOOLEAN, 8, TFS(&tfs_select_execute), 0x80,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_dco,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "DCO", "104asdu.dco", FT_UINT8, BASE_HEX, NULL, 0,
|
2013-04-21 23:20:10 +00:00
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_dco_on,
|
|
|
|
{ "DCO ON/OFF", "104asdu.dco.on", FT_UINT8, BASE_DEC, VALS(dco_on_types), 0x03,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_dco_qu,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "DCO QU", "104asdu.dco.qu", FT_UINT8, BASE_DEC, VALS(qos_qu_types), 0x7C,
|
2013-04-21 23:20:10 +00:00
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_dco_se,
|
|
|
|
{ "DCO S/E", "104asdu.dco.se", FT_BOOLEAN, 8, TFS(&tfs_select_execute), 0x80,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_rco,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "RCO", "104asdu.rco", FT_UINT8, BASE_HEX, NULL, 0,
|
2013-04-21 23:20:10 +00:00
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_rco_up,
|
|
|
|
{ "RCO UP/DOWN", "104asdu.rco.up", FT_UINT8, BASE_DEC, VALS(rco_up_types), 0x03,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_rco_qu,
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ "RCO QU", "104asdu.rco.qu", FT_UINT8, BASE_DEC, VALS(qos_qu_types), 0x7C,
|
2013-04-21 23:20:10 +00:00
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_rco_se,
|
|
|
|
{ "RCO S/E", "104asdu.rco.se", FT_BOOLEAN, 8, TFS(&tfs_select_execute), 0x80,
|
|
|
|
NULL, HFILL }},
|
|
|
|
|
Bugfix iec104 dissector, bug 8849 (https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=8849)
From Jiří Engelthaler
1) Wrong bits definitions for SIQ.BL, SIQ.SB, SIQ.NT, SIQ.IV, QDS.BL, QDS.SB, QDS.NT, QDS.IV
2) Invalid field abbrev for VTI Transient
3) Wrong bit size for SCO.QU, DCO.QU, RCO.QU
4) Changes from BASE_DEC to BASE_HEX
5) Several code style changes
svn path=/trunk/; revision=50145
2013-06-25 19:32:39 +00:00
|
|
|
{ &hf_asdu_bitstring,
|
2013-04-21 23:20:10 +00:00
|
|
|
{ "Object value", "104asdu.bitstring", FT_UINT32, BASE_HEX, NULL, 0x0,
|
2010-12-22 23:28:23 +00:00
|
|
|
NULL, HFILL }},
|
|
|
|
|
|
|
|
{ &hf_asdu_float,
|
2013-04-21 23:20:10 +00:00
|
|
|
{ "Object value", "104asdu.float", FT_FLOAT, BASE_NONE, NULL, 0x0,
|
2010-09-23 21:46:31 +00:00
|
|
|
NULL, HFILL }},
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2010-12-22 23:28:23 +00:00
|
|
|
{ &hf_asdu_normval,
|
2013-04-21 23:20:10 +00:00
|
|
|
{ "Object value", "104asdu.normval", FT_INT16, BASE_DEC, NULL, 0x0,
|
2010-09-23 21:46:31 +00:00
|
|
|
NULL, HFILL }},
|
2009-09-20 21:08:04 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
};
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
static gint *ett_as[] = {
|
|
|
|
&ett_asdu,
|
2013-04-21 23:20:10 +00:00
|
|
|
&ett_asdu_objects,
|
|
|
|
&ett_siq,
|
|
|
|
&ett_diq,
|
|
|
|
&ett_qds,
|
|
|
|
&ett_sco,
|
|
|
|
&ett_dco,
|
|
|
|
&ett_rco
|
2008-10-05 23:08:54 +00:00
|
|
|
};
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2013-05-26 03:29:07 +00:00
|
|
|
static ei_register_info ei[] = {
|
|
|
|
{ &ei_iec104_short_asdu, { "iec104.short_asdu", PI_MALFORMED, PI_ERROR, "<ERR Short Asdu>", EXPFILL }},
|
|
|
|
{ &ei_iec104_apdu_min_len, { "iec104.apdu_min_len", PI_MALFORMED, PI_ERROR, "APDU less than bytes", EXPFILL }},
|
|
|
|
};
|
|
|
|
|
|
|
|
expert_module_t* expert_iec104;
|
|
|
|
|
2008-10-05 23:08:54 +00:00
|
|
|
proto_iec104asdu = proto_register_protocol(
|
2009-07-10 05:40:02 +00:00
|
|
|
"IEC 60870-5-104-Asdu",
|
2008-10-05 23:08:54 +00:00
|
|
|
"104asdu",
|
|
|
|
"104asdu"
|
|
|
|
);
|
|
|
|
proto_register_field_array(proto_iec104asdu, hf_as, array_length(hf_as));
|
|
|
|
proto_register_subtree_array(ett_as, array_length(ett_as));
|
2013-05-26 03:29:07 +00:00
|
|
|
expert_iec104 = expert_register_protocol(proto_iec104asdu);
|
|
|
|
expert_register_field_array(expert_iec104, ei, array_length(ei));
|
2008-09-29 16:49:14 +00:00
|
|
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
/* The registration hand-off routine */
|
|
|
|
void
|
|
|
|
proto_reg_handoff_iec104(void)
|
|
|
|
{
|
2008-10-05 23:08:54 +00:00
|
|
|
dissector_handle_t iec104apci_handle;
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2009-07-06 14:09:52 +00:00
|
|
|
iec104apci_handle = create_dissector_handle(dissect_iec104reas, proto_iec104apci);
|
2008-09-30 16:03:18 +00:00
|
|
|
iec104asdu_handle = create_dissector_handle(dissect_iec104asdu, proto_iec104asdu);
|
2008-09-29 16:49:14 +00:00
|
|
|
|
2013-04-21 23:20:10 +00:00
|
|
|
dissector_add_uint("tcp.port", IEC104_PORT, iec104apci_handle);
|
2008-09-29 16:49:14 +00:00
|
|
|
}
|
|
|
|
|