1999-08-04 00:33:11 +00:00
|
|
|
/* packet-rip.c
|
1998-09-16 02:39:15 +00:00
|
|
|
* Routines for RIPv1 and RIPv2 packet disassembly
|
|
|
|
* (c) Copyright Hannes R. Boehm <hannes@boehm.org>
|
|
|
|
*
|
Add the "Edit:Protocols..." feature which currently only implements
the following:
It is now possible to enable/disable a particular protocol decoding
(i.e. the protocol dissector is void or not). When a protocol
is disabled, it is displayed as Data and of course, all linked
sub-protocols are disabled as well.
Disabling a protocol could be interesting:
- in case of buggy dissectors
- in case of wrong heuristics
- for performance reasons
- to decode the data as another protocol (TODO)
Currently (if I am not wrong), all dissectors but NFS can be disabled
(and dissectors that do not register protocols :-)
I do not like the way the RPC sub-dissectors are disabled (in the
sub-dissectors) since this could be done in the RPC dissector itself,
knowing the sub-protocol hfinfo entry (this is why, I've not modified
the NFS one yet).
Two functions are added in proto.c :
gboolean proto_is_protocol_enabled(int n);
void proto_set_decoding(int n, gboolean enabled);
and two MACROs which can be used in dissectors:
OLD_CHECK_DISPLAY_AS_DATA(index, pd, offset, fd, tree)
CHECK_DISPLAY_AS_DATA(index, tvb, pinfo, tree)
See also the XXX in proto_dlg.c and proto.c around the new functions.
svn path=/trunk/; revision=2267
2000-08-13 14:09:15 +00:00
|
|
|
* $Id: packet-rip.c,v 1.18 2000/08/13 14:08:42 deniel Exp $
|
1998-09-16 03:22:19 +00:00
|
|
|
*
|
1998-09-16 02:39:15 +00:00
|
|
|
* Ethereal - Network traffic analyzer
|
|
|
|
* By Gerald Combs <gerald@zing.org>
|
|
|
|
* Copyright 1998 Gerald Combs
|
|
|
|
*
|
|
|
|
*
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
|
|
* modify it under the terms of the GNU General Public License
|
|
|
|
* as published by the Free Software Foundation; either version 2
|
|
|
|
* of the License, or (at your option) any later version.
|
|
|
|
*
|
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
* GNU General Public License for more details.
|
|
|
|
*
|
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
* along with this program; if not, write to the Free Software
|
|
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
|
|
*/
|
|
|
|
|
|
|
|
#include "config.h"
|
|
|
|
|
|
|
|
#ifdef HAVE_SYS_TYPES_H
|
|
|
|
#include <sys/types.h>
|
|
|
|
#endif
|
|
|
|
|
|
|
|
#ifdef HAVE_NETINET_IN_H
|
|
|
|
#include <netinet/in.h>
|
|
|
|
#endif
|
|
|
|
|
1999-03-23 03:14:46 +00:00
|
|
|
#include <glib.h>
|
1998-09-16 02:39:15 +00:00
|
|
|
#include "packet.h"
|
|
|
|
#include "packet-rip.h"
|
|
|
|
|
2000-04-14 06:17:23 +00:00
|
|
|
#define UDP_PORT_RIP 520
|
|
|
|
|
1999-07-29 05:47:07 +00:00
|
|
|
static int proto_rip = -1;
|
|
|
|
|
1999-11-16 11:44:20 +00:00
|
|
|
static gint ett_rip = -1;
|
|
|
|
static gint ett_rip_vec = -1;
|
|
|
|
|
1998-11-20 09:24:42 +00:00
|
|
|
static void dissect_ip_rip_vektor(guint8 version,
|
1999-03-23 03:14:46 +00:00
|
|
|
const e_rip_vektor *rip_vektor, int offset, proto_tree *tree);
|
1998-11-20 09:24:42 +00:00
|
|
|
static void dissect_rip_authentication(const e_rip_authentication *rip_authentication,
|
1999-03-23 03:14:46 +00:00
|
|
|
int offset, proto_tree *tree);
|
1998-09-16 02:39:15 +00:00
|
|
|
|
2000-04-14 06:17:23 +00:00
|
|
|
static void
|
1999-03-23 03:14:46 +00:00
|
|
|
dissect_rip(const u_char *pd, int offset, frame_data *fd, proto_tree *tree) {
|
1999-02-05 00:52:19 +00:00
|
|
|
e_riphdr rip_header;
|
1998-11-20 09:24:42 +00:00
|
|
|
e_rip_entry rip_entry;
|
|
|
|
guint16 family;
|
1999-03-23 03:14:46 +00:00
|
|
|
proto_tree *rip_tree = NULL;
|
|
|
|
proto_item *ti;
|
1998-09-16 02:39:15 +00:00
|
|
|
|
|
|
|
/* we do the range checking of the index when checking wether or not this is a RIP packet */
|
1998-11-20 09:24:42 +00:00
|
|
|
static char *packet_type[8] = { "never used", "Request", "Response",
|
1998-09-16 02:39:15 +00:00
|
|
|
"Traceon", "Traceoff", "Vendor specific (Sun)" };
|
1998-11-20 09:24:42 +00:00
|
|
|
static char *version[3] = { "RIP", "RIPv1", "RIPv2" };
|
1998-09-16 02:39:15 +00:00
|
|
|
|
Add the "Edit:Protocols..." feature which currently only implements
the following:
It is now possible to enable/disable a particular protocol decoding
(i.e. the protocol dissector is void or not). When a protocol
is disabled, it is displayed as Data and of course, all linked
sub-protocols are disabled as well.
Disabling a protocol could be interesting:
- in case of buggy dissectors
- in case of wrong heuristics
- for performance reasons
- to decode the data as another protocol (TODO)
Currently (if I am not wrong), all dissectors but NFS can be disabled
(and dissectors that do not register protocols :-)
I do not like the way the RPC sub-dissectors are disabled (in the
sub-dissectors) since this could be done in the RPC dissector itself,
knowing the sub-protocol hfinfo entry (this is why, I've not modified
the NFS one yet).
Two functions are added in proto.c :
gboolean proto_is_protocol_enabled(int n);
void proto_set_decoding(int n, gboolean enabled);
and two MACROs which can be used in dissectors:
OLD_CHECK_DISPLAY_AS_DATA(index, pd, offset, fd, tree)
CHECK_DISPLAY_AS_DATA(index, tvb, pinfo, tree)
See also the XXX in proto_dlg.c and proto.c around the new functions.
svn path=/trunk/; revision=2267
2000-08-13 14:09:15 +00:00
|
|
|
OLD_CHECK_DISPLAY_AS_DATA(proto_rip, pd, offset, fd, tree);
|
|
|
|
|
1999-02-05 00:52:19 +00:00
|
|
|
/* avoid alignment problem */
|
|
|
|
memcpy(&rip_header, &pd[offset], sizeof(rip_header));
|
|
|
|
|
1998-09-16 02:39:15 +00:00
|
|
|
/* Check if we 've realy got a RIP packet */
|
|
|
|
|
1999-02-05 00:52:19 +00:00
|
|
|
switch(rip_header.version) {
|
1998-09-16 02:39:15 +00:00
|
|
|
case RIPv1:
|
|
|
|
/* the domain field has to be set to zero for RIPv1 */
|
1999-02-05 00:52:19 +00:00
|
|
|
if(!(rip_header.domain == 0)){
|
Allow either old-style (pre-tvbuff) or new-style (tvbuffified)
dissectors to be registered as dissectors for particular ports,
registered as heuristic dissectors, and registered as dissectors for
conversations, and have routines to be used both by old-style and
new-style dissectors to call registered dissectors.
Have the code that calls those dissectors translate the arguments as
necessary. (For conversation dissectors, replace
"find_conversation_dissector()", which just returns a pointer to the
dissector, with "old_try_conversation_dissector()" and
"try_conversation_dissector()", which actually call the dissector, so
that there's a single place at which we can do that translation. Also
make "dissector_lookup()" static and, instead of calling it and, if it
returns a non-null pointer, calling that dissector, just use
"old_dissector_try_port()" or "dissector_try_port()", for the same
reason.)
This allows some dissectors that took old-style arguments and
immediately translated them to new-style arguments to just take
new-style arguments; make them do so. It also allows some new-style
dissectors not to have to translate arguments before calling routines to
look up and call dissectors; make them not do so.
Get rid of checks for too-short frames in new-style dissectors - the
tvbuff code does those checks for you.
Give the routines to register old-style dissectors, and to call
dissectors from old-style dissectors, names beginning with "old_", with
the routines for new-style dissectors not having the "old_". Update the
dissectors that use those routines appropriately.
Rename "dissect_data()" to "old_dissect_data()", and
"dissect_data_tvb()" to "dissect_data()".
svn path=/trunk/; revision=2218
2000-08-07 03:21:25 +00:00
|
|
|
old_dissect_data(pd, offset, fd, tree);
|
1998-09-16 02:39:15 +00:00
|
|
|
return;
|
|
|
|
}
|
|
|
|
/* the RIPv2 checks are also made for v1 packets */
|
|
|
|
case RIPv2:
|
|
|
|
/* check wether or not command nr. is between 1-7
|
|
|
|
* (range checking for index of char* packet_type is done at the same time)
|
|
|
|
*/
|
1999-02-05 00:52:19 +00:00
|
|
|
if( !( (rip_header.command > 0) && (rip_header.command <= 7) )){
|
Allow either old-style (pre-tvbuff) or new-style (tvbuffified)
dissectors to be registered as dissectors for particular ports,
registered as heuristic dissectors, and registered as dissectors for
conversations, and have routines to be used both by old-style and
new-style dissectors to call registered dissectors.
Have the code that calls those dissectors translate the arguments as
necessary. (For conversation dissectors, replace
"find_conversation_dissector()", which just returns a pointer to the
dissector, with "old_try_conversation_dissector()" and
"try_conversation_dissector()", which actually call the dissector, so
that there's a single place at which we can do that translation. Also
make "dissector_lookup()" static and, instead of calling it and, if it
returns a non-null pointer, calling that dissector, just use
"old_dissector_try_port()" or "dissector_try_port()", for the same
reason.)
This allows some dissectors that took old-style arguments and
immediately translated them to new-style arguments to just take
new-style arguments; make them do so. It also allows some new-style
dissectors not to have to translate arguments before calling routines to
look up and call dissectors; make them not do so.
Get rid of checks for too-short frames in new-style dissectors - the
tvbuff code does those checks for you.
Give the routines to register old-style dissectors, and to call
dissectors from old-style dissectors, names beginning with "old_", with
the routines for new-style dissectors not having the "old_". Update the
dissectors that use those routines appropriately.
Rename "dissect_data()" to "old_dissect_data()", and
"dissect_data_tvb()" to "dissect_data()".
svn path=/trunk/; revision=2218
2000-08-07 03:21:25 +00:00
|
|
|
old_dissect_data(pd, offset, fd, tree);
|
1998-09-16 02:39:15 +00:00
|
|
|
return;
|
|
|
|
}
|
|
|
|
break;
|
|
|
|
default:
|
|
|
|
/* we only know RIPv1 and RIPv2 */
|
Allow either old-style (pre-tvbuff) or new-style (tvbuffified)
dissectors to be registered as dissectors for particular ports,
registered as heuristic dissectors, and registered as dissectors for
conversations, and have routines to be used both by old-style and
new-style dissectors to call registered dissectors.
Have the code that calls those dissectors translate the arguments as
necessary. (For conversation dissectors, replace
"find_conversation_dissector()", which just returns a pointer to the
dissector, with "old_try_conversation_dissector()" and
"try_conversation_dissector()", which actually call the dissector, so
that there's a single place at which we can do that translation. Also
make "dissector_lookup()" static and, instead of calling it and, if it
returns a non-null pointer, calling that dissector, just use
"old_dissector_try_port()" or "dissector_try_port()", for the same
reason.)
This allows some dissectors that took old-style arguments and
immediately translated them to new-style arguments to just take
new-style arguments; make them do so. It also allows some new-style
dissectors not to have to translate arguments before calling routines to
look up and call dissectors; make them not do so.
Get rid of checks for too-short frames in new-style dissectors - the
tvbuff code does those checks for you.
Give the routines to register old-style dissectors, and to call
dissectors from old-style dissectors, names beginning with "old_", with
the routines for new-style dissectors not having the "old_". Update the
dissectors that use those routines appropriately.
Rename "dissect_data()" to "old_dissect_data()", and
"dissect_data_tvb()" to "dissect_data()".
svn path=/trunk/; revision=2218
2000-08-07 03:21:25 +00:00
|
|
|
old_dissect_data(pd, offset, fd, tree);
|
1998-09-16 02:39:15 +00:00
|
|
|
return;
|
|
|
|
}
|
|
|
|
|
1998-11-17 04:29:13 +00:00
|
|
|
if (check_col(fd, COL_PROTOCOL))
|
1999-02-05 00:52:19 +00:00
|
|
|
col_add_str(fd, COL_PROTOCOL, version[rip_header.version] );
|
1998-11-17 04:29:13 +00:00
|
|
|
if (check_col(fd, COL_INFO))
|
1999-02-05 00:52:19 +00:00
|
|
|
col_add_str(fd, COL_INFO, packet_type[rip_header.command]);
|
1998-09-16 02:39:15 +00:00
|
|
|
|
|
|
|
if (tree) {
|
2000-05-31 05:09:07 +00:00
|
|
|
ti = proto_tree_add_item(tree, proto_rip, NullTVB, offset, END_OF_FRAME, FALSE);
|
1999-11-16 11:44:20 +00:00
|
|
|
rip_tree = proto_item_add_subtree(ti, ett_rip);
|
1998-09-16 02:39:15 +00:00
|
|
|
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_tree, NullTVB, offset, 1, "Command: %d (%s)", rip_header.command, packet_type[rip_header.command]);
|
|
|
|
proto_tree_add_text(rip_tree, NullTVB, offset + 1, 1, "Version: %d", rip_header.version);
|
1999-02-05 00:52:19 +00:00
|
|
|
if(rip_header.version == RIPv2)
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_tree, NullTVB, offset + 2 , 2, "Routing Domain: %d", ntohs(rip_header.domain));
|
1998-11-20 09:24:42 +00:00
|
|
|
|
|
|
|
/* skip header */
|
|
|
|
offset += RIP_HEADER_LENGTH;
|
|
|
|
|
|
|
|
/* zero or more entries */
|
|
|
|
|
1999-08-26 07:34:43 +00:00
|
|
|
while((pi.captured_len - offset) >= RIP_ENTRY_LENGTH){
|
1998-11-20 09:24:42 +00:00
|
|
|
memcpy(&rip_entry, &pd[offset], sizeof(rip_entry)); /* avoid alignment problem */
|
|
|
|
family = ntohs(rip_entry.vektor.family);
|
|
|
|
switch (family) {
|
1998-09-16 02:39:15 +00:00
|
|
|
case 2: /* IP */
|
2000-05-11 08:18:09 +00:00
|
|
|
ti = proto_tree_add_text(rip_tree, NullTVB, offset,
|
1998-11-20 09:24:42 +00:00
|
|
|
RIP_ENTRY_LENGTH, "IP Address: %s, Metric: %ld",
|
|
|
|
ip_to_str((guint8 *) &(rip_entry.vektor.ip)),
|
|
|
|
(long)ntohl(rip_entry.vektor.metric));
|
1999-02-05 00:52:19 +00:00
|
|
|
dissect_ip_rip_vektor(rip_header.version, &rip_entry.vektor,
|
1998-11-20 09:24:42 +00:00
|
|
|
offset, ti);
|
1998-09-16 02:39:15 +00:00
|
|
|
break;
|
|
|
|
case 0xFFFF:
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_tree, NullTVB, offset,
|
1999-03-23 03:14:46 +00:00
|
|
|
RIP_ENTRY_LENGTH, "Authentication");
|
1998-11-20 09:24:42 +00:00
|
|
|
dissect_rip_authentication(&rip_entry.authentication,
|
|
|
|
offset, ti);
|
1998-09-16 02:39:15 +00:00
|
|
|
break;
|
1998-11-20 09:24:42 +00:00
|
|
|
default:
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_tree, NullTVB, offset,
|
1998-11-20 09:24:42 +00:00
|
|
|
RIP_ENTRY_LENGTH, "Unknown address family %u",
|
|
|
|
family);
|
|
|
|
break;
|
|
|
|
}
|
1998-09-16 02:39:15 +00:00
|
|
|
|
1998-11-20 09:24:42 +00:00
|
|
|
offset += RIP_ENTRY_LENGTH;
|
|
|
|
}
|
|
|
|
}
|
|
|
|
}
|
1998-09-16 02:39:15 +00:00
|
|
|
|
1998-11-20 09:24:42 +00:00
|
|
|
static void
|
|
|
|
dissect_ip_rip_vektor(guint8 version, const e_rip_vektor *rip_vektor,
|
1999-03-23 03:14:46 +00:00
|
|
|
int offset, proto_tree *tree)
|
1998-11-20 09:24:42 +00:00
|
|
|
{
|
1999-03-23 03:14:46 +00:00
|
|
|
proto_tree *rip_vektor_tree;
|
1998-09-16 02:39:15 +00:00
|
|
|
|
1999-11-16 11:44:20 +00:00
|
|
|
rip_vektor_tree = proto_item_add_subtree(tree, ett_rip_vec);
|
1998-09-16 02:39:15 +00:00
|
|
|
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_vektor_tree, NullTVB, offset, 2, "Address Family ID: IP");
|
1998-11-20 09:24:42 +00:00
|
|
|
if(version == RIPv2)
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_vektor_tree, NullTVB, offset + 2 , 2, "Route Tag: %d",
|
1998-11-20 09:24:42 +00:00
|
|
|
ntohs(rip_vektor->tag));
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_vektor_tree, NullTVB, offset + 4, 4, "IP Address: %s",
|
1998-11-20 09:24:42 +00:00
|
|
|
ip_to_str((guint8 *) &(rip_vektor->ip)));
|
|
|
|
if(version == RIPv2) {
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_vektor_tree, NullTVB, offset + 8 , 4, "Netmask: %s",
|
1998-11-20 09:24:42 +00:00
|
|
|
ip_to_str((guint8 *) &(rip_vektor->mask)));
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_vektor_tree, NullTVB, offset + 12, 4, "Next Hop: %s",
|
1998-11-20 09:24:42 +00:00
|
|
|
ip_to_str((guint8 *) &(rip_vektor->next_hop)));
|
1998-09-16 02:39:15 +00:00
|
|
|
}
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_vektor_tree, NullTVB, offset + 16, 4, "Metric: %ld",
|
1998-11-20 09:24:42 +00:00
|
|
|
(long)ntohl(rip_vektor->metric));
|
1998-09-16 02:39:15 +00:00
|
|
|
}
|
1998-11-20 09:24:42 +00:00
|
|
|
|
|
|
|
static void
|
|
|
|
dissect_rip_authentication(const e_rip_authentication *rip_authentication,
|
1999-03-23 03:14:46 +00:00
|
|
|
int offset, proto_tree *tree)
|
1998-11-20 09:24:42 +00:00
|
|
|
{
|
1999-03-23 03:14:46 +00:00
|
|
|
proto_tree *rip_authentication_tree;
|
1998-11-20 09:24:42 +00:00
|
|
|
guint16 authtype;
|
|
|
|
|
1999-11-16 11:44:20 +00:00
|
|
|
rip_authentication_tree = proto_item_add_subtree(tree, ett_rip_vec);
|
1998-11-20 09:24:42 +00:00
|
|
|
|
|
|
|
authtype = ntohs(rip_authentication->authtype);
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_authentication_tree, NullTVB, offset + 2, 2,
|
1998-11-20 09:24:42 +00:00
|
|
|
"Authentication type: %u", authtype);
|
|
|
|
if (authtype == 2)
|
2000-05-11 08:18:09 +00:00
|
|
|
proto_tree_add_text(rip_authentication_tree, NullTVB, offset + 4 , 16,
|
1998-11-20 09:24:42 +00:00
|
|
|
"Password: %.16s",
|
|
|
|
rip_authentication->authentication);
|
|
|
|
}
|
|
|
|
|
1999-07-29 05:47:07 +00:00
|
|
|
void
|
|
|
|
proto_register_rip(void)
|
|
|
|
{
|
|
|
|
/* static hf_register_info hf[] = {
|
|
|
|
{ &variable,
|
|
|
|
{ "Name", "rip.abbreviation", TYPE, VALS_POINTER }},
|
|
|
|
};*/
|
1999-11-16 11:44:20 +00:00
|
|
|
static gint *ett[] = {
|
|
|
|
&ett_rip,
|
|
|
|
&ett_rip_vec,
|
|
|
|
};
|
1999-07-29 05:47:07 +00:00
|
|
|
|
|
|
|
proto_rip = proto_register_protocol("Routing Information Protocol", "rip");
|
|
|
|
/* proto_register_field_array(proto_rip, hf, array_length(hf));*/
|
1999-11-16 11:44:20 +00:00
|
|
|
proto_register_subtree_array(ett, array_length(ett));
|
1999-07-29 05:47:07 +00:00
|
|
|
}
|
2000-04-14 06:17:23 +00:00
|
|
|
|
|
|
|
void
|
|
|
|
proto_reg_handoff_rip(void)
|
|
|
|
{
|
Allow either old-style (pre-tvbuff) or new-style (tvbuffified)
dissectors to be registered as dissectors for particular ports,
registered as heuristic dissectors, and registered as dissectors for
conversations, and have routines to be used both by old-style and
new-style dissectors to call registered dissectors.
Have the code that calls those dissectors translate the arguments as
necessary. (For conversation dissectors, replace
"find_conversation_dissector()", which just returns a pointer to the
dissector, with "old_try_conversation_dissector()" and
"try_conversation_dissector()", which actually call the dissector, so
that there's a single place at which we can do that translation. Also
make "dissector_lookup()" static and, instead of calling it and, if it
returns a non-null pointer, calling that dissector, just use
"old_dissector_try_port()" or "dissector_try_port()", for the same
reason.)
This allows some dissectors that took old-style arguments and
immediately translated them to new-style arguments to just take
new-style arguments; make them do so. It also allows some new-style
dissectors not to have to translate arguments before calling routines to
look up and call dissectors; make them not do so.
Get rid of checks for too-short frames in new-style dissectors - the
tvbuff code does those checks for you.
Give the routines to register old-style dissectors, and to call
dissectors from old-style dissectors, names beginning with "old_", with
the routines for new-style dissectors not having the "old_". Update the
dissectors that use those routines appropriately.
Rename "dissect_data()" to "old_dissect_data()", and
"dissect_data_tvb()" to "dissect_data()".
svn path=/trunk/; revision=2218
2000-08-07 03:21:25 +00:00
|
|
|
old_dissector_add("udp.port", UDP_PORT_RIP, dissect_rip);
|
2000-04-14 06:17:23 +00:00
|
|
|
}
|