/* packet-h245_asn1.c * Routines for h245 packet dissection * Copyright 2004, Anders Broman * * $Id$ * * Wireshark - Network traffic analyzer * By Gerald Combs * Copyright 1998 Gerald Combs * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. * * To quote the author of the previous H245 dissector: * "This is a complete replacement of the previous limitied dissector * that Ronnie was crazy enough to write by hand. It was a lot of time * to hack it by hand, but it is incomplete and buggy and it is good when * it will go away." * Ronnie did a great job and all the VoIP users had made good use of it! * Credit to Tomas Kukosa for developing the asn2wrs compiler. * */ #ifdef HAVE_CONFIG_H # include "config.h" #endif #include #include #include #include #include #include #include #include #include #include #include "tap.h" #include "packet-tpkt.h" #include "packet-per.h" #include "packet-h323.h" #include "packet-h245.h" #include "packet-rtp.h" #include "packet-rtcp.h" #include "packet-t38.h" #define PNAME "MULTIMEDIA-SYSTEM-CONTROL" #define PSNAME "H.245" #define PFNAME "h245" static dissector_handle_t rtp_handle=NULL; static dissector_handle_t rtcp_handle=NULL; static dissector_handle_t t38_handle=NULL; static dissector_table_t nsp_object_dissector_table; static dissector_table_t nsp_h221_dissector_table; static dissector_table_t gef_content_dissector_table; static dissector_handle_t nsp_handle; static dissector_handle_t data_handle; static dissector_handle_t h245_handle; static dissector_handle_t MultimediaSystemControlMessage_handle; static dissector_handle_t h263_handle = NULL; static dissector_handle_t amr_handle = NULL; static void init_h245_packet_info(h245_packet_info *pi); static int hf_h245_pdu_type = -1; static int hf_h245Manufacturer = -1; static int h245_tap = -1; static int h245dg_tap = -1; h245_packet_info *h245_pi=NULL; static gboolean h245_reassembly = TRUE; static gboolean h245_shorttypes = FALSE; static const value_string h245_RequestMessage_short_vals[] = { { 0, "NSM" }, { 1, "MSD" }, { 2, "TCS" }, { 3, "OLC" }, { 4, "CLC" }, { 5, "RCC" }, { 6, "MES" }, { 7, "RME" }, { 8, "RM" }, { 9, "RTDR" }, { 10, "MLR" }, { 11, "CMR" }, { 12, "CR" }, { 13, "MR" }, { 14, "LCRR" }, { 15, "GR" }, { 0, NULL } }; static const value_string h245_ResponseMessage_short_vals[] = { { 0, "NSM" }, { 1, "MSDAck" }, { 2, "MSDReject" }, { 3, "TCSAck" }, { 4, "TCSReject" }, { 5, "OLCAck" }, { 6, "OLCReject" }, { 7, "CLCAck" }, { 8, "RCCAck" }, { 9, "RCCReject" }, { 10, "MESAck" }, { 11, "MESReject" }, { 12, "RMEAck" }, { 13, "RMEReject" }, { 14, "RMAck" }, { 15, "RMReject" }, { 16, "RTDResponse" }, { 17, "MLAck" }, { 18, "MLReject" }, { 19, "CMResponse" }, { 20, "CResponse" }, { 21, "MResponse" }, { 22, "LCRAck" }, { 23, "LCRReject" }, { 24, "GR" }, { 0, NULL } }; static const value_string h245_IndicationMessage_short_vals[] = { { 0, "NSM" }, { 1, "FNU" }, { 2, "MSDRelease" }, { 3, "TCSRelease" }, { 4, "OLCConfirm" }, { 5, "RCCRelease" }, { 6, "MESRelease" }, { 7, "RMERelease" }, { 8, "RMRelease" }, { 9, "MI" }, { 10, "JI" }, { 11, "H223SI" }, { 12, "NATMVCI" }, { 13, "UII" }, { 14, "H2250MSI" }, { 15, "MCLI" }, { 16, "CI" }, { 17, "VI" }, { 18, "FNS" }, { 19, "MultilinkIndication" }, { 20, "LCRRelease" }, { 21, "FCIndication" }, { 22, "MMRI" }, { 22, "GI" }, { 0, NULL } }; static const value_string h245_CommandMessage_short_vals[] = { { 0, "NSM" }, { 1, "MLOC" }, { 2, "STCS" }, { 3, "EC" }, { 4, "FCC" }, { 5, "ESC" }, { 6, "MC" }, { 7, "CMC" }, { 8, "CC" }, { 9, "H223MR" }, { 10, "NATMVCC" }, { 11, "MMRC" }, { 12, "GC" }, { 0, NULL } }; static const value_string h245_AudioCapability_short_vals[] = { { 0, "nonStd" }, { 1, "g711A" }, { 2, "g711A56k" }, { 3, "g711U" }, { 4, "g711U56k" }, { 5, "g722-64k" }, { 6, "g722-56k" }, { 7, "g722-48k" }, { 8, "g7231" }, { 9, "g728" }, { 10, "g729" }, { 11, "g729A" }, { 12, "is11172" }, { 13, "is13818" }, { 14, "g729B" }, { 15, "g729AB" }, { 16, "g7231C" }, { 17, "gsmFR" }, { 18, "gsmHR" }, { 19, "gsmEFR" }, { 20, "generic" }, { 21, "g729Ext" }, { 22, "vbd" }, { 23, "audioTelEvent" }, { 24, "audioTone" }, { 0, NULL } }; /* To put the codec type only in COL_INFO when an OLC is read */ const char* codec_type = NULL; static guint32 rfc_number; typedef struct _unicast_addr_t { address addr; guint8 addr_buf[16]; guint32 port; } unicast_addr_t; typedef struct _channel_info_t { unicast_addr_t *upcoming_addr; unicast_addr_t media_addr; unicast_addr_t media_control_addr; unsigned int rfc2198; gboolean srtp_flag; } channel_info_t; static channel_info_t *upcoming_channel = NULL; /* NonStandardParameter */ static const char *nsiOID; static guint32 h221NonStandard; static guint32 t35CountryCode; static guint32 t35Extension; static guint32 manufacturerCode; static const value_string h245_RFC_number_vals[] = { { 2190, "RFC 2190 - H.263 Video Streams" }, { 2198, "RFC 2198 - RTP Payload for Redundant Audio Data" }, { 2429, "RFC 2429 - 1998 Version of ITU-T Rec. H.263 Video (H.263+)" }, { 3016, "RFC 3016 - RTP Payload Format for MPEG-4 Audio/Visual Streams" }, { 3267, "RFC 3267 - Adaptive Multi-Rate (AMR) and Adaptive Multi-Rate Wideband (AMR-WB)" }, { 0, NULL } }; /* h223 multiplex codes */ static h223_set_mc_handle_t h223_set_mc_handle = NULL; h223_mux_element *h223_me=NULL; guint8 h223_mc=0; void h245_set_h223_set_mc_handle( h223_set_mc_handle_t handle ) { h223_set_mc_handle = handle; } /* h223 logical channels */ typedef struct { h223_lc_params *fw_channel_params; h223_lc_params *rev_channel_params; } h223_pending_olc; static GHashTable* h223_pending_olc_reqs[] = { NULL, NULL }; static dissector_handle_t h245_lc_dissector; static guint16 h245_lc_temp; static guint16 h223_fw_lc_num; static guint16 h223_rev_lc_num; static h223_lc_params *h223_lc_params_temp; static h223_lc_params *h223_fw_lc_params; static h223_lc_params *h223_rev_lc_params; static h223_add_lc_handle_t h223_add_lc_handle = NULL; static void h223_lc_init_dir( int dir ) { if ( h223_pending_olc_reqs[dir] ) g_hash_table_destroy( h223_pending_olc_reqs[dir] ); h223_pending_olc_reqs[dir] = g_hash_table_new( g_direct_hash, g_direct_equal ); } static void h223_lc_init( void ) { h223_lc_init_dir( P2P_DIR_SENT ); h223_lc_init_dir( P2P_DIR_RECV ); h223_lc_params_temp = NULL; h245_lc_dissector = NULL; h223_fw_lc_num = 0; } void h245_set_h223_add_lc_handle( h223_add_lc_handle_t handle ) { h223_add_lc_handle = handle; } static void h245_setup_channels(packet_info *pinfo, channel_info_t *upcoming_channel) { gint *key; GHashTable *rtp_dyn_payload = NULL; if (!upcoming_channel) return; if (codec_type && (strcmp(codec_type, "t38fax")==0)) { if(upcoming_channel->media_addr.addr.type!=AT_NONE && upcoming_channel->media_addr.port!=0 && t38_handle){ t38_add_address(pinfo, &upcoming_channel->media_addr.addr, upcoming_channel->media_addr.port, 0, "H245", pinfo->fd->num); } } else { if (upcoming_channel->rfc2198 > 0) { #if GLIB_MAJOR_VERSION < 2 rtp_dyn_payload = g_hash_table_new( g_int_hash, g_int_equal); #else rtp_dyn_payload = g_hash_table_new_full( g_int_hash, g_int_equal, g_free, g_free); #endif key = g_malloc(sizeof(gint)); *key = upcoming_channel->rfc2198; g_hash_table_insert(rtp_dyn_payload, key, g_strdup("red")); } if (upcoming_channel->media_addr.addr.type!=AT_NONE && upcoming_channel->media_addr.port!=0 && rtp_handle){ if (upcoming_channel->srtp_flag) { struct srtp_info *dummy_srtp_info = se_alloc0(sizeof(struct srtp_info)); srtp_add_address(pinfo, &upcoming_channel->media_addr.addr, upcoming_channel->media_addr.port, 0, "H245", pinfo->fd->num, rtp_dyn_payload, dummy_srtp_info); } else { rtp_add_address(pinfo, &upcoming_channel->media_addr.addr, upcoming_channel->media_addr.port, 0, "H245", pinfo->fd->num, rtp_dyn_payload); } } if(upcoming_channel->media_control_addr.addr.type!=AT_NONE && upcoming_channel->media_control_addr.port!=0 && rtcp_handle){ rtcp_add_address(pinfo, &upcoming_channel->media_control_addr.addr, upcoming_channel->media_control_addr.port, 0, "H245", pinfo->fd->num); } } } /* Initialize the protocol and registered fields */ int proto_h245 = -1; #include "packet-h245-hf.c" /* Initialize the subtree pointers */ static int ett_h245 = -1; static int ett_h245_returnedFunction = -1; #include "packet-h245-ett.c" /* Forward declarations */ static int dissect_h245_MultimediaSystemControlMessage(tvbuff_t *tvb _U_, int offset _U_, asn1_ctx_t *actx _U_, proto_tree *tree _U_, int hf_index _U_); static void reset_h245_pi(void *dummy _U_) { h245_pi = NULL; /* Make sure we don't leave ep_alloc()ated memory lying around */ } #include "packet-h245-fn.c" static void dissect_h245(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree) { /* * MultimediaSystemControlMessage_handle is the handle for * dissect_h245_h245, so we don't want to do any h245_pi or tap stuff here. */ dissect_tpkt_encap(tvb, pinfo, parent_tree, h245_reassembly, MultimediaSystemControlMessage_handle); } static void dissect_h245_h245(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree) { proto_item *it; proto_tree *tr; guint32 offset=0; asn1_ctx_t asn1_ctx; /* Clean up from any previous packet dissection */ if (upcoming_channel) upcoming_channel = NULL; if (check_col(pinfo->cinfo, COL_PROTOCOL)){ col_set_str(pinfo->cinfo, COL_PROTOCOL, PSNAME); } it=proto_tree_add_protocol_format(parent_tree, proto_h245, tvb, 0, tvb_length(tvb), PSNAME); tr=proto_item_add_subtree(it, ett_h245); /* assume that whilst there is more tvb data, there are more h245 commands */ while ( tvb_length_remaining( tvb, offset>>3 )>0 ){ CLEANUP_PUSH(reset_h245_pi, NULL); h245_pi=ep_alloc(sizeof(h245_packet_info)); init_h245_packet_info(h245_pi); asn1_ctx_init(&asn1_ctx, ASN1_ENC_PER, TRUE, pinfo); offset = dissect_h245_MultimediaSystemControlMessage(tvb, offset, &asn1_ctx, tr, hf_h245_pdu_type); tap_queue_packet(h245dg_tap, pinfo, h245_pi); offset = (offset+0x07) & 0xfffffff8; CLEANUP_CALL_AND_POP; } } void dissect_h245_OpenLogicalChannelCodec(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, char *codec_str) { /* Clean up from any previous packet dissection */ if (upcoming_channel) upcoming_channel = NULL; dissect_OpenLogicalChannel_PDU(tvb, pinfo, tree); if (h245_pi != NULL) h245_pi->msg_type = H245_OpenLogChn; if (codec_str && codec_type){ strncpy(codec_str, codec_type, 50); } } /*--- proto_register_h245 -------------------------------------------*/ void proto_register_h245(void) { /* List of fields */ static hf_register_info hf[] = { { &hf_h245_pdu_type, { "PDU Type", "h245.pdu_type", FT_UINT32, BASE_DEC, VALS(h245_MultimediaSystemControlMessage_vals), 0, "Type of H.245 PDU", HFILL }}, { &hf_h245Manufacturer, { "H.245 Manufacturer", "h245.Manufacturer", FT_UINT32, BASE_HEX, VALS(H221ManufacturerCode_vals), 0, "h245.H.221 Manufacturer", HFILL }}, #include "packet-h245-hfarr.c" }; /* List of subtrees */ static gint *ett[] = { &ett_h245, &ett_h245_returnedFunction, #include "packet-h245-ettarr.c" }; module_t *h245_module; /* Register protocol */ proto_h245 = proto_register_protocol(PNAME, PSNAME, PFNAME); /* Register fields and subtrees */ proto_register_field_array(proto_h245, hf, array_length(hf)); proto_register_subtree_array(ett, array_length(ett)); /* From Ronnie Sahlbergs original H245 dissector */ h245_module = prefs_register_protocol(proto_h245, NULL); prefs_register_bool_preference(h245_module, "reassembly", "Reassemble H.245 messages spanning multiple TCP segments", "Whether the H.245 dissector should reassemble messages spanning multiple TCP segments." " To use this option, you must also enable \"Allow subdissectors to reassemble TCP streams\" in the TCP protocol settings.", &h245_reassembly); prefs_register_bool_preference(h245_module, "shorttypes", "Show short message types", "Whether the dissector should show short names or the long names from the standard", &h245_shorttypes); register_dissector("h245dg", dissect_h245_h245, proto_h245); register_dissector("h245", dissect_h245, proto_h245); nsp_object_dissector_table = register_dissector_table("h245.nsp.object", "H.245 NonStandardParameter (object)", FT_STRING, BASE_NONE); nsp_h221_dissector_table = register_dissector_table("h245.nsp.h221", "H.245 NonStandardParameter (h221)", FT_UINT32, BASE_HEX); gef_content_dissector_table = register_dissector_table("h245.gef.content", "H.245 Generic Extensible Framework", FT_STRING, BASE_NONE); h245_tap = register_tap("h245"); h245dg_tap = register_tap("h245dg"); oid_add_from_string("h239ControlCapability","0.0.8.239.1.1"); oid_add_from_string("h239ExtendedVideoCapability","0.0.8.239.1.2"); oid_add_from_string("generic-message","0.0.8.239.2"); oid_add_from_string("h245 version 3","0.0.8.245.0.3"); oid_add_from_string("h245 version 4","0.0.8.245.0.4"); oid_add_from_string("h245 version 5","0.0.8.245.0.5"); oid_add_from_string("h245 version 6","0.0.8.245.0.6"); oid_add_from_string("h245 version 7","0.0.8.245.0.7"); oid_add_from_string("h245 version 8","0.0.8.245.0.8"); oid_add_from_string("h245 version 9","0.0.8.245.0.9"); oid_add_from_string("h245 version 10","0.0.8.245.0.10"); oid_add_from_string("h245 version 11","0.0.8.245.0.11"); oid_add_from_string("h245 version 12","0.0.8.245.0.12"); oid_add_from_string("h245 version 13","0.0.8.245.0.13"); /* This capability is defined in Annex E. */ oid_add_from_string("ISO/IEC 14496-2 MPEG-4 video","0.0.8.245.1.0.0"); /* This capability is defined in Annex H. */ oid_add_from_string("ISO/IEC 14496-3 MPEG-4 audio","0.0.8.245.1.1.0"); /* This capability is defined in Annex I. */ oid_add_from_string("AMR","0.0.8.245.1.1.1"); /* This capability is defined in Annex J. */ oid_add_from_string("acelp","0.0.8.245.1.1.2"); /* This capability is defined in Annex K. */ oid_add_from_string("us1","0.0.8.245.1.1.3"); /* This capability is defined in Annex L. */ oid_add_from_string("is127evrc","0.0.8.245.1.1.4"); /* This capability is defined in Annex M. */ oid_add_from_string("ISO/IEC 13818-7","0.0.8.245.1.1.5"); /* This capability is defined in Annex N. */ oid_add_from_string("rfc3389","0.0.8.245.1.1.6"); /* This capability is defined in Annex O. */ oid_add_from_string("L-16","0.0.8.245.1.1.7"); /* This capability is defined in Annex P. */ oid_add_from_string("bounded-audio-stream","0.0.8.245.1.1.8"); /* This capability is defined in Annex R. */ oid_add_from_string("AMR-NB","0.0.8.245.1.1.9"); /* This capability is defined in Annex R. */ oid_add_from_string("AMR-WB","0.0.8.245.1.1.10"); /* This capability is defined in Annex S. */ oid_add_from_string("ilbc","0.0.8.245.1.1.11"); oid_add_from_string("ISO/IEC 14496-1","0.0.8.245.1.2.0"); oid_add_from_string("Nx64","0.0.8.245.1.2.1"); oid_add_from_string("logical-channel-bit-ratemanagement","0.0.8.245.1.3.0"); oid_add_from_string("h264 generic-capabilities","0.0.8.241.0.0.1"); oid_add_from_string("iPpacketization_h241AnnexA","0.0.8.241.0.0.0.0"); oid_add_from_string("iPpacketization_RFC3984NonInterleaved","0.0.8.241.0.0.0.1"); oid_add_from_string("iPpacketization_RFC3984Interleaved","0.0.8.241.0.0.0.2"); oid_add_from_string("h264_generic-capabilities","0.0.8.241.0.0.1"); } /*--- proto_reg_handoff_h245 ---------------------------------------*/ void proto_reg_handoff_h245(void) { rtp_handle = find_dissector("rtp"); rtcp_handle = find_dissector("rtcp"); t38_handle = find_dissector("t38"); data_handle = find_dissector("data"); h263_handle = find_dissector("h263data"); amr_handle = find_dissector("amr_if2"); h245_handle=create_dissector_handle(dissect_h245, proto_h245); dissector_add_handle("tcp.port", h245_handle); MultimediaSystemControlMessage_handle=create_dissector_handle(dissect_h245_h245, proto_h245); dissector_add_handle("udp.port", MultimediaSystemControlMessage_handle); h223_lc_init(); } static void init_h245_packet_info(h245_packet_info *pi) { if(pi == NULL) { return; } pi->msg_type = H245_OTHER; pi->frame_label[0] = '\0'; g_snprintf(pi->comment, sizeof(pi->comment), "H245 "); }