534 lines
14 KiB
C
534 lines
14 KiB
C
/* packet-ros_asn1.c
|
|
* Routines for ROS packet dissection
|
|
* Graeme Lunt 2005
|
|
*
|
|
* $Id$
|
|
*
|
|
* Wireshark - Network traffic analyzer
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
* Copyright 1998 Gerald Combs
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
|
|
*/
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
# include "config.h"
|
|
#endif
|
|
|
|
#include <glib.h>
|
|
#include <epan/packet.h>
|
|
#include <epan/conversation.h>
|
|
#include <epan/emem.h>
|
|
#include <epan/asn1.h>
|
|
#include <epan/expert.h>
|
|
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
|
|
#include "packet-ber.h"
|
|
#include "packet-pres.h"
|
|
#include "packet-ros.h"
|
|
|
|
#define PNAME "X.880 OSI Remote Operations Service"
|
|
#define PSNAME "ROS"
|
|
#define PFNAME "ros"
|
|
|
|
/* Initialize the protocol and registered fields */
|
|
int proto_ros = -1;
|
|
|
|
static struct SESSION_DATA_STRUCTURE* session = NULL;
|
|
|
|
static proto_tree *top_tree=NULL;
|
|
static guint32 opcode;
|
|
static guint32 invokeid;
|
|
|
|
static dissector_handle_t ros_handle = NULL;
|
|
|
|
typedef struct ros_conv_info_t {
|
|
struct ros_conv_info_t *next;
|
|
GHashTable *unmatched; /* unmatched operations */
|
|
GHashTable *matched; /* matched operations */
|
|
} ros_conv_info_t;
|
|
|
|
static ros_conv_info_t *ros_info_items = NULL;
|
|
|
|
typedef struct ros_call_response {
|
|
gboolean is_request;
|
|
guint32 req_frame;
|
|
nstime_t req_time;
|
|
guint32 rep_frame;
|
|
guint invokeId;
|
|
} ros_call_response_t;
|
|
|
|
static int hf_ros_response_in = -1;
|
|
static int hf_ros_response_to = -1;
|
|
static int hf_ros_time = -1;
|
|
|
|
|
|
#include "packet-ros-hf.c"
|
|
|
|
/* Initialize the subtree pointers */
|
|
static gint ett_ros = -1;
|
|
#include "packet-ros-ett.c"
|
|
|
|
static dissector_table_t ros_oid_dissector_table=NULL;
|
|
|
|
static GHashTable *oid_table=NULL;
|
|
static GHashTable *protocol_table=NULL;
|
|
static gint ett_ros_unknown = -1;
|
|
|
|
void
|
|
register_ros_oid_dissector_handle(const char *oid, dissector_handle_t dissector, int proto _U_, const char *name, gboolean uses_rtse)
|
|
{
|
|
dissector_add_string("ros.oid", oid, dissector);
|
|
g_hash_table_insert(oid_table, (gpointer)oid, (gpointer)name);
|
|
|
|
if(!uses_rtse)
|
|
/* if we are not using RTSE, then we must register ROS with BER (ACSE) */
|
|
register_ber_oid_dissector_handle(oid, ros_handle, proto, name);
|
|
}
|
|
|
|
void
|
|
register_ros_protocol_info(const char *oid, const ros_info_t *rinfo, int proto _U_, const char *name, gboolean uses_rtse)
|
|
{
|
|
g_hash_table_insert(protocol_table, (gpointer)oid, (gpointer)rinfo);
|
|
g_hash_table_insert(oid_table, (gpointer)oid, (gpointer)name);
|
|
|
|
if(!uses_rtse)
|
|
/* if we are not using RTSE, then we must register ROS with BER (ACSE) */
|
|
register_ber_oid_dissector_handle(oid, ros_handle, proto, name);
|
|
}
|
|
|
|
static new_dissector_t ros_lookup_opr_dissector(gint32 opcode, const ros_opr_t *operations, gboolean argument)
|
|
{
|
|
/* we don't know what order asn2wrs/module definition is, so ... */
|
|
if(operations) {
|
|
for(;operations->arg_pdu != (new_dissector_t)(-1); operations++)
|
|
if(operations->opcode == opcode)
|
|
return argument ? operations->arg_pdu : operations->res_pdu;
|
|
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
static new_dissector_t ros_lookup_err_dissector(gint32 errcode, const ros_err_t *errors)
|
|
{
|
|
/* we don't know what order asn2wrs/module definition is, so ... */
|
|
if(errors) {
|
|
for(;errors->err_pdu != (new_dissector_t) (-1); errors++) {
|
|
if(errors->errcode == errcode)
|
|
return errors->err_pdu;
|
|
}
|
|
}
|
|
return NULL;
|
|
}
|
|
|
|
|
|
static gboolean ros_try_string(const char *oid, tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
|
|
{
|
|
ros_info_t *rinfo;
|
|
gint32 opcode = 0;
|
|
const gchar *opname = NULL;
|
|
const gchar *suffix = NULL;
|
|
int offset = 0;
|
|
new_dissector_t opdissector = NULL;
|
|
const value_string *lookup;
|
|
proto_item *item=NULL;
|
|
proto_tree *ros_tree=NULL;
|
|
|
|
if((rinfo = (ros_info_t*)g_hash_table_lookup(protocol_table, oid)) != NULL) {
|
|
|
|
if(tree){
|
|
item = proto_tree_add_item(tree, *(rinfo->proto), tvb, 0, -1, FALSE);
|
|
ros_tree = proto_item_add_subtree(item, *(rinfo->ett_proto));
|
|
}
|
|
|
|
if (check_col(pinfo->cinfo, COL_PROTOCOL))
|
|
col_set_str(pinfo->cinfo, COL_PROTOCOL, rinfo->name);
|
|
|
|
/* if this is a bind operation */
|
|
if((session->ros_op & ROS_OP_TYPE_MASK) == ROS_OP_BIND) {
|
|
/* use the in-built operation codes */
|
|
if((session->ros_op & ROS_OP_PDU_MASK) == ROS_OP_ERROR)
|
|
opcode = err_ros_bind;
|
|
else
|
|
opcode = op_ros_bind;
|
|
} else
|
|
/* otherwise just take the opcode */
|
|
opcode = session->ros_op & ROS_OP_OPCODE_MASK;
|
|
|
|
/* default lookup in the operations */
|
|
lookup = rinfo->opr_code_strings;
|
|
|
|
switch(session->ros_op & ROS_OP_PDU_MASK) {
|
|
case ROS_OP_ARGUMENT:
|
|
opdissector = ros_lookup_opr_dissector(opcode, rinfo->opr_code_dissectors, TRUE);
|
|
suffix = "_argument";
|
|
break;
|
|
case ROS_OP_RESULT:
|
|
opdissector = ros_lookup_opr_dissector(opcode, rinfo->opr_code_dissectors, FALSE);
|
|
suffix = "_result";
|
|
break;
|
|
case ROS_OP_ERROR:
|
|
opdissector = ros_lookup_err_dissector(opcode, rinfo->err_code_dissectors);
|
|
lookup = rinfo->err_code_strings;
|
|
break;
|
|
default:
|
|
break;
|
|
}
|
|
|
|
if(opdissector) {
|
|
|
|
opname = val_to_str(opcode, lookup, "Unknown opcode (%d)");
|
|
|
|
if (check_col(pinfo->cinfo, COL_INFO)) {
|
|
col_set_str(pinfo->cinfo, COL_INFO, opname);
|
|
if(suffix)
|
|
col_append_str(pinfo->cinfo, COL_INFO, suffix);
|
|
}
|
|
|
|
offset = (*opdissector)(tvb, pinfo, ros_tree);
|
|
|
|
return TRUE;
|
|
}
|
|
}
|
|
|
|
return FALSE;
|
|
}
|
|
|
|
static int
|
|
call_ros_oid_callback(const char *oid, tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree)
|
|
{
|
|
tvbuff_t *next_tvb;
|
|
|
|
next_tvb = tvb_new_subset(tvb, offset, tvb_length_remaining(tvb, offset), tvb_reported_length_remaining(tvb, offset));
|
|
|
|
if(!ros_try_string(oid, next_tvb, pinfo, tree) &&
|
|
!dissector_try_string(ros_oid_dissector_table, oid, next_tvb, pinfo, tree)){
|
|
proto_item *item=proto_tree_add_text(tree, next_tvb, 0, tvb_length_remaining(tvb, offset), "ROS: Dissector for OID:%s not implemented. Contact Wireshark developers if you want this supported", oid);
|
|
proto_tree *next_tree=proto_item_add_subtree(item, ett_ros_unknown);
|
|
|
|
expert_add_info_format (pinfo, item, PI_UNDECODED, PI_WARN,
|
|
"ROS: Dissector for OID %s not implemented", oid);
|
|
dissect_unknown_ber(pinfo, next_tvb, offset, next_tree);
|
|
}
|
|
|
|
/*XXX until we change the #.REGISTER signature for _PDU()s
|
|
* into new_dissector_t we have to do this kludge with
|
|
* manually step past the content in the ANY type.
|
|
*/
|
|
offset+=tvb_length_remaining(tvb, offset);
|
|
|
|
return offset;
|
|
}
|
|
|
|
|
|
static guint
|
|
ros_info_hash_matched(gconstpointer k)
|
|
{
|
|
const ros_call_response_t *key = k;
|
|
|
|
return key->invokeId;
|
|
}
|
|
|
|
static gint
|
|
ros_info_equal_matched(gconstpointer k1, gconstpointer k2)
|
|
{
|
|
const ros_call_response_t *key1 = k1;
|
|
const ros_call_response_t *key2 = k2;
|
|
|
|
if( key1->req_frame && key2->req_frame && (key1->req_frame!=key2->req_frame) ){
|
|
return 0;
|
|
}
|
|
/* a response may span multiple frames
|
|
if( key1->rep_frame && key2->rep_frame && (key1->rep_frame!=key2->rep_frame) ){
|
|
return 0;
|
|
}
|
|
*/
|
|
|
|
return key1->invokeId==key2->invokeId;
|
|
}
|
|
|
|
static guint
|
|
ros_info_hash_unmatched(gconstpointer k)
|
|
{
|
|
const ros_call_response_t *key = k;
|
|
|
|
return key->invokeId;
|
|
}
|
|
|
|
static gint
|
|
ros_info_equal_unmatched(gconstpointer k1, gconstpointer k2)
|
|
{
|
|
const ros_call_response_t *key1 = k1;
|
|
const ros_call_response_t *key2 = k2;
|
|
|
|
return key1->invokeId==key2->invokeId;
|
|
}
|
|
|
|
static ros_call_response_t *
|
|
ros_match_call_response(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, guint invokeId, gboolean isInvoke)
|
|
{
|
|
ros_call_response_t rcr, *rcrp=NULL;
|
|
ros_conv_info_t *ros_info = ros_info_items;
|
|
|
|
/* first see if we have already matched this */
|
|
|
|
rcr.invokeId=invokeId;
|
|
rcr.is_request = isInvoke;
|
|
|
|
if(isInvoke) {
|
|
rcr.req_frame=pinfo->fd->num;
|
|
rcr.rep_frame=0;
|
|
} else {
|
|
rcr.req_frame=0;
|
|
rcr.rep_frame=pinfo->fd->num;
|
|
}
|
|
|
|
rcrp=g_hash_table_lookup(ros_info->matched, &rcr);
|
|
|
|
if(rcrp) {
|
|
/* we have found a match */
|
|
rcrp->is_request=rcr.is_request;
|
|
|
|
} else {
|
|
|
|
/* we haven't found a match - try and match it up */
|
|
|
|
if(isInvoke) {
|
|
/* this a a request - add it to the unmatched list */
|
|
|
|
/* check that we dont already have one of those in the
|
|
unmatched list and if so remove it */
|
|
|
|
rcr.invokeId=invokeId;
|
|
|
|
rcrp=g_hash_table_lookup(ros_info->unmatched, &rcr);
|
|
|
|
if(rcrp){
|
|
g_hash_table_remove(ros_info->unmatched, rcrp);
|
|
}
|
|
|
|
/* if we cant reuse the old one, grab a new chunk */
|
|
if(!rcrp){
|
|
rcrp=se_alloc(sizeof(ros_call_response_t));
|
|
}
|
|
rcrp->invokeId=invokeId;
|
|
rcrp->req_frame=pinfo->fd->num;
|
|
rcrp->req_time=pinfo->fd->abs_ts;
|
|
rcrp->rep_frame=0;
|
|
rcrp->is_request=TRUE;
|
|
g_hash_table_insert(ros_info->unmatched, rcrp, rcrp);
|
|
return NULL;
|
|
|
|
} else {
|
|
|
|
/* this is a result - it should be in our unmatched list */
|
|
|
|
rcr.invokeId=invokeId;
|
|
rcrp=g_hash_table_lookup(ros_info->unmatched, &rcr);
|
|
|
|
if(rcrp){
|
|
|
|
if(!rcrp->rep_frame){
|
|
g_hash_table_remove(ros_info->unmatched, rcrp);
|
|
rcrp->rep_frame=pinfo->fd->num;
|
|
rcrp->is_request=FALSE;
|
|
g_hash_table_insert(ros_info->matched, rcrp, rcrp);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
if(rcrp){ /* we have found a match */
|
|
proto_item *item = NULL;
|
|
|
|
if(rcrp->is_request){
|
|
item=proto_tree_add_uint(tree, hf_ros_response_in, tvb, 0, 0, rcrp->rep_frame);
|
|
PROTO_ITEM_SET_GENERATED (item);
|
|
} else {
|
|
nstime_t ns;
|
|
item=proto_tree_add_uint(tree, hf_ros_response_to, tvb, 0, 0, rcrp->req_frame);
|
|
PROTO_ITEM_SET_GENERATED (item);
|
|
nstime_delta(&ns, &pinfo->fd->abs_ts, &rcrp->req_time);
|
|
item=proto_tree_add_time(tree, hf_ros_time, tvb, 0, 0, &ns);
|
|
PROTO_ITEM_SET_GENERATED (item);
|
|
}
|
|
}
|
|
|
|
return rcrp;
|
|
}
|
|
|
|
#include "packet-ros-fn.c"
|
|
|
|
/*
|
|
* Dissect ROS PDUs inside a PPDU.
|
|
*/
|
|
static void
|
|
dissect_ros(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree)
|
|
{
|
|
int offset = 0;
|
|
int old_offset;
|
|
proto_item *item=NULL;
|
|
proto_tree *tree=NULL;
|
|
proto_tree *next_tree=NULL;
|
|
conversation_t *conversation;
|
|
ros_conv_info_t *ros_info = NULL;
|
|
asn1_ctx_t asn1_ctx;
|
|
asn1_ctx_init(&asn1_ctx, ASN1_ENC_BER, TRUE, pinfo);
|
|
|
|
/* save parent_tree so subdissectors can create new top nodes */
|
|
top_tree=parent_tree;
|
|
|
|
/* do we have application context from the acse dissector? */
|
|
if( !pinfo->private_data ){
|
|
if(parent_tree){
|
|
proto_tree_add_text(parent_tree, tvb, offset, -1,
|
|
"Internal error:can't get application context from ACSE dissector.");
|
|
}
|
|
return ;
|
|
} else {
|
|
session = ( (struct SESSION_DATA_STRUCTURE*)(pinfo->private_data) );
|
|
|
|
}
|
|
|
|
/*
|
|
* Do we have a conversation for this connection?
|
|
*/
|
|
conversation = find_conversation(pinfo->fd->num, &pinfo->src, &pinfo->dst,
|
|
pinfo->ptype, pinfo->srcport,
|
|
pinfo->destport, 0);
|
|
if (conversation == NULL) {
|
|
/* We don't yet have a conversation, so create one. */
|
|
conversation = conversation_new(pinfo->fd->num, &pinfo->src, &pinfo->dst,
|
|
pinfo->ptype, pinfo->srcport,
|
|
pinfo->destport, 0);
|
|
|
|
}
|
|
|
|
/*
|
|
* Do we already have our info
|
|
*/
|
|
ros_info = conversation_get_proto_data(conversation, proto_ros);
|
|
if (ros_info == NULL) {
|
|
|
|
/* No. Attach that information to the conversation. */
|
|
|
|
ros_info = se_alloc(sizeof(ros_conv_info_t));
|
|
ros_info->matched=g_hash_table_new(ros_info_hash_matched, ros_info_equal_matched);
|
|
ros_info->unmatched=g_hash_table_new(ros_info_hash_unmatched, ros_info_equal_unmatched);
|
|
|
|
conversation_add_proto_data(conversation, proto_ros, ros_info);
|
|
|
|
ros_info->next = ros_info_items;
|
|
ros_info_items = ros_info;
|
|
}
|
|
|
|
/* pinfo->private_data = ros_info; */
|
|
|
|
if(parent_tree){
|
|
item = proto_tree_add_item(parent_tree, proto_ros, tvb, 0, -1, FALSE);
|
|
tree = proto_item_add_subtree(item, ett_ros);
|
|
}
|
|
col_set_str(pinfo->cinfo, COL_PROTOCOL, "ROS");
|
|
col_clear(pinfo->cinfo, COL_INFO);
|
|
|
|
while (tvb_reported_length_remaining(tvb, offset) > 0){
|
|
old_offset=offset;
|
|
offset=dissect_ros_ROS(FALSE, tvb, offset, &asn1_ctx , tree, -1);
|
|
if(offset == old_offset){
|
|
item = proto_tree_add_text(tree, tvb, offset, -1,"Unknown ROS PDU");
|
|
|
|
if(item){
|
|
expert_add_info_format (pinfo, item, PI_UNDECODED, PI_WARN, "Unknown ROS PDU");
|
|
next_tree=proto_item_add_subtree(item, ett_ros_unknown);
|
|
dissect_unknown_ber(pinfo, tvb, offset, next_tree);
|
|
}
|
|
|
|
offset = tvb_length(tvb);
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
|
|
static void
|
|
ros_reinit(void)
|
|
{
|
|
ros_conv_info_t *ros_info;
|
|
|
|
/* Free up state attached to the ros_info structures */
|
|
for (ros_info = ros_info_items; ros_info != NULL; ros_info = ros_info->next) {
|
|
g_hash_table_destroy(ros_info->matched);
|
|
ros_info->matched=NULL;
|
|
g_hash_table_destroy(ros_info->unmatched);
|
|
ros_info->unmatched=NULL;
|
|
}
|
|
|
|
ros_info_items = NULL;
|
|
|
|
}
|
|
|
|
/*--- proto_register_ros -------------------------------------------*/
|
|
void proto_register_ros(void) {
|
|
|
|
/* List of fields */
|
|
static hf_register_info hf[] =
|
|
{
|
|
{ &hf_ros_response_in,
|
|
{ "Response In", "ros.response_in",
|
|
FT_FRAMENUM, BASE_NONE, NULL, 0x0,
|
|
"The response to this remote operation invocation is in this frame", HFILL }},
|
|
{ &hf_ros_response_to,
|
|
{ "Response To", "ros.response_to",
|
|
FT_FRAMENUM, BASE_NONE, NULL, 0x0,
|
|
"This is a response to the remote operation invocation in this frame", HFILL }},
|
|
{ &hf_ros_time,
|
|
{ "Time", "ros.time",
|
|
FT_RELATIVE_TIME, BASE_NONE, NULL, 0x0,
|
|
"The time between the Invoke and the Response", HFILL }},
|
|
|
|
#include "packet-ros-hfarr.c"
|
|
};
|
|
|
|
/* List of subtrees */
|
|
static gint *ett[] = {
|
|
&ett_ros,
|
|
&ett_ros_unknown,
|
|
#include "packet-ros-ettarr.c"
|
|
};
|
|
|
|
/* Register protocol */
|
|
proto_ros = proto_register_protocol(PNAME, PSNAME, PFNAME);
|
|
register_dissector("ros", dissect_ros, proto_ros);
|
|
/* Register fields and subtrees */
|
|
proto_register_field_array(proto_ros, hf, array_length(hf));
|
|
proto_register_subtree_array(ett, array_length(ett));
|
|
|
|
ros_oid_dissector_table = register_dissector_table("ros.oid", "ROS OID Dissectors", FT_STRING, BASE_NONE);
|
|
oid_table=g_hash_table_new(g_str_hash, g_str_equal);
|
|
protocol_table=g_hash_table_new(g_str_hash, g_str_equal);
|
|
|
|
ros_handle = find_dissector("ros");
|
|
|
|
register_init_routine(ros_reinit);
|
|
}
|
|
|
|
|
|
/*--- proto_reg_handoff_ros --- */
|
|
void proto_reg_handoff_ros(void) {
|
|
|
|
|
|
}
|