osmocom
/
wireshark
11
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity
wireshark/packet-bootp.c

490 lines
15 KiB
C
Raw Blame History

/* packet-bootp.c
* Routines for BOOTP/DHCP packet disassembly
* Gilbert Ramirez <gram@verdict.uthscsa.edu>
*
* $Id: packet-bootp.c,v 1.2 1998/09/16 03:22:01 gerald Exp $
*
* The information used comes from:
* RFC 2132: DHCP Options and BOOTP Vendor Extensions
* RFC 1542: Clarifications and Extensions for the Bootstrap Protocol
* RFC 2131: Dynamic Host Configuration Protocol
*
* Ethereal - Network traffic analyzer
* By Gerald Combs <gerald@unicom.net>
* Copyright 1998 Gerald Combs
*
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
*/
#ifdef HAVE_CONFIG_H
# include "config.h"
#endif
#include <gtk/gtk.h>
#include <stdio.h>
#ifdef HAVE_SYS_TYPES_H
# include <sys/types.h>
#endif
#ifdef HAVE_NETINET_IN_H
# include <netinet/in.h>
#endif
#include <pcap.h>
#include "packet.h"
#include "ethereal.h"
#include "etypes.h"
enum field_type { none, ipv4, string, toggle, yes_no, special, opaque,
val_u_byte, val_u_short, val_u_long,
val_s_long };
struct opt_info {
char *text;
enum field_type ftype;
};
#define NUM_OPT_INFOS 77
/* returns the number of bytes consumed by this option */
int
bootp_option(const u_char *pd, GtkWidget *bp_tree, int voff, int eoff)
{
char *text;
enum field_type ftype;
u_char code = pd[voff];
int vlen = pd[voff+1];
int i, consumed;
GtkWidget *vti, *v_tree;
char *opt53_text[] = {
"Unknown Message Type",
"Discover",
"Offer",
"Request",
"Decline",
"ACK",
"NAK",
"Release",
"Inform"
};
static struct opt_info opt[] = {
/* 0 */ { "Padding", none },
/* 1 */ { "Subnet Mask", ipv4 },
/* 2 */ { "Time Offset", val_s_long },
/* 3 */ { "Router", ipv4 },
/* 4 */ { "Time Server", ipv4 },
/* 5 */ { "Name Server", ipv4 },
/* 6 */ { "Domain Name Server", ipv4 },
/* 7 */ { "Log Server", ipv4 },
/* 8 */ { "Cookie Server", ipv4 },
/* 9 */ { "LPR Server", ipv4 },
/* 10 */ { "Impress Server", ipv4 },
/* 11 */ { "Resource Location Server", ipv4 },
/* 12 */ { "Host Name", string },
/* 13 */ { "Boot File Size", val_u_short },
/* 14 */ { "Merit Dump File", string },
/* 15 */ { "Domain Name", string },
/* 16 */ { "Swap Server", ipv4 },
/* 17 */ { "Root Path", string },
/* 18 */ { "Extensions Path", string },
/* 19 */ { "IP Forwarding", toggle },
/* 20 */ { "Non-Local Source Routing", toggle },
/* 21 */ { "Policy Filter", special },
/* 22 */ { "Maximum Datagram Reassembly Size", val_u_short },
/* 23 */ { "Default IP Time-to-Live", val_u_byte },
/* 24 */ { "Path MTU Aging Timeout", val_u_long },
/* 25 */ { "Path MTU Plateau Table", val_u_short },
/* 26 */ { "Interface MTU", val_u_short },
/* 27 */ { "All Subnets are Local", yes_no },
/* 28 */ { "Broadcast Address", ipv4 },
/* 29 */ { "Perform Mask Discovery", toggle },
/* 30 */ { "Mask Supplier", yes_no },
/* 31 */ { "Perform Router Discover", toggle },
/* 32 */ { "Router Solicitation Address", ipv4 },
/* 33 */ { "Static Route", special },
/* 34 */ { "Trailer Encapsulation", toggle },
/* 35 */ { "ARP Cache Timeout", val_u_long },
/* 36 */ { "Ethernet Encapsulation", toggle },
/* 37 */ { "TCP Default TTL", val_u_byte },
/* 38 */ { "TCP Keepalive Interval", val_u_long },
/* 39 */ { "TCP Keepalive Garbage", toggle },
/* 40 */ { "Network Information Service Domain", string },
/* 41 */ { "Network Information Service Servers", ipv4 },
/* 42 */ { "Network Time Protocol Servers", ipv4 },
/* 43 */ { "Vendor-Specific Information", special },
/* 44 */ { "NetBIOS over TCP/IP Name Server", ipv4 },
/* 45 */ { "NetBIOS over TCP/IP Datagram Distribution Name Server", ipv4 },
/* 46 */ { "NetBIOS over TCP/IP Node Type", special },
/* 47 */ { "NetBIOS over TCP/IP Scope", string },
/* 48 */ { "X Window System Font Server", ipv4 },
/* 49 */ { "X Window System Display Manager", ipv4 },
/* 50 */ { "Requested IP Address", ipv4 },
/* 51 */ { "IP Address Lease Time", val_u_long },
/* 52 */ { "Option Overload", special },
/* 53 */ { "DHCP Message Type", special },
/* 54 */ { "Server Identifier", ipv4 },
/* 55 */ { "Parameter Request List", opaque },
/* 56 */ { "Message", string },
/* 57 */ { "Maximum DHCP Message Size", val_u_short },
/* 58 */ { "Renewal Time Value", val_u_long },
/* 59 */ { "Rebinding Time Value", val_u_long },
/* 60 */ { "Vendor class identifier", opaque },
/* 61 */ { "Client identifier", special },
/* 64 */ { "Network Information Service+ Domain", string },
/* 65 */ { "Network Information Service+ Servers", ipv4 },
/* 66 */ { "TFTP Server Name", string },
/* 67 */ { "Bootfile name", string },
/* 68 */ { "Mobile IP Home Agent", ipv4 },
/* 69 */ { "SMTP Server", ipv4 },
/* 70 */ { "POP3 Server", ipv4 },
/* 71 */ { "NNTP Server", ipv4 },
/* 72 */ { "Default WWW Server", ipv4 },
/* 73 */ { "Default Finger Server", ipv4 },
/* 74 */ { "Default IRC Server", ipv4 },
/* 75 */ { "StreetTalk Server", ipv4 },
/* 76 */ { "StreetTalk Directory Assistance Server", ipv4 }
};
text = opt[code].text;
/* Special cases */
switch (code) {
/* Padding */
case 0:
/* check how much padding we have */
for (i = voff + 1; i < eoff; i++ ) {
if (pd[i] != 0) {
break;
}
}
i = i - voff;
add_item_to_tree(bp_tree, voff, i, "Padding");
consumed = i;
return consumed;
/* Policy Filter */
case 21:
/* one IP address pair */
if (vlen == 8) {
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = %s/%s", code, text,
ip_to_str((guint8*)&pd[voff+2]),
ip_to_str((guint8*)&pd[voff+6]));
}
/* > 1 IP address pair. Let's make a sub-tree */
else {
vti = add_item_to_tree(GTK_WIDGET(bp_tree), voff,
consumed, "Option %d: %s", code, text);
v_tree = gtk_tree_new();
add_subtree(vti, v_tree, ETT_BOOTP_OPTION);
for (i = voff + 2; i < voff + consumed; i += 8) {
add_item_to_tree(v_tree, i, 4, "IP Address/Mask: %s/%s",
ip_to_str((guint8*)&pd[i]),
ip_to_str((guint8*)&pd[i+4]));
}
}
/* Static Route */
case 33:
/* one IP address pair */
if (vlen == 8) {
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = %s/%s", code, text,
ip_to_str((guint8*)&pd[voff+2]),
ip_to_str((guint8*)&pd[voff+6]));
}
/* > 1 IP address pair. Let's make a sub-tree */
else {
vti = add_item_to_tree(GTK_WIDGET(bp_tree), voff,
consumed, "Option %d: %s", code, text);
v_tree = gtk_tree_new();
add_subtree(vti, v_tree, ETT_BOOTP_OPTION);
for (i = voff + 2; i < voff + consumed; i += 8) {
add_item_to_tree(v_tree, i, 4,
"Destination IP Address/Router: %s/%s",
ip_to_str((guint8*)&pd[i]),
ip_to_str((guint8*)&pd[i+4]));
}
}
/* DHCP Message Type */
case 53:
if (pd[voff+2] > 0 && pd[voff+2] < 9) {
i = pd[voff + 2];
}
else {
i = 0;
}
add_item_to_tree(bp_tree, voff, 3, "Option %d: %s = DHCP %s",
code, text, opt53_text[i]);
return vlen + 2;
/* Client Identifier */
case 61:
consumed = vlen + 2;
/* We *MAY* use hwtype/hwaddr. If we have 7 bytes, I'll
guess that the first is the hwtype, and the last 6 are
the hw addr */
if (pd[voff+1] == 7) {
vti = add_item_to_tree(GTK_WIDGET(bp_tree), voff,
consumed, "Option %d: %s", code, text);
v_tree = gtk_tree_new();
add_subtree(vti, v_tree, ETT_BOOTP_OPTION);
add_item_to_tree(v_tree, voff+2, 1,
"Hardware type: 0x%02x", pd[voff+2]);
add_item_to_tree(v_tree, voff+3, 6,
"Client hardware address: %s",
ether_to_str((guint8*)&pd[voff+3]));
}
/* otherwise, it's opaque data */
else {
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s (%d bytes)", code, text, vlen);
}
return consumed;
/* End Option */
case 255:
add_item_to_tree(bp_tree, voff, 1, "End Option", code);
consumed = 1;
return consumed;
default:
/* nothing */
}
/* Normal cases */
if (code < NUM_OPT_INFOS) {
consumed = vlen + 2;
text = opt[code].text;
ftype = opt[code].ftype;
switch (ftype) {
case ipv4:
/* one IP address */
if (vlen == 4) {
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = %s", code, text,
ip_to_str((guint8*)&pd[voff+2]));
}
/* > 1 IP addresses. Let's make a sub-tree */
else {
vti = add_item_to_tree(GTK_WIDGET(bp_tree), voff,
consumed, "Option %d: %s", code, text);
v_tree = gtk_tree_new();
add_subtree(vti, v_tree, ETT_BOOTP_OPTION);
for (i = voff + 2; i < voff + consumed; i += 4) {
add_item_to_tree(v_tree, i, 4, "IP Address: %s",
ip_to_str((guint8*)&pd[i]));
}
}
break;
case string:
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = %s", code, text, &pd[voff+2]);
break;
case opaque:
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = %s (%d bytes)",
code, text, &pd[voff+2], vlen);
break;
case val_u_short:
/* one IP address */
if (vlen == 2) {
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = %d", code, text,
pntohs(&pd[voff+2]));
}
/* > 1 u_short */
else {
vti = add_item_to_tree(GTK_WIDGET(bp_tree), voff,
consumed, "Option %d: %s", code, text);
v_tree = gtk_tree_new();
add_subtree(vti, v_tree, ETT_BOOTP_OPTION);
for (i = voff + 2; i < voff + consumed; i += 2) {
add_item_to_tree(v_tree, i, 4, "Value: %d",
pntohs(&pd[i]));
}
}
break;
case val_u_long:
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = %d", code, text,
pntohl(&pd[voff+2]));
break;
case val_u_byte:
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = %d", code, text, pd[voff+2]);
break;
case toggle:
i = pd[voff+2];
if (i != 0 && i != 1) {
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = Invalid Value %d", code, text,
pd[voff+2]);
}
else {
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = %s", code, text,
pd[voff+2] == 0 ? "Disabled" : "Enabled");
}
break;
case yes_no:
i = pd[voff+2];
if (i != 0 && i != 1) {
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = Invalid Value %d", code, text,
pd[voff+2]);
}
else {
add_item_to_tree(bp_tree, voff, consumed,
"Option %d: %s = %s", code, text,
pd[voff+2] == 0 ? "No" : "Yes");
}
break;
default:
add_item_to_tree(bp_tree, voff, consumed, "Option %d: %s",
code, text);
}
}
else {
add_item_to_tree(bp_tree, voff, 1, "Unknown Option Code: %d", code);
}
return consumed;
}
void
dissect_bootp(const u_char *pd, int offset, frame_data *fd, GtkTree *tree)
{
GtkWidget *bp_tree, *ti;
int voff, eoff; /* vender offset, end offset */
int vlen;
if (fd->win_info[0]) {
strcpy(fd->win_info[3], "BOOTP");
/* if hwaddr is 6 bytes, assume MAC */
if (pd[offset] == 1 && pd[offset+2] == 6) {
sprintf(fd->win_info[4], "Boot Request from %s",
ether_to_str((guint8*)&pd[offset+28]));
}
else {
strcpy(fd->win_info[4], pd[offset] == 1 ? "Boot Request" :
"Boot Reply");
}
}
if (tree) {
ti = add_item_to_tree(GTK_WIDGET(tree), offset, fd->cap_len - offset,
"Bootstrap Protocol");
bp_tree = gtk_tree_new();
add_subtree(ti, bp_tree, ETT_BOOTP);
add_item_to_tree(bp_tree, offset, 1, pd[offset] == 1 ?
"Boot Request" : "Boot Reply");
add_item_to_tree(bp_tree, offset + 1, 1,
"Hardware type: 0x%02x", pd[offset+1]);
add_item_to_tree(bp_tree, offset + 2, 1,
"Hardware address length: %d", pd[offset+2]);
add_item_to_tree(bp_tree, offset + 3, 1,
"Hops: %d", pd[offset+3]);
add_item_to_tree(bp_tree, offset + 4, 4,
"Transaction ID: 0x%08x", pntohl(&pd[offset+4]));
add_item_to_tree(bp_tree, offset + 8, 2,
"Seconds elapsed: %d", pntohs(&pd[offset+8]));
add_item_to_tree(bp_tree, offset + 10, 2,
"Broadcast flag: %d", pd[offset+10] & 1);
add_item_to_tree(bp_tree, offset + 12, 4,
"Client IP address: %s", ip_to_str((guint8*)&pd[offset+12]));
add_item_to_tree(bp_tree, offset + 16, 4,
"Your (client) IP address: %s", ip_to_str((guint8*)&pd[offset+16]));
add_item_to_tree(bp_tree, offset + 20, 4,
"Next server IP address: %s", ip_to_str((guint8*)&pd[offset+20]));
add_item_to_tree(bp_tree, offset + 24, 4,
"Relay agent IP address: %s", ip_to_str((guint8*)&pd[offset+24]));
/* If HW address is 6 bytes, assume MAC. */
if (pd[offset+2] == 6) {
add_item_to_tree(bp_tree, offset + 28, 6,
"Client hardware address: %s",
ether_to_str((guint8*)&pd[offset+28]));
}
else {
add_item_to_tree(bp_tree, offset + 28, 16,
"Client hardware address: %02x:%02x%02x:%02x:%02x:%02x:%02x:%02x%02x:%02x%02x:%02x:%02x:%02x:%02x:%02x",
pd[offset+28], pd[offset+29], pd[offset+30], pd[offset+31],
pd[offset+32], pd[offset+33], pd[offset+34], pd[offset+35],
pd[offset+36], pd[offset+37], pd[offset+38], pd[offset+39],
pd[offset+40], pd[offset+41], pd[offset+42], pd[offset+43]);
}
/* The server host name is optional */
if (pd[offset+44]) {
add_item_to_tree(bp_tree, offset + 44, 64,
"Server host name: %s", &pd[offset+44]);
}
else {
add_item_to_tree(bp_tree, offset + 44, 64,
"Server host name not given");
}
/* Boot file */
if (pd[offset+108]) {
add_item_to_tree(bp_tree, offset + 108, 128,
"Boot file nme: %s", &pd[offset+108]);
}
else {
add_item_to_tree(bp_tree, offset + 108, 128,
"Boot file name not given");
}
if (pntohl(&pd[offset+236]) == 0x63538263) {
add_item_to_tree(bp_tree, offset + 236, 4,
"Magic cookie: %s (generic)",
ip_to_str((guint8*)&pd[offset+236]));
}
else {
add_item_to_tree(bp_tree, offset + 236, 4,
"Magic cookie: %s",
ip_to_str((guint8*)&pd[offset+236]));
}
voff = offset+240;
eoff = fd->cap_len;
while (voff < eoff) {
voff += bootp_option(pd, bp_tree, voff, eoff);
}
}
}
Reference in New Issue View Git Blame Copy Permalink