909 lines
33 KiB
C
909 lines
33 KiB
C
/* packet-pana.c
|
|
* Routines for Protocol for carrying Authentication for Network Access dissection
|
|
* Copyright 2006, Peter Racz <racz@ifi.unizh.ch>
|
|
*
|
|
* Wireshark - Network traffic analyzer
|
|
* By Gerald Combs <gerald@wireshark.org>
|
|
* Copyright 1998 Gerald Combs
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version 2
|
|
* of the License, or (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, write to the Free Software
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
|
*/
|
|
/* This protocol implements PANA as of the IETF RFC 5191.
|
|
* (Note: This dissector was updated to reflect
|
|
* draft-ietf-pana-pana-18 which is a workitem of the ietf workgroup
|
|
* internet area/pana. I believe draft-18 then became RFC 5191).
|
|
*/
|
|
|
|
#include "config.h"
|
|
|
|
#include <epan/packet.h>
|
|
#include <epan/conversation.h>
|
|
void proto_register_pana(void);
|
|
void proto_reg_handoff_pana(void);
|
|
|
|
#if 0
|
|
#define PANA_UDP_PORT 3001
|
|
#endif
|
|
|
|
#define MIN_AVP_SIZE 8
|
|
|
|
#define PANA_FLAG_R 0x8000
|
|
#define PANA_FLAG_S 0x4000
|
|
#define PANA_FLAG_C 0x2000
|
|
#define PANA_FLAG_A 0x1000
|
|
#define PANA_FLAG_P 0x0800
|
|
#define PANA_FLAG_I 0x0400
|
|
#if 0
|
|
#define PANA_FLAG_RES6 0x0200
|
|
#define PANA_FLAG_RES7 0x0100
|
|
#define PANA_FLAG_RES8 0x0080
|
|
#define PANA_FLAG_RES9 0x0040
|
|
#define PANA_FLAG_RES10 0x0020
|
|
#define PANA_FLAG_RES11 0x0010
|
|
#define PANA_FLAG_RES12 0x0008
|
|
#define PANA_FLAG_RES13 0x0004
|
|
#define PANA_FLAG_RES14 0x0002
|
|
#define PANA_FLAG_RES15 0x0001
|
|
#endif
|
|
#define PANA_FLAG_RESERVED 0x03ff
|
|
|
|
#define PANA_AVP_FLAG_V 0x8000
|
|
#if 0
|
|
#define PANA_AVP_FLAG_RES1 0x4000
|
|
#define PANA_AVP_FLAG_RES2 0x2000
|
|
#define PANA_AVP_FLAG_RES3 0x1000
|
|
#define PANA_AVP_FLAG_RES4 0x0800
|
|
#define PANA_AVP_FLAG_RES5 0x0400
|
|
#define PANA_AVP_FLAG_RES6 0x0200
|
|
#define PANA_AVP_FLAG_RES7 0x0100
|
|
#define PANA_AVP_FLAG_RES8 0x0080
|
|
#define PANA_AVP_FLAG_RES9 0x0040
|
|
#define PANA_AVP_FLAG_RES10 0x0020
|
|
#define PANA_AVP_FLAG_RES11 0x0010
|
|
#define PANA_AVP_FLAG_RES12 0x0008
|
|
#define PANA_AVP_FLAG_RES13 0x0004
|
|
#define PANA_AVP_FLAG_RES14 0x0002
|
|
#define PANA_AVP_FLAG_RES15 0x0001
|
|
#endif
|
|
#define PANA_AVP_FLAG_RESERVED 0x7fff
|
|
|
|
static dissector_handle_t eap_handle;
|
|
|
|
/* Initialize the protocol and registered fields */
|
|
static int proto_pana = -1;
|
|
static int hf_pana_reserved_type = -1;
|
|
static int hf_pana_length_type = -1;
|
|
static int hf_pana_msg_type = -1;
|
|
static int hf_pana_session_id = -1;
|
|
static int hf_pana_seqnumber = -1;
|
|
static int hf_pana_response_in = -1;
|
|
static int hf_pana_response_to = -1;
|
|
static int hf_pana_response_time = -1;
|
|
|
|
static int hf_pana_flags = -1;
|
|
static int hf_pana_flag_r = -1;
|
|
static int hf_pana_flag_s = -1;
|
|
static int hf_pana_flag_c = -1;
|
|
static int hf_pana_flag_a = -1;
|
|
static int hf_pana_flag_p = -1;
|
|
static int hf_pana_flag_i = -1;
|
|
static int hf_pana_avp_code = -1;
|
|
static int hf_pana_avp_data_length = -1;
|
|
static int hf_pana_avp_flags = -1;
|
|
static int hf_pana_avp_flag_v = -1;
|
|
static int hf_pana_avp_reserved = -1;
|
|
static int hf_pana_avp_vendorid = -1;
|
|
|
|
static int hf_pana_avp_data_uint64 = -1;
|
|
static int hf_pana_avp_data_int64 = -1;
|
|
static int hf_pana_avp_data_uint32 = -1;
|
|
static int hf_pana_avp_data_int32 = -1;
|
|
static int hf_pana_avp_data_bytes = -1;
|
|
static int hf_pana_avp_data_string = -1;
|
|
static int hf_pana_avp_data_enumerated = -1;
|
|
|
|
#define MSG_TYPE_MAX 5
|
|
static const value_string msg_type_names[] = {
|
|
{ 1, "PANA-Client-Initiation" },
|
|
{ 2, "PANA-Auth" },
|
|
{ 3, "PANA-Termination" },
|
|
{ 4, "PANA-Notification" },
|
|
{ 5, "PANA-Relay" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static const value_string msg_subtype_names[] = {
|
|
{ 0x0000, "Answer" },
|
|
{ 0x8000, "Request" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
#define AVP_CODE_MAX 13
|
|
static const value_string avp_code_names[] = {
|
|
{ 1, "AUTH AVP" },
|
|
{ 2, "EAP-Payload AVP" },
|
|
{ 3, "Integrity-Algorithm AVP" },
|
|
{ 4, "Key-Id AVP" },
|
|
{ 5, "Nonce AVP" },
|
|
{ 6, "PRF-Algorithm AVP" },
|
|
{ 7, "Result-Code" },
|
|
{ 8, "Session-Lifetime" },
|
|
{ 9, "Termination-Cause" },
|
|
{ 10, "PaC-Information" },
|
|
{ 11, "Relayed-Message" },
|
|
{ 12, "Encryption-Encap" },
|
|
{ 13, "Encryption-Algorithm" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
#if 0
|
|
static const value_string avp_resultcode_names[] = {
|
|
{ 0, "PANA_SUCCESS" },
|
|
{ 1, "PANA_AUTHENTICATION_REJECTED" },
|
|
{ 2, "PANA_AUTHORIZATION_REJECTED" },
|
|
{ 0, NULL }
|
|
};
|
|
#endif
|
|
|
|
typedef enum {
|
|
PANA_OCTET_STRING = 1,
|
|
PANA_INTEGER32,
|
|
PANA_INTEGER64,
|
|
PANA_UNSIGNED32,
|
|
PANA_UNSIGNED64,
|
|
PANA_FLOAT32,
|
|
PANA_FLOAT64,
|
|
PANA_FLOAT128,
|
|
PANA_GROUPED,
|
|
PANA_ENUMERATED,
|
|
PANA_UTF8STRING,
|
|
PANA_EAP,
|
|
PANA_RESULT_CODE,
|
|
PANA_ENCAPSULATED
|
|
} pana_avp_types;
|
|
|
|
static const value_string avp_type_names[]={
|
|
{ PANA_OCTET_STRING, "OctetString" },
|
|
{ PANA_INTEGER32, "Integer32" },
|
|
{ PANA_INTEGER64, "Integer64" },
|
|
{ PANA_UNSIGNED32, "Unsigned32" },
|
|
{ PANA_UNSIGNED64, "Unsigned64" },
|
|
{ PANA_FLOAT32, "Float32" },
|
|
{ PANA_FLOAT64, "Float64" },
|
|
{ PANA_FLOAT128, "Float128" },
|
|
{ PANA_GROUPED, "Grouped" },
|
|
{ PANA_ENUMERATED, "Enumerated" },
|
|
{ PANA_UTF8STRING, "UTF8String" },
|
|
{ PANA_EAP, "OctetString" },
|
|
{ PANA_RESULT_CODE, "Unsigned32" },
|
|
{ PANA_ENCAPSULATED, "Encapsulated" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
|
|
/* Initialize the subtree pointers */
|
|
static gint ett_pana = -1;
|
|
static gint ett_pana_flags = -1;
|
|
static gint ett_pana_avp = -1;
|
|
static gint ett_pana_avp_info = -1;
|
|
static gint ett_pana_avp_flags = -1;
|
|
|
|
|
|
typedef struct _pana_transaction_t {
|
|
guint32 req_frame;
|
|
guint32 rep_frame;
|
|
nstime_t req_time;
|
|
} pana_transaction_t;
|
|
|
|
typedef struct _pana_conv_info_t {
|
|
wmem_map_t *pdus;
|
|
} pana_conv_info_t;
|
|
|
|
static void
|
|
dissect_pana_pdu(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree);
|
|
|
|
/*
|
|
* Function for the PANA flags dissector.
|
|
*/
|
|
static void
|
|
dissect_pana_flags(proto_tree *parent_tree, tvbuff_t *tvb, int offset, guint16 flags)
|
|
{
|
|
static const int * flag_fields[] = {
|
|
&hf_pana_flag_r,
|
|
&hf_pana_flag_s,
|
|
&hf_pana_flag_c,
|
|
&hf_pana_flag_a,
|
|
&hf_pana_flag_p,
|
|
&hf_pana_flag_i,
|
|
NULL,
|
|
};
|
|
|
|
proto_tree_add_bitmask_value_with_flags(parent_tree, tvb, offset, hf_pana_flags,
|
|
ett_pana_flags, flag_fields, flags, BMT_NO_TFS|BMT_NO_FALSE);
|
|
}
|
|
|
|
|
|
/*
|
|
* Function for AVP flags dissector.
|
|
*/
|
|
static void
|
|
dissect_pana_avp_flags(proto_tree *parent_tree, tvbuff_t *tvb, int offset, guint16 flags)
|
|
{
|
|
static const int * flag_fields[] = {
|
|
&hf_pana_avp_flag_v,
|
|
NULL,
|
|
};
|
|
|
|
proto_tree_add_bitmask_value_with_flags(parent_tree, tvb, offset, hf_pana_avp_flags,
|
|
ett_pana_avp_flags, flag_fields, flags, BMT_NO_TFS|BMT_NO_FALSE);
|
|
}
|
|
|
|
|
|
/*
|
|
* Map AVP code to AVP type
|
|
*/
|
|
static pana_avp_types
|
|
pana_avp_get_type(guint16 avp_code, guint32 vendor_id)
|
|
{
|
|
|
|
if(vendor_id == 0) {
|
|
switch(avp_code) {
|
|
case 1: return PANA_OCTET_STRING; /* AUTH AVP */
|
|
case 2: return PANA_EAP; /* EAP-Payload AVP */
|
|
case 3: return PANA_UNSIGNED32; /* Integrity-Algorithm AVP */
|
|
case 4: return PANA_INTEGER32; /* Key-Id AVP */
|
|
case 5: return PANA_OCTET_STRING; /* Nonce AVP */
|
|
case 6: return PANA_UNSIGNED32; /* PRF-Algorithm AVP */
|
|
case 7: return PANA_RESULT_CODE; /* Result-Code AVP */
|
|
case 8: return PANA_UNSIGNED32; /* Session-Lifetime AVP */
|
|
case 9: return PANA_ENUMERATED; /* Termination-Cause AVP */
|
|
case 10: return PANA_OCTET_STRING; /* PaC-Information AVP */
|
|
case 11: return PANA_ENCAPSULATED; /* Relayed-Message AVP */
|
|
case 12: return PANA_OCTET_STRING; /* Encryption-Encap AVP */
|
|
case 13: return PANA_UNSIGNED32; /* Encryption-Algorithm AVP */
|
|
default: return PANA_OCTET_STRING;
|
|
}
|
|
} else {
|
|
return PANA_OCTET_STRING;
|
|
}
|
|
|
|
}
|
|
|
|
|
|
/*
|
|
* Function for AVP dissector.
|
|
*/
|
|
static void
|
|
dissect_avps(tvbuff_t *tvb, packet_info *pinfo, proto_tree *avp_tree)
|
|
{
|
|
|
|
gint offset;
|
|
guint16 avp_code;
|
|
guint16 avp_flags;
|
|
guint32 avp_length;
|
|
guint16 avp_type;
|
|
guint32 vendor_id;
|
|
guint32 avp_hdr_length;
|
|
guint32 avp_data_length, result_code;
|
|
guint32 padding;
|
|
|
|
gint32 buffer_length;
|
|
|
|
tvbuff_t *group_tvb;
|
|
tvbuff_t *eap_tvb;
|
|
tvbuff_t *encap_tvb;
|
|
proto_tree *single_avp_tree;
|
|
proto_tree *avp_eap_tree;
|
|
proto_tree *avp_encap_tree;
|
|
|
|
offset = 0;
|
|
buffer_length = tvb_reported_length(tvb);
|
|
|
|
/* Go through all AVPs */
|
|
while (buffer_length > 0) {
|
|
avp_code = tvb_get_ntohs(tvb, offset);
|
|
avp_flags = tvb_get_ntohs(tvb, offset + 2);
|
|
avp_data_length = tvb_get_ntohs(tvb, offset + 4);
|
|
|
|
/* Check AVP flags for vendor specific AVP */
|
|
if (avp_flags & PANA_AVP_FLAG_V) {
|
|
vendor_id = tvb_get_ntohl(tvb, 8);
|
|
avp_hdr_length = 12;
|
|
} else {
|
|
vendor_id = 0;
|
|
avp_hdr_length = 8;
|
|
}
|
|
|
|
avp_length = avp_hdr_length + avp_data_length;
|
|
|
|
/* Check AVP type */
|
|
avp_type = pana_avp_get_type(avp_code, vendor_id);
|
|
|
|
|
|
/* Check padding */
|
|
padding = (4 - (avp_length % 4)) % 4;
|
|
|
|
single_avp_tree = proto_tree_add_subtree_format(avp_tree, tvb, offset, avp_length + padding,
|
|
ett_pana_avp_info, NULL, "%s (%s) length: %d bytes (%d padded bytes)",
|
|
val_to_str(avp_code, avp_code_names, "Unknown (%d)"),
|
|
val_to_str(avp_type, avp_type_names, "Unknown (%d)"),
|
|
avp_length,
|
|
avp_length + padding);
|
|
|
|
/* AVP Code */
|
|
proto_tree_add_uint_format_value(single_avp_tree, hf_pana_avp_code, tvb,
|
|
offset, 2, avp_code, "%s (%u)",
|
|
val_to_str(avp_code, avp_code_names, "Unknown (%d)"),
|
|
avp_code);
|
|
offset += 2;
|
|
|
|
/* AVP Flags */
|
|
dissect_pana_avp_flags(single_avp_tree, tvb, offset, avp_flags);
|
|
offset += 2;
|
|
|
|
/* AVP Length */
|
|
proto_tree_add_item(single_avp_tree, hf_pana_avp_data_length, tvb, offset, 2, ENC_BIG_ENDIAN);
|
|
offset += 2;
|
|
|
|
/* Reserved */
|
|
proto_tree_add_item(single_avp_tree, hf_pana_avp_reserved, tvb, offset, 2, ENC_NA);
|
|
offset += 2;
|
|
|
|
if (avp_flags & PANA_AVP_FLAG_V) {
|
|
/* Vendor ID */
|
|
proto_tree_add_item(single_avp_tree, hf_pana_avp_vendorid, tvb, offset, 4, ENC_BIG_ENDIAN);
|
|
offset += 4;
|
|
}
|
|
if (! (avp_flags & PANA_AVP_FLAG_V)) {
|
|
/* AVP Value */
|
|
switch(avp_type) {
|
|
case PANA_GROUPED: {
|
|
proto_tree *avp_group_tree;
|
|
avp_group_tree = proto_tree_add_subtree(single_avp_tree,
|
|
tvb, offset, avp_data_length,
|
|
ett_pana_avp, NULL, "Grouped AVP");
|
|
group_tvb = tvb_new_subset_length_caplen(tvb, offset,
|
|
MIN(avp_data_length, tvb_reported_length(tvb)-offset),
|
|
avp_data_length);
|
|
dissect_avps(group_tvb, pinfo, avp_group_tree);
|
|
break;
|
|
}
|
|
case PANA_UTF8STRING: {
|
|
proto_tree_add_item(single_avp_tree, hf_pana_avp_data_string, tvb,
|
|
offset, avp_data_length, ENC_UTF_8|ENC_NA);
|
|
break;
|
|
}
|
|
case PANA_OCTET_STRING: {
|
|
proto_tree_add_item(single_avp_tree, hf_pana_avp_data_bytes, tvb,
|
|
offset, avp_data_length, ENC_NA);
|
|
break;
|
|
}
|
|
case PANA_INTEGER32: {
|
|
proto_tree_add_item(single_avp_tree, hf_pana_avp_data_int32, tvb,
|
|
offset, 4, ENC_BIG_ENDIAN);
|
|
break;
|
|
}
|
|
case PANA_UNSIGNED32: {
|
|
proto_tree_add_item(single_avp_tree, hf_pana_avp_data_uint32, tvb,
|
|
offset, 4, ENC_BIG_ENDIAN);
|
|
break;
|
|
}
|
|
case PANA_INTEGER64: {
|
|
proto_tree_add_item(single_avp_tree, hf_pana_avp_data_int64, tvb,
|
|
offset, 8, ENC_BIG_ENDIAN);
|
|
break;
|
|
}
|
|
case PANA_UNSIGNED64: {
|
|
proto_tree_add_item(single_avp_tree, hf_pana_avp_data_uint64, tvb,
|
|
offset, 8, ENC_BIG_ENDIAN);
|
|
break;
|
|
}
|
|
case PANA_ENUMERATED: {
|
|
proto_tree_add_item(single_avp_tree, hf_pana_avp_data_enumerated, tvb,
|
|
offset, 4, ENC_BIG_ENDIAN);
|
|
break;
|
|
}
|
|
case PANA_RESULT_CODE: {
|
|
result_code = tvb_get_ntohl(tvb, offset);
|
|
proto_tree_add_uint_format(single_avp_tree, hf_pana_avp_code, tvb, offset, avp_data_length,
|
|
result_code, "Value: %d (%s)",
|
|
result_code,
|
|
val_to_str(result_code, avp_code_names, "Unknown (%d)"));
|
|
break;
|
|
}
|
|
case PANA_EAP: {
|
|
avp_eap_tree = proto_tree_add_subtree(single_avp_tree,
|
|
tvb, offset, avp_data_length,
|
|
ett_pana_avp, NULL, "AVP Value (EAP packet)");
|
|
eap_tvb = tvb_new_subset_length(tvb, offset, avp_data_length);
|
|
DISSECTOR_ASSERT_HINT(eap_handle, "EAP Dissector not available");
|
|
call_dissector(eap_handle, eap_tvb, pinfo, avp_eap_tree);
|
|
break;
|
|
}
|
|
case PANA_ENCAPSULATED: {
|
|
avp_encap_tree = proto_tree_add_subtree(single_avp_tree,
|
|
tvb, offset, avp_data_length,
|
|
ett_pana_avp, NULL, "AVP Value (PANA packet)");
|
|
encap_tvb = tvb_new_subset_length(tvb, offset, avp_data_length);
|
|
dissect_pana_pdu(encap_tvb, pinfo, avp_encap_tree);
|
|
break;
|
|
}
|
|
}
|
|
}
|
|
offset += avp_data_length + padding;
|
|
|
|
/* Update the buffer length */
|
|
buffer_length -= avp_length + padding;
|
|
}
|
|
|
|
}
|
|
|
|
|
|
/*
|
|
* Function for the PANA PDU dissector.
|
|
*/
|
|
static void
|
|
dissect_pana_pdu(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
|
|
{
|
|
|
|
proto_tree *pana_tree = NULL;
|
|
guint16 flags;
|
|
guint16 msg_type;
|
|
guint32 msg_length;
|
|
guint32 avp_length;
|
|
guint32 seq_num;
|
|
conversation_t *conversation;
|
|
pana_conv_info_t *pana_info;
|
|
pana_transaction_t *pana_trans;
|
|
int offset = 0;
|
|
|
|
col_set_str(pinfo->cinfo, COL_PROTOCOL, "PANA");
|
|
col_clear(pinfo->cinfo, COL_INFO);
|
|
|
|
/* Get message length, type and flags */
|
|
msg_length = tvb_get_ntohs(tvb, 2);
|
|
flags = tvb_get_ntohs(tvb, 4);
|
|
msg_type = tvb_get_ntohs(tvb, 6);
|
|
seq_num = tvb_get_ntohl(tvb, 12);
|
|
avp_length = msg_length - 16;
|
|
|
|
col_add_fstr(pinfo->cinfo, COL_INFO, "Type %s-%s",
|
|
val_to_str(msg_type, msg_type_names, "Unknown (%d)"),
|
|
val_to_str(flags & PANA_FLAG_R, msg_subtype_names, "Unknown (%d)"));
|
|
|
|
/* Make the protocol tree */
|
|
if (tree) {
|
|
proto_item *ti;
|
|
ti = proto_tree_add_item(tree, proto_pana, tvb, 0, -1, ENC_NA);
|
|
pana_tree = proto_item_add_subtree(ti, ett_pana);
|
|
}
|
|
|
|
|
|
/*
|
|
* We need to track some state for this protocol on a per conversation
|
|
* basis so we can do neat things like request/response tracking
|
|
*/
|
|
conversation = find_or_create_conversation(pinfo);
|
|
|
|
/*
|
|
* Do we already have a state structure for this conv
|
|
*/
|
|
pana_info = (pana_conv_info_t *)conversation_get_proto_data(conversation, proto_pana);
|
|
if (!pana_info) {
|
|
/* No. Attach that information to the conversation, and add
|
|
* it to the list of information structures.
|
|
*/
|
|
pana_info = wmem_new(wmem_file_scope(), pana_conv_info_t);
|
|
pana_info->pdus=wmem_map_new(wmem_file_scope(), g_direct_hash, g_direct_equal);
|
|
|
|
conversation_add_proto_data(conversation, proto_pana, pana_info);
|
|
}
|
|
|
|
if(!pinfo->fd->flags.visited){
|
|
if(flags&PANA_FLAG_R){
|
|
/* This is a request */
|
|
pana_trans=wmem_new(wmem_file_scope(), pana_transaction_t);
|
|
pana_trans->req_frame=pinfo->num;
|
|
pana_trans->rep_frame=0;
|
|
pana_trans->req_time=pinfo->abs_ts;
|
|
wmem_map_insert(pana_info->pdus, GUINT_TO_POINTER(seq_num), (void *)pana_trans);
|
|
} else {
|
|
pana_trans=(pana_transaction_t *)wmem_map_lookup(pana_info->pdus, GUINT_TO_POINTER(seq_num));
|
|
if(pana_trans){
|
|
pana_trans->rep_frame=pinfo->num;
|
|
}
|
|
}
|
|
} else {
|
|
pana_trans=(pana_transaction_t *)wmem_map_lookup(pana_info->pdus, GUINT_TO_POINTER(seq_num));
|
|
}
|
|
|
|
if(!pana_trans){
|
|
/* create a "fake" pana_trans structure */
|
|
pana_trans=wmem_new(wmem_packet_scope(), pana_transaction_t);
|
|
pana_trans->req_frame=0;
|
|
pana_trans->rep_frame=0;
|
|
pana_trans->req_time=pinfo->abs_ts;
|
|
}
|
|
|
|
/* print state tracking in the tree */
|
|
if(flags&PANA_FLAG_R){
|
|
/* This is a request */
|
|
if(pana_trans->rep_frame){
|
|
proto_item *it;
|
|
|
|
it=proto_tree_add_uint(pana_tree, hf_pana_response_in, tvb, 0, 0, pana_trans->rep_frame);
|
|
PROTO_ITEM_SET_GENERATED(it);
|
|
}
|
|
} else {
|
|
/* This is a reply */
|
|
if(pana_trans->req_frame){
|
|
proto_item *it;
|
|
nstime_t ns;
|
|
|
|
it=proto_tree_add_uint(pana_tree, hf_pana_response_to, tvb, 0, 0, pana_trans->req_frame);
|
|
PROTO_ITEM_SET_GENERATED(it);
|
|
|
|
nstime_delta(&ns, &pinfo->abs_ts, &pana_trans->req_time);
|
|
it=proto_tree_add_time(pana_tree, hf_pana_response_time, tvb, 0, 0, &ns);
|
|
PROTO_ITEM_SET_GENERATED(it);
|
|
}
|
|
}
|
|
|
|
/* Reserved field */
|
|
proto_tree_add_item(pana_tree, hf_pana_reserved_type, tvb, offset, 2, ENC_NA);
|
|
offset += 2;
|
|
|
|
/* Length */
|
|
proto_tree_add_item(pana_tree, hf_pana_length_type, tvb, offset, 2, ENC_BIG_ENDIAN);
|
|
offset += 2;
|
|
|
|
/* Flags */
|
|
dissect_pana_flags(pana_tree, tvb, offset, flags);
|
|
offset += 2;
|
|
|
|
/* Message Type */
|
|
proto_tree_add_uint_format_value(pana_tree, hf_pana_msg_type, tvb,
|
|
offset, 2, msg_type, "%s-%s (%d)",
|
|
val_to_str(msg_type, msg_type_names, "Unknown (%d)"),
|
|
val_to_str(flags & PANA_FLAG_R, msg_subtype_names, "Unknown (%d)"),
|
|
msg_type);
|
|
offset += 2;
|
|
|
|
/* Session ID */
|
|
proto_tree_add_item(pana_tree, hf_pana_session_id, tvb, offset, 4, ENC_BIG_ENDIAN);
|
|
offset += 4;
|
|
|
|
/* Sequence Number */
|
|
proto_tree_add_item(pana_tree, hf_pana_seqnumber, tvb, offset, 4, ENC_BIG_ENDIAN);
|
|
offset += 4;
|
|
|
|
/* AVPs */
|
|
if(avp_length != 0){
|
|
tvbuff_t *avp_tvb;
|
|
proto_tree *avp_tree;
|
|
avp_tvb = tvb_new_subset_length(tvb, offset, avp_length);
|
|
avp_tree = proto_tree_add_subtree(pana_tree, tvb, offset, avp_length, ett_pana_avp, NULL, "Attribute Value Pairs");
|
|
|
|
dissect_avps(avp_tvb, pinfo, avp_tree);
|
|
}
|
|
|
|
}
|
|
|
|
|
|
/*
|
|
* Function for the PANA dissector.
|
|
*/
|
|
/* Called either as a "new-style" or a heuristic dissector */
|
|
static int
|
|
dissect_pana(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_)
|
|
{
|
|
|
|
guint16 pana_res;
|
|
guint32 msg_length;
|
|
guint16 flags;
|
|
guint32 buffer_length;
|
|
guint16 msg_type;
|
|
guint32 avp_length;
|
|
|
|
/* Get actual buffer length */
|
|
buffer_length = tvb_captured_length(tvb);
|
|
|
|
/* Check minimum buffer length */
|
|
if(buffer_length < 12) {
|
|
return 0;
|
|
}
|
|
|
|
/* Check minimum packet length */
|
|
msg_length = tvb_get_ntohs(tvb, 2);
|
|
if(msg_length < 16) {
|
|
return 0;
|
|
}
|
|
|
|
/* Check the packet length */
|
|
if(msg_length != tvb_reported_length(tvb)) {
|
|
return 0;
|
|
}
|
|
|
|
/* check that the reserved field is zero */
|
|
pana_res = tvb_get_ntohs(tvb, 0);
|
|
if (pana_res != 0) {
|
|
return 0;
|
|
}
|
|
|
|
/* verify that none of the reserved bits are set */
|
|
flags = tvb_get_ntohs(tvb, 4);
|
|
if (flags & PANA_FLAG_RESERVED) {
|
|
return 0;
|
|
}
|
|
|
|
/* verify that we recognize the message type */
|
|
msg_type = tvb_get_ntohs(tvb, 6);
|
|
if ((msg_type > MSG_TYPE_MAX) || (msg_type == 0)) {
|
|
return 0;
|
|
}
|
|
|
|
avp_length = msg_length - 16;
|
|
|
|
/* For bug 1908: check the length of the first AVP, too */
|
|
|
|
if (avp_length != 0) {
|
|
guint32 avp_offset;
|
|
guint16 avp_code;
|
|
guint32 first_avp_length;
|
|
guint16 avp_flags;
|
|
|
|
if (avp_length < MIN_AVP_SIZE) {
|
|
return 0;
|
|
}
|
|
avp_offset = 16;
|
|
/* Make sure no exceptions since we're just doing a preliminary heuristic check */
|
|
if ((avp_offset + 8) > buffer_length ) {
|
|
return 0;
|
|
}
|
|
avp_code = tvb_get_ntohs(tvb, avp_offset);
|
|
if ((avp_code == 0) || (avp_code > AVP_CODE_MAX)) {
|
|
return 0;
|
|
}
|
|
avp_flags = tvb_get_ntohs(tvb, avp_offset + 2);
|
|
if (avp_flags & PANA_AVP_FLAG_RESERVED) {
|
|
return 0;
|
|
}
|
|
/* check whether is the V (vendor) flag on or not */
|
|
if (avp_flags & PANA_AVP_FLAG_V) {
|
|
first_avp_length = 12;
|
|
} else {
|
|
first_avp_length = 8;
|
|
}
|
|
|
|
first_avp_length += tvb_get_ntohs(tvb, avp_offset + 4);
|
|
|
|
if (first_avp_length > avp_length) {
|
|
return 0;
|
|
}
|
|
}
|
|
|
|
dissect_pana_pdu(tvb, pinfo, tree);
|
|
|
|
return tvb_reported_length(tvb);
|
|
|
|
}
|
|
|
|
|
|
/*
|
|
* Register the protocol with Wireshark
|
|
*/
|
|
void
|
|
proto_register_pana(void)
|
|
{
|
|
|
|
static hf_register_info hf[] = {
|
|
{ &hf_pana_response_in,
|
|
{ "Response In", "pana.response_in",
|
|
FT_FRAMENUM, BASE_NONE, NULL, 0x0,
|
|
"The response to this PANA request is in this frame", HFILL }
|
|
},
|
|
{ &hf_pana_response_to,
|
|
{ "Request In", "pana.response_to",
|
|
FT_FRAMENUM, BASE_NONE, NULL, 0x0,
|
|
"This is a response to the PANA request in this frame", HFILL }
|
|
},
|
|
{ &hf_pana_response_time,
|
|
{ "Response Time", "pana.response_time",
|
|
FT_RELATIVE_TIME, BASE_NONE, NULL, 0x0,
|
|
"The time between the Call and the Reply", HFILL }
|
|
},
|
|
{ &hf_pana_reserved_type,
|
|
{ "PANA Reserved", "pana.reserved",
|
|
FT_BYTES, BASE_NONE, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_length_type,
|
|
{ "PANA Message Length", "pana.length",
|
|
FT_UINT16, BASE_DEC, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
|
|
|
|
{ &hf_pana_flags,
|
|
{ "Flags", "pana.flags",
|
|
FT_UINT8, BASE_HEX, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_flag_r,
|
|
{ "Request", "pana.flags.r",
|
|
FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_R,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_flag_s,
|
|
{ "Start", "pana.flags.s",
|
|
FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_S,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_flag_c,
|
|
{ "Complete","pana.flags.c",
|
|
FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_C,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_flag_a,
|
|
{ "Auth","pana.flags.a",
|
|
FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_A,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_flag_p,
|
|
{ "Ping","pana.flags.p",
|
|
FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_P,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_flag_i,
|
|
{ "IP Reconfig","pana.flags.i",
|
|
FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_I,
|
|
NULL, HFILL }
|
|
},
|
|
|
|
{ &hf_pana_msg_type,
|
|
{ "PANA Message Type", "pana.type",
|
|
FT_UINT16, BASE_DEC, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_session_id,
|
|
{ "PANA Session ID", "pana.sid",
|
|
FT_UINT32, BASE_HEX, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_seqnumber,
|
|
{ "PANA Sequence Number", "pana.seq",
|
|
FT_UINT32, BASE_HEX, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
|
|
|
|
{ &hf_pana_avp_code,
|
|
{ "AVP Code", "pana.avp.code",
|
|
FT_UINT16, BASE_DEC, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_avp_data_length,
|
|
{ "AVP Data Length", "pana.avp.data_length",
|
|
FT_UINT16, BASE_DEC, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_avp_flags,
|
|
{ "AVP Flags", "pana.avp.flags",
|
|
FT_UINT16, BASE_HEX, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_avp_flag_v,
|
|
{ "Vendor", "pana.avp.flags.v",
|
|
FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_AVP_FLAG_V,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_avp_reserved,
|
|
{ "AVP Reserved", "pana.avp.reserved",
|
|
FT_BYTES, BASE_NONE, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_avp_vendorid,
|
|
{ "AVP Vendor ID", "pana.avp.vendorid",
|
|
FT_UINT32, BASE_HEX, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
|
|
|
|
{ &hf_pana_avp_data_uint64,
|
|
{ "Value", "pana.avp.data.uint64",
|
|
FT_UINT64, BASE_HEX, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_avp_data_int64,
|
|
{ "Value", "pana.avp.data.int64",
|
|
FT_INT64, BASE_DEC, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_avp_data_uint32,
|
|
{ "Value", "pana.avp.data.uint32",
|
|
FT_UINT32, BASE_HEX, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_avp_data_int32,
|
|
{ "Value", "pana.avp.data.int32",
|
|
FT_INT32, BASE_DEC, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_avp_data_bytes,
|
|
{ "Value", "pana.avp.data.bytes",
|
|
FT_BYTES, BASE_NONE, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_avp_data_string,
|
|
{ "UTF8String", "pana.avp.data.string",
|
|
FT_STRING, BASE_NONE, NULL, 0x0,
|
|
NULL, HFILL }
|
|
},
|
|
{ &hf_pana_avp_data_enumerated,
|
|
{ "Value", "pana.avp.data.enum",
|
|
FT_INT32, BASE_DEC, NULL, 0x0,
|
|
NULL, HFILL }
|
|
}
|
|
|
|
};
|
|
|
|
/* Setup protocol subtree array */
|
|
static gint *ett[] = {
|
|
&ett_pana,
|
|
&ett_pana_flags,
|
|
&ett_pana_avp,
|
|
&ett_pana_avp_info,
|
|
&ett_pana_avp_flags
|
|
};
|
|
|
|
/* Register the protocol name and description */
|
|
proto_pana = proto_register_protocol("Protocol for carrying Authentication for Network Access",
|
|
"PANA", "pana");
|
|
|
|
/* Required function calls to register the header fields and subtrees used */
|
|
proto_register_field_array(proto_pana, hf, array_length(hf));
|
|
proto_register_subtree_array(ett, array_length(ett));
|
|
|
|
}
|
|
|
|
|
|
void
|
|
proto_reg_handoff_pana(void)
|
|
{
|
|
|
|
dissector_handle_t pana_handle;
|
|
|
|
heur_dissector_add("udp", dissect_pana, "PANA over UDP", "pana_udp", proto_pana, HEURISTIC_ENABLE);
|
|
|
|
pana_handle = create_dissector_handle(dissect_pana, proto_pana);
|
|
dissector_add_for_decode_as_with_preference("udp.port", pana_handle);
|
|
|
|
eap_handle = find_dissector_add_dependency("eap", proto_pana);
|
|
|
|
}
|
|
|
|
/*
|
|
* Editor modelines - http://www.wireshark.org/tools/modelines.html
|
|
*
|
|
* Local variables:
|
|
* c-basic-offset: 8
|
|
* tab-width: 8
|
|
* indent-tabs-mode: nil
|
|
* End:
|
|
*
|
|
* vi: set shiftwidth=8 tabstop=8 expandtab:
|
|
* :indentSize=8:tabSize=8:noTabs=true:
|
|
*/
|