wireshark/epan/dissectors/packet-netlink-route.c

1023 lines
32 KiB
C

/* packet-netlin-route.c
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* This program is free software; you can redistribute it and/or
* modify it under the terms of the GNU General Public License
* as published by the Free Software Foundation; either version 2
* of the License, or (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
*/
/* man 7 rtnetlink */
#define NEW_PROTO_TREE_API
#include "config.h"
#include <epan/packet.h>
#include <epan/aftypes.h>
#include "packet-arp.h"
#include "packet-netlink.h"
void proto_register_netlink_route(void);
void proto_reg_handoff_netlink_route(void);
struct netlink_route_info {
packet_info *pinfo;
struct packet_netlink_data *data;
int encoding; /* copy of data->encoding */
};
enum {
/* rtnetlink values for nlmsghdr.nlmsg_type from <linux/rtnetlink.h> */
WS_RTM_NEWLINK = 16,
WS_RTM_DELLINK = 17,
WS_RTM_GETLINK = 18,
WS_RTM_SETLINK = 19,
WS_RTM_NEWADDR = 20,
WS_RTM_DELADDR = 21,
WS_RTM_GETADDR = 22,
WS_RTM_NEWROUTE = 24,
WS_RTM_DELROUTE = 25,
WS_RTM_GETROUTE = 26,
WS_RTM_NEWNEIGH = 28,
WS_RTM_DELNEIGH = 29,
WS_RTM_GETNEIGH = 30,
WS_RTM_NEWRULE = 32,
WS_RTM_DELRULE = 33,
WS_RTM_GETRULE = 34,
WS_RTM_NEWQDISC = 36,
WS_RTM_DELQDISC = 37,
WS_RTM_GETQDISC = 38,
WS_RTM_NEWTCLASS = 40,
WS_RTM_DELTCLASS = 41,
WS_RTM_GETTCLASS = 42,
WS_RTM_NEWTFILTER = 44,
WS_RTM_DELTFILTER = 45,
WS_RTM_GETTFILTER = 46,
WS_RTM_NEWACTION = 48,
WS_RTM_DELACTION = 49,
WS_RTM_GETACTION = 50,
WS_RTM_NEWPREFIX = 52,
WS_RTM_GETMULTICAST = 58,
WS_RTM_GETANYCAST = 62,
WS_RTM_NEWNEIGHTBL = 64,
WS_RTM_GETNEIGHTBL = 66,
WS_RTM_SETNEIGHTBL = 67,
WS_RTM_NEWNDUSEROPT = 68,
WS_RTM_NEWADDRLABEL = 72,
WS_RTM_DELADDRLABEL = 73,
WS_RTM_GETADDRLABEL = 74,
WS_RTM_GETDCB = 78,
WS_RTM_SETDCB = 79,
WS_RTM_NEWNETCONF = 80,
WS_RTM_GETNETCONF = 82,
WS_RTM_NEWMDB = 84,
WS_RTM_DELMDB = 85,
WS_RTM_GETMDB = 86
};
/* values for rta_type (network interface) from <linux/if_link.h> */
enum ws_ifla_attr_type {
WS_IFLA_UNSPEC = 0,
WS_IFLA_ADDRESS = 1,
WS_IFLA_BROADCAST = 2,
WS_IFLA_IFNAME = 3,
WS_IFLA_MTU = 4,
WS_IFLA_LINK = 5,
WS_IFLA_QDISC = 6,
WS_IFLA_STATS = 7,
WS_IFLA_COST = 8,
WS_IFLA_PRIORITY = 9,
WS_IFLA_MASTER = 10,
WS_IFLA_WIRELESS = 11,
WS_IFLA_PROTINFO = 12,
WS_IFLA_TXQLEN = 13,
WS_IFLA_MAP = 14,
WS_IFLA_WEIGHT = 15,
WS_IFLA_OPERSTATE = 16,
WS_IFLA_LINKMODE = 17,
WS_IFLA_LINKINFO = 18,
WS_IFLA_NET_NS_PID = 19,
WS_IFLA_IFALIAS = 20,
WS_IFLA_NUM_VF = 21,
WS_IFLA_VFINFO_LIST = 22,
WS_IFLA_STATS64 = 23,
WS_IFLA_VF_PORTS = 24,
WS_IFLA_PORT_SELF = 25,
WS_IFLA_AF_SPEC = 26,
WS_IFLA_GROUP = 27,
WS_IFLA_NET_NS_FD = 28,
WS_IFLA_EXT_MASK = 29,
WS_IFLA_PROMISCUITY = 30,
WS_IFLA_NUM_TX_QUEUES = 31,
WS_IFLA_NUM_RX_QUEUES = 32,
WS_IFLA_CARRIER = 33
};
/* values for rta_type (ip address) from <linux/if_addr.h> */
enum ws_ifa_attr_type {
WS_IFA_UNSPEC = 0,
WS_IFA_ADDRESS = 1,
WS_IFA_LOCAL = 2,
WS_IFA_LABEL = 3,
WS_IFA_BROADCAST = 4,
WS_IFA_ANYCAST = 5,
WS_IFA_CACHEINFO = 6,
WS_IFA_MULTICAST = 7
};
/* values for rta_type (route) from <linux/rtnetlink.h> */
enum ws_rta_attr_type {
WS_RTA_UNSPEC = 0,
WS_RTA_DST = 1,
WS_RTA_SRC = 2,
WS_RTA_IIF = 3,
WS_RTA_OIF = 4,
WS_RTA_GATEWAY = 5,
WS_RTA_PRIORITY = 6,
WS_RTA_PREFSRC = 7,
WS_RTA_METRICS = 8,
WS_RTA_MULTIPATH = 9,
WS_RTA_PROTOINFO = 10,
WS_RTA_FLOW = 11,
WS_RTA_CACHEINFO = 12,
WS_RTA_SESSION = 13,
WS_RTA_MP_ALGO = 14,
WS_RTA_TABLE = 15,
WS_RTA_MARK = 16,
WS_RTA_MFC_STATS = 17
};
/* values for rtmsg.rtm_protocol from <linux/rtnetlink.h> */
enum {
/* kernel */
WS_RTPROT_UNSPEC = 0,
WS_RTPROT_REDIRECT = 1,
WS_RTPROT_KERNEL = 2,
WS_RTPROT_BOOT = 3,
WS_RTPROT_STATIC = 4,
/* user */
WS_RTPROT_GATED = 8,
WS_RTPROT_RA = 9,
WS_RTPROT_MRT = 10,
WS_RTPROT_ZEBRA = 11,
WS_RTPROT_BIRD = 12,
WS_RTPROT_DNROUTED = 13,
WS_RTPROT_XORP = 14,
WS_RTPROT_NTK = 15,
WS_RTPROT_DHCP = 16,
WS_RTPROT_MROUTED = 17
};
/* values for rtmsg.rtm_scope from <linux/rtnetlink.h> */
enum {
WS_RT_SCOPE_UNIVERSE = 0,
/* ... user defined (/etc/iproute2/rt_scopes) ... */
WS_RT_SCOPE_SITE = 200,
WS_RT_SCOPE_LINK = 253,
WS_RT_SCOPE_HOST = 254,
WS_RT_SCOPE_NOWHERE = 255
};
/* values for rtmsg.rtm_type from <linux/rtnetlink.h> */
enum {
WS_RTN_UNSPEC = 0,
WS_RTN_UNICAST = 1,
WS_RTN_LOCAL = 2,
WS_RTN_BROADCAST = 3,
WS_RTN_ANYCAST = 4,
WS_RTN_MULTICAST = 5,
WS_RTN_BLACKHOLE = 6,
WS_RTN_UNREACHABLE = 7,
WS_RTN_PROHIBIT = 8,
WS_RTN_THROW = 9,
WS_RTN_NAT = 10,
WS_RTN_XRESOLVE = 11
};
/* values for ifinfomsg.ifi_flags <linux/if.h> */
enum {
WS_IFF_UP = 0x1,
WS_IFF_BROADCAST = 0x2,
WS_IFF_DEBUG = 0x4,
WS_IFF_LOOPBACK = 0x8,
WS_IFF_POINTOPOINT = 0x10,
WS_IFF_NOTRAILERS = 0x20,
WS_IFF_RUNNING = 0x40,
WS_IFF_NOARP = 0x80,
WS_IFF_PROMISC = 0x100,
WS_IFF_ALLMULTI = 0x200,
WS_IFF_MASTER = 0x400,
WS_IFF_SLAVE = 0x800,
WS_IFF_MULTICAST = 0x1000,
WS_IFF_PORTSEL = 0x2000,
WS_IFF_AUTOMEDIA = 0x4000,
WS_IFF_DYNAMIC = 0x8000,
WS_IFF_LOWER_UP = 0x10000,
WS_IFF_DORMANT = 0x20000,
WS_IFF_ECHO = 0x40000
};
/* values for ifaddrmsg.ifa_flags <linux/if_addr.h> */
enum {
WS_IFA_F_SECONDARY = 0x01,
WS_IFA_F_NODAD = 0x02,
WS_IFA_F_OPTIMISTIC = 0x04,
WS_IFA_F_DADFAILED = 0x08,
WS_IFA_F_HOMEADDRESS = 0x10,
WS_IFA_F_DEPRECATED = 0x20,
WS_IFA_F_TENTATIVE = 0x40,
WS_IFA_F_PERMANENT = 0x80
};
/* values for ndmsg.ndm_state <linux/neighbour.h> */
enum {
WS_NUD_INCOMPLETE = 0x01,
WS_NUD_REACHABLE = 0x02,
WS_NUD_STALE = 0x04,
WS_NUD_DELAY = 0x08,
WS_NUD_PROBE = 0x10,
WS_NUD_FAILED = 0x20,
/* Dummy states */
WS_NUD_NOARP = 0x40,
WS_NUD_PERMANENT = 0x80
};
static dissector_handle_t netlink_route_handle;
static header_field_info *hfi_netlink_route = NULL;
#define NETLINK_ROUTE_HFI_INIT HFI_INIT(proto_netlink_route)
static gint ett_netlink_route = -1;
static gint ett_netlink_route_attr = -1;
static gint ett_netlink_route_if_flags = -1;
typedef int netlink_route_attributes_cb_t(tvbuff_t *, struct netlink_route_info *, proto_tree *, int rta_type, int offset, int len);
static void
_fill_label_value_string_bitmask(char *label, guint32 value, const value_string *vals)
{
char tmp[16];
label[0] = '\0';
while (vals->strptr) {
if (value & vals->value) {
value &= ~(vals->value);
if (label[0])
g_strlcat(label, ", ", ITEM_LABEL_LENGTH);
g_strlcat(label, vals->strptr, ITEM_LABEL_LENGTH);
}
vals++;
}
if (value) {
if (label[0])
g_strlcat(label, ", ", ITEM_LABEL_LENGTH);
g_snprintf(tmp, sizeof(tmp), "0x%x", value);
g_strlcat(label, tmp, ITEM_LABEL_LENGTH);
}
}
static int
dissect_netlink_route_attributes(tvbuff_t *tvb, header_field_info *hfi_type, struct netlink_route_info *info, proto_tree *tree, int offset, netlink_route_attributes_cb_t cb)
{
/* XXX, it's *almost* the same:
* - rtnetlink is using struct rtattr with shorts
* - generic netlink is using struct nlattr with __u16
*/
/* XXX, nice */
return dissect_netlink_attributes(tvb, hfi_type, ett_netlink_route_attr, info, tree, offset, (netlink_attributes_cb_t *) cb);
}
/* Interface */
static header_field_info hfi_netlink_route_ifi_family NETLINK_ROUTE_HFI_INIT =
{ "Interface family", "netlink-route.ifi_family", FT_UINT8, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_ifi_type NETLINK_ROUTE_HFI_INIT =
{ "Device type", "netlink-route.ifi_type", FT_UINT16, BASE_DEC,
VALS(arp_hrd_vals), 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_ifi_index NETLINK_ROUTE_HFI_INIT =
{ "Interface index", "netlink-route.ifi_index", FT_INT32, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static void
hfi_netlink_route_ifi_flags_label(char *label, guint32 value)
{
static const value_string iff_vals[] = {
{ WS_IFF_UP, "UP" },
{ WS_IFF_BROADCAST, "BROADCAST" },
{ WS_IFF_DEBUG, "DEBUG" },
{ WS_IFF_LOOPBACK, "LOOPBACK" },
{ WS_IFF_POINTOPOINT, "POINTOPOINT" },
{ WS_IFF_NOTRAILERS, "NOTRAILERS" },
{ WS_IFF_RUNNING, "RUNNING" },
{ WS_IFF_NOARP, "NOARP" },
{ WS_IFF_PROMISC, "PROMISC" },
{ WS_IFF_ALLMULTI, "ALLMULTI" },
{ WS_IFF_MASTER, "MASTER" },
{ WS_IFF_SLAVE, "SLAVE" },
{ WS_IFF_MULTICAST, "MULTICAST" },
{ WS_IFF_PORTSEL, "PORTSEL" },
{ WS_IFF_AUTOMEDIA, "AUTOMEDIA" },
{ WS_IFF_DYNAMIC, "DYNAMIC" },
{ WS_IFF_LOWER_UP, "LOWER_UP" },
{ WS_IFF_DORMANT, "DORMANT" },
{ WS_IFF_ECHO, "ECHO" },
{ 0x00, NULL }
};
char tmp[16];
_fill_label_value_string_bitmask(label, value, iff_vals);
g_snprintf(tmp, sizeof(tmp), " (0x%.8x)", value);
g_strlcat(label, tmp, ITEM_LABEL_LENGTH);
}
static header_field_info hfi_netlink_route_ifi_flags NETLINK_ROUTE_HFI_INIT =
{ "Device flags", "netlink-route.ifi_flags", FT_UINT32, BASE_CUSTOM,
CF_FUNC(hfi_netlink_route_ifi_flags_label), 0x00, NULL, HFILL };
static const true_false_string hfi_netlink_route_ifi_flags_iff_up_tfs = { "Up", "Down" };
static header_field_info hfi_netlink_route_ifi_flags_iff_up NETLINK_ROUTE_HFI_INIT =
{ "Interface", "netlink-route.ifi_flags.iff_up", FT_BOOLEAN, 32,
&hfi_netlink_route_ifi_flags_iff_up_tfs, WS_IFF_UP, NULL, HFILL };
static header_field_info hfi_netlink_route_ifi_flags_iff_broadcast NETLINK_ROUTE_HFI_INIT =
{ "Broadcast", "netlink-route.ifi_flags.iff_broadcast", FT_BOOLEAN, 32,
&tfs_valid_invalid, WS_IFF_BROADCAST, NULL, HFILL };
static header_field_info hfi_netlink_route_ifi_change NETLINK_ROUTE_HFI_INIT =
{ "Device change flags", "netlink-route.ifi_change", FT_UINT32, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static int
dissect_netlink_route_ifinfomsg(tvbuff_t *tvb, struct netlink_route_info *info, proto_tree *tree, int offset)
{
proto_item *ti;
proto_tree *if_flags_tree;
proto_tree_add_item(tree, &hfi_netlink_route_ifi_family, tvb, offset, 1, info->encoding);
offset += 1;
/* XXX padding, check if 0 */
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_ifi_type, tvb, offset, 2, info->encoding);
offset += 2;
proto_tree_add_item(tree, &hfi_netlink_route_ifi_index, tvb, offset, 4, info->encoding);
offset += 4;
ti = proto_tree_add_item(tree, &hfi_netlink_route_ifi_flags, tvb, offset, 4, info->encoding);
if_flags_tree = proto_item_add_subtree(ti, ett_netlink_route_if_flags);
if (if_flags_tree) {
proto_tree_add_item(if_flags_tree, &hfi_netlink_route_ifi_flags_iff_up, tvb, offset, 4, info->encoding);
proto_tree_add_item(if_flags_tree, &hfi_netlink_route_ifi_flags_iff_broadcast, tvb, offset, 4, info->encoding);
/* XXX */
}
offset += 4;
proto_tree_add_item(tree, &hfi_netlink_route_ifi_change, tvb, offset, 4, info->encoding);
offset += 4;
return offset;
}
/* Interface Attributes */
static const value_string netlink_route_ifla_attr_vals[] = {
{ WS_IFLA_UNSPEC, "Unspecified" },
{ WS_IFLA_ADDRESS, "Address" },
{ WS_IFLA_BROADCAST, "Broadcast" },
{ WS_IFLA_IFNAME, "Device name" },
{ WS_IFLA_MTU, "MTU" },
{ WS_IFLA_LINK, "Link type" },
{ WS_IFLA_QDISC, "Queueing discipline" },
{ WS_IFLA_STATS, "Interface Statistics" },
{ WS_IFLA_COST, "Cost" },
{ WS_IFLA_PRIORITY, "Priority" },
{ WS_IFLA_MASTER, "Master" },
{ WS_IFLA_WIRELESS, "Wireless" },
{ WS_IFLA_PROTINFO, "Prot info" },
{ WS_IFLA_TXQLEN, "TxQueue length"},
{ WS_IFLA_MAP, "Map"},
{ WS_IFLA_WEIGHT, "Weight"},
{ WS_IFLA_OPERSTATE, "Operstate"},
{ WS_IFLA_LINKMODE, "Link mode"},
{ WS_IFLA_LINKINFO, "Link info"},
{ WS_IFLA_NET_NS_PID, "NetNs id"},
{ WS_IFLA_IFALIAS, "Ifalias"},
{ WS_IFLA_NUM_VF, "Num vf"},
{ WS_IFLA_VFINFO_LIST, "Vf Info"},
{ WS_IFLA_STATS64, "Stats" },
{ WS_IFLA_VF_PORTS, "VF ports" },
{ WS_IFLA_PORT_SELF, "Port self" },
{ WS_IFLA_AF_SPEC, "AF spec" },
{ WS_IFLA_GROUP, "Group" },
{ WS_IFLA_NET_NS_FD, "NetNs fd" },
{ WS_IFLA_EXT_MASK, "Ext mask" },
{ WS_IFLA_PROMISCUITY, "Promiscuity" },
{ WS_IFLA_NUM_TX_QUEUES, "Number of Tx queues" },
{ WS_IFLA_NUM_RX_QUEUES, "Number of Rx queues" },
{ WS_IFLA_CARRIER, "Carrier" },
{ 0, NULL }
};
static header_field_info hfi_netlink_route_ifla_attr_type NETLINK_ROUTE_HFI_INIT =
{ "Attribute type", "netlink-route.ifla_attr_type", FT_UINT16, BASE_DEC,
VALS(netlink_route_ifla_attr_vals), 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_ifla_ifname NETLINK_ROUTE_HFI_INIT =
{ "Device name", "netlink-route.ifla_ifname", FT_STRINGZ, STR_ASCII,
NULL, 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_ifla_mtu NETLINK_ROUTE_HFI_INIT =
{ "MTU of device", "netlink-route.ifla_mtu", FT_UINT32, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static int
dissect_netlink_route_ifla_attrs(tvbuff_t *tvb, struct netlink_route_info *info, proto_tree *tree, int rta_type, int offset, int len)
{
enum ws_ifla_attr_type type = (enum ws_ifla_attr_type) rta_type;
switch (type) {
case WS_IFLA_IFNAME:
proto_item_append_text(tree, ": %s", tvb_get_string_enc(wmem_packet_scope(), tvb, offset, len, ENC_ASCII | ENC_NA));
proto_tree_add_item(tree, &hfi_netlink_route_ifla_ifname, tvb, offset, len, ENC_ASCII | ENC_NA);
return 1;
case WS_IFLA_MTU:
if (len == 4) {
proto_item_append_text(tree, ": %u", tvb_get_letohl(tvb, offset));
proto_tree_add_item(tree, &hfi_netlink_route_ifla_mtu, tvb, offset, len, info->encoding);
return 1;
}
return 0;
default:
return 0;
}
}
/* IP address */
static header_field_info hfi_netlink_route_ifa_family NETLINK_ROUTE_HFI_INIT =
{ "Address type", "netlink-route.ifa_family", FT_UINT8, BASE_DEC | BASE_EXT_STRING,
&linux_af_vals_ext, 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_ifa_prefixlen NETLINK_ROUTE_HFI_INIT =
{ "Address prefixlength", "netlink-route.ifa_prefixlen", FT_UINT8, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static void
hfi_netlink_route_ifa_flags_label(char *label, guint32 value)
{
static const value_string iff_vals[] = {
{ WS_IFA_F_SECONDARY, "secondary/temporary" },
{ WS_IFA_F_NODAD, "nodad" },
{ WS_IFA_F_OPTIMISTIC, "optimistic" },
{ WS_IFA_F_DADFAILED, "dadfailed" },
{ WS_IFA_F_HOMEADDRESS, "homeaddress" },
{ WS_IFA_F_DEPRECATED, "deprecated" },
{ WS_IFA_F_TENTATIVE, "tentative" },
{ WS_IFA_F_PERMANENT, "permanent" },
{ 0x00, NULL }
};
char tmp[16];
_fill_label_value_string_bitmask(label, value, iff_vals);
g_snprintf(tmp, sizeof(tmp), " (0x%.8x)", value);
g_strlcat(label, tmp, ITEM_LABEL_LENGTH);
}
static header_field_info hfi_netlink_route_ifa_flags NETLINK_ROUTE_HFI_INIT =
{ "Address flags", "netlink-route.ifa_flags", FT_UINT8, BASE_CUSTOM,
CF_FUNC(hfi_netlink_route_ifa_flags_label), 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_ifa_scope NETLINK_ROUTE_HFI_INIT =
{ "Address scope", "netlink-route.ifa_scope", FT_UINT8, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_ifa_index NETLINK_ROUTE_HFI_INIT =
{ "Interface index", "netlink-route.ifa_index", FT_INT32, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static int
dissect_netlink_route_ifaddrmsg(tvbuff_t *tvb, struct netlink_route_info *info, proto_tree *tree, int offset)
{
proto_tree_add_item(tree, &hfi_netlink_route_ifa_family, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_ifa_prefixlen, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_ifa_flags, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_ifa_scope, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_ifa_index, tvb, offset, 4, info->encoding);
offset += 4;
return offset;
}
/* IP address attributes */
static const value_string netlink_route_ifa_attr_vals[] = {
{ WS_IFA_UNSPEC, "Unspecified" },
{ WS_IFA_ADDRESS, "Interface address" },
{ WS_IFA_LOCAL, "Local address" },
{ WS_IFA_LABEL, "Name of interface" },
{ WS_IFA_BROADCAST, "Broadcast address" },
{ WS_IFA_ANYCAST, "Anycast address" },
{ WS_IFA_CACHEINFO, "Address information" },
{ WS_IFA_MULTICAST, "Multicast address" },
{ 0, NULL }
};
static header_field_info hfi_netlink_route_ifa_attr_type NETLINK_ROUTE_HFI_INIT =
{ "Attribute type", "netlink-route.ifa_attr_type", FT_UINT16, BASE_DEC,
VALS(netlink_route_ifa_attr_vals), 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_ifa_label NETLINK_ROUTE_HFI_INIT =
{ "Interface name", "netlink-route.ifa_label", FT_STRINGZ, STR_ASCII,
NULL, 0x00, NULL, HFILL };
static int
dissect_netlink_route_ifa_attrs(tvbuff_t *tvb, struct netlink_route_info *info _U_, proto_tree *tree, int rta_type, int offset, int len)
{
enum ws_ifa_attr_type type = (enum ws_ifa_attr_type) rta_type;
switch (type) {
case WS_IFA_LABEL:
proto_item_append_text(tree, ": %s", tvb_get_string_enc(wmem_packet_scope(), tvb, offset, len, ENC_ASCII | ENC_NA));
proto_tree_add_item(tree, &hfi_netlink_route_ifa_label, tvb, offset, len, ENC_ASCII | ENC_NA);
return 1;
default:
return 0;
}
}
/* Route */
static header_field_info hfi_netlink_route_rt_family NETLINK_ROUTE_HFI_INIT =
{ "Address family", "netlink-route.rt_family", FT_UINT8, BASE_DEC | BASE_EXT_STRING,
&linux_af_vals_ext, 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_rt_dst_len NETLINK_ROUTE_HFI_INIT =
{ "Length of destination", "netlink-route.rt_dst_len", FT_UINT8, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_rt_src_len NETLINK_ROUTE_HFI_INIT =
{ "Length of source", "netlink-route.rt_src_len", FT_UINT8, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_rt_tos NETLINK_ROUTE_HFI_INIT =
{ "TOS filter", "netlink-route.rt_tos", FT_UINT8, BASE_HEX,
NULL, 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_rt_table NETLINK_ROUTE_HFI_INIT =
{ "Routing table ID", "netlink-route.rt_table", FT_UINT8, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static const value_string hfi_netlink_route_rt_protocol_vals[] = {
{ WS_RTPROT_UNSPEC, "unknown" },
{ WS_RTPROT_REDIRECT, "ICMP redirects" },
{ WS_RTPROT_KERNEL, "kernel" },
{ WS_RTPROT_BOOT, "boot" },
{ WS_RTPROT_STATIC, "static" },
{ WS_RTPROT_GATED, "GateD" },
{ WS_RTPROT_RA, "RDISC/ND router advertisements" },
{ WS_RTPROT_MRT, "Merit MRT" },
{ WS_RTPROT_ZEBRA, "Zebra" },
{ WS_RTPROT_BIRD, "BIRD" },
{ WS_RTPROT_DNROUTED, "DECnet routing daemon" },
{ WS_RTPROT_XORP, "XORP" },
{ WS_RTPROT_NTK, "Netsukuku" },
{ WS_RTPROT_DHCP, "DHCP client" },
{ WS_RTPROT_MROUTED, "Multicast daemon" },
{ 0x00, NULL }
};
static value_string_ext hfi_netlink_route_rt_protocol_vals_ext =
VALUE_STRING_EXT_INIT(hfi_netlink_route_rt_protocol_vals);
static header_field_info hfi_netlink_route_rt_protocol NETLINK_ROUTE_HFI_INIT =
{ "Routing protocol", "netlink-route.rt_protocol", FT_UINT8, BASE_HEX | BASE_EXT_STRING,
&hfi_netlink_route_rt_protocol_vals_ext, 0x00, NULL, HFILL };
static const value_string netlink_route_rt_scope_vals[] = {
{ WS_RT_SCOPE_UNIVERSE, "global route" },
{ WS_RT_SCOPE_SITE, "interior route in the local autonomous system" },
{ WS_RT_SCOPE_LINK, "route on this link" },
{ WS_RT_SCOPE_HOST, "route on the local host" },
{ WS_RT_SCOPE_NOWHERE, "destination doesn't exist" },
{ 0x00, NULL }
};
static header_field_info hfi_netlink_route_rt_scope NETLINK_ROUTE_HFI_INIT =
{ "Route origin", "netlink-route.rt_scope", FT_UINT8, BASE_HEX,
VALS(netlink_route_rt_scope_vals), 0x00, NULL, HFILL };
static const value_string netlink_route_rt_type_vals[] = {
{ WS_RTN_UNSPEC, "Unknown route" },
{ WS_RTN_UNICAST, "Gateway or direct route" },
{ WS_RTN_LOCAL, "Local interface route" },
{ WS_RTN_BROADCAST, "Local broadcast route (send as broadcast)" },
{ WS_RTN_ANYCAST, "Local broadcast route (send as unicast)" },
{ WS_RTN_MULTICAST, "Multicast route" },
{ WS_RTN_BLACKHOLE, "Drop" },
{ WS_RTN_UNREACHABLE, "Unreachable destination" },
{ WS_RTN_PROHIBIT, "Administratively prohibited" },
{ WS_RTN_THROW, "Routing lookup in another table" },
{ WS_RTN_NAT, "Netwrk address translation rule" },
{ WS_RTN_XRESOLVE, "Use external resolver" },
{ 0x00, NULL }
};
static header_field_info hfi_netlink_route_rt_type NETLINK_ROUTE_HFI_INIT =
{ "Route type", "netlink-route.rt_type", FT_UINT8, BASE_HEX,
VALS(netlink_route_rt_type_vals), 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_rt_flags NETLINK_ROUTE_HFI_INIT =
{ "Route flags", "netlink-route.rt_flags", FT_UINT32, BASE_HEX,
NULL, 0x00, NULL, HFILL };
static int
dissect_netlink_route_rtmsg(tvbuff_t *tvb, struct netlink_route_info *info, proto_tree *tree, int offset)
{
proto_tree_add_item(tree, &hfi_netlink_route_rt_family, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_rt_dst_len, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_rt_src_len, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_rt_tos, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_rt_table, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_rt_protocol, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_rt_scope, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_rt_type, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_rt_flags, tvb, offset, 4, info->encoding);
offset += 4;
return offset;
}
/* Route Attributes */
static const value_string netlink_route_rta_attr_vals[] = {
{ WS_RTA_UNSPEC, "Unspecified" },
{ WS_RTA_DST, "Route destination address" },
{ WS_RTA_SRC, "Route source address" },
{ WS_RTA_IIF, "Input interface index" },
{ WS_RTA_OIF, "Output interface index" },
{ WS_RTA_GATEWAY, "Gateway of the route" },
/* XXX, from WS_RTA_PRIORITY */
{ 0, NULL }
};
static header_field_info hfi_netlink_route_rta_attr_type NETLINK_ROUTE_HFI_INIT =
{ "Attribute type", "netlink-route.rta_attr_type", FT_UINT16, BASE_DEC,
VALS(netlink_route_rta_attr_vals), 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_rta_iif NETLINK_ROUTE_HFI_INIT =
{ "Input interface index", "netlink-route.rta_iif", FT_UINT32, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_rta_oif NETLINK_ROUTE_HFI_INIT =
{ "Output interface index", "netlink-route.rta_oif", FT_UINT32, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static int
dissect_netlink_route_route_attrs(tvbuff_t *tvb, struct netlink_route_info *info, proto_tree *tree, int rta_type, int offset, int len)
{
enum ws_rta_attr_type type = (enum ws_rta_attr_type) rta_type;
switch (type) {
case WS_RTA_IIF:
if (len == 4) {
proto_item_append_text(tree, ": %u", tvb_get_letohl(tvb, offset));
proto_tree_add_item(tree, &hfi_netlink_route_rta_iif, tvb, offset, 4, info->encoding);
return 1;
}
return 0;
case WS_RTA_OIF:
if (len == 4) {
proto_item_append_text(tree, ": %u", tvb_get_letohl(tvb, offset));
proto_tree_add_item(tree, &hfi_netlink_route_rta_oif, tvb, offset, 4, info->encoding);
return 1;
}
return 0;
default:
return 0;
}
}
static header_field_info hfi_netlink_route_nd_family NETLINK_ROUTE_HFI_INIT =
{ "Family", "netlink-route.nd_family", FT_UINT8, BASE_DEC | BASE_EXT_STRING,
&linux_af_vals_ext, 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_nd_index NETLINK_ROUTE_HFI_INIT =
{ "Interface index", "netlink-route.nd_index", FT_INT32, BASE_DEC,
NULL, 0x00, NULL, HFILL };
static void
hfi_netlink_route_nd_states_label(char *label, guint32 value)
{
static const value_string flags_vals[] = {
{ WS_NUD_INCOMPLETE, "INCOMPLETE" },
{ WS_NUD_REACHABLE, "REACHABLE" },
{ WS_NUD_STALE, "STALE" },
{ WS_NUD_DELAY, "DELAY" },
{ WS_NUD_PROBE, "PROBE" },
{ WS_NUD_FAILED, "FAILED" },
{ WS_NUD_NOARP, "NOARP" },
{ WS_NUD_PERMANENT, "PERMAMENT" },
{ 0x00, NULL }
};
char tmp[16];
_fill_label_value_string_bitmask(label, value, flags_vals);
g_snprintf(tmp, sizeof(tmp), " (0x%.4x)", value);
g_strlcat(label, tmp, ITEM_LABEL_LENGTH);
}
static header_field_info hfi_netlink_route_nd_state NETLINK_ROUTE_HFI_INIT =
{ "State", "netlink-route.nd_state", FT_UINT16, BASE_CUSTOM,
CF_FUNC(hfi_netlink_route_nd_states_label), 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_nd_flags NETLINK_ROUTE_HFI_INIT =
{ "Flags", "netlink-route.nd_flags", FT_UINT8, BASE_HEX,
NULL, 0x00, NULL, HFILL };
static header_field_info hfi_netlink_route_nd_type NETLINK_ROUTE_HFI_INIT =
{ "Type", "netlink-route.nd_type", FT_UINT8, BASE_HEX,
NULL, 0x00, NULL, HFILL };
static int
dissect_netlink_route_ndmsg(tvbuff_t *tvb, struct netlink_route_info *info, proto_tree *tree, int offset)
{
proto_tree_add_item(tree, &hfi_netlink_route_nd_family, tvb, offset, 1, ENC_NA);
offset += 1;
/* XXX, 3B padding */
offset += 3;
proto_tree_add_item(tree, &hfi_netlink_route_nd_index, tvb, offset, 4, info->encoding);
offset += 4;
proto_tree_add_item(tree, &hfi_netlink_route_nd_state, tvb, offset, 2, info->encoding);
offset += 2;
proto_tree_add_item(tree, &hfi_netlink_route_nd_flags, tvb, offset, 1, ENC_NA);
offset += 1;
proto_tree_add_item(tree, &hfi_netlink_route_nd_type, tvb, offset, 1, ENC_NA);
offset += 1;
return offset;
}
static const value_string netlink_route_type_vals[] = {
{ WS_RTM_NEWLINK, "Create network interface" },
{ WS_RTM_DELLINK, "Remove network interface" },
{ WS_RTM_GETLINK, "Get network interface" },
/* WS_RTM_SETLINK */
{ WS_RTM_NEWADDR, "Add IP address" },
{ WS_RTM_DELADDR, "Delete IP address" },
{ WS_RTM_GETADDR, "Get IP address" },
{ WS_RTM_NEWROUTE, "Add network route" },
{ WS_RTM_DELROUTE, "Delete network route" },
{ WS_RTM_GETROUTE, "Get network route" },
{ WS_RTM_NEWNEIGH, "Add neighbor table entry" },
{ WS_RTM_DELNEIGH, "Delete neighbor table entry" },
{ WS_RTM_GETNEIGH, "Get neighbor table entry" },
{ WS_RTM_NEWRULE, "Add routing rule" },
{ WS_RTM_DELRULE, "Delete routing rule" },
{ WS_RTM_GETRULE, "Get routing rule" },
{ WS_RTM_NEWQDISC, "Add queueing discipline" },
{ WS_RTM_DELQDISC, "Delete queueing discipline" },
{ WS_RTM_GETQDISC, "Get queueing discipline" },
{ WS_RTM_NEWTCLASS, "Add traffic class" },
{ WS_RTM_DELTCLASS, "Delete traffic class" },
{ WS_RTM_GETTCLASS, "Get traffic class" },
{ WS_RTM_NEWTFILTER, "Add traffic class" },
{ WS_RTM_DELTFILTER, "Delete traffic class" },
{ WS_RTM_GETTFILTER, "Get traffic class" },
/* XXX from WS_RTM_NEWACTION */
{ 0, NULL }
};
static value_string_ext netlink_route_type_vals_ext = VALUE_STRING_EXT_INIT(netlink_route_type_vals);
static header_field_info hfi_netlink_route_nltype NETLINK_ROUTE_HFI_INIT =
{ "Message type", "netlink-route.nltype", FT_UINT16, BASE_DEC | BASE_EXT_STRING,
&netlink_route_type_vals_ext, 0x00, NULL, HFILL };
static int
dissect_netlink_route(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *_data)
{
int offset;
struct netlink_route_info info;
struct packet_netlink_data *data = NULL;
if (_data) {
if (((struct packet_netlink_data *) _data)->magic == PACKET_NETLINK_MAGIC)
data = (struct packet_netlink_data *) _data;
}
DISSECTOR_ASSERT(data);
col_set_str(pinfo->cinfo, COL_PROTOCOL, "Netlink route");
col_clear(pinfo->cinfo, COL_INFO);
offset = 0;
if (tree) {
proto_item_set_text(tree, "Linux rtnetlink (route netlink) message");
/* XXX, from header tvb */
proto_tree_add_uint(tree, &hfi_netlink_route_nltype, NULL, 0, 0, data->type);
}
info.encoding = data->encoding;
info.pinfo = pinfo;
info.data = data;
switch (data->type) {
case WS_RTM_NEWLINK:
case WS_RTM_DELLINK:
case WS_RTM_GETLINK:
offset = dissect_netlink_route_ifinfomsg(tvb, &info, tree, offset);
/* Optional attributes */
offset = dissect_netlink_route_attributes(tvb, &hfi_netlink_route_ifla_attr_type, &info, tree, offset, dissect_netlink_route_ifla_attrs);
break;
case WS_RTM_NEWADDR:
case WS_RTM_DELADDR:
case WS_RTM_GETADDR:
offset = dissect_netlink_route_ifaddrmsg(tvb, &info, tree, offset);
/* Optional attributes */
offset = dissect_netlink_route_attributes(tvb, &hfi_netlink_route_ifa_attr_type, &info, tree, offset, dissect_netlink_route_ifa_attrs);
break;
case WS_RTM_NEWROUTE:
case WS_RTM_DELROUTE:
case WS_RTM_GETROUTE:
offset = dissect_netlink_route_rtmsg(tvb, &info, tree, offset);
/* Optional attributes */
offset = dissect_netlink_route_attributes(tvb, &hfi_netlink_route_rta_attr_type, &info, tree, offset, dissect_netlink_route_route_attrs);
break;
case WS_RTM_NEWNEIGH:
case WS_RTM_DELNEIGH:
case WS_RTM_GETNEIGH:
offset = dissect_netlink_route_ndmsg(tvb, &info, tree, offset);
break;
}
return offset;
}
void
proto_register_netlink_route(void)
{
#ifndef HAVE_HFI_SECTION_INIT
static header_field_info *hfi[] = {
&hfi_netlink_route_nltype,
/* Interface */
&hfi_netlink_route_ifi_family,
&hfi_netlink_route_ifi_type,
&hfi_netlink_route_ifi_index,
&hfi_netlink_route_ifi_flags,
&hfi_netlink_route_ifi_flags_iff_up,
&hfi_netlink_route_ifi_flags_iff_broadcast,
&hfi_netlink_route_ifi_change,
/* Interface Attributes */
&hfi_netlink_route_ifla_attr_type,
&hfi_netlink_route_ifla_ifname,
&hfi_netlink_route_ifla_mtu,
/* IP address */
&hfi_netlink_route_ifa_family,
&hfi_netlink_route_ifa_prefixlen,
&hfi_netlink_route_ifa_flags,
&hfi_netlink_route_ifa_scope,
&hfi_netlink_route_ifa_index,
/* IP address Attributes */
&hfi_netlink_route_ifa_attr_type,
&hfi_netlink_route_ifa_label,
/* Network Route */
&hfi_netlink_route_rt_family,
&hfi_netlink_route_rt_dst_len,
&hfi_netlink_route_rt_src_len,
&hfi_netlink_route_rt_tos,
&hfi_netlink_route_rt_table,
&hfi_netlink_route_rt_protocol,
&hfi_netlink_route_rt_scope,
&hfi_netlink_route_rt_type,
&hfi_netlink_route_rt_flags,
/* Network route Attributes */
&hfi_netlink_route_rta_attr_type,
&hfi_netlink_route_rta_iif,
&hfi_netlink_route_rta_oif,
/* Neighbor */
&hfi_netlink_route_nd_family,
&hfi_netlink_route_nd_index,
&hfi_netlink_route_nd_state,
&hfi_netlink_route_nd_flags,
&hfi_netlink_route_nd_type,
};
#endif
static gint *ett[] = {
&ett_netlink_route,
&ett_netlink_route_attr,
&ett_netlink_route_if_flags
};
int proto_netlink_route;
proto_netlink_route = proto_register_protocol("Linux rtnetlink (route netlink) protocol", "rtnetlink", "netlink-route" );
hfi_netlink_route = proto_registrar_get_nth(proto_netlink_route);
proto_register_fields(proto_netlink_route, hfi, array_length(hfi));
proto_register_subtree_array(ett, array_length(ett));
netlink_route_handle = create_dissector_handle(dissect_netlink_route, proto_netlink_route);
}
void
proto_reg_handoff_netlink_route(void)
{
dissector_add_uint("netlink.protocol", WS_NETLINK_ROUTE, netlink_route_handle);
}
/*
* Editor modelines - http://www.wireshark.org/tools/modelines.html
*
* Local variables:
* c-basic-offset: 8
* tab-width: 8
* indent-tabs-mode: t
* End:
*
* vi: set shiftwidth=8 tabstop=8 noexpandtab:
* :indentSize=8:tabSize=8:noTabs=false:
*/