epan/dissectors/packet-nsrp.c

   1 /* packet-nsrp.c
   2  * Routines for the Juniper Netscreen Redundant Protocol (NSRP)
   3  *
   4  * Secfire <secfire@gmail.com>
   5  *
   6  * Wireshark - Network traffic analyzer
   7  * By Gerald Combs <gerald@wireshark.org>
   8  * Copyright 1998 Gerald Combs
   9  *
  10  *
  11  * SPDX-License-Identifier: GPL-2.0-or-later
  12  */
  13
  14 /*
  15  *
  16  * NSRP update information can be found at www.juniper.net
  17  *
  18  *
  19  *
  20  *    NSRP Packet Header is defined as follow:
  21  *
  22  *       1         2       3        4        5         6       7        8
  23  *   +--------+--------+--------+--------+--------+--------+--------+--------+
  24  *   |Version | Type   |Clust ID|MSG Flag|     Length      |HA Port |Not Used|
  25  *   +--------+--------+--------+--------+--------+--------+--------+--------+
  26  *   |          Destination Unit         |             Source Unit           |
  27  *   +--------+--------+--------+--------+--------+--------+--------+--------+
  28  *
  29  *
  30  *
  31  */
  32
  33 #include "config.h"
  34
  35 #include <epan/packet.h>
  36 #include <epan/etypes.h>
  37
  38 void proto_register_nsrp(void);
  39 void proto_reg_handoff_nsrp(void);
  40
  41 static dissector_handle_t nsrp_handle;
  42
  43 #define NSRP_MIN_LEN    32
  44
  45 /* Initialize the protocol and registered fields */
  46 static int proto_nsrp;
  47
  48 static int hf_nsrp_version;
  49 static int hf_nsrp_msg_type;
  50 static int hf_nsrp_clust_id;
  51 static int hf_nsrp_msg_flag;
  52 static int hf_nsrp_len;
  53 static int hf_nsrp_ha_port;
  54 static int hf_nsrp_not_used;
  55 static int hf_nsrp_dst_unit;
  56 static int hf_nsrp_src_unit;
  57 static int hf_nsrp_msgtype;
  58 static int hf_nsrp_wst_group;
  59 static int hf_nsrp_hst_group;
  60 static int hf_nsrp_msgflag;
  61 static int hf_nsrp_authflag;
  62 static int hf_nsrp_priority;
  63 static int hf_nsrp_dummy;
  64 static int hf_nsrp_authchecksum;
  65 static int hf_nsrp_ifnum;
  66
  67
  68 /* Dada defined for HA Message */
  69 static int hf_nsrp_msglen;
  70 static int hf_nsrp_encflag;
  71 /* static int hf_nsrp_notused; */
  72
  73 static int hf_nsrp_total_size;
  74
  75 static int hf_nsrp_ns;
  76 static int hf_nsrp_nr;
  77
  78 static int hf_nsrp_no_used;
  79 static int hf_nsrp_checksum;
  80
  81 static int hf_nsrp_data;
  82
  83
  84 static const value_string nsrp_msg_type_vals[] = {
  85     { 0x01,     "HA MESSAGE" },
  86     { 0x02,     "MNG MESSAGE" },
  87     { 0x03,     "DADA MESSAGE" },
  88     { 0,                        NULL }
  89 };
  90
  91 static const value_string nsrp_msgtype_vals[] = {
  92     { 0x01,     "CREATE SESSION" },
  93     { 0x02,     "CLOSE SESSION" },
  94     { 0x03,     "CHANG SESSION" },
  95     { 0x04,     "CREATE SP SESSION" },
  96     { 0x05,     "SYS CONFIG" },
  97     { 0x06,     "FILE SYS" },
  98     { 0x07,     "CMD WEB" },
  99     { 0x08,     "SAVE SLAVE" },
 100     { 0x09,     "VPN SPI" },
 101     { 0x0a,     "ARP" },
 102     { 0x0b,     "HEALTH CHECK" },
 103     { 0x0c,     "EMW DATA" },
 104     { 0x0d,     "INVITE SYNC" },
 105     { 0x0e,     "DOWNLOAD CONFIG" },
 106     { 0x0f,     "L2TP TUNL CREATE" },
 107     { 0x10,     "L2TP TUNL DELETE" },
 108     { 0x11,     "L2TP CALL CREATE" },
 109     { 0x12,     "L2TP CALL DELETE" },
 110     { 0x13,     "PKI SYNC" },
 111     { 0x14,     "VPN SEQ" },
 112     { 0x15,     "MAX" },
 113     { 0,                        NULL }
 114 };
 115
 116 static const value_string nsrp_flag_vals[] = {
 117     { 0x80,     "ENCRYPT MESSAGE" },
 118     { 0x40,     "CLOSE SESSION" },
 119     { 0x20,     "CHANG SESSION" },
 120     { 0x10,     "CREATE SP SESSION" },
 121     { 0x08,     "SYS CONFIG" },
 122     { 0x04,     "FILE SYS" },
 123     { 0x02,     "CMD WEB" },
 124     { 0,                        NULL }
 125 };
 126
 127 static const value_string nsrp_encflag_vals[] = {
 128     { 0xf0,     "ENCRYPT METHOD MASK" },
 129     { 0x0f,     "ENCRYPT PAD BIT MASK" },
 130     { 0,                        NULL }
 131 };
 132
 133
 134 /* Initialize the subtree pointers */
 135 static int ett_nsrp;
 136
 137 /* Code to actually dissect the packets */
 138 static int
 139 dissect_nsrp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
 140 {
 141     proto_item  *ti;
 142     proto_tree  *nsrp_tree = NULL;
 143     int         offset = 0;
 144     uint8_t     msgtype = 0;
 145
 146     col_set_str(pinfo->cinfo, COL_PROTOCOL, "NSRP");
 147
 148     col_set_str(pinfo->cinfo, COL_INFO, "NSRP Protocol");
 149
 150     if (tree) {
 151         ti = proto_tree_add_item(tree, proto_nsrp, tvb, 0, -1, ENC_NA);
 152         nsrp_tree = proto_item_add_subtree(ti, ett_nsrp);
 153
 154
 155         proto_tree_add_item(nsrp_tree, hf_nsrp_version, tvb, offset, 1, ENC_BIG_ENDIAN);
 156         offset += 1;
 157
 158         msgtype = tvb_get_uint8(tvb, offset);
 159         proto_tree_add_item(nsrp_tree, hf_nsrp_msg_type, tvb, offset, 1, ENC_BIG_ENDIAN);
 160         offset += 1;
 161
 162         proto_tree_add_item(nsrp_tree, hf_nsrp_clust_id, tvb, offset, 1, ENC_BIG_ENDIAN);
 163         offset += 1;
 164
 165         proto_tree_add_item(nsrp_tree, hf_nsrp_msg_flag, tvb, offset, 1, ENC_BIG_ENDIAN);
 166         offset += 1;
 167
 168         proto_tree_add_item(nsrp_tree, hf_nsrp_len, tvb, offset, 2, ENC_BIG_ENDIAN);
 169         offset += 2;
 170
 171         proto_tree_add_item(nsrp_tree, hf_nsrp_ha_port, tvb, offset, 1, ENC_BIG_ENDIAN);
 172         offset += 1;
 173
 174         proto_tree_add_item(nsrp_tree, hf_nsrp_not_used, tvb, offset, 1, ENC_BIG_ENDIAN);
 175         offset += 1;
 176
 177         proto_tree_add_item(nsrp_tree, hf_nsrp_dst_unit, tvb, offset, 4, ENC_BIG_ENDIAN);
 178         offset += 4;
 179
 180         proto_tree_add_item(nsrp_tree, hf_nsrp_src_unit, tvb, offset, 4, ENC_BIG_ENDIAN);
 181         offset += 4;
 182     }
 183
 184 /*
 185  *
 186  *
 187  *    NSRP HA Packet is defined as follow:
 188  *
 189  *       1         2       3        4        5         6       7        8
 190  *   +--------+--------+--------+--------+--------+--------+--------+--------+
 191  *   | Type   |WstGroup|HstGroup|MSG Flag|     Length      |Enc Flag|Not Used|
 192  *   +--------+--------+--------+--------+--------+--------+--------+--------+
 193  *   |            Total Size             |        NS       |        NR       |
 194  *   +--------+--------+--------+--------+--------+--------+--------+--------+
 195  *   |     No Used     |    Checksum     |              Data                 |
 196  *   +--------+--------+--------+--------+-----------------------------------+
 197  *
 198  *
 199  */
 200
 201     if ( msgtype == 0x00 ) {
 202
 203         proto_tree_add_item(nsrp_tree, hf_nsrp_msgtype, tvb, offset, 1, ENC_BIG_ENDIAN);
 204         offset += 1;
 205
 206         proto_tree_add_item(nsrp_tree, hf_nsrp_wst_group, tvb, offset, 1, ENC_BIG_ENDIAN);
 207         offset += 1;
 208
 209         proto_tree_add_item(nsrp_tree, hf_nsrp_hst_group, tvb, offset, 1, ENC_BIG_ENDIAN);
 210         offset += 1;
 211
 212         proto_tree_add_item(nsrp_tree, hf_nsrp_msgflag, tvb, offset, 1, ENC_BIG_ENDIAN);
 213         offset += 1;
 214
 215         proto_tree_add_item(nsrp_tree, hf_nsrp_msglen, tvb, offset, 2, ENC_BIG_ENDIAN);
 216         offset += 2;
 217
 218         proto_tree_add_item(nsrp_tree, hf_nsrp_encflag, tvb, offset, 1, ENC_BIG_ENDIAN);
 219         offset += 1;
 220
 221         proto_tree_add_item(nsrp_tree, hf_nsrp_not_used, tvb, offset, 1, ENC_BIG_ENDIAN);
 222         offset += 1;
 223
 224         proto_tree_add_item(nsrp_tree, hf_nsrp_total_size, tvb, offset, 4, ENC_BIG_ENDIAN);
 225         offset += 4;
 226
 227         proto_tree_add_item(nsrp_tree, hf_nsrp_ns, tvb, offset, 2, ENC_BIG_ENDIAN);
 228         offset += 2;
 229
 230         proto_tree_add_item(nsrp_tree, hf_nsrp_nr, tvb, offset, 2, ENC_BIG_ENDIAN);
 231         offset += 2;
 232
 233         proto_tree_add_item(nsrp_tree, hf_nsrp_no_used, tvb, offset, 2, ENC_BIG_ENDIAN);
 234         offset += 2;
 235
 236         proto_tree_add_checksum(nsrp_tree, tvb, offset, hf_nsrp_checksum, -1, NULL, pinfo, 0, ENC_BIG_ENDIAN, PROTO_CHECKSUM_NO_FLAGS);
 237         offset += 2;
 238
 239         proto_tree_add_item(nsrp_tree, hf_nsrp_data, tvb, offset, -1, ENC_ASCII);
 240
 241     }
 242
 243 /*
 244  *
 245  *    NSRP MNG Packet is defined as follow:
 246  *
 247  *       1         2       3        4        5         6       7        8
 248  *   +--------+--------+--------+--------+--------+--------+--------+--------+
 249  *   | Type   |WstGroup|HstGroup|MSG Flag|     Length      |AuthFlag|Not Used|
 250  *   +--------+--------+--------+--------+--------+--------+--------+--------+
 251  *   |Priority+ Dummy  +   Auth CheckSum +                Data               |
 252  *   +--------+--------+--------+--------+-----------------------------------+
 253  *
 254  *
 255  */
 256
 257     if ( msgtype == 0x02 ) {
 258
 259         proto_tree_add_item(nsrp_tree, hf_nsrp_msgtype, tvb, offset, 1, ENC_BIG_ENDIAN);
 260         offset += 1;
 261
 262         proto_tree_add_item(nsrp_tree, hf_nsrp_wst_group, tvb, offset, 1, ENC_BIG_ENDIAN);
 263         offset += 1;
 264
 265         proto_tree_add_item(nsrp_tree, hf_nsrp_hst_group, tvb, offset, 1, ENC_BIG_ENDIAN);
 266         offset += 1;
 267
 268         proto_tree_add_item(nsrp_tree, hf_nsrp_msgflag, tvb, offset, 1, ENC_BIG_ENDIAN);
 269         offset += 1;
 270
 271         proto_tree_add_item(nsrp_tree, hf_nsrp_msglen, tvb, offset, 2, ENC_BIG_ENDIAN);
 272         offset += 2;
 273
 274         proto_tree_add_item(nsrp_tree, hf_nsrp_authflag, tvb, offset, 1, ENC_BIG_ENDIAN);
 275         offset += 1;
 276
 277         proto_tree_add_item(nsrp_tree, hf_nsrp_not_used, tvb, offset, 1, ENC_BIG_ENDIAN);
 278         offset += 1;
 279
 280         proto_tree_add_item(nsrp_tree, hf_nsrp_priority, tvb, offset, 1, ENC_BIG_ENDIAN);
 281         offset += 1;
 282
 283         proto_tree_add_item(nsrp_tree, hf_nsrp_dummy, tvb, offset, 1, ENC_BIG_ENDIAN);
 284         offset += 1;
 285
 286         proto_tree_add_checksum(nsrp_tree, tvb, offset, hf_nsrp_authchecksum, -1, NULL, pinfo, 0, ENC_BIG_ENDIAN, PROTO_CHECKSUM_NO_FLAGS);
 287         offset += 2;
 288
 289         proto_tree_add_item(nsrp_tree, hf_nsrp_data, tvb, offset, -1, ENC_ASCII);
 290
 291     }
 292
 293
 294
 295
 296 /*
 297  *    NSRP DATA Packet is defined as follow:
 298  *
 299  *       1         2       3        4        5         6       7        8
 300  *   +--------+--------+--------+--------+--------+--------+--------+--------+
 301  *   | Type   |WstGroup|HstGroup|MSG Flag|     Length      | Ifnum  |Not Used|
 302  *   +--------+--------+--------+--------+--------+--------+--------+--------+
 303  *   |            Total Size             |                Data               |
 304  *   +--------+--------+--------+--------+-----------------------------------+
 305  *
 306  *
 307  */
 308     if ( msgtype == 0x03 ) {
 309
 310         proto_tree_add_item(nsrp_tree, hf_nsrp_msgtype, tvb, offset, 1, ENC_BIG_ENDIAN);
 311         offset += 1;
 312
 313         proto_tree_add_item(nsrp_tree, hf_nsrp_wst_group, tvb, offset, 1, ENC_BIG_ENDIAN);
 314         offset += 1;
 315
 316         proto_tree_add_item(nsrp_tree, hf_nsrp_hst_group, tvb, offset, 1, ENC_BIG_ENDIAN);
 317         offset += 1;
 318
 319         proto_tree_add_item(nsrp_tree, hf_nsrp_msgflag, tvb, offset, 1, ENC_BIG_ENDIAN);
 320         offset += 1;
 321
 322         proto_tree_add_item(nsrp_tree, hf_nsrp_msglen, tvb, offset, 2, ENC_BIG_ENDIAN);
 323         offset += 2;
 324
 325         proto_tree_add_item(nsrp_tree, hf_nsrp_ifnum, tvb, offset, 1, ENC_BIG_ENDIAN);
 326         offset += 1;
 327
 328         proto_tree_add_item(nsrp_tree, hf_nsrp_not_used, tvb, offset, 1, ENC_BIG_ENDIAN);
 329         offset += 1;
 330
 331         proto_tree_add_item(nsrp_tree, hf_nsrp_total_size, tvb, offset, 4, ENC_BIG_ENDIAN);
 332         offset += 4;
 333
 334         proto_tree_add_item(nsrp_tree, hf_nsrp_data, tvb, offset, -1, ENC_ASCII);
 335
 336     }
 337
 338     return tvb_captured_length(tvb);
 339 }
 340
 341
 342 void
 343 proto_register_nsrp(void)
 344 {
 345
 346     static hf_register_info hf[] = {
 347         { &hf_nsrp_version,
 348           { "Version", "nsrp.version",
 349             FT_UINT8, BASE_DEC, NULL, 0,
 350             "NSRP Version", HFILL }
 351         },
 352         { &hf_nsrp_msg_type,
 353           { "Type", "nsrp.type",
 354             FT_UINT8, BASE_DEC, VALS(nsrp_msg_type_vals), 0,
 355             "NSRP Message Type", HFILL }
 356         },
 357         { &hf_nsrp_clust_id,
 358           { "Clust ID", "nsrp.clustid",
 359             FT_UINT8, BASE_DEC, NULL, 0,
 360             "NSRP CLUST ID", HFILL }
 361         },
 362         { &hf_nsrp_msg_flag,
 363           { "Flag", "nsrp.flag",
 364             FT_UINT8, BASE_DEC, NULL, 0,
 365             "NSRP FLAG", HFILL }
 366         },
 367         { &hf_nsrp_len,
 368           { "Length", "nsrp.length",
 369             FT_UINT16, BASE_DEC, NULL, 0,
 370             "NSRP Length", HFILL }
 371         },
 372         { &hf_nsrp_ha_port,
 373           { "Port", "nsrp.haport",
 374             FT_UINT8, BASE_DEC, NULL, 0,
 375             "NSRP HA Port", HFILL }
 376         },
 377         { &hf_nsrp_not_used,
 378           { "Not used", "nsrp.notused",
 379             FT_UINT8, BASE_DEC, NULL, 0,
 380             NULL, HFILL }
 381         },
 382         { &hf_nsrp_dst_unit,
 383           { "Destination", "nsrp.dst",
 384             FT_UINT32, BASE_DEC, NULL, 0,
 385             "DESTINATION UNIT INFORMATION", HFILL }
 386         },
 387         { &hf_nsrp_src_unit,
 388           { "Source", "nsrp.src",
 389             FT_UINT32, BASE_DEC, NULL, 0,
 390             "SOURCE UNIT INFORMATION", HFILL }
 391         },
 392         { &hf_nsrp_msgtype,
 393           { "MsgType", "nsrp.msgtype",
 394             FT_UINT8, BASE_DEC, VALS(nsrp_msgtype_vals), 0,
 395             "Message Type", HFILL }
 396         },
 397         { &hf_nsrp_wst_group,
 398           { "Wst group", "nsrp.wst",
 399             FT_UINT8, BASE_DEC, NULL, 0,
 400             "NSRP WST GROUP", HFILL }
 401         },
 402         { &hf_nsrp_hst_group,
 403           { "Hst group", "nsrp.hst",
 404             FT_UINT8, BASE_DEC, NULL, 0,
 405             "NSRP HST GROUP", HFILL }
 406         },
 407         { &hf_nsrp_msgflag,
 408           { "Msgflag", "nsrp.msgflag",
 409             FT_UINT8, BASE_DEC, VALS(nsrp_flag_vals), 0,
 410             "NSRP MSG FLAG", HFILL }
 411         },
 412         { &hf_nsrp_msglen,
 413           { "Msg Length", "nsrp.msglen",
 414             FT_UINT16, BASE_DEC, NULL, 0,
 415             "NSRP MESSAGE LENGTH", HFILL }
 416         },
 417
 418         { &hf_nsrp_encflag,
 419           { "Enc Flag", "nsrp.encflag",
 420             FT_UINT8, BASE_DEC, VALS(nsrp_encflag_vals), 0,
 421             "NSRP ENCRYPT FLAG", HFILL }
 422         },
 423 #if 0
 424         { &hf_nsrp_notused,
 425           { "Not Used", "nsrp.notused",
 426             FT_UINT8, BASE_DEC, NULL, 0,
 427             NULL, HFILL }
 428         },
 429 #endif
 430         { &hf_nsrp_total_size,
 431           { "Total Size", "nsrp.totalsize",
 432             FT_UINT32, BASE_DEC, NULL, 0,
 433             "NSRP MSG TOTAL MESSAGE", HFILL }
 434         },
 435         { &hf_nsrp_ns,
 436           { "Ns", "nsrp.ns",
 437             FT_UINT16, BASE_DEC, NULL, 0,
 438             NULL, HFILL }
 439         },
 440         { &hf_nsrp_nr,
 441           { "Nr", "nsrp.nr",
 442             FT_UINT16, BASE_DEC, NULL, 0,
 443             NULL, HFILL }
 444         },
 445         { &hf_nsrp_no_used,
 446           { "Reserved", "nsrp.reserved",
 447             FT_UINT16, BASE_DEC, NULL, 0,
 448             NULL, HFILL }
 449         },
 450         { &hf_nsrp_checksum,
 451           { "Checksum", "nsrp.checksum",
 452             FT_UINT16, BASE_HEX, NULL, 0,
 453             "NSRP PACKET CHECKSUM", HFILL }
 454         },
 455         { &hf_nsrp_authflag,
 456           { "AuthFlag", "nsrp.authflag",
 457             FT_UINT8, BASE_HEX, NULL, 0,
 458             "NSRP Auth Flag", HFILL }
 459         },
 460         { &hf_nsrp_priority,
 461           { "Priority", "nsrp.priority",
 462             FT_UINT8, BASE_HEX, NULL, 0,
 463             "NSRP Priority", HFILL }
 464         },
 465         { &hf_nsrp_dummy,
 466           { "Dummy", "nsrp.dummy",
 467             FT_UINT8, BASE_HEX, NULL, 0,
 468             "NSRP Dummy", HFILL }
 469         },
 470         { &hf_nsrp_authchecksum,
 471           { "Checksum", "nsrp.authchecksum",
 472             FT_UINT16, BASE_HEX, NULL, 0,
 473             "NSRP AUTH CHECKSUM", HFILL }
 474         },
 475         { &hf_nsrp_ifnum,
 476           { "Ifnum", "nsrp.ifnum",
 477             FT_UINT16, BASE_HEX, NULL, 0,
 478             "NSRP IfNum", HFILL }
 479         },
 480         { &hf_nsrp_data,
 481           { "Data", "nsrp.data",
 482             FT_STRING, BASE_NONE, NULL, 0,
 483             "PADDING", HFILL }
 484         }
 485     };
 486
 487     static int *ett[] = {
 488         &ett_nsrp
 489     };
 490
 491     proto_nsrp = proto_register_protocol("Juniper Netscreen Redundant Protocol",
 492                                          "NSRP", "nsrp");
 493     proto_register_field_array(proto_nsrp, hf, array_length(hf));
 494     proto_register_subtree_array(ett, array_length(ett));
 495
 496     nsrp_handle = register_dissector("nsrp", dissect_nsrp, proto_nsrp);
 497 }
 498
 499
 500 void
 501 proto_reg_handoff_nsrp(void)
 502 {
 503     dissector_add_uint("ethertype", ETHERTYPE_NSRP, nsrp_handle);
 504 }
 505
 506
 507 /*
 508  * Editor modelines  -  https://www.wireshark.org/tools/modelines.html
 509  *
 510  * Local variables:
 511  * c-basic-offset: 4
 512  * tab-width: 8
 513  * indent-tabs-mode: nil
 514  * End:
 515  *
 516  * vi: set shiftwidth=4 tabstop=8 expandtab:
 517  * :indentSize=4:tabSize=8:noTabs=true:
 518  */