epan/dissectors/packet-cisco-sm.c

   1 /* packet-sm.c
   2  * Routines for Cisco Session Management Protocol dissection
   3  * Copyright 2004, Duncan Sargeant <dunc-ethereal@rcpt.to>
   4  *
   5  * Wireshark - Network traffic analyzer
   6  * By Gerald Combs <gerald@wireshark.org>
   7  * Copyright 1998 Gerald Combs
   8  *
   9  * SPDX-License-Identifier: GPL-2.0-or-later
  10  */
  11
  12 /*
  13  * This is basically a glue dissector for the Cisco SM protocol.  It sits
  14  * between the RUDP and MTP3 layers between SLTs and MGCs.
  15  *
  16  * A link to an overview of the technology :
  17  * http://www.cisco.com/en/US/products/sw/netmgtsw/ps4883/products_installation_and_configuration_guide_chapter09186a008010950a.html
  18  * Link showing debugs of the protocol:
  19  * http://www.cisco.com/univercd/cc/td/doc/product/access/sc/rel7/omts/omts_apb.htm#30052
  20  * Scroll down to Backhaul Debug Event/Cause/Reason Codes:
  21  * http://www.cisco.com/en/US/docs/ios-xml/ios/debug/command/s1/db-s2.html#GUID-83B6671D-B86F-4B41-819C-85D14F4AACAE
  22  * Free/Opensource implementation:
  23  * http://yate.null.ro/websvn/filedetails.php?repname=yate&path=%2Ftrunk%2Fmodules%2Fserver%2Fciscosm.cpp
  24  */
  25
  26 #include "config.h"
  27
  28 #include <epan/packet.h>
  29
  30 #define MESSAGE_TYPE_START              0
  31 #define MESSAGE_TYPE_STOP               1
  32 #define MESSAGE_TYPE_ACTIVE             2
  33 #define MESSAGE_TYPE_STANDBY            3
  34 #define MESSAGE_TYPE_Q_HOLD_INVOKE      4
  35 #define MESSAGE_TYPE_Q_HOLD_RESPONSE    5
  36 #define MESSAGE_TYPE_Q_RESUME_INVOKE    6
  37 #define MESSAGE_TYPE_Q_RESUME_RESPONSE  7
  38 #define MESSAGE_TYPE_Q_RESET_INVOKE     8
  39 #define MESSAGE_TYPE_Q_RESET_RESPONSE   9
  40 #define MESSAGE_TYPE_PDU                0x8000
  41
  42 void proto_register_sm(void);
  43 void proto_reg_handoff_sm(void);
  44
  45 static const value_string sm_message_type_value[] = {
  46     { MESSAGE_TYPE_START,             "Start Message" },
  47     { MESSAGE_TYPE_STOP,              "Stop Message" },
  48     { MESSAGE_TYPE_ACTIVE,            "Active Message" },
  49     { MESSAGE_TYPE_STANDBY,           "Standby Message" },
  50     { MESSAGE_TYPE_Q_HOLD_INVOKE,     "Q_HOLD Invoke Message" },
  51     { MESSAGE_TYPE_Q_HOLD_RESPONSE,   "Q_HOLD Response Message" },
  52     { MESSAGE_TYPE_Q_RESUME_INVOKE,   "Q_RESUME Invoke Message" },
  53     { MESSAGE_TYPE_Q_RESUME_RESPONSE, "Q_RESUME Response Message" },
  54     { MESSAGE_TYPE_Q_RESET_INVOKE,    "Q_RESET Invoke Message" },
  55     { MESSAGE_TYPE_Q_RESET_RESPONSE,  "Q_RESET Response Message" },
  56     { MESSAGE_TYPE_PDU,               "PDU Message" },
  57     { 0, NULL }
  58 };
  59
  60 static const value_string sm_message_type_value_info[] = {
  61     { MESSAGE_TYPE_START,             "Start" },
  62     { MESSAGE_TYPE_STOP,              "Stop" },
  63     { MESSAGE_TYPE_ACTIVE,            "Active" },
  64     { MESSAGE_TYPE_STANDBY,           "Standby" },
  65     { MESSAGE_TYPE_Q_HOLD_INVOKE,     "Q_HOLD Invoke" },
  66     { MESSAGE_TYPE_Q_HOLD_RESPONSE,   "Q_HOLD Response" },
  67     { MESSAGE_TYPE_Q_RESUME_INVOKE,   "Q_RESUME Invoke" },
  68     { MESSAGE_TYPE_Q_RESUME_RESPONSE, "Q_RESUME Response" },
  69     { MESSAGE_TYPE_Q_RESET_INVOKE,    "Q_RESET Invoke" },
  70     { MESSAGE_TYPE_Q_RESET_RESPONSE,  "Q_RESET Response" },
  71     { MESSAGE_TYPE_PDU,               "PDU" },
  72     { 0, NULL }
  73 };
  74
  75 static const value_string sm_alignment_type[] = {
  76     { 0x00, "Unknown (probably linkset was already up)"},
  77     { 0x03, "Emergency alignment"},
  78     { 0x04, "Normal alignment"},
  79     { 0x05, "Power On MTP2"},
  80     { 0x06, "Start MTP2"},
  81     { 0, NULL}
  82 };
  83
  84 static const value_string sm_backhaul_reason_code[] = {
  85     { 0x00, "Layer management request"},
  86     { 0x01, "SUERM (Signal Unit Error Monitor) failure"},
  87     { 0x02, "Excessively long alignment period"},
  88     { 0x03, "T7 timer expired"},
  89     { 0x04, "Physical interface failure"},
  90     { 0x05, "Two or three invalid BSNs"},
  91     { 0x06, "Two or three invalid FIBs"},
  92     { 0x07, "LSSU (Link Status Signal Unit) condition"},
  93     { 0x13, "SIOs (Service Information Octets) received "
  94             "in Link State Control (LSC)"},
  95     { 0x14, "Timer T2 expired waiting for SIO"},
  96     { 0x15, "Timer T3 expired waiting for SIE/SIN "},
  97     { 0x16, "SIO received in initial alignment control (IAC)"},
  98     { 0x17, "Proving period failure"},
  99     { 0x18, "Timer T1 expired waiting for FISU (Fill-In Signal Unit)"},
 100     { 0x19, "SIN received in the in-service state"},
 101     { 0x20, "CTS lost"},
 102     { 0x25, "No resources"},
 103     {    0, NULL}
 104 };
 105
 106 static const value_string sm_backhaul_event_code[] = {
 107     { 0x00, "Local processor outage"},
 108     { 0x01, "Local processor outage recovered"},
 109     { 0x02, "Entered a congested state"},
 110     { 0x03, "Exited a congested state"},
 111     { 0x04, "Physical layer up"},
 112     { 0x05, "Physical layer down"},
 113     { 0x06, "Protocol error"},
 114     { 0x07, "Link is aligned"},
 115     { 0x08, "Link alignment lost"},
 116     { 0x09, "Retransmit buffer full"},
 117     { 0x0a, "Retransmit buffer no longer full"},
 118     { 0x0b, "Negative acknowledgment"},
 119     { 0x0c, "Remote entered congestion"},
 120     { 0x0d, "Remote exited congestion"},
 121     { 0x0e, "Remote entered processor outage"},
 122     { 0x0f, "Remote exited processor outage"},
 123     {    0, NULL}
 124 };
 125
 126 static const value_string sm_backhaul_cause_code[] = {
 127     { 0x00, "Unknown (default)"},
 128     { 0x01, "Management initiated"},
 129     { 0x02, "Abnormal BSN (backward sequence number)"},
 130     { 0x03, "Abnormal FIB (Forward Indicator Bit)"},
 131     { 0x04, "Congestion discard"},
 132     {    0, NULL}
 133 };
 134
 135 static const value_string sm_linkdown_cause_code[] = {
 136     { 0x00, "Unknown (default)"},
 137     { 0x01, "Management initiated"},
 138     { 0x03, "Congestion ended"},
 139     {    0, NULL}
 140 };
 141
 142 static const value_string sm_retrieval_type[] = {
 143     { 0x01, "Request for BSN"},
 144     { 0x02, "Request for MSUs"},
 145     { 0x03, "Request to drop MSUs"},
 146     {    0, NULL}
 147 };
 148
 149 static const value_string sm_lsc_state_type[] = {
 150     { 0x00, "Set LPO"},
 151     { 0x01, "Clear LPO"},
 152     { 0x02, "Set Emergency"},
 153     { 0x03, "Clear Emergency"},
 154     { 0x04, "Clear Buffers"},
 155     { 0x05, "Clear Transmit Buffer"},
 156     { 0x06, "Clear ReTransmission Buffer"},
 157     { 0x07, "Clear Receive Buffer"},
 158     { 0x08, "Continue"},
 159     { 0x09, "Power On"},
 160     { 0x0a, "Start"},
 161     { 0x0b, "Stop"},
 162     {    0, NULL}
 163 };
 164
 165 static const value_string sm_stat_request_type[] = {
 166     { 0x00, "Reset"},
 167     { 0x01, "Send & Reset"},
 168     { 0x02, "Send"},
 169     {    0, NULL}
 170 };
 171
 172 #define PDU_CONNECT_REQUEST       0x06
 173 #define PDU_CONNECT_CONFIRM       0x07
 174 #define PDU_DISCONNECT_CONFIRM    0x0b
 175 #define PDU_DISCONNECT_INDICATION 0x0c
 176 #define PDU_MTP3_TO_SLT           0x10
 177 #define PDU_MTP3_FROM_SLT         0x11
 178 #define PDU_RETRIEVAL_REQUEST     0x12
 179 #define PDU_RETRIEVAL_CONFIRM     0x13
 180 #define PDU_LSC_REQUEST           0x20
 181 #define PDU_LSC_CONFIRM           0x21
 182 #define PDU_LSC_INDICATION        0x22
 183 #define PDU_STAT_REQUEST          0x44
 184
 185 static const value_string sm_pdu_type_value[] = {
 186     { PDU_CONNECT_REQUEST,       "Connect Request"},
 187     { PDU_CONNECT_CONFIRM,       "Connect Confirm"},
 188     { 0x0a,                      "Disconnect Request"},
 189     { PDU_DISCONNECT_CONFIRM,    "Disconnect Confirm"},
 190     { PDU_DISCONNECT_INDICATION, "Disconnect Indication Message"},
 191     { PDU_MTP3_TO_SLT,           "MSU Request (message to MTP2 link)"},
 192     { PDU_MTP3_FROM_SLT,         "MSU Indication (message from MTP2 link)"},
 193     { PDU_RETRIEVAL_REQUEST,     "Retrieval Request"},
 194     { PDU_RETRIEVAL_CONFIRM,     "Retrieval Confirm"},
 195     { 0x14,                      "Retrieval Indication"},
 196     { 0x15,                      "Retrieval Message"},
 197     { PDU_LSC_REQUEST,           "Link State Controller Request"},
 198     { PDU_LSC_CONFIRM,           "Link State Controller Confirm"},
 199     { PDU_LSC_INDICATION,        "Link State Controller Indication"},
 200     { 0x40,                      "Configuration Request"},
 201     { 0x41,                      "Configuration Confirm"},
 202     { 0x42,                      "Status Request"},
 203     { 0x43,                      "Status Confirm"},
 204     { PDU_STAT_REQUEST,          "Statistic Request"},
 205     { 0x45,                      "Statistic Confirm"},
 206     { 0x46,                      "Control Request"},
 207     { 0x47,                      "Control Confirm"},
 208     { 0x50,                      "Flow Control Request"},
 209     { 0x51,                      "Flow Control Indication"},
 210     { 0,                    NULL }
 211 };
 212
 213 /* TODO: Change to useful name once known */
 214 #define SM_PROTOCOL_X004 0x0004 /* https://gitlab.com/wireshark/wireshark/-/issues/7188 */
 215 /* RUDP/SM stack called BSM V1 (version 1 versus Version 0 used for SS7). */
 216 #define SM_PROTOCOL_X100 0x0100
 217 #define SM_PROTOCOL_X101 0x0101
 218 #define SM_PROTOCOL_X114 0x0114
 219 #define SM_PROTOCOL_X122 0x0122
 220
 221
 222 /* Initialize the protocol and registered fields */
 223 static int proto_sm;
 224
 225 static int hf_sm_sm_msg_type;
 226 static int hf_sm_protocol;
 227 static int hf_sm_msg_id;
 228 static int hf_sm_msg_type;
 229 static int hf_sm_channel;
 230 static int hf_sm_bearer;
 231 static int hf_sm_len;
 232 static int hf_sm_ip_addr;
 233 static int hf_sm_context;
 234 static int hf_sm_eisup_msg_id;
 235 static int hf_sm_tag;
 236 static int hf_sm_alignment_type;
 237 static int hf_sm_backhaul_reason_code;
 238 static int hf_sm_backhaul_event_code;
 239 static int hf_sm_backhaul_cause_code;
 240 static int hf_sm_linkdown_cause_code;
 241 static int hf_sm_retrieval_type;
 242 static int hf_sm_lsc_state_type;
 243 static int hf_sm_stat_request_type;
 244 static int hf_sm_bsn_num;
 245
 246 /* Initialize the subtree pointers */
 247 static int ett_sm;
 248
 249 static dissector_handle_t sdp_handle;
 250 static dissector_handle_t mtp3_handle;
 251 static dissector_handle_t q931_handle;
 252
 253 /* Code to actually dissect the packets */
 254 static int
 255 dissect_sm(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)
 256 {
 257     proto_item *ti;
 258     proto_tree *sm_tree;
 259     tvbuff_t   *next_tvb      = NULL;
 260     uint32_t    sm_message_type;
 261     uint32_t    bh_event_code = 0;
 262     uint16_t    protocol;
 263     uint16_t    msg_type      = 0;
 264     uint16_t    length;
 265     uint16_t    tag;
 266     int         offset        = 0;
 267
 268     sm_message_type = tvb_get_ntohl(tvb,offset);
 269
 270     col_set_str(pinfo->cinfo, COL_PROTOCOL, "SM");
 271
 272     col_add_fstr(pinfo->cinfo, COL_INFO, "Cisco SM Packet (%s)",
 273         val_to_str_const(sm_message_type, sm_message_type_value_info,"reserved"));
 274
 275     ti = proto_tree_add_item(tree, proto_sm, tvb, offset, -1, ENC_NA);
 276     sm_tree = proto_item_add_subtree(ti, ett_sm);
 277
 278     proto_tree_add_uint_format_value(sm_tree, hf_sm_sm_msg_type, tvb, offset, 4, sm_message_type,
 279         "%s (0x%0x)", val_to_str_const(sm_message_type, sm_message_type_value, "reserved"), sm_message_type);
 280
 281     offset = offset + 4;
 282     if (sm_message_type ==  MESSAGE_TYPE_PDU) {
 283         proto_tree_add_item(sm_tree, hf_sm_protocol, tvb, offset, 2, ENC_BIG_ENDIAN);
 284         protocol = tvb_get_ntohs(tvb,offset);
 285         offset = offset + 2;
 286         switch(protocol){
 287         /* start case RUDP BSM v.1  ---------------------------------------------------------- */
 288         case SM_PROTOCOL_X004:
 289             proto_tree_add_item(sm_tree, hf_sm_msg_id, tvb, offset, 2, ENC_BIG_ENDIAN);
 290             offset = offset +2;
 291             msg_type = tvb_get_ntohs(tvb,offset);
 292             proto_tree_add_uint_format_value(sm_tree, hf_sm_msg_type, tvb, offset, 2, msg_type,
 293                 "%s (0x%0x)", val_to_str_const(msg_type, sm_pdu_type_value, "reserved"),
 294                 msg_type);
 295             msg_type = tvb_get_ntohs(tvb,offset);
 296             offset = offset + 2;
 297             proto_tree_add_item(sm_tree, hf_sm_channel, tvb, offset, 2, ENC_BIG_ENDIAN);
 298             offset = offset + 2;
 299             proto_tree_add_item(sm_tree, hf_sm_bearer, tvb, offset, 2, ENC_BIG_ENDIAN);
 300             offset = offset +2;
 301             proto_tree_add_item(sm_tree, hf_sm_len, tvb, offset, 2, ENC_BIG_ENDIAN);
 302             length = tvb_get_ntohs(tvb,offset);
 303             offset = offset +2;
 304             proto_item_set_len(ti, 16);
 305
 306             if (length > 0) {
 307                 next_tvb = tvb_new_subset_length(tvb, offset, length);
 308
 309                 if ((msg_type == PDU_MTP3_TO_SLT || msg_type == PDU_MTP3_FROM_SLT)) {
 310                     call_dissector(q931_handle, next_tvb, pinfo, tree);
 311                 } else {
 312                     call_data_dissector(next_tvb, pinfo, tree);
 313                 }
 314             }
 315
 316             break;
 317             /* end case RUDP BSM v.1 ---------------------------------------------------------- */
 318
 319         case SM_PROTOCOL_X100:
 320         case SM_PROTOCOL_X122:
 321             /* Protocol 0x100/0x122 only contains a length and then an EISUP packet */
 322             proto_tree_add_item(sm_tree, hf_sm_len, tvb, offset, 2, ENC_BIG_ENDIAN);
 323             length = tvb_get_ntohs(tvb,offset);
 324             offset = offset + 2;
 325             proto_item_set_len(ti, 8);
 326
 327             /* This should be the EISUP dissector but we haven't got one
 328              * right now - so decode it as data for now ... */
 329             next_tvb = tvb_new_subset_length(tvb, offset, length);
 330             call_data_dissector(next_tvb, pinfo, sm_tree);
 331
 332             break;
 333         case SM_PROTOCOL_X101:
 334             /* XXX Reverse enginered so this may not be correct!!!
 335              * EISUP - used between Cisco HSI and Cisco PGW devices,
 336              * uses RUDP with default port number 8003.
 337              * Protocol stack is RUDP->Cisco SM->SDP.
 338              * This implementation is PROPRIETARY
 339              */
 340             proto_tree_add_item(sm_tree, hf_sm_len, tvb, offset, 2, ENC_BIG_ENDIAN);
 341             length = tvb_get_ntohs(tvb,offset);
 342             offset = offset + 2;
 343             proto_item_set_len(ti, length + offset);
 344             /* The next stuff seems to be IP addr */
 345             proto_tree_add_item(sm_tree, hf_sm_ip_addr, tvb, offset, 4, ENC_BIG_ENDIAN);
 346             offset = offset + 4;
 347             /* This part looks to be the same per session */
 348             proto_tree_add_item(sm_tree, hf_sm_context, tvb, offset, 4, ENC_BIG_ENDIAN);
 349             offset = offset +4;
 350             /* Some sort of message type? */
 351             proto_tree_add_item(sm_tree, hf_sm_eisup_msg_id, tvb, offset, 1, ENC_BIG_ENDIAN);
 352             offset = offset + 1;
 353             /* XXX Problem are tags 1 or two bytes???*/
 354             proto_tree_add_item(sm_tree, hf_sm_tag, tvb, offset, 2, ENC_BIG_ENDIAN);
 355
 356             tag = tvb_get_ntohs(tvb,offset);
 357             offset = offset +2;
 358             if (tag== 0x01ac) {
 359                 proto_tree_add_item(sm_tree, hf_sm_len, tvb, offset, 2, ENC_BIG_ENDIAN);
 360                 length = tvb_get_ntohs(tvb,offset);
 361                 offset = offset +2;
 362                 next_tvb = tvb_new_subset_length(tvb, offset, length);
 363                 call_dissector(sdp_handle, next_tvb, pinfo, sm_tree);
 364                 /*offset = offset+length;*/
 365
 366             }
 367             /*return;*/
 368             break;
 369         case SM_PROTOCOL_X114:
 370             /* XXX Reverse enginered so this may not be correct!!! */
 371             proto_tree_add_item(sm_tree, hf_sm_len, tvb, offset, 2, ENC_BIG_ENDIAN);
 372             length = tvb_get_ntohs(tvb,offset);
 373             offset = offset + 2;
 374             proto_item_set_len(ti, length + offset);
 375             /* The next stuff seems to be IP addr */
 376             proto_tree_add_item(sm_tree, hf_sm_ip_addr, tvb, offset, 4, ENC_BIG_ENDIAN);
 377             offset = offset + 4;
 378             proto_tree_add_item(sm_tree, hf_sm_context, tvb, offset, 4, ENC_BIG_ENDIAN);
 379             offset = offset +4;
 380             /* Some sort of message type? */
 381             proto_tree_add_item(sm_tree, hf_sm_eisup_msg_id, tvb, offset, 1, ENC_BIG_ENDIAN);
 382             offset = offset + 1;
 383             /* XXX Problem are tags 1 or two bytes???*/
 384             proto_tree_add_item(sm_tree, hf_sm_tag, tvb, offset, 2, ENC_BIG_ENDIAN);
 385
 386             tag = tvb_get_ntohs(tvb,offset);
 387             offset = offset +2;
 388             if (tag== 0x01ac) {
 389                 proto_tree_add_item(sm_tree, hf_sm_len, tvb, offset, 2, ENC_BIG_ENDIAN);
 390                 length = tvb_get_ntohs(tvb,offset);
 391                 offset = offset +2;
 392                 next_tvb = tvb_new_subset_length(tvb, offset, length);
 393                 call_dissector(sdp_handle, next_tvb, pinfo, sm_tree);
 394                 /*offset = offset+length;*/
 395
 396             }
 397             break;
 398         default:
 399             proto_tree_add_item(sm_tree, hf_sm_msg_id, tvb, offset, 2, ENC_BIG_ENDIAN);
 400             offset = offset +2;
 401             msg_type = tvb_get_ntohs(tvb,offset);
 402             proto_tree_add_uint_format_value(sm_tree, hf_sm_msg_type, tvb, offset, 2, msg_type,
 403                 "%s (0x%0x)", val_to_str_const(msg_type, sm_pdu_type_value, "reserved"),
 404                 msg_type);
 405             msg_type = tvb_get_ntohs(tvb,offset);
 406             offset = offset + 2;
 407             proto_tree_add_item(sm_tree, hf_sm_channel, tvb, offset, 2, ENC_BIG_ENDIAN);
 408             offset = offset + 2;
 409             proto_tree_add_item(sm_tree, hf_sm_bearer, tvb, offset, 2, ENC_BIG_ENDIAN);
 410             offset = offset +2;
 411             proto_tree_add_item(sm_tree, hf_sm_len, tvb, offset, 2, ENC_BIG_ENDIAN);
 412             length = tvb_get_ntohs(tvb,offset);
 413             offset = offset +2;
 414             proto_item_set_len(ti, 16);
 415
 416             if (length > 0) {
 417                 next_tvb = tvb_new_subset_length(tvb, offset, length);
 418
 419                 switch (msg_type) {
 420                 case PDU_MTP3_TO_SLT:
 421                 case PDU_MTP3_FROM_SLT:
 422                     call_dissector(mtp3_handle, next_tvb, pinfo, tree);
 423                     break;
 424                 case PDU_CONNECT_REQUEST:
 425                 case PDU_CONNECT_CONFIRM:
 426                     proto_tree_add_item(sm_tree, hf_sm_alignment_type, tvb, offset, 4, ENC_BIG_ENDIAN);
 427                     break;
 428                 case PDU_DISCONNECT_CONFIRM:
 429                 case PDU_DISCONNECT_INDICATION:
 430                     proto_tree_add_item(sm_tree, hf_sm_backhaul_reason_code, tvb, offset, 4, ENC_BIG_ENDIAN);
 431                     break;
 432                 case PDU_RETRIEVAL_REQUEST:
 433                 case PDU_RETRIEVAL_CONFIRM:
 434                     proto_tree_add_item(sm_tree, hf_sm_retrieval_type, tvb, offset, 4, ENC_BIG_ENDIAN);
 435                     if (msg_type == PDU_RETRIEVAL_CONFIRM && tvb_get_ntohl(tvb,offset) == 0x01) {
 436                         offset += 4;
 437                         proto_tree_add_item(sm_tree, hf_sm_bsn_num, tvb, offset, 4, ENC_BIG_ENDIAN);
 438                     }
 439                     break;
 440                 case PDU_LSC_REQUEST:
 441                 case PDU_LSC_CONFIRM:
 442                     proto_tree_add_item(sm_tree, hf_sm_lsc_state_type, tvb, offset, 4, ENC_BIG_ENDIAN);
 443                     break;
 444                 case PDU_LSC_INDICATION:
 445                     proto_tree_add_item(sm_tree, hf_sm_backhaul_event_code, tvb, offset, 4, ENC_BIG_ENDIAN);
 446                     bh_event_code = tvb_get_ntohl(tvb,offset);
 447                     if (bh_event_code == 0x02 || bh_event_code == 0x04) {
 448                         offset += 4;
 449                         proto_tree_add_item(sm_tree, hf_sm_linkdown_cause_code, tvb, offset, 4, ENC_BIG_ENDIAN);
 450                     } else if (bh_event_code == 0x06) {
 451                         offset += 4;
 452                         proto_tree_add_item(sm_tree, hf_sm_backhaul_cause_code, tvb, offset, 4, ENC_BIG_ENDIAN);
 453                     }
 454                     break;
 455                 case PDU_STAT_REQUEST:
 456                     proto_tree_add_item(sm_tree, hf_sm_stat_request_type, tvb, offset, 4, ENC_BIG_ENDIAN);
 457                     break;
 458                 default:
 459                     call_data_dissector(next_tvb, pinfo, tree);
 460                 }
 461             }
 462         }
 463     }
 464
 465     return tvb_captured_length(tvb);
 466 }
 467
 468 void
 469 proto_register_sm(void)
 470 {
 471     static hf_register_info hf[] = {
 472         { &hf_sm_sm_msg_type,
 473             { "SM Message Type",           "sm.sm_msg_type",
 474             FT_UINT32, BASE_HEX, NULL, 0x0,
 475             NULL, HFILL }
 476         },
 477         { &hf_sm_protocol,
 478             { "Protocol Type",           "sm.protocol",
 479             FT_UINT16, BASE_HEX, NULL, 0x0,
 480             NULL, HFILL }
 481         },
 482         { &hf_sm_msg_id,
 483             { "Message ID",           "sm.msgid",
 484             FT_UINT16, BASE_HEX, NULL, 0x0,
 485             NULL, HFILL }
 486         },
 487         { &hf_sm_msg_type,
 488             { "Message Type",           "sm.msg_type",
 489             FT_UINT16, BASE_HEX, NULL, 0x0,
 490             NULL, HFILL }
 491         },
 492         { &hf_sm_channel,
 493             { "Channel ID",           "sm.channel",
 494             FT_UINT16, BASE_HEX, NULL, 0x0,
 495             NULL, HFILL }
 496         },
 497         { &hf_sm_bearer,
 498             { "Bearer ID",           "sm.bearer",
 499             FT_UINT16, BASE_HEX, NULL, 0x0,
 500             NULL, HFILL }
 501         },
 502         { &hf_sm_len,
 503             { "Length",           "sm.len",
 504             FT_UINT16, BASE_DEC, NULL, 0x0,
 505             NULL, HFILL }
 506         },
 507         { &hf_sm_ip_addr,
 508             { "IPv4 address","sm.ip_addr",
 509             FT_IPv4,BASE_NONE,  NULL, 0x0,
 510             NULL, HFILL }
 511         },
 512         { &hf_sm_context,
 513             { "Context","sm.context",
 514             FT_UINT32, BASE_DEC, NULL, 0x0,
 515             "Context(guesswork!)", HFILL }
 516         },
 517         { &hf_sm_eisup_msg_id,
 518             { "Message id","sm.eisup_message_id",
 519             FT_UINT8, BASE_DEC, NULL, 0x0,
 520             "Message id(guesswork!)", HFILL }
 521         },
 522         { &hf_sm_tag,
 523             { "Tag","sm.tag",
 524             FT_UINT16, BASE_DEC, NULL, 0x0,
 525             "Tag(guesswork!)", HFILL }
 526         },
 527         { &hf_sm_alignment_type,
 528           { "Alignment type","sm.connect_type",
 529             FT_UINT32, BASE_HEX, VALS(sm_alignment_type), 0x0,
 530             NULL, HFILL }
 531         },
 532         { &hf_sm_backhaul_reason_code,
 533           { "Backhaul reason code","sm.backhaul_reason",
 534             FT_UINT32, BASE_HEX, VALS(sm_backhaul_reason_code), 0x0,
 535             NULL, HFILL }
 536         },
 537         { &hf_sm_backhaul_event_code,
 538           { "Backhaul event code","sm.backhaul_event",
 539             FT_UINT32, BASE_HEX, VALS(sm_backhaul_event_code), 0x0,
 540                         NULL, HFILL }
 541         },
 542         { &hf_sm_backhaul_cause_code,
 543           { "Backhaul cause code","sm.backhaul_cause",
 544             FT_UINT32, BASE_HEX, VALS(sm_backhaul_cause_code), 0x0,
 545             NULL, HFILL }
 546         },
 547         { &hf_sm_linkdown_cause_code,
 548           { "Link down cause","sm.linkdown_reason",
 549             FT_UINT32, BASE_HEX, VALS(sm_linkdown_cause_code), 0x0,
 550             NULL, HFILL }
 551         },
 552
 553         { &hf_sm_retrieval_type,
 554           { "Retrieval type","sm.retrieval_type",
 555             FT_UINT32, BASE_HEX, VALS(sm_retrieval_type), 0x0,
 556             NULL, HFILL }
 557         },
 558         { &hf_sm_lsc_state_type,
 559           { "LSC Request type","sm.lsc_state_type",
 560             FT_UINT32, BASE_HEX, VALS(sm_lsc_state_type), 0x0,
 561             NULL, HFILL }
 562         },
 563         { &hf_sm_stat_request_type,
 564           { "Statistic request type","sm.stat_request_type",
 565             FT_UINT32, BASE_HEX, VALS(sm_stat_request_type), 0x0,
 566             NULL, HFILL }
 567         },
 568         { &hf_sm_bsn_num,
 569           { "BSN","sm.bsn_num",
 570             FT_UINT32, BASE_DEC, NULL, 0x0,
 571             NULL, HFILL }
 572         },
 573
 574     };
 575
 576 /* Setup protocol subtree array */
 577     static int *ett[] = {
 578         &ett_sm,
 579     };
 580
 581 /* Register the protocol name and description */
 582     proto_sm = proto_register_protocol("Cisco Session Management",
 583         "SM", "sm");
 584
 585     register_dissector("sm", dissect_sm, proto_sm);
 586
 587 /* Required function calls to register the header fields and subtrees used */
 588     proto_register_field_array(proto_sm, hf, array_length(hf));
 589     proto_register_subtree_array(ett, array_length(ett));
 590 }
 591
 592 void
 593 proto_reg_handoff_sm(void)
 594 {
 595     sdp_handle  = find_dissector_add_dependency("sdp", proto_sm);
 596     mtp3_handle = find_dissector_add_dependency("mtp3", proto_sm);
 597     q931_handle = find_dissector_add_dependency("q931", proto_sm);
 598 }
 599
 600 /*
 601  * Editor modelines  -  https://www.wireshark.org/tools/modelines.html
 602  *
 603  * Local variables:
 604  * c-basic-offset: 4
 605  * tab-width: 8
 606  * indent-tabs-mode: nil
 607  * End:
 608  *
 609  * vi: set shiftwidth=4 tabstop=8 expandtab:
 610  * :indentSize=4:tabSize=8:noTabs=true:
 611  */