?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
Revert "TODO epan/dissectors/asn1/kerberos/packet-kerberos-template.c new GSS flags"
[wireshark-sm.git] / epan / dissectors / packet-mojito.c
blob766fc3df6b204e0cd4874d337920e055d40302d7
1 /* packet-mojito.c
2 * Routines for Dissecting the Gnutella Mojito DHT Protocol
3 * http://limewire.negatis.com/index.php?title=Mojito_Message_Format
4 *
5 * Copyright (c) 2008 by Travis Dawson <travis.dawson@sprint.com>
6 *
7 * Wireshark - Network traffic analyzer
8 * By Gerald Combs <gerald@wireshark.org>
9 * Copyright 1998 Gerald Combs
10 *
11 * SPDX-License-Identifier: GPL-2.0-or-later
12 */
13
14 #include "config.h"
15
16 #include <epan/packet.h>
17 #include <epan/expert.h>
18
19 void proto_register_mojito(void);
20 void proto_reg_handoff_mojito(void);
21
22 static dissector_handle_t mojito_handle;
23
24 #define MOJITO_HEADER_LENGTH 38
25
26 /* All the Defines for OpCodes */
27 #define MOJITO_PING_REQUEST 1
28 #define MOJITO_PING_RESPONSE 2
29 #define MOJITO_STORE_REQUEST 3
30 #define MOJITO_STORE_RESPONSE 4
31 #define MOJITO_FIND_NODE_REQUEST 5
32 #define MOJITO_FIND_NODE_RESPONSE 6
33 #define MOJITO_FIND_VALUE_REQUEST 7
34 #define MOJITO_FIND_VALUE_RESPONSE 8
35 #define MOJITO_STATS_REQUEST_DEPRECATED 9
36 #define MOJITO_STATS_RESPONSE_DEPRECATED 10
37
38 /* Initialize the protocol and registered fields */
39 static int proto_mojito;
40
41 /* Start of fields */
42 static int hf_mojito_messageid;
43 static int hf_mojito_fdhtmessage;
44 static int hf_mojito_mjrversion;
45 static int hf_mojito_mnrversion;
46 static int hf_mojito_length;
47 static int hf_mojito_opcode;
48 static int hf_mojito_vendor;
49 static int hf_mojito_origmjrversion;
50 static int hf_mojito_origmnrversion;
51 static int hf_mojito_kuid;
52 static int hf_mojito_socketaddress_version;
53 static int hf_mojito_socketaddress_ipv4;
54 static int hf_mojito_socketaddress_ipv6;
55 static int hf_mojito_socketaddress_port;
56 static int hf_mojito_instanceid;
57 static int hf_mojito_flags;
58 static int hf_mojito_flags_shutdown;
59 static int hf_mojito_flags_firewalled;
60 static int hf_mojito_extendedlength;
61 static int hf_mojito_kuidcount;
62 static int hf_mojito_bigintegerlen;
63 static int hf_mojito_bigintegerval;
64 static int hf_mojito_dhtvaluetype;
65 static int hf_mojito_sectokenlen;
66 static int hf_mojito_sectoken;
67 static int hf_mojito_contactcount;
68 static int hf_mojito_contactvendor;
69 static int hf_mojito_contactversion;
70 static int hf_mojito_contactkuid;
71 static int hf_mojito_dhtvaluecount;
72 static int hf_mojito_dhtvalue_kuid;
73 static int hf_mojito_target_kuid;
74 static int hf_mojito_dhtvalue_valuetype;
75 static int hf_mojito_dhtvalue_version;
76 static int hf_mojito_dhtvalue_length;
77 static int hf_mojito_dhtvalue_value;
78 static int hf_mojito_bigint_value_one;
79 static int hf_mojito_bigint_value_two;
80 static int hf_mojito_bigint_value_three;
81 static int hf_mojito_bigint_value_four;
82 static int hf_mojito_storestatuscode_count;
83 static int hf_mojito_storestatuscode_code;
84 static int hf_mojito_storestatuscode_kuid;
85 static int hf_mojito_storestatuscode_secondary_kuid;
86 static int hf_mojito_requestload;
87 #if 0
88 static int hf_mojito_startflag;
89 static int hf_mojito_endflag;
90 static int hf_mojito_priorityflag;
91 #endif
92 static int hf_mojito_opcode_data;
93
94 /* Initialize the subtree pointers */
95 static int ett_mojito;
96 static int ett_mojito_header;
97 static int ett_mojito_header_version;
98 static int ett_mojito_contact;
99 static int ett_mojito_contact_version;
100 static int ett_mojito_socket_address;
101 static int ett_mojito_flags;
102 static int ett_mojito_bigint;
103 static int ett_mojito_opcode;
104 static int ett_mojito_dht_version;
105 static int ett_mojito_dht;
106 static int ett_mojito_status_code;
107 static int ett_mojito_kuids;
108
109 static expert_field ei_mojito_socketaddress_unknown;
110 static expert_field ei_mojito_bigint_unsupported;
111
112 typedef struct mojito_header_data {
113 uint8_t opcode;
114 uint32_t payloadlength;
115 } mojito_header_data_t;
116
117 /* Values for OPCode Flags */
118 static const value_string opcodeflags[] = {
119 { MOJITO_PING_REQUEST, "PING REQUEST" },
120 { MOJITO_PING_RESPONSE, "PING RESPONSE" },
121 { MOJITO_STORE_REQUEST, "STORE REQUEST" },
122 { MOJITO_STORE_RESPONSE, "STORE RESPONSE" },
123 { MOJITO_FIND_NODE_REQUEST, "FIND NODE REQUEST" },
124 { MOJITO_FIND_NODE_RESPONSE, "FIND NODE RESPONSE" },
125 { MOJITO_FIND_VALUE_REQUEST, "FIND VALUE REQUEST" },
126 { MOJITO_FIND_VALUE_RESPONSE, "FIND VALUE RESPONSE" },
127 { MOJITO_STATS_REQUEST_DEPRECATED, "STATS REQUEST (DEPRECATED)" },
128 { MOJITO_STATS_RESPONSE_DEPRECATED, "STATS RESPONSE (DEPRECATED)" },
129 { 0, NULL }
130 };
131
132 static const value_string statuscodeflags[] = {
133 { 1, "OK" },
134 { 2, "Error" },
135 { 0, NULL }
136 };
137
138 #if 0
139 static const value_string vendorcodeflags[] = {
140 { 0, "MESSAGES_SUPPORTED" },
141 { 4, "HOPS_FLOW" },
142 { 5, "CRAWLER_PING" },
143 { 6, "CRAWLER_PONG" },
144 { 7, "UDP_CONNECT_BACK" },
145 { 8, "UDP_CONNECT_BACK_REDIR" },
146 { 9, "NGTH_MINUS_PAYLOAD" },
147 { 10, "CAPABILITIES" },
148 { 11, "LIME_ACK" },
149 { 12, "REPLY_NUMBER" },
150 { 13, "OOB_PROXYING_CONTROL" },
151 { 14, "GIVE_STATS" },
152 { 15, "STATISTICS" },
153 { 16, "SIMPP_REQ" },
154 { 17, "SIMPP" },
155 { 21, "PUSH_PROXY_REQ" },
156 { 22, "PUSH_PROXY_ACK" },
157 { 23, "UDP_HEAD_PING" },
158 { 24, "UDP_HEAD_PONG" },
159 { 25, "HEADER_UPDATE" },
160 { 26, "UPDATE_REQ" },
161 { 27, "UPDATE_RESP" },
162 { 28, "CONTENT_REQ" },
163 { 29, "CONTENT_RESP" },
164 { 30, "INSPECTION_REQ" },
165 { 31, "INSPECTION_RESP" },
166 { 32, "ADVANCED_TOGGLE" },
167 { 33, "DHT_CONTACTS" },
168
169 { 0, NULL }
170 };
171 #endif
172
173 static int
174 dissect_mojito_address(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,
175 int offset, const char *title)
176 {
177 int offset_start;
178 uint8_t socket_address_version;
179 proto_tree *socket_tree;
180 proto_item *socket_item;
181
182 offset_start = offset;
183
184 /* new subtree for socket address*/
185 socket_address_version = tvb_get_uint8(tvb, offset);
186 socket_tree = proto_tree_add_subtree(tree, tvb, offset, 1, ett_mojito_socket_address, &socket_item, title);
187
188 proto_tree_add_item(socket_tree, hf_mojito_socketaddress_version, tvb, offset, 1, ENC_NA);
189 offset += 1;
190
191 switch (socket_address_version)
192 {
193 case FT_IPv4_LEN: /* IPv4 */
194
195 proto_tree_add_item(socket_tree, hf_mojito_socketaddress_ipv4, tvb, offset, 4, ENC_BIG_ENDIAN);
196 offset += 4;
197 break;
198
199 case FT_IPv6_LEN: /* IPv6 */
200
201 proto_tree_add_item(socket_tree, hf_mojito_socketaddress_ipv6, tvb, offset, 16, ENC_NA);
202 offset += 16;
203 break;
204
205 default: /* ABORT */
206 expert_add_info(pinfo, socket_item, &ei_mojito_socketaddress_unknown);
207 return 0;
208 }
209
210 proto_tree_add_item(socket_tree, hf_mojito_socketaddress_port, tvb, offset, 2, ENC_BIG_ENDIAN);
211 offset += 2;
212
213 proto_item_set_len(socket_item, offset - offset_start);
214
215 return offset;
216 }
217
218 static int
219 dissect_mojito_contact(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, int contact_id)
220 {
221 int offset_start;
222 proto_tree *contact_tree, *version_tree;
223 proto_item *contact_item, *version_item;
224
225 offset_start = offset;
226
227 if (contact_id > 0)
228 {
229 contact_tree = proto_tree_add_subtree_format(tree, tvb, offset, 1, ett_mojito_contact, &contact_item, "Contact #%d", contact_id);
230 }
231 else
232 {
233 contact_tree = proto_tree_add_subtree(tree, tvb, offset, 1, ett_mojito_contact, &contact_item, "Contact");
234 }
235
236 proto_tree_add_item(contact_tree, hf_mojito_contactvendor, tvb, offset, 4, ENC_ASCII);
237 offset += 4;
238
239 version_item = proto_tree_add_item(contact_tree, hf_mojito_contactversion, tvb, offset, 2, ENC_BIG_ENDIAN);
240 version_tree = proto_item_add_subtree(version_item, ett_mojito_contact_version);
241 proto_tree_add_item(version_tree, hf_mojito_mjrversion, tvb, offset, 1, ENC_BIG_ENDIAN);
242 offset += 1;
243 proto_tree_add_item(version_tree, hf_mojito_mnrversion, tvb, offset, 1, ENC_BIG_ENDIAN);
244 offset += 1;
245
246 proto_tree_add_item(contact_tree, hf_mojito_contactkuid, tvb, offset, 20, ENC_NA);
247 offset += 20;
248
249 offset = dissect_mojito_address(tvb, pinfo, contact_tree, offset, "Socket Address");
250
251 if (offset == 0)
252 {
253 return 0;
254 }
255
256 proto_item_set_len(contact_item, offset - offset_start);
257
258 return offset - offset_start;
259 }
260
261 static int
262 dissect_mojito_header(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,
263 int offset, mojito_header_data_t* header_data)
264 {
265 proto_tree *header_tree, *version_tree, *contact_tree, *flag_tree;
266 proto_item *header_item, *contact_item, *flag_item;
267 int start_offset = offset;
268 int contact_start_offset;
269
270 header_tree = proto_tree_add_subtree(tree, tvb, offset, 61, ett_mojito_header, &header_item, "Gnutella Header");
271
272 proto_tree_add_item(header_tree, hf_mojito_messageid, tvb, offset, 16, ENC_NA);
273 offset += 16;
274
275 proto_tree_add_item(header_tree, hf_mojito_fdhtmessage, tvb, offset, 1, ENC_BIG_ENDIAN);
276 offset += 1;
277
278 version_tree = proto_tree_add_subtree(header_tree, tvb, offset, 2, ett_mojito_header_version, NULL, "Version");
279
280 proto_tree_add_item(version_tree, hf_mojito_mjrversion, tvb, offset, 1, ENC_BIG_ENDIAN);
281 offset += 1;
282 proto_tree_add_item(version_tree, hf_mojito_mnrversion, tvb, offset, 1, ENC_BIG_ENDIAN);
283 offset += 1;
284
285 /* Payload Length : in Little Endian */
286 header_data->payloadlength = tvb_get_letohl(tvb, offset);
287 proto_tree_add_item(header_tree, hf_mojito_length, tvb, offset, 4, ENC_LITTLE_ENDIAN);
288 offset += 4;
289
290 header_data->opcode = tvb_get_uint8(tvb, offset);
291 col_set_str(pinfo->cinfo, COL_INFO, val_to_str_const(header_data->opcode, opcodeflags, "Unknown"));
292 proto_tree_add_item(header_tree, hf_mojito_opcode, tvb, offset, 1, ENC_BIG_ENDIAN);
293 offset += 1;
294
295 contact_start_offset = offset;
296 contact_tree = proto_tree_add_subtree(header_tree, tvb, offset, 35, ett_mojito_contact, &contact_item, "Originating Contact");
297
298 proto_tree_add_item(contact_tree, hf_mojito_vendor, tvb, offset, 4, ENC_ASCII);
299 offset += 4;
300
301 version_tree = proto_tree_add_subtree(contact_tree, tvb, offset, 2, ett_mojito_contact_version, NULL, "Contact Version");
302
303 proto_tree_add_item(version_tree, hf_mojito_origmjrversion, tvb, offset, 1, ENC_BIG_ENDIAN);
304 offset += 1;
305 proto_tree_add_item(version_tree, hf_mojito_origmnrversion, tvb, offset, 1, ENC_BIG_ENDIAN);
306 offset += 1;
307
308 proto_tree_add_item(contact_tree, hf_mojito_kuid, tvb, offset, 20, ENC_NA);
309 offset += 20;
310
311 offset = dissect_mojito_address(tvb, pinfo, contact_tree, offset, "Socket Address");
312
313 if (offset == 0)
314 {
315 return 0;
316 }
317
318 proto_item_set_len(contact_item, offset - contact_start_offset);
319
320 proto_tree_add_item(header_tree, hf_mojito_instanceid, tvb, offset, 1, ENC_BIG_ENDIAN);
321 offset += 1;
322
323 /*Flags*/
324 flag_item = proto_tree_add_item(header_tree, hf_mojito_flags, tvb, offset, 1, ENC_BIG_ENDIAN);
325 flag_tree = proto_item_add_subtree(flag_item, ett_mojito_flags);
326 proto_tree_add_item(flag_tree, hf_mojito_flags_shutdown, tvb, offset, 1, ENC_BIG_ENDIAN);
327 proto_tree_add_item(flag_tree, hf_mojito_flags_firewalled, tvb, offset, 1, ENC_BIG_ENDIAN);
328 offset += 1;
329
330 proto_tree_add_item(header_tree, hf_mojito_extendedlength, tvb, offset, 2, ENC_BIG_ENDIAN);
331 offset += 2;
332
333 proto_item_set_len(header_item, offset-start_offset);
334 return offset;
335 }
336
337 static void
338 dissect_mojito_ping_response(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset)
339 {
340 uint8_t bigintlen;
341 proto_tree *bigint_tree;
342 proto_item *bigint_item;
343
344 offset = dissect_mojito_address(tvb, pinfo, tree,
345 offset, "Requester's External Socket Address");
346
347 if (offset == 0)
348 {
349 return;
350 }
351
352 /* BigInt subtree */
353 bigintlen = tvb_get_uint8(tvb, offset);
354 bigint_tree = proto_tree_add_subtree(tree, tvb, offset, bigintlen + 1, ett_mojito_bigint, &bigint_item, "Estimated DHT size");
355
356 proto_tree_add_item(bigint_tree, hf_mojito_bigintegerlen, tvb, offset, 1, ENC_BIG_ENDIAN);
357 offset += 1;
358
359 switch (bigintlen)
360 {
361 case 1: /* 1 byte */
362 proto_tree_add_item(bigint_tree, hf_mojito_bigint_value_one, tvb, offset, bigintlen, ENC_BIG_ENDIAN);
363 break;
364
365 case 2: /* 2 byte */
366 proto_tree_add_item(bigint_tree, hf_mojito_bigint_value_two, tvb, offset, bigintlen, ENC_BIG_ENDIAN);
367 break;
368
369 case 3: /* 3 byte */
370 proto_tree_add_item(bigint_tree, hf_mojito_bigint_value_three, tvb, offset, bigintlen, ENC_BIG_ENDIAN);
371 break;
372
373 case 4: /* 4 byte */
374 proto_tree_add_item(bigint_tree, hf_mojito_bigint_value_four, tvb, offset, bigintlen, ENC_BIG_ENDIAN);
375 break;
376 default: /* ABORT */
377 expert_add_info(pinfo, bigint_item, &ei_mojito_bigint_unsupported);
378 return;
379 }
380
381 /* BigInt Value */
382 proto_tree_add_item(bigint_tree, hf_mojito_bigintegerval, tvb, offset, bigintlen, ENC_NA);
383 }
384
385 static void
386 dissect_mojito_store_request(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset)
387 {
388 proto_tree *dht_tree, *version_tree;
389 proto_item *dht_item, *version_item;
390 uint8_t ii, contactcount;
391 uint8_t sectokenlen = tvb_get_uint8(tvb, offset);
392 uint16_t dhtvaluelength;
393 int contact_offset, start_offset;
394
395 proto_tree_add_item(tree, hf_mojito_sectokenlen, tvb, offset, 1, ENC_BIG_ENDIAN);
396 offset += 1;
397
398 proto_tree_add_item(tree, hf_mojito_sectoken, tvb, offset, sectokenlen, ENC_NA);
399 offset += sectokenlen;
400
401 /* Contact count */
402 proto_tree_add_item(tree, hf_mojito_dhtvaluecount, tvb, offset, 1, ENC_BIG_ENDIAN);
403 contactcount = tvb_get_uint8(tvb, offset);
404 offset += 1;
405
406 /* For each Contact, display the info */
407 for (ii = 0; ii < contactcount; ii++)
408 {
409 dht_tree = proto_tree_add_subtree_format(tree, tvb, offset, 1, ett_mojito_dht, &dht_item, "DHTValue #%d", ii+1);
410 start_offset = offset;
411 contact_offset = dissect_mojito_contact(tvb, pinfo, dht_tree, offset, -1);
412 if (contact_offset == 0)
413 return;
414 offset += contact_offset;
415
416 proto_tree_add_item(dht_tree, hf_mojito_dhtvalue_kuid, tvb, offset, 20, ENC_NA);
417 offset += 20;
418
419 proto_tree_add_item(dht_tree, hf_mojito_dhtvalue_valuetype, tvb, offset, 4, ENC_ASCII);
420 offset += 4;
421
422 /* Version */
423 version_item = proto_tree_add_item(dht_tree, hf_mojito_dhtvalue_version, tvb, offset, 2, ENC_BIG_ENDIAN);
424 version_tree = proto_item_add_subtree(version_item, ett_mojito_dht_version);
425
426 proto_tree_add_item(version_tree, hf_mojito_mjrversion, tvb, offset, 1, ENC_BIG_ENDIAN);
427 offset += 1;
428 proto_tree_add_item(version_tree, hf_mojito_mnrversion, tvb, offset, 1, ENC_BIG_ENDIAN);
429 offset += 1;
430
431 dhtvaluelength = tvb_get_ntohs(tvb, offset);
432 proto_tree_add_item(dht_tree, hf_mojito_dhtvalue_length, tvb, offset, 2, ENC_BIG_ENDIAN);
433 offset += 2;
434
435 proto_tree_add_item(dht_tree, hf_mojito_dhtvalue_value, tvb, offset, dhtvaluelength, ENC_ASCII);
436 offset += dhtvaluelength;
437
438 proto_item_set_len(dht_item, offset-start_offset);
439 }
440 }
441
442 static void
443 dissect_mojito_store_response(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, int offset)
444 {
445 proto_tree *sc_tree;
446 proto_item *sc_item;
447 uint8_t ii, contactcount = tvb_get_uint8(tvb, offset);
448 uint16_t dhtvaluelength;
449 int start_offset;
450
451 proto_tree_add_item(tree, hf_mojito_storestatuscode_count, tvb, offset, 1, ENC_BIG_ENDIAN);
452 offset += 1;
453
454 /* For each Contact, display the info */
455 for (ii = 0; ii < contactcount; ii++)
456 {
457 sc_tree = proto_tree_add_subtree_format(tree, tvb, offset, 23, ett_mojito_status_code, &sc_item, "Status Code %d", ii+1);
458
459 start_offset = offset;
460
461 /*Primary KUID */
462 proto_tree_add_item(sc_tree, hf_mojito_storestatuscode_kuid, tvb, offset, 20, ENC_NA);
463 offset += 20;
464
465 if (tvb_reported_length_remaining(tvb, offset+3) > 0)
466 {
467 /* Must be a secondary KUID */
468 proto_tree_add_item(sc_tree, hf_mojito_storestatuscode_secondary_kuid, tvb, offset, 20, ENC_NA);
469 offset += 20;
470 }
471
472 proto_tree_add_item(sc_tree, hf_mojito_storestatuscode_code, tvb, offset, 2, ENC_BIG_ENDIAN);
473 offset += 2;
474
475 dhtvaluelength = tvb_get_ntohs(tvb, offset);
476 proto_tree_add_item(sc_tree, hf_mojito_dhtvalue_length, tvb, offset, 2, ENC_BIG_ENDIAN);
477 offset += 2;
478
479 proto_tree_add_item(sc_tree, hf_mojito_dhtvalue_value, tvb, offset, dhtvaluelength, ENC_ASCII);
480 offset += dhtvaluelength;
481
482 proto_item_set_len(sc_item, offset-start_offset);
483 }
484 }
485
486 static void
487 dissect_mojito_find_node_response(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset)
488 {
489 uint8_t ii, contactcount;
490 uint8_t sectokenlen = tvb_get_uint8(tvb, offset);
491 int contact_offset;
492
493 proto_tree_add_item(tree, hf_mojito_sectokenlen, tvb, offset, 1, ENC_BIG_ENDIAN);
494 offset += 1;
495
496 proto_tree_add_item(tree, hf_mojito_sectoken, tvb, offset, sectokenlen, ENC_NA);
497 offset += sectokenlen;
498
499 contactcount = tvb_get_uint8(tvb, offset);
500 proto_tree_add_item(tree, hf_mojito_contactcount, tvb, offset, 1, ENC_BIG_ENDIAN);
501 offset += 1;
502
503 /* For each Contact, display the info */
504 for (ii = 0; ii < contactcount; ii++)
505 {
506 contact_offset = dissect_mojito_contact(tvb, pinfo, tree, offset, ii+1);
507 if (contact_offset == 0)
508 return;
509 offset += contact_offset;
510 }
511 }
512
513 static void
514 dissect_mojito_find_value_request(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, int offset)
515 {
516 proto_tree *kuid_tree;
517 uint8_t i, kuidcount;
518
519 if (!tree)
520 return;
521
522 proto_tree_add_item(tree, hf_mojito_target_kuid, tvb, offset, 20, ENC_NA);
523 offset += 20;
524
525 kuidcount = tvb_get_uint8(tvb, offset);
526
527 kuid_tree = proto_tree_add_subtree(tree, tvb, offset, (20 * kuidcount) + 1, ett_mojito_kuids, NULL, "Secondary KUID\'s");
528
529 proto_tree_add_item(kuid_tree, hf_mojito_kuidcount, tvb, offset, 1, ENC_BIG_ENDIAN);
530 offset += 1;
531
532 /* All the Secondary KUID's */
533 for (i = 0; i < kuidcount; i++)
534 {
535 proto_tree_add_item(kuid_tree, hf_mojito_kuid, tvb, offset, 20, ENC_NA);
536 offset += 20;
537 }
538
539 proto_tree_add_item(tree, hf_mojito_dhtvaluetype, tvb, offset, 4, ENC_ASCII);
540 /*offset += 4;*/
541 }
542
543 static void
544 dissect_mojito_find_value_response(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset)
545 {
546 proto_tree *dht_tree, *version_tree, *kuid_tree;
547 proto_item *dht_item, *version_item;
548 uint16_t dhtvaluelength;
549 int contact_offset, start_offset;
550 uint8_t ii, dhtvaluescount, kuidcount;
551
552 proto_tree_add_item(tree, hf_mojito_requestload, tvb, offset, 4, ENC_BIG_ENDIAN);
553 offset += 4;
554
555 dhtvaluescount = tvb_get_uint8(tvb, offset);
556 proto_tree_add_item(tree, hf_mojito_dhtvaluecount, tvb, offset, 1, ENC_BIG_ENDIAN);
557 offset += 1;
558
559 /* For each Contact, display the info */
560 for (ii = 0; ii < dhtvaluescount; ii++)
561 {
562 dht_tree = proto_tree_add_subtree_format(tree, tvb, offset, 1, ett_mojito_dht, &dht_item, "DHTValue #%d", ii+1);
563 start_offset = offset;
564 contact_offset = dissect_mojito_contact(tvb, pinfo, dht_tree, offset, -1);
565 if (contact_offset == 0)
566 return;
567
568 offset += contact_offset;
569
570 proto_tree_add_item(dht_tree, hf_mojito_dhtvalue_kuid, tvb, offset, 20, ENC_NA);
571 offset += 20;
572
573 proto_tree_add_item(dht_tree, hf_mojito_dhtvalue_valuetype, tvb, offset, 4, ENC_ASCII);
574 offset += 4;
575
576 /* Version */
577 version_item = proto_tree_add_item(dht_tree, hf_mojito_dhtvalue_version, tvb, offset, 2, ENC_BIG_ENDIAN);
578 version_tree = proto_item_add_subtree(version_item, ett_mojito_dht_version);
579
580 proto_tree_add_item(version_tree, hf_mojito_mjrversion, tvb, offset, 1, ENC_BIG_ENDIAN);
581 offset += 1;
582 proto_tree_add_item(version_tree, hf_mojito_mnrversion, tvb, offset, 1, ENC_BIG_ENDIAN);
583 offset += 1;
584
585 /* Length */
586 dhtvaluelength = tvb_get_ntohs(tvb, offset);
587 proto_tree_add_item(dht_tree, hf_mojito_dhtvalue_length, tvb, offset, 2, ENC_BIG_ENDIAN);
588 offset += 2;
589
590 /* Value */
591 proto_tree_add_item(dht_tree, hf_mojito_dhtvalue_value, tvb, offset, dhtvaluelength, ENC_ASCII);
592 offset += dhtvaluelength;
593
594 proto_item_set_len(dht_item, offset-start_offset);
595 }
596
597 /*KUID Count */
598 kuidcount = tvb_get_uint8(tvb, offset);
599 kuid_tree = proto_tree_add_subtree(tree, tvb, offset, (20 * kuidcount) + 1, ett_mojito_kuids, NULL, "Secondary KUID\'s");
600 proto_tree_add_item(kuid_tree, hf_mojito_kuidcount, tvb, offset, 1, ENC_BIG_ENDIAN);
601 offset += 1;
602
603 /* All the Secondary KUID's */
604 for (ii = 0; ii < kuidcount; ii++)
605 {
606 proto_tree_add_item(kuid_tree, hf_mojito_kuid, tvb, offset, 20, ENC_NA);
607 offset += 20;
608 }
609 }
610
611 static int
612 dissect_mojito(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_)
613 {
614 proto_tree *mojito_tree, *opcode_tree;
615 proto_item *ti;
616 mojito_header_data_t header_data;
617 int offset = 0;
618
619 col_set_str(pinfo->cinfo, COL_PROTOCOL, "Mojito");
620 col_clear(pinfo->cinfo, COL_INFO);
621
622 /* Add a new item to the tree */
623 ti = proto_tree_add_item(tree, proto_mojito, tvb, 0, -1, ENC_NA);
624 mojito_tree = proto_item_add_subtree(ti, ett_mojito);
625
626 offset = dissect_mojito_header(tvb, pinfo, mojito_tree, offset, &header_data);
627 if (offset == 0) /* Some error occurred */
628 return 0;
629
630 opcode_tree = proto_tree_add_subtree_format(mojito_tree, tvb,
631 offset, header_data.payloadlength - MOJITO_HEADER_LENGTH,
632 ett_mojito_opcode, NULL, "Opcode specific data (%s)",
633 val_to_str_const(header_data.opcode, opcodeflags, "Unknown"));
634
635 /* Now use the opcode to figure out what to do next */
636 switch (header_data.opcode)
637 {
638 case MOJITO_PING_RESPONSE: /* PING RESPONSE */
639 dissect_mojito_ping_response(tvb, pinfo, opcode_tree, offset);
640 break;
641
642 case MOJITO_STORE_REQUEST: /* STORE REQUEST */
643 dissect_mojito_store_request(tvb, pinfo, opcode_tree, offset);
644 break;
645
646 case MOJITO_STORE_RESPONSE: /* STORE RESPONSE */
647 dissect_mojito_store_response(tvb, pinfo, opcode_tree, offset);
648 break;
649
650 case MOJITO_FIND_NODE_REQUEST: /* FIND NODE REQUEST */
651 proto_tree_add_item(opcode_tree, hf_mojito_target_kuid, tvb, offset, 20, ENC_NA);
652 break;
653
654 case MOJITO_FIND_NODE_RESPONSE: /* FIND NODE RESPONSE */
655 dissect_mojito_find_node_response(tvb, pinfo, opcode_tree, offset);
656 break;
657
658 case MOJITO_FIND_VALUE_REQUEST: /* FIND VALUE REQUEST */
659 dissect_mojito_find_value_request(tvb, pinfo, opcode_tree, offset);
660 break;
661
662 case MOJITO_FIND_VALUE_RESPONSE: /* FIND VALUE RESPONSE */
663 dissect_mojito_find_value_response(tvb, pinfo, opcode_tree, offset);
664 break;
665
666 case MOJITO_PING_REQUEST: /* PING REQUEST */
667 case MOJITO_STATS_REQUEST_DEPRECATED: /* STATS REQUEST (DEPRECATED) */
668 case MOJITO_STATS_RESPONSE_DEPRECATED: /* STATS RESPONSE (DEPRECATED) */
669 default:
670 if (header_data.payloadlength - MOJITO_HEADER_LENGTH > 0)
671 proto_tree_add_item(opcode_tree, hf_mojito_opcode_data, tvb,
672 offset, header_data.payloadlength - MOJITO_HEADER_LENGTH, ENC_NA);
673 break;
674 }
675
676 return tvb_captured_length(tvb);
677 }
678
679 static bool dissect_mojito_heuristic (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data)
680 {
681 /*
682 Test the overall length to make sure it's at least 61 bytes (the header)
683 Test to make sure that it's of type 44 (mojito)
684 Test to make sure that the length field is there and correct
685 (tvb_get_letohl(tvb, 20) + 23) == tvb_length(tvb)
686 */
687 if ((tvb_captured_length(tvb) >= 60) &&
688 (tvb_get_uint8(tvb, 16) == 68) &&
689 ((tvb_get_letohl(tvb, 19) + 23) == tvb_reported_length(tvb)))
690 {
691 dissect_mojito(tvb, pinfo, tree, data);
692 return true;
693 }
694
695 return false;
696 }
697
698 /* Register the mojito dissector */
699 void
700 proto_register_mojito(void)
701 {
702 expert_module_t* expert_mojito;
703
704 static hf_register_info hf[] = {
705 { &hf_mojito_dhtvaluecount,
706 { "DHTValue Count", "mojito.dhtvaluecount",
707 FT_UINT8, BASE_DEC,
708 NULL, 0x0,
709 NULL, HFILL }
710 },
711 { &hf_mojito_messageid,
712 { "Message ID", "mojito.messageid",
713 FT_BYTES, BASE_NONE,
714 NULL, 0x0,
715 NULL, HFILL }
716 },
717 { &hf_mojito_requestload,
718 { "Request Load", "mojito.requestload",
719 FT_UINT32, BASE_DEC,
720 NULL, 0x0,
721 NULL, HFILL }
722 },
723 { &hf_mojito_fdhtmessage,
724 { "FDHTMessage", "mojito.fdhtmessage",
725 FT_UINT8, BASE_HEX,
726 NULL, 0x0,
727 NULL, HFILL }
728 },
729 { &hf_mojito_mjrversion,
730 { "Major Version", "mojito.majorversion",
731 FT_UINT8, BASE_DEC,
732 NULL, 0x0,
733 NULL, HFILL }
734 },
735 { &hf_mojito_mnrversion,
736 { "Minor Version", "mojito.minorversion",
737 FT_UINT8, BASE_DEC,
738 NULL, 0x0,
739 NULL, HFILL }
740 },
741 { &hf_mojito_length,
742 { "Payload Length", "mojito.payloadlength",
743 FT_UINT32, BASE_DEC,
744 NULL, 0x0,
745 NULL, HFILL }
746 },
747 { &hf_mojito_opcode,
748 { "OPCode", "mojito.opcode",
749 FT_UINT8, BASE_DEC,
750 VALS(opcodeflags), 0x0,
751 NULL, HFILL }
752 },
753 { &hf_mojito_vendor,
754 { "Vendor", "mojito.vendor",
755 FT_STRING, BASE_NONE,
756 NULL, 0x0,
757 NULL, HFILL }
758 },
759 { &hf_mojito_origmjrversion,
760 { "Major Version", "mojito.majorversion",
761 FT_UINT8, BASE_DEC,
762 NULL, 0x0,
763 NULL, HFILL }
764 },
765 { &hf_mojito_origmnrversion,
766 { "Minor Version", "mojito.minorversion",
767 FT_UINT8, BASE_DEC,
768 NULL, 0x0,
769 NULL, HFILL }
770 },
771 { &hf_mojito_kuid,
772 { "Kademlia Unique ID (KUID)", "mojito.kuid",
773 FT_BYTES, BASE_NONE,
774 NULL, 0x0,
775 NULL, HFILL }
776 },
777 { &hf_mojito_socketaddress_version,
778 { "IP Version", "mojito.socketaddressversion",
779 FT_UINT8, BASE_DEC,
780 NULL, 0x0,
781 NULL, HFILL }
782 },
783 { &hf_mojito_socketaddress_ipv4,
784 { "IP Address", "mojito.socketaddressipv4",
785 FT_IPv4, BASE_NONE,
786 NULL, 0x0,
787 NULL, HFILL }
788 },
789 { &hf_mojito_socketaddress_ipv6,
790 { "IP Address", "mojito.socketaddressipv6",
791 FT_IPv6, BASE_NONE,
792 NULL, 0x0,
793 NULL, HFILL }
794 },
795 { &hf_mojito_socketaddress_port,
796 { "IP Port", "mojito.socketaddressport",
797 FT_UINT16, BASE_DEC,
798 NULL, 0x0,
799 NULL, HFILL }
800 },
801 { &hf_mojito_instanceid,
802 { "Instance ID", "mojito.instanceid",
803 FT_UINT8, BASE_DEC,
804 NULL, 0x0,
805 NULL, HFILL }
806 },
807 { &hf_mojito_flags,
808 { "Flags", "mojito.flags",
809 FT_UINT8, BASE_HEX,
810 NULL, 0x0,
811 NULL, HFILL }
812 },
813 { &hf_mojito_flags_shutdown,
814 { "SHUTDOWN", "mojito.shutdownflag",
815 FT_BOOLEAN, 8,
816 NULL, 2,
817 NULL, HFILL }
818 },
819 { &hf_mojito_flags_firewalled,
820 { "Firewalled", "mojito.firewalledflag",
821 FT_BOOLEAN, 8,
822 NULL, 1,
823 NULL, HFILL }
824 },
825 { &hf_mojito_extendedlength,
826 { "Extended Length", "mojito.extlength",
827 FT_UINT16, BASE_DEC,
828 NULL, 0x0,
829 NULL, HFILL }
830 },
831 { &hf_mojito_kuidcount,
832 { "Secondary KUID Count", "mojito.kuidcount",
833 FT_UINT8, BASE_DEC,
834 NULL, 0x0,
835 NULL, HFILL }
836 },
837 { &hf_mojito_dhtvaluetype,
838 { "DHT Value Type", "mojito.dhtvaluetype",
839 FT_STRING, BASE_NONE,
840 NULL, 0x0,
841 NULL, HFILL }
842 },
843 { &hf_mojito_bigintegerlen,
844 { "Big Integer Length", "mojito.bigintegerlen",
845 FT_UINT8, BASE_DEC,
846 NULL, 0x0,
847 NULL, HFILL }
848 },
849 { &hf_mojito_bigintegerval,
850 { "Big Integer HEX Value", "mojito.bigintegerhexval",
851 FT_BYTES, BASE_NONE,
852 NULL, 0x0,
853 NULL, HFILL }
854 },
855 { &hf_mojito_sectokenlen,
856 { "Security Token Length", "mojito.sectokenlen",
857 FT_UINT8, BASE_DEC,
858 NULL, 0x0,
859 NULL, HFILL }
860 },
861 { &hf_mojito_sectoken,
862 { "Security Token", "mojito.sectoken",
863 FT_BYTES, BASE_NONE,
864 NULL, 0x0,
865 NULL, HFILL }
866 },
867 { &hf_mojito_contactcount,
868 { "Contact Count", "mojito.contactcount",
869 FT_UINT8, BASE_DEC,
870 NULL, 0x0,
871 NULL, HFILL }
872 },
873 { &hf_mojito_contactvendor,
874 { "Vendor", "mojito.contactvendor",
875 FT_STRING, BASE_NONE,
876 NULL, 0x0,
877 NULL, HFILL }
878 },
879 { &hf_mojito_contactversion,
880 { "Contact Version", "mojito.contactversion",
881 FT_UINT16, BASE_DEC,
882 NULL, 0x0,
883 NULL, HFILL }
884 },
885 { &hf_mojito_contactkuid,
886 { "KUID of the Contact", "mojito.contactkuid",
887 FT_BYTES, BASE_NONE,
888 NULL, 0x0,
889 NULL, HFILL }
890 },
891 { &hf_mojito_dhtvalue_valuetype,
892 { "DHTValue ValueType", "mojito.dhtvaluevaluetype",
893 FT_STRING, BASE_NONE,
894 NULL, 0x0,
895 NULL, HFILL }
896 },
897 { &hf_mojito_dhtvalue_version,
898 { "DHTValue Version", "mojito.dhtvalueversion",
899 FT_UINT16, BASE_DEC,
900 NULL, 0x0,
901 NULL, HFILL }
902 },
903 { &hf_mojito_dhtvalue_length,
904 { "DHTValue Length", "mojito.dhtvaluelength",
905 FT_UINT16, BASE_DEC,
906 NULL, 0x0,
907 NULL, HFILL }
908 },
909 { &hf_mojito_dhtvalue_value,
910 { "DHTValue", "mojito.dhtvaluehexvalue",
911 FT_STRING, BASE_NONE,
912 NULL, 0x0,
913 NULL, HFILL }
914 },
915 { &hf_mojito_bigint_value_one,
916 { "Big Integer DEC Value", "mojito.bigintegerval",
917 FT_UINT8, BASE_DEC,
918 NULL, 0x0,
919 NULL, HFILL }
920 },
921 { &hf_mojito_bigint_value_two,
922 { "Big Integer DEC Value", "mojito.bigintegerval",
923 FT_UINT16, BASE_DEC,
924 NULL, 0x0,
925 NULL, HFILL }
926 },
927 { &hf_mojito_bigint_value_three,
928 { "Big Integer DEC Value", "mojito.bigintegerval",
929 FT_UINT24, BASE_DEC,
930 NULL, 0x0,
931 NULL, HFILL }
932 },
933 { &hf_mojito_bigint_value_four,
934 { "Big Integer DEC Value", "mojito.bigintegerval",
935 FT_UINT32, BASE_DEC,
936 NULL, 0x0,
937 NULL, HFILL }
938 },
939 { &hf_mojito_dhtvalue_kuid,
940 { "Kademlia Unique ID (KUID)", "mojito.kuid",
941 FT_BYTES, BASE_NONE,
942 NULL, 0x0,
943 NULL, HFILL }
944 },
945 { &hf_mojito_target_kuid,
946 { "Target Kademlia Unique ID (KUID)", "mojito.kuid",
947 FT_BYTES, BASE_NONE,
948 NULL, 0x0,
949 NULL, HFILL }
950 },
951 { &hf_mojito_storestatuscode_count,
952 { "Status Code Count", "mojito.statuscodecount",
953 FT_UINT8, BASE_DEC,
954 NULL, 0x0,
955 NULL, HFILL }
956 },
957 { &hf_mojito_storestatuscode_code,
958 { "StatusCode", "mojito.statuscodecode",
959 FT_UINT16, BASE_DEC,
960 VALS(statuscodeflags), 0x0,
961 NULL, HFILL }
962 },
963 { &hf_mojito_storestatuscode_kuid,
964 { "Primary KUID of the Status Code", "mojito.statuscodekuid",
965 FT_BYTES, BASE_NONE,
966 NULL, 0x0,
967 NULL, HFILL }
968 },
969 { &hf_mojito_storestatuscode_secondary_kuid,
970 { "Secondary KUID of the Status Code", "mojito.statuscodesecondarykuid",
971 FT_BYTES, BASE_NONE,
972 NULL, 0x0,
973 NULL, HFILL }
974 },
975 { &hf_mojito_opcode_data,
976 { "Data", "mojito.opcode.data",
977 FT_BYTES, BASE_NONE,
978 NULL, 0x0,
979 NULL, HFILL }
980 }
981 };
982
983 /* Setup protocol subtree array */
984 static int *ett[] = {
985 &ett_mojito,
986 &ett_mojito_header,
987 &ett_mojito_header_version,
988 &ett_mojito_contact,
989 &ett_mojito_contact_version,
990 &ett_mojito_socket_address,
991 &ett_mojito_flags,
992 &ett_mojito_bigint,
993 &ett_mojito_opcode,
994 &ett_mojito_dht_version,
995 &ett_mojito_dht,
996 &ett_mojito_status_code,
997 &ett_mojito_kuids
998 };
999
1000 static ei_register_info ei[] = {
1001 { &ei_mojito_socketaddress_unknown, { "mojito.socketaddress.unknown", PI_PROTOCOL, PI_ERROR, "Unsupported Socket Address Type", EXPFILL }},
1002 { &ei_mojito_bigint_unsupported, { "mojito.bigint.unsupported", PI_PROTOCOL, PI_ERROR, "Unsupported BigInt length", EXPFILL }},
1003 };
1004
1005 proto_mojito = proto_register_protocol("Mojito DHT", "Mojito", "mojito");
1006
1007 proto_register_field_array(proto_mojito, hf, array_length(hf));
1008 proto_register_subtree_array(ett, array_length(ett));
1009 expert_mojito = expert_register_protocol(proto_mojito);
1010 expert_register_field_array(expert_mojito, ei, array_length(ei));
1011
1012 mojito_handle = register_dissector("mojito", dissect_mojito, proto_mojito);
1013 }
1014
1015 /* Control the handoff */
1016 void
1017 proto_reg_handoff_mojito(void)
1018 {
1019 heur_dissector_add("udp", dissect_mojito_heuristic, "Mojito over UDP", "mojito_udp", proto_mojito, HEURISTIC_ENABLE);
1020 dissector_add_for_decode_as_with_preference("udp.port", mojito_handle);
1021 }
1022
1023 /*
1024 * Editor modelines - https://www.wireshark.org/tools/modelines.html
1025 *
1026 * Local variables:
1027 * c-basic-offset: 8
1028 * tab-width: 8
1029 * indent-tabs-mode: t
1030 * End:
1031 *
1032 * vi: set shiftwidth=8 tabstop=8 noexpandtab:
1033 * :indentSize=8:tabSize=8:noTabs=false:
1034 */
Metzes wireshark repo