epan/dissectors/packet-ipvs-syncd.c

   1 /* packet-ipvs-syncd.c   2001 Ronnie Sahlberg <See AUTHORS for email>
   2  * Routines for IGMP packet disassembly
   3  *
   4  * $Id$
   5  *
   6  * Wireshark - Network traffic analyzer
   7  * By Gerald Combs <gerald@wireshark.org>
   8  * Copyright 1998 Gerald Combs
   9  *
  10  * This program is free software; you can redistribute it and/or
  11  * modify it under the terms of the GNU General Public License
  12  * as published by the Free Software Foundation; either version 2
  13  * of the License, or (at your option) any later version.
  14  *
  15  * This program is distributed in the hope that it will be useful,
  16  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  17  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18  * GNU General Public License for more details.
  19  *
  20  * You should have received a copy of the GNU General Public License
  21  * along with this program; if not, write to the Free Software
  22  * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
  23  */
  24
  25 #include "config.h"
  26
  27 #include <glib.h>
  28
  29 #include <epan/packet.h>
  30 #include <epan/ipproto.h>
  31 #include <epan/in_cksum.h>
  32
  33 static int proto_ipvs_syncd = -1;
  34 static int hf_conn_count = -1;
  35 static int hf_syncid = -1;
  36 static int hf_size = -1;
  37 static int hf_resv8 = -1;
  38 static int hf_proto = -1;
  39 static int hf_cport = -1;
  40 static int hf_vport = -1;
  41 static int hf_dport = -1;
  42 static int hf_caddr = -1;
  43 static int hf_vaddr = -1;
  44 static int hf_daddr = -1;
  45 static int hf_flags = -1;
  46 static int hf_flags_conn_type = -1;
  47 static int hf_flags_hashed_entry = -1;
  48 static int hf_flags_no_output_packets = -1;
  49 static int hf_flags_conn_not_established = -1;
  50 static int hf_flags_adjust_output_seq = -1;
  51 static int hf_flags_adjust_input_seq = -1;
  52 static int hf_flags_no_client_port_set = -1;
  53 static int hf_state = -1;
  54 static int hf_in_seq_init = -1;
  55 static int hf_in_seq_delta = -1;
  56 static int hf_in_seq_pdelta = -1;
  57 static int hf_out_seq_init = -1;
  58 static int hf_out_seq_delta = -1;
  59 static int hf_out_seq_pdelta = -1;
  60
  61 static int ett_ipvs_syncd = -1;
  62 static int ett_conn = -1;
  63 static int ett_flags = -1;
  64
  65 #define IPVS_SYNCD_MC_GROUP "224.0.0.18"
  66 #define IPVS_SYNCD_PORT 8848
  67
  68 static const value_string proto_strings[] = {
  69         {0x06, "TCP"},
  70         {0x11, "UDP"},
  71         {0x00, NULL},
  72 };
  73
  74 static const value_string state_strings[] = {
  75         {0x00, "Input"},
  76         {0x04, "Output"},
  77         {0x08, "Input Only"},
  78         {0x00, NULL},
  79 };
  80
  81 /*
  82  *  IPVS Connection Flags
  83  *  Pulled from include/net/ip_vs.h in linux kernel source
  84  */
  85 #define IP_VS_CONN_F_FWD_MASK         0x0007    /* mask for the fwd methods */
  86 #define IP_VS_CONN_F_MASQ             0x0000    /* masquerading */
  87 #define IP_VS_CONN_F_LOCALNODE        0x0001    /* local node */
  88 #define IP_VS_CONN_F_TUNNEL           0x0002    /* tunneling */
  89 #define IP_VS_CONN_F_DROUTE           0x0003    /* direct routing */
  90 #define IP_VS_CONN_F_BYPASS           0x0004    /* cache bypass */
  91 #define IP_VS_CONN_F_HASHED           0x0040    /* hashed entry */
  92 #define IP_VS_CONN_F_NOOUTPUT         0x0080    /* no output packets */
  93 #define IP_VS_CONN_F_INACTIVE         0x0100    /* not established */
  94 #define IP_VS_CONN_F_OUT_SEQ          0x0200    /* must do output seq adjust */
  95 #define IP_VS_CONN_F_IN_SEQ           0x0400    /* must do input seq adjust */
  96 #define IP_VS_CONN_F_SEQ_MASK         0x0600    /* in/out sequence mask */
  97 #define IP_VS_CONN_F_NO_CPORT         0x0800    /* no client port set yet */
  98
  99 static const value_string connection_type_strings[] = {
 100         {IP_VS_CONN_F_MASQ, "Masquerade"},
 101         {IP_VS_CONN_F_LOCALNODE, "Local Node"},
 102         {IP_VS_CONN_F_TUNNEL, "Tunnel"},
 103         {IP_VS_CONN_F_DROUTE, "Direct Routing"},
 104         {0x00, NULL},
 105 };
 106
 107
 108 static void
 109 dissect_ipvs_syncd(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree)
 110 {
 111         proto_tree *tree;
 112         proto_item *item;
 113         int offset = 0;
 114         guint8 cnt = 0;
 115         int conn = 0;
 116
 117         item = proto_tree_add_item(parent_tree, proto_ipvs_syncd, tvb, offset, -1, ENC_NA);
 118         tree = proto_item_add_subtree(item, ett_ipvs_syncd);
 119
 120
 121         col_set_str(pinfo->cinfo, COL_PROTOCOL, "IPVS");
 122         col_clear(pinfo->cinfo, COL_INFO);
 123
 124         cnt = tvb_get_guint8(tvb, offset);
 125         proto_tree_add_item(tree, hf_conn_count, tvb, offset, 1, ENC_BIG_ENDIAN);
 126         offset += 1;
 127
 128         proto_tree_add_item(tree, hf_syncid, tvb, offset, 1, ENC_BIG_ENDIAN);
 129         offset += 1;
 130
 131         proto_tree_add_item(tree, hf_size, tvb, offset, 2, ENC_BIG_ENDIAN);
 132         offset += 2;
 133
 134         for (conn = 0; conn < cnt; conn++)
 135         {
 136                 proto_tree *ctree, *ti;
 137                 proto_tree *ftree, *fi;
 138                 guint16 flags;
 139
 140                 ti = proto_tree_add_text(tree, tvb, offset, 24, "Connection #%d", conn+1);
 141                 ctree = proto_item_add_subtree(ti, ett_conn);
 142
 143                 proto_tree_add_item(ctree, hf_resv8, tvb, offset, 1, ENC_BIG_ENDIAN);
 144                 offset += 1;
 145
 146                 proto_tree_add_item(ctree, hf_proto, tvb, offset, 1, ENC_BIG_ENDIAN);
 147                 offset += 1;
 148
 149                 proto_tree_add_item(ctree, hf_cport, tvb, offset, 2, ENC_BIG_ENDIAN);
 150                 offset += 2;
 151
 152                 proto_tree_add_item(ctree, hf_vport, tvb, offset, 2, ENC_BIG_ENDIAN);
 153                 offset += 2;
 154
 155                 proto_tree_add_item(ctree, hf_dport, tvb, offset, 2, ENC_BIG_ENDIAN);
 156                 offset += 2;
 157
 158                 proto_tree_add_item(ctree, hf_caddr, tvb, offset, 4, ENC_BIG_ENDIAN);
 159                 offset += 4;
 160
 161                 proto_tree_add_item(ctree, hf_vaddr, tvb, offset, 4, ENC_BIG_ENDIAN);
 162                 offset += 4;
 163
 164                 proto_tree_add_item(ctree, hf_daddr, tvb, offset, 4, ENC_BIG_ENDIAN);
 165                 offset += 4;
 166
 167                 flags = tvb_get_ntohs(tvb, offset);
 168                 fi = proto_tree_add_item(ctree, hf_flags, tvb, offset, 2, ENC_BIG_ENDIAN);
 169                 ftree = proto_item_add_subtree(fi, ett_flags);
 170                 proto_tree_add_item(ftree, hf_flags_conn_type, tvb, offset, 2, ENC_BIG_ENDIAN);
 171                 proto_tree_add_item(ftree, hf_flags_hashed_entry, tvb, offset, 2, ENC_BIG_ENDIAN);
 172                 proto_tree_add_item(ftree, hf_flags_no_output_packets, tvb, offset, 2, ENC_BIG_ENDIAN);
 173                 proto_tree_add_item(ftree, hf_flags_conn_not_established, tvb, offset, 2, ENC_BIG_ENDIAN);
 174                 proto_tree_add_item(ftree, hf_flags_adjust_output_seq, tvb, offset, 2, ENC_BIG_ENDIAN);
 175                 proto_tree_add_item(ftree, hf_flags_adjust_input_seq, tvb, offset, 2, ENC_BIG_ENDIAN);
 176                 proto_tree_add_item(ftree, hf_flags_no_client_port_set, tvb, offset, 2, ENC_BIG_ENDIAN);
 177
 178                 offset += 2;
 179
 180                 proto_tree_add_item(ctree, hf_state, tvb, offset, 2, ENC_BIG_ENDIAN);
 181                 offset += 2;
 182
 183                 /* we have full connection info */
 184                 if ( flags & IP_VS_CONN_F_SEQ_MASK )
 185                 {
 186                         proto_tree_add_item(ctree, hf_in_seq_init, tvb, offset, 4, ENC_BIG_ENDIAN);
 187                         offset += 4;
 188
 189                         proto_tree_add_item(ctree, hf_in_seq_delta, tvb, offset, 4, ENC_BIG_ENDIAN);
 190                         offset += 4;
 191
 192                         proto_tree_add_item(ctree, hf_in_seq_pdelta, tvb, offset, 4, ENC_BIG_ENDIAN);
 193                         offset += 4;
 194
 195                         proto_tree_add_item(ctree, hf_out_seq_init, tvb, offset, 4, ENC_BIG_ENDIAN);
 196                         offset += 4;
 197
 198                         proto_tree_add_item(ctree, hf_out_seq_delta, tvb, offset, 4, ENC_BIG_ENDIAN);
 199                         offset += 4;
 200
 201                         proto_tree_add_item(ctree, hf_out_seq_pdelta, tvb, offset, 4, ENC_BIG_ENDIAN);
 202                         offset += 4;
 203                 }
 204
 205         }
 206 }
 207
 208 void
 209 proto_register_ipvs_syncd(void)
 210 {
 211         static hf_register_info hf[] = {
 212                 { &hf_conn_count,
 213                         { "Connection Count", "ipvs.conncount", FT_UINT8, BASE_DEC,
 214                           NULL, 0, NULL, HFILL }},
 215
 216                 { &hf_syncid,
 217                         { "Synchronization ID", "ipvs.syncid", FT_UINT8, BASE_DEC,
 218                           NULL, 0, NULL, HFILL }},
 219
 220                 { &hf_size,
 221                         { "Size", "ipvs.size", FT_UINT16, BASE_DEC,
 222                           NULL, 0, NULL, HFILL }},
 223
 224                 { &hf_resv8,
 225                         { "Reserved", "ipvs.resv8", FT_UINT8, BASE_HEX,
 226                           NULL, 0, NULL, HFILL }},
 227
 228                 { &hf_proto,
 229                         { "Protocol", "ipvs.proto", FT_UINT8, BASE_HEX,
 230                           VALS(proto_strings), 0, NULL, HFILL }},
 231
 232                 { &hf_cport,
 233                         { "Client Port", "ipvs.cport", FT_UINT16, BASE_DEC,
 234                           NULL, 0, NULL, HFILL }},
 235
 236                 { &hf_vport,
 237                         { "Virtual Port", "ipvs.vport", FT_UINT16, BASE_DEC,
 238                           NULL, 0, NULL, HFILL }},
 239
 240                 { &hf_dport,
 241                         { "Destination Port", "ipvs.dport", FT_UINT16, BASE_DEC,
 242                           NULL, 0, NULL, HFILL }},
 243
 244                 { &hf_caddr,
 245                         { "Client Address", "ipvs.caddr", FT_IPv4, BASE_NONE,
 246                           NULL, 0, NULL, HFILL }},
 247
 248                 { &hf_vaddr,
 249                         { "Virtual Address", "ipvs.vaddr", FT_IPv4, BASE_NONE,
 250                           NULL, 0, NULL, HFILL }},
 251
 252                 { &hf_daddr,
 253                         { "Destination Address", "ipvs.daddr", FT_IPv4, BASE_NONE,
 254                           NULL, 0, NULL, HFILL }},
 255
 256                 { &hf_flags,
 257                         { "Flags", "ipvs.flags", FT_UINT16, BASE_HEX,
 258                           NULL, 0, NULL, HFILL }},
 259
 260                 { &hf_flags_conn_type,
 261                         { "Connection Type", "ipvs.flags.conn_type", FT_UINT16, BASE_HEX,
 262                           VALS(connection_type_strings), 0x0F, NULL, HFILL }},
 263
 264                 { &hf_flags_hashed_entry,
 265                         { "Hashed Entry", "ipvs.flags.hashed_entry", FT_BOOLEAN, 16,
 266                           TFS(&tfs_true_false), IP_VS_CONN_F_HASHED, NULL, HFILL }},
 267
 268                 { &hf_flags_no_output_packets,
 269                         { "No Output Packets", "ipvs.flags.no_output_packets", FT_BOOLEAN, 16,
 270                           TFS(&tfs_true_false), IP_VS_CONN_F_NOOUTPUT, NULL, HFILL }},
 271
 272                 { &hf_flags_conn_not_established,
 273                         { "Connection Not Established", "ipvs.flags.conn_not_established", FT_BOOLEAN, 16,
 274                           TFS(&tfs_true_false), IP_VS_CONN_F_INACTIVE, NULL, HFILL }},
 275
 276                 { &hf_flags_adjust_output_seq,
 277                         { "Adjust Output Sequence", "ipvs.flags.adjust_output_seq", FT_BOOLEAN, 16,
 278                           TFS(&tfs_true_false), IP_VS_CONN_F_OUT_SEQ, NULL, HFILL }},
 279
 280                 { &hf_flags_adjust_input_seq,
 281                         { "Adjust Input Sequence", "ipvs.flags.adjust_input_seq", FT_BOOLEAN, 16,
 282                           TFS(&tfs_true_false), IP_VS_CONN_F_IN_SEQ, NULL, HFILL }},
 283
 284                 { &hf_flags_no_client_port_set,
 285                         { "No Client Port Set", "ipvs.flags.no_client_port_set", FT_BOOLEAN, 16,
 286                           TFS(&tfs_true_false), IP_VS_CONN_F_NO_CPORT, NULL, HFILL }},
 287
 288                 { &hf_state,
 289                         { "State", "ipvs.state", FT_UINT16, BASE_HEX,
 290                           VALS(state_strings), 0, NULL, HFILL }},
 291
 292                 { &hf_in_seq_init,
 293                         { "Input Sequence (Initial)", "ipvs.in_seq.initial", FT_UINT32,
 294                                 BASE_HEX, NULL, 0, NULL, HFILL }},
 295
 296                 { &hf_in_seq_delta,
 297                         { "Input Sequence (Delta)", "ipvs.in_seq.delta", FT_UINT32,
 298                                 BASE_HEX, NULL, 0, NULL, HFILL }},
 299
 300                 { &hf_in_seq_pdelta,
 301                         { "Input Sequence (Previous Delta)", "ipvs.in_seq.pdelta", FT_UINT32,
 302                                 BASE_HEX, NULL, 0, NULL, HFILL }},
 303
 304                 { &hf_out_seq_init,
 305                         { "Output Sequence (Initial)", "ipvs.out_seq.initial", FT_UINT32,
 306                                 BASE_HEX, NULL, 0, NULL, HFILL }},
 307
 308                 { &hf_out_seq_delta,
 309                         { "Output Sequence (Delta)", "ipvs.out_seq.delta", FT_UINT32,
 310                                 BASE_HEX, NULL, 0, NULL, HFILL }},
 311
 312                 { &hf_out_seq_pdelta,
 313                         { "Output Sequence (Previous Delta)", "ipvs.out_seq.pdelta", FT_UINT32,
 314                                 BASE_HEX, NULL, 0, NULL, HFILL }},
 315
 316
 317
 318
 319         };
 320         static gint *ett[] = {
 321                 &ett_ipvs_syncd,
 322                 &ett_conn,
 323                 &ett_flags,
 324         };
 325
 326         proto_ipvs_syncd = proto_register_protocol("IP Virtual Services Sync Daemon",
 327             "IPVS", "ipvs");
 328         proto_register_field_array(proto_ipvs_syncd, hf, array_length(hf));
 329         proto_register_subtree_array(ett, array_length(ett));
 330 }
 331
 332 void
 333 proto_reg_handoff_ipvs_syncd(void)
 334 {
 335         dissector_handle_t ipvs_syncd_handle;
 336
 337         ipvs_syncd_handle = create_dissector_handle(dissect_ipvs_syncd, proto_ipvs_syncd);
 338         dissector_add_uint("udp.port", IPVS_SYNCD_PORT, ipvs_syncd_handle);
 339 }