~ubuntu-branches/ubuntu/gutsy/wireshark/gutsy-security

 *

 * Luis Ontanon 2005 - Context and Transaction Tracing

 *

 *

 * Copyright 1998 Gerald Combs

 *

 * This program is free software; you can redistribute it and/or

static int hf_h248_no_evt = -1;

static int hf_h248_no_param = -1;

 

#include "packet-h248-hf.c"

 

/* Initialize the subtree pointers */

static gint ett_h248_no_pkg = -1;

static gint ett_h248_no_sig = -1;

static gint ett_h248_no_evt = -1;

#include "packet-h248-ett.c"

 

static dissector_handle_t h248_term_handle;

static dissector_handle_t h248_handle;

static dissector_handle_t h248_term_handle;

 

 

static const value_string package_name_vals[] = {

  {   0x0000, "Media stream properties H.248.1 Annex C" },

  {   0x00010000, "g H.248.1 Annex E" },

  {   0x00010001, "g/Cause" },

  {   0x00010002, "g/Signal Completion" },

  {   0x00040001, "tonedet/std(Start tone detected)" },

  {   0x00040002, "tonedet/etd(End tone detected)" },

  {   0x00040003, "tonedet/ltd(Long tone detected)" },

  {   0x00060004, "dd, DigitMap Completion Event" },

  {   0x00080030, "cd, Dial Tone" },

  {   0x00080031, "cd, Ringing Tone" },

  {   0x00080032, "cd, Busy Tone" },

  {   0x00090005, "al, offhook" },

  {   0x00090006, "al, flashhook" },

  {   0x0009ffff, "al, *" },

  {   0x000b0005, "nt, network failure" },

  {   0x000b0006, "nt, quality alert" },

  {   0x000c0001, "rtp, Payload Transition" },

  {   0x00210000, "Generic Bearer Connection Q.1950 Annex A" },

  {   0x00210001, "GB/BNCChange" },

  {   0x002a0001, "H.245/h245msg (Incoming H.245 Message)" },

  {   0x002a0004, "H.245/h245ChC (H.245 Channel Closed)" },

  {   0x800a0000, "Nokia Bearer Characteristics Package" },

        {0,     NULL}

};

  {   0x00210001, "GB/EstBNC(Establish BNC)" },

  {   0x00210002, "GB/ModBNC (Modify BNC)" },

  {   0x00210003, "GB/RelBNC(Release BNC)" },

  {   0x002a0001, "H.245/cs (channel state)" },

  {   0x002a0002, "H.245/termtype (Terminal Type)" },

 

};

 

static const value_string wildcard_modes[] = {

    { 0, NULL }

};

 

    { H248_CMD_ADD_REQ, "addReq"},

    { H248_CMD_MOVE_REQ, "moveReq"},

    { H248_CMD_MOD_REQ, "modReq"},

    { H248_CMD_NOTIFY_REQ, "notifyReq"},

    { H248_CMD_TOPOLOGY_REQ, "topologyReq"},

    { H248_CMD_CTX_ATTR_AUDIT_REQ, "ctxAttrAuditReq"},

    { H248_CMD_ADD_REPLY, "addReply"},

    { H248_CMD_MOVE_REPLY, "moveReply"},

    { H248_CMD_MOD_REPLY, "modReply"},

    { H248_CMD_AUDITCAP_REPLY, "auditCapReply"},

    { H248_CMD_AUDITVAL_REPLY, "auditValReply"},

    { H248_CMD_NOTIFY_REPLY, "notifyReply"},

    { H248_CMD_TOPOLOGY_REPLY, "topologyReply"},

    { 0, NULL }

};

 

static GPtrArray* packages = NULL;

 

        if (! packages) packages = g_ptr_array_new();

 

        g_assert(pkg != NULL);

        g_ptr_array_add(packages,pkg);

}

 

static guint32 packageandid;

 

static int dissect_h248_PkgdName(gboolean implicit_tag, tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, int hf_index) {

  int hf_param;

  h248_package_t* pkg = NULL;

  guint i;

  old_offset=offset;

  offset = dissect_ber_octet_string(implicit_tag, pinfo, tree, tvb, offset, hf_index, &new_tvb);

 

                package_tree = proto_item_add_subtree(ber_last_created_item, ett_packagename);

                proto_tree_add_uint(package_tree, hf_h248_pkg_name, tvb, offset-4, 2, name_major);

    }

        for(i=0; i < packages->len; i++) {

                pkg = g_ptr_array_index(packages,i);

                if (name_major == pkg->id) {

                        break;

                } else {

                        pkg = NULL;

                }

        }

        if (! pkg ) pkg = &no_package;

 

        hf_param = *(pkg->hfid_params);

 

        if (hf_param > 0)

                /* TODO: Will this ever happen now??*/

  } else {

          pkg = &no_package;

  }

  curr_info.pkg = pkg;

  return offset;

}

 

  h248_package_t* pkg = NULL;

  h248_pkg_evt_t* evt = NULL;

  guint i;

  old_offset=offset;

  offset = dissect_ber_octet_string(implicit_tag, pinfo, tree, tvb, offset, hf_index, &new_tvb);

 

    }

    proto_tree_add_uint(package_tree, hf_h248_event_name, tvb, offset-4, 4, packageandid);

 

        for(i=0; i < packages->len; i++) {

                pkg = g_ptr_array_index(packages,i);

                if (name_major == pkg->id) {

                        break;

                }

        }

 

        curr_info.pkg = pkg;

 

        } else {

                evt = &no_event;

        }

        curr_info.evt = evt;

  } else {

          curr_info.pkg = &no_package;

          curr_info.evt = &no_event;

  }

  return offset;

}

 

 

    for(i=0; i < packages->len; i++) {

                pkg = g_ptr_array_index(packages,i);

                if (name_major == pkg->id) {

                        break;

                } else {

                        pkg = NULL;

                }

        }

        if (! pkg ) pkg = &no_package;

        if (pkg->signals) {

                for (sig = pkg->signals; sig->hfid; sig++) {

                        if (name_minor == sig->id) {

                                break;

                        }

                }

                if (! sig->hfid) sig = &no_signal;

                curr_info.pkg = pkg;

                curr_info.sig = sig;

        } else {

                curr_info.pkg = &no_package;

                curr_info.sig = &no_signal;

        }

  } else {

          curr_info.pkg = &no_package;

          curr_info.sig = &no_signal;

  }

  return offset;

}

 

        next_tvb = tvb_new_subset(tvb, offset , len , len );

        name_major = packageandid >> 16;

        name_minor = packageandid & 0xffff;

        pkg = (curr_info.pkg) ? curr_info.pkg : &no_package;

        if (pkg->properties) {

                        if (name_minor == prop->id) {

                                break;

                        }

        } else {

                prop = &no_param;

        }

                if (!prop->dissector) prop = &no_param;

                prop->dissector(tree, next_tvb, pinfo, *(prop->hfid), &curr_info, prop->data);

        }

        return end_offset;

}

 

        tvbuff_t *next_tvb;

        guint32 param_id = 0xffffffff;

        h248_pkg_param_t* sigpar;

        offset = dissect_ber_octet_string(implicit_tag, pinfo, tree, tvb, offset,  hf_index, &next_tvb);

        switch(tvb_length(next_tvb)) {

                case 4: param_id = tvb_get_ntohl(next_tvb,0); break;

                case 1: param_id = tvb_get_guint8(next_tvb,0); break;

                default: break;

        }

        curr_info.par = &no_param;

        if (curr_info.sig && curr_info.sig->parameters) {

                for(sigpar = curr_info.sig->parameters; sigpar->hfid; sigpar++) {

                        if (sigpar->id == param_id) {

                        }

                }

        }

        return offset;

}

 

        gboolean pc, ind;

        gint32 tag;

        guint32 len;

        old_offset=offset;

        offset=dissect_ber_identifier(pinfo, tree, tvb, offset, &class, &pc, &tag);

        offset=dissect_ber_length(pinfo, tree, tvb, offset, &len, &ind);

        end_offset=offset+len;

        if( (class!=BER_CLASS_UNI)

                ||(tag!=BER_UNI_TAG_OCTETSTRING) ){

                proto_tree_add_text(tree, tvb, offset-2, 2, "H.248 BER Error: OctetString expected but Class:%d PC:%d Tag:%d was unexpected", class, pc, tag);

                return end_offset;

        }

        next_tvb = tvb_new_subset(tvb,offset,len,len);

        if ( curr_info.par && curr_info.par->dissector) {

                curr_info.par->dissector(tree, next_tvb, pinfo, *(curr_info.par->hfid), &curr_info, curr_info.par->data);

        }

                        default: break;

                }

        }

        curr_info.par = &no_param;

        if (curr_info.evt->parameters) {

                for(evtpar = curr_info.evt->parameters; evtpar->hfid; evtpar++) {

                        if (evtpar->id == param_id) {

        } else {

                curr_info.par = &no_param;

        }

        return offset;

}

 

        gboolean pc, ind;

        gint32 tag;

        guint32 len;

        old_offset=offset;

        offset=dissect_ber_identifier(pinfo, tree, tvb, offset, &class, &pc, &tag);

        offset=dissect_ber_length(pinfo, tree, tvb, offset, &len, &ind);

        end_offset=offset+len;

        if( (class!=BER_CLASS_UNI)

                ||(tag!=BER_UNI_TAG_OCTETSTRING) ){

                proto_tree_add_text(tree, tvb, offset-2, 2, "H.248 BER Error: OctetString expected but Class:%d PC:%d Tag:%d was unexpected", class, pc, tag);

                return end_offset;

        }

        next_tvb = tvb_new_subset(tvb,offset,len,len);

        if ( curr_info.par && curr_info.par->dissector) {

                curr_info.par->dissector(tree, next_tvb, pinfo, *(curr_info.par->hfid), &curr_info, curr_info.par->data);

        }

        return end_offset;

}

 

        address* dst = &(pinfo->dst);

        address* lo_addr;

        address* hi_addr;

    if (keep_persistent_data) {

                emem_tree_key_t key[] = {

                        {1,&(framenum)},

                lo_addr = dst;

                hi_addr = src;

        }

        switch(lo_addr->type) {

                case AT_NONE:

                        m->lo_addr = 0;

                        m->lo_addr = g_str_hash(address_to_str(lo_addr));

                        break;

        }

    return m;

}

 

                                {1,&(t_id)},

                                {0,NULL}

                        };

            trxmsg = se_alloc(sizeof(h248_trx_msg_t));

            t = se_tree_lookup32_array(trxs,key);

 

static h248_ctx_t* h248_ctx(h248_msg_t* m, h248_trx_t* t, guint32 c_id) {

    h248_ctx_t* context = NULL;

    h248_ctx_t** context_p = NULL;

    if ( !m || !t ) return NULL;

 

    if (keep_persistent_data) {

                {1,&(c_id)},

                {0,NULL}

                };

                emem_tree_key_t trx_key[] = {

                {1,&(m->hi_addr)},

                {1,&(m->lo_addr)},

                {1,&(t->id)},

                {0,NULL}

                };

        if (m->commited) {

            if (( context = se_tree_lookup32_array(ctxs_by_trx,trx_key) )) {

                return context;

    h248_cmd_msg_t* c;

 

    if ( !m || !t ) return "-";

        s = ep_strdup_printf("T %x { ",t->id);

 

    if (t->cmds) {

    curr_info.stat = NULL;

    curr_info.par = NULL;

 

    if(tvb_length(tvb)>=6){

        if(!tvb_strneql(tvb, 0, "MEGACO", 6)){

            static dissector_handle_t megaco_handle=NULL;

        if ( udp_port )

            dissector_delete("udp.port", udp_port, h248_handle);

        }

    udp_port = temp_udp_port;

    if ( udp_port ) {

                dissector_add("udp.port", udp_port, h248_handle);

        }

}

 

/*--- proto_register_h248 ----------------------------------------------*/

  { "Unknown Parameter", "h248.pkg.unknown.param",

          FT_BYTES, BASE_HEX, NULL, 0,

          "", HFILL }},

#include "packet-h248-hfarr.c"

 

  { &hf_h248_ctx, { "Context", "h248.ctx", FT_UINT32, BASE_HEX, NULL, 0, "", HFILL }},

                                 "Port to be decoded as h248",

                                 10,

                                 &temp_udp_port);

  register_init_routine( &h248_init );

 

  msgs = se_tree_create(EMEM_TREE_TYPE_RED_BLACK, "h248_msgs");