The Tcpdump Group git mirrors - tcpdump/blob - print-lwapp.c

   1 /*
   2  * Copyright (c) 1998-2007 The TCPDUMP project
   3  *
   4  * Redistribution and use in source and binary forms, with or without
   5  * modification, are permitted provided that: (1) source code
   6  * distributions retain the above copyright notice and this paragraph
   7  * in its entirety, and (2) distributions including binary code include
   8  * the above copyright notice and this paragraph in its entirety in
   9  * the documentation or other materials provided with the distribution.
  10  * THIS SOFTWARE IS PROVIDED ``AS IS'' AND
  11  * WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT
  12  * LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
  13  * FOR A PARTICULAR PURPOSE.
  14  *
  15  * Original code by Carles Kishimoto <carles.kishimoto@gmail.com>
  16  */
  17
  18 /* \summary: Light Weight Access Point Protocol (LWAPP) printer */
  19
  20 /* specification: RFC 5412 */
  21
  22 #ifdef HAVE_CONFIG_H
  23 #include "config.h"
  24 #endif
  25
  26 #include <netdissect-stdinc.h>
  27
  28 #include "netdissect.h"
  29 #include "extract.h"
  30 #include "addrtoname.h"
  31
  32 /*
  33  * LWAPP transport (common) header
  34  *      0                   1                   2                   3
  35  *     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
  36  *    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  37  *    |VER| RID |C|F|L|    Frag ID    |            Length             |
  38  *    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  39  *    |          Status/WLANs         |   Payload...  |
  40  *    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  41  *
  42  */
  43
  44 struct lwapp_transport_header {
  45     nd_uint8_t  version;
  46     nd_uint8_t  frag_id;
  47     nd_uint16_t length;
  48     nd_uint16_t status;
  49 };
  50
  51 /*
  52  * LWAPP control header
  53  *      0                   1                   2                   3
  54  *      0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
  55  *     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  56  *     |  Message Type |    Seq Num    |      Msg Element Length       |
  57  *     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  58  *     |                           Session ID                          |
  59  *     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  60  *     |      Msg Element [0..N]       |
  61  *     +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
  62  */
  63
  64 struct lwapp_control_header {
  65     nd_uint8_t  msg_type;
  66     nd_uint8_t  seq_num;
  67     nd_uint16_t len;
  68     nd_uint32_t session_id;
  69 };
  70
  71 #define LWAPP_VERSION 0
  72 #define LWAPP_EXTRACT_VERSION(x) (((x)&0xC0)>>6)
  73 #define LWAPP_EXTRACT_RID(x) (((x)&0x38)>>3)
  74 #define LWAPP_EXTRACT_CONTROL_BIT(x) (((x)&0x04)>>2)
  75
  76 static const struct tok lwapp_header_bits_values[] = {
  77     { 0x01, "Last Fragment Bit"},
  78     { 0x02, "Fragment Bit"},
  79     { 0x04, "Control Bit"},
  80     { 0, NULL}
  81 };
  82
  83 #define LWAPP_MSGTYPE_DISCOVERY_REQUEST                 1
  84 #define LWAPP_MSGTYPE_DISCOVERY_RESPONSE                2
  85 #define LWAPP_MSGTYPE_JOIN_REQUEST                      3
  86 #define LWAPP_MSGTYPE_JOIN_RESPONSE                     4
  87 #define LWAPP_MSGTYPE_JOIN_ACK                          5
  88 #define LWAPP_MSGTYPE_JOIN_CONFIRM                      6
  89 #define LWAPP_MSGTYPE_CONFIGURE_REQUEST                 10
  90 #define LWAPP_MSGTYPE_CONFIGURE_RESPONSE                11
  91 #define LWAPP_MSGTYPE_CONF_UPDATE_REQUEST               12
  92 #define LWAPP_MSGTYPE_CONF_UPDATE_RESPONSE              13
  93 #define LWAPP_MSGTYPE_WTP_EVENT_REQUEST                 14
  94 #define LWAPP_MSGTYPE_WTP_EVENT_RESPONSE                15
  95 #define LWAPP_MSGTYPE_CHANGE_STATE_EVENT_REQUEST        16
  96 #define LWAPP_MSGTYPE_CHANGE_STATE_EVENT_RESPONSE       17
  97 #define LWAPP_MSGTYPE_ECHO_REQUEST                      22
  98 #define LWAPP_MSGTYPE_ECHO_RESPONSE                     23
  99 #define LWAPP_MSGTYPE_IMAGE_DATA_REQUEST                24
 100 #define LWAPP_MSGTYPE_IMAGE_DATA_RESPONSE               25
 101 #define LWAPP_MSGTYPE_RESET_REQUEST                     26
 102 #define LWAPP_MSGTYPE_RESET_RESPONSE                    27
 103 #define LWAPP_MSGTYPE_KEY_UPDATE_REQUEST                30
 104 #define LWAPP_MSGTYPE_KEY_UPDATE_RESPONSE               31
 105 #define LWAPP_MSGTYPE_PRIMARY_DISCOVERY_REQUEST         32
 106 #define LWAPP_MSGTYPE_PRIMARY_DISCOVERY_RESPONSE        33
 107 #define LWAPP_MSGTYPE_DATA_TRANSFER_REQUEST             34
 108 #define LWAPP_MSGTYPE_DATA_TRANSFER_RESPONSE            35
 109 #define LWAPP_MSGTYPE_CLEAR_CONFIG_INDICATION           36
 110 #define LWAPP_MSGTYPE_WLAN_CONFIG_REQUEST               37
 111 #define LWAPP_MSGTYPE_WLAN_CONFIG_RESPONSE              38
 112 #define LWAPP_MSGTYPE_MOBILE_CONFIG_REQUEST             39
 113 #define LWAPP_MSGTYPE_MOBILE_CONFIG_RESPONSE            40
 114
 115 static const struct tok lwapp_msg_type_values[] = {
 116     { LWAPP_MSGTYPE_DISCOVERY_REQUEST, "Discovery req"},
 117     { LWAPP_MSGTYPE_DISCOVERY_RESPONSE, "Discovery resp"},
 118     { LWAPP_MSGTYPE_JOIN_REQUEST, "Join req"},
 119     { LWAPP_MSGTYPE_JOIN_RESPONSE, "Join resp"},
 120     { LWAPP_MSGTYPE_JOIN_ACK, "Join ack"},
 121     { LWAPP_MSGTYPE_JOIN_CONFIRM, "Join confirm"},
 122     { LWAPP_MSGTYPE_CONFIGURE_REQUEST, "Configure req"},
 123     { LWAPP_MSGTYPE_CONFIGURE_RESPONSE, "Configure resp"},
 124     { LWAPP_MSGTYPE_CONF_UPDATE_REQUEST, "Update req"},
 125     { LWAPP_MSGTYPE_CONF_UPDATE_RESPONSE, "Update resp"},
 126     { LWAPP_MSGTYPE_WTP_EVENT_REQUEST, "WTP event req"},
 127     { LWAPP_MSGTYPE_WTP_EVENT_RESPONSE, "WTP event resp"},
 128     { LWAPP_MSGTYPE_CHANGE_STATE_EVENT_REQUEST, "Change state event req"},
 129     { LWAPP_MSGTYPE_CHANGE_STATE_EVENT_RESPONSE, "Change state event resp"},
 130     { LWAPP_MSGTYPE_ECHO_REQUEST, "Echo req"},
 131     { LWAPP_MSGTYPE_ECHO_RESPONSE, "Echo resp"},
 132     { LWAPP_MSGTYPE_IMAGE_DATA_REQUEST, "Image data req"},
 133     { LWAPP_MSGTYPE_IMAGE_DATA_RESPONSE, "Image data resp"},
 134     { LWAPP_MSGTYPE_RESET_REQUEST, "Channel status req"},
 135     { LWAPP_MSGTYPE_RESET_RESPONSE, "Channel status resp"},
 136     { LWAPP_MSGTYPE_KEY_UPDATE_REQUEST, "Key update req"},
 137     { LWAPP_MSGTYPE_KEY_UPDATE_RESPONSE, "Key update resp"},
 138     { LWAPP_MSGTYPE_PRIMARY_DISCOVERY_REQUEST, "Primary discovery req"},
 139     { LWAPP_MSGTYPE_PRIMARY_DISCOVERY_RESPONSE, "Primary discovery resp"},
 140     { LWAPP_MSGTYPE_DATA_TRANSFER_REQUEST, "Data transfer req"},
 141     { LWAPP_MSGTYPE_DATA_TRANSFER_RESPONSE, "Data transfer resp"},
 142     { LWAPP_MSGTYPE_CLEAR_CONFIG_INDICATION, "Clear config ind"},
 143     { LWAPP_MSGTYPE_WLAN_CONFIG_REQUEST, "Wlan config req"},
 144     { LWAPP_MSGTYPE_WLAN_CONFIG_RESPONSE, "Wlan config resp"},
 145     { LWAPP_MSGTYPE_MOBILE_CONFIG_REQUEST, "Mobile config req"},
 146     { LWAPP_MSGTYPE_MOBILE_CONFIG_RESPONSE, "Mobile config resp"},
 147     { 0, NULL}
 148 };
 149
 150 /*
 151  * LWAPP message elements
 152  *
 153  * 0                   1                   2                   3
 154  * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
 155  * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 156  * |      Type     |             Length            |   Value ...   |
 157  * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
 158  */
 159 struct lwapp_message_header {
 160     nd_uint8_t  type;
 161     nd_uint16_t length;
 162 };
 163
 164 void
 165 lwapp_control_print(netdissect_options *ndo,
 166                     const u_char *pptr, u_int len, int has_ap_ident)
 167 {
 168     const struct lwapp_transport_header *lwapp_trans_header;
 169     const struct lwapp_control_header *lwapp_control_header;
 170     const u_char *tptr;
 171     uint8_t version;
 172     u_int tlen;
 173     u_int msg_type, msg_tlen;
 174
 175     tptr=pptr;
 176
 177     if (has_ap_ident) {
 178         /* check if enough bytes for AP identity */
 179         ND_TCHECK_6(tptr);
 180         lwapp_trans_header = (const struct lwapp_transport_header *)(pptr+6);
 181     } else {
 182         lwapp_trans_header = (const struct lwapp_transport_header *)pptr;
 183     }
 184     ND_TCHECK_SIZE(lwapp_trans_header);
 185     version = EXTRACT_U_1(lwapp_trans_header->version);
 186
 187     /*
 188      * Sanity checking of the header.
 189      */
 190     if (LWAPP_EXTRACT_VERSION(version) != LWAPP_VERSION) {
 191         ND_PRINT("LWAPP version %u packet not supported",
 192                LWAPP_EXTRACT_VERSION(version));
 193         return;
 194     }
 195
 196     /* non-verbose */
 197     if (ndo->ndo_vflag < 1) {
 198         ND_PRINT("LWAPPv%u, %s frame, Flags [%s], length %u",
 199                LWAPP_EXTRACT_VERSION(version),
 200                LWAPP_EXTRACT_CONTROL_BIT(version) ? "Control" : "Data",
 201                bittok2str(lwapp_header_bits_values,"none",version&0x07),
 202                len);
 203         return;
 204     }
 205
 206     /* ok they seem to want to know everything - lets fully decode it */
 207     tlen=EXTRACT_BE_U_2(lwapp_trans_header->length);
 208
 209     ND_PRINT("LWAPPv%u, %s frame, Radio-id %u, Flags [%s], Frag-id %u, length %u",
 210            LWAPP_EXTRACT_VERSION(version),
 211            LWAPP_EXTRACT_CONTROL_BIT(version) ? "Control" : "Data",
 212            LWAPP_EXTRACT_RID(version),
 213            bittok2str(lwapp_header_bits_values,"none",version&0x07),
 214            EXTRACT_U_1(lwapp_trans_header->frag_id),
 215            tlen);
 216
 217     if (has_ap_ident) {
 218         ND_PRINT("\n\tAP identity: %s", etheraddr_string(ndo, tptr));
 219         tptr+=sizeof(struct lwapp_transport_header)+6;
 220     } else {
 221         tptr+=sizeof(struct lwapp_transport_header);
 222     }
 223
 224     while(tlen!=0) {
 225
 226         /* did we capture enough for fully decoding the object header ? */
 227         ND_TCHECK_LEN(tptr, sizeof(struct lwapp_control_header));
 228         if (tlen < sizeof(struct lwapp_control_header)) {
 229             ND_PRINT("\n\t  Msg goes past end of PDU");
 230             break;
 231         }
 232
 233         lwapp_control_header = (const struct lwapp_control_header *)tptr;
 234         msg_tlen = EXTRACT_BE_U_2(lwapp_control_header->len);
 235         if (tlen < sizeof(struct lwapp_control_header) + msg_tlen) {
 236             ND_PRINT("\n\t  Msg goes past end of PDU");
 237             break;
 238         }
 239
 240         /* print message header */
 241         msg_type = EXTRACT_U_1(lwapp_control_header->msg_type);
 242         ND_PRINT("\n\t  Msg type: %s (%u), Seqnum: %u, Msg len: %u, Session: 0x%08x",
 243                tok2str(lwapp_msg_type_values,"Unknown",msg_type),
 244                msg_type,
 245                EXTRACT_U_1(lwapp_control_header->seq_num),
 246                msg_tlen,
 247                EXTRACT_BE_U_4(lwapp_control_header->session_id));
 248
 249         /* did we capture enough for fully decoding the message */
 250         ND_TCHECK_LEN(tptr, msg_tlen);
 251
 252         /* XXX - Decode sub messages for each message */
 253         switch(msg_type) {
 254         case LWAPP_MSGTYPE_DISCOVERY_REQUEST:
 255         case LWAPP_MSGTYPE_DISCOVERY_RESPONSE:
 256         case LWAPP_MSGTYPE_JOIN_REQUEST:
 257         case LWAPP_MSGTYPE_JOIN_RESPONSE:
 258         case LWAPP_MSGTYPE_JOIN_ACK:
 259         case LWAPP_MSGTYPE_JOIN_CONFIRM:
 260         case LWAPP_MSGTYPE_CONFIGURE_REQUEST:
 261         case LWAPP_MSGTYPE_CONFIGURE_RESPONSE:
 262         case LWAPP_MSGTYPE_CONF_UPDATE_REQUEST:
 263         case LWAPP_MSGTYPE_CONF_UPDATE_RESPONSE:
 264         case LWAPP_MSGTYPE_WTP_EVENT_REQUEST:
 265         case LWAPP_MSGTYPE_WTP_EVENT_RESPONSE:
 266         case LWAPP_MSGTYPE_CHANGE_STATE_EVENT_REQUEST:
 267         case LWAPP_MSGTYPE_CHANGE_STATE_EVENT_RESPONSE:
 268         case LWAPP_MSGTYPE_ECHO_REQUEST:
 269         case LWAPP_MSGTYPE_ECHO_RESPONSE:
 270         case LWAPP_MSGTYPE_IMAGE_DATA_REQUEST:
 271         case LWAPP_MSGTYPE_IMAGE_DATA_RESPONSE:
 272         case LWAPP_MSGTYPE_RESET_REQUEST:
 273         case LWAPP_MSGTYPE_RESET_RESPONSE:
 274         case LWAPP_MSGTYPE_KEY_UPDATE_REQUEST:
 275         case LWAPP_MSGTYPE_KEY_UPDATE_RESPONSE:
 276         case LWAPP_MSGTYPE_PRIMARY_DISCOVERY_REQUEST:
 277         case LWAPP_MSGTYPE_PRIMARY_DISCOVERY_RESPONSE:
 278         case LWAPP_MSGTYPE_DATA_TRANSFER_REQUEST:
 279         case LWAPP_MSGTYPE_DATA_TRANSFER_RESPONSE:
 280         case LWAPP_MSGTYPE_CLEAR_CONFIG_INDICATION:
 281         case LWAPP_MSGTYPE_WLAN_CONFIG_REQUEST:
 282         case LWAPP_MSGTYPE_WLAN_CONFIG_RESPONSE:
 283         case LWAPP_MSGTYPE_MOBILE_CONFIG_REQUEST:
 284         case LWAPP_MSGTYPE_MOBILE_CONFIG_RESPONSE:
 285         default:
 286             break;
 287         }
 288
 289         tptr += sizeof(struct lwapp_control_header) + msg_tlen;
 290         tlen -= sizeof(struct lwapp_control_header) + msg_tlen;
 291     }
 292     return;
 293
 294  trunc:
 295     ND_PRINT("\n\t\t packet exceeded snapshot");
 296 }
 297
 298 void
 299 lwapp_data_print(netdissect_options *ndo,
 300                  const u_char *pptr, u_int len)
 301 {
 302     const struct lwapp_transport_header *lwapp_trans_header;
 303     const u_char *tptr;
 304     u_int tlen;
 305     u_int version;
 306
 307     tptr=pptr;
 308
 309     /* check if enough bytes for AP identity */
 310     ND_TCHECK_6(tptr);
 311     lwapp_trans_header = (const struct lwapp_transport_header *)pptr;
 312     ND_TCHECK_SIZE(lwapp_trans_header);
 313     version = EXTRACT_U_1(lwapp_trans_header->version);
 314
 315     /*
 316      * Sanity checking of the header.
 317      */
 318     if (LWAPP_EXTRACT_VERSION(version) != LWAPP_VERSION) {
 319         ND_PRINT("LWAPP version %u packet not supported",
 320                LWAPP_EXTRACT_VERSION(version));
 321         return;
 322     }
 323
 324     /* non-verbose */
 325     if (ndo->ndo_vflag < 1) {
 326         ND_PRINT("LWAPPv%u, %s frame, Flags [%s], length %u",
 327                LWAPP_EXTRACT_VERSION(version),
 328                LWAPP_EXTRACT_CONTROL_BIT(version) ? "Control" : "Data",
 329                bittok2str(lwapp_header_bits_values,"none",version&0x07),
 330                len);
 331         return;
 332     }
 333
 334     /* ok they seem to want to know everything - lets fully decode it */
 335     tlen=EXTRACT_BE_U_2(lwapp_trans_header->length);
 336     if (tlen < sizeof(struct lwapp_transport_header)) {
 337         ND_PRINT("LWAPPv%u, %s frame, Radio-id  %u, Flags [%s], length %u < transport header length",
 338                LWAPP_EXTRACT_VERSION(version),
 339                LWAPP_EXTRACT_CONTROL_BIT(version) ? "Control" : "Data",
 340                LWAPP_EXTRACT_RID(version),
 341                bittok2str(lwapp_header_bits_values,"none",version&0x07),
 342                tlen);
 343         return;
 344     }
 345
 346     ND_PRINT("LWAPPv%u, %s frame, Radio-id  %u, Flags [%s], Frag-id  %u, length %u",
 347            LWAPP_EXTRACT_VERSION(version),
 348            LWAPP_EXTRACT_CONTROL_BIT(version) ? "Control" : "Data",
 349            LWAPP_EXTRACT_RID(version),
 350            bittok2str(lwapp_header_bits_values,"none",version&0x07),
 351            EXTRACT_U_1(lwapp_trans_header->frag_id),
 352            tlen);
 353
 354     tptr+=sizeof(struct lwapp_transport_header);
 355     tlen-=sizeof(struct lwapp_transport_header);
 356
 357     /* FIX - An IEEE 802.11 frame follows - hexdump for now */
 358     print_unknown_data(ndo, tptr, "\n\t", tlen);
 359
 360     return;
 361
 362  trunc:
 363     ND_PRINT("\n\t\t packet exceeded snapshot");
 364 }
 365
 366 /*
 367  * Local Variables:
 368  * c-style: whitesmith
 369  * c-basic-offset: 8
 370  * End:
 371  */