diff options
| author | Kevin Albertson <kevin.eric.albertson@gmail.com> | 2022-11-20 19:49:37 -0500 |
|---|---|---|
| committer | A Wireshark GitLab Utility <gerald+gitlab-utility@wireshark.org> | 2022-11-24 09:21:51 +0000 |
| commit | 3f8ae9a08d0ac28fafa798800835e53c38fe00cd (patch) | |
| tree | d7e331cedc19fbc6395661e98077df74523aa465 /epan/dissectors/packet-mongo.c | |
| parent | 15b3deff2761db6a372e7095e70ff890cf359abc (diff) | |
mongo: add Checksum field
Diffstat (limited to 'epan/dissectors/packet-mongo.c')
| -rw-r--r-- | epan/dissectors/packet-mongo.c | 29 |
1 files changed, 27 insertions, 2 deletions
diff --git a/epan/dissectors/packet-mongo.c b/epan/dissectors/packet-mongo.c index c576e53796..a08a588727 100644 --- a/epan/dissectors/packet-mongo.c +++ b/epan/dissectors/packet-mongo.c @@ -23,6 +23,8 @@ #include <epan/exceptions.h> #include <epan/expert.h> #include <epan/proto_data.h> +#include <wsutil/crc32.h> // CRC32C_PRELOAD +#include <epan/crc32-tvb.h> // crc32c_tvb_offset_calculate #include "packet-tcp.h" #include "packet-tls.h" #ifdef HAVE_SNAPPY @@ -260,6 +262,7 @@ static int hf_mongo_msg_sections_section_body = -1; static int hf_mongo_msg_sections_section_doc_sequence = -1; static int hf_mongo_msg_sections_section_size = -1; static int hf_mongo_msg_sections_section_doc_sequence_id = -1; +static int hf_mongo_msg_checksum = -1; static gint ett_mongo = -1; static gint ett_mongo_doc = -1; @@ -840,14 +843,31 @@ dissect_mongo_op_msg(tvbuff_t *tvb, packet_info *pinfo, guint offset, proto_tree &hf_mongo_msg_flags_exhaustallowed, NULL }; + gint64 op_msg_flags; + bool checksum_present = false; + + proto_tree_add_bitmask_ret_uint64 (tree, tvb, offset, hf_mongo_msg_flags, ett_mongo_msg_flags, mongo_msg_flags, ENC_LITTLE_ENDIAN, &op_msg_flags); + if (op_msg_flags & 0x00000001) { + checksum_present = true; + } - proto_tree_add_bitmask(tree, tvb, offset, hf_mongo_msg_flags, ett_mongo_msg_flags, mongo_msg_flags, ENC_LITTLE_ENDIAN); offset += 4; - while (tvb_reported_length_remaining(tvb, offset) > 0){ + while (tvb_reported_length_remaining(tvb, offset) > (checksum_present ? 4 : 0)){ offset += dissect_op_msg_section(tvb, pinfo, offset, tree); } + if (checksum_present) { + guint32 calculated_checksum = ~crc32c_tvb_offset_calculate (tvb, 0, tvb_reported_length (tvb) - 4, CRC32C_PRELOAD); + guint32 dissected_checksum = tvb_get_ntohl(tvb, offset); + if(calculated_checksum == dissected_checksum) { + proto_tree_add_uint_format_value(tree, hf_mongo_msg_checksum, tvb, offset, 4, dissected_checksum, "0x%08x (Good CRC32)", dissected_checksum); + } else { + proto_tree_add_uint_format_value(tree, hf_mongo_msg_checksum, tvb, offset, 4, dissected_checksum, "0x%08x (Bad CRC32, should be 0x%08x)", dissected_checksum, calculated_checksum); + } + offset += 4; + } + return offset; } @@ -1272,6 +1292,11 @@ proto_register_mongo(void) FT_STRING, BASE_NONE, NULL, 0x0, "Document sequence identifier", HFILL } }, + { &hf_mongo_msg_checksum, + { "Checksum", "mongo.msg.checksum", + FT_UINT32, BASE_HEX, NULL, 0x0, + "CRC32C checksum.", HFILL } + }, { &hf_mongo_number_of_cursor_ids, { "Number of Cursor IDS", "mongo.number_to_cursor_ids", FT_INT32, BASE_DEC, NULL, 0x0, |