/* packet-dop.c * Routines for X.501 (DSA Operational Attributes) packet dissection * Graeme Lunt 2005 * * $Id$ * * Wireshark - Network traffic analyzer * By Gerald Combs * Copyright 1998 Gerald Combs * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. */ #ifdef HAVE_CONFIG_H # include "config.h" #endif #include #include #include #include #include #include #include "packet-ber.h" #include "packet-acse.h" #include "packet-ros.h" #include "packet-x509sat.h" #include "packet-x509af.h" #include "packet-x509if.h" #include "packet-dap.h" #include "packet-dsp.h" #include "packet-crmf.h" #include "packet-dop.h" #define PNAME "X.501 Directory Operational Binding Management Protocol" #define PSNAME "DOP" #define PFNAME "dop" static guint global_dop_tcp_port = 102; static guint tcp_port = 0; static dissector_handle_t tpkt_handle = NULL; void prefs_register_dop(void); /* forwad declaration for use in preferences registration */ /* Initialize the protocol and registered fields */ int proto_dop = -1; static struct SESSION_DATA_STRUCTURE* session = NULL; static const char *binding_type = NULL; /* binding_type */ static int call_dop_oid_callback(char *base_oid, tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, char *col_info); #include "packet-dop-hf.c" /* Initialize the subtree pointers */ static gint ett_dop = -1; #include "packet-dop-ett.c" #include "packet-dop-fn.c" static int call_dop_oid_callback(char *base_oid, tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, char *col_info) { char binding_param[BER_MAX_OID_STR_LEN]; g_snprintf(binding_param, BER_MAX_OID_STR_LEN, "%s.%s", base_oid, binding_type ? binding_type : ""); if (col_info && (check_col(pinfo->cinfo, COL_INFO))) col_append_fstr(pinfo->cinfo, COL_INFO, " %s", col_info); return call_ber_oid_callback(binding_param, tvb, offset, pinfo, tree); } /* * Dissect DOP PDUs inside a ROS PDUs */ static void dissect_dop(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree) { int offset = 0; int old_offset; proto_item *item=NULL; proto_tree *tree=NULL; int (*dop_dissector)(gboolean implicit_tag _U_, tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree *tree, int hf_index _U_) = NULL; char *dop_op_name; /* do we have operation information from the ROS dissector? */ if( !pinfo->private_data ){ if(parent_tree){ proto_tree_add_text(parent_tree, tvb, offset, -1, "Internal error: can't get operation information from ROS dissector."); } return ; } else { session = ( (struct SESSION_DATA_STRUCTURE*)(pinfo->private_data) ); } if(parent_tree){ item = proto_tree_add_item(parent_tree, proto_dop, tvb, 0, -1, FALSE); tree = proto_item_add_subtree(item, ett_dop); } if (check_col(pinfo->cinfo, COL_PROTOCOL)) col_set_str(pinfo->cinfo, COL_PROTOCOL, "DOP"); if (check_col(pinfo->cinfo, COL_INFO)) col_clear(pinfo->cinfo, COL_INFO); switch(session->ros_op & ROS_OP_MASK) { case (ROS_OP_BIND | ROS_OP_ARGUMENT): /* BindInvoke */ dop_dissector = dissect_dop_DSAOperationalManagementBindArgument; dop_op_name = "DSA-Operational-Bind-Argument"; break; case (ROS_OP_BIND | ROS_OP_RESULT): /* BindResult */ dop_dissector = dissect_dop_DSAOperationalManagementBindResult; dop_op_name = "DSA-Operational-Bind-Result"; break; case (ROS_OP_BIND | ROS_OP_ERROR): /* BindError */ dop_dissector = dissect_dop_DSAOperationalManagementBindError; dop_op_name = "DSA-Operational-Management-Bind-Error"; break; case (ROS_OP_INVOKE | ROS_OP_ARGUMENT): /* Invoke Argument */ switch(session->ros_op & ROS_OP_OPCODE_MASK) { case 100: /* establish */ dop_dissector = dissect_dop_EstablishOperationalBindingArgument; dop_op_name = "Establish-Operational-Binding-Argument"; break; case 101: /* terminate */ dop_dissector = dissect_dop_TerminateOperationalBindingArgument; dop_op_name = "Terminate-Operational-Binding-Argument"; break; case 102: /* modify */ dop_dissector = dissect_dop_ModifyOperationalBindingArgument; dop_op_name = "Modify-Operational-Binding-Argument"; break; default: proto_tree_add_text(tree, tvb, offset, -1,"Unsupported DOP Argument opcode (%d)", session->ros_op & ROS_OP_OPCODE_MASK); break; } break; case (ROS_OP_INVOKE | ROS_OP_RESULT): /* Return Result */ switch(session->ros_op & ROS_OP_OPCODE_MASK) { case 100: /* establish */ dop_dissector = dissect_dop_EstablishOperationalBindingResult; dop_op_name = "Establish-Operational-Binding-Result"; break; case 101: /* terminate */ dop_dissector = dissect_dop_TerminateOperationalBindingResult; dop_op_name = "Terminate-Operational-Binding-Result"; break; case 102: /* modify */ dop_dissector = dissect_dop_ModifyOperationalBindingResult; dop_op_name = "Modify-Operational-Binding-Result"; break; default: proto_tree_add_text(tree, tvb, offset, -1,"Unsupported DOP Result opcode (%d)", session->ros_op & ROS_OP_OPCODE_MASK); break; } break; case (ROS_OP_INVOKE | ROS_OP_ERROR): /* Return Error */ switch(session->ros_op & ROS_OP_OPCODE_MASK) { case 100: /* operational-binding */ dop_dissector = dissect_dop_OpBindingErrorParam; dop_op_name = "Operational-Binding-Error"; break; default: proto_tree_add_text(tree, tvb, offset, -1,"Unsupported DOP Error opcode (%d)", session->ros_op & ROS_OP_OPCODE_MASK); break; } break; default: proto_tree_add_text(tree, tvb, offset, -1,"Unsupported DOP PDU"); return; } if(dop_dissector) { if (check_col(pinfo->cinfo, COL_INFO)) col_add_str(pinfo->cinfo, COL_INFO, dop_op_name); while (tvb_reported_length_remaining(tvb, offset) > 0){ old_offset=offset; offset=(*dop_dissector)(FALSE, tvb, offset, pinfo , tree, -1); if(offset == old_offset){ proto_tree_add_text(tree, tvb, offset, -1,"Internal error, zero-byte DOP PDU"); offset = tvb_length(tvb); break; } } } } /*--- proto_register_dop -------------------------------------------*/ void proto_register_dop(void) { /* List of fields */ static hf_register_info hf[] = { #include "packet-dop-hfarr.c" }; /* List of subtrees */ static gint *ett[] = { &ett_dop, #include "packet-dop-ettarr.c" }; module_t *dop_module; /* Register protocol */ proto_dop = proto_register_protocol(PNAME, PSNAME, PFNAME); register_dissector("dop", dissect_dop, proto_dop); /* Register fields and subtrees */ proto_register_field_array(proto_dop, hf, array_length(hf)); proto_register_subtree_array(ett, array_length(ett)); /* Register our configuration options for DOP, particularly our port */ #ifdef PREFERENCE_GROUPING dop_module = prefs_register_protocol_subtree("OSI/X.500", proto_dop, prefs_register_dop); #else dop_module = prefs_register_protocol(proto_dop, prefs_register_dop); #endif prefs_register_uint_preference(dop_module, "tcp.port", "DOP TCP Port", "Set the port for DOP operations (if other" " than the default of 102)", 10, &global_dop_tcp_port); } /*--- proto_reg_handoff_dop --- */ void proto_reg_handoff_dop(void) { dissector_handle_t handle = NULL; #include "packet-dop-dis-tab.c" /* APPLICATION CONTEXT */ register_ber_oid_name("2.5.3.3", "id-ac-directory-operational-binding-management"); /* ABSTRACT SYNTAXES */ /* Register DOP with ROS (with no use of RTSE) */ if((handle = find_dissector("dop"))) { register_ros_oid_dissector_handle("2.5.9.4", handle, 0, "id-as-directory-operational-binding-management", FALSE); } /* BINDING TYPES */ register_ber_oid_name("2.5.19.1", "shadow-agreement"); register_ber_oid_name("2.5.19.2", "hierarchical-agreement"); register_ber_oid_name("2.5.19.3", "non-specific-hierarchical-agreement"); /* ACCESS CONTROL SCHEMES */ register_ber_oid_name("2.5.28.1", "basic-ACS"); register_ber_oid_name("2.5.28.2", "simplified-ACS"); register_ber_oid_name("2.5.28.3", "ruleBased-ACS"); register_ber_oid_name("2.5.28.4", "ruleAndBasic-ACS"); register_ber_oid_name("2.5.28.5", "ruleAndSimple-ACS"); /* ADMINISTRATIVE ROLES */ register_ber_oid_name("2.5.23.1", "id-ar-autonomousArea"); register_ber_oid_name("2.5.23.2", "id-ar-accessControlSpecificArea"); register_ber_oid_name("2.5.23.3", "id-ar-accessControlInnerArea"); register_ber_oid_name("2.5.23.4", "id-ar-subschemaAdminSpecificArea"); register_ber_oid_name("2.5.23.5", "id-ar-collectiveAttributeSpecificArea"); register_ber_oid_name("2.5.23.6", "id-ar-collectiveAttributeInnerArea"); register_ber_oid_name("2.5.23.7", "id-ar-contextDefaultSpecificArea"); register_ber_oid_name("2.5.23.8", "id-ar-serviceSpecificArea"); /* remember the tpkt handler for change in preferences */ tpkt_handle = find_dissector("tpkt"); } void prefs_register_dop(void) { /* de-register the old port */ /* port 102 is registered by TPKT - don't undo this! */ if((tcp_port != 102) && tpkt_handle) dissector_delete("tcp.port", tcp_port, tpkt_handle); /* Set our port number for future use */ tcp_port = global_dop_tcp_port; if((tcp_port > 0) && (tcp_port != 102) && tpkt_handle) dissector_add("tcp.port", global_dop_tcp_port, tpkt_handle); }