/* packet-h221_nonstd.c * Routines for H.221 nonstandard parameters disassembly * * Wireshark - Network traffic analyzer * By Gerald Combs * Copyright 1998 Gerald Combs * * SPDX-License-Identifier: GPL-2.0-or-later */ #include "config.h" #include void proto_register_nonstd(void); void proto_reg_handoff_nonstd(void); /* Define the nonstd proto */ static int proto_nonstd = -1; static int hf_h221_nonstd_netmeeting_codec = -1; static int hf_h221_nonstd_netmeeting_non_standard = -1; /* * Define the trees for nonstd * We need one for nonstd itself and one for the nonstd paramters */ static int ett_nonstd = -1; static const value_string ms_codec_vals[] = { { 0x0111, "L&H CELP 4.8k" }, { 0x0200, "MS-ADPCM" }, { 0x0211, "L&H CELP 8k" }, { 0x0311, "L&H CELP 12k" }, { 0x0411, "L&H CELP 16k" }, { 0x1100, "IMA-ADPCM" }, { 0x3100, "MS-GSM" }, { 0xfeff, "E-AMR" }, { 0, NULL } }; static int dissect_ms_nonstd(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { proto_item *it; proto_tree *tr; guint32 offset=0; gint tvb_len; guint16 codec_extra; it=proto_tree_add_protocol_format(tree, proto_nonstd, tvb, 0, tvb_reported_length(tvb), "Microsoft NonStd"); tr=proto_item_add_subtree(it, ett_nonstd); tvb_len = tvb_reported_length(tvb); /* * XXX - why do this test? Are there any cases where throwing * an exception if the tvbuff is too short causes subsequent stuff * in the packet not to be dissected (e.g., if the octet string * containing the non-standard data is too short for the data * supposedly contained in it, and is followed by more items)? * * If so, the right fix might be to catch ReportedBoundsError in * the dissector calling this dissector, and report a malformed * nonStandardData item, and rethrow other exceptions (as a * BoundsError means you really *have* run out of packet data). */ if(tvb_len >= 23) { codec_extra = tvb_get_ntohs(tvb,offset+22); if(codec_extra == 0x0100) { proto_tree_add_item(tr, hf_h221_nonstd_netmeeting_codec, tvb, offset+20, 2, ENC_BIG_ENDIAN); } else { proto_tree_add_item(tr, hf_h221_nonstd_netmeeting_non_standard, tvb, offset, -1, ENC_NA); } } return tvb_captured_length(tvb); } /* Register all the bits needed with the filtering engine */ void proto_register_nonstd(void) { static hf_register_info hf[] = { { &hf_h221_nonstd_netmeeting_codec, { "Microsoft NetMeeting Codec", "h221nonstd.netmeeting.codec", FT_UINT32, BASE_HEX, VALS(ms_codec_vals), 0, NULL, HFILL } }, { &hf_h221_nonstd_netmeeting_non_standard, { "Microsoft NetMeeting Non Standard", "h221nonstd.netmeeting.non_standard", FT_BYTES, BASE_NONE, NULL, 0, NULL, HFILL } }, }; static gint *ett[] = { &ett_nonstd, }; proto_nonstd = proto_register_protocol("H221NonStandard","h221nonstd", "h221nonstd"); proto_register_subtree_array(ett, array_length(ett)); proto_register_field_array(proto_nonstd, hf, array_length(hf)); } /* The registration hand-off routine */ void proto_reg_handoff_nonstd(void) { static dissector_handle_t ms_nonstd_handle; ms_nonstd_handle = create_dissector_handle(dissect_ms_nonstd, proto_nonstd); dissector_add_uint("h245.nsp.h221",0xb500534c, ms_nonstd_handle); dissector_add_uint("h225.nsp.h221",0xb500534c, ms_nonstd_handle); } /* * Editor modelines - https://www.wireshark.org/tools/modelines.html * * Local variables: * c-basic-offset: 4 * tab-width: 8 * indent-tabs-mode: nil * End: * * vi: set shiftwidth=4 tabstop=8 expandtab: * :indentSize=4:tabSize=8:noTabs=true: */