/* packet-rtsp.c * Routines for RTSP packet disassembly (RFC 2326) * * Jason Lango * Liberally copied from packet-http.c, by Guy Harris * * $Id: packet-rtsp.c,v 1.18 2000/09/11 16:16:03 gram Exp $ * * Ethereal - Network traffic analyzer * By Gerald Combs * Copyright 1998 Gerald Combs * * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. * * */ #include "config.h" #ifdef HAVE_SYS_TYPES_H #include #endif #include #include #include #include "packet.h" #include "packet-sdp.h" #include "packet-rtp.h" #include "packet-rtcp.h" #include "conversation.h" #include "strutil.h" static int proto_rtsp = -1; static gint ett_rtsp = -1; static int hf_rtsp_method = -1; static int hf_rtsp_url = -1; static int hf_rtsp_status = -1; #define TCP_PORT_RTSP 554 static int process_rtsp_request_or_reply(const u_char *data, int offset, int linelen, proto_tree *tree); static int is_content_sdp(const u_char *line, int linelen) { const char *hdr = "Content-Type:"; size_t hdrlen = strlen(hdr); const char *type = "application/sdp"; size_t typelen = strlen(type); if (linelen < hdrlen || strncasecmp(hdr, line, hdrlen)) return 0; line += hdrlen; linelen -= hdrlen; while (linelen > 0 && (*line == ' ' || *line == '\t')) { line++; linelen--; } if (linelen < typelen || strncasecmp(type, line, typelen)) return 0; line += typelen; linelen -= typelen; if (linelen > 0 && !isspace(*line)) return 0; return 1; } static const char rtsp_transport[] = "Transport:"; static const char rtsp_sps[] = "server_port="; static const char rtsp_cps[] = "client_port="; static const char rtsp_rtp[] = "rtp/avp"; static void rtsp_create_conversation(const u_char *trans_begin, const u_char *trans_end) { conversation_t *conv; u_char tbuf[256]; u_char *tmp; int c_data_port, c_mon_port; int s_data_port, s_mon_port; strncpy(tbuf, trans_begin, trans_end - trans_begin); tbuf[sizeof(tbuf)-1] = 0; tmp = tbuf + strlen(rtsp_transport); while (*tmp && isspace(*tmp)) tmp++; if (strncasecmp(tmp, rtsp_rtp, strlen(rtsp_rtp)) != 0) return; c_data_port = c_mon_port = 0; s_data_port = s_mon_port = 0; if ((tmp = strstr(tbuf, rtsp_sps))) { tmp += strlen(rtsp_sps); if (sscanf(tmp, "%u-%u", &s_data_port, &s_mon_port) < 1) g_warning("rtsp: failed to parse server_port"); } if ((tmp = strstr(tbuf, rtsp_cps))) { tmp += strlen(rtsp_cps); if (sscanf(tmp, "%u-%u", &c_data_port, &c_mon_port) < 1) g_warning("rtsp: failed to parse client_port"); } if (!c_data_port || !s_data_port) return; conv = conversation_new(&pi.src, &pi.dst, PT_UDP, s_data_port, c_data_port, 0); old_conversation_set_dissector(conv, dissect_rtp); if (!c_mon_port || !s_mon_port) return; conv = conversation_new(&pi.src, &pi.dst, PT_UDP, s_mon_port, c_mon_port, 0); old_conversation_set_dissector(conv, dissect_rtcp); } static void dissect_rtsp(const u_char *pd, int offset, frame_data *fd, proto_tree *tree) { proto_tree *rtsp_tree; proto_item *ti; const u_char *data, *dataend; const u_char *linep, *lineend, *eol; int linelen; u_char c; int is_sdp = 0; int end_offset; OLD_CHECK_DISPLAY_AS_DATA(proto_rtsp, pd, offset, fd, tree); data = &pd[offset]; dataend = data + END_OF_FRAME; end_offset = offset + END_OF_FRAME; rtsp_tree = NULL; if (tree) { ti = proto_tree_add_item(tree, proto_rtsp, NullTVB, offset, END_OF_FRAME, FALSE); rtsp_tree = proto_item_add_subtree(ti, ett_rtsp); } if (check_col(fd, COL_PROTOCOL)) col_add_str(fd, COL_PROTOCOL, "RTSP"); if (check_col(fd, COL_INFO)) { /* * Put the first line from the buffer into the summary * if it's an RTSP request or reply. Otherwise, just call * it a continuation. */ lineend = find_line_end(data, dataend, &eol); linelen = lineend - data; if (process_rtsp_request_or_reply(data, offset, linelen, rtsp_tree)) col_add_str(fd, COL_INFO, format_text(data, linelen)); else col_add_str(fd, COL_INFO, "Continuation"); } if (offset >= end_offset) goto bad_len; while (data < dataend) { /* * Find the end of the line. */ lineend = find_line_end(data, dataend, &eol); linelen = lineend - data; /* * OK, does it look like an RTSP request or * response? */ if (process_rtsp_request_or_reply(data, offset, linelen, rtsp_tree)) goto is_rtsp; /* * No. Does it look like a blank line (as would * appear at the end of an RTSP request)? */ if (linelen == 1) { if (*data == '\n') goto is_rtsp; } if (linelen == 2) { if (strncmp(data, "\r\n", 2) == 0 || strncmp(data, "\n\r", 2) == 0) goto is_rtsp; } /* * No. Does it look like a MIME header? */ linep = data; while (linep < lineend) { c = *linep++; if (!isprint(c)) break; /* not printable, not a MIME header */ switch (c) { case '(': case ')': case '<': case '>': case '@': case ',': case ';': case '\\': case '"': case '/': case '[': case ']': case '?': case '=': case '{': case '}': /* * It's a tspecial, so it's not * part of a token, so it's not * a field name for the beginning * of a MIME header. */ goto not_rtsp; case ':': /* * This ends the token; we consider * this to be a MIME header. */ if (is_content_sdp(data, linelen)) is_sdp = 1; goto is_rtsp; } } not_rtsp: /* * We don't consider this part of an RTSP request or * reply, so we don't display it. */ break; is_rtsp: /* * Put this line. */ if (rtsp_tree) { proto_tree_add_text(rtsp_tree, NullTVB, offset, linelen, "%s", format_text(data, linelen)); } if (linelen > strlen(rtsp_transport) && strncasecmp(data, rtsp_transport, strlen(rtsp_transport)) == 0) rtsp_create_conversation(data, data + linelen); offset += linelen; data = lineend; } if (is_sdp) { dissect_sdp(pd, offset, fd, tree); if (check_col(fd, COL_PROTOCOL)) col_add_str(fd, COL_PROTOCOL, "RTSP/SDP"); } else if (data < dataend) { proto_tree_add_text(rtsp_tree, NullTVB, offset, END_OF_FRAME, "Data (%d bytes)", END_OF_FRAME); } return; bad_len: proto_tree_add_text(rtsp_tree, NullTVB, end_offset, 0, "Unexpected end of packet"); } const char *rtsp_methods[] = { "DESCRIBE", "ANNOUNCE", "GET_PARAMETER", "OPTIONS", "PAUSE", "PLAY", "RECORD", "REDIRECT", "SETUP", "SET_PARAMETER", "TEARDOWN" }; const int rtsp_nmethods = sizeof(rtsp_methods) / sizeof(*rtsp_methods); static int process_rtsp_request_or_reply(const u_char *data, int offset, int linelen, proto_tree *tree) { int ii; const u_char *lineend = data + linelen; /* Reply */ if (linelen >= 5 && !strncasecmp("RTSP/", data, 5)) { if (tree) { /* status code */ const u_char *status = data; const u_char *status_start; unsigned int status_i = 0; while (status < lineend && !isspace(*status)) status++; while (status < lineend && isspace(*status)) status++; status_start = status; while (status < lineend && isdigit(*status)) status_i = status_i * 10 + *status++ - '0'; proto_tree_add_uint_hidden(tree, hf_rtsp_status, NullTVB, offset + (status_start - data), status - status_start, status_i); } return TRUE; } /* Request Methods */ for (ii = 0; ii < rtsp_nmethods; ii++) { size_t len = strlen(rtsp_methods[ii]); if (linelen >= len && !strncasecmp(rtsp_methods[ii], data, len)) break; } if (ii == rtsp_nmethods) return FALSE; if (tree) { const u_char *url; const u_char *url_start; u_char *tmp_url; /* method name */ proto_tree_add_string_hidden(tree, hf_rtsp_method, NullTVB, offset, strlen(rtsp_methods[ii]), rtsp_methods[ii]); /* URL */ url = data; while (url < lineend && !isspace(*url)) url++; while (url < lineend && isspace(*url)) url++; url_start = url; while (url < lineend && !isspace(*url)) url++; tmp_url = g_malloc(url - url_start + 1); memcpy(tmp_url, url_start, url - url_start); tmp_url[url - url_start] = 0; proto_tree_add_string_hidden(tree, hf_rtsp_url, NullTVB, offset + (url_start - data), url - url_start, tmp_url); g_free(tmp_url); } return TRUE; } void proto_register_rtsp(void) { static gint *ett[] = { &ett_rtsp, }; static hf_register_info hf[] = { { &hf_rtsp_method, { "Method", "rtsp.method", FT_STRING, BASE_NONE, NULL, 0 }}, { &hf_rtsp_url, { "URL", "rtsp.url", FT_STRING, BASE_NONE, NULL, 0 }}, { &hf_rtsp_status, { "Status", "rtsp.status", FT_UINT32, BASE_DEC, NULL, 0 }}, }; proto_rtsp = proto_register_protocol("Real Time Streaming Protocol", "rtsp"); proto_register_field_array(proto_rtsp, hf, array_length(hf)); proto_register_subtree_array(ett, array_length(ett)); } void proto_reg_handoff_rtsp(void) { old_dissector_add("tcp.port", TCP_PORT_RTSP, dissect_rtsp); }