1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
|
/* packet-nxp_802154_sniffer.c
* Routines for NXP JN51xx 802.15.4 Sniffer application packet dissection
* Copyright 2017, Lee Mitchell <lee@indigopepper.com>
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0+
*/
/*
* This dissector handles messages sent by either NXP's own sniffer server application,
* or the open source one provided on GitHub here:
* https://github.com/Codemonkey1973/JN51xx-802.15.4-Sniffer-Server
*
* When used with an NXP JN51xx wireless microcontroller running NXP's
* Sniffer firmware, the sniffer server prefixes any received packets
* with a short header and then sends them as a UDP datagrams. This dissector
* decodes the short header and then passes the 802.15.4 frame on to the
* IEEE 802.15.4 dissector for further dissection.
*
*/
#include "config.h"
#include <epan/packet.h>
#include <epan/dissectors/packet-ieee802154.h>
#define NXP_802154_SNIFFER_UDP_PORT 49999 /* Not IANA registered */
#define NXP_802154_SNIFFER_TIMESTAMP_LENGTH 5
void proto_reg_handoff_nxp_802154_sniffer(void);
void proto_register_nxp_802154_sniffer(void);
static int proto_nxp_802154_sniffer = -1;
static int hf_nxp_802154_sniffer_timestamp = -1;
static int hf_nxp_802154_sniffer_id = -1;
static int hf_nxp_802154_sniffer_channel = -1;
static int hf_nxp_802154_sniffer_lqi = -1;
static int hf_nxp_802154_sniffer_length = -1;
static gint ett_nxp_802154_sniffer = -1;
static dissector_handle_t ieee802154_handle;
static int
dissect_nxp_802154_sniffer(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_)
{
proto_item *ti;
proto_tree *nxp_802154_sniffer_tree;
guint offset = 0;
guint snifferidlen;
tvbuff_t *ieee802154_tvb;
/* Check that the packet is long enough for it to belong to us. */
if (tvb_reported_length(tvb) < 9)
return 0;
col_set_str(pinfo->cinfo, COL_PROTOCOL, "NXP 802.15.4 SNIFFER");
col_clear(pinfo->cinfo, COL_INFO);
ti = proto_tree_add_item(tree, proto_nxp_802154_sniffer, tvb, offset, -1, ENC_NA);
nxp_802154_sniffer_tree = proto_item_add_subtree(ti, ett_nxp_802154_sniffer);
/* Time stamp */
proto_tree_add_item(nxp_802154_sniffer_tree, hf_nxp_802154_sniffer_timestamp, tvb, offset, NXP_802154_SNIFFER_TIMESTAMP_LENGTH, ENC_BIG_ENDIAN);
offset += NXP_802154_SNIFFER_TIMESTAMP_LENGTH;
/* ID */
proto_tree_add_item_ret_length(nxp_802154_sniffer_tree, hf_nxp_802154_sniffer_id, tvb, offset, -1, ENC_ASCII|ENC_NA, &snifferidlen);
offset += snifferidlen;
/* Channel */
proto_tree_add_item(nxp_802154_sniffer_tree, hf_nxp_802154_sniffer_channel, tvb, offset, 1, ENC_BIG_ENDIAN);
offset += 1;
/* LQI */
proto_tree_add_item(nxp_802154_sniffer_tree, hf_nxp_802154_sniffer_lqi, tvb, offset, 1, ENC_BIG_ENDIAN);
offset += 1;
/* Length */
proto_tree_add_item(nxp_802154_sniffer_tree, hf_nxp_802154_sniffer_length, tvb, offset, 1, ENC_BIG_ENDIAN);
offset += 1;
if (offset >= (tvb_captured_length(tvb) - IEEE802154_FCS_LEN)) {
return 0;
}
ieee802154_tvb = tvb_new_subset_length(tvb, offset, tvb_captured_length(tvb) - offset);
call_dissector(ieee802154_handle, ieee802154_tvb, pinfo, tree);
return tvb_captured_length(tvb);
}
void
proto_register_nxp_802154_sniffer(void)
{
static hf_register_info hf[] = {
{ &hf_nxp_802154_sniffer_timestamp,
{ "Timestamp (16uS Symbol Periods)", "nxp_802154_sniffer.timestamp", FT_UINT40, BASE_DEC, NULL, 0x0, NULL, HFILL } },
{ &hf_nxp_802154_sniffer_id,
{ "Sniffer ID", "nxp_802154_sniffer.id", FT_STRINGZ, BASE_NONE, NULL, 0x0, NULL, HFILL } },
{ &hf_nxp_802154_sniffer_channel,
{ "Channel", "nxp_802154_sniffer.channel", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL } },
{ &hf_nxp_802154_sniffer_lqi,
{ "LQI", "nxp_802154_sniffer.lqi", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL } },
{ &hf_nxp_802154_sniffer_length,
{ "Length", "nxp_802154_sniffer.length", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL } },
};
static gint *ett[] = {
&ett_nxp_802154_sniffer,
};
proto_nxp_802154_sniffer = proto_register_protocol("NXP 802.15.4 Sniffer Protocol",
"NXP 802154 Sniffer",
"nxp_802154_sniffer");
proto_register_field_array(proto_nxp_802154_sniffer, hf, array_length(hf));
proto_register_subtree_array(ett, array_length(ett));
}
void
proto_reg_handoff_nxp_802154_sniffer(void)
{
dissector_handle_t nxp_802154_sniffer_handle;
ieee802154_handle = find_dissector_add_dependency("wpan", proto_nxp_802154_sniffer);
nxp_802154_sniffer_handle = create_dissector_handle(dissect_nxp_802154_sniffer, proto_nxp_802154_sniffer);
dissector_add_uint_with_preference("udp.port", NXP_802154_SNIFFER_UDP_PORT, nxp_802154_sniffer_handle);
}
/*
* Editor modelines - http://www.wireshark.org/tools/modelines.html
*
* Local variables:
* c-basic-offset: 4
* tab-width: 8
* indent-tabs-mode: nil
* End:
*
* vi: set shiftwidth=4 tabstop=8 expandtab:
* :indentSize=4:tabSize=8:noTabs=true:
*/
|
