/* packet-pana.c * Routines for Protocol for carrying Authentication for Network Access dissection * Copyright 2006, Peter Racz * * Wireshark - Network traffic analyzer * By Gerald Combs * Copyright 1998 Gerald Combs * * SPDX-License-Identifier: GPL-2.0-or-later */ /* This protocol implements PANA as of the IETF RFC 5191. * (Note: This dissector was updated to reflect * draft-ietf-pana-pana-18 which is a workitem of the ietf workgroup * internet area/pana. I believe draft-18 then became RFC 5191). */ #include "config.h" #include #include void proto_register_pana(void); void proto_reg_handoff_pana(void); #if 0 #define PANA_UDP_PORT 3001 #endif #define MIN_AVP_SIZE 8 #define PANA_FLAG_R 0x8000 #define PANA_FLAG_S 0x4000 #define PANA_FLAG_C 0x2000 #define PANA_FLAG_A 0x1000 #define PANA_FLAG_P 0x0800 #define PANA_FLAG_I 0x0400 #if 0 #define PANA_FLAG_RES6 0x0200 #define PANA_FLAG_RES7 0x0100 #define PANA_FLAG_RES8 0x0080 #define PANA_FLAG_RES9 0x0040 #define PANA_FLAG_RES10 0x0020 #define PANA_FLAG_RES11 0x0010 #define PANA_FLAG_RES12 0x0008 #define PANA_FLAG_RES13 0x0004 #define PANA_FLAG_RES14 0x0002 #define PANA_FLAG_RES15 0x0001 #endif #define PANA_FLAG_RESERVED 0x03ff #define PANA_AVP_FLAG_V 0x8000 #if 0 #define PANA_AVP_FLAG_RES1 0x4000 #define PANA_AVP_FLAG_RES2 0x2000 #define PANA_AVP_FLAG_RES3 0x1000 #define PANA_AVP_FLAG_RES4 0x0800 #define PANA_AVP_FLAG_RES5 0x0400 #define PANA_AVP_FLAG_RES6 0x0200 #define PANA_AVP_FLAG_RES7 0x0100 #define PANA_AVP_FLAG_RES8 0x0080 #define PANA_AVP_FLAG_RES9 0x0040 #define PANA_AVP_FLAG_RES10 0x0020 #define PANA_AVP_FLAG_RES11 0x0010 #define PANA_AVP_FLAG_RES12 0x0008 #define PANA_AVP_FLAG_RES13 0x0004 #define PANA_AVP_FLAG_RES14 0x0002 #define PANA_AVP_FLAG_RES15 0x0001 #endif #define PANA_AVP_FLAG_RESERVED 0x7fff static dissector_handle_t eap_handle; /* Initialize the protocol and registered fields */ static int proto_pana = -1; static int hf_pana_reserved_type = -1; static int hf_pana_length_type = -1; static int hf_pana_msg_type = -1; static int hf_pana_session_id = -1; static int hf_pana_seqnumber = -1; static int hf_pana_response_in = -1; static int hf_pana_response_to = -1; static int hf_pana_response_time = -1; static int hf_pana_flags = -1; static int hf_pana_flag_r = -1; static int hf_pana_flag_s = -1; static int hf_pana_flag_c = -1; static int hf_pana_flag_a = -1; static int hf_pana_flag_p = -1; static int hf_pana_flag_i = -1; static int hf_pana_avp_code = -1; static int hf_pana_avp_data_length = -1; static int hf_pana_avp_flags = -1; static int hf_pana_avp_flag_v = -1; static int hf_pana_avp_reserved = -1; static int hf_pana_avp_vendorid = -1; static int hf_pana_avp_data_uint64 = -1; static int hf_pana_avp_data_int64 = -1; static int hf_pana_avp_data_uint32 = -1; static int hf_pana_avp_data_int32 = -1; static int hf_pana_avp_data_bytes = -1; static int hf_pana_avp_data_string = -1; static int hf_pana_avp_data_enumerated = -1; #define MSG_TYPE_MAX 5 static const value_string msg_type_names[] = { { 1, "PANA-Client-Initiation" }, { 2, "PANA-Auth" }, { 3, "PANA-Termination" }, { 4, "PANA-Notification" }, { 5, "PANA-Relay" }, { 0, NULL } }; static const value_string msg_subtype_names[] = { { 0x0000, "Answer" }, { 0x8000, "Request" }, { 0, NULL } }; #define AVP_CODE_MAX 13 static const value_string avp_code_names[] = { { 1, "AUTH AVP" }, { 2, "EAP-Payload AVP" }, { 3, "Integrity-Algorithm AVP" }, { 4, "Key-Id AVP" }, { 5, "Nonce AVP" }, { 6, "PRF-Algorithm AVP" }, { 7, "Result-Code" }, { 8, "Session-Lifetime" }, { 9, "Termination-Cause" }, { 10, "PaC-Information" }, { 11, "Relayed-Message" }, { 12, "Encryption-Encap" }, { 13, "Encryption-Algorithm" }, { 0, NULL } }; #if 0 static const value_string avp_resultcode_names[] = { { 0, "PANA_SUCCESS" }, { 1, "PANA_AUTHENTICATION_REJECTED" }, { 2, "PANA_AUTHORIZATION_REJECTED" }, { 0, NULL } }; #endif typedef enum { PANA_OCTET_STRING = 1, PANA_INTEGER32, PANA_INTEGER64, PANA_UNSIGNED32, PANA_UNSIGNED64, PANA_FLOAT32, PANA_FLOAT64, PANA_FLOAT128, PANA_GROUPED, PANA_ENUMERATED, PANA_UTF8STRING, PANA_EAP, PANA_RESULT_CODE, PANA_ENCAPSULATED } pana_avp_types; static const value_string avp_type_names[]={ { PANA_OCTET_STRING, "OctetString" }, { PANA_INTEGER32, "Integer32" }, { PANA_INTEGER64, "Integer64" }, { PANA_UNSIGNED32, "Unsigned32" }, { PANA_UNSIGNED64, "Unsigned64" }, { PANA_FLOAT32, "Float32" }, { PANA_FLOAT64, "Float64" }, { PANA_FLOAT128, "Float128" }, { PANA_GROUPED, "Grouped" }, { PANA_ENUMERATED, "Enumerated" }, { PANA_UTF8STRING, "UTF8String" }, { PANA_EAP, "OctetString" }, { PANA_RESULT_CODE, "Unsigned32" }, { PANA_ENCAPSULATED, "Encapsulated" }, { 0, NULL } }; /* Initialize the subtree pointers */ static gint ett_pana = -1; static gint ett_pana_flags = -1; static gint ett_pana_avp = -1; static gint ett_pana_avp_info = -1; static gint ett_pana_avp_flags = -1; typedef struct _pana_transaction_t { guint32 req_frame; guint32 rep_frame; nstime_t req_time; } pana_transaction_t; typedef struct _pana_conv_info_t { wmem_map_t *pdus; } pana_conv_info_t; static void dissect_pana_pdu(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree); /* * Function for the PANA flags dissector. */ static void dissect_pana_flags(proto_tree *parent_tree, tvbuff_t *tvb, int offset, guint16 flags) { static int * const flag_fields[] = { &hf_pana_flag_r, &hf_pana_flag_s, &hf_pana_flag_c, &hf_pana_flag_a, &hf_pana_flag_p, &hf_pana_flag_i, NULL, }; proto_tree_add_bitmask_value_with_flags(parent_tree, tvb, offset, hf_pana_flags, ett_pana_flags, flag_fields, flags, BMT_NO_TFS|BMT_NO_FALSE); } /* * Function for AVP flags dissector. */ static void dissect_pana_avp_flags(proto_tree *parent_tree, tvbuff_t *tvb, int offset, guint16 flags) { static int * const flag_fields[] = { &hf_pana_avp_flag_v, NULL, }; proto_tree_add_bitmask_value_with_flags(parent_tree, tvb, offset, hf_pana_avp_flags, ett_pana_avp_flags, flag_fields, flags, BMT_NO_TFS|BMT_NO_FALSE); } /* * Map AVP code to AVP type */ static pana_avp_types pana_avp_get_type(guint16 avp_code, guint32 vendor_id) { if(vendor_id == 0) { switch(avp_code) { case 1: return PANA_OCTET_STRING; /* AUTH AVP */ case 2: return PANA_EAP; /* EAP-Payload AVP */ case 3: return PANA_UNSIGNED32; /* Integrity-Algorithm AVP */ case 4: return PANA_INTEGER32; /* Key-Id AVP */ case 5: return PANA_OCTET_STRING; /* Nonce AVP */ case 6: return PANA_UNSIGNED32; /* PRF-Algorithm AVP */ case 7: return PANA_RESULT_CODE; /* Result-Code AVP */ case 8: return PANA_UNSIGNED32; /* Session-Lifetime AVP */ case 9: return PANA_ENUMERATED; /* Termination-Cause AVP */ case 10: return PANA_OCTET_STRING; /* PaC-Information AVP */ case 11: return PANA_ENCAPSULATED; /* Relayed-Message AVP */ case 12: return PANA_OCTET_STRING; /* Encryption-Encap AVP */ case 13: return PANA_UNSIGNED32; /* Encryption-Algorithm AVP */ default: return PANA_OCTET_STRING; } } else { return PANA_OCTET_STRING; } } /* * Function for AVP dissector. */ static void dissect_avps(tvbuff_t *tvb, packet_info *pinfo, proto_tree *avp_tree) { gint offset; guint16 avp_code; guint16 avp_flags; guint32 avp_length; guint16 avp_type; guint32 vendor_id; guint32 avp_hdr_length; guint32 avp_data_length, result_code; guint32 padding; gint32 buffer_length; tvbuff_t *group_tvb; tvbuff_t *eap_tvb; tvbuff_t *encap_tvb; proto_tree *single_avp_tree; proto_tree *avp_eap_tree; proto_tree *avp_encap_tree; offset = 0; buffer_length = tvb_reported_length(tvb); /* Go through all AVPs */ while (buffer_length > 0) { avp_code = tvb_get_ntohs(tvb, offset); avp_flags = tvb_get_ntohs(tvb, offset + 2); avp_data_length = tvb_get_ntohs(tvb, offset + 4); /* Check AVP flags for vendor specific AVP */ if (avp_flags & PANA_AVP_FLAG_V) { vendor_id = tvb_get_ntohl(tvb, 8); avp_hdr_length = 12; } else { vendor_id = 0; avp_hdr_length = 8; } avp_length = avp_hdr_length + avp_data_length; /* Check AVP type */ avp_type = pana_avp_get_type(avp_code, vendor_id); /* Check padding */ padding = (4 - (avp_length % 4)) % 4; single_avp_tree = proto_tree_add_subtree_format(avp_tree, tvb, offset, avp_length + padding, ett_pana_avp_info, NULL, "%s (%s) length: %d bytes (%d padded bytes)", val_to_str(avp_code, avp_code_names, "Unknown (%d)"), val_to_str(avp_type, avp_type_names, "Unknown (%d)"), avp_length, avp_length + padding); /* AVP Code */ proto_tree_add_uint_format_value(single_avp_tree, hf_pana_avp_code, tvb, offset, 2, avp_code, "%s (%u)", val_to_str(avp_code, avp_code_names, "Unknown (%d)"), avp_code); offset += 2; /* AVP Flags */ dissect_pana_avp_flags(single_avp_tree, tvb, offset, avp_flags); offset += 2; /* AVP Length */ proto_tree_add_item(single_avp_tree, hf_pana_avp_data_length, tvb, offset, 2, ENC_BIG_ENDIAN); offset += 2; /* Reserved */ proto_tree_add_item(single_avp_tree, hf_pana_avp_reserved, tvb, offset, 2, ENC_NA); offset += 2; if (avp_flags & PANA_AVP_FLAG_V) { /* Vendor ID */ proto_tree_add_item(single_avp_tree, hf_pana_avp_vendorid, tvb, offset, 4, ENC_BIG_ENDIAN); offset += 4; } if (! (avp_flags & PANA_AVP_FLAG_V)) { /* AVP Value */ switch(avp_type) { case PANA_GROUPED: { proto_tree *avp_group_tree; avp_group_tree = proto_tree_add_subtree(single_avp_tree, tvb, offset, avp_data_length, ett_pana_avp, NULL, "Grouped AVP"); group_tvb = tvb_new_subset_length_caplen(tvb, offset, MIN(avp_data_length, tvb_reported_length(tvb)-offset), avp_data_length); dissect_avps(group_tvb, pinfo, avp_group_tree); break; } case PANA_UTF8STRING: { proto_tree_add_item(single_avp_tree, hf_pana_avp_data_string, tvb, offset, avp_data_length, ENC_UTF_8); break; } case PANA_OCTET_STRING: { proto_tree_add_item(single_avp_tree, hf_pana_avp_data_bytes, tvb, offset, avp_data_length, ENC_NA); break; } case PANA_INTEGER32: { proto_tree_add_item(single_avp_tree, hf_pana_avp_data_int32, tvb, offset, 4, ENC_BIG_ENDIAN); break; } case PANA_UNSIGNED32: { proto_tree_add_item(single_avp_tree, hf_pana_avp_data_uint32, tvb, offset, 4, ENC_BIG_ENDIAN); break; } case PANA_INTEGER64: { proto_tree_add_item(single_avp_tree, hf_pana_avp_data_int64, tvb, offset, 8, ENC_BIG_ENDIAN); break; } case PANA_UNSIGNED64: { proto_tree_add_item(single_avp_tree, hf_pana_avp_data_uint64, tvb, offset, 8, ENC_BIG_ENDIAN); break; } case PANA_ENUMERATED: { proto_tree_add_item(single_avp_tree, hf_pana_avp_data_enumerated, tvb, offset, 4, ENC_BIG_ENDIAN); break; } case PANA_RESULT_CODE: { result_code = tvb_get_ntohl(tvb, offset); proto_tree_add_uint_format(single_avp_tree, hf_pana_avp_code, tvb, offset, avp_data_length, result_code, "Value: %d (%s)", result_code, val_to_str(result_code, avp_code_names, "Unknown (%d)")); break; } case PANA_EAP: { avp_eap_tree = proto_tree_add_subtree(single_avp_tree, tvb, offset, avp_data_length, ett_pana_avp, NULL, "AVP Value (EAP packet)"); eap_tvb = tvb_new_subset_length(tvb, offset, avp_data_length); DISSECTOR_ASSERT_HINT(eap_handle, "EAP Dissector not available"); call_dissector(eap_handle, eap_tvb, pinfo, avp_eap_tree); break; } case PANA_ENCAPSULATED: { avp_encap_tree = proto_tree_add_subtree(single_avp_tree, tvb, offset, avp_data_length, ett_pana_avp, NULL, "AVP Value (PANA packet)"); encap_tvb = tvb_new_subset_length(tvb, offset, avp_data_length); dissect_pana_pdu(encap_tvb, pinfo, avp_encap_tree); break; } } } offset += avp_data_length + padding; /* Update the buffer length */ buffer_length -= avp_length + padding; } } /* * Function for the PANA PDU dissector. */ static void dissect_pana_pdu(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree) { proto_tree *pana_tree = NULL; guint16 flags; guint16 msg_type; guint32 msg_length; guint32 avp_length; guint32 seq_num; conversation_t *conversation; pana_conv_info_t *pana_info; pana_transaction_t *pana_trans; int offset = 0; col_set_str(pinfo->cinfo, COL_PROTOCOL, "PANA"); col_clear(pinfo->cinfo, COL_INFO); /* Get message length, type and flags */ msg_length = tvb_get_ntohs(tvb, 2); flags = tvb_get_ntohs(tvb, 4); msg_type = tvb_get_ntohs(tvb, 6); seq_num = tvb_get_ntohl(tvb, 12); avp_length = msg_length - 16; col_add_fstr(pinfo->cinfo, COL_INFO, "Type %s-%s", val_to_str(msg_type, msg_type_names, "Unknown (%d)"), val_to_str(flags & PANA_FLAG_R, msg_subtype_names, "Unknown (%d)")); /* Make the protocol tree */ if (tree) { proto_item *ti; ti = proto_tree_add_item(tree, proto_pana, tvb, 0, -1, ENC_NA); pana_tree = proto_item_add_subtree(ti, ett_pana); } /* * We need to track some state for this protocol on a per conversation * basis so we can do neat things like request/response tracking */ conversation = find_or_create_conversation(pinfo); /* * Do we already have a state structure for this conv */ pana_info = (pana_conv_info_t *)conversation_get_proto_data(conversation, proto_pana); if (!pana_info) { /* No. Attach that information to the conversation, and add * it to the list of information structures. */ pana_info = wmem_new(wmem_file_scope(), pana_conv_info_t); pana_info->pdus=wmem_map_new(wmem_file_scope(), g_direct_hash, g_direct_equal); conversation_add_proto_data(conversation, proto_pana, pana_info); } if(!pinfo->fd->visited){ if(flags&PANA_FLAG_R){ /* This is a request */ pana_trans=wmem_new(wmem_file_scope(), pana_transaction_t); pana_trans->req_frame=pinfo->num; pana_trans->rep_frame=0; pana_trans->req_time=pinfo->abs_ts; wmem_map_insert(pana_info->pdus, GUINT_TO_POINTER(seq_num), (void *)pana_trans); } else { pana_trans=(pana_transaction_t *)wmem_map_lookup(pana_info->pdus, GUINT_TO_POINTER(seq_num)); if(pana_trans){ pana_trans->rep_frame=pinfo->num; } } } else { pana_trans=(pana_transaction_t *)wmem_map_lookup(pana_info->pdus, GUINT_TO_POINTER(seq_num)); } if(!pana_trans){ /* create a "fake" pana_trans structure */ pana_trans=wmem_new(pinfo->pool, pana_transaction_t); pana_trans->req_frame=0; pana_trans->rep_frame=0; pana_trans->req_time=pinfo->abs_ts; } /* print state tracking in the tree */ if(flags&PANA_FLAG_R){ /* This is a request */ if(pana_trans->rep_frame){ proto_item *it; it=proto_tree_add_uint(pana_tree, hf_pana_response_in, tvb, 0, 0, pana_trans->rep_frame); proto_item_set_generated(it); } } else { /* This is a reply */ if(pana_trans->req_frame){ proto_item *it; nstime_t ns; it=proto_tree_add_uint(pana_tree, hf_pana_response_to, tvb, 0, 0, pana_trans->req_frame); proto_item_set_generated(it); nstime_delta(&ns, &pinfo->abs_ts, &pana_trans->req_time); it=proto_tree_add_time(pana_tree, hf_pana_response_time, tvb, 0, 0, &ns); proto_item_set_generated(it); } } /* Reserved field */ proto_tree_add_item(pana_tree, hf_pana_reserved_type, tvb, offset, 2, ENC_NA); offset += 2; /* Length */ proto_tree_add_item(pana_tree, hf_pana_length_type, tvb, offset, 2, ENC_BIG_ENDIAN); offset += 2; /* Flags */ dissect_pana_flags(pana_tree, tvb, offset, flags); offset += 2; /* Message Type */ proto_tree_add_uint_format_value(pana_tree, hf_pana_msg_type, tvb, offset, 2, msg_type, "%s-%s (%d)", val_to_str(msg_type, msg_type_names, "Unknown (%d)"), val_to_str(flags & PANA_FLAG_R, msg_subtype_names, "Unknown (%d)"), msg_type); offset += 2; /* Session ID */ proto_tree_add_item(pana_tree, hf_pana_session_id, tvb, offset, 4, ENC_BIG_ENDIAN); offset += 4; /* Sequence Number */ proto_tree_add_item(pana_tree, hf_pana_seqnumber, tvb, offset, 4, ENC_BIG_ENDIAN); offset += 4; /* AVPs */ if(avp_length != 0){ tvbuff_t *avp_tvb; proto_tree *avp_tree; avp_tvb = tvb_new_subset_length(tvb, offset, avp_length); avp_tree = proto_tree_add_subtree(pana_tree, tvb, offset, avp_length, ett_pana_avp, NULL, "Attribute Value Pairs"); dissect_avps(avp_tvb, pinfo, avp_tree); } } /* * Function for the PANA dissector. */ /* Called either as a "new-style" or a heuristic dissector */ static int dissect_pana(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_) { guint16 pana_res; guint32 msg_length; guint16 flags; guint32 buffer_length; guint16 msg_type; guint32 avp_length; /* Get actual buffer length */ buffer_length = tvb_captured_length(tvb); /* Check minimum buffer length */ if(buffer_length < 12) { return 0; } /* Check minimum packet length */ msg_length = tvb_get_ntohs(tvb, 2); if(msg_length < 16) { return 0; } /* Check the packet length */ if(msg_length != tvb_reported_length(tvb)) { return 0; } /* check that the reserved field is zero */ pana_res = tvb_get_ntohs(tvb, 0); if (pana_res != 0) { return 0; } /* verify that none of the reserved bits are set */ flags = tvb_get_ntohs(tvb, 4); if (flags & PANA_FLAG_RESERVED) { return 0; } /* verify that we recognize the message type */ msg_type = tvb_get_ntohs(tvb, 6); if ((msg_type > MSG_TYPE_MAX) || (msg_type == 0)) { return 0; } avp_length = msg_length - 16; /* For bug 1908: check the length of the first AVP, too */ if (avp_length != 0) { guint32 avp_offset; guint16 avp_code; guint32 first_avp_length; guint16 avp_flags; if (avp_length < MIN_AVP_SIZE) { return 0; } avp_offset = 16; /* Make sure no exceptions since we're just doing a preliminary heuristic check */ if ((avp_offset + 8) > buffer_length ) { return 0; } avp_code = tvb_get_ntohs(tvb, avp_offset); if ((avp_code == 0) || (avp_code > AVP_CODE_MAX)) { return 0; } avp_flags = tvb_get_ntohs(tvb, avp_offset + 2); if (avp_flags & PANA_AVP_FLAG_RESERVED) { return 0; } /* check whether is the V (vendor) flag on or not */ if (avp_flags & PANA_AVP_FLAG_V) { first_avp_length = 12; } else { first_avp_length = 8; } first_avp_length += tvb_get_ntohs(tvb, avp_offset + 4); if (first_avp_length > avp_length) { return 0; } } dissect_pana_pdu(tvb, pinfo, tree); return tvb_reported_length(tvb); } /* * Register the protocol with Wireshark */ void proto_register_pana(void) { static hf_register_info hf[] = { { &hf_pana_response_in, { "Response In", "pana.response_in", FT_FRAMENUM, BASE_NONE, NULL, 0x0, "The response to this PANA request is in this frame", HFILL } }, { &hf_pana_response_to, { "Request In", "pana.response_to", FT_FRAMENUM, BASE_NONE, NULL, 0x0, "This is a response to the PANA request in this frame", HFILL } }, { &hf_pana_response_time, { "Response Time", "pana.response_time", FT_RELATIVE_TIME, BASE_NONE, NULL, 0x0, "The time between the Call and the Reply", HFILL } }, { &hf_pana_reserved_type, { "PANA Reserved", "pana.reserved", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL } }, { &hf_pana_length_type, { "PANA Message Length", "pana.length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL } }, { &hf_pana_flags, { "Flags", "pana.flags", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL } }, { &hf_pana_flag_r, { "Request", "pana.flags.r", FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_R, NULL, HFILL } }, { &hf_pana_flag_s, { "Start", "pana.flags.s", FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_S, NULL, HFILL } }, { &hf_pana_flag_c, { "Complete","pana.flags.c", FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_C, NULL, HFILL } }, { &hf_pana_flag_a, { "Auth","pana.flags.a", FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_A, NULL, HFILL } }, { &hf_pana_flag_p, { "Ping","pana.flags.p", FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_P, NULL, HFILL } }, { &hf_pana_flag_i, { "IP Reconfig","pana.flags.i", FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_FLAG_I, NULL, HFILL } }, { &hf_pana_msg_type, { "PANA Message Type", "pana.type", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL } }, { &hf_pana_session_id, { "PANA Session ID", "pana.sid", FT_UINT32, BASE_HEX, NULL, 0x0, NULL, HFILL } }, { &hf_pana_seqnumber, { "PANA Sequence Number", "pana.seq", FT_UINT32, BASE_HEX, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_code, { "AVP Code", "pana.avp.code", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_data_length, { "AVP Data Length", "pana.avp.data_length", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_flags, { "AVP Flags", "pana.avp.flags", FT_UINT16, BASE_HEX, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_flag_v, { "Vendor", "pana.avp.flags.v", FT_BOOLEAN, 16, TFS(&tfs_set_notset), PANA_AVP_FLAG_V, NULL, HFILL } }, { &hf_pana_avp_reserved, { "AVP Reserved", "pana.avp.reserved", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_vendorid, { "AVP Vendor ID", "pana.avp.vendorid", FT_UINT32, BASE_HEX, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_data_uint64, { "Value", "pana.avp.data.uint64", FT_UINT64, BASE_HEX, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_data_int64, { "Value", "pana.avp.data.int64", FT_INT64, BASE_DEC, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_data_uint32, { "Value", "pana.avp.data.uint32", FT_UINT32, BASE_HEX, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_data_int32, { "Value", "pana.avp.data.int32", FT_INT32, BASE_DEC, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_data_bytes, { "Value", "pana.avp.data.bytes", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_data_string, { "UTF8String", "pana.avp.data.string", FT_STRING, BASE_NONE, NULL, 0x0, NULL, HFILL } }, { &hf_pana_avp_data_enumerated, { "Value", "pana.avp.data.enum", FT_INT32, BASE_DEC, NULL, 0x0, NULL, HFILL } } }; /* Setup protocol subtree array */ static gint *ett[] = { &ett_pana, &ett_pana_flags, &ett_pana_avp, &ett_pana_avp_info, &ett_pana_avp_flags }; /* Register the protocol name and description */ proto_pana = proto_register_protocol("Protocol for carrying Authentication for Network Access", "PANA", "pana"); /* Required function calls to register the header fields and subtrees used */ proto_register_field_array(proto_pana, hf, array_length(hf)); proto_register_subtree_array(ett, array_length(ett)); } void proto_reg_handoff_pana(void) { dissector_handle_t pana_handle; heur_dissector_add("udp", dissect_pana, "PANA over UDP", "pana_udp", proto_pana, HEURISTIC_ENABLE); pana_handle = create_dissector_handle(dissect_pana, proto_pana); dissector_add_for_decode_as_with_preference("udp.port", pana_handle); eap_handle = find_dissector_add_dependency("eap", proto_pana); } /* * Editor modelines - https://www.wireshark.org/tools/modelines.html * * Local variables: * c-basic-offset: 8 * tab-width: 8 * indent-tabs-mode: nil * End: * * vi: set shiftwidth=8 tabstop=8 expandtab: * :indentSize=8:tabSize=8:noTabs=true: */