/* packet-usb.c * * USB basic dissector * By Paolo Abeni * Ronnie Sahlberg 2006 * * http://www.usb.org/developers/docs/usb_20_122909-2.zip * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA. */ #include "config.h" #include #include #include #include #include #include #include #include #include #include #include #include #include "packet-usb.h" #include "packet-usb-hid.h" /* protocols and header fields */ static int proto_usb = -1; /* Linux USB pseudoheader fields */ static int hf_usb_urb_id = -1; static int hf_usb_urb_type = -1; static int hf_usb_transfer_type = -1; static int hf_usb_endpoint_number = -1; static int hf_usb_endpoint_direction = -1; static int hf_usb_endpoint_number_value = -1; static int hf_usb_device_address = -1; static int hf_usb_bus_id = -1; static int hf_usb_setup_flag = -1; static int hf_usb_data_flag = -1; static int hf_usb_urb_ts_sec = -1; static int hf_usb_urb_ts_usec = -1; static int hf_usb_urb_status = -1; static int hf_usb_urb_len = -1; static int hf_usb_urb_data_len = -1; static int hf_usb_urb_unused_setup_header = -1; static int hf_usb_urb_interval = -1; static int hf_usb_urb_start_frame = -1; static int hf_usb_urb_copy_of_transfer_flags = -1; /* Win32 USBPcap pseudoheader fields */ static int hf_usb_win32_header_len = -1; static int hf_usb_irp_id = -1; static int hf_usb_usbd_status = -1; static int hf_usb_function = -1; static int hf_usb_info = -1; static int hf_usb_usbpcap_info_reserved = -1; static int hf_usb_usbpcap_info_direction = -1; static int hf_usb_win32_device_address = -1; /* hf_usb_bus_id, hf_usb_endpoint_number, hf_usb_endpoint_direction, * hf_usb_endpoint_number_value, hf_usb_transfer_type are common with * Linux pseudoheader */ static int hf_usb_win32_data_len = -1; static int hf_usb_control_stage = -1; static int hf_usb_win32_iso_start_frame = -1; static int hf_usb_win32_iso_num_packets = -1; static int hf_usb_win32_iso_error_count = -1; static int hf_usb_win32_iso_offset = -1; static int hf_usb_win32_iso_length = -1; static int hf_usb_win32_iso_status = -1; static int hf_usb_request = -1; static int hf_usb_request_unknown_class = -1; static int hf_usb_value = -1; static int hf_usb_index = -1; static int hf_usb_length = -1; /* static int hf_usb_data_len = -1; */ static int hf_usb_capdata = -1; static int hf_usb_wFeatureSelector = -1; static int hf_usb_wInterface = -1; static int hf_usb_wStatus = -1; static int hf_usb_wFrameNumber = -1; static int hf_usb_iso_error_count = -1; static int hf_usb_iso_numdesc = -1; static int hf_usb_iso_status = -1; static int hf_usb_iso_off = -1; static int hf_usb_iso_len = -1; static int hf_usb_iso_pad = -1; static int hf_usb_iso_data = -1; static int hf_usb_bmRequestType = -1; static int hf_usb_bmRequestType_direction = -1; static int hf_usb_bmRequestType_type = -1; static int hf_usb_bmRequestType_recipient = -1; static int hf_usb_bDescriptorType = -1; static int hf_usb_descriptor_index = -1; static int hf_usb_language_id = -1; static int hf_usb_bLength = -1; static int hf_usb_bcdUSB = -1; static int hf_usb_bDeviceClass = -1; static int hf_usb_bDeviceSubClass = -1; static int hf_usb_bDeviceProtocol = -1; static int hf_usb_bMaxPacketSize0 = -1; static int hf_usb_idVendor = -1; static int hf_usb_idProduct = -1; static int hf_usb_bcdDevice = -1; static int hf_usb_iManufacturer = -1; static int hf_usb_iProduct = -1; static int hf_usb_iSerialNumber = -1; static int hf_usb_bNumConfigurations = -1; static int hf_usb_wLANGID = -1; static int hf_usb_bString = -1; static int hf_usb_bInterfaceNumber = -1; static int hf_usb_bAlternateSetting = -1; static int hf_usb_bNumEndpoints = -1; static int hf_usb_bInterfaceClass = -1; static int hf_usb_bInterfaceSubClass = -1; static int hf_usb_bInterfaceSubClass_cdc = -1; static int hf_usb_bInterfaceSubClass_hid = -1; static int hf_usb_bInterfaceSubClass_app = -1; static int hf_usb_bInterfaceProtocol = -1; static int hf_usb_bInterfaceProtocol_cdc = -1; static int hf_usb_bInterfaceProtocol_cdc_data = -1; static int hf_usb_bInterfaceProtocol_hid_boot = -1; static int hf_usb_bInterfaceProtocol_app_dfu = -1; static int hf_usb_bInterfaceProtocol_app_irda = -1; static int hf_usb_bInterfaceProtocol_app_usb_test_and_measurement = -1; static int hf_usb_iInterface = -1; static int hf_usb_bEndpointAddress = -1; static int hf_usb_bmAttributes = -1; static int hf_usb_bEndpointAttributeTransfer = -1; static int hf_usb_bEndpointAttributeSynchonisation = -1; static int hf_usb_bEndpointAttributeBehaviour = -1; static int hf_usb_wMaxPacketSize = -1; static int hf_usb_wMaxPacketSize_size = -1; static int hf_usb_wMaxPacketSize_slots = -1; static int hf_usb_bInterval = -1; static int hf_usb_wTotalLength = -1; static int hf_usb_bNumInterfaces = -1; static int hf_usb_bConfigurationValue = -1; static int hf_usb_iConfiguration = -1; static int hf_usb_bMaxPower = -1; static int hf_usb_configuration_bmAttributes = -1; static int hf_usb_configuration_legacy10buspowered = -1; static int hf_usb_configuration_selfpowered = -1; static int hf_usb_configuration_remotewakeup = -1; static int hf_usb_bEndpointAddress_direction = -1; static int hf_usb_bEndpointAddress_number = -1; static int hf_usb_response_in = -1; static int hf_usb_time = -1; static int hf_usb_request_in = -1; static int hf_usb_bFirstInterface = -1; static int hf_usb_bInterfaceCount = -1; static int hf_usb_bFunctionClass = -1; static int hf_usb_bFunctionSubClass = -1; static int hf_usb_bFunctionProtocol = -1; static int hf_usb_iFunction = -1; static int hf_usb_data_fragment = -1; static gint usb_hdr = -1; static gint usb_setup_hdr = -1; static gint usb_isodesc = -1; static gint usb_win32_iso_packet = -1; static gint ett_usb_endpoint = -1; static gint ett_usb_setup_bmrequesttype = -1; static gint ett_usb_usbpcap_info = -1; static gint ett_descriptor_device = -1; static gint ett_configuration_bmAttributes = -1; static gint ett_configuration_bEndpointAddress = -1; static gint ett_endpoint_bmAttributes = -1; static gint ett_endpoint_wMaxPacketSize = -1; static expert_field ei_usb_bLength_even = EI_INIT; static expert_field ei_usb_bLength_too_short = EI_INIT; static expert_field ei_usb_desc_length_invalid = EI_INIT; static const int *usb_endpoint_fields[] = { &hf_usb_endpoint_direction, &hf_usb_endpoint_number_value, NULL }; static const int *usb_usbpcap_info_fields[] = { &hf_usb_usbpcap_info_reserved, &hf_usb_usbpcap_info_direction, NULL }; static int usb_tap = -1; static gboolean try_heuristics = TRUE; static dissector_handle_t linux_usb_handle; static dissector_table_t usb_bulk_dissector_table; static dissector_table_t usb_control_dissector_table; static dissector_table_t usb_interrupt_dissector_table; static dissector_table_t usb_descriptor_dissector_table; static heur_dissector_list_t heur_bulk_subdissector_list; static heur_dissector_list_t heur_control_subdissector_list; static heur_dissector_list_t heur_interrupt_subdissector_list; static wmem_tree_t *device_to_protocol_table = NULL; static wmem_tree_t *device_to_product_table = NULL; static dissector_table_t device_to_dissector; static dissector_table_t protocol_to_dissector; static dissector_table_t product_to_dissector; typedef struct _device_product_data_t { guint16 vendor; guint16 product; guint bus_id; guint device_address; } device_product_data_t; typedef struct _device_protocol_data_t { guint32 protocol; guint bus_id; guint device_address; } device_protocol_data_t; /* http://www.usb.org/developers/docs/USB_LANGIDs.pdf */ static const value_string usb_langid_vals[] = { {0x0000, "no language specified"}, {0x0401, "Arabic (Saudi Arabia)"}, {0x0402, "Bulgarian"}, {0x0403, "Catalan"}, {0x0404, "Chinese (Taiwan)"}, {0x0405, "Czech"}, {0x0406, "Danish"}, {0x0407, "German (Standard)"}, {0x0408, "Greek"}, {0x0409, "English (United States)"}, {0x040a, "Spanish (Traditional Sort)"}, {0x040b, "Finnish"}, {0x040c, "French (Standard)"}, {0x040d, "Hebrew"}, {0x040e, "Hungarian"}, {0x040f, "Icelandic"}, {0x0410, "Italian (Standard)"}, {0x0411, "Japanese"}, {0x0412, "Korean"}, {0x0413, "Dutch (Netherlands)"}, {0x0414, "Norwegian (Bokmal)"}, {0x0415, "Polish"}, {0x0416, "Portuguese (Brazil)"}, {0x0418, "Romanian"}, {0x0419, "Russian"}, {0x041a, "Croatian"}, {0x041b, "Slovak"}, {0x041c, "Albanian"}, {0x041d, "Swedish"}, {0x041e, "Thai"}, {0x041f, "Turkish"}, {0x0420, "Urdu (Pakistan)"}, {0x0421, "Indonesian"}, {0x0422, "Ukrainian"}, {0x0423, "Belarussian"}, {0x0424, "Slovenian"}, {0x0425, "Estonian"}, {0x0426, "Latvian"}, {0x0427, "Lithuanian"}, {0x0429, "Farsi"}, {0x042a, "Vietnamese"}, {0x042b, "Armenian"}, {0x042c, "Azeri (Latin)"}, {0x042d, "Basque"}, {0x042f, "Macedonian"}, {0x0430, "Sutu"}, {0x0436, "Afrikaans"}, {0x0437, "Georgian"}, {0x0438, "Faeroese"}, {0x0439, "Hindi"}, {0x043e, "Malay (Malaysian)"}, {0x043f, "Kazakh"}, {0x0441, "Swahili (Kenya)"}, {0x0443, "Uzbek (Latin)"}, {0x0444, "Tatar (Tatarstan)"}, {0x0445, "Bengali"}, {0x0446, "Punjabi"}, {0x0447, "Gujarati"}, {0x0448, "Oriya"}, {0x0449, "Tamil"}, {0x044a, "Telugu"}, {0x044b, "Kannada"}, {0x044c, "Malayalam"}, {0x044d, "Assamese"}, {0x044e, "Marathi"}, {0x044f, "Sanskrit"}, {0x0455, "Burmese"}, {0x0457, "Konkani"}, {0x0458, "Manipuri"}, {0x0459, "Sindhi"}, {0x04ff, "HID (Usage Data Descriptor)"}, {0x0801, "Arabic (Iraq)"}, {0x0804, "Chinese (PRC)"}, {0x0807, "German (Switzerland)"}, {0x0809, "English (United Kingdom)"}, {0x080a, "Spanish (Mexican)"}, {0x080c, "French (Belgian)"}, {0x0810, "Italian (Switzerland)"}, {0x0812, "Korean (Johab)"}, {0x0813, "Dutch (Belgium)"}, {0x0814, "Norwegian (Nynorsk)"}, {0x0816, "Portuguese (Standard)"}, {0x081a, "Serbian (Latin)"}, {0x081d, "Swedish (Finland)"}, {0x0820, "Urdu (India)"}, {0x0827, "Lithuanian (Classic)"}, {0x082c, "Azeri (Cyrillic)"}, {0x083e, "Malay (Brunei Darussalam)"}, {0x0843, "Uzbek (Cyrillic)"}, {0x0860, "Kashmiri (India)"}, {0x0861, "Nepali (India)"}, {0x0c01, "Arabic (Egypt)"}, {0x0c04, "Chinese (Hong Kong SAR, PRC)"}, {0x0c07, "German (Austria)"}, {0x0c09, "English (Australian)"}, {0x0c0a, "Spanish (Modern Sort)"}, {0x0c0c, "French (Canadian)"}, {0x0c1a, "Serbian (Cyrillic)"}, {0x1001, "Arabic (Libya)"}, {0x1004, "Chinese (Singapore)"}, {0x1007, "German (Luxembourg)"}, {0x1009, "English (Canadian)"}, {0x100a, "Spanish (Guatemala)"}, {0x100c, "French (Switzerland)"}, {0x1401, "Arabic (Algeria)"}, {0x1404, "Chinese (Macau SAR)"}, {0x1407, "German (Liechtenstein)"}, {0x1409, "English (New Zealand)"}, {0x140a, "Spanish (Costa Rica)"}, {0x140c, "French (Luxembourg)"}, {0x1801, "Arabic (Morocco)"}, {0x1809, "English (Ireland)"}, {0x180a, "Spanish (Panama)"}, {0x180c, "French (Monaco)"}, {0x1c01, "Arabic (Tunisia)"}, {0x1c09, "English (South Africa)"}, {0x1c0a, "Spanish (Dominican Republic)"}, {0x2001, "Arabic (Oman)"}, {0x2009, "English (Jamaica)"}, {0x200a, "Spanish (Venezuela)"}, {0x2401, "Arabic (Yemen)"}, {0x2409, "English (Caribbean)"}, {0x240a, "Spanish (Colombia)"}, {0x2801, "Arabic (Syria)"}, {0x2809, "English (Belize)"}, {0x280a, "Spanish (Peru)"}, {0x2c01, "Arabic (Jordan)"}, {0x2c09, "English (Trinidad)"}, {0x2c0a, "Spanish (Argentina)"}, {0x3001, "Arabic (Lebanon)"}, {0x3009, "English (Zimbabwe)"}, {0x300a, "Spanish (Ecuador)"}, {0x3401, "Arabic (Kuwait)"}, {0x3409, "English (Philippines)"}, {0x340a, "Spanish (Chile)"}, {0x3801, "Arabic (U.A.E.)"}, {0x380a, "Spanish (Uruguay)"}, {0x3c01, "Arabic (Bahrain)"}, {0x3c0a, "Spanish (Paraguay)"}, {0x4001, "Arabic (Qatar)"}, {0x400a, "Spanish (Bolivia)"}, {0x440a, "Spanish (El Salvador)"}, {0x480a, "Spanish (Honduras)"}, {0x4c0a, "Spanish (Nicaragua)"}, {0x500a, "Spanish (Puerto Rico)"}, {0xf0ff, "HID (Vendor Defined 1)"}, {0xf4ff, "HID (Vendor Defined 2)"}, {0xf8ff, "HID (Vendor Defined 3)"}, {0xfcff, "HID (Vendor Defined 4)"}, {0, NULL} }; value_string_ext usb_langid_vals_ext = VALUE_STRING_EXT_INIT(usb_langid_vals); static const value_string usb_class_vals[] = { {IF_CLASS_DEVICE, "Device"}, {IF_CLASS_AUDIO, "Audio"}, {IF_CLASS_COMMUNICATIONS, "Communications and CDC Control"}, {IF_CLASS_HID, "HID"}, {IF_CLASS_PHYSICAL, "Physical"}, {IF_CLASS_IMAGE, "Imaging"}, {IF_CLASS_PRINTER, "Printer"}, {IF_CLASS_MASS_STORAGE, "Mass Storage"}, {IF_CLASS_HUB, "Hub"}, {IF_CLASS_CDC_DATA, "CDC-Data"}, {IF_CLASS_SMART_CARD, "Smart Card"}, {IF_CLASS_CONTENT_SECURITY, "Content Security"}, {IF_CLASS_VIDEO, "Video"}, {IF_CLASS_PERSONAL_HEALTHCARE, "Personal Healthcare"}, {IF_CLASS_AUDIO_VIDEO, "Audio/Video Devices"}, {IF_CLASS_DIAGNOSTIC_DEVICE, "Diagnostic Device"}, {IF_CLASS_WIRELESS_CONTROLLER, "Wireless Controller"}, {IF_CLASS_MISCELLANEOUS, "Miscellaneous"}, {IF_CLASS_APPLICATION_SPECIFIC, "Application Specific"}, {IF_CLASS_VENDOR_SPECIFIC, "Vendor Specific"}, {0, NULL} }; static value_string_ext usb_class_vals_ext = VALUE_STRING_EXT_INIT(usb_class_vals); /* use usb class, subclass and protocol id together http://www.usb.org/developers/defined_class USB Class Definitions for Communications Devices, Revision 1.2 December 6, 2012 */ static const value_string usb_protocols[] = { {0x000000, "Use class code info from Interface Descriptors"}, {0x060101, "Still Imaging"}, {0x090000, "Full speed Hub"}, {0x090001, "Hi-speed hub with single TT"}, {0x090002, "Hi-speed hub with multiple TTs"}, {0x0D0000, "Content Security"}, {0x100100, "AVControl Interface"}, {0x100200, "AVData Video Streaming Interface"}, {0x100300, "AVData Audio Streaming Interface"}, {0xDC0101, "USB2 Compliance Device"}, {0xE00101, "Bluetooth Programming Interface"}, {0xE00102, "UWB Radio Control Interface"}, {0xE00103, "Remote NDIS"}, {0xE00104, "Bluetooth AMP Controller"}, {0xE00201, "Host Wire Adapter Control/Data interface"}, {0xE00202, "Device Wire Adapter Control/Data interface"}, {0xE00203, "Device Wire Adapter Isochronous interface"}, {0xEF0101, "Active Sync device"}, {0xEF0102, "Palm Sync"}, {0xEF0201, "Interface Association Descriptor"}, {0xEF0202, "Wire Adapter Multifunction Peripheral programming interface"}, {0xEF0301, "Cable Based Association Framework"}, {0xFE0101, "Device Firmware Upgrade"}, {0xFE0200, "IRDA Bridge device"}, {0xFE0300, "USB Test and Measurement Device"}, {0xFE0301, "USB Test and Measurement Device conforming to the USBTMC USB488"}, {0, NULL} }; static value_string_ext usb_protocols_ext = VALUE_STRING_EXT_INIT(usb_protocols); static const value_string usb_transfer_type_vals[] = { {URB_CONTROL, "URB_CONTROL"}, {URB_ISOCHRONOUS, "URB_ISOCHRONOUS"}, {URB_INTERRUPT, "URB_INTERRUPT"}, {URB_BULK, "URB_BULK"}, {0, NULL} }; static const value_string usb_transfer_type_and_direction_vals[] = { {URB_CONTROL, "URB_CONTROL out"}, {URB_ISOCHRONOUS, "URB_ISOCHRONOUS out"}, {URB_INTERRUPT, "URB_INTERRUPT out"}, {URB_BULK, "URB_BULK out"}, {URB_CONTROL | URB_TRANSFER_IN, "URB_CONTROL in"}, {URB_ISOCHRONOUS | URB_TRANSFER_IN, "URB_ISOCHRONOUS in"}, {URB_INTERRUPT | URB_TRANSFER_IN, "URB_INTERRUPT in"}, {URB_BULK | URB_TRANSFER_IN, "URB_BULK in"}, {0, NULL} }; static const value_string usb_endpoint_direction_vals[] = { {0, "OUT"}, {1, "IN"}, {0, NULL} }; static const value_string usb_urb_type_vals[] = { {URB_SUBMIT, "URB_SUBMIT"}, {URB_COMPLETE, "URB_COMPLETE"}, {URB_ERROR, "URB_ERROR"}, {0, NULL} }; extern value_string_ext ext_usb_vendors_vals; extern value_string_ext ext_usb_products_vals; extern value_string_ext ext_usb_com_subclass_vals; /* * Standard descriptor types. * * all class specific descriptor types were removed from this list * a descriptor type is not globally unique * dissectors for the USB classes should provide their own value string * and pass it to dissect_usb_descriptor_header() * */ #define USB_DT_DEVICE 1 #define USB_DT_CONFIG 2 #define USB_DT_STRING 3 #define USB_DT_INTERFACE 4 #define USB_DT_ENDPOINT 5 #define USB_DT_DEVICE_QUALIFIER 6 #define USB_DT_OTHER_SPEED_CONFIG 7 #define USB_DT_INTERFACE_POWER 8 /* these are from a minor usb 2.0 revision (ECN) */ #define USB_DT_OTG 9 #define USB_DT_DEBUG 10 #define USB_DT_INTERFACE_ASSOCIATION 11 /* XXX - move into HID dissector */ #define USB_DT_RPIPE 34 /* There are only Standard Descriptor Types, Class-specific types are provided by "usb.descriptor" descriptors table*/ static const value_string std_descriptor_type_vals[] = { {USB_DT_DEVICE, "DEVICE"}, {USB_DT_CONFIG, "CONFIGURATION"}, {USB_DT_STRING, "STRING"}, {USB_DT_INTERFACE, "INTERFACE"}, {USB_DT_ENDPOINT, "ENDPOINT"}, {USB_DT_DEVICE_QUALIFIER, "DEVICE QUALIFIER"}, {USB_DT_OTHER_SPEED_CONFIG, "OTHER SPEED CONFIG"}, {USB_DT_INTERFACE_POWER, "INTERFACE POWER"}, {USB_DT_OTG, "OTG"}, {USB_DT_DEBUG, "DEBUG"}, {USB_DT_INTERFACE_ASSOCIATION, "INTERFACE ASSOCIATION"}, { 0x0F, "BOS"}, { 0x10, "DEVICE CAPABILITY"}, { 0x30, "SUPERSPEED USB ENDPOINT COMPANION"}, { 0x31, "SUPERSPEED PLUS ISOCHRONOUS ENDPOINT COMPANION"}, {0,NULL} }; static value_string_ext std_descriptor_type_vals_ext = VALUE_STRING_EXT_INIT(std_descriptor_type_vals); /* * Feature selectors. */ #define USB_FS_ENDPOINT_HALT 0 #define USB_FS_DEVICE_REMOTE_WAKEUP 1 #define USB_FS_TEST_MODE 2 static const value_string usb_feature_selector_vals[] = { {USB_FS_ENDPOINT_HALT, "ENDPOINT HALT"}, {USB_FS_DEVICE_REMOTE_WAKEUP, "DEVICE REMOTE WAKEUP"}, {USB_FS_TEST_MODE, "TEST MODE"}, {0, NULL} }; static const value_string usb_bmAttributes_transfer_vals[] = { {0x00, "Control-Transfer"}, {0x01, "Isochronous-Transfer"}, {0x02, "Bulk-Transfer"}, {0x03, "Interrupt-Transfer"}, {0, NULL} }; static const value_string usb_bmAttributes_sync_vals[] = { {0x00, "No Sync"}, {0x01, "Asynchronous"}, {0x02, "Adaptive"}, {0x03, "Synchronous"}, {0, NULL} }; static const value_string usb_bmAttributes_behaviour_vals[] = { {0x00, "Data-Endpoint"}, {0x01, "Explicit Feedback-Endpoint"}, {0x02, "Implicit Feedback-Data-Endpoint"}, {0x03, "Reserved"}, {0, NULL} }; static const value_string usb_wMaxPacketSize_slots_vals[] = { {0x00, "1"}, {0x01, "2"}, {0x02, "3"}, {0x03, "Reserved"}, {0, NULL} }; /* Note: sorted in (unsigned) ascending order */ static const value_string usb_urb_status_vals[] = { /* from linux/include/asm-generic/errno.h*/ { -131, "State not recoverable (-ENOTRECOVERABLE)" }, { -130, "Owner died (-EOWNERDEAD)" }, { -129, "Key was rejected by service (-EKEYREJECTED)" }, { -128, "Key has been revoked (-EKEYREVOKED)" }, { -127, "Key has expired (-EKEYEXPIRED)" }, { -126, "Required key not available (-ENOKEY)" }, { -125, "Operation Canceled (-ECANCELED)" }, { -124, "Wrong medium type (-EMEDIUMTYPE)" }, { -123, "No medium found (-ENOMEDIUM)" }, { -122, "Quota exceeded (-EDQUOT)" }, { -121, "Remote I/O error (-EREMOTEIO)" }, { -120, "Is a named type file (-EISNAM)" }, { -119, "No XENIX semaphores available (-ENAVAIL)" }, { -118, "Not a XENIX named type file (-ENOTNAM)" }, { -117, "Structure needs cleaning (-EUCLEAN)" }, { -116, "Stale NFS file handle (-ESTALE)" }, { -115, "Operation now in progress (-EINPROGRESS)" }, { -114, "Operation already in progress (-EALREADY)" }, { -113, "No route to host (-EHOSTUNREACH)" }, { -112, "Host is down (-EHOSTDOWN)" }, { -111, "Connection refused (-ECONNREFUSED)" }, { -110, "Connection timed out (-ETIMEDOUT)" }, { -109, "Too many references: cannot splice (-ETOOMANYREFS)" }, { -108, "Cannot send after transport endpoint shutdown (-ESHUTDOWN)" }, { -107, "Transport endpoint is not connected (-ENOTCONN)" }, { -106, "Transport endpoint is already connected (-EISCONN)" }, { -105, "No buffer space available (-ENOBUFS)" }, { -104, "Connection reset by peer (-ECONNRESET)" }, { -103, "Software caused connection abort (-ECONNABORTED)" }, { -102, "Network dropped connection because of reset (-ENETRESET)" }, { -101, "Network is unreachable (-ENETUNREACH)" }, { -100, "Network is down (-ENETDOWN)" }, { -99, "Cannot assign requested address (-EADDRNOTAVAIL)" }, { -98, "Address already in use (-EADDRINUSE)" }, { -97, "Address family not supported by protocol (-EAFNOSUPPORT)" }, { -96, "Protocol family not supported (-EPFNOSUPPORT)" }, { -95, "Operation not supported on transport endpoint (-EOPNOTSUPP)" }, { -94, "Socket type not supported (-ESOCKTNOSUPPORT)" }, { -93, "Protocol not supported (-EPROTONOSUPPORT)" }, { -92, "Protocol not available (-ENOPROTOOPT)" }, { -91, "Protocol wrong type for socket (-EPROTOTYPE)" }, { -90, "Message too long (-EMSGSIZE)" }, { -89, "Destination address required (-EDESTADDRREQ)" }, { -88, "Socket operation on non-socket (-ENOTSOCK)" }, { -87, "Too many users (-EUSERS)" }, { -86, "Streams pipe error (-ESTRPIPE)" }, { -85, "Interrupted system call should be restarted (-ERESTART)" }, { -84, "Illegal byte sequence (-EILSEQ)" }, { -83, "Cannot exec a shared library directly (-ELIBEXEC)" }, { -82, "Attempting to link in too many shared libraries (-ELIBMAX)" }, { -81, ".lib section in a.out corrupted (-ELIBSCN)" }, { -80, "Accessing a corrupted shared library (-ELIBBAD)" }, { -79, "Can not access a needed shared library (-ELIBACC)" }, { -78, "Remote address changed (-EREMCHG)" }, { -77, "File descriptor in bad state (-EBADFD)" }, { -76, "Name not unique on network (-ENOTUNIQ)" }, { -75, "Value too large for defined data type (-EOVERFLOW)" }, { -74, "Not a data message (-EBADMSG)" }, { -73, "RFS specific error (-EDOTDOT)" }, { -72, "Multihop attempted (-EMULTIHOP)" }, { -71, "Protocol error (-EPROTO)" }, { -70, "Communication error on send (-ECOMM)" }, { -69, "Srmount error (-ESRMNT)" }, { -68, "Advertise error (-EADV)" }, { -67, "Link has been severed (-ENOLINK)" }, { -66, "Object is remote (-EREMOTE)" }, { -65, "Package not installed (-ENOPKG)" }, { -64, "Machine is not on the network (-ENONET)" }, { -63, "Out of streams resources (-ENOSR)" }, { -62, "Timer expired (-ETIME)" }, { -61, "No data available (-ENODATA)" }, { -60, "Device not a stream (-ENOSTR)" }, { -59, "Bad font file format (-EBFONT)" }, { -58, "(-58 \?\?\?)" }, /* dummy so that there are no "gaps" */ { -57, "Invalid slot (-EBADSLT)" }, { -56, "Invalid request code (-EBADRQC)" }, { -55, "No anode (-ENOANO)" }, { -54, "Exchange full (-EXFULL)" }, { -53, "Invalid request descriptor (-EBADR)" }, { -52, "Invalid exchange (-EBADE)" }, { -51, "Level 2 halted (-EL2HLT)" }, { -50, "No CSI structure available (-ENOCSI)" }, { -49, "Protocol driver not attached (-EUNATCH)" }, { -48, "Link number out of range (-ELNRNG)" }, { -47, "Level 3 reset (-EL3RST)" }, { -46, "Level 3 halted (-EL3HLT)" }, { -45, "Level 2 not synchronized (-EL2NSYNC)" }, { -44, "Channel number out of range (-ECHRNG)" }, { -43, "Identifier removed (-EIDRM)" }, { -42, "No message of desired type (-ENOMSG)" }, { -41, "(-41 \?\?\?)" }, /* dummy so that there are no "gaps" */ { -40, "Too many symbolic links encountered (-ELOOP)" }, { -39, "Directory not empty (-ENOTEMPTY)" }, { -38, "Function not implemented (-ENOSYS)" }, { -37, "No record locks available (-ENOLCK)" }, { -36, "File name too long (-ENAMETOOLONG)" }, { -35, "Resource deadlock would occur (-EDEADLK)" }, /* from linux/include/asm-generic/errno.h */ { -34, "Math result not representable (-ERANGE)" }, { -33, "Math argument out of domain of func (-EDOM)" }, { -32, "Broken pipe (-EPIPE)" }, { -31, "Too many links (-EMLINK)" }, { -30, "Read-only file system (-EROFS)" }, { -29, "Illegal seek (-ESPIPE)" }, { -28, "No space left on device (-ENOSPC)" }, { -27, "File too large (-EFBIG)" }, { -26, "Text file busy (-ETXTBSY)" }, { -25, "Not a typewriter (-ENOTTY)" }, { -24, "Too many open files (-EMFILE)" }, { -23, "File table overflow (-ENFILE)" }, { -22, "Invalid argument (-EINVAL)" }, { -21, "Is a directory (-EISDIR)" }, { -20, "Not a directory (-ENOTDIR)" }, { -19, "No such device (-ENODEV)" }, { -18, "Cross-device link (-EXDEV)" }, { -17, "File exists (-EEXIST)" }, { -16, "Device or resource busy (-EBUSY)" }, { -15, "Block device required (-ENOTBLK)" }, { -14, "Bad address (-EFAULT)" }, { -13, "Permission denied (-EACCES)" }, { -12, "Out of memory (-ENOMEM)" }, { -11, "Try again (-EAGAIN)" }, { -10, "No child processes (-ECHILD)" }, { -9, "Bad file number (-EBADF)" }, { -8, "Exec format error (-ENOEXEC)" }, { -7, "Argument list too long (-E2BIG)" }, { -6, "No such device or address (-ENXIO)" }, { -5, "I/O error (-EIO)" }, { -4, "Interrupted system call (-EINTR)" }, { -3, "No such process (-ESRCH)" }, { -2, "No such file or directory (-ENOENT)" }, { -1, "Operation not permitted (-EPERM)" }, { 0, "Success"}, { 0, NULL } }; static value_string_ext usb_urb_status_vals_ext = VALUE_STRING_EXT_INIT(usb_urb_status_vals); #define USB_CONTROL_STAGE_SETUP 0x00 #define USB_CONTROL_STAGE_DATA 0x01 #define USB_CONTROL_STAGE_STATUS 0x02 static const value_string usb_control_stage_vals[] = { {USB_CONTROL_STAGE_SETUP, "Setup"}, {USB_CONTROL_STAGE_DATA, "Data"}, {USB_CONTROL_STAGE_STATUS, "Status"}, {0, NULL} }; static const value_string win32_urb_function_vals[] = { {0x0000, "URB_FUNCTION_SELECT_CONFIGURATION"}, {0x0001, "URB_FUNCTION_SELECT_INTERFACE"}, {0x0002, "URB_FUNCTION_ABORT_PIPE"}, {0x0003, "URB_FUNCTION_TAKE_FRAME_LENGTH_CONTROL"}, {0x0004, "URB_FUNCTION_RELEASE_FRAME_LENGTH_CONTROL"}, {0x0005, "URB_FUNCTION_GET_FRAME_LENGTH"}, {0x0006, "URB_FUNCTION_SET_FRAME_LENGTH"}, {0x0007, "URB_FUNCTION_GET_CURRENT_FRAME_NUMBER"}, {0x0008, "URB_FUNCTION_CONTROL_TRANSFER"}, {0x0009, "URB_FUNCTION_BULK_OR_INTERRUPT_TRANSFER"}, {0x000A, "URB_FUNCTION_ISOCH_TRANSFER"}, {0x000B, "URB_FUNCTION_GET_DESCRIPTOR_FROM_DEVICE"}, {0x000C, "URB_FUNCTION_SET_DESCRIPTOR_TO_DEVICE"}, {0x000D, "URB_FUNCTION_SET_FEATURE_TO_DEVICE"}, {0x000E, "URB_FUNCTION_SET_FEATURE_TO_INTERFACE"}, {0x000F, "URB_FUNCTION_SET_FEATURE_TO_ENDPOINT"}, {0x0010, "URB_FUNCTION_CLEAR_FEATURE_TO_DEVICE"}, {0x0011, "URB_FUNCTION_CLEAR_FEATURE_TO_INTERFACE"}, {0x0012, "URB_FUNCTION_CLEAR_FEATURE_TO_ENDPOINT"}, {0x0013, "URB_FUNCTION_GET_STATUS_FROM_DEVICE"}, {0x0014, "URB_FUNCTION_GET_STATUS_FROM_INTERFACE"}, {0x0015, "URB_FUNCTION_GET_STATUS_FROM_ENDPOINT"}, {0x0016, "URB_FUNCTION_RESERVED_0X0016"}, {0x0017, "URB_FUNCTION_VENDOR_DEVICE"}, {0x0018, "URB_FUNCTION_VENDOR_INTERFACE"}, {0x0019, "URB_FUNCTION_VENDOR_ENDPOINT"}, {0x001A, "URB_FUNCTION_CLASS_DEVICE"}, {0x001B, "URB_FUNCTION_CLASS_INTERFACE"}, {0x001C, "URB_FUNCTION_CLASS_ENDPOINT"}, {0x001D, "URB_FUNCTION_RESERVE_0X001D"}, {0x001E, "URB_FUNCTION_SYNC_RESET_PIPE_AND_CLEAR_STALL"}, {0x001F, "URB_FUNCTION_CLASS_OTHER"}, {0x0020, "URB_FUNCTION_VENDOR_OTHER"}, {0x0021, "URB_FUNCTION_GET_STATUS_FROM_OTHER"}, {0x0022, "URB_FUNCTION_CLEAR_FEATURE_TO_OTHER"}, {0x0023, "URB_FUNCTION_SET_FEATURE_TO_OTHER"}, {0x0024, "URB_FUNCTION_GET_DESCRIPTOR_FROM_ENDPOINT"}, {0x0025, "URB_FUNCTION_SET_DESCRIPTOR_TO_ENDPOINT"}, {0x0026, "URB_FUNCTION_GET_CONFIGURATION"}, {0x0027, "URB_FUNCTION_GET_INTERFACE"}, {0x0028, "URB_FUNCTION_GET_DESCRIPTOR_FROM_INTERFACE"}, {0x0029, "URB_FUNCTION_SET_DESCRIPTOR_TO_INTERFACE"}, {0x002A, "URB_FUNCTION_GET_MS_FEATURE_DESCRIPTOR"}, {0x002B, "URB_FUNCTION_RESERVE_0X002B"}, {0x002C, "URB_FUNCTION_RESERVE_0X002C"}, {0x002D, "URB_FUNCTION_RESERVE_0X002D"}, {0x002E, "URB_FUNCTION_RESERVE_0X002E"}, {0x002F, "URB_FUNCTION_RESERVE_0X002F"}, {0x0030, "URB_FUNCTION_SYNC_RESET_PIPE"}, {0x0031, "URB_FUNCTION_SYNC_CLEAR_STALL"}, {0x0032, "URB_FUNCTION_CONTROL_TRANSFER_EX"}, {0x0033, "URB_FUNCTION_RESERVE_0X0033"}, {0x0034, "URB_FUNCTION_RESERVE_0X0034"}, {0, NULL} }; value_string_ext win32_urb_function_vals_ext = VALUE_STRING_EXT_INIT(win32_urb_function_vals); static const value_string win32_usbd_status_vals[] = { {0x00000000, "USBD_STATUS_SUCCESS"}, {0x40000000, "USBD_STATUS_PENDING"}, {0x80000200, "USBD_STATUS_INVALID_URB_FUNCTION"}, {0x80000300, "USBD_STATUS_INVALID_PARAMETER"}, {0x80000400, "USBD_STATUS_ERROR_BUSY"}, {0x80000600, "USBD_STATUS_INVALID_PIPE_HANDLE"}, {0x80000700, "USBD_STATUS_NO_BANDWIDTH"}, {0x80000800, "USBD_STATUS_INTERNAL_HC_ERROR"}, {0x80000900, "USBD_STATUS_ERROR_SHORT_TRANSFER"}, {0xC0000001, "USBD_STATUS_CRC"}, {0xC0000002, "USBD_STATUS_BTSTUFF"}, {0xC0000003, "USBD_STATUS_DATA_TOGGLE_MISMATCH"}, {0xC0000004, "USBD_STATUS_STALL_PID"}, {0xC0000005, "USBD_STATUS_DEV_NOT_RESPONDING"}, {0xC0000006, "USBD_STATUS_PID_CHECK_FAILURE"}, {0xC0000007, "USBD_STATUS_UNEXPECTED_PID"}, {0xC0000008, "USBD_STATUS_DATA_OVERRUN"}, {0xC0000009, "USBD_STATUS_DATA_UNDERRUN"}, {0xC000000A, "USBD_STATUS_RESERVED1"}, {0xC000000B, "USBD_STATUS_RESERVED2"}, {0xC000000C, "USBD_STATUS_BUFFER_OVERRUN"}, {0xC000000D, "USBD_STATUS_BUFFER_UNDERRUN"}, {0xC000000F, "USBD_STATUS_NOT_ACCESSED"}, {0xC0000010, "USBD_STATUS_FIFO"}, {0xC0000011, "USBD_STATUS_XACT_ERROR"}, {0xC0000012, "USBD_STATUS_BABBLE_DETECTED"}, {0xC0000013, "USBD_STATUS_DATA_BUFFER_ERROR"}, {0xC0000030, "USBD_STATUS_ENDPOINT_HALTED"}, {0xC0000A00, "USBD_STATUS_BAD_START_FRAME"}, {0xC0000B00, "USBD_STATUS_ISOCH_REQUEST_FAILED"}, {0xC0000C00, "USBD_STATUS_FRAME_CONTROL_OWNED"}, {0xC0000D00, "USBD_STATUS_FRAME_CONTROL_NOT_OWNED"}, {0xC0000E00, "USBD_STATUS_NOT_SUPPORTED"}, {0xC0000F00, "USBD_STATUS_INVALID_CONFIGURATION_DESCRIPTOR"}, {0xC0001000, "USBD_STATUS_INSUFFICIENT_RESOURCES"}, {0xC0002000, "USBD_STATUS_SET_CONFIG_FAILED"}, {0xC0003000, "USBD_STATUS_BUFFER_TOO_SMALL"}, {0xC0004000, "USBD_STATUS_INTERFACE_NOT_FOUND"}, {0xC0005000, "USBD_STATUS_INVALID_PIPE_FLAGS"}, {0xC0006000, "USBD_STATUS_TIMEOUT"}, {0xC0007000, "USBD_STATUS_DEVICE_GONE"}, {0xC0008000, "USBD_STATUS_STATUS_NOT_MAPPED"}, {0xC0009000, "USBD_STATUS_HUB_INTERNAL_ERROR"}, {0xC0010000, "USBD_STATUS_CANCELED"}, {0xC0020000, "USBD_STATUS_ISO_NOT_ACCESSED_BY_HW"}, {0xC0030000, "USBD_STATUS_ISO_TD_ERROR"}, {0xC0040000, "USBD_STATUS_ISO_NA_LATE_USBPORT"}, {0xC0050000, "USBD_STATUS_ISO_NOT_ACCESSED_LATE"}, {0xC0100000, "USBD_STATUS_BAD_DESCRIPTOR"}, {0xC0100001, "USBD_STATUS_BAD_DESCRIPTOR_BLEN"}, {0xC0100002, "USBD_STATUS_BAD_DESCRIPTOR_TYPE"}, {0xC0100003, "USBD_STATUS_BAD_INTERFACE_DESCRIPTOR"}, {0xC0100004, "USBD_STATUS_BAD_ENDPOINT_DESCRIPTOR"}, {0xC0100005, "USBD_STATUS_BAD_INTERFACE_ASSOC_DESCRIPTOR"}, {0xC0100006, "USBD_STATUS_BAD_CONFIG_DESC_LENGTH"}, {0xC0100007, "USBD_STATUS_BAD_NUMBER_OF_INTERFACES"}, {0xC0100008, "USBD_STATUS_BAD_NUMBER_OF_ENDPOINTS"}, {0xC0100009, "USBD_STATUS_BAD_ENDPOINT_ADDRESS"}, {0, NULL} }; static value_string_ext win32_usbd_status_vals_ext = VALUE_STRING_EXT_INIT(win32_usbd_status_vals); static const value_string win32_usb_info_direction_vals[] = { {0, "FDO -> PDO"}, {1, "PDO -> FDO"}, {0, NULL} }; static const value_string usb_cdc_protocol_vals[] = { {0x00, "No class specific protocol required"}, {0x01, "AT Commands: V.250 etc"}, {0x02, "AT Commands defined by PCCA-101"}, {0x03, "AT Commands defined by PCCA-101 & Annex O"}, {0x04, "AT Commands defined by GSM 07.07"}, {0x05, "AT Commands defined by 3GPP 27.007"}, {0x06, "AT Commands defined by TIA for CDMA"}, {0x07, "Ethernet Emulation Model"}, {0xFE, "External Protocol: Commands defined by Command Set Functional Descriptor"}, {0xFF, "Vendor-specific"}, {0, NULL} }; static value_string_ext usb_cdc_protocol_vals_ext = VALUE_STRING_EXT_INIT(usb_cdc_protocol_vals); static const value_string usb_cdc_data_protocol_vals[] = { {0x00, "No class specific protocol required"}, {0x01, "Network Transfer Block"}, {0x02, "Network Transfer Block (IP + DSS)"}, {0x30, "Physical interface protocol for ISDN BRI"}, {0x31, "HDLC"}, {0x32, "Transparent"}, {0x50, "Management protocol for Q.921 data link protocol"}, {0x51, "Data link protocol for Q.931"}, {0x52, "TEI-multiplexor for Q.921 data link protocol"}, {0x90, "Data compression procedures"}, {0x91, "Euro-ISDN protocol control"}, {0x92, "V.24 rate adaptation to ISDN"}, {0x93, "CAPI Commands"}, {0xFE, "The protocol(s) are described using a Protocol Unit Functional Descriptors on Communications Class Interface"}, {0xFF, "Vendor-specific"}, {0, NULL} }; static value_string_ext usb_cdc_data_protocol_vals_ext = VALUE_STRING_EXT_INIT(usb_cdc_data_protocol_vals); static const value_string usb_hid_subclass_vals[] = { {0, "No Subclass"}, {1, "Boot Interface"}, {0, NULL} }; static value_string_ext usb_hid_subclass_vals_ext = VALUE_STRING_EXT_INIT(usb_hid_subclass_vals); static const value_string usb_hid_boot_protocol_vals[] = { {0, "None"}, {1, "Keyboard"}, {2, "Mouse"}, {0, NULL} }; static value_string_ext usb_hid_boot_protocol_vals_ext = VALUE_STRING_EXT_INIT(usb_hid_boot_protocol_vals); static const value_string usb_app_subclass_vals[] = { {0x01, "Device Firmware Upgrade"}, {0x02, "IRDA Bridge"}, {0x03, "USB Test and Measurement Device"}, {0, NULL} }; static value_string_ext usb_app_subclass_vals_ext = VALUE_STRING_EXT_INIT(usb_app_subclass_vals); static const value_string usb_app_dfu_protocol_vals[] = { {0x01, "Runtime protocol"}, {0x02, "DFU mode protocol"}, {0, NULL} }; static value_string_ext usb_app_dfu_protocol_vals_ext = VALUE_STRING_EXT_INIT(usb_app_dfu_protocol_vals); static const value_string usb_app_irda_protocol_vals[] = { {0x00, "IRDA Bridge device"}, {0, NULL} }; static value_string_ext usb_app_irda_protocol_vals_ext = VALUE_STRING_EXT_INIT(usb_app_irda_protocol_vals); static const value_string usb_app_usb_test_and_measurement_protocol_vals[] = { {0x00, "USB Test and Measurement Device"}, {0x01, "USB Test and Measurement Device conforming to the USBTMC USB488 Subclass Specification"}, {0, NULL} }; static value_string_ext usb_app_usb_test_and_measurement_protocol_vals_ext = VALUE_STRING_EXT_INIT(usb_app_usb_test_and_measurement_protocol_vals); void proto_register_usb(void); void proto_reg_handoff_usb(void); /* This keys provide information for DecodeBy and other dissector via per packet data: p_get_proto_data()/p_add_proto_data() */ #define USB_BUS_ID 0 #define USB_DEVICE_ADDRESS 1 #define USB_VENDOR_ID 2 #define USB_PRODUCT_ID 3 #define USB_DEVICE_CLASS 4 #define USB_DEVICE_SUBCLASS 5 #define USB_DEVICE_PROTOCOL 6 static void usb_device_prompt(packet_info *pinfo, gchar* result) { g_snprintf(result, MAX_DECODE_AS_PROMPT_LEN, "Bus ID %u \nDevice Address %u\nas ", GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_BUS_ID)), GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_ADDRESS))); } static gpointer usb_device_value(packet_info *pinfo) { guint32 value = GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_BUS_ID)) << 8; value |= GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_ADDRESS)); return GUINT_TO_POINTER(value); } static void usb_product_prompt(packet_info *pinfo, gchar* result) { g_snprintf(result, MAX_DECODE_AS_PROMPT_LEN, "Vendor ID 0x%04x \nProduct ID 0x%04x\nas ", GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_VENDOR_ID)), GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_PRODUCT_ID))); } static gpointer usb_product_value(packet_info *pinfo) { guint32 value = GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_VENDOR_ID)) << 16; value |= GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_PRODUCT_ID)); return GUINT_TO_POINTER(value); } static void usb_protocol_prompt(packet_info *pinfo, gchar* result) { g_snprintf(result, MAX_DECODE_AS_PROMPT_LEN, "Class ID 0x%04x \nSubclass ID 0x%04x\nProtocol 0x%04x\nas ", GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_CLASS)), GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_SUBCLASS)), GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_PROTOCOL))); } static gpointer usb_protocol_value(packet_info *pinfo) { guint32 value = GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_CLASS)) << 16; value |= GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_SUBCLASS)) << 8; value |= GPOINTER_TO_UINT(p_get_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_PROTOCOL)); return GUINT_TO_POINTER(value); } static build_valid_func usb_product_da_build_value[1] = {usb_product_value}; static decode_as_value_t usb_product_da_values = {usb_product_prompt, 1, usb_product_da_build_value}; static decode_as_t usb_product_da = { "usb", "USB Product", "usb.product", 1, 0, &usb_product_da_values, NULL, NULL, decode_as_default_populate_list, decode_as_default_reset, decode_as_default_change, NULL}; static build_valid_func usb_device_da_build_value[1] = {usb_device_value}; static decode_as_value_t usb_device_da_values = {usb_device_prompt, 1, usb_device_da_build_value}; static decode_as_t usb_device_da = { "usb", "USB Device", "usb.device", 1, 0, &usb_device_da_values, NULL, NULL, decode_as_default_populate_list, decode_as_default_reset, decode_as_default_change, NULL}; static build_valid_func usb_protocol_da_build_value[1] = {usb_protocol_value}; static decode_as_value_t usb_protocol_da_values = {usb_protocol_prompt, 1, usb_protocol_da_build_value}; static decode_as_t usb_protocol_da = { "usb", "USB Device Protocol", "usb.protocol", 1, 0, &usb_protocol_da_values, NULL, NULL, decode_as_default_populate_list, decode_as_default_reset, decode_as_default_change, NULL}; static usb_conv_info_t * get_usb_conv_info(conversation_t *conversation) { usb_conv_info_t *usb_conv_info; /* do we have conversation specific data ? */ usb_conv_info = (usb_conv_info_t *)conversation_get_proto_data(conversation, proto_usb); if (!usb_conv_info) { /* no not yet so create some */ usb_conv_info = wmem_new0(wmem_file_scope(), usb_conv_info_t); usb_conv_info->interfaceClass = IF_CLASS_UNKNOWN; usb_conv_info->interfaceSubclass = IF_SUBCLASS_UNKNOWN; usb_conv_info->interfaceProtocol = IF_PROTOCOL_UNKNOWN; usb_conv_info->deviceVendor = DEV_VENDOR_UNKNOWN; usb_conv_info->deviceProduct = DEV_PRODUCT_UNKNOWN; usb_conv_info->transactions = wmem_tree_new(wmem_file_scope()); conversation_add_proto_data(conversation, proto_usb, usb_conv_info); } return usb_conv_info; } static conversation_t * get_usb_conversation(packet_info *pinfo, address *src_addr, address *dst_addr, guint32 src_endpoint, guint32 dst_endpoint) { conversation_t *conversation; /* * Do we have a conversation for this connection? */ conversation = find_conversation(pinfo->fd->num, src_addr, dst_addr, pinfo->ptype, src_endpoint, dst_endpoint, 0); if (conversation) { return conversation; } /* We don't yet have a conversation, so create one. */ conversation = conversation_new(pinfo->fd->num, src_addr, dst_addr, pinfo->ptype, src_endpoint, dst_endpoint, 0); return conversation; } /* Fetch or create usb_conv_info for a specified interface. */ usb_conv_info_t * get_usb_iface_conv_info(packet_info *pinfo, guint8 interface_num) { conversation_t *conversation; guint32 if_port; if_port = GUINT32_TO_LE(INTERFACE_PORT | interface_num); if (pinfo->srcport == NO_ENDPOINT) { conversation = get_usb_conversation(pinfo, &pinfo->src, &pinfo->dst, pinfo->srcport, if_port); } else { conversation = get_usb_conversation(pinfo, &pinfo->src, &pinfo->dst, if_port, pinfo->destport); } return get_usb_conv_info(conversation); } /* SETUP dissectors */ /* * These dissectors are used to dissect the setup part and the data * for URB_CONTROL_INPUT / CLEAR FEATURE */ /* 9.4.1 */ static int dissect_usb_setup_clear_feature_request(packet_info *pinfo _U_, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* feature selector */ proto_tree_add_item(tree, hf_usb_wFeatureSelector, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* zero/interface/endpoint */ /* XXX - check based on request type */ proto_tree_add_item(tree, hf_usb_wInterface, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* length */ proto_tree_add_item(tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; return offset; } static int dissect_usb_setup_clear_feature_response(packet_info *pinfo _U_, proto_tree *tree _U_, tvbuff_t *tvb _U_, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { return offset; } /* * These dissectors are used to dissect the setup part and the data * for URB_CONTROL_INPUT / GET CONFIGURATION */ /* 9.4.2 */ static int dissect_usb_setup_get_configuration_response(packet_info *pinfo _U_, proto_tree *tree _U_, tvbuff_t *tvb _U_, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { proto_tree_add_item(tree, hf_usb_bConfigurationValue, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; return offset; } /* * These dissectors are used to dissect the setup part and the data * for URB_CONTROL_INPUT / GET DESCRIPTOR */ proto_item * dissect_usb_descriptor_header(proto_tree *tree, tvbuff_t *tvb, int offset, value_string_ext *type_val_str) { guint8 desc_type; proto_item *length_item; proto_item *type_item; length_item = proto_tree_add_item(tree, hf_usb_bLength, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset++; desc_type = tvb_get_guint8(tvb, offset); type_item = proto_tree_add_item(tree, hf_usb_bDescriptorType, tvb, offset, 1, ENC_LITTLE_ENDIAN); /* if the caller provided no class specific value string, we're * using the standard descriptor types */ if (!type_val_str) type_val_str = &std_descriptor_type_vals_ext; proto_item_append_text(type_item, " (%s)", val_to_str_ext(desc_type, type_val_str, "unknown")); return length_item; } /* 9.6.2 */ static int dissect_usb_device_qualifier_descriptor(packet_info *pinfo _U_, proto_tree *parent_tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id, guint device_address) { proto_item *item = NULL; proto_tree *tree = NULL; proto_item *nitem = NULL; int old_offset = offset; guint32 protocol; const gchar *description; if (parent_tree) { item = proto_tree_add_text(parent_tree, tvb, offset, -1, "DEVICE QUALIFIER DESCRIPTOR"); tree = proto_item_add_subtree(item, ett_descriptor_device); } dissect_usb_descriptor_header(tree, tvb, offset, NULL); offset += 2; /* bcdUSB */ proto_tree_add_item(tree, hf_usb_bcdUSB, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; protocol = tvb_get_ntoh24(tvb, offset); description = val_to_str_ext_const(protocol, &usb_protocols_ext, ""); /* bDeviceClass */ proto_tree_add_item(tree, hf_usb_bDeviceClass, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bDeviceSubClass */ proto_tree_add_item(tree, hf_usb_bDeviceSubClass, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bDeviceProtocol */ nitem = proto_tree_add_item(tree, hf_usb_bDeviceProtocol, tvb, offset, 1, ENC_LITTLE_ENDIAN); if (*description) proto_item_append_text(nitem, " (%s)", description); offset += 1; if (!pinfo->fd->flags.visited) { guint k_bus_id; guint k_device_address; guint k_frame_number; wmem_tree_key_t key[4]; device_protocol_data_t *device_protocol_data; k_frame_number = pinfo->fd->num; k_device_address = device_address; k_bus_id = bus_id; key[0].length = 1; key[0].key = &k_device_address; key[1].length = 1; key[1].key = &k_bus_id; key[2].length = 1; key[2].key = &k_frame_number; key[3].length = 0; key[3].key = NULL; device_protocol_data = wmem_new(wmem_file_scope(), device_protocol_data_t); device_protocol_data->protocol = protocol; device_protocol_data->bus_id = bus_id; device_protocol_data->device_address = device_address; wmem_tree_insert32_array(device_to_protocol_table, key, device_protocol_data); } /* bMaxPacketSize0 */ proto_tree_add_item(tree, hf_usb_bMaxPacketSize0, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bNumConfigurations */ proto_tree_add_item(tree, hf_usb_bNumConfigurations, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* one reserved byte */ offset += 1; if (item) { proto_item_set_len(item, offset-old_offset); } return offset; } /* 9.6.1 */ static int dissect_usb_device_descriptor(packet_info *pinfo, proto_tree *parent_tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, guint bus_id, guint device_address, usb_conv_info_t *usb_conv_info) { proto_item *item = NULL; proto_tree *tree = NULL; proto_item *nitem = NULL; int old_offset = offset; guint32 protocol; const gchar *description; guint16 vendor_id; guint32 product; guint16 product_id; guint8 *field_description; gint field_description_length; header_field_info *hfi; if (parent_tree) { item = proto_tree_add_text(parent_tree, tvb, offset, -1, "DEVICE DESCRIPTOR"); tree = proto_item_add_subtree(item, ett_descriptor_device); } dissect_usb_descriptor_header(tree, tvb, offset, NULL); offset += 2; /* bcdUSB */ proto_tree_add_item(tree, hf_usb_bcdUSB, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; protocol = tvb_get_ntoh24(tvb, offset); description = val_to_str_ext_const(protocol, &usb_protocols_ext, ""); /* bDeviceClass */ proto_tree_add_item(tree, hf_usb_bDeviceClass, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bDeviceSubClass */ proto_tree_add_item(tree, hf_usb_bDeviceSubClass, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bDeviceProtocol */ nitem = proto_tree_add_item(tree, hf_usb_bDeviceProtocol, tvb, offset, 1, ENC_LITTLE_ENDIAN); if (*description) proto_item_append_text(nitem, " (%s)", description); offset += 1; /* bMaxPacketSize0 */ proto_tree_add_item(tree, hf_usb_bMaxPacketSize0, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* idVendor */ proto_tree_add_item(tree, hf_usb_idVendor, tvb, offset, 2, ENC_LITTLE_ENDIAN); vendor_id = tvb_get_letohs(tvb, offset); usb_conv_info->deviceVendor = vendor_id; offset += 2; /* idProduct */ nitem = proto_tree_add_item(tree, hf_usb_idProduct, tvb, offset, 2, ENC_LITTLE_ENDIAN); product_id = tvb_get_letohs(tvb, offset); usb_conv_info->deviceProduct = product_id; product = vendor_id << 16 | product_id; hfi = proto_registrar_get_nth(hf_usb_idProduct); field_description_length = (gint)strlen(hfi->name) + 14; field_description = (guint8 *)wmem_alloc(wmem_packet_scope(), field_description_length); g_strlcpy(field_description, hfi->name, field_description_length); g_strlcat(field_description, ": %s (0x%04x)", field_description_length); proto_item_set_text(nitem, field_description, val_to_str_ext_const(product, &ext_usb_products_vals, "Unknown"), product_id); offset += 2; if (!pinfo->fd->flags.visited) { guint k_bus_id; guint k_device_address; guint k_frame_number; wmem_tree_key_t key[4]; device_product_data_t *device_product_data; device_protocol_data_t *device_protocol_data; k_frame_number = pinfo->fd->num; k_device_address = device_address; k_bus_id = bus_id; key[0].length = 1; key[0].key = &k_device_address; key[1].length = 1; key[1].key = &k_bus_id; key[2].length = 1; key[2].key = &k_frame_number; key[3].length = 0; key[3].key = NULL; device_product_data = wmem_new(wmem_file_scope(), device_product_data_t); device_product_data->vendor = vendor_id; device_product_data->product = product_id; device_product_data->bus_id = bus_id; device_product_data->device_address = device_address; wmem_tree_insert32_array(device_to_product_table, key, device_product_data); device_protocol_data = wmem_new(wmem_file_scope(), device_protocol_data_t); device_protocol_data->protocol = protocol; device_protocol_data->bus_id = bus_id; device_protocol_data->device_address = device_address; wmem_tree_insert32_array(device_to_protocol_table, key, device_protocol_data); } /* bcdDevice */ proto_tree_add_item(tree, hf_usb_bcdDevice, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* iManufacturer */ proto_tree_add_item(tree, hf_usb_iManufacturer, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* iProduct */ proto_tree_add_item(tree, hf_usb_iProduct, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* iSerialNumber */ proto_tree_add_item(tree, hf_usb_iSerialNumber, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bNumConfigurations */ proto_tree_add_item(tree, hf_usb_bNumConfigurations, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; if (item) { proto_item_set_len(item, offset-old_offset); } return offset; } /* 9.6.7 */ static int dissect_usb_string_descriptor(packet_info *pinfo _U_, proto_tree *parent_tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info, usb_conv_info_t *usb_conv_info _U_) { proto_item *item = NULL; proto_tree *tree = NULL; int old_offset = offset; guint8 len; proto_item *len_item; if (parent_tree) { item = proto_tree_add_text(parent_tree, tvb, offset, -1, "STRING DESCRIPTOR"); tree = proto_item_add_subtree(item, ett_descriptor_device); } len = tvb_get_guint8(tvb, offset); /* The USB spec says that the languages / the string are UTF16 and not 0-terminated, i.e. the length field must contain an even number */ if (len & 0x1) { /* bLength */ len_item = proto_tree_add_item(tree, hf_usb_bLength, tvb, offset, 1, ENC_LITTLE_ENDIAN); expert_add_info(pinfo, len_item, &ei_usb_bLength_even); /* bDescriptorType */ proto_tree_add_item(tree, hf_usb_bDescriptorType, tvb, offset+1, 1, ENC_LITTLE_ENDIAN); } else len_item = dissect_usb_descriptor_header(tree, tvb, offset, NULL); offset += 2; /* Report an error, and give up, if the length is < 2 */ if (len < 2) { expert_add_info(pinfo, len_item, &ei_usb_bLength_too_short); return offset; } if (!usb_trans_info->u.get_descriptor.index) { /* list of languanges */ while(len>(offset-old_offset)) { /* wLANGID */ proto_tree_add_item(tree, hf_usb_wLANGID, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset+=2; } } else { /* UTF-16 string */ proto_tree_add_item(tree, hf_usb_bString, tvb, offset, len-2, ENC_UTF_16 | ENC_LITTLE_ENDIAN); offset += len-2; } if (item) { proto_item_set_len(item, offset-old_offset); } return offset; } /* 9.6.5 */ static int dissect_usb_interface_descriptor(packet_info *pinfo, proto_tree *parent_tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info, usb_conv_info_t *usb_conv_info) { proto_item *item = NULL; proto_tree *tree = NULL; const char *class_str = NULL; int old_offset = offset; guint8 len; guint8 interface_num; guint8 alt_setting; if (parent_tree) { item = proto_tree_add_text(parent_tree, tvb, offset, -1, "INTERFACE DESCRIPTOR"); tree = proto_item_add_subtree(item, ett_descriptor_device); } len = tvb_get_guint8(tvb, offset); dissect_usb_descriptor_header(tree, tvb, offset, NULL); offset += 2; /* bInterfaceNumber */ interface_num = tvb_get_guint8(tvb, offset); proto_tree_add_item(tree, hf_usb_bInterfaceNumber, tvb, offset, 1, ENC_LITTLE_ENDIAN); usb_conv_info->interfaceNum = interface_num; offset += 1; /* bAlternateSetting */ alt_setting = tvb_get_guint8(tvb, offset); proto_tree_add_item(tree, hf_usb_bAlternateSetting, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bNumEndpoints */ proto_tree_add_item(tree, hf_usb_bNumEndpoints, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bInterfaceClass */ proto_tree_add_item(tree, hf_usb_bInterfaceClass, tvb, offset, 1, ENC_LITTLE_ENDIAN); /* save the class so we can access it later in the endpoint descriptor */ usb_conv_info->interfaceClass = tvb_get_guint8(tvb, offset); class_str = val_to_str_ext(usb_conv_info->interfaceClass, &usb_class_vals_ext, "unknown (0x%X)"); proto_item_append_text(item, " (%u.%u): class %s", interface_num, alt_setting, class_str); if (!pinfo->fd->flags.visited && (alt_setting == 0)) { /* Register conversation for this interface in case CONTROL messages are sent to it */ usb_trans_info->interface_info = get_usb_iface_conv_info(pinfo, interface_num); usb_trans_info->interface_info->interfaceClass = tvb_get_guint8(tvb, offset); /* save information useful to class-specific dissectors */ usb_trans_info->interface_info->interfaceSubclass = tvb_get_guint8(tvb, offset+1); usb_trans_info->interface_info->interfaceProtocol = tvb_get_guint8(tvb, offset+2); usb_trans_info->interface_info->deviceVendor = usb_conv_info->deviceVendor; usb_trans_info->interface_info->deviceProduct = usb_conv_info->deviceProduct; } offset += 1; /* bInterfaceSubClass */ switch (usb_conv_info->interfaceClass) { case IF_CLASS_COMMUNICATIONS: proto_tree_add_item(tree, hf_usb_bInterfaceSubClass_cdc, tvb, offset, 1, ENC_LITTLE_ENDIAN); break; case IF_CLASS_HID: proto_tree_add_item(tree, hf_usb_bInterfaceSubClass_hid, tvb, offset, 1, ENC_LITTLE_ENDIAN); break; case IF_CLASS_APPLICATION_SPECIFIC: proto_tree_add_item(tree, hf_usb_bInterfaceSubClass_app, tvb, offset, 1, ENC_LITTLE_ENDIAN); break; default: proto_tree_add_item(tree, hf_usb_bInterfaceSubClass, tvb, offset, 1, ENC_LITTLE_ENDIAN); } /* save the subclass so we can access it later in class-specific descriptors */ usb_conv_info->interfaceSubclass = tvb_get_guint8(tvb, offset); offset += 1; /* bInterfaceProtocol */ switch (usb_conv_info->interfaceClass) { case IF_CLASS_COMMUNICATIONS: proto_tree_add_item(tree, hf_usb_bInterfaceProtocol_cdc, tvb, offset, 1, ENC_LITTLE_ENDIAN); break; case IF_CLASS_CDC_DATA: proto_tree_add_item(tree, hf_usb_bInterfaceProtocol_cdc_data, tvb, offset, 1, ENC_LITTLE_ENDIAN); break; case IF_CLASS_APPLICATION_SPECIFIC: switch (usb_conv_info->interfaceSubclass) { case 0x01: proto_tree_add_item(tree, hf_usb_bInterfaceProtocol_app_dfu, tvb, offset, 1, ENC_LITTLE_ENDIAN); break; case 0x02: proto_tree_add_item(tree, hf_usb_bInterfaceProtocol_app_irda, tvb, offset, 1, ENC_LITTLE_ENDIAN); break; case 0x03: proto_tree_add_item(tree, hf_usb_bInterfaceProtocol_app_usb_test_and_measurement, tvb, offset, 1, ENC_LITTLE_ENDIAN); break; default: proto_tree_add_item(tree, hf_usb_bInterfaceProtocol, tvb, offset, 1, ENC_LITTLE_ENDIAN); } break; case IF_CLASS_HID: if (usb_conv_info->interfaceSubclass == 1) { proto_tree_add_item(tree, hf_usb_bInterfaceProtocol_hid_boot, tvb, offset, 1, ENC_LITTLE_ENDIAN); break; } proto_tree_add_item(tree, hf_usb_bInterfaceProtocol, tvb, offset, 1, ENC_LITTLE_ENDIAN); break; default: proto_tree_add_item(tree, hf_usb_bInterfaceProtocol, tvb, offset, 1, ENC_LITTLE_ENDIAN); } usb_conv_info->interfaceProtocol = tvb_get_guint8(tvb, offset); offset += 1; /* iInterface */ proto_tree_add_item(tree, hf_usb_iInterface, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; if (item) { proto_item_set_len(item, len); } if (offset < old_offset+len) { /* skip unknown records */ offset = old_offset + len; } return offset; } /* 9.6.6 */ static const true_false_string tfs_endpoint_direction = { "IN Endpoint", "OUT Endpoint" }; void dissect_usb_endpoint_address(proto_tree *tree, tvbuff_t *tvb, int offset) { proto_item *endpoint_item = NULL; proto_tree *endpoint_tree = NULL; guint8 endpoint; if (tree) { endpoint_item = proto_tree_add_item(tree, hf_usb_bEndpointAddress, tvb, offset, 1, ENC_LITTLE_ENDIAN); endpoint_tree = proto_item_add_subtree(endpoint_item, ett_configuration_bEndpointAddress); } endpoint = tvb_get_guint8(tvb, offset)&0x0f; proto_tree_add_item(endpoint_tree, hf_usb_bEndpointAddress_direction, tvb, offset, 1, ENC_LITTLE_ENDIAN); proto_item_append_text(endpoint_item, " %s", (tvb_get_guint8(tvb, offset)&0x80)?"IN":"OUT"); proto_tree_add_item(endpoint_tree, hf_usb_bEndpointAddress_number, tvb, offset, 1, ENC_LITTLE_ENDIAN); proto_item_append_text(endpoint_item, " Endpoint:%d", endpoint); } static int dissect_usb_endpoint_descriptor(packet_info *pinfo, proto_tree *parent_tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_) { proto_item *item = NULL; proto_tree *tree = NULL; proto_item *ep_attrib_item = NULL; proto_tree *ep_attrib_tree = NULL; proto_item *ep_pktsize_item; proto_tree *ep_pktsize_tree; int old_offset = offset; guint8 endpoint; guint8 ep_type; guint8 len; if (parent_tree) { item = proto_tree_add_text(parent_tree, tvb, offset, -1, "ENDPOINT DESCRIPTOR"); tree = proto_item_add_subtree(item, ett_descriptor_device); } len = tvb_get_guint8(tvb, offset); dissect_usb_descriptor_header(tree, tvb, offset, NULL); offset += 2; endpoint = tvb_get_guint8(tvb, offset)&0x0f; dissect_usb_endpoint_address(tree, tvb, offset); offset += 1; /* Together with class from the interface descriptor we know what kind * of class the device at endpoint is. * Make sure a conversation exists for this endpoint and attach a * usb_conv_into_t structure to it. * * All endpoints for the same interface descriptor share the same * usb_conv_info structure. */ if ((!pinfo->fd->flags.visited)&&usb_trans_info->interface_info) { conversation_t *conversation; if (pinfo->destport == NO_ENDPOINT) { static address tmp_addr; static usb_address_t usb_addr; /* Create a new address structure that points to the same device * but the new endpoint. */ usb_addr.device = ((const usb_address_t *)(pinfo->src.data))->device; usb_addr.endpoint = GUINT32_TO_LE(endpoint); SET_ADDRESS(&tmp_addr, AT_USB, USB_ADDR_LEN, (char *)&usb_addr); conversation = get_usb_conversation(pinfo, &tmp_addr, &pinfo->dst, usb_addr.endpoint, pinfo->destport); } else { static address tmp_addr; static usb_address_t usb_addr; /* Create a new address structure that points to the same device * but the new endpoint. */ usb_addr.device = ((const usb_address_t *)(pinfo->dst.data))->device; usb_addr.endpoint = GUINT32_TO_LE(endpoint); SET_ADDRESS(&tmp_addr, AT_USB, USB_ADDR_LEN, (char *)&usb_addr); conversation = get_usb_conversation(pinfo, &pinfo->src, &tmp_addr, pinfo->srcport, usb_addr.endpoint); } conversation_add_proto_data(conversation, proto_usb, usb_trans_info->interface_info); } /* bmAttributes */ ep_type = ENDPOINT_TYPE(tvb_get_guint8(tvb, offset)); if (tree) { ep_attrib_item = proto_tree_add_item(tree, hf_usb_bmAttributes, tvb, offset, 1, ENC_LITTLE_ENDIAN); ep_attrib_tree = proto_item_add_subtree(ep_attrib_item, ett_endpoint_bmAttributes); } proto_tree_add_item(ep_attrib_tree, hf_usb_bEndpointAttributeTransfer, tvb, offset, 1, ENC_LITTLE_ENDIAN); /* isochronous only */ proto_tree_add_item(ep_attrib_tree, hf_usb_bEndpointAttributeSynchonisation, tvb, offset, 1, ENC_LITTLE_ENDIAN); /* isochronous only */ proto_tree_add_item(ep_attrib_tree, hf_usb_bEndpointAttributeBehaviour, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* wMaxPacketSize */ ep_pktsize_item = proto_tree_add_item(tree, hf_usb_wMaxPacketSize, tvb, offset, 2, ENC_LITTLE_ENDIAN); ep_pktsize_tree = proto_item_add_subtree(ep_pktsize_item, ett_endpoint_wMaxPacketSize); if ((ep_type == ENDPOINT_TYPE_INTERRUPT) || (ep_type == ENDPOINT_TYPE_ISOCHRONOUS)) { proto_tree_add_item(ep_pktsize_tree, hf_usb_wMaxPacketSize_slots, tvb, offset, 2, ENC_LITTLE_ENDIAN); } proto_tree_add_item(ep_pktsize_tree, hf_usb_wMaxPacketSize_size, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset+=2; /* bInterval */ proto_tree_add_item(tree, hf_usb_bInterval, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; if (item) { proto_item_set_len(item, len); } if (offset < old_offset+len) { /* skip unknown records */ offset = old_offset + len; } return offset; } /* ECN */ static int dissect_usb_interface_assn_descriptor(packet_info *pinfo _U_, proto_tree *parent_tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_) { proto_item *item = NULL; proto_tree *tree = NULL; int old_offset = offset; if (parent_tree) { item = proto_tree_add_text(parent_tree, tvb, offset, -1, "INTERFACE ASSOCIATION DESCRIPTOR"); tree = proto_item_add_subtree(item, ett_descriptor_device); } dissect_usb_descriptor_header(tree, tvb, offset, NULL); offset += 2; /* bFirstInterface */ proto_tree_add_item(tree, hf_usb_bFirstInterface, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bInterfaceCount */ proto_tree_add_item(tree, hf_usb_bInterfaceCount, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bFunctionClass */ proto_tree_add_item(tree, hf_usb_bFunctionClass, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bFunctionSubclass */ proto_tree_add_item(tree, hf_usb_bFunctionSubClass, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bFunctionProtocol */ proto_tree_add_item(tree, hf_usb_bFunctionProtocol, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* iFunction */ proto_tree_add_item(tree, hf_usb_iFunction, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; if (item) { proto_item_set_len(item, offset-old_offset); } return offset; } static int dissect_usb_unknown_descriptor(packet_info *pinfo _U_, proto_tree *parent_tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_) { proto_item *item = NULL; proto_tree *tree = NULL; guint8 bLength; if (parent_tree) { item = proto_tree_add_text(parent_tree, tvb, offset, -1, "UNKNOWN DESCRIPTOR"); tree = proto_item_add_subtree(item, ett_descriptor_device); } bLength = tvb_get_guint8(tvb, offset); dissect_usb_descriptor_header(tree, tvb, offset, NULL); offset += bLength; if (item) { proto_item_set_len(item, bLength); } return offset; } /* 9.6.3 */ static const true_false_string tfs_mustbeone = { "Must be 1 for USB 1.1 and higher", "FIXME: Is this a USB 1.0 device" }; static const true_false_string tfs_selfpowered = { "This device is SELF-POWERED", "This device is powered from the USB bus" }; static const true_false_string tfs_remotewakeup = { "This device supports REMOTE WAKEUP", "This device does NOT support remote wakeup" }; static int dissect_usb_configuration_descriptor(packet_info *pinfo _U_, proto_tree *parent_tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info, usb_conv_info_t *usb_conv_info) { proto_item *item = NULL; proto_tree *tree = NULL; int old_offset = offset; guint16 len; proto_item *flags_item = NULL; proto_tree *flags_tree = NULL; guint8 flags; proto_item *power_item; guint8 power; gboolean truncation_expected; usb_conv_info->interfaceClass = IF_CLASS_UNKNOWN; usb_conv_info->interfaceSubclass = IF_SUBCLASS_UNKNOWN; usb_conv_info->interfaceProtocol = IF_PROTOCOL_UNKNOWN; if (parent_tree) { item = proto_tree_add_text(parent_tree, tvb, offset, -1, "CONFIGURATION DESCRIPTOR"); tree = proto_item_add_subtree(item, ett_descriptor_device); } dissect_usb_descriptor_header(tree, tvb, offset, NULL); offset += 2; /* wTotalLength */ proto_tree_add_item(tree, hf_usb_wTotalLength, tvb, offset, 2, ENC_LITTLE_ENDIAN); len = tvb_get_letohs(tvb, offset); offset+=2; /* bNumInterfaces */ proto_tree_add_item(tree, hf_usb_bNumInterfaces, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bConfigurationValue */ proto_tree_add_item(tree, hf_usb_bConfigurationValue, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* iConfiguration */ proto_tree_add_item(tree, hf_usb_iConfiguration, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; /* bmAttributes */ if (tree) { flags_item = proto_tree_add_item(tree, hf_usb_configuration_bmAttributes, tvb, offset, 1, ENC_LITTLE_ENDIAN); flags_tree = proto_item_add_subtree(flags_item, ett_configuration_bmAttributes); } flags = tvb_get_guint8(tvb, offset); proto_tree_add_item(flags_tree, hf_usb_configuration_legacy10buspowered, tvb, offset, 1, ENC_LITTLE_ENDIAN); proto_tree_add_item(flags_tree, hf_usb_configuration_selfpowered, tvb, offset, 1, ENC_LITTLE_ENDIAN); proto_item_append_text(flags_item, " %sSELF-POWERED", (flags&0x40)?"":"NOT "); proto_tree_add_item(flags_tree, hf_usb_configuration_remotewakeup, tvb, offset, 1, ENC_LITTLE_ENDIAN); proto_item_append_text(flags_item, " %sREMOTE-WAKEUP", (flags&0x20)?"":"NO "); offset += 1; /* bMaxPower */ power_item = proto_tree_add_item(tree, hf_usb_bMaxPower, tvb, offset, 1, ENC_LITTLE_ENDIAN); power = tvb_get_guint8(tvb, offset); proto_item_append_text(power_item, " (%dmA)", power*2); offset += 1; /* initialize interface_info to NULL */ usb_trans_info->interface_info = NULL; truncation_expected = (usb_trans_info->setup.wLength < len); /* decode any additional interface and endpoint descriptors */ while(len>(offset-old_offset)) { guint8 next_type; guint8 next_len = 0; gint remaining_tvb, remaining_len; tvbuff_t *next_tvb = NULL; /* Handle truncated descriptors appropriately */ remaining_tvb = tvb_length_remaining(tvb, offset); if (remaining_tvb > 0) { next_len = tvb_get_guint8(tvb, offset); remaining_len = len - (offset - old_offset); if ((next_len < 3) || (next_len > remaining_len)) { proto_tree_add_expert_format(parent_tree, pinfo, &ei_usb_desc_length_invalid, tvb, offset, 1, "Invalid descriptor length: %u", next_len); item = NULL; break; } } if ((remaining_tvb == 0) || (next_len > remaining_tvb)) { if (!truncation_expected) { THROW(ReportedBoundsError); } break; } next_type = tvb_get_guint8(tvb, offset+1); switch(next_type) { case USB_DT_INTERFACE: offset = dissect_usb_interface_descriptor(pinfo, parent_tree, tvb, offset, usb_trans_info, usb_conv_info); break; case USB_DT_ENDPOINT: offset = dissect_usb_endpoint_descriptor(pinfo, parent_tree, tvb, offset, usb_trans_info, usb_conv_info); break; case USB_DT_INTERFACE_ASSOCIATION: offset = dissect_usb_interface_assn_descriptor(pinfo, parent_tree, tvb, offset, usb_trans_info, usb_conv_info); break; default: next_tvb = tvb_new_subset(tvb, offset, next_len, next_len); if (dissector_try_uint_new(usb_descriptor_dissector_table, usb_conv_info->interfaceClass, next_tvb, pinfo, parent_tree, TRUE, usb_conv_info)) { offset += next_len; } else { offset = dissect_usb_unknown_descriptor(pinfo, parent_tree, tvb, offset, usb_trans_info, usb_conv_info); } break; /* was: return offset; */ } } if (item) { proto_item_set_len(item, offset-old_offset); } /* Clear any class association from the Control endpoint. * We need the association temporarily, to establish * context for class-specific descriptor dissectors, * but the association must not persist beyond this function. * If it did, all traffic on the Control endpoint would be labeled * as belonging to the class of the last INTERFACE descriptor, * which would be especially inappropriate for composite devices. */ usb_conv_info->interfaceClass = IF_CLASS_UNKNOWN; usb_conv_info->interfaceSubclass = IF_SUBCLASS_UNKNOWN; usb_conv_info->interfaceProtocol = IF_PROTOCOL_UNKNOWN; return offset; } /* 9.4.3 */ static int dissect_usb_setup_get_descriptor_request(packet_info *pinfo, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* descriptor index */ proto_tree_add_item(tree, hf_usb_descriptor_index, tvb, offset, 1, ENC_LITTLE_ENDIAN); usb_trans_info->u.get_descriptor.index = tvb_get_guint8(tvb, offset); offset += 1; /* descriptor type */ proto_tree_add_item(tree, hf_usb_bDescriptorType, tvb, offset, 1, ENC_LITTLE_ENDIAN); usb_trans_info->u.get_descriptor.type = tvb_get_guint8(tvb, offset); offset += 1; col_append_fstr(pinfo->cinfo, COL_INFO, " %s", val_to_str_ext(usb_trans_info->u.get_descriptor.type, &std_descriptor_type_vals_ext, "Unknown type %u")); /* language id */ proto_tree_add_item(tree, hf_usb_language_id, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset+=2; /* length */ proto_tree_add_item(tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; return offset; } static int dissect_usb_setup_get_descriptor_response(packet_info *pinfo, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info, usb_conv_info_t *usb_conv_info, guint bus_id, guint device_address) { col_append_fstr(pinfo->cinfo, COL_INFO, " %s", val_to_str_ext(usb_trans_info->u.get_descriptor.type, &std_descriptor_type_vals_ext, "Unknown type %u")); switch(usb_trans_info->u.get_descriptor.type) { case USB_DT_DEVICE: offset = dissect_usb_device_descriptor(pinfo, tree, tvb, offset, usb_trans_info, bus_id, device_address, usb_conv_info); break; case USB_DT_CONFIG: offset = dissect_usb_configuration_descriptor(pinfo, tree, tvb, offset, usb_trans_info, usb_conv_info); break; case USB_DT_STRING: offset = dissect_usb_string_descriptor(pinfo, tree, tvb, offset, usb_trans_info, usb_conv_info); break; case USB_DT_INTERFACE: offset = dissect_usb_interface_descriptor(pinfo, tree, tvb, offset, usb_trans_info, usb_conv_info); break; case USB_DT_ENDPOINT: offset = dissect_usb_endpoint_descriptor(pinfo, tree, tvb, offset, usb_trans_info, usb_conv_info); break; case USB_DT_DEVICE_QUALIFIER: offset = dissect_usb_device_qualifier_descriptor(pinfo, tree, tvb, offset, usb_trans_info, usb_conv_info, bus_id, device_address); break; case USB_DT_RPIPE: if (usb_conv_info->interfaceClass == IF_CLASS_HID || usb_conv_info->interfaceClass == IF_CLASS_UNKNOWN) { offset = dissect_usb_hid_get_report_descriptor(pinfo, tree, tvb, offset, usb_trans_info, usb_conv_info); break; } /* else fall through as default/unknown */ default: /* XXX dissect the descriptor coming back from the device */ proto_tree_add_text(tree, tvb, offset, -1, "GET DESCRIPTOR data (unknown descriptor type %u)", usb_trans_info->u.get_descriptor.type); offset = tvb_length(tvb); break; } return offset; } /* * These dissectors are used to dissect the setup part and the data * for URB_CONTROL_INPUT / GET INTERFACE */ /* 9.4.4 */ static int dissect_usb_setup_get_interface_request(packet_info *pinfo _U_, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* zero */ proto_tree_add_item(tree, hf_usb_value, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* interface */ proto_tree_add_item(tree, hf_usb_wInterface, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* length */ proto_tree_add_item(tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; return offset; } static int dissect_usb_setup_get_interface_response(packet_info *pinfo _U_, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* alternate setting */ proto_tree_add_item(tree, hf_usb_bAlternateSetting, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; return offset; } /* * These dissectors are used to dissect the setup part and the data * for URB_CONTROL_INPUT / GET STATUS */ /* 9.4.5 */ static int dissect_usb_setup_get_status_request(packet_info *pinfo _U_, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* zero */ proto_tree_add_item(tree, hf_usb_value, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* zero/interface/endpoint */ /* XXX - check based on request type */ proto_tree_add_item(tree, hf_usb_wInterface, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* length */ proto_tree_add_item(tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; return offset; } static int dissect_usb_setup_get_status_response(packet_info *pinfo _U_, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* status */ /* XXX - show bits */ proto_tree_add_item(tree, hf_usb_wStatus, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; return offset; } /* * These dissectors are used to dissect the setup part and the data * for URB_CONTROL_INPUT / SET ADDRESS */ /* 9.4.6 */ static int dissect_usb_setup_set_address_request(packet_info *pinfo _U_, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* device address */ proto_tree_add_item(tree, hf_usb_device_address, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* zero */ proto_tree_add_item(tree, hf_usb_index, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* zero */ proto_tree_add_item(tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; return offset; } static int dissect_usb_setup_set_address_response(packet_info *pinfo _U_, proto_tree *tree _U_, tvbuff_t *tvb _U_, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { return offset; } /* * These dissectors are used to dissect the setup part and the data * for URB_CONTROL_INPUT / SET CONFIGURATION */ /* 9.4.7 */ static int dissect_usb_setup_set_configuration_request(packet_info *pinfo _U_, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* configuration value */ proto_tree_add_item(tree, hf_usb_bConfigurationValue, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 2; /* zero */ proto_tree_add_item(tree, hf_usb_index, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* zero */ proto_tree_add_item(tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; return offset; } static int dissect_usb_setup_set_configuration_response(packet_info *pinfo _U_, proto_tree *tree _U_, tvbuff_t *tvb _U_, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { return offset; } /* * These dissectors are used to dissect the setup part and the data * for URB_CONTROL_INPUT / SET FEATURE */ /* 9.4.9 */ static int dissect_usb_setup_set_feature_request(packet_info *pinfo _U_, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* feature selector */ proto_tree_add_item(tree, hf_usb_wFeatureSelector, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* zero/interface/endpoint or test selector */ /* XXX - check based on request type */ proto_tree_add_item(tree, hf_usb_wInterface, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* zero */ proto_tree_add_item(tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; return offset; } static int dissect_usb_setup_set_feature_response(packet_info *pinfo _U_, proto_tree *tree _U_, tvbuff_t *tvb _U_, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { return offset; } /* * These dissectors are used to dissect the setup part and the data * for URB_CONTROL_INPUT / SET INTERFACE */ /* 9.4.10 */ static int dissect_usb_setup_set_interface_request(packet_info *pinfo _U_, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* alternate setting */ proto_tree_add_item(tree, hf_usb_bAlternateSetting, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 2; /* interface */ proto_tree_add_item(tree, hf_usb_wInterface, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* zero */ proto_tree_add_item(tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; return offset; } static int dissect_usb_setup_set_interface_response(packet_info *pinfo _U_, proto_tree *tree _U_, tvbuff_t *tvb _U_, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { return offset; } /* * These dissectors are used to dissect the setup part and the data * for URB_CONTROL_INPUT / SYNCH FRAME */ /* 9.4.11 */ static int dissect_usb_setup_synch_frame_request(packet_info *pinfo _U_, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* zero */ proto_tree_add_item(tree, hf_usb_value, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* endpoint */ /* XXX */ proto_tree_add_item(tree, hf_usb_wInterface, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; /* two */ proto_tree_add_item(tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; return offset; } static int dissect_usb_setup_synch_frame_response(packet_info *pinfo _U_, proto_tree *tree _U_, tvbuff_t *tvb _U_, int offset, usb_trans_info_t *usb_trans_info _U_, usb_conv_info_t *usb_conv_info _U_, guint bus_id _U_, guint device_address _U_) { /* frame number */ proto_tree_add_item(tree, hf_usb_wFrameNumber, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; return offset; } typedef int (*usb_setup_dissector)(packet_info *pinfo, proto_tree *tree, tvbuff_t *tvb, int offset, usb_trans_info_t *usb_trans_info, usb_conv_info_t *usb_conv_info, guint bus_id, guint device_address); typedef struct _usb_setup_dissector_table_t { guint8 request; usb_setup_dissector dissector; } usb_setup_dissector_table_t; #define USB_SETUP_GET_STATUS 0 #define USB_SETUP_CLEAR_FEATURE 1 #define USB_SETUP_SET_FEATURE 3 #define USB_SETUP_SET_ADDRESS 5 #define USB_SETUP_GET_DESCRIPTOR 6 #define USB_SETUP_SET_DESCRIPTOR 7 #define USB_SETUP_GET_CONFIGURATION 8 #define USB_SETUP_SET_CONFIGURATION 9 #define USB_SETUP_GET_INTERFACE 10 #define USB_SETUP_SET_INTERFACE 11 #define USB_SETUP_SYNCH_FRAME 12 #define USB_SETUP_SET_SEL 48 #define USB_SETUP_SET_ISOCH_DELAY 49 static const usb_setup_dissector_table_t setup_request_dissectors[] = { {USB_SETUP_GET_STATUS, dissect_usb_setup_get_status_request}, {USB_SETUP_CLEAR_FEATURE, dissect_usb_setup_clear_feature_request}, {USB_SETUP_SET_FEATURE, dissect_usb_setup_set_feature_request}, {USB_SETUP_SET_ADDRESS, dissect_usb_setup_set_address_request}, {USB_SETUP_GET_DESCRIPTOR, dissect_usb_setup_get_descriptor_request}, {USB_SETUP_SET_CONFIGURATION, dissect_usb_setup_set_configuration_request}, {USB_SETUP_GET_INTERFACE, dissect_usb_setup_get_interface_request}, {USB_SETUP_SET_INTERFACE, dissect_usb_setup_set_interface_request}, {USB_SETUP_SYNCH_FRAME, dissect_usb_setup_synch_frame_request}, {0, NULL} }; static const usb_setup_dissector_table_t setup_response_dissectors[] = { {USB_SETUP_GET_STATUS, dissect_usb_setup_get_status_response}, {USB_SETUP_CLEAR_FEATURE, dissect_usb_setup_clear_feature_response}, {USB_SETUP_SET_FEATURE, dissect_usb_setup_set_feature_response}, {USB_SETUP_SET_ADDRESS, dissect_usb_setup_set_address_response}, {USB_SETUP_GET_DESCRIPTOR, dissect_usb_setup_get_descriptor_response}, {USB_SETUP_GET_CONFIGURATION, dissect_usb_setup_get_configuration_response}, {USB_SETUP_SET_CONFIGURATION, dissect_usb_setup_set_configuration_response}, {USB_SETUP_GET_INTERFACE, dissect_usb_setup_get_interface_response}, {USB_SETUP_SET_INTERFACE, dissect_usb_setup_set_interface_response}, {USB_SETUP_SYNCH_FRAME, dissect_usb_setup_synch_frame_response}, {0, NULL} }; static const value_string setup_request_names_vals[] = { {USB_SETUP_GET_STATUS, "GET STATUS"}, {USB_SETUP_CLEAR_FEATURE, "CLEAR FEATURE"}, {USB_SETUP_SET_FEATURE, "SET FEATURE"}, {USB_SETUP_SET_ADDRESS, "SET ADDRESS"}, {USB_SETUP_GET_DESCRIPTOR, "GET DESCRIPTOR"}, {USB_SETUP_SET_DESCRIPTOR, "SET DESCRIPTOR"}, {USB_SETUP_GET_CONFIGURATION, "GET CONFIGURATION"}, {USB_SETUP_SET_CONFIGURATION, "SET CONFIGURATION"}, {USB_SETUP_GET_INTERFACE, "GET INTERFACE"}, {USB_SETUP_SET_INTERFACE, "SET INTERFACE"}, {USB_SETUP_SYNCH_FRAME, "SYNCH FRAME"}, {USB_SETUP_SET_SEL, "SET SEL"}, {USB_SETUP_SET_ISOCH_DELAY, "SET ISOCH DELAY"}, {0, NULL} }; static value_string_ext setup_request_names_vals_ext = VALUE_STRING_EXT_INIT(setup_request_names_vals); static const true_false_string tfs_bmrequesttype_direction = { "Device-to-host", "Host-to-device" }; static const value_string bmrequesttype_type_vals[] = { {RQT_SETUP_TYPE_STANDARD, "Standard"}, {RQT_SETUP_TYPE_CLASS, "Class"}, {RQT_SETUP_TYPE_VENDOR, "Vendor"}, {0, NULL} }; static const value_string bmrequesttype_recipient_vals[] = { {RQT_SETUP_RECIPIENT_DEVICE, "Device" }, {RQT_SETUP_RECIPIENT_INTERFACE, "Interface" }, {RQT_SETUP_RECIPIENT_ENDPOINT, "Endpoint" }, {RQT_SETUP_RECIPIENT_OTHER, "Other" }, {0, NULL } }; static gint try_dissect_next_protocol(proto_tree *tree, proto_tree *parent, tvbuff_t *next_tvb, gint offset, packet_info *pinfo, usb_conv_info_t *usb_conv_info, gint type, gint type_2, guint8 urb_type, guint16 bus_id, guint8 device_address, device_product_data_t *device_product_data, device_protocol_data_t *device_protocol_data) { wmem_tree_key_t key[4]; guint32 k_frame_number; guint32 k_device_address; guint32 k_bus_id; /* try dissect by "usb.device" */ if (tvb_length(next_tvb) > 0 && !dissector_try_uint_new(device_to_dissector, (guint32) (bus_id << 8 | device_address), next_tvb, pinfo, parent, FALSE, usb_conv_info)) { k_frame_number = pinfo->fd->num; k_device_address = device_address; k_bus_id = bus_id; key[0].length = 1; key[0].key = &k_device_address; key[1].length = 1; key[1].key = &k_bus_id; key[2].length = 1; key[2].key = &k_frame_number; key[3].length = 0; key[3].key = NULL; /* try dissect by "usb.protocol" */ if (!device_protocol_data) device_protocol_data = (device_protocol_data_t *)wmem_tree_lookup32_array_le(device_to_protocol_table, key); if (device_protocol_data && device_protocol_data->bus_id == bus_id && device_protocol_data->device_address == device_address && dissector_try_uint_new(protocol_to_dissector, (guint32) device_protocol_data->protocol, next_tvb, pinfo, parent, FALSE, usb_conv_info)) { offset += tvb_length(next_tvb); } else { /* try dissect by "usb.product" */ if (!device_product_data) device_product_data = (device_product_data_t *)wmem_tree_lookup32_array_le(device_to_product_table, key); if (device_product_data && device_product_data->bus_id == bus_id && device_product_data->device_address == device_address && dissector_try_uint_new(product_to_dissector, (guint32) (device_product_data->vendor << 16 | device_product_data->product), next_tvb, pinfo, parent, FALSE, usb_conv_info)) { offset += tvb_length(next_tvb); } else { /* try dissect by "usb.[control | bulk | interrupt] "*/ heur_dissector_list_t heur_subdissector_list; dissector_table_t usb_dissector_table; switch(type) { case URB_BULK: heur_subdissector_list = heur_bulk_subdissector_list; usb_dissector_table = usb_bulk_dissector_table; break; case URB_INTERRUPT: heur_subdissector_list = heur_interrupt_subdissector_list; usb_dissector_table = usb_interrupt_dissector_table; break; case URB_CONTROL: { usb_trans_info_t *usb_trans_info = usb_conv_info->usb_trans_info; gboolean is_request = usb_conv_info->is_request; heur_subdissector_list = heur_control_subdissector_list; usb_dissector_table = usb_control_dissector_table; /* Make sure we have the proper conversation */ if (usb_trans_info && ((is_request && usb_conv_info->is_setup && type_2 == RQT_SETUP_TYPE_CLASS) || (!is_request && USB_TYPE(usb_trans_info->setup.requesttype) == RQT_SETUP_TYPE_CLASS))) { usb_tap_data_t *tap_data; proto_item *sub_item; if (USB_RECIPIENT(usb_trans_info->setup.requesttype) == RQT_SETUP_RECIPIENT_INTERFACE) { guint8 interface_num = usb_trans_info->setup.wIndex & 0xff; usb_conv_info = get_usb_iface_conv_info(pinfo, interface_num); usb_conv_info->usb_trans_info = usb_trans_info; } else if (USB_RECIPIENT(usb_trans_info->setup.requesttype) == RQT_SETUP_RECIPIENT_ENDPOINT) { static address endpoint_addr; gint endpoint; static usb_address_t src_addr, dst_addr; /* has to be static due to SET_ADDRESS */ guint32 src_endpoint, dst_endpoint; conversation_t *conversation; endpoint = usb_trans_info->setup.wIndex & 0x0f; if (is_request) { dst_addr.endpoint = dst_endpoint = GUINT32_TO_LE(endpoint); SET_ADDRESS(&endpoint_addr, AT_USB, USB_ADDR_LEN, (char *)&dst_addr); conversation = get_usb_conversation(pinfo, &pinfo->src, &endpoint_addr, pinfo->srcport, dst_endpoint); } else { src_addr.endpoint = src_endpoint = GUINT32_TO_LE(endpoint); SET_ADDRESS(&endpoint_addr, AT_USB, USB_ADDR_LEN, (char *)&src_addr); conversation = get_usb_conversation(pinfo, &endpoint_addr, &pinfo->dst, src_endpoint, pinfo->destport); } usb_conv_info = get_usb_conv_info(conversation); usb_conv_info->usb_trans_info = usb_trans_info; } tap_data = wmem_new(wmem_packet_scope(), usb_tap_data_t); tap_data->urb_type = urb_type; tap_data->transfer_type = (guint8)type; tap_data->conv_info = usb_conv_info; tap_data->trans_info = usb_trans_info; tap_queue_packet(usb_tap, pinfo, tap_data); sub_item = proto_tree_add_uint(tree, hf_usb_bInterfaceClass, next_tvb, 0, 0, usb_conv_info->interfaceClass); PROTO_ITEM_SET_GENERATED(sub_item); } } break; default: heur_subdissector_list = NULL; usb_dissector_table = NULL; } if (try_heuristics && dissector_try_heuristic(heur_subdissector_list, next_tvb, pinfo, parent, usb_conv_info)) { offset += tvb_length(next_tvb); } else if (usb_dissector_table && dissector_try_uint_new(usb_dissector_table, usb_conv_info->interfaceClass, next_tvb, pinfo, parent, TRUE, usb_conv_info)) { offset += tvb_length(next_tvb); } } } } else { offset += tvb_length(next_tvb); } return offset; } static int dissect_usb_bmrequesttype(proto_tree *parent_tree, tvbuff_t *tvb, int offset, int *type) { proto_item *item = NULL; proto_tree *tree = NULL; if (parent_tree) { item = proto_tree_add_item(parent_tree, hf_usb_bmRequestType, tvb, offset, 1, ENC_LITTLE_ENDIAN); tree = proto_item_add_subtree(item, ett_usb_setup_bmrequesttype); } *type = USB_TYPE(tvb_get_guint8(tvb, offset)); proto_tree_add_item(tree, hf_usb_bmRequestType_direction, tvb, offset, 1, ENC_LITTLE_ENDIAN); proto_tree_add_item(tree, hf_usb_bmRequestType_type, tvb, offset, 1, ENC_LITTLE_ENDIAN); proto_tree_add_item(tree, hf_usb_bmRequestType_recipient, tvb, offset, 1, ENC_LITTLE_ENDIAN); return ++offset; } /* Adds the Linux USB pseudo header fields to the tree. */ static void dissect_linux_usb_pseudo_header(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, guint *bus_id, guint *device_address) { guint8 transfer_type; guint8 endpoint_number; guint8 transfer_type_and_direction; guint8 type; guint8 flag[2]; proto_tree_add_item(tree, hf_usb_urb_id, tvb, 0, 8, ENC_HOST_ENDIAN); /* show the event type of this URB as string and as a character */ type = tvb_get_guint8(tvb, 8); proto_tree_add_uint_format_value(tree, hf_usb_urb_type, tvb, 8, 1, type, "%s ('%c')", val_to_str(type, usb_urb_type_vals, "Unknown %d"), g_ascii_isprint(type) ? type : '.'); proto_tree_add_item(tree, hf_usb_transfer_type, tvb, 9, 1, ENC_NA); transfer_type = tvb_get_guint8(tvb, 9); endpoint_number = tvb_get_guint8(tvb, 10); transfer_type_and_direction = (transfer_type & 0x7F) | (endpoint_number & 0x80); col_append_str(pinfo->cinfo, COL_INFO, val_to_str(transfer_type_and_direction, usb_transfer_type_and_direction_vals, "Unknown type %x")); proto_tree_add_bitmask(tree, tvb, 10, hf_usb_endpoint_number, ett_usb_endpoint, usb_endpoint_fields, ENC_NA); proto_tree_add_item(tree, hf_usb_device_address, tvb, 11, 1, ENC_NA); *device_address = tvb_get_guint8(tvb, 11); proto_tree_add_item(tree, hf_usb_bus_id, tvb, 12, 2, ENC_HOST_ENDIAN); tvb_memcpy(tvb, bus_id, 12, 2); /* Right after the pseudo header we always have * sizeof(struct usb_device_setup_hdr) bytes. The content of these * bytes only have meaning in case setup_flag == 0. */ flag[0] = tvb_get_guint8(tvb, 14); flag[1] = '\0'; if (flag[0] == 0) { proto_tree_add_string(tree, hf_usb_setup_flag, tvb, 14, 1, "relevant (0)"); } else { proto_tree_add_string_format_value(tree, hf_usb_setup_flag, tvb, 14, 1, flag, "not relevant ('%c')", g_ascii_isprint(flag[0]) ? flag[0]: '.'); } flag[0] = tvb_get_guint8(tvb, 15); flag[1] = '\0'; if (flag[0] == 0) { proto_tree_add_string(tree, hf_usb_data_flag, tvb, 15, 1, "present (0)"); } else { proto_tree_add_string_format_value(tree, hf_usb_data_flag, tvb, 15, 1, flag, "not present ('%c')", g_ascii_isprint(flag[0]) ? flag[0] : '.'); } proto_tree_add_item(tree, hf_usb_urb_ts_sec, tvb, 16, 8, ENC_HOST_ENDIAN); proto_tree_add_item(tree, hf_usb_urb_ts_usec, tvb, 24, 4, ENC_HOST_ENDIAN); proto_tree_add_item(tree, hf_usb_urb_status, tvb, 28, 4, ENC_HOST_ENDIAN); proto_tree_add_item(tree, hf_usb_urb_len, tvb, 32, 4, ENC_HOST_ENDIAN); proto_tree_add_item(tree, hf_usb_urb_data_len, tvb, 36, 4, ENC_HOST_ENDIAN); } static int dissect_linux_usb_pseudo_header_ext(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree *tree) { proto_tree_add_item(tree, hf_usb_urb_interval, tvb, offset, 4, ENC_HOST_ENDIAN); offset += 4; proto_tree_add_item(tree, hf_usb_urb_start_frame, tvb, offset, 4, ENC_HOST_ENDIAN); offset += 4; proto_tree_add_item(tree, hf_usb_urb_copy_of_transfer_flags, tvb, offset, 4, ENC_HOST_ENDIAN); offset += 4; proto_tree_add_item(tree, hf_usb_iso_numdesc, tvb, offset, 4, ENC_HOST_ENDIAN); offset += 4; return offset; } /* Adds the win32 USBPcap pseudo header fields to the tree. */ static void dissect_win32_usb_pseudo_header(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, guint *bus_id, guint *device_address) { guint8 transfer_type; guint8 endpoint_number; guint8 transfer_type_and_direction; proto_tree_add_item(tree, hf_usb_win32_header_len, tvb, 0, 2, ENC_LITTLE_ENDIAN); proto_tree_add_item(tree, hf_usb_irp_id, tvb, 2, 8, ENC_LITTLE_ENDIAN); proto_tree_add_item(tree, hf_usb_usbd_status, tvb, 10, 4, ENC_LITTLE_ENDIAN); proto_tree_add_item(tree, hf_usb_function, tvb, 14, 2, ENC_LITTLE_ENDIAN); proto_tree_add_bitmask(tree, tvb, 16, hf_usb_info, ett_usb_usbpcap_info, usb_usbpcap_info_fields, ENC_LITTLE_ENDIAN); proto_tree_add_item(tree, hf_usb_bus_id, tvb, 17, 2, ENC_LITTLE_ENDIAN); *bus_id = tvb_get_letohs(tvb, 17); proto_tree_add_item(tree, hf_usb_win32_device_address, tvb, 19, 2, ENC_LITTLE_ENDIAN); *device_address = tvb_get_letohs(tvb, 19); transfer_type = tvb_get_guint8(tvb, 22); endpoint_number = tvb_get_guint8(tvb, 21); transfer_type_and_direction = (transfer_type & 0x7F) | (endpoint_number & 0x80); col_append_str(pinfo->cinfo, COL_INFO, val_to_str(transfer_type_and_direction, usb_transfer_type_and_direction_vals, "Unknown type %x")); proto_tree_add_bitmask(tree, tvb, 21, hf_usb_endpoint_number, ett_usb_endpoint, usb_endpoint_fields, ENC_LITTLE_ENDIAN); proto_tree_add_item(tree, hf_usb_transfer_type, tvb, 22, 1, ENC_LITTLE_ENDIAN); proto_tree_add_item(tree, hf_usb_win32_data_len, tvb, 23, 4, ENC_LITTLE_ENDIAN); /* Handle transfer specific data */ switch (transfer_type) { case URB_ISOCHRONOUS: /* dissection in handled in dissect_usb_common() */ break; case URB_INTERRUPT: break; case URB_CONTROL: proto_tree_add_item(tree, hf_usb_control_stage, tvb, 27, 1, ENC_LITTLE_ENDIAN); break; case URB_BULK: break; } } static void dissect_usb_common(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent, guint8 header_info) { gint offset = 0; gint new_offset; int type, endpoint, endpoint_with_dir; gint type_2 = 0; guint8 urb_type, usbpcap_control_stage = 0; guint8 setup_flag; guint16 hdr_len; guint32 win32_data_len = 0; proto_tree *tree = NULL; guint32 tmp_addr; static usb_address_t src_addr, dst_addr; /* has to be static due to SET_ADDRESS */ guint32 src_endpoint, dst_endpoint; gboolean is_request; usb_conv_info_t *usb_conv_info; usb_trans_info_t *usb_trans_info = NULL; conversation_t *conversation; usb_tap_data_t *tap_data; guint bus_id = 0; guint device_address = 0; tvbuff_t *next_tvb = NULL; tvbuff_t *setup_tvb = NULL; device_product_data_t *device_product_data = NULL; device_protocol_data_t *device_protocol_data = NULL; wmem_tree_key_t key[4]; guint32 k_frame_number; guint32 k_device_address; guint32 k_bus_id; col_set_str(pinfo->cinfo, COL_PROTOCOL, "USB"); if (header_info & USB_HEADER_IS_LINUX) { /* add usb hdr*/ if (parent) { proto_item *ti; ti = proto_tree_add_protocol_format(parent, proto_usb, tvb, 0, (header_info & USB_HEADER_IS_64_BYTES) ? 64 : 48, "USB URB"); tree = proto_item_add_subtree(ti, usb_hdr); } dissect_linux_usb_pseudo_header(tvb, pinfo, tree, &bus_id, &device_address); urb_type = tvb_get_guint8(tvb, 8); is_request = (urb_type == URB_SUBMIT) ? TRUE : FALSE; type = tvb_get_guint8(tvb, 9); endpoint_with_dir = tvb_get_guint8(tvb, 10); endpoint = endpoint_with_dir & (~URB_TRANSFER_IN); tmp_addr = tvb_get_guint8(tvb, 11); setup_flag = tvb_get_guint8(tvb, 14); offset += 40; /* skip first part of the pseudo-header */ } else if (header_info & USB_HEADER_IS_USBPCAP) { guint8 tmp_val8; tvb_memcpy(tvb, (guint8 *)&hdr_len, 0, 2); /* add usb hdr */ if (parent) { proto_item *ti; ti = proto_tree_add_protocol_format(parent, proto_usb, tvb, 0, hdr_len, "USB URB"); tree = proto_item_add_subtree(ti, usb_hdr); } dissect_win32_usb_pseudo_header(tvb, pinfo, tree, &bus_id, &device_address); hdr_len = tvb_get_letohs(tvb, 0); tmp_val8 = tvb_get_guint8(tvb, 16); /* TODO: Handle errors */ if (tmp_val8 & 0x01) { urb_type = URB_COMPLETE; } else { urb_type = URB_SUBMIT; } is_request = (urb_type == URB_SUBMIT) ? TRUE : FALSE; type = tvb_get_guint8(tvb, 22); endpoint_with_dir = tvb_get_guint8(tvb, 21); endpoint = endpoint_with_dir & (~URB_TRANSFER_IN); tmp_addr = device_address; win32_data_len = tvb_get_letohl(tvb, 23); usbpcap_control_stage = tvb_get_guint8(tvb, 27); if (usbpcap_control_stage == USB_CONTROL_STAGE_SETUP) { setup_flag = 0; } else { setup_flag = 0xFF; } if (type == URB_ISOCHRONOUS) { offset += 27; /* Skip the part of pseudo-header already dissected */ } else { offset += hdr_len; /* Skip the pseudo-header */ } } else { /* Unknown pseudo-header type */ return; } /* Set up addresses and ports. */ if (is_request) { src_addr.device = 0xffffffff; src_addr.endpoint = src_endpoint = NO_ENDPOINT; dst_addr.device = GUINT32_TO_LE(tmp_addr); dst_addr.endpoint = dst_endpoint = GUINT32_TO_LE(endpoint); } else { src_addr.device = GUINT32_TO_LE(tmp_addr); src_addr.endpoint = src_endpoint = GUINT32_TO_LE(endpoint); dst_addr.device = 0xffffffff; dst_addr.endpoint = dst_endpoint = NO_ENDPOINT; } SET_ADDRESS(&pinfo->net_src, AT_USB, USB_ADDR_LEN, (char *)&src_addr); SET_ADDRESS(&pinfo->src, AT_USB, USB_ADDR_LEN, (char *)&src_addr); SET_ADDRESS(&pinfo->net_dst, AT_USB, USB_ADDR_LEN, (char *)&dst_addr); SET_ADDRESS(&pinfo->dst, AT_USB, USB_ADDR_LEN, (char *)&dst_addr); pinfo->ptype = PT_USB; pinfo->srcport = src_endpoint; pinfo->destport = dst_endpoint; conversation = get_usb_conversation(pinfo, &pinfo->src, &pinfo->dst, pinfo->srcport, pinfo->destport); usb_conv_info = get_usb_conv_info(conversation); usb_conv_info->bus_id = bus_id; usb_conv_info->device_address = device_address; usb_conv_info->endpoint = endpoint; usb_conv_info->transfer_type = type; usb_conv_info->is_request = is_request; usb_conv_info->is_setup = (setup_flag == 0x00); usb_conv_info->setup_requesttype = 0; if (endpoint_with_dir & URB_TRANSFER_IN) { usb_conv_info->direction = P2P_DIR_RECV; } else { usb_conv_info->direction = P2P_DIR_SENT; } /* request/response matching so we can keep track of transaction specific * data. */ if (is_request) { /* this is a request */ usb_trans_info = (usb_trans_info_t *)wmem_tree_lookup32(usb_conv_info->transactions, pinfo->fd->num); if (!usb_trans_info) { usb_trans_info = wmem_new0(wmem_file_scope(), usb_trans_info_t); usb_trans_info->request_in = pinfo->fd->num; usb_trans_info->req_time = pinfo->fd->abs_ts; usb_trans_info->header_info = header_info; wmem_tree_insert32(usb_conv_info->transactions, pinfo->fd->num, usb_trans_info); } usb_conv_info->usb_trans_info = usb_trans_info; if (usb_trans_info->response_in) { proto_item *ti; ti = proto_tree_add_uint(tree, hf_usb_response_in, tvb, 0, 0, usb_trans_info->response_in); PROTO_ITEM_SET_GENERATED(ti); } } else { /* this is a response */ if (pinfo->fd->flags.visited) { usb_trans_info = (usb_trans_info_t *)wmem_tree_lookup32(usb_conv_info->transactions, pinfo->fd->num); } else { usb_trans_info = (usb_trans_info_t *)wmem_tree_lookup32_le(usb_conv_info->transactions, pinfo->fd->num); if (usb_trans_info) { usb_trans_info->response_in = pinfo->fd->num; wmem_tree_insert32(usb_conv_info->transactions, pinfo->fd->num, usb_trans_info); } } usb_conv_info->usb_trans_info = usb_trans_info; if (usb_trans_info && usb_trans_info->request_in) { proto_item *ti; nstime_t t, deltat; ti = proto_tree_add_uint(tree, hf_usb_request_in, tvb, 0, 0, usb_trans_info->request_in); PROTO_ITEM_SET_GENERATED(ti); t = pinfo->fd->abs_ts; nstime_delta(&deltat, &t, &usb_trans_info->req_time); ti = proto_tree_add_time(tree, hf_usb_time, tvb, 0, 0, &deltat); PROTO_ITEM_SET_GENERATED(ti); } } tap_data = wmem_new(wmem_packet_scope(), usb_tap_data_t); tap_data->urb_type = urb_type; tap_data->transfer_type = (guint8)type; tap_data->conv_info = usb_conv_info; tap_data->trans_info = usb_trans_info; if (type != URB_CONTROL) { tap_queue_packet(usb_tap, pinfo, tap_data); } switch(type) { case URB_BULK: case URB_INTERRUPT: { proto_item *item; item = proto_tree_add_uint(tree, hf_usb_bInterfaceClass, tvb, 0, 0, usb_conv_info->interfaceClass); PROTO_ITEM_SET_GENERATED(item); if (header_info & USB_HEADER_IS_LINUX) { /* Skip setup/isochronous header - it's not applicable */ proto_tree_add_item(tree, hf_usb_urb_unused_setup_header, tvb, offset, 8, ENC_NA); offset += 8; /* * If this has a 64-byte header, process the extra 16 bytes of * pseudo-header information. */ if (header_info & USB_HEADER_IS_64_BYTES) { offset = dissect_linux_usb_pseudo_header_ext(tvb, offset, pinfo, tree); } } } break; case URB_CONTROL: { const usb_setup_dissector_table_t *tmp; usb_setup_dissector dissector; proto_item *ti = NULL; proto_tree *setup_tree = NULL; if (is_request) { if (setup_flag == 0) { /* this is a request */ /* Dissect the setup header - it's applicable */ ti = proto_tree_add_protocol_format(parent, proto_usb, tvb, offset, 8, "URB setup"); setup_tree = proto_item_add_subtree(ti, usb_setup_hdr); usb_trans_info->setup.requesttype = tvb_get_guint8(tvb, offset); usb_conv_info->setup_requesttype = tvb_get_guint8(tvb, offset); offset = dissect_usb_bmrequesttype(setup_tree, tvb, offset, &type_2); /* read the request code and spawn off to a class specific * dissector if found */ usb_trans_info->setup.request = tvb_get_guint8(tvb, offset); usb_trans_info->setup.wValue = tvb_get_letohs(tvb, offset+1); usb_trans_info->setup.wIndex = tvb_get_letohs(tvb, offset+3); usb_trans_info->setup.wLength = tvb_get_letohs(tvb, offset+5); if (type_2 != RQT_SETUP_TYPE_CLASS) { tap_queue_packet(usb_tap, pinfo, tap_data); } switch (type_2) { case RQT_SETUP_TYPE_STANDARD: /* * This is a standard request which is managed by this * dissector */ proto_tree_add_item(setup_tree, hf_usb_request, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; col_add_fstr(pinfo->cinfo, COL_INFO, "%s Request", val_to_str_ext(usb_trans_info->setup.request, &setup_request_names_vals_ext, "Unknown type %x")); dissector = NULL; for(tmp = setup_request_dissectors;tmp->dissector;tmp++) { if (tmp->request == usb_trans_info->setup.request) { dissector = tmp->dissector; break; } } if (dissector) { offset = dissector(pinfo, setup_tree, tvb, offset, usb_trans_info, usb_conv_info, bus_id, device_address); } else { proto_tree_add_item(setup_tree, hf_usb_value, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; proto_tree_add_item(setup_tree, hf_usb_index, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; proto_tree_add_item(setup_tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; } break; default: /* no dissector found - display generic fields */ proto_tree_add_item(setup_tree, hf_usb_request_unknown_class, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; proto_tree_add_item(setup_tree, hf_usb_value, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; proto_tree_add_item(setup_tree, hf_usb_index, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; proto_tree_add_item(setup_tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; if (header_info & (USB_HEADER_IS_LINUX | USB_HEADER_IS_64_BYTES)) { setup_tvb = tvb_new_composite(); next_tvb = tvb_new_subset(tvb, offset - 7, 7, 7); tvb_composite_append(setup_tvb, next_tvb); } } } else { if (header_info & USB_HEADER_IS_LINUX) { /* Skip setup/isochronous header - it's not applicable */ proto_tree_add_item(tree, hf_usb_urb_unused_setup_header, tvb, offset, 8, ENC_NA); offset += 8; } } /* * If this has a 64-byte header, process the extra 16 bytes of * pseudo-header information. */ if ((header_info & USB_HEADER_IS_LINUX) && (header_info & USB_HEADER_IS_64_BYTES)) { offset = dissect_linux_usb_pseudo_header_ext(tvb, offset, pinfo, tree); } if (type_2 != RQT_SETUP_TYPE_STANDARD) { if (setup_tvb && tvb_reported_length_remaining(tvb, offset) != 0) { next_tvb = tvb_new_subset_remaining(tvb, offset); tvb_composite_append(setup_tvb, next_tvb); tvb_composite_finalize(setup_tvb); next_tvb = tvb_new_child_real_data(tvb, (const guint8 *) tvb_memdup(pinfo->pool, setup_tvb, 0, tvb_length(setup_tvb)), tvb_length(setup_tvb), tvb_length(setup_tvb)); add_new_data_source(pinfo, next_tvb, "Linux USB Control"); proto_tree_add_item(setup_tree, hf_usb_data_fragment, tvb, offset, -1, ENC_NA); } else if (!setup_tvb) { next_tvb = tvb_new_subset_remaining(tvb, offset - 7); } offset = try_dissect_next_protocol(tree, parent, next_tvb, offset, pinfo, usb_conv_info, type, type_2, urb_type, bus_id, device_address, NULL, NULL); } } else { /* this is a response */ if (header_info & USB_HEADER_IS_LINUX) { /* Skip setup header - it's never applicable for responses */ proto_tree_add_item(tree, hf_usb_urb_unused_setup_header, tvb, offset, 8, ENC_NA); offset += 8; } /* * If this has a 64-byte header, process the extra 16 bytes of * pseudo-header information. */ if ((header_info & USB_HEADER_IS_LINUX) && (header_info & USB_HEADER_IS_64_BYTES)) { offset = dissect_linux_usb_pseudo_header_ext(tvb, offset, pinfo, tree); } if (usb_trans_info) { /* Check if this is status stage */ if ((header_info & USB_HEADER_IS_USBPCAP) && (usbpcap_control_stage == USB_CONTROL_STAGE_STATUS)) { col_add_fstr(pinfo->cinfo, COL_INFO, "%s Status", val_to_str_ext(usb_conv_info->usb_trans_info->setup.request, &setup_request_names_vals_ext, "Unknown type %x")); /* There is no data to dissect */ return; } type_2 = USB_TYPE(usb_trans_info->setup.requesttype); switch (type_2) { case RQT_SETUP_TYPE_STANDARD: /* * This is a standard response which is managed by this * dissector */ col_add_fstr(pinfo->cinfo, COL_INFO, "%s Response", val_to_str_ext(usb_conv_info->usb_trans_info->setup.request, &setup_request_names_vals_ext, "Unknown type %x")); dissector = NULL; for(tmp = setup_response_dissectors;tmp->dissector;tmp++) { if (tmp->request == usb_conv_info->usb_trans_info->setup.request) { dissector = tmp->dissector; break; } } if (dissector) { offset = dissector(pinfo, parent, tvb, offset, usb_conv_info->usb_trans_info, usb_conv_info, bus_id, device_address); } else { if (tvb_reported_length_remaining(tvb, offset) != 0) { proto_tree_add_text(parent, tvb, offset, -1, "CONTROL response data"); offset += tvb_length_remaining(tvb, offset); } } break; default: /* Try to find a non-standard specific dissector */ if (tvb_reported_length_remaining(tvb, offset) != 0) { next_tvb = tvb_new_subset_remaining(tvb, offset); new_offset = try_dissect_next_protocol(tree, parent, next_tvb, offset, pinfo, usb_conv_info, type, type_2, urb_type, bus_id, device_address, NULL, NULL); if (new_offset > offset) offset = new_offset; } if (tvb_reported_length_remaining(tvb, offset) != 0) { proto_tree_add_text(parent, tvb, offset, -1, "CONTROL response data"); offset += tvb_length_remaining(tvb, offset); } break; } } else { /* no matching request available */ if (tvb_reported_length_remaining(tvb, offset) != 0) { proto_tree_add_text(parent, tvb, offset, -1, "CONTROL response data"); offset += tvb_length_remaining(tvb, offset); } } } } break; case URB_ISOCHRONOUS: if (header_info & USB_HEADER_IS_LINUX) { guint32 iso_numdesc = 0; proto_item *tii; tii = proto_tree_add_uint(tree, hf_usb_bInterfaceClass, tvb, offset, 0, usb_conv_info->interfaceClass); PROTO_ITEM_SET_GENERATED(tii); /* All fields which belong to Linux usbmon headers are in host-endian * byte order. The fields coming from the USB communication are in little * endian format (see usb_20.pdf, chapter 8.1 Byte/Bit ordering). * * When a capture file is transfered to a host with different endianness * than packet was captured then the necessary swapping happens in * wiretap/pcap-common.c, pcap_process_linux_usb_pseudoheader(). */ if (setup_flag == 0) { proto_item *ti; proto_tree *setup_tree; /* Dissect the setup header - it's applicable */ ti = proto_tree_add_protocol_format(parent, proto_usb, tvb, offset, 8, "URB setup"); setup_tree = proto_item_add_subtree(ti, usb_setup_hdr); offset = dissect_usb_bmrequesttype(setup_tree, tvb, offset, &type_2); proto_tree_add_item(setup_tree, hf_usb_request, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; proto_tree_add_item(setup_tree, hf_usb_value, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; proto_tree_add_item(setup_tree, hf_usb_index, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; proto_tree_add_item(setup_tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; } else { /* Process ISO related fields (usbmon_packet.iso). The fields are * in host endian byte order so use tvb_memcopy() and * proto_tree_add_uint() pair. */ guint32 val32; tvb_memcpy(tvb, (guint8 *)&val32, offset, 4); proto_tree_add_uint(tree, hf_usb_iso_error_count, tvb, offset, 4, val32); offset += 4; tvb_memcpy(tvb, (guint8 *)&iso_numdesc, offset, 4); proto_tree_add_uint(tree, hf_usb_iso_numdesc, tvb, offset, 4, iso_numdesc); offset += 4; } /* * If this has a 64-byte header, process the extra 16 bytes of * pseudo-header information. */ if (header_info & USB_HEADER_IS_64_BYTES) offset = dissect_linux_usb_pseudo_header_ext(tvb, offset, pinfo, tree); if (setup_flag != 0) { proto_tree *urb_tree; guint32 i; unsigned int data_base; guint32 iso_status; guint32 iso_off; guint32 iso_len; guint32 iso_pad; data_base = offset + iso_numdesc * 16; urb_tree = tree; for (i = 0; i != iso_numdesc; i++) { /* Fetch ISO descriptor fields stored in host * endian byte order. */ tvb_memcpy(tvb, (guint8 *)&iso_status, offset, 4); tvb_memcpy(tvb, (guint8 *)&iso_off, offset+4, 4); tvb_memcpy(tvb, (guint8 *)&iso_len, offset+8, 4); if (parent) { proto_item *ti; if (iso_len > 0) { ti = proto_tree_add_protocol_format(urb_tree, proto_usb, tvb, offset, 16, "USB isodesc %u [%s] (%u bytes)", i, val_to_str_ext(iso_status, &usb_urb_status_vals_ext, "Error %d"), iso_len); } else { ti = proto_tree_add_protocol_format(urb_tree, proto_usb, tvb, offset, 16, "USB isodesc %u [%s]", i, val_to_str_ext(iso_status, &usb_urb_status_vals_ext, "Error %d")); } tree = proto_item_add_subtree(ti, usb_isodesc); } proto_tree_add_int(tree, hf_usb_iso_status, tvb, offset, 4, iso_status); offset += 4; proto_tree_add_uint(tree, hf_usb_iso_off, tvb, offset, 4, iso_off); offset += 4; proto_tree_add_uint(tree, hf_usb_iso_len, tvb, offset, 4, iso_len); offset += 4; /* When the ISO status is OK and there is ISO data and this ISO data is * fully captured then show this data. */ if (!iso_status && iso_len && data_base + iso_off + iso_len <= tvb_length(tvb)) proto_tree_add_item(tree, hf_usb_iso_data, tvb, data_base + iso_off, iso_len, ENC_NA); tvb_memcpy(tvb, (guint8 *)&iso_pad, offset, 4); proto_tree_add_uint(tree, hf_usb_iso_pad, tvb, offset, 4, iso_pad); offset += 4; } } } else if (header_info & USB_HEADER_IS_USBPCAP) { guint32 num_packets; guint32 i; guint32 data_start_offset; proto_tree *urb_tree; /* 27 bytes of header were dissected in dissect_win32_usb_pseudo_header() */ data_start_offset = offset - 27 + hdr_len; urb_tree = parent; proto_tree_add_item(tree, hf_usb_win32_iso_start_frame, tvb, offset, 4, ENC_LITTLE_ENDIAN); offset += 4; num_packets = tvb_get_letohl(tvb, offset); proto_tree_add_item(tree, hf_usb_win32_iso_num_packets, tvb, offset, 4, ENC_LITTLE_ENDIAN); offset += 4; proto_tree_add_item(tree, hf_usb_win32_iso_error_count, tvb, offset, 4, ENC_LITTLE_ENDIAN); offset += 4; for (i = 0; i < num_packets; i++) { guint32 this_offset; guint32 next_offset; guint32 iso_len; proto_item *ti; if (parent) { ti = proto_tree_add_protocol_format(urb_tree, proto_usb, tvb, offset, 12, "USB isochronous packet"); tree = proto_item_add_subtree(ti, usb_win32_iso_packet); } this_offset = tvb_get_letohl(tvb, offset); if (num_packets - i == 1) { /* this is the last packet */ next_offset = win32_data_len; } else { /* there is next packet */ next_offset = tvb_get_letohl(tvb, offset + 12); } if (next_offset > this_offset) { iso_len = next_offset - this_offset; } else { iso_len = 0; } /* If this packet does not contain isochrounous data, do not try to display it */ if (!((is_request && !(endpoint_with_dir & URB_TRANSFER_IN)) || (!is_request && (endpoint_with_dir & URB_TRANSFER_IN)))) { iso_len = 0; } proto_tree_add_item(tree, hf_usb_win32_iso_offset, tvb, offset, 4, ENC_LITTLE_ENDIAN); offset += 4; ti = proto_tree_add_item(tree, hf_usb_win32_iso_length, tvb, offset, 4, ENC_LITTLE_ENDIAN); if (!(endpoint_with_dir & URB_TRANSFER_IN)) { /* Isochronous OUT transfer */ proto_item_append_text(ti, " (not used)"); } else { /* Isochronous IN transfer. * Length field is being set by host controller. */ if (is_request) { /* Length was not yet set */ proto_item_append_text(ti, " (irrelevant)"); } else { /* Length was set and (should be) valid */ proto_item_append_text(ti, " (relevant)"); iso_len = tvb_get_letohl(tvb, offset); } } offset += 4; ti = proto_tree_add_item(tree, hf_usb_win32_iso_status, tvb, offset, 4, ENC_LITTLE_ENDIAN); if (urb_type == URB_SUBMIT) { proto_item_append_text(ti, " (irrelevant)"); } else { proto_item_append_text(ti, " (relevant)"); } offset += 4; if (iso_len && data_start_offset + this_offset + iso_len <= tvb_length(tvb)) proto_tree_add_item(tree, hf_usb_iso_data, tvb, (gint)(data_start_offset + this_offset), (gint)iso_len, ENC_NA); } if ((is_request && !(endpoint_with_dir & URB_TRANSFER_IN)) || (!is_request && (endpoint_with_dir & URB_TRANSFER_IN))) { /* We have dissected all the isochronous data */ offset += win32_data_len; } } break; default: /* dont know */ if (setup_flag == 0) { proto_item *ti; proto_tree *setup_tree; /* Dissect the setup header - it's applicable */ ti = proto_tree_add_protocol_format(parent, proto_usb, tvb, offset, 8, "URB setup"); setup_tree = proto_item_add_subtree(ti, usb_setup_hdr); offset = dissect_usb_bmrequesttype(setup_tree, tvb, offset, &type_2); proto_tree_add_item(setup_tree, hf_usb_request, tvb, offset, 1, ENC_LITTLE_ENDIAN); offset += 1; proto_tree_add_item(setup_tree, hf_usb_value, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; proto_tree_add_item(setup_tree, hf_usb_index, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; proto_tree_add_item(setup_tree, hf_usb_length, tvb, offset, 2, ENC_LITTLE_ENDIAN); offset += 2; } else { if (header_info & USB_HEADER_IS_LINUX) { /* Skip setup/isochronous header - it's not applicable */ proto_tree_add_item(tree, hf_usb_urb_unused_setup_header, tvb, offset, 8, ENC_NA); offset += 8; } } /* * If this has a 64-byte header, process the extra 16 bytes of * pseudo-header information. */ if ((header_info & USB_HEADER_IS_LINUX) && (header_info & USB_HEADER_IS_64_BYTES)) { offset = dissect_linux_usb_pseudo_header_ext(tvb, offset, pinfo, tree); } break; } k_frame_number = pinfo->fd->num; k_device_address = device_address; k_bus_id = bus_id; key[0].length = 1; key[0].key = &k_device_address; key[1].length = 1; key[1].key = &k_bus_id; key[2].length = 1; key[2].key = &k_frame_number; key[3].length = 0; key[3].key = NULL; device_product_data = (device_product_data_t *) wmem_tree_lookup32_array_le(device_to_product_table, key); if (device_product_data && device_product_data->bus_id == bus_id && device_product_data->device_address == device_address) { p_add_proto_data(pinfo->pool, pinfo, proto_usb, USB_VENDOR_ID, GUINT_TO_POINTER((guint)device_product_data->vendor)); p_add_proto_data(pinfo->pool, pinfo, proto_usb, USB_PRODUCT_ID, GUINT_TO_POINTER((guint)device_product_data->product)); } else { device_product_data = NULL; } device_protocol_data = (device_protocol_data_t *) wmem_tree_lookup32_array_le(device_to_protocol_table, key); if (device_protocol_data && device_protocol_data->bus_id == bus_id && device_protocol_data->device_address == device_address) { p_add_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_CLASS, GUINT_TO_POINTER(device_protocol_data->protocol >> 16)); p_add_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_SUBCLASS, GUINT_TO_POINTER((device_protocol_data->protocol >> 8) & 0xFF)); p_add_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_PROTOCOL, GUINT_TO_POINTER(device_protocol_data->protocol & 0xFF)); usb_conv_info->device_protocol = device_protocol_data->protocol; } else { device_protocol_data = NULL; } p_add_proto_data(pinfo->pool, pinfo, proto_usb, USB_BUS_ID, GUINT_TO_POINTER(bus_id)); p_add_proto_data(pinfo->pool, pinfo, proto_usb, USB_DEVICE_ADDRESS, GUINT_TO_POINTER(device_address)); if (tvb_length_remaining(tvb, offset) > 0) { next_tvb = tvb_new_subset_remaining(tvb, offset); offset = try_dissect_next_protocol(tree, parent, next_tvb, offset, pinfo, usb_conv_info, type, type_2, urb_type, bus_id, device_address, device_product_data, device_protocol_data); } if (tvb_length_remaining(tvb, offset) > 0) { /* There is still leftover capture data to add (padding?) */ proto_tree_add_item(parent, hf_usb_capdata, tvb, offset, -1, ENC_NA); } } static void dissect_linux_usb(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent) { dissect_usb_common(tvb, pinfo, parent, USB_HEADER_IS_LINUX); } static void dissect_linux_usb_mmapped(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent) { dissect_usb_common(tvb, pinfo, parent, USB_HEADER_IS_LINUX | USB_HEADER_IS_64_BYTES); } static void dissect_win32_usb(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent) { dissect_usb_common(tvb, pinfo, parent, USB_HEADER_IS_USBPCAP); } void proto_register_usb(void) { module_t *usb_module; static hf_register_info hf[] = { /* USB packet pseudoheader members */ { &hf_usb_urb_id, { "URB id", "usb.urb_id", FT_UINT64, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_urb_type, { "URB type", "usb.urb_type", FT_UINT8, BASE_DEC, VALS(usb_urb_type_vals), 0x0, NULL, HFILL }}, { &hf_usb_transfer_type, { "URB transfer type", "usb.transfer_type", FT_UINT8, BASE_HEX, VALS(usb_transfer_type_vals), 0x0, NULL, HFILL }}, { &hf_usb_endpoint_number, { "Endpoint", "usb.endpoint_number", FT_UINT8, BASE_HEX, NULL, 0x0, "USB endpoint number", HFILL }}, { &hf_usb_endpoint_direction, { "Direction", "usb.endpoint_number.direction", FT_UINT8, BASE_DEC, VALS(usb_endpoint_direction_vals), 0x80, "USB endpoint direction", HFILL }}, { &hf_usb_endpoint_number_value, { "Endpoint value", "usb.endpoint_number.endpoint", FT_UINT8, BASE_DEC, NULL, 0x7F, "USB endpoint value", HFILL }}, { &hf_usb_device_address, { "Device", "usb.device_address", FT_UINT8, BASE_DEC, NULL, 0x0, "USB device address", HFILL }}, { &hf_usb_bus_id, { "URB bus id", "usb.bus_id", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_setup_flag, { "Device setup request", "usb.setup_flag", FT_STRING, BASE_NONE, NULL, 0x0, "USB device setup request is relevant (0) or not", HFILL }}, { &hf_usb_data_flag, { "Data", "usb.data_flag", FT_STRING, BASE_NONE, NULL, 0x0, "USB data is present (0) or not", HFILL }}, { &hf_usb_urb_ts_sec, { "URB sec", "usb.urb_ts_sec", FT_UINT64, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_urb_ts_usec, { "URB usec", "usb.urb_ts_usec", FT_UINT32, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_urb_status, { "URB status", "usb.urb_status", FT_INT32, BASE_DEC|BASE_EXT_STRING, &usb_urb_status_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_urb_len, { "URB length [bytes]", "usb.urb_len", FT_UINT32, BASE_DEC, NULL, 0x0, "URB length in bytes", HFILL }}, { &hf_usb_urb_data_len, { "Data length [bytes]", "usb.data_len", FT_UINT32, BASE_DEC, NULL, 0x0, "URB data length in bytes", HFILL }}, { &hf_usb_urb_unused_setup_header, { "Unused Setup Header", "usb.unused_setup_header", FT_NONE, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_usb_urb_interval, { "Interval", "usb.interval", FT_UINT32, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_urb_start_frame, { "Start frame", "usb.start_frame", FT_UINT32, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_urb_copy_of_transfer_flags, { "Copy of Transfer Flags", "usb.copy_of_transfer_flags", FT_UINT32, BASE_HEX, NULL, 0x0, NULL, HFILL }}, /* Win32 USBPcap pseudoheader */ { &hf_usb_win32_header_len, { "USBPcap pseudoheader length", "usb.usbpcap_header_len", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_irp_id, { "IRP ID", "usb.irp_id", FT_UINT64, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_usbd_status, { "IRP USBD_STATUS", "usb.usbd_status", FT_UINT32, BASE_HEX | BASE_EXT_STRING, &win32_usbd_status_vals_ext, 0x0, "USB request status value", HFILL }}, { &hf_usb_function, { "URB Function", "usb.function", FT_UINT16, BASE_HEX|BASE_EXT_STRING, &win32_urb_function_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_info, { "IRP information", "usb.irp_info", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_usbpcap_info_reserved, { "Reserved", "usb.irp_info.reserved", FT_UINT8, BASE_HEX, NULL, 0xFE, NULL, HFILL }}, { &hf_usb_usbpcap_info_direction, { "Direction", "usb.irp_info.direction", FT_UINT8, BASE_HEX, VALS(win32_usb_info_direction_vals), 0x01, NULL, HFILL }}, { &hf_usb_win32_device_address, { "Device address", "usb.device_address", FT_UINT16, BASE_DEC, NULL, 0x0, "Windows USB device address", HFILL }}, { &hf_usb_win32_data_len, { "Packet Data Length", "usb.data_len", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_control_stage, { "Control transfer stage", "usb.control_stage", FT_UINT8, BASE_DEC, VALS(usb_control_stage_vals), 0x0, NULL, HFILL }}, { &hf_usb_win32_iso_start_frame, { "Isochronous transfer start frame", "usb.win32.iso_frame", FT_UINT32, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_win32_iso_num_packets, { "Isochronous transfer number of packets", "usb.win32.iso_num_packets", FT_UINT32, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_win32_iso_error_count, { "Isochronous transfer error count", "usb.win32.iso_error_count", FT_UINT32, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_win32_iso_offset, { "ISO Data offset", "usb.win32.iso_offset", FT_UINT32, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_win32_iso_length, { "ISO Data length", "usb.win32.iso_data_len", FT_UINT32, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_win32_iso_status, { "ISO USBD status", "usb.win32.iso_status", FT_UINT32, BASE_HEX | BASE_EXT_STRING, &win32_usbd_status_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bmRequestType, { "bmRequestType", "usb.bmRequestType", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_request, { "bRequest", "usb.setup.bRequest", FT_UINT8, BASE_DEC | BASE_EXT_STRING, &setup_request_names_vals_ext, 0x0, NULL, HFILL }}, /* Same as hf_usb_request but no descriptive text */ { &hf_usb_request_unknown_class, { "bRequest", "usb.setup.bRequest", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_value, { "wValue", "usb.setup.wValue", FT_UINT16, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_index, { "wIndex", "usb.setup.wIndex", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_length, { "wLength", "usb.setup.wLength", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_wFeatureSelector, { "wFeatureSelector", "usb.setup.wFeatureSelector", FT_UINT16, BASE_DEC, VALS(usb_feature_selector_vals), 0x0, NULL, HFILL }}, { &hf_usb_wInterface, { "wInterface", "usb.setup.wInterface", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_wStatus, { "wStatus", "usb.setup.wStatus", FT_UINT16, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_wFrameNumber, { "wFrameNumber", "usb.setup.wFrameNumber", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, /* --------------------------------- */ { &hf_usb_iso_error_count, /* host endian byte order */ { "ISO error count", "usb.iso.error_count", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_iso_numdesc, /* host endian byte order */ { "Number of ISO descriptors", "usb.iso.numdesc", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, /* fields of struct mon_bin_isodesc from linux/drivers/usb/mon/mon_bin.c */ { &hf_usb_iso_status, /* host endian byte order */ { "Status", "usb.iso.iso_status", FT_INT32, BASE_DEC|BASE_EXT_STRING, &usb_urb_status_vals_ext, 0x0, "ISO descriptor status", HFILL }}, { &hf_usb_iso_off, /* host endian byte order */ { "Offset [bytes]", "usb.iso.iso_off", FT_UINT32, BASE_DEC, NULL, 0x0, "ISO data offset in bytes starting from the end of the last ISO descriptor", HFILL }}, { &hf_usb_iso_len, /* host endian byte order */ { "Length [bytes]", "usb.iso.iso_len", FT_UINT32, BASE_DEC, NULL, 0x0, "ISO data length in bytes", HFILL }}, { &hf_usb_iso_pad, /* host endian byte order */ { "Padding", "usb.iso.pad", FT_UINT32, BASE_HEX, NULL, 0x0, "Padding field of ISO descriptor structure", HFILL }}, { &hf_usb_iso_data, {"ISO Data", "usb.iso.data", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }}, /* --------------------------------- */ #if 0 { &hf_usb_data_len, {"Application Data Length", "usb.data.length", FT_UINT32, BASE_DEC, NULL, 0x0, NULL, HFILL }}, #endif { &hf_usb_capdata, {"Leftover Capture Data", "usb.capdata", FT_BYTES, BASE_NONE, NULL, 0x0, "Padding added by the USB capture system", HFILL }}, { &hf_usb_bmRequestType_direction, { "Direction", "usb.bmRequestType.direction", FT_BOOLEAN, 8, TFS(&tfs_bmrequesttype_direction), USB_DIR_IN, NULL, HFILL }}, { &hf_usb_bmRequestType_type, { "Type", "usb.bmRequestType.type", FT_UINT8, BASE_HEX, VALS(bmrequesttype_type_vals), USB_TYPE_MASK, NULL, HFILL }}, { &hf_usb_bmRequestType_recipient, { "Recipient", "usb.bmRequestType.recipient", FT_UINT8, BASE_HEX, VALS(bmrequesttype_recipient_vals), 0x1f, NULL, HFILL }}, { &hf_usb_bDescriptorType, { "bDescriptorType", "usb.bDescriptorType", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_descriptor_index, { "Descriptor Index", "usb.DescriptorIndex", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_language_id, { "Language Id", "usb.LanguageId", FT_UINT16, BASE_HEX|BASE_EXT_STRING,&usb_langid_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bLength, { "bLength", "usb.bLength", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bcdUSB, { "bcdUSB", "usb.bcdUSB", FT_UINT16, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bDeviceClass, { "bDeviceClass", "usb.bDeviceClass", FT_UINT8, BASE_HEX|BASE_EXT_STRING, &usb_class_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bDeviceSubClass, { "bDeviceSubClass", "usb.bDeviceSubClass", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bDeviceProtocol, { "bDeviceProtocol", "usb.bDeviceProtocol", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bMaxPacketSize0, { "bMaxPacketSize0", "usb.bMaxPacketSize0", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_idVendor, { "idVendor", "usb.idVendor", FT_UINT16, BASE_HEX | BASE_EXT_STRING, &ext_usb_vendors_vals, 0x0, NULL, HFILL }}, { &hf_usb_idProduct, { "idProduct", "usb.idProduct", FT_UINT16, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bcdDevice, { "bcdDevice", "usb.bcdDevice", FT_UINT16, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_iManufacturer, { "iManufacturer", "usb.iManufacturer", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_iProduct, { "iProduct", "usb.iProduct", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_iSerialNumber, { "iSerialNumber", "usb.iSerialNumber", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bNumConfigurations, { "bNumConfigurations", "usb.bNumConfigurations", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_wLANGID, { "wLANGID", "usb.wLANGID", FT_UINT16, BASE_HEX|BASE_EXT_STRING,&usb_langid_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bString, { "bString", "usb.bString", FT_STRING, BASE_NONE, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceNumber, { "bInterfaceNumber", "usb.bInterfaceNumber", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bAlternateSetting, { "bAlternateSetting", "usb.bAlternateSetting", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bNumEndpoints, { "bNumEndpoints", "usb.bNumEndpoints", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceClass, { "bInterfaceClass", "usb.bInterfaceClass", FT_UINT8, BASE_HEX|BASE_EXT_STRING, &usb_class_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceSubClass, { "bInterfaceSubClass", "usb.bInterfaceSubClass", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceSubClass_cdc, { "bInterfaceSubClass", "usb.bInterfaceSubClass", FT_UINT8, BASE_HEX | BASE_EXT_STRING, &ext_usb_com_subclass_vals, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceSubClass_hid, { "bInterfaceSubClass", "usb.bInterfaceSubClass", FT_UINT8, BASE_HEX | BASE_EXT_STRING, &usb_hid_subclass_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceSubClass_app, { "bInterfaceProtocol", "usb.bInterfaceSubClass", FT_UINT8, BASE_HEX | BASE_EXT_STRING, &usb_app_subclass_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceProtocol, { "bInterfaceProtocol", "usb.bInterfaceProtocol", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceProtocol_cdc, { "bInterfaceProtocol", "usb.bInterfaceProtocol", FT_UINT8, BASE_HEX | BASE_EXT_STRING, &usb_cdc_protocol_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceProtocol_cdc_data, { "bInterfaceProtocol", "usb.bInterfaceProtocol", FT_UINT8, BASE_HEX | BASE_EXT_STRING, &usb_cdc_data_protocol_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceProtocol_hid_boot, { "bInterfaceProtocol", "usb.bInterfaceProtocol", FT_UINT8, BASE_HEX | BASE_EXT_STRING, &usb_hid_boot_protocol_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceProtocol_app_dfu, { "bInterfaceProtocol", "usb.bInterfaceProtocol", FT_UINT8, BASE_HEX | BASE_EXT_STRING, &usb_app_dfu_protocol_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceProtocol_app_irda, { "bInterfaceProtocol", "usb.bInterfaceProtocol", FT_UINT8, BASE_HEX | BASE_EXT_STRING, &usb_app_irda_protocol_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceProtocol_app_usb_test_and_measurement, { "bInterfaceProtocol", "usb.bInterfaceProtocol", FT_UINT8, BASE_HEX | BASE_EXT_STRING, &usb_app_usb_test_and_measurement_protocol_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_iInterface, { "iInterface", "usb.iInterface", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bEndpointAddress, { "bEndpointAddress", "usb.bEndpointAddress", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_configuration_bmAttributes, { "Configuration bmAttributes", "usb.configuration.bmAttributes", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bmAttributes, { "bmAttributes", "usb.bmAttributes", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bEndpointAttributeTransfer, { "Transfertype", "usb.bmAttributes.transfer", FT_UINT8, BASE_HEX, VALS(usb_bmAttributes_transfer_vals), 0x03, NULL, HFILL }}, { &hf_usb_bEndpointAttributeSynchonisation, { "Synchronisationtype", "usb.bmAttributes.sync", FT_UINT8, BASE_HEX, VALS(usb_bmAttributes_sync_vals), 0x0c, NULL, HFILL }}, { &hf_usb_bEndpointAttributeBehaviour, { "Behaviourtype", "usb.bmAttributes.behaviour", FT_UINT8, BASE_HEX, VALS(usb_bmAttributes_behaviour_vals), 0x30, NULL, HFILL }}, { &hf_usb_wMaxPacketSize, { "wMaxPacketSize", "usb.wMaxPacketSize", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_wMaxPacketSize_size, { "Maximum Packet Size", "usb.wMaxPacketSize.size", FT_UINT16, BASE_DEC, NULL, 0x3FF, NULL, HFILL }}, { &hf_usb_wMaxPacketSize_slots, { "Transactions per microframe", "usb.wMaxPacketSize.slots", FT_UINT16, BASE_DEC, VALS(usb_wMaxPacketSize_slots_vals), (3<<11), NULL, HFILL }}, { &hf_usb_bInterval, { "bInterval", "usb.bInterval", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_wTotalLength, { "wTotalLength", "usb.wTotalLength", FT_UINT16, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bNumInterfaces, { "bNumInterfaces", "usb.bNumInterfaces", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bConfigurationValue, { "bConfigurationValue", "usb.bConfigurationValue", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_iConfiguration, { "iConfiguration", "usb.iConfiguration", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bMaxPower, { "bMaxPower", "usb.bMaxPower", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_configuration_legacy10buspowered, { "Must be 1", "usb.configuration.legacy10buspowered", FT_BOOLEAN, 8, TFS(&tfs_mustbeone), 0x80, "Legacy USB 1.0 bus powered", HFILL }}, { &hf_usb_configuration_selfpowered, { "Self-Powered", "usb.configuration.selfpowered", FT_BOOLEAN, 8, TFS(&tfs_selfpowered), 0x40, NULL, HFILL }}, { &hf_usb_configuration_remotewakeup, { "Remote Wakeup", "usb.configuration.remotewakeup", FT_BOOLEAN, 8, TFS(&tfs_remotewakeup), 0x20, NULL, HFILL }}, { &hf_usb_bEndpointAddress_number, { "Endpoint Number", "usb.bEndpointAddress.number", FT_UINT8, BASE_HEX, NULL, 0x0f, NULL, HFILL }}, { &hf_usb_bEndpointAddress_direction, { "Direction", "usb.bEndpointAddress.direction", FT_BOOLEAN, 8, TFS(&tfs_endpoint_direction), 0x80, NULL, HFILL }}, { &hf_usb_request_in, { "Request in", "usb.request_in", FT_FRAMENUM, BASE_NONE, NULL, 0, "The request to this packet is in this packet", HFILL }}, { &hf_usb_time, { "Time from request", "usb.time", FT_RELATIVE_TIME, BASE_NONE, NULL, 0, "Time between Request and Response for USB cmds", HFILL }}, { &hf_usb_response_in, { "Response in", "usb.response_in", FT_FRAMENUM, BASE_NONE, NULL, 0, "The response to this packet is in this packet", HFILL }}, { &hf_usb_bFirstInterface, { "bFirstInterface", "usb.bFirstInterface", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bInterfaceCount, { "bInterfaceCount", "usb.bInterfaceCount", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bFunctionClass, { "bFunctionClass", "usb.bFunctionClass", FT_UINT8, BASE_HEX|BASE_EXT_STRING, &usb_class_vals_ext, 0x0, NULL, HFILL }}, { &hf_usb_bFunctionSubClass, { "bFunctionSubClass", "usb.bFunctionSubClass", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_bFunctionProtocol, { "bFunctionProtocol", "usb.bFunctionProtocol", FT_UINT8, BASE_HEX, NULL, 0x0, NULL, HFILL }}, { &hf_usb_iFunction, { "iFunction", "usb.iFunction", FT_UINT8, BASE_DEC, NULL, 0x0, NULL, HFILL }}, { &hf_usb_data_fragment, { "Data Fragment", "usb.data_fragment", FT_BYTES, BASE_NONE, NULL, 0x0, NULL, HFILL }}, }; static gint *usb_subtrees[] = { &usb_hdr, &usb_setup_hdr, &usb_isodesc, &usb_win32_iso_packet, &ett_usb_endpoint, &ett_usb_setup_bmrequesttype, &ett_usb_usbpcap_info, &ett_descriptor_device, &ett_configuration_bmAttributes, &ett_configuration_bEndpointAddress, &ett_endpoint_bmAttributes, &ett_endpoint_wMaxPacketSize }; static ei_register_info ei[] = { { &ei_usb_bLength_even, { "usb.bLength.even", PI_PROTOCOL, PI_WARN, "Invalid STRING DESCRIPTOR Length (must be even)", EXPFILL }}, { &ei_usb_bLength_too_short, { "usb.bLength.too_short", PI_MALFORMED, PI_ERROR, "Invalid STRING DESCRIPTOR Length (must be 2 or larger)", EXPFILL }}, { &ei_usb_desc_length_invalid, { "usb.desc_length.invalid", PI_MALFORMED, PI_ERROR, "Invalid descriptor length", EXPFILL }}, }; expert_module_t* expert_usb; expert_usb = expert_register_protocol(proto_usb); expert_register_field_array(expert_usb, ei, array_length(ei)); device_to_product_table = wmem_tree_new_autoreset(wmem_epan_scope(), wmem_file_scope()); device_to_protocol_table = wmem_tree_new_autoreset(wmem_epan_scope(), wmem_file_scope()); device_to_dissector = register_dissector_table("usb.device", "USB device", FT_UINT32, BASE_HEX); protocol_to_dissector = register_dissector_table("usb.protocol", "USB protocol", FT_UINT32, BASE_HEX); product_to_dissector = register_dissector_table("usb.product", "USB product", FT_UINT32, BASE_HEX); proto_usb = proto_register_protocol("USB", "USB", "usb"); proto_register_field_array(proto_usb, hf, array_length(hf)); proto_register_subtree_array(usb_subtrees, array_length(usb_subtrees)); linux_usb_handle = register_dissector("usb", dissect_linux_usb, proto_usb); usb_bulk_dissector_table = register_dissector_table("usb.bulk", "USB bulk endpoint", FT_UINT8, BASE_DEC); register_heur_dissector_list("usb.bulk", &heur_bulk_subdissector_list); usb_control_dissector_table = register_dissector_table("usb.control", "USB control endpoint", FT_UINT8, BASE_DEC); register_heur_dissector_list("usb.control", &heur_control_subdissector_list); usb_interrupt_dissector_table = register_dissector_table("usb.interrupt", "USB interrupt endpoint", FT_UINT8, BASE_DEC); register_heur_dissector_list("usb.interrupt", &heur_interrupt_subdissector_list); usb_descriptor_dissector_table = register_dissector_table("usb.descriptor", "USB descriptor", FT_UINT8, BASE_DEC); usb_module = prefs_register_protocol(proto_usb, NULL); prefs_register_bool_preference(usb_module, "try_heuristics", "Try heuristic sub-dissectors", "Try to decode a packet using a heuristic sub-dissector before " "attempting to dissect the packet using the \"usb.bulk\", \"usb.interrupt\" or " "\"usb.control\" dissector tables.", &try_heuristics); usb_tap = register_tap("usb"); register_decode_as(&usb_protocol_da); register_decode_as(&usb_product_da); register_decode_as(&usb_device_da); } void proto_reg_handoff_usb(void) { dissector_handle_t linux_usb_mmapped_handle; dissector_handle_t win32_usb_handle; linux_usb_mmapped_handle = create_dissector_handle(dissect_linux_usb_mmapped, proto_usb); win32_usb_handle = create_dissector_handle(dissect_win32_usb, proto_usb); dissector_add_uint("wtap_encap", WTAP_ENCAP_USB_LINUX, linux_usb_handle); dissector_add_uint("wtap_encap", WTAP_ENCAP_USB_LINUX_MMAPPED, linux_usb_mmapped_handle); dissector_add_uint("wtap_encap", WTAP_ENCAP_USBPCAP, win32_usb_handle); } /* * Editor modelines - http://www.wireshark.org/tools/modelines.html * * Local variables: * c-basic-offset: 4 * tab-width: 8 * indent-tabs-mode: nil * End: * * vi: set shiftwidth=4 tabstop=8 expandtab: * :indentSize=4:tabSize=8:noTabs=true: */