/* packet-ypserv.c * Routines for ypserv dissection * * Wireshark - Network traffic analyzer * By Gerald Combs * Copyright 1998 Gerald Combs * * Copied from packet-smb.c * * 2001 Ronnie Sahlberg * Added all remaining dissectors for this protocol * * SPDX-License-Identifier: GPL-2.0-or-later */ #include "config.h" #include "packet-rpc.h" #include "packet-ypserv.h" void proto_register_ypserv(void); void proto_reg_handoff_ypserv(void); static int proto_ypserv; static int hf_ypserv_procedure_v1; static int hf_ypserv_procedure_v2; static int hf_ypserv_domain; static int hf_ypserv_servesdomain; static int hf_ypserv_map; static int hf_ypserv_key; static int hf_ypserv_peer; static int hf_ypserv_more; static int hf_ypserv_ordernum; static int hf_ypserv_transid; static int hf_ypserv_prog; static int hf_ypserv_port; static int hf_ypserv_value; static int hf_ypserv_status; static int hf_ypserv_map_parms; static int hf_ypserv_xfrstat; static gint ett_ypserv; static gint ett_ypserv_map_parms; static const value_string ypstat[] = { { 1, "YP_TRUE" }, { 2, "YP_NOMORE" }, { 0, "YP_FALSE" }, { -1, "YP_NOMAP" }, { -2, "YP_NODOM" }, { -3, "YP_NOKEY" }, { -4, "YP_BADOP" }, { -5, "YP_BADDB" }, { -6, "YP_YPERR" }, { -7, "YP_BADARGS" }, { -8, "YP_VERS" }, { 0, NULL }, }; static const value_string xfrstat[] = { { 1, "YPXFR_SUCC" }, { 2, "YPXFR_AGE" }, { -1, "YPXFR_NOMAP" }, { -2, "YPXFR_NODOM" }, { -3, "YPXFR_RSRC" }, { -4, "YPXFR_RPC" }, { -5, "YPXFR_MADDR" }, { -6, "YPXFR_YPERR" }, { -7, "YPXFR_BADARGS" }, { -8, "YPXFR_DBM" }, { -9, "YPXFR_FILE" }, { -10, "YPXFR_SKEW" }, { -11, "YPXFR_CLEAR" }, { -12, "YPXFR_FORCE" }, { -13, "YPXFR_XFRERR" }, { -14, "YPXFR_REFUSED" }, { 0, NULL }, }; static int dissect_ypserv_status(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree *tree, gint32 *rstatus) { gint32 status; const char *err; status=tvb_get_ntohl(tvb, offset); if(rstatus){ *rstatus=status; } offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_status, offset); if(status<0){ err=val_to_str(status, ypstat, "Unknown error:%u"); col_append_fstr(pinfo->cinfo, COL_INFO," %s", err); proto_item_append_text(tree, " Error:%s", err); } return offset; } static int dissect_domain_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { proto_item_append_text(tree, " DOMAIN call"); return dissect_rpc_string(tvb,tree,hf_ypserv_domain,0,NULL); } static int dissect_domain_nonack_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { proto_item_append_text(tree, " DOMAIN_NONACK call"); return dissect_rpc_string(tvb,tree,hf_ypserv_domain,0,NULL); } static int dissect_maplist_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { proto_item_append_text(tree, " MAPLIST call"); return dissect_rpc_string(tvb,tree,hf_ypserv_domain,0,NULL); } static int dissect_domain_reply(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " DOMAIN reply"); proto_tree_add_item(tree, hf_ypserv_servesdomain, tvb, offset, 4, ENC_BIG_ENDIAN); offset += 4; return offset; } static int dissect_domain_nonack_reply(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " DOMAIN_NONACK reply"); proto_tree_add_item(tree, hf_ypserv_servesdomain, tvb, offset, 4, ENC_BIG_ENDIAN); offset += 4; return offset; } static int dissect_match_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { const char *str; int offset = 0; proto_item_append_text(tree, " MATCH call"); /*domain*/ offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, &str); col_append_fstr(pinfo->cinfo, COL_INFO," %s/", str); proto_item_append_text(tree, " %s/", str); /*map*/ offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, &str); col_append_fstr(pinfo->cinfo, COL_INFO,"%s/", str); proto_item_append_text(tree, "%s/", str); /*key*/ offset = dissect_rpc_string(tvb, tree, hf_ypserv_key, offset, &str); col_append_str(pinfo->cinfo, COL_INFO, str); proto_item_append_text(tree, "%s", str); return offset; } static int dissect_match_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) { gint32 status; const char *str; int offset = 0; proto_item_append_text(tree, " MATCH reply"); offset = dissect_ypserv_status(tvb, offset, pinfo, tree, &status); if(status>=0){ offset = dissect_rpc_string(tvb, tree, hf_ypserv_value,offset, &str); col_append_fstr(pinfo->cinfo, COL_INFO," %s", str); proto_item_append_text(tree, " %s", str); } else { offset = dissect_rpc_string(tvb, tree, hf_ypserv_value,offset, NULL); } return offset; } static int dissect_first_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " FIRST call"); /* * XXX - does Sun's "yp.x" lie, and claim that the argument to a * FIRST call is a "ypreq_key" rather than a "ypreq_nokey"? * You presumably need the key for NEXT, as "next" is "next * after some entry", and the key tells you which entry, but * you don't need a key for FIRST, as there's only one entry that * is the first entry. * * The NIS server originally used DBM, which has a "firstkey()" * call, with no argument, and a "nextkey()" argument, with * a key argument. (Heck, it might *still* use DBM.) * * Given that, and given that at least one FIRST call from a Sun * running Solaris 8 (the Sun on which I'm typing this, in fact) * had a "ypreq_nokey" as the argument, I'm assuming that "yp.x" * is buggy. */ offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, NULL); return offset; } static int dissect_first_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " FIRST reply"); offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_value, offset, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_key, offset, NULL); return offset; } static int dissect_next_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " NEXT reply"); offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_value, offset, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_key, offset, NULL); return offset; } static int dissect_next_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " NEXT call"); offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_key, offset, NULL); return offset; } static int dissect_xfr_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { proto_item *sub_item=NULL; proto_tree *sub_tree=NULL; int offset = 0; int start_offset = offset; proto_item_append_text(tree, " XFR call"); if(tree){ sub_item = proto_tree_add_item(tree, hf_ypserv_map_parms, tvb, offset, -1, ENC_NA); if(sub_item) sub_tree = proto_item_add_subtree(sub_item, ett_ypserv_map_parms); } offset = dissect_rpc_string(tvb, sub_tree, hf_ypserv_domain, offset, NULL); offset = dissect_rpc_string(tvb, sub_tree, hf_ypserv_map, offset, NULL); offset = dissect_rpc_uint32(tvb, sub_tree, hf_ypserv_ordernum, offset); offset = dissect_rpc_string(tvb, sub_tree, hf_ypserv_peer, offset, NULL); proto_tree_add_item(tree, hf_ypserv_transid, tvb, offset, 4, ENC_BIG_ENDIAN); offset += 4; offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_prog, offset); offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_port, offset); if(sub_item) proto_item_set_len(sub_item, offset - start_offset); return offset; } static int dissect_clear_call(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " CLEAR call"); return offset; } static int dissect_clear_reply(tvbuff_t *tvb _U_, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { proto_item_append_text(tree, " CLEAR reply"); return 0; } static int dissect_xfr_reply(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " XFR reply"); proto_tree_add_item(tree, hf_ypserv_transid, tvb, offset, 4, ENC_BIG_ENDIAN); offset += 4; offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_xfrstat, offset); return offset; } static int dissect_order_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { const char *str; int offset = 0; proto_item_append_text(tree, " ORDER call"); /*domain*/ offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, &str); col_append_fstr(pinfo->cinfo, COL_INFO," %s/", str); proto_item_append_text(tree, " %s/", str); /*map*/ offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, &str); col_append_str(pinfo->cinfo, COL_INFO, str); proto_item_append_text(tree, "%s", str); return offset; } static int dissect_all_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " ALL call"); offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, NULL); return offset; } static int dissect_master_call(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " MASTER call"); offset = dissect_rpc_string(tvb, tree, hf_ypserv_domain, offset, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, NULL); return offset; } static int dissect_all_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) { guint32 more; int offset = 0; proto_item_append_text(tree, " ALL reply"); for (;;) { more = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_more, offset); if (!more) break; offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_value, offset, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_key, offset, NULL); } return offset; } static int dissect_master_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " MASTER reply"); offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL); offset = dissect_rpc_string(tvb, tree, hf_ypserv_peer, offset, NULL); return offset; } static int dissect_order_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) { guint32 num; int offset = 0; proto_item_append_text(tree, " ORDER reply"); offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL); /*order number*/ num=tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_ordernum, offset); col_append_fstr(pinfo->cinfo, COL_INFO," 0x%08x", num); proto_item_append_text(tree, " 0x%08x", num); return offset; } static int dissect_maplist_reply(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_) { int offset = 0; proto_item_append_text(tree, " MAPLIST reply"); offset = dissect_ypserv_status(tvb, offset, pinfo, tree, NULL); while(tvb_get_ntohl(tvb,offset)){ offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_more, offset); offset = dissect_rpc_string(tvb, tree, hf_ypserv_map, offset, NULL); } offset = dissect_rpc_uint32(tvb, tree, hf_ypserv_more, offset); return offset; } /* proc number, "proc name", dissect_request, dissect_reply */ /* someone please get me a version 1 trace */ static const vsff ypserv1_proc[] = { { 0, "NULL", dissect_rpc_void, dissect_rpc_void }, { YPPROC_DOMAIN, "DOMAIN", dissect_rpc_unknown, dissect_rpc_unknown }, { YPPROC_DOMAIN_NONACK, "DOMAIN_NONACK", dissect_rpc_unknown, dissect_rpc_unknown }, { YPPROC_MATCH, "MATCH", dissect_rpc_unknown, dissect_rpc_unknown }, { YPPROC_FIRST, "FIRST", dissect_rpc_unknown, dissect_rpc_unknown }, { YPPROC_NEXT, "NEXT", dissect_rpc_unknown, dissect_rpc_unknown }, { YPPROC_XFR, "XFR", dissect_rpc_unknown, dissect_rpc_unknown }, { YPPROC_CLEAR, "CLEAR", dissect_rpc_unknown, dissect_rpc_unknown }, { YPPROC_ALL, "ALL", dissect_rpc_unknown, dissect_rpc_unknown }, { YPPROC_MASTER, "MASTER", dissect_rpc_unknown, dissect_rpc_unknown }, { YPPROC_ORDER, "ORDER", dissect_rpc_unknown, dissect_rpc_unknown }, { YPPROC_MAPLIST, "MAPLIST", dissect_rpc_unknown, dissect_rpc_unknown }, { 0, NULL, NULL, NULL } }; static const value_string ypserv1_proc_vals[] = { { YPPROC_DOMAIN, "DOMAIN" }, { YPPROC_DOMAIN_NONACK, "DOMAIN_NONACK" }, { YPPROC_MATCH, "MATCH" }, { YPPROC_FIRST, "FIRST" }, { YPPROC_NEXT, "NEXT" }, { YPPROC_XFR, "XFR" }, { YPPROC_CLEAR, "CLEAR" }, { YPPROC_ALL, "ALL" }, { YPPROC_MASTER, "MASTER" }, { YPPROC_ORDER, "ORDER" }, { YPPROC_MAPLIST, "MAPLIST" }, { 0, NULL } }; /* end of YPServ version 1 */ /* proc number, "proc name", dissect_request, dissect_reply */ static const vsff ypserv2_proc[] = { { 0, "NULL", dissect_rpc_void, dissect_rpc_void }, { YPPROC_DOMAIN, "DOMAIN", dissect_domain_call, dissect_domain_reply }, { YPPROC_DOMAIN_NONACK, "DOMAIN_NONACK", dissect_domain_nonack_call, dissect_domain_nonack_reply }, { YPPROC_MATCH, "MATCH", dissect_match_call, dissect_match_reply }, { YPPROC_FIRST, "FIRST", dissect_first_call, dissect_first_reply }, { YPPROC_NEXT, "NEXT", dissect_next_call, dissect_next_reply }, { YPPROC_XFR, "XFR", dissect_xfr_call, dissect_xfr_reply }, { YPPROC_CLEAR, "CLEAR", dissect_clear_call, dissect_clear_reply }, { YPPROC_ALL, "ALL", dissect_all_call, dissect_all_reply }, { YPPROC_MASTER, "MASTER", dissect_master_call, dissect_master_reply }, { YPPROC_ORDER, "ORDER", dissect_order_call, dissect_order_reply }, { YPPROC_MAPLIST, "MAPLIST", dissect_maplist_call, dissect_maplist_reply }, { 0, NULL, NULL, NULL } }; static const value_string ypserv2_proc_vals[] = { { YPPROC_DOMAIN, "DOMAIN" }, { YPPROC_DOMAIN_NONACK, "DOMAIN_NONACK" }, { YPPROC_MATCH, "MATCH" }, { YPPROC_FIRST, "FIRST" }, { YPPROC_NEXT, "NEXT" }, { YPPROC_XFR, "XFR" }, { YPPROC_CLEAR, "CLEAR" }, { YPPROC_ALL, "ALL" }, { YPPROC_MASTER, "MASTER" }, { YPPROC_ORDER, "ORDER" }, { YPPROC_MAPLIST, "MAPLIST" }, { 0, NULL } }; /* end of YPServ version 2 */ static const rpc_prog_vers_info ypserv_vers_info[] = { { 1, ypserv1_proc, &hf_ypserv_procedure_v1 }, { 2, ypserv2_proc, &hf_ypserv_procedure_v2 }, }; void proto_register_ypserv(void) { static hf_register_info hf[] = { { &hf_ypserv_procedure_v1, { "V1 Procedure", "ypserv.procedure_v1", FT_UINT32, BASE_DEC, VALS(ypserv1_proc_vals), 0, NULL, HFILL }}, { &hf_ypserv_procedure_v2, { "V2 Procedure", "ypserv.procedure_v2", FT_UINT32, BASE_DEC, VALS(ypserv2_proc_vals), 0, NULL, HFILL }}, { &hf_ypserv_domain, { "Domain", "ypserv.domain", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_ypserv_servesdomain, { "Serves Domain", "ypserv.servesdomain", FT_BOOLEAN, BASE_NONE, TFS(&tfs_yes_no), 0x0, NULL, HFILL }}, { &hf_ypserv_map, { "Map Name", "ypserv.map", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_ypserv_peer, { "Peer Name", "ypserv.peer", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_ypserv_more, { "More", "ypserv.more", FT_BOOLEAN, BASE_NONE, TFS(&tfs_yes_no), 0x0, NULL, HFILL }}, { &hf_ypserv_ordernum, { "Order Number", "ypserv.ordernum", FT_UINT32, BASE_DEC, NULL, 0, "Order Number for XFR", HFILL }}, { &hf_ypserv_transid, { "Host Transport ID", "ypserv.transid", FT_IPv4, BASE_NONE, NULL, 0, "Host Transport ID to use for XFR Callback", HFILL }}, { &hf_ypserv_prog, { "Program Number", "ypserv.prog", FT_UINT32, BASE_DEC, NULL, 0, "Program Number to use for XFR Callback", HFILL }}, { &hf_ypserv_port, { "Port", "ypserv.port", FT_UINT32, BASE_DEC, NULL, 0, "Port to use for XFR Callback", HFILL }}, { &hf_ypserv_key, { "Key", "ypserv.key", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_ypserv_value, { "Value", "ypserv.value", FT_STRING, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_ypserv_status, { "Status", "ypserv.status", FT_INT32, BASE_DEC, VALS(ypstat) , 0, NULL, HFILL }}, { &hf_ypserv_map_parms, { "YP Map Parameters", "ypserv.map_parms", FT_NONE, BASE_NONE, NULL, 0, NULL, HFILL }}, { &hf_ypserv_xfrstat, { "Xfrstat", "ypserv.xfrstat", FT_INT32, BASE_DEC, VALS(xfrstat), 0, NULL, HFILL }}, }; static gint *ett[] = { &ett_ypserv, &ett_ypserv_map_parms, }; proto_ypserv = proto_register_protocol("Yellow Pages Service", "YPSERV", "ypserv"); proto_register_field_array(proto_ypserv, hf, array_length(hf)); proto_register_subtree_array(ett, array_length(ett)); } void proto_reg_handoff_ypserv(void) { /* Register the protocol as RPC */ rpc_init_prog(proto_ypserv, YPSERV_PROGRAM, ett_ypserv, G_N_ELEMENTS(ypserv_vers_info), ypserv_vers_info); } /* * Editor modelines - https://www.wireshark.org/tools/modelines.html * * Local variables: * c-basic-offset: 8 * tab-width: 8 * indent-tabs-mode: t * End: * * vi: set shiftwidth=8 tabstop=8 noexpandtab: * :indentSize=8:tabSize=8:noTabs=false: */