1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
|
/* packet-ip.h
* Definitions for IP packet disassembly structures and routines
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 1998 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#ifndef __PACKET_IP_H__
#define __PACKET_IP_H__
#include "ws_symbol_export.h"
#include "packet-ipv6.h"
#include <epan/conversation.h>
/*
* IP Version numbers, from
*
* https://www.iana.org/assignments/version-numbers/version-numbers.xhtml
*/
#define IP_VERSION_NUM_RESERVED 0 /* Reserved */
#define IP_VERSION_NUM_INET 4 /* IP (IP version 4) */
#define IP_VERSION_NUM_ST 5 /* ST Datagram Mode */
#define IP_VERSION_NUM_INET6 6 /* IP6 (IP version 6) */
#define IP_VERSION_NUM_TPIX 7 /* TP/IX: The Next Internet */
#define IP_VERSION_NUM_PIP 8 /* The P Internet Protocol */
#define IP_VERSION_NUM_TUBA 9 /* TUBA */
extern const value_string ip_version_vals[];
typedef struct _ws_ip4
{
guint8 ip_ver; /* 4 */
guint8 ip_tos; /* type of service */
guint32 ip_len; /* total length */
guint16 ip_id; /* identification */
guint16 ip_off; /* fragment offset */
guint8 ip_ttl; /* time-to-live */
guint8 ip_proto; /* protocol */
guint16 ip_sum; /* checksum */
address ip_src; /* source address */
address ip_dst; /* destination address */
guint32 ip_stream; /* track conversations */
} ws_ip4;
#define WS_IP4_PTR(p) ((ws_ip4 *)(((p) && *(guint8 *)(p) == 4) ? (p) : NULL))
/* Differentiated Services Codepoint */
#define IPDSFIELD_DSCP_MASK 0xFC
#define IPDSFIELD_DSCP(dsfield) (((dsfield) & IPDSFIELD_DSCP_MASK) >> 2)
/* Explicit Congestion Notification */
#define IPDSFIELD_ECN_MASK 0x03
#define IPDSFIELD_ECN(dsfield) ((dsfield) & IPDSFIELD_ECN_MASK)
gboolean ip_try_dissect(gboolean heur_first, guint nxt, tvbuff_t *tvb,
packet_info *pinfo, proto_tree *tree, void *iph);
/* Export the DSCP/ECN extended value-string table for other protocols */
WS_DLL_PUBLIC value_string_ext dscp_vals_ext;
WS_DLL_PUBLIC value_string_ext ecn_vals_ext;
WS_DLL_PUBLIC value_string_ext dscp_short_vals_ext;
WS_DLL_PUBLIC value_string_ext ecn_short_vals_ext;
typedef struct _ws_ip6
{
guint8 ip6_ver; /* 6 */
guint8 ip6_tc; /* traffic class */
guint32 ip6_flw; /* flow label */
guint32 ip6_len; /* payload length */
guint8 ip6_nxt; /* next header */
guint8 ip6_hop; /* hop limit */
address ip6_src; /* source address */
address ip6_dst; /* destination address */
guint32 ip6_stream; /* track conversations */
} ws_ip6;
#define WS_IP6_PTR(p) ((ws_ip6 *)(((p) && *(guint8 *)(p) == 6) ? (p) : NULL))
struct ws_rthdr {
struct ws_ip6_rthdr hdr;
proto_item *ti_len;
proto_item *ti_type;
proto_item *ti_segleft;
};
typedef ws_ip6 ipv6_tap_info_t;
/* Packet info for shared state between IPv6 header and extensions.
*
* frag_plen: This is the IPv6 header payload length of a fragment packet
* minus per-fragment *extension* headers (anything up to and including the
* Fragment extension header).
*
* See RFC 8200 Section 4.5:
* The Per-Fragment headers must consist of the IPv6 header plus any
* extension headers that must be processed by nodes en route to the
* destination, that is, all headers up to and including the Routing
* header if present, else the Hop-by-Hop Options header if present,
* else no extension headers.
*/
typedef struct {
guint32 jumbo_plen;
guint16 ip6_plen; /* header payload length (can be zero) */
gint frag_plen;
proto_tree *ipv6_tree;
gint ipv6_item_len;
} ipv6_pinfo_t;
ipv6_pinfo_t *p_get_ipv6_pinfo(packet_info *pinfo);
proto_tree *p_ipv6_pinfo_select_root(packet_info *pinfo, proto_tree *tree);
ipv6_pinfo_t *p_ipv6_pinfo_add_len(packet_info *pinfo, int exthdr_len);
void ipv6_dissect_next(guint nxt, tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, ws_ip6 *iph);
static inline int
ws_ip_protocol(void *iph)
{
ws_ip4 *ip4;
ws_ip6 *ip6;
if (iph != NULL) {
if ((ip4 = WS_IP4_PTR(iph)) != NULL)
return ip4->ip_proto;
if ((ip6 = WS_IP6_PTR(iph)) != NULL)
return ip6->ip6_nxt;
}
return -1;
}
struct ip_analysis {
/* Initial frame starting this conversation
*/
guint32 initial_frame;
guint32 stream;
};
WS_DLL_PUBLIC struct ip_analysis *get_ip_conversation_data(conversation_t *conv,
packet_info *pinfo);
#endif /* __PACKET_IP_H__ */
/*
* Editor modelines - https://www.wireshark.org/tools/modelines.html
*
* Local variables:
* c-basic-offset: 4
* tab-width: 8
* indent-tabs-mode: nil
* End:
*
* vi: set shiftwidth=4 tabstop=8 expandtab:
* :indentSize=4:tabSize=8:noTabs=true:
*/
|
