Home | History | Annotate | Download | only in tcpdump
      1 /* Copyright (c) 2013, The TCPDUMP project
      2  * All rights reserved.
      3  *
      4  * Redistribution and use in source and binary forms, with or without
      5  * modification, are permitted provided that the following conditions are met:
      6  *
      7  * 1. Redistributions of source code must retain the above copyright notice, this
      8  *    list of conditions and the following disclaimer.
      9  * 2. Redistributions in binary form must reproduce the above copyright notice,
     10  *    this list of conditions and the following disclaimer in the documentation
     11  *    and/or other materials provided with the distribution.
     12  *
     13  * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
     14  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED
     15  * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
     16  * DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR
     17  * ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES
     18  * (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
     19  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND
     20  * ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
     21  * (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS
     22  * SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
     23  */
     24 
     25 #define NETDISSECT_REWORKED
     26 #ifdef HAVE_CONFIG_H
     27 #include "config.h"
     28 #endif
     29 
     30 #include <tcpdump-stdinc.h>
     31 
     32 #include "interface.h"
     33 #include "extract.h"
     34 
     35 static const char tstr[] = " [|m3ua]";
     36 static const char cstr[] = " (corrupt)";
     37 
     38 /* RFC 4666 */
     39 
     40 #define M3UA_REL_1_0 1
     41 
     42 struct m3ua_common_header {
     43   uint8_t  v;
     44   uint8_t  reserved;
     45   uint8_t  msg_class;
     46   uint8_t  msg_type;
     47   uint32_t len;
     48 };
     49 
     50 struct m3ua_param_header {
     51   uint16_t tag;
     52   uint16_t len;
     53 };
     54 
     55 /* message classes */
     56 #define M3UA_MSGC_MGMT 0
     57 #define M3UA_MSGC_TRANSFER 1
     58 #define M3UA_MSGC_SSNM 2
     59 #define M3UA_MSGC_ASPSM 3
     60 #define M3UA_MSGC_ASPTM 4
     61 /* reserved values */
     62 #define M3UA_MSGC_RKM 9
     63 
     64 static const struct tok MessageClasses[] = {
     65 	{ M3UA_MSGC_MGMT,     "Management"            },
     66 	{ M3UA_MSGC_TRANSFER, "Transfer"              },
     67 	{ M3UA_MSGC_SSNM,     "SS7"                   },
     68 	{ M3UA_MSGC_ASPSM,    "ASP"                   },
     69 	{ M3UA_MSGC_ASPTM,    "ASP"                   },
     70 	{ M3UA_MSGC_RKM,      "Routing Key Managment" },
     71 	{ 0, NULL }
     72 };
     73 
     74 /* management messages */
     75 #define M3UA_MGMT_ERROR 0
     76 #define M3UA_MGMT_NOTIFY 1
     77 
     78 static const struct tok MgmtMessages[] = {
     79   { M3UA_MGMT_ERROR, "Error" },
     80   { M3UA_MGMT_NOTIFY, "Notify" },
     81   { 0, NULL }
     82 };
     83 
     84 /* transfer messages */
     85 #define M3UA_TRANSFER_DATA 1
     86 
     87 static const struct tok TransferMessages[] = {
     88   { M3UA_TRANSFER_DATA, "Data" },
     89   { 0, NULL }
     90 };
     91 
     92 /* SS7 Signaling Network Management messages */
     93 #define M3UA_SSNM_DUNA 1
     94 #define M3UA_SSNM_DAVA 2
     95 #define M3UA_SSNM_DAUD 3
     96 #define M3UA_SSNM_SCON 4
     97 #define M3UA_SSNM_DUPU 5
     98 #define M3UA_SSNM_DRST 6
     99 
    100 static const struct tok SS7Messages[] = {
    101   { M3UA_SSNM_DUNA, "Destination Unavailable" },
    102   { M3UA_SSNM_DAVA, "Destination Available" },
    103   { M3UA_SSNM_DAUD, "Destination State Audit" },
    104   { M3UA_SSNM_SCON, "Signalling Congestion" },
    105   { M3UA_SSNM_DUPU, "Destination User Part Unavailable" },
    106   { M3UA_SSNM_DRST, "Destination Restricted" },
    107   { 0, NULL }
    108 };
    109 
    110 /* ASP State Maintenance messages */
    111 #define M3UA_ASP_UP 1
    112 #define M3UA_ASP_DN 2
    113 #define M3UA_ASP_BEAT 3
    114 #define M3UA_ASP_UP_ACK 4
    115 #define M3UA_ASP_DN_ACK 5
    116 #define M3UA_ASP_BEAT_ACK 6
    117 
    118 static const struct tok ASPStateMessages[] = {
    119   { M3UA_ASP_UP, "Up" },
    120   { M3UA_ASP_DN, "Down" },
    121   { M3UA_ASP_BEAT, "Heartbeat" },
    122   { M3UA_ASP_UP_ACK, "Up Acknowledgement" },
    123   { M3UA_ASP_DN_ACK, "Down Acknowledgement" },
    124   { M3UA_ASP_BEAT_ACK, "Heartbeat Acknowledgement" },
    125   { 0, NULL }
    126 };
    127 
    128 /* ASP Traffic Maintenance messages */
    129 #define M3UA_ASP_AC 1
    130 #define M3UA_ASP_IA 2
    131 #define M3UA_ASP_AC_ACK 3
    132 #define M3UA_ASP_IA_ACK 4
    133 
    134 static const struct tok ASPTrafficMessages[] = {
    135   { M3UA_ASP_AC, "Active" },
    136   { M3UA_ASP_IA, "Inactive" },
    137   { M3UA_ASP_AC_ACK, "Active Acknowledgement" },
    138   { M3UA_ASP_IA_ACK, "Inactive Acknowledgement" },
    139   { 0, NULL }
    140 };
    141 
    142 /* Routing Key Management messages */
    143 #define M3UA_RKM_REQ 1
    144 #define M3UA_RKM_RSP 2
    145 #define M3UA_RKM_DEREQ 3
    146 #define M3UA_RKM_DERSP 4
    147 
    148 static const struct tok RoutingKeyMgmtMessages[] = {
    149   { M3UA_RKM_REQ, "Registration Request" },
    150   { M3UA_RKM_RSP, "Registration Response" },
    151   { M3UA_RKM_DEREQ, "Deregistration Request" },
    152   { M3UA_RKM_DERSP, "Deregistration Response" },
    153   { 0, NULL }
    154 };
    155 
    156 /* M3UA Parameters */
    157 #define M3UA_PARAM_INFO 0x0004
    158 #define M3UA_PARAM_ROUTING_CTX 0x0006
    159 #define M3UA_PARAM_DIAGNOSTIC 0x0007
    160 #define M3UA_PARAM_HB_DATA 0x0009
    161 #define M3UA_PARAM_TRAFFIC_MODE_TYPE 0x000b
    162 #define M3UA_PARAM_ERROR_CODE 0x000c
    163 #define M3UA_PARAM_STATUS 0x000d
    164 #define M3UA_PARAM_ASP_ID 0x0011
    165 #define M3UA_PARAM_AFFECTED_POINT_CODE 0x0012
    166 #define M3UA_PARAM_CORR_ID 0x0013
    167 
    168 #define M3UA_PARAM_NETWORK_APPEARANCE 0x0200
    169 #define M3UA_PARAM_USER 0x0204
    170 #define M3UA_PARAM_CONGESTION_INDICATION 0x0205
    171 #define M3UA_PARAM_CONCERNED_DST 0x0206
    172 #define M3UA_PARAM_ROUTING_KEY 0x0207
    173 #define M3UA_PARAM_REG_RESULT 0x0208
    174 #define M3UA_PARAM_DEREG_RESULT 0x0209
    175 #define M3UA_PARAM_LOCAL_ROUTING_KEY_ID 0x020a
    176 #define M3UA_PARAM_DST_POINT_CODE 0x020b
    177 #define M3UA_PARAM_SI 0x020c
    178 #define M3UA_PARAM_ORIGIN_POINT_CODE_LIST 0x020e
    179 #define M3UA_PARAM_PROTO_DATA 0x0210
    180 #define M3UA_PARAM_REG_STATUS 0x0212
    181 #define M3UA_PARAM_DEREG_STATUS 0x0213
    182 
    183 static const struct tok ParamName[] = {
    184   { M3UA_PARAM_INFO, "INFO String" },
    185   { M3UA_PARAM_ROUTING_CTX, "Routing Context" },
    186   { M3UA_PARAM_DIAGNOSTIC, "Diagnostic Info" },
    187   { M3UA_PARAM_HB_DATA, "Heartbeat Data" },
    188   { M3UA_PARAM_TRAFFIC_MODE_TYPE, "Traffic Mode Type" },
    189   { M3UA_PARAM_ERROR_CODE, "Error Code" },
    190   { M3UA_PARAM_STATUS, "Status" },
    191   { M3UA_PARAM_ASP_ID, "ASP Identifier" },
    192   { M3UA_PARAM_AFFECTED_POINT_CODE, "Affected Point Code" },
    193   { M3UA_PARAM_CORR_ID, "Correlation ID" },
    194   { M3UA_PARAM_NETWORK_APPEARANCE, "Network Appearance" },
    195   { M3UA_PARAM_USER, "User/Cause" },
    196   { M3UA_PARAM_CONGESTION_INDICATION, "Congestion Indications" },
    197   { M3UA_PARAM_CONCERNED_DST, "Concerned Destination" },
    198   { M3UA_PARAM_ROUTING_KEY, "Routing Key" },
    199   { M3UA_PARAM_REG_RESULT, "Registration Result" },
    200   { M3UA_PARAM_DEREG_RESULT, "Deregistration Result" },
    201   { M3UA_PARAM_LOCAL_ROUTING_KEY_ID, "Local Routing Key Identifier" },
    202   { M3UA_PARAM_DST_POINT_CODE, "Destination Point Code" },
    203   { M3UA_PARAM_SI, "Service Indicators" },
    204   { M3UA_PARAM_ORIGIN_POINT_CODE_LIST, "Originating Point Code List" },
    205   { M3UA_PARAM_PROTO_DATA, "Protocol Data" },
    206   { M3UA_PARAM_REG_STATUS, "Registration Status" },
    207   { M3UA_PARAM_DEREG_STATUS, "Deregistration Status" },
    208   { 0, NULL }
    209 };
    210 
    211 static void
    212 tag_value_print(netdissect_options *ndo,
    213                 const u_char *buf, const uint16_t tag, const uint16_t size)
    214 {
    215   switch (tag) {
    216   case M3UA_PARAM_NETWORK_APPEARANCE:
    217   case M3UA_PARAM_ROUTING_CTX:
    218   case M3UA_PARAM_CORR_ID:
    219     /* buf and size don't include the header */
    220     if (size < 4)
    221       goto corrupt;
    222     ND_TCHECK2(*buf, size);
    223     ND_PRINT((ndo, "0x%08x", EXTRACT_32BITS(buf)));
    224     break;
    225   /* ... */
    226   default:
    227     ND_PRINT((ndo, "(length %u)", size + (u_int)sizeof(struct m3ua_param_header)));
    228     ND_TCHECK2(*buf, size);
    229   }
    230   return;
    231 
    232 corrupt:
    233   ND_PRINT((ndo, "%s", cstr));
    234   ND_TCHECK2(*buf, size);
    235   return;
    236 trunc:
    237   ND_PRINT((ndo, "%s", tstr));
    238 }
    239 
    240 /*
    241  *     0                   1                   2                   3
    242  *     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    243  *    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    244  *    |          Parameter Tag        |       Parameter Length        |
    245  *    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    246  *    \                                                               \
    247  *    /                       Parameter Value                         /
    248  *    \                                                               \
    249  *    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    250  */
    251 static void
    252 m3ua_tags_print(netdissect_options *ndo,
    253                 const u_char *buf, const u_int size)
    254 {
    255   const u_char *p = buf;
    256   int align;
    257   uint16_t hdr_tag;
    258   uint16_t hdr_len;
    259 
    260   while (p < buf + size) {
    261     if (p + sizeof(struct m3ua_param_header) > buf + size)
    262       goto corrupt;
    263     ND_TCHECK2(*p, sizeof(struct m3ua_param_header));
    264     /* Parameter Tag */
    265     hdr_tag = EXTRACT_16BITS(p);
    266     ND_PRINT((ndo, "\n\t\t\t%s: ", tok2str(ParamName, "Unknown Parameter (0x%04x)", hdr_tag)));
    267     /* Parameter Length */
    268     hdr_len = EXTRACT_16BITS(p + 2);
    269     if (hdr_len < sizeof(struct m3ua_param_header))
    270       goto corrupt;
    271     /* Parameter Value */
    272     align = (p + hdr_len - buf) % 4;
    273     align = align ? 4 - align : 0;
    274     ND_TCHECK2(*p, hdr_len + align);
    275     tag_value_print(ndo, p, hdr_tag, hdr_len - sizeof(struct m3ua_param_header));
    276     p += hdr_len + align;
    277   }
    278   return;
    279 
    280 corrupt:
    281   ND_PRINT((ndo, "%s", cstr));
    282   ND_TCHECK2(*buf, size);
    283   return;
    284 trunc:
    285   ND_PRINT((ndo, "%s", tstr));
    286 }
    287 
    288 /*
    289  *     0                   1                   2                   3
    290  *     0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
    291  *    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    292  *    |    Version    |   Reserved    | Message Class | Message Type  |
    293  *    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    294  *    |                        Message Length                         |
    295  *    +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
    296  *    \                                                               \
    297  *    /                                                               /
    298  */
    299 void
    300 m3ua_print(netdissect_options *ndo,
    301            const u_char *buf, const u_int size)
    302 {
    303   const struct m3ua_common_header *hdr = (const struct m3ua_common_header *) buf;
    304   const struct tok *dict;
    305 
    306   /* size includes the header */
    307   if (size < sizeof(struct m3ua_common_header))
    308     goto corrupt;
    309   ND_TCHECK(*hdr);
    310   if (hdr->v != M3UA_REL_1_0)
    311     return;
    312 
    313   dict =
    314     hdr->msg_class == M3UA_MSGC_MGMT     ? MgmtMessages :
    315     hdr->msg_class == M3UA_MSGC_TRANSFER ? TransferMessages :
    316     hdr->msg_class == M3UA_MSGC_SSNM     ? SS7Messages :
    317     hdr->msg_class == M3UA_MSGC_ASPSM    ? ASPStateMessages :
    318     hdr->msg_class == M3UA_MSGC_ASPTM    ? ASPTrafficMessages :
    319     hdr->msg_class == M3UA_MSGC_RKM      ? RoutingKeyMgmtMessages :
    320     NULL;
    321 
    322   ND_PRINT((ndo, "\n\t\t%s", tok2str(MessageClasses, "Unknown message class %i", hdr->msg_class)));
    323   if (dict != NULL)
    324     ND_PRINT((ndo, " %s Message", tok2str(dict, "Unknown (0x%02x)", hdr->msg_type)));
    325 
    326   if (size != EXTRACT_32BITS(&hdr->len))
    327     ND_PRINT((ndo, "\n\t\t\t@@@@@@ Corrupted length %u of message @@@@@@", EXTRACT_32BITS(&hdr->len)));
    328   else
    329     m3ua_tags_print(ndo, buf + sizeof(struct m3ua_common_header), EXTRACT_32BITS(&hdr->len) - sizeof(struct m3ua_common_header));
    330   return;
    331 
    332 corrupt:
    333   ND_PRINT((ndo, "%s", cstr));
    334   ND_TCHECK2(*buf, size);
    335   return;
    336 trunc:
    337   ND_PRINT((ndo, "%s", tstr));
    338 }
    339 
    340