2 * Routines for distcc dissection
3 * Copyright 2003, Brad Hards <bradh@frogmouth.net>
4 * Copyright 2003, Ronnie Sahlberg, added TCP desegmentation.
8 * Wireshark - Network traffic analyzer
9 * By Gerald Combs <gerald@wireshark.org>
10 * Copyright 1998 Gerald Combs
12 * This program is free software; you can redistribute it and/or
13 * modify it under the terms of the GNU General Public License
14 * as published by the Free Software Foundation; either version 2
15 * of the License, or (at your option) any later version.
17 * This program is distributed in the hope that it will be useful,
18 * but WITHOUT ANY WARRANTY; without even the implied warranty of
19 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 * GNU General Public License for more details.
22 * You should have received a copy of the GNU General Public License
23 * along with this program; if not, write to the Free Software
24 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
26 /* This dissector supports version 1 of the DISTCC protocol */
39 #include <epan/packet.h>
40 #include <epan/strutil.h>
42 #include <epan/prefs.h>
45 static int proto_distcc = -1;
46 static int hf_distcc_version = -1;
47 static int hf_distcc_argc = -1;
48 static int hf_distcc_argv = -1;
49 static int hf_distcc_doti_source = -1;
50 static int hf_distcc_stat = -1;
51 static int hf_distcc_serr = -1;
52 static int hf_distcc_sout = -1;
53 static int hf_distcc_doto_object = -1;
56 static gint ett_distcc = -1;
58 static dissector_handle_t data_handle;
61 static gboolean distcc_desegment = TRUE;
64 #define TCP_PORT_DISTCC 3632
66 static guint glb_distcc_tcp_port = TCP_PORT_DISTCC;
68 extern void proto_reg_handoff_distcc(void);
70 #define CHECK_PDU_LEN(x) \
71 if(parameter>tvb_length_remaining(tvb, offset) || parameter < 1){\
72 len=tvb_length_remaining(tvb, offset);\
73 col_append_str(pinfo->cinfo, COL_INFO, "[Short" x " PDU]");\
75 tvb_ensure_bytes_exist(tvb, offset, len);
78 #define DESEGMENT_TCP(x) \
79 if(distcc_desegment && pinfo->can_desegment){\
80 /* only attempt reassembly if whe have the full segment */\
81 if(tvb_length_remaining(tvb, offset)==tvb_reported_length_remaining(tvb, offset)){\
82 if(parameter>tvb_length_remaining(tvb, offset)){\
83 proto_tree_add_text(tree, tvb, offset-12, -1, "[Short " x " PDU]");\
84 pinfo->desegment_offset=offset-12;\
85 pinfo->desegment_len=parameter-tvb_length_remaining(tvb, offset);\
96 dissect_distcc_dist(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, guint32 parameter)
98 proto_tree_add_uint_format(tree, hf_distcc_version, tvb, offset-12, 12, parameter, "DIST: %d", parameter);
100 col_append_fstr(pinfo->cinfo, COL_INFO, "DIST:%d ", parameter);
106 dissect_distcc_done(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, guint32 parameter)
108 proto_tree_add_uint_format(tree, hf_distcc_version, tvb, offset-12, 12, parameter, "DONE: %d", parameter);
110 col_append_fstr(pinfo->cinfo, COL_INFO, "DONE:%d ", parameter);
116 dissect_distcc_stat(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, guint32 parameter)
118 proto_tree_add_uint_format(tree, hf_distcc_stat, tvb, offset-12, 12, parameter, "STAT: %d", parameter);
120 col_append_fstr(pinfo->cinfo, COL_INFO, "STAT:%d ", parameter);
126 dissect_distcc_argc(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, int offset, guint32 parameter)
128 proto_tree_add_uint_format(tree, hf_distcc_argc, tvb, offset-12, 12, parameter, "ARGC: %d", parameter);
130 col_append_fstr(pinfo->cinfo, COL_INFO, "ARGC:%d ", parameter);
136 dissect_distcc_argv(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, int offset, gint parameter)
143 CHECK_PDU_LEN("ARGV");
145 /* see if we need to desegment the PDU */
146 DESEGMENT_TCP("ARGV");
150 argv_len=len>255?255:len;
151 tvb_memcpy(tvb, argv, offset, argv_len);
154 proto_tree_add_item(tree, hf_distcc_argv, tvb, offset, len, ENC_ASCII|ENC_NA);
156 col_append_fstr(pinfo->cinfo, COL_INFO, "%s ", argv);
159 proto_tree_add_text(tree, tvb, 0, 0, "[Short ARGV PDU]");
165 dissect_distcc_serr(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, int offset, gint parameter)
172 CHECK_PDU_LEN("SERR");
174 /* see if we need to desegment the PDU */
175 DESEGMENT_TCP("SERR");
179 argv_len=len>255?255:len;
180 tvb_memcpy(tvb, argv, offset, argv_len);
183 proto_tree_add_item(tree, hf_distcc_serr, tvb, offset, len, ENC_ASCII|ENC_NA);
185 col_append_fstr(pinfo->cinfo, COL_INFO, "SERR:%s ", argv);
188 proto_tree_add_text(tree, tvb, 0, 0, "[Short SERR PDU]");
194 dissect_distcc_sout(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, int offset, gint parameter)
201 CHECK_PDU_LEN("SOUT");
203 /* see if we need to desegment the PDU */
204 DESEGMENT_TCP("SOUT");
208 argv_len=len>255?255:len;
209 tvb_memcpy(tvb, argv, offset, argv_len);
212 proto_tree_add_item(tree, hf_distcc_sout, tvb, offset, len, ENC_ASCII|ENC_NA);
214 col_append_fstr(pinfo->cinfo, COL_INFO, "SOUT:%s ", argv);
217 proto_tree_add_text(tree, tvb, 0, 0, "[Short SOUT PDU]");
224 dissect_distcc_doti(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, gint parameter)
229 CHECK_PDU_LEN("DOTI");
231 /* see if we need to desegment the PDU */
232 DESEGMENT_TCP("DOTI");
234 col_append_str(pinfo->cinfo, COL_INFO, "DOTI source ");
236 proto_tree_add_item(tree, hf_distcc_doti_source, tvb, offset, len, ENC_ASCII|ENC_NA);
238 proto_tree_add_text(tree, tvb, 0, 0, "[Short DOTI PDU]");
244 dissect_distcc_doto(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, int offset, gint parameter)
249 CHECK_PDU_LEN("DOTO");
251 /* see if we need to desegment the PDU */
252 DESEGMENT_TCP("DOTO");
254 col_append_str(pinfo->cinfo, COL_INFO, "DOTO object ");
256 proto_tree_add_item(tree, hf_distcc_doto_object, tvb, offset, len, ENC_NA);
258 proto_tree_add_text(tree, tvb, 0, 0, "[Short DOTO PDU]");
265 /* Packet dissection routine called by tcp (& udp) when port 3632 detected */
267 dissect_distcc(tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree)
270 proto_tree *tree=NULL;
271 proto_item *item=NULL;
276 col_set_str(pinfo->cinfo, COL_PROTOCOL, "DISTCC ");
278 col_clear(pinfo->cinfo, COL_INFO);
281 item = proto_tree_add_item(parent_tree, proto_distcc, tvb, offset,
283 tree = proto_item_add_subtree(item, ett_distcc);
287 /* we must have at least 12 bytes so we can read the
288 token and the parameter */
289 if(tvb_length_remaining(tvb, offset)<12){
294 tvb_memcpy(tvb, token, offset, 4);
297 /* read the parameter */
298 if (sscanf(tvb_get_ptr(tvb, offset, 8), "%08x", ¶meter) != 1)
302 if(!strncmp(token, "DIST", 4)){
303 offset=dissect_distcc_dist(tvb, pinfo, tree, offset, parameter);
304 } else if(!strncmp(token, "ARGC", 4)){
305 offset=dissect_distcc_argc(tvb, pinfo, tree, offset, parameter);
306 } else if(!strncmp(token, "ARGV", 4)){
307 offset=dissect_distcc_argv(tvb, pinfo, tree, offset, parameter);
308 } else if(!strncmp(token, "DOTI", 4)){
309 offset=dissect_distcc_doti(tvb, pinfo, tree, offset, parameter);
310 } else if(!strncmp(token, "DONE", 4)){
311 offset=dissect_distcc_done(tvb, pinfo, tree, offset, parameter);
312 } else if(!strncmp(token, "STAT", 4)){
313 offset=dissect_distcc_stat(tvb, pinfo, tree, offset, parameter);
314 } else if(!strncmp(token, "SERR", 4)){
315 offset=dissect_distcc_serr(tvb, pinfo, tree, offset, parameter);
316 } else if(!strncmp(token, "SOUT", 4)){
317 offset=dissect_distcc_sout(tvb, pinfo, tree, offset, parameter);
318 } else if(!strncmp(token, "DOTO", 4)){
319 offset=dissect_distcc_doto(tvb, pinfo, tree, offset, parameter);
321 call_dissector(data_handle, tvb, pinfo, tree);
329 /* Register protocol with Wireshark. */
331 proto_register_distcc(void)
333 static hf_register_info hf[] = {
335 {"DISTCC Version", "distcc.version",
336 FT_UINT32, BASE_DEC, NULL, 0x0, NULL, HFILL }
339 {"ARGC", "distcc.argc",
340 FT_UINT32, BASE_DEC, NULL, 0x0, "Number of arguments", HFILL }
343 {"ARGV", "distcc.argv",
344 FT_STRING, BASE_NONE, NULL, 0x0, "ARGV argument", HFILL }
346 {&hf_distcc_doti_source,
347 {"Source", "distcc.doti_source",
348 FT_STRING, BASE_NONE, NULL, 0x0, "DOTI Preprocessed Source File (.i)", HFILL }
351 {"Status", "distcc.status",
352 FT_UINT32, BASE_DEC, NULL, 0x0, "Unix wait status for command completion", HFILL }
355 {"SERR", "distcc.serr",
356 FT_STRING, BASE_NONE, NULL, 0x0, "STDERR output", HFILL }
359 {"SOUT", "distcc.sout",
360 FT_STRING, BASE_NONE, NULL, 0x0, "STDOUT output", HFILL }
362 {&hf_distcc_doto_object,
363 {"Object", "distcc.doto_object",
364 FT_BYTES, BASE_NONE, NULL, 0x0, "DOTO Compiled object file (.o)", HFILL }
369 static gint *ett[] = {
373 module_t *distcc_module;
375 proto_distcc = proto_register_protocol("Distcc Distributed Compiler",
377 proto_register_field_array(proto_distcc, hf, array_length(hf));
378 proto_register_subtree_array(ett, array_length(ett));
380 distcc_module = prefs_register_protocol(proto_distcc,
381 proto_reg_handoff_distcc);
382 prefs_register_uint_preference(distcc_module, "tcp.port",
384 "Set the TCP port for DISTCC messages",
386 &glb_distcc_tcp_port);
387 prefs_register_bool_preference(distcc_module, "desegment_distcc_over_tcp",
388 "Reassemble DISTCC-over-TCP messages\nspanning multiple TCP segments",
389 "Whether the DISTCC dissector should reassemble messages spanning multiple TCP segments."
390 " To use this option, you must also enable \"Allow subdissectors to reassemble TCP streams\" in the TCP protocol settings.",
395 proto_reg_handoff_distcc(void)
397 static gboolean registered_dissector = FALSE;
398 static int distcc_tcp_port;
399 static dissector_handle_t distcc_handle;
401 if (!registered_dissector) {
403 * We haven't registered the dissector yet; get a handle
406 distcc_handle = create_dissector_handle(dissect_distcc,
408 data_handle = find_dissector("data");
409 registered_dissector = TRUE;
412 * We've registered the dissector with a TCP port number
413 * of "distcc_tcp_port"; we might be changing the TCP port
414 * number, so remove that registration.
416 dissector_delete_uint("tcp.port", distcc_tcp_port, distcc_handle);
418 distcc_tcp_port = glb_distcc_tcp_port;
419 dissector_add_uint("tcp.port", distcc_tcp_port, distcc_handle);