2 * Definitions for protocol display
4 * $Id: proto.h,v 1.65 2004/05/10 14:02:17 ulfl Exp $
6 * Ethereal - Network traffic analyzer
7 * By Gerald Combs <gerald@ethereal.com>
8 * Copyright 1998 Gerald Combs
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License
12 * as published by the Free Software Foundation; either version 2
13 * of the License, or (at your option) any later version.
15 * This program is distributed in the hope that it will be useful,
16 * but WITHOUT ANY WARRANTY; without even the implied warranty of
17 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 * GNU General Public License for more details.
20 * You should have received a copy of the GNU General Public License
21 * along with this program; if not, write to the Free Software
22 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
39 #include "ftypes/ftypes.h"
41 /* The header-field index for the special text pseudo-field */
42 extern int hf_text_only;
46 #define ITEM_LABEL_LENGTH 240
48 /* In order to make a const value_string[] look like a value_string*, I
50 #define VALS(x) (const struct _value_string*)(x)
52 /* ... and similarly for bitfield strings */
53 #define TFS(x) (const struct true_false_string*)(x)
56 typedef struct _protocol protocol_t;
58 /* check protocol activation */
59 #define CHECK_DISPLAY_AS_X(x_handle,index, tvb, pinfo, tree) { \
60 if (!proto_is_protocol_enabled(find_protocol_by_id(index))) { \
61 call_dissector(x_handle,tvb, pinfo, tree); \
66 /* values for header_field_info.display */
74 typedef struct _header_field_info header_field_info;
76 /* information describing a header field */
77 struct _header_field_info {
78 /* ---------- set by dissector --------- */
79 char *name; /* full name of this field */
80 char *abbrev; /* abbreviated name of this field */
81 enum ftenum type; /* field type, one of FT_ (from ftypes.h) */
82 int display; /* one of BASE_, or number of field bits for FT_BOOLEAN */
83 const void *strings; /* val_string or true_false_string for FT_BOOLEAN, typically VALS() or TFS() */
84 guint32 bitmask; /* FT_BOOLEAN: bitmask of interesting bits */
85 char *blurb; /* Brief description of field. */
87 /* ------- set by proto routines (prefilled by HFILL macro, see below) ------ */
88 int id; /* Field ID */
89 int parent; /* parent protocol */
90 int bitshift; /* bits to shift */
91 header_field_info *same_name_next; /* Link to next hfinfo with same abbrev*/
92 header_field_info *same_name_prev; /* Link to previous hfinfo with same abbrev*/
96 * HFILL initializes all the "set by proto routines" fields in a
97 * "header_field_info"; if new fields are added or removed, it should
98 * be changed as necessary.
100 #define HFILL 0, 0, 0, NULL, NULL
102 /* Used when registering many fields at once */
103 typedef struct hf_register_info {
104 int *p_id; /* pointer to int; written to by register() function */
105 header_field_info hfinfo;
109 /* string representation, if one of the proto_tree_add_..._format() functions used */
110 typedef struct _item_label_t {
111 char representation[ITEM_LABEL_LENGTH];
115 /* Contains the field information for the proto_item. */
116 typedef struct field_info {
117 header_field_info *hfinfo; /* pointer to registered field information */
118 gint start; /* current start of data */
119 gint length; /* current data length of item */
120 gint tree_type; /* ETT_ */
121 item_label_t *rep; /* string for GUI tree */
122 int flags; /* one of FI_ */
123 tvbuff_t *ds_tvb; /* data source tvbuff */
128 /* flags for field_info.flags (must be or'ed together) */
129 #define FI_HIDDEN 0x0001
130 #define FI_GENERATED 0x0002
132 /* convenience macros to manipulate flags field */
133 #define FI_GET_FLAG(fi, flag) (fi->flags & flag)
134 #define FI_SET_FLAG(fi, flag) (fi->flags = fi->flags | flag)
138 /* One of these exists for the entire protocol tree. Each proto_node
139 * in the protocol tree points to the same copy. */
141 GHashTable *interesting_hfids;
145 /* Each proto_tree, proto_item is one of these. */
146 typedef struct _proto_node {
147 struct _proto_node *first_child;
148 struct _proto_node *last_child;
149 struct _proto_node *next;
150 struct _proto_node *parent;
152 tree_data_t *tree_data;
155 typedef proto_node proto_tree;
156 typedef proto_node proto_item;
159 /* indicate that this field should not be shown by Ethereal (used for filtering only) */
160 #define PROTO_ITEM_IS_HIDDEN(proto_item) \
161 ((proto_item) ? FI_GET_FLAG(proto_item->finfo, FI_HIDDEN) : 0)
162 #define PROTO_ITEM_SET_HIDDEN(proto_item) \
163 ((proto_item) ? FI_SET_FLAG(proto_item->finfo, FI_HIDDEN) : 0)
164 /* indicate that this field is generated by Ethereal (and not inside the packet data) */
165 #define PROTO_ITEM_IS_GENERATED(proto_item) \
166 ((proto_item) ? FI_GET_FLAG(proto_item->finfo, FI_GENERATED) : 0)
167 #define PROTO_ITEM_SET_GENERATED(proto_item) \
168 ((proto_item) ? FI_SET_FLAG(proto_item->finfo, FI_GENERATED) : 0)
171 typedef void (*proto_tree_foreach_func)(proto_node *, gpointer);
173 extern void proto_tree_children_foreach(proto_tree *tree,
174 proto_tree_foreach_func func, gpointer data);
176 /* Retrieve the field_info from a proto_item */
177 #define PITEM_FINFO(proto_item) ((proto_item)->finfo)
179 /* Retrieve the tree_data_t from a proto_tree */
180 #define PTREE_DATA(proto_tree) ((proto_tree)->tree_data)
182 /* Sets up memory used by proto routines. Called at program startup */
183 extern void proto_init(const char *plugin_dir,
184 void (register_all_protocols)(void), void (register_all_handoffs)(void));
186 /* Frees memory used by proto routines. Called at program shutdown */
187 extern void proto_cleanup(void);
191 /* Create a subtree under an existing item; returns tree pointer */
192 extern proto_tree* proto_item_add_subtree(proto_item *ti, gint idx);
194 /* Get a subtree under an item; returns tree pointer */
195 extern proto_tree* proto_item_get_subtree(proto_item *ti);
197 /* Get a parent item; returns item pointer */
198 extern proto_item* proto_item_get_parent(proto_item *ti);
200 /* Get Nth generation parent item; returns item pointer */
201 extern proto_item* proto_item_get_parent_nth(proto_item *ti, int gen);
203 /* Set text of proto_item after having already been created. */
205 extern void proto_item_set_text(proto_item *ti, const char *format, ...)
206 __attribute__((format (printf, 2, 3)));
208 extern void proto_item_set_text(proto_item *ti, const char *format, ...);
211 /* Append to text of proto_item after having already been created. */
213 extern void proto_item_append_text(proto_item *ti, const char *format, ...)
214 __attribute__((format (printf, 2, 3)));
216 extern void proto_item_append_text(proto_item *ti, const char *format, ...);
219 /* Set length of proto_item after having already been created. */
220 extern void proto_item_set_len(proto_item *ti, gint length);
223 * Sets the length of the item based on its start and on the specified
224 * offset, which is the offset past the end of the item; as the start
225 * in the item is relative to the beginning of the data source tvbuff,
226 * we need to pass in a tvbuff - the end offset is relative to the beginning
229 extern void proto_item_set_end(proto_item *pi, tvbuff_t *tvb, gint end);
231 /* Get length of proto_item. Useful after using proto_tree_add_item()
232 * to add a variable-length field (e.g., FT_NSTRING_UINT8) */
233 extern int proto_item_get_len(proto_item *ti);
237 /* Creates new proto_tree root */
238 extern proto_tree* proto_tree_create_root(void);
240 /* Clear memory for entry proto_tree. Clears proto_tree struct also. */
241 extern void proto_tree_free(proto_tree *tree);
244 proto_tree_set_visible(proto_tree *tree, gboolean visible);
246 /* Mark a field/protocol ID as "interesting". */
248 proto_tree_prime_hfid(proto_tree *tree, int hfid);
250 /* Get a parent item of subtree; returns item pointer */
251 extern proto_item* proto_tree_get_parent(proto_tree *tree);
254 /* GNUC has the ability to check format strings that follow the syntax used in printf and others. */
255 /* Hide the differences between different compilers in this GNUC_FORMAT_CHECK macro. */
256 /* XXX - as this check is also done at some other places too, move this macro to a more central place? */
258 #define GNUC_FORMAT_CHECK(archetype, string_index, first_to_check) __attribute__((format (archetype, string_index, first_to_check)))
260 #define GNUC_FORMAT_CHECK(archetype, string_index, first_to_check)
264 /* Add an item to a proto_tree, using the text label registered to that item;
265 the item is extracted from the tvbuff handed to it. */
267 proto_tree_add_item(proto_tree *tree, int hfindex, tvbuff_t *tvb,
268 gint start, gint length, gboolean little_endian);
271 proto_tree_add_item_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb,
272 gint start, gint length, gboolean little_endian);
274 /* Add a FT_NONE to a proto_tree */
276 proto_tree_add_none_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
277 gint length, const char *format, ...) GNUC_FORMAT_CHECK(printf,6,7);
279 /* Add a FT_PROTOCOL to a proto_tree */
281 proto_tree_add_protocol_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
282 gint length, const char *format, ...) GNUC_FORMAT_CHECK(printf,6,7);
284 /* Add a FT_BYTES to a proto_tree */
286 proto_tree_add_bytes(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
287 gint length, const guint8* start_ptr);
290 proto_tree_add_bytes_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
291 gint length, const guint8* start_ptr);
294 proto_tree_add_bytes_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
295 gint length, const guint8* start_ptr, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
297 /* Add a FT_*TIME to a proto_tree */
299 proto_tree_add_time(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
300 gint length, nstime_t* value_ptr);
303 proto_tree_add_time_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
304 gint length, nstime_t* value_ptr);
307 proto_tree_add_time_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
308 gint length, nstime_t* value_ptr, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
310 /* Add a FT_IPXNET to a proto_tree */
312 proto_tree_add_ipxnet(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
313 gint length, guint32 value);
316 proto_tree_add_ipxnet_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
317 gint length, guint32 value);
320 proto_tree_add_ipxnet_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
321 gint length, guint32 value, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
323 /* Add a FT_IPv4 to a proto_tree */
325 proto_tree_add_ipv4(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
326 gint length, guint32 value);
329 proto_tree_add_ipv4_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
330 gint length, guint32 value);
333 proto_tree_add_ipv4_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
334 gint length, guint32 value, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
336 /* Add a FT_IPv6 to a proto_tree */
338 proto_tree_add_ipv6(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
339 gint length, const guint8* value_ptr);
342 proto_tree_add_ipv6_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
343 gint length, const guint8* value_ptr);
346 proto_tree_add_ipv6_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
347 gint length, const guint8* value_ptr, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
349 /* Add a FT_ETHER to a proto_tree */
351 proto_tree_add_ether(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
352 gint length, const guint8* value);
355 proto_tree_add_ether_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
356 gint length, const guint8* value);
359 proto_tree_add_ether_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
360 gint length, const guint8* value, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
362 /* Add a FT_STRING to a proto_tree */
364 proto_tree_add_string(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
365 gint length, const char* value);
368 proto_tree_add_string_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
369 gint length, const char* value);
372 proto_tree_add_string_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
373 gint length, const char* value, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
376 proto_item_append_string(proto_item *pi, const char *str);
378 /* Add a FT_BOOLEAN to a proto_tree */
380 proto_tree_add_boolean(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
381 gint length, guint32 value);
384 proto_tree_add_boolean_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
385 gint length, guint32 value);
388 proto_tree_add_boolean_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
389 gint length, guint32 value, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
391 /* Add a FT_FLOAT to a proto_tree */
393 proto_tree_add_float(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
394 gint length, float value);
397 proto_tree_add_float_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
398 gint length, float value);
401 proto_tree_add_float_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
402 gint length, float value, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
404 /* Add a FT_DOUBLE to a proto_tree */
406 proto_tree_add_double(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
407 gint length, double value);
410 proto_tree_add_double_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
411 gint length, double value);
414 proto_tree_add_double_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
415 gint length, double value, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
417 /* Add any FT_UINT* to a proto_tree */
419 proto_tree_add_uint(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
420 gint length, guint32 value);
423 proto_tree_add_uint_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
424 gint length, guint32 value);
427 proto_tree_add_uint_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
428 gint length, guint32 value, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
430 /* Add any FT_INT* to a proto_tree */
432 proto_tree_add_int(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
433 gint length, gint32 value);
436 proto_tree_add_int_hidden(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
437 gint length, gint32 value);
440 proto_tree_add_int_format(proto_tree *tree, int hfindex, tvbuff_t *tvb, gint start,
441 gint length, gint32 value, const char *format, ...) GNUC_FORMAT_CHECK(printf,7,8);
443 /* Add a text-only node to the proto_tree */
445 proto_tree_add_text(proto_tree *tree, tvbuff_t *tvb, gint start, gint length, const char *format,
446 ...) GNUC_FORMAT_CHECK(printf,5,6);
449 proto_tree_add_text_valist(proto_tree *tree, tvbuff_t *tvb, gint start,
450 gint length, const char *format, va_list ap);
453 /* Useful for quick debugging. Also sends string to STDOUT, so don't
454 * leave call to this function in production code. */
456 proto_tree_add_debug_text(proto_tree *tree, const char *format,
457 ...) GNUC_FORMAT_CHECK(printf,2,3);
461 proto_item_fill_label(field_info *fi, gchar *label_str);
466 proto_register_protocol(char *name, char *short_name, char *filter_name);
469 proto_register_field_array(int parent, hf_register_info *hf, int num_records);
472 proto_register_subtree_array(gint **indices, int num_indices);
474 /* Returns number of items (protocols or header fields) registered. */
475 extern int proto_registrar_n(void);
477 /* Returns char* to name for item # n (0-indexed) */
478 extern char* proto_registrar_get_name(int n);
480 /* Returns char* to abbrev for item # n (0-indexed) */
481 extern char* proto_registrar_get_abbrev(int n);
483 /* get the header field information based upon a field or protocol id */
484 extern header_field_info* proto_registrar_get_nth(guint hfindex);
486 /* get the header field information based upon a field name */
487 extern header_field_info* proto_registrar_get_byname(char *field_name);
489 /* Returns enum ftenum for item # n */
490 extern int proto_registrar_get_ftype(int n);
492 /* Returns parent protocol for item # n.
493 * Returns -1 if item _is_ a protocol */
494 extern int proto_registrar_get_parent(int n);
496 /* Is item #n a protocol? */
497 extern gboolean proto_registrar_is_protocol(int n);
499 /* Is protocol's decoding enabled ? */
500 extern gboolean proto_is_protocol_enabled(protocol_t *protocol);
502 /* Can item #n decoding be disabled? */
503 extern gboolean proto_can_toggle_protocol(int proto_id);
505 /* Routines to use to iterate over the protocols and their fields;
506 * they return the item number of the protocol in question or the
507 * appropriate hfinfo pointer, and keep state in "*cookie". */
508 extern int proto_get_first_protocol(void **cookie);
509 extern int proto_get_next_protocol(void **cookie);
510 extern header_field_info *proto_get_first_protocol_field(int proto_id, void **cookle);
511 extern header_field_info *proto_get_next_protocol_field(void **cookle);
513 /* Given a protocol's "protocol_t", return its proto_id */
514 extern int proto_get_id(protocol_t *protocol);
516 /* Given a protocol's filter_name, return its proto_id */
517 extern int proto_get_id_by_filter_name(gchar* filter_name);
519 /* Given a protocol's item number, find the "protocol_t" structure for it */
520 extern protocol_t *find_protocol_by_id(int proto_id);
522 /* Given a protocol's item number, return its name. */
523 extern char *proto_get_protocol_name(int n);
525 /* Given a protocol's "protocol_t", return its short name. */
526 extern char *proto_get_protocol_short_name(protocol_t *protocol);
528 /* Given a protocol's item number, return its filter name. */
529 extern char *proto_get_protocol_filter_name(int proto_id);
531 /* Enable / Disable protocol */
532 extern void proto_set_decoding(int proto_id, gboolean enabled);
534 /* Disable disabling/enabling of protocol */
535 extern void proto_set_cant_toggle(int proto_id);
537 /* Get length of registered field according to field type.
538 * 0 means undeterminable at registration time.
539 * -1 means unknown field */
540 extern gint proto_registrar_get_length(int n);
542 /* Checks for existence any protocol or field within a tree.
543 * "Protocols" are assumed to be a child of the [empty] root node.
544 * TRUE = found, FALSE = not found */
545 extern gboolean proto_check_for_protocol_or_field(proto_tree* tree, int id);
547 /* Return GPtrArray* of field_info pointers for all hfindex that appear in
548 * tree. Only works with primed trees, and is fast. */
549 extern GPtrArray* proto_get_finfo_ptr_array(proto_tree *tree, int hfindex);
551 /* Return GPtrArray* of field_info pointers for all hfindex that appear in
552 * tree. Works with any tree, primed or unprimed, and is slower than
553 * proto_get_finfo_ptr_array because it has to search through the tree. */
554 extern GPtrArray* proto_find_finfo(proto_tree *tree, int hfindex);
556 /* Dumps a glossary of the protocol registrations to STDOUT */
557 extern void proto_registrar_dump_protocols(void);
559 /* Dumps a glossary of the protocol and field registrations to STDOUT */
560 extern void proto_registrar_dump_fields(void);
564 /* Points to the first element of an array of Booleans, indexed by
565 a subtree item type; that array element is TRUE if subtrees of
566 an item of that type are to be expanded. With MSVC and a
567 libethereal.dll, we need a special declaration.
569 ETH_VAR_IMPORT gboolean *tree_is_expanded;
571 /* Number of elements in that array. With MSVC and a
572 * libethereal.dll, we need a special declaration.
574 ETH_VAR_IMPORT int num_tree_types;
576 /* glib doesn't have g_ptr_array_len of all things!*/
577 #ifndef g_ptr_array_len
578 #define g_ptr_array_len(a) ((a)->len)
582 hfinfo_bitwidth(header_field_info *hfinfo);
590 * Returns TRUE if we can do a "match selected" on the field, FALSE
594 proto_can_match_selected(field_info *finfo, epan_dissect_t *edt);
597 proto_construct_dfilter_string(field_info *finfo, epan_dissect_t *edt);
600 proto_find_field_from_offset(proto_tree *tree, guint offset, tvbuff_t *tvb);