2 * Routines for BPDU (Spanning Tree Protocol) disassembly
4 * $Id: packet-bpdu.c,v 1.9 2000/04/17 00:32:37 guy Exp $
6 * Copyright 1999 Christophe Tronche <ch.tronche@computer.org>
8 * Ethereal - Network traffic analyzer
9 * By Gerald Combs <gerald@zing.org>
10 * Copyright 1998 Gerald Combs
13 * This program is free software; you can redistribute it and/or
14 * modify it under the terms of the GNU General Public License
15 * as published by the Free Software Foundation; either version 2
16 * of the License, or (at your option) any later version.
18 * This program is distributed in the hope that it will be useful,
19 * but WITHOUT ANY WARRANTY; without even the implied warranty of
20 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
21 * GNU General Public License for more details.
23 * You should have received a copy of the GNU General Public License
24 * along with this program; if not, write to the Free Software
25 * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
32 #ifdef HAVE_SYS_TYPES_H
33 # include <sys/types.h>
36 #ifdef HAVE_NETINET_IN_H
37 # include <netinet/in.h>
47 /* Offsets of fields within a BPDU */
49 #define BPDU_IDENTIFIER 0
50 #define BPDU_VERSION_IDENTIFIER 2
53 #define BPDU_ROOT_IDENTIFIER 5
54 #define BPDU_ROOT_PATH_COST 13
55 #define BPDU_BRIDGE_IDENTIFIER 17
56 #define BPDU_PORT_IDENTIFIER 25
57 #define BPDU_MESSAGE_AGE 27
58 #define BPDU_MAX_AGE 29
59 #define BPDU_HELLO_TIME 31
60 #define BPDU_FORWARD_DELAY 33
62 static int proto_bpdu = -1;
63 static int hf_bpdu_proto_id = -1;
64 static int hf_bpdu_version_id = -1;
65 static int hf_bpdu_type = -1;
66 static int hf_bpdu_flags = -1;
67 static int hf_bpdu_root_mac = -1;
68 static int hf_bpdu_root_cost = -1;
69 static int hf_bpdu_bridge_mac = -1;
70 static int hf_bpdu_port_id = -1;
71 static int hf_bpdu_msg_age = -1;
72 static int hf_bpdu_max_age = -1;
73 static int hf_bpdu_hello_time = -1;
74 static int hf_bpdu_forward_delay = -1;
76 static gint ett_bpdu = -1;
78 void dissect_bpdu(const u_char *pd, int offset, frame_data *fd, proto_tree *tree) {
79 guint16 protocol_identifier;
80 guint8 protocol_version_identifier;
83 guint16 root_identifier_bridge_priority;
84 gchar *root_identifier_mac;
85 guint32 root_path_cost;
86 guint16 bridge_identifier_bridge_priority;
87 gchar *bridge_identifier_mac;
88 guint16 port_identifier;
94 proto_tree *bpdu_tree;
99 bpdu_type = (guint8) bpdu[BPDU_TYPE];
100 flags = (guint8) bpdu[BPDU_FLAGS];
101 root_identifier_bridge_priority = pntohs(bpdu + BPDU_ROOT_IDENTIFIER);
102 root_identifier_mac = ether_to_str(bpdu + BPDU_ROOT_IDENTIFIER + 2);
103 root_path_cost = pntohl(bpdu + BPDU_ROOT_PATH_COST);
104 port_identifier = pntohs(bpdu + BPDU_PORT_IDENTIFIER);
106 if (check_col(fd, COL_PROTOCOL)) {
107 col_add_str(fd, COL_PROTOCOL, "STP"); /* Spanning Tree Protocol */
110 if (check_col(fd, COL_INFO)) {
112 col_add_fstr(fd, COL_INFO, "Conf. %sRoot = %d/%s Cost = %d Port = 0x%04x",
113 flags & 0x1 ? "TC + " : "",
114 root_identifier_bridge_priority, root_identifier_mac, root_path_cost,
116 else if (bpdu_type == 0x80)
117 col_add_fstr(fd, COL_INFO, "Topology Change Notification");
121 protocol_identifier = pntohs(bpdu + BPDU_IDENTIFIER);
122 protocol_version_identifier = (guint8) bpdu[BPDU_VERSION_IDENTIFIER];
124 ti = proto_tree_add_protocol_format(tree, proto_bpdu, offset, 35,
125 "Spanning Tree Protocol");
126 bpdu_tree = proto_item_add_subtree(ti, ett_bpdu);
127 proto_tree_add_uint_format(bpdu_tree, hf_bpdu_proto_id,
128 offset + BPDU_IDENTIFIER, 2,
130 "Protocol Identifier: 0x%04x (%s)",
132 protocol_identifier == 0 ?
133 "Spanning Tree" : "Unknown Protocol");
135 proto_tree_add_item(bpdu_tree, hf_bpdu_version_id,
136 offset + BPDU_VERSION_IDENTIFIER, 1,
137 protocol_version_identifier);
138 if (protocol_version_identifier != 0)
139 proto_tree_add_text(bpdu_tree, offset + BPDU_VERSION_IDENTIFIER, 1, " (Warning: this version of packet-bpdu only knows about version = 0)");
140 proto_tree_add_uint_format(bpdu_tree, hf_bpdu_type,
141 offset + BPDU_TYPE, 1,
143 "BPDU Type: 0x%02x (%s)",
145 bpdu_type == 0 ? "Configuration" :
146 bpdu_type == 0x80 ? "Topology Change Notification" : "Unknown");
148 if (bpdu_type != 0) {
149 dissect_data(pd, offset + BPDU_TYPE + 1, fd, tree);
153 bridge_identifier_bridge_priority = pntohs(bpdu + BPDU_BRIDGE_IDENTIFIER);
154 bridge_identifier_mac = ether_to_str(bpdu + BPDU_BRIDGE_IDENTIFIER + 2);
155 message_age = pntohs(bpdu + BPDU_MESSAGE_AGE) / 256.0;
156 max_age = pntohs(bpdu + BPDU_MAX_AGE) / 256.0;
157 hello_time = pntohs(bpdu + BPDU_HELLO_TIME) / 256.0;
158 forward_delay = pntohs(bpdu + BPDU_FORWARD_DELAY) / 256.0;
160 proto_tree_add_item(bpdu_tree, hf_bpdu_flags,
161 offset + BPDU_FLAGS, 1, flags);
163 proto_tree_add_text(bpdu_tree, offset + BPDU_FLAGS, 1, " 1... .... Topology Change Acknowledgment");
165 proto_tree_add_text(bpdu_tree, offset + BPDU_FLAGS, 1, " .... ...1 Topology Change");
167 proto_tree_add_item_hidden(bpdu_tree, hf_bpdu_root_mac,
168 offset + BPDU_ROOT_IDENTIFIER + 2, 6,
169 bpdu + BPDU_ROOT_IDENTIFIER + 2);
170 proto_tree_add_text(bpdu_tree,
171 offset + BPDU_ROOT_IDENTIFIER, 8,
172 "Root Identifier: %d / %s",
173 root_identifier_bridge_priority,
174 root_identifier_mac);
175 proto_tree_add_item(bpdu_tree, hf_bpdu_root_cost,
176 offset + BPDU_ROOT_PATH_COST, 4,
178 proto_tree_add_text(bpdu_tree,
179 offset + BPDU_BRIDGE_IDENTIFIER, 8,
180 "Bridge Identifier: %d / %s",
181 bridge_identifier_bridge_priority,
182 bridge_identifier_mac);
183 proto_tree_add_item_hidden(bpdu_tree, hf_bpdu_bridge_mac,
184 offset + BPDU_BRIDGE_IDENTIFIER + 2, 6,
185 bpdu + BPDU_BRIDGE_IDENTIFIER + 2);
186 proto_tree_add_item(bpdu_tree, hf_bpdu_port_id,
187 offset + BPDU_PORT_IDENTIFIER, 2,
189 proto_tree_add_item(bpdu_tree, hf_bpdu_msg_age,
190 offset + BPDU_MESSAGE_AGE, 2,
192 proto_tree_add_item(bpdu_tree, hf_bpdu_max_age,
193 offset + BPDU_MAX_AGE, 2,
195 proto_tree_add_item(bpdu_tree, hf_bpdu_hello_time,
196 offset + BPDU_HELLO_TIME, 2,
198 proto_tree_add_item(bpdu_tree, hf_bpdu_forward_delay,
199 offset + BPDU_FORWARD_DELAY, 2,
205 proto_register_bpdu(void)
208 static hf_register_info hf[] = {
210 { "Protocol Identifier", "stp.protocol",
211 FT_UINT16, BASE_HEX, NULL, 0x0,
213 { &hf_bpdu_version_id,
214 { "Protocol Version Identifier", "stp.version",
215 FT_UINT8, BASE_DEC, NULL, 0x0,
218 { "BPDU type", "stp.type",
219 FT_UINT8, BASE_HEX, NULL, 0x0,
222 { "BPDU flags", "stp.flags",
223 FT_UINT8, BASE_HEX, NULL, 0x0,
226 { "Root Identifier", "stp.root.hw",
227 FT_ETHER, BASE_NONE, NULL, 0x0,
229 { &hf_bpdu_root_cost,
230 { "Root Path Cost", "stp.root.cost",
231 FT_UINT32, BASE_DEC, NULL, 0x0,
233 { &hf_bpdu_bridge_mac,
234 { "Bridge Identifier", "stp.bridge.hw",
235 FT_ETHER, BASE_NONE, NULL, 0x0,
238 { "Port identifier", "stp.port",
239 FT_UINT16, BASE_HEX, NULL, 0x0,
242 { "Message Age", "stp.msg_age",
243 FT_DOUBLE, BASE_NONE, NULL, 0x0,
246 { "Max Age", "stp.max_age",
247 FT_DOUBLE, BASE_NONE, NULL, 0x0,
249 { &hf_bpdu_hello_time,
250 { "Hello Time", "stp.hello",
251 FT_DOUBLE, BASE_NONE, NULL, 0x0,
253 { &hf_bpdu_forward_delay,
254 { "Forward Delay", "stp.forward",
255 FT_DOUBLE, BASE_NONE, NULL, 0x0,
258 static gint *ett[] = {
262 proto_bpdu = proto_register_protocol("Spanning Tree Protocol", "stp");
263 proto_register_field_array(proto_bpdu, hf, array_length(hf));
264 proto_register_subtree_array(ett, array_length(ett));
268 proto_reg_handoff_bpdu(void)
270 dissector_add("llc.dsap", SAP_BPDU, dissect_bpdu);