packet-radius.c

   1 /* packet-radius.c
   2  * Routines for RADIUS packet disassembly
   3  * Copyright 1999 Johan Feyaerts
   4  *
   5  * $Id: packet-radius.c,v 1.34 2001/09/28 18:50:18 guy Exp $
   6  *
   7  * Ethereal - Network traffic analyzer
   8  * By Gerald Combs <gerald@ethereal.com>
   9  * Copyright 1998 Gerald Combs
  10  *
  11  * This program is free software; you can redistribute it and/or
  12  * modify it under the terms of the GNU General Public License
  13  * as published by the Free Software Foundation; either version 2
  14  * of the License, or (at your option) any later version.
  15  *
  16  * This program is distributed in the hope that it will be useful,
  17  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  18  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  19  * GNU General Public License for more details.
  20  *
  21  * You should have received a copy of the GNU General Public License
  22  * along with this program; if not, write to the Free Software
  23  * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
  24  */
  25
  26 #ifdef HAVE_CONFIG_H
  27 #include "config.h"
  28 #endif
  29
  30 #ifdef HAVE_SYS_TYPES_H
  31 # include <sys/types.h>
  32 #endif
  33
  34 #ifdef HAVE_NETINET_IN_H
  35 #include <netinet/in.h>
  36 #endif
  37
  38 #include <stdio.h>
  39 #include <stdlib.h>
  40 #include <string.h>
  41 #include <ctype.h>
  42 #include <glib.h>
  43 #include <time.h>
  44 #include "packet.h"
  45 #include "resolv.h"
  46
  47 static int proto_radius = -1;
  48 static int hf_radius_length = -1;
  49 static int hf_radius_code = -1;
  50 static int hf_radius_id =-1;
  51
  52 static gint ett_radius = -1;
  53 static gint ett_radius_avp = -1;
  54
  55 #define UDP_PORT_RADIUS         1645
  56 #define UDP_PORT_RADIUS_NEW     1812
  57 #define UDP_PORT_RADACCT        1646
  58 #define UDP_PORT_RADACCT_NEW    1813
  59
  60 typedef struct _e_radiushdr {
  61         guint8 rh_code;
  62         guint8 rh_ident;
  63         guint16 rh_pktlength;
  64 } e_radiushdr;
  65
  66 typedef struct _e_avphdr {
  67         guint8 avp_type;
  68         guint8 avp_length;
  69 } e_avphdr;
  70
  71 typedef struct _value_value_pair {
  72         guint16 val1;
  73         guint16 val2;
  74 } value_value_pair;
  75
  76 #define RADIUS_ACCESS_REQUEST 1
  77 #define RADIUS_ACCESS_ACCEPT  2
  78 #define RADIUS_ACCESS_REJECT  3
  79 #define RADIUS_ACCOUNTING_REQUEST 4
  80 #define RADIUS_ACCOUNTING_RESPONSE 5
  81 #define RADIUS_ACCESS_CHALLENGE 11
  82 #define RADIUS_STATUS_SERVER 12
  83 #define RADIUS_STATUS_CLIENT 13
  84 #define RADIUS_RESERVED 255
  85
  86 #define RD_TP_USER_NAME 1
  87 #define RD_TP_USER_PASSWORD 2
  88 #define RD_TP_CHAP_PASSWORD 3
  89 #define RD_TP_NAS_IP_ADDRESS 4
  90 #define RD_TP_NAS_PORT 5
  91 #define RD_TP_SERVICE_TYPE 6
  92 #define RD_TP_FRAMED_PROTOCOL 7
  93 #define RD_TP_FRAMED_IP_ADDRESS 8
  94 #define RD_TP_FRAMED_IP_NETMASK 9
  95 #define RD_TP_FRAMED_ROUTING 10
  96 #define RD_TP_FILTER_ID 11
  97 #define RD_TP_FRAMED_MTU 12
  98 #define RD_TP_FRAMED_COMPRESSION 13
  99 #define RD_TP_LOGIN_IP_HOST 14
 100 #define RD_TP_LOGIN_SERVICE 15
 101 #define RD_TP_LOGIN_TCP_PORT 16
 102 #define RD_TP_UNASSIGNED 17
 103 #define RD_TP_REPLY_MESSAGE 18
 104 #define RD_TP_CALLBACK_NUMBER 19
 105 #define RD_TP_CALLBACK_ID 20
 106 #define RD_TP_UNASSIGNED2 21
 107 #define RD_TP_FRAMED_ROUTE 22
 108 #define RD_TP_FRAMED_IPX_NETWORK 23
 109 #define RD_TP_STATE 24
 110 #define RD_TP_CLASS 25
 111 #define RD_TP_VENDOR_SPECIFIC 26
 112 #define RD_TP_SESSION_TIMEOUT 27
 113 #define RD_TP_IDLE_TIMEOUT 28
 114 #define RD_TP_TERMINATING_ACTION 29
 115 #define RD_TP_CALLED_STATION_ID 30
 116 #define RD_TP_CALLING_STATION_ID 31
 117 #define RD_TP_NAS_IDENTIFIER 32
 118 #define RD_TP_PROXY_STATE 33
 119 #define RD_TP_LOGIN_LAT_SERVICE 34
 120 #define RD_TP_LOGIN_LAT_NODE 35
 121 #define RD_TP_LOGIN_LAT_GROUP 36
 122 #define RD_TP_FRAMED_APPLETALK_LINK 37
 123 #define RD_TP_FRAMED_APPLETALK_NETWORK 38
 124 #define RD_TP_FRAMED_APPLETALK_ZONE 39
 125 #define RD_TP_ACCT_STATUS_TYPE 40
 126 #define RD_TP_ACCT_DELAY_TIME 41
 127 #define RD_TP_ACCT_INPUT_OCTETS 42
 128 #define RD_TP_ACCT_OUTPUT_OCTETS 43
 129 #define RD_TP_ACCT_SESSION_ID 44
 130 #define RD_TP_ACCT_AUTHENTIC 45
 131 #define RD_TP_ACCT_SESSION_TIME 46
 132 #define RD_TP_ACCT_INPUT_PACKETS 47
 133 #define RD_TP_ACCT_OUTPUT_PACKETS 48
 134 #define RD_TP_ACCT_TERMINATE_CAUSE 49
 135 #define RD_TP_ACCT_MULTI_SESSION_ID 50
 136 #define RD_TP_ACCT_LINK_COUNT 51
 137 #define RD_TP_ACCT_INPUT_GIGAWORDS 52
 138 #define RD_TP_ACCT_OUTPUT_GIGAWORDS 53
 139 #define RD_TP_EVENT_TIMESTAMP 55
 140 #define RD_TP_CHAP_CHALLENGE 60
 141 #define RD_TP_NAS_PORT_TYPE 61
 142 #define RD_TP_PORT_LIMIT 62
 143 #define RD_TP_LOGIN_LAT_PORT 63
 144 #define RD_TP_TUNNEL_TYPE 64
 145 #define RD_TP_TUNNEL_MEDIUM_TYPE 65
 146 #define RD_TP_TUNNEL_CLIENT_ENDPOINT 66
 147 #define RD_TP_TUNNEL_SERVER_ENDPOINT 67
 148 #define RD_TP_TUNNEL_PASSWORD 69
 149 #define RD_TP_CONNECT_INFO 77
 150 #define RD_TP_MESSAGE_AUTHENTICATOR 80
 151 #define RD_TP_TUNNEL_ASSIGNMENT_ID 82
 152 #define RD_TP_NAS_PORT_ID 87
 153 #define RD_TP_ASCEND_MODEM_PORTNO 120
 154 #define RD_TP_ASCEND_MODEM_SLOTNO 121
 155 #define RD_TP_ASCEND_MULTILINK_ID 187
 156 #define RD_TP_ASCEND_NUM_IN_MULTILINK 188
 157 #define RD_TP_ASCEND_FIRST_DEST 189
 158 #define RD_TP_ASCEND_PRE_INPUT_OCTETS 190
 159 #define RD_TP_ASCEND_PRE_OUTPUT_OCTETS 191
 160 #define RD_TP_ASCEND_PRE_INPUT_PACKETS 192
 161 #define RD_TP_ASCEND_PRE_OUTPUT_PACKETS 193
 162 #define RD_TP_ASCEND_MAXIMUM_TIME 194
 163 #define RD_TP_ASCEND_DISCONNECT_CAUSE 195
 164 #define RD_TP_ASCEND_CONNECT_PROGRESS 196
 165 #define RD_TP_ASCEND_DATA_RATE 197
 166 #define RD_TP_ASCEND_PRESESSION_TIME 198
 167 #define RD_TP_ASCEND_ASSIGN_IP_POOL 218
 168 #define RD_TP_ASCEND_XMIT_RATE 255
 169
 170
 171
 172
 173
 174 #define AUTHENTICATOR_LENGTH 16
 175 #define RD_HDR_LENGTH 4
 176
 177
 178 #define RADIUS_STRING 1
 179 #define RADIUS_BINSTRING 2
 180 #define RADIUS_INTEGER4 3
 181 #define RADIUS_IP_ADDRESS 4
 182 #define RADIUS_SERVICE_TYPE 5
 183 #define RADIUS_FRAMED_PROTOCOL 6
 184 #define RADIUS_FRAMED_ROUTING 7
 185 #define RADIUS_FRAMED_COMPRESSION 8
 186 #define RADIUS_LOGIN_SERVICE 9
 187 #define RADIUS_UNKNOWN 10
 188 #define RADIUS_IPX_ADDRESS 11
 189 #define RADIUS_TERMINATING_ACTION 12
 190 #define RADIUS_ACCOUNTING_STATUS_TYPE 13
 191 #define RADIUS_ACCT_AUTHENTIC 14
 192 #define RADIUS_ACCT_TERMINATE_CAUSE 15
 193 #define RADIUS_NAS_PORT_TYPE 16
 194 #define RADIUS_TUNNEL_TYPE 17
 195 #define RADIUS_TUNNEL_MEDIUM_TYPE 18
 196 #define RADIUS_STRING_TAGGED 19
 197 #define RADIUS_VENDOR_SPECIFIC 20
 198 #define RADIUS_TIMESTAMP 21
 199
 200 static value_string radius_vals[] = {
 201  {RADIUS_ACCESS_REQUEST, "Access Request"},
 202  {RADIUS_ACCESS_ACCEPT, "Access Accept"},
 203  {RADIUS_ACCESS_REJECT, "Access Reject"},
 204  {RADIUS_ACCOUNTING_REQUEST, "Accounting Request"},
 205  {RADIUS_ACCOUNTING_RESPONSE, "Accounting Response"},
 206  {RADIUS_ACCESS_CHALLENGE, "Accounting challenge"},
 207  {RADIUS_STATUS_SERVER, "StatusServer"},
 208  {RADIUS_STATUS_CLIENT, "StatusClient"},
 209  {RADIUS_RESERVED, "Reserved"},
 210 {0, NULL}};
 211
 212 static value_string radius_service_type_vals[]=
 213 {{1, "Login"},
 214 {2, "Framed"},
 215 {3, "Callback Login"},
 216 {4, "Callback Framed"},
 217 {5, "Outbound"},
 218 {6, "Administrative"},
 219 {7, "NAS Prompt"},
 220 {8, "Authenticate Only"},
 221 {9, "Callback NAS Prompt"},
 222 {10, "Call Check"},
 223 {0,NULL}};
 224
 225 /*
 226  * These are SMI Network Management Private Enterprise Codes for
 227  * organizations; see
 228  *
 229  *      http://www.isi.edu/in-notes/iana/assignments/enterprise-numbers
 230  *
 231  * for a list.
 232  */
 233 static value_string radius_vendor_specific_vendors[]=
 234 {{5, "ACC"},
 235 {9,"Cisco"},
 236 {166,"Shiva"},
 237 {307,"Livingston"},
 238 {429,"3Com"},
 239 {529,"Ascend"},
 240 {1584,"Bay Networks"},
 241 {2636,"Juniper Networks"},
 242 {4874,"Unisphere Networks"},
 243 {0,NULL}};
 244
 245 static value_string radius_framed_protocol_vals[]=
 246 {{1, "PPP"},
 247 {2, "SLIP"},
 248 {3, "Appletalk Remote Access Protocol (ARAP)"},
 249 {4, "Gandalf proprietary Singlelink/Multilink Protocol"},
 250 {5, "Xylogics proprietary IPX/SLIP"},
 251 {6, "X.75 Synchronous"},
 252 {256, "Ascend MPP"},
 253 {262, "Ascend MP"},
 254 {0,NULL}};
 255
 256 static value_string radius_framed_routing_vals[]=
 257 {{1, "Send Routing Packets"},
 258 {2, "Listen for routing packets"},
 259 {3, "Send and Listen"},
 260 {0,"None"},
 261 {0,NULL}};
 262
 263 static value_string radius_framed_compression_vals[]=
 264 {{1, "VJ TCP/IP Header Compression"},
 265 {2, "IPX Header Compression"},
 266 {3, "Stac-LZS compression"},
 267 {0, "None"},
 268 {0,NULL}};
 269
 270 static value_string radius_login_service_vals[]=
 271 {{1, "Rlogin"},
 272 {2, "TCP Clear"},
 273 {3, "Portmaster"},
 274 {4, "LAT"},
 275 {5, "X.25-PAD"},
 276 {6, "X.25T3POS"},
 277 {8, "TCP Clear Quit"},
 278 {0, "Telnet"},
 279 {0,NULL}};
 280
 281 static value_string radius_terminating_action_vals[]=
 282 {{1, "RADIUS-Request"},
 283 {0, "Default"},
 284 {0,NULL}};
 285
 286 static value_string radius_accounting_status_type_vals[]=
 287 {{1, "Start"},
 288 {2, "Stop"},
 289 {3, "Interim-Update"},
 290 {7,"Accounting-On"},
 291 {8,"Accounting-Off"},
 292 {0,NULL}};
 293
 294 static value_string radius_accounting_authentication_vals[]=
 295 {{1, "Radius"},
 296 {2, "Local"},
 297 {3,"Remote"},
 298 /* RFC 2866 says 3 is Remote. Is 7 a mistake? */
 299 {7,"Remote"},
 300 {0,NULL}};
 301
 302 static value_string radius_acct_terminate_cause_vals[]=
 303 {{1, "User Request"},
 304 {2, "Lost Carrier"},
 305 {3,"Lost Service"},
 306 {4, "Idle Timeout"},
 307 {5,"Session Timeout"},
 308 {6, "Admin Reset"},
 309 {7, "Admin Reboot"},
 310 {8, "Port Error"},
 311 {9, "NAS Error"},
 312 {10, "NAS Request"},
 313 {11,"NAS Reboot"},
 314 {12, "Port Unneeded"},
 315 {13, "Port Preempted"},
 316 {14,"Port Suspended"},
 317 {15,"Service Unavailable"},
 318 {16,"Callback"},
 319 {17, "User Error"},
 320 {18,"Host Request"},
 321 {0,NULL}};
 322
 323 static value_string radius_tunnel_type_vals[]=
 324 {{1,"PPTP"},
 325 {2,"L2F"},
 326 {3,"L2TP"},
 327 {4,"ATMP"},
 328 {5,"VTP"},
 329 {6,"AH"},
 330 {7,"IP-IP-Encap"},
 331 {8,"MIN-IP-IP"},
 332 {9,"ESP"},
 333 {10,"GRE"},
 334 {11,"DVS"},
 335 {12,"IP-IP"},
 336 {0,NULL}};
 337
 338 static value_string radius_tunnel_medium_type_vals[]=
 339 {{1,"IPv4"},
 340 {2,"IPv6"},
 341 {3,"NSAP"},
 342 {4,"HDLC"},
 343 {5,"BBN"},
 344 {6,"IEEE-802"},
 345 {7,"E-163"},
 346 {8,"E-164"},
 347 {9,"F-69"},
 348 {10,"X-121"},
 349 {11,"IPX"},
 350 {12,"Appletalk"},
 351 {13,"Decnet4"},
 352 {14,"Vines"},
 353 {15,"E-164-NSAP"},
 354 {0,NULL}};
 355
 356 static value_string radius_nas_port_type_vals[]=
 357 {{0, "Async"},
 358 {1, "Sync"},
 359 {2,"ISDN Sync"},
 360 {3, "ISDN Async V.120"},
 361 {4,"ISDN Async V.110"},
 362 {5, "Virtual"},
 363 {6, "PIAFS"},
 364 {7, "HDLC Clear Channel"},
 365 {8, "X.25"},
 366 {9,"X.75"},
 367 {10, "G.3 Fax"},
 368 {11,"SDSL"},
 369 {12, "ADSL-CAP"},
 370 {13, "ADSL-DMT"},
 371 {14,"IDSL - ISDN"},
 372 {15,"Ethernet"},
 373 {16,"xDSL"},
 374 {17,"Cable"},
 375 {18,"Wireless Other"},
 376 {19,"Wireless IEEE 802.11"},
 377 {0,NULL}};
 378
 379 static value_value_pair radius_printinfo[] = {
 380 { RD_TP_USER_NAME, RADIUS_STRING },
 381 { RD_TP_USER_PASSWORD,RADIUS_BINSTRING },
 382 { RD_TP_CHAP_PASSWORD, RADIUS_BINSTRING },
 383 { RD_TP_NAS_IP_ADDRESS, RADIUS_IP_ADDRESS },
 384 { RD_TP_NAS_PORT, RADIUS_INTEGER4},
 385 { RD_TP_SERVICE_TYPE, RADIUS_SERVICE_TYPE},
 386 { RD_TP_FRAMED_PROTOCOL, RADIUS_FRAMED_PROTOCOL},
 387 { RD_TP_FRAMED_IP_ADDRESS, RADIUS_IP_ADDRESS},
 388 { RD_TP_FRAMED_IP_NETMASK, RADIUS_IP_ADDRESS},
 389 { RD_TP_FRAMED_ROUTING, RADIUS_FRAMED_ROUTING},
 390 { RD_TP_FILTER_ID, RADIUS_STRING},
 391 { RD_TP_FRAMED_MTU, RADIUS_INTEGER4},
 392 { RD_TP_FRAMED_COMPRESSION, RADIUS_FRAMED_COMPRESSION},
 393 { RD_TP_LOGIN_IP_HOST, RADIUS_IP_ADDRESS},
 394 { RD_TP_LOGIN_SERVICE, RADIUS_LOGIN_SERVICE},
 395 { RD_TP_LOGIN_TCP_PORT, RADIUS_INTEGER4},
 396 { RD_TP_UNASSIGNED, RADIUS_UNKNOWN},
 397 { RD_TP_REPLY_MESSAGE, RADIUS_STRING},
 398 { RD_TP_CALLBACK_NUMBER, RADIUS_BINSTRING},
 399 { RD_TP_CALLBACK_ID, RADIUS_BINSTRING},
 400 { RD_TP_UNASSIGNED2, RADIUS_UNKNOWN},
 401 { RD_TP_FRAMED_ROUTE, RADIUS_STRING},
 402 { RD_TP_FRAMED_IPX_NETWORK, RADIUS_IPX_ADDRESS},
 403 { RD_TP_STATE, RADIUS_BINSTRING},
 404 { RD_TP_CLASS, RADIUS_BINSTRING},
 405 { RD_TP_VENDOR_SPECIFIC, RADIUS_VENDOR_SPECIFIC},
 406 { RD_TP_SESSION_TIMEOUT, RADIUS_INTEGER4},
 407 { RD_TP_IDLE_TIMEOUT, RADIUS_INTEGER4},
 408 { RD_TP_TERMINATING_ACTION, RADIUS_TERMINATING_ACTION},
 409 { RD_TP_CALLED_STATION_ID, RADIUS_BINSTRING},
 410 { RD_TP_CALLING_STATION_ID, RADIUS_BINSTRING},
 411 { RD_TP_NAS_IDENTIFIER, RADIUS_BINSTRING},
 412 { RD_TP_PROXY_STATE, RADIUS_BINSTRING},
 413 { RD_TP_LOGIN_LAT_SERVICE, RADIUS_BINSTRING},
 414 { RD_TP_LOGIN_LAT_NODE, RADIUS_BINSTRING},
 415 { RD_TP_LOGIN_LAT_GROUP, RADIUS_BINSTRING},
 416 { RD_TP_FRAMED_APPLETALK_LINK, RADIUS_INTEGER4},
 417 { RD_TP_FRAMED_APPLETALK_NETWORK, RADIUS_INTEGER4},
 418 { RD_TP_FRAMED_APPLETALK_ZONE, RADIUS_BINSTRING},
 419 { RD_TP_ACCT_STATUS_TYPE, RADIUS_ACCOUNTING_STATUS_TYPE},
 420 { RD_TP_ACCT_DELAY_TIME, RADIUS_INTEGER4},
 421 { RD_TP_ACCT_INPUT_OCTETS, RADIUS_INTEGER4},
 422 { RD_TP_ACCT_OUTPUT_OCTETS, RADIUS_INTEGER4},
 423 { RD_TP_ACCT_SESSION_ID, RADIUS_STRING},
 424 { RD_TP_ACCT_AUTHENTIC, RADIUS_ACCT_AUTHENTIC},
 425 { RD_TP_ACCT_SESSION_TIME, RADIUS_INTEGER4},
 426 { RD_TP_ACCT_INPUT_PACKETS, RADIUS_INTEGER4},
 427 { RD_TP_ACCT_OUTPUT_PACKETS, RADIUS_INTEGER4},
 428 { RD_TP_ACCT_TERMINATE_CAUSE, RADIUS_ACCT_TERMINATE_CAUSE},
 429 { RD_TP_ACCT_MULTI_SESSION_ID, RADIUS_STRING},
 430 { RD_TP_ACCT_LINK_COUNT, RADIUS_INTEGER4},
 431 { RD_TP_ACCT_INPUT_GIGAWORDS, RADIUS_INTEGER4},
 432 { RD_TP_ACCT_OUTPUT_GIGAWORDS, RADIUS_INTEGER4},
 433 { RD_TP_EVENT_TIMESTAMP, RADIUS_TIMESTAMP},
 434 { RD_TP_CHAP_CHALLENGE, RADIUS_BINSTRING},
 435 { RD_TP_NAS_PORT_TYPE, RADIUS_NAS_PORT_TYPE},
 436 { RD_TP_PORT_LIMIT, RADIUS_INTEGER4},
 437 { RD_TP_LOGIN_LAT_PORT, RADIUS_BINSTRING},
 438 { RD_TP_TUNNEL_TYPE, RADIUS_TUNNEL_TYPE},
 439 { RD_TP_TUNNEL_MEDIUM_TYPE, RADIUS_TUNNEL_MEDIUM_TYPE},
 440 { RD_TP_TUNNEL_CLIENT_ENDPOINT, RADIUS_STRING_TAGGED},
 441 { RD_TP_TUNNEL_SERVER_ENDPOINT, RADIUS_STRING_TAGGED},
 442 { RD_TP_TUNNEL_PASSWORD, RADIUS_STRING_TAGGED},
 443 { RD_TP_CONNECT_INFO, RADIUS_STRING_TAGGED},
 444 { RD_TP_MESSAGE_AUTHENTICATOR, RADIUS_BINSTRING},
 445 { RD_TP_TUNNEL_ASSIGNMENT_ID, RADIUS_STRING_TAGGED},
 446 { RD_TP_NAS_PORT_ID, RADIUS_STRING},
 447 { RD_TP_ASCEND_MODEM_PORTNO, RADIUS_INTEGER4},
 448 { RD_TP_ASCEND_MODEM_SLOTNO, RADIUS_INTEGER4},
 449 { RD_TP_ASCEND_MULTILINK_ID, RADIUS_INTEGER4},
 450 { RD_TP_ASCEND_NUM_IN_MULTILINK, RADIUS_INTEGER4},
 451 { RD_TP_ASCEND_FIRST_DEST, RADIUS_IP_ADDRESS},
 452 { RD_TP_ASCEND_PRE_INPUT_OCTETS, RADIUS_INTEGER4},
 453 { RD_TP_ASCEND_PRE_OUTPUT_OCTETS, RADIUS_INTEGER4},
 454 { RD_TP_ASCEND_PRE_INPUT_PACKETS, RADIUS_INTEGER4},
 455 { RD_TP_ASCEND_PRE_OUTPUT_PACKETS, RADIUS_INTEGER4},
 456 { RD_TP_ASCEND_MAXIMUM_TIME, RADIUS_INTEGER4},
 457 { RD_TP_ASCEND_DISCONNECT_CAUSE, RADIUS_INTEGER4},
 458 { RD_TP_ASCEND_CONNECT_PROGRESS, RADIUS_INTEGER4},
 459 { RD_TP_ASCEND_DATA_RATE, RADIUS_INTEGER4},
 460 { RD_TP_ASCEND_PRESESSION_TIME, RADIUS_INTEGER4},
 461 { RD_TP_ASCEND_ASSIGN_IP_POOL, RADIUS_INTEGER4},
 462 { RD_TP_ASCEND_XMIT_RATE, RADIUS_INTEGER4},
 463 {0,0},
 464 };
 465
 466 static value_string radius_attrib_type_vals[] = {
 467 { RD_TP_USER_NAME, "User Name"},
 468 { RD_TP_USER_PASSWORD, "User Password"},
 469 { RD_TP_CHAP_PASSWORD, "Chap Password"},
 470 { RD_TP_NAS_IP_ADDRESS, "NAS IP Address"},
 471 { RD_TP_NAS_PORT, "NAS Port"},
 472 { RD_TP_SERVICE_TYPE, "Service Type"},
 473 { RD_TP_FRAMED_PROTOCOL, "Framed Protocol"},
 474 { RD_TP_FRAMED_IP_ADDRESS, "Framed IP Address"},
 475 { RD_TP_FRAMED_IP_NETMASK, "Framed IP Netmask"},
 476 { RD_TP_FRAMED_ROUTING, "Framed Routing"},
 477 { RD_TP_FILTER_ID, "Filter Id"},
 478 { RD_TP_FRAMED_MTU, "Framed MTU"},
 479 { RD_TP_FRAMED_COMPRESSION, "Framed Compression"},
 480 { RD_TP_LOGIN_IP_HOST, "Login IP Host"},
 481 { RD_TP_LOGIN_SERVICE, "Login Service"},
 482 { RD_TP_LOGIN_TCP_PORT, "Login TCP Port"},
 483 { RD_TP_UNASSIGNED, "Unassigned"},
 484 { RD_TP_REPLY_MESSAGE, "Reply Message"},
 485 { RD_TP_CALLBACK_NUMBER, "Callback Number"},
 486 { RD_TP_CALLBACK_ID, "Callback Id"},
 487 { RD_TP_UNASSIGNED2, "Unassigned"},
 488 { RD_TP_FRAMED_ROUTE, "Framed Route"},
 489 { RD_TP_FRAMED_IPX_NETWORK, "Framed IPX network"},
 490 { RD_TP_STATE, "State"},
 491 { RD_TP_CLASS, "Class"},
 492 { RD_TP_VENDOR_SPECIFIC, "Vendor Specific" },
 493 { RD_TP_SESSION_TIMEOUT, "Session Timeout"},
 494 { RD_TP_IDLE_TIMEOUT, "Idle Timeout"},
 495 { RD_TP_TERMINATING_ACTION, "Terminating Action"},
 496 { RD_TP_CALLED_STATION_ID, "Called Station Id"},
 497 { RD_TP_CALLING_STATION_ID, "Calling Station Id"},
 498 { RD_TP_NAS_IDENTIFIER, "NAS identifier"},
 499 { RD_TP_PROXY_STATE, "Proxy State"},
 500 { RD_TP_LOGIN_LAT_SERVICE, "Login LAT Service"},
 501 { RD_TP_LOGIN_LAT_NODE, "Login LAT Node"},
 502 { RD_TP_LOGIN_LAT_GROUP, "Login LAT Group"},
 503 { RD_TP_FRAMED_APPLETALK_LINK, "Framed Appletalk Link"},
 504 { RD_TP_FRAMED_APPLETALK_NETWORK, "Framed Appletalk Network"},
 505 { RD_TP_FRAMED_APPLETALK_ZONE, "Framed Appletalk Zone"},
 506 { RD_TP_ACCT_STATUS_TYPE, "Acct Status Type"},
 507 { RD_TP_ACCT_DELAY_TIME, "Acct Delay Time"},
 508 { RD_TP_ACCT_INPUT_OCTETS, "Acct Input Octets"},
 509 { RD_TP_ACCT_OUTPUT_OCTETS, "Acct Output Octets"},
 510 { RD_TP_ACCT_SESSION_ID, "Acct Session Id"},
 511 { RD_TP_ACCT_AUTHENTIC, "Acct Authentic"},
 512 { RD_TP_ACCT_SESSION_TIME, "Acct Session Time"},
 513 { RD_TP_ACCT_INPUT_PACKETS, "Acct Input Packets"},
 514 { RD_TP_ACCT_OUTPUT_PACKETS, "Acct Output Packets"},
 515 { RD_TP_ACCT_TERMINATE_CAUSE, "Acct Terminate Cause"},
 516 { RD_TP_ACCT_MULTI_SESSION_ID, "Acct Multi Session Id"},
 517 { RD_TP_ACCT_LINK_COUNT, "Acct Link Count"},
 518 { RD_TP_ACCT_INPUT_GIGAWORDS, "Acct Input Gigawords"},
 519 { RD_TP_ACCT_OUTPUT_GIGAWORDS, "Acct Output Gigawords"},
 520 { RD_TP_EVENT_TIMESTAMP, "Event Timestamp"},
 521 { RD_TP_CHAP_CHALLENGE, "Chap Challenge"},
 522 { RD_TP_NAS_PORT_TYPE, "NAS Port Type"},
 523 { RD_TP_PORT_LIMIT, "Port Limit"},
 524 { RD_TP_LOGIN_LAT_PORT, "Login LAT Port"},
 525 { RD_TP_TUNNEL_TYPE, "Tunnel Type"},
 526 { RD_TP_TUNNEL_MEDIUM_TYPE, "Tunnel Medium Type"},
 527 { RD_TP_TUNNEL_CLIENT_ENDPOINT, "Tunnel Client Endpoint"},
 528 { RD_TP_TUNNEL_SERVER_ENDPOINT, "Tunnel Server Endpoint"},
 529 { RD_TP_TUNNEL_PASSWORD, "Tunnel Password"},
 530 { RD_TP_CONNECT_INFO, "Connect-Info"},
 531 { RD_TP_MESSAGE_AUTHENTICATOR, "Message Authenticator"},
 532 { RD_TP_TUNNEL_ASSIGNMENT_ID, "Tunnel Assignment ID"},
 533 { RD_TP_NAS_PORT_ID, "NAS Port ID"},
 534 { RD_TP_ASCEND_MODEM_PORTNO, "Ascend Modem Port No"},
 535 { RD_TP_ASCEND_MODEM_SLOTNO, "Ascend Modem Slot No"},
 536 { RD_TP_ASCEND_MULTILINK_ID, "Ascend Multilink ID"},
 537 { RD_TP_ASCEND_NUM_IN_MULTILINK, "Ascend Num In Multilink"},
 538 { RD_TP_ASCEND_FIRST_DEST, "Ascend First Dest"},
 539 { RD_TP_ASCEND_PRE_INPUT_OCTETS, "Ascend Pre Input Octets"},
 540 { RD_TP_ASCEND_PRE_OUTPUT_OCTETS, "Ascend Pre Output Octets"},
 541 { RD_TP_ASCEND_PRE_INPUT_PACKETS, "Ascend Pre Input Packets"},
 542 { RD_TP_ASCEND_PRE_OUTPUT_PACKETS, "Ascend Pre Output Packets"},
 543 { RD_TP_ASCEND_MAXIMUM_TIME, "Ascend Maximum Time"},
 544 { RD_TP_ASCEND_DISCONNECT_CAUSE, "Ascend Disconnect Cause"},
 545 { RD_TP_ASCEND_CONNECT_PROGRESS, "Ascend Connect Progress"},
 546 { RD_TP_ASCEND_DATA_RATE, "Ascend Data Rate"},
 547 { RD_TP_ASCEND_PRESESSION_TIME, "Ascend PreSession Time"},
 548 { RD_TP_ASCEND_ASSIGN_IP_POOL, "Ascend Assign IP Pool"},
 549 { RD_TP_ASCEND_XMIT_RATE, "Ascend Xmit Rate"},
 550 {0,NULL},
 551 };
 552
 553 guint32 match_numval(guint32 val, const value_value_pair *vs)
 554 {
 555   guint32 i = 0;
 556
 557   while (vs[i].val1) {
 558     if (vs[i].val1 == val)
 559       return(vs[i].val2);
 560     i++;
 561   }
 562
 563   return(0);
 564 }
 565
 566 static gchar textbuffer[2000];
 567
 568 gchar *rdconvertbufftostr(gchar *dest, tvbuff_t *tvb, int offset, int length)
 569 {
 570 /*converts the raw buffer into printable text */
 571         guint32 i;
 572         guint32 totlen=0;
 573         const guint8 *pd = tvb_get_ptr(tvb, offset, length);
 574
 575         dest[0]='"';
 576         dest[1]=0;
 577         totlen=1;
 578         for (i=0; i < (guint32)length; i++)
 579         {
 580                 if( isalnum((int)pd[i])||ispunct((int)pd[i])
 581                                 ||((int)pd[i]==' '))            {
 582                         dest[totlen]=(gchar)pd[i];
 583                         totlen++;
 584                 }
 585                 else
 586                 {
 587                         sprintf(&(dest[totlen]), "\\%03u", pd[i]);
 588                         totlen=totlen+strlen(&(dest[totlen]));
 589                 }
 590         }
 591         dest[totlen]='"';
 592         dest[totlen+1]=0;
 593         return dest;
 594 }
 595
 596 gchar *rd_match_strval(guint32 val, const value_string *vs) {
 597         return val_to_str(val, vs, "Undefined (%u)");
 598 }
 599
 600 gchar *rd_value_to_str(e_avphdr *avph, tvbuff_t *tvb, int offset)
 601 {
 602   int print_type;
 603   gchar *cont;
 604   value_string *valstrarr;
 605   guint32 intval;
 606   const guint8 *pd;
 607   guint8 tag;
 608   char *rtimestamp;
 609   extern char *tzname[2];
 610
 611 /* prints the values of the attribute value pairs into a text buffer */
 612   print_type=match_numval(avph->avp_type,radius_printinfo);
 613
 614   /* Default begin */
 615   strcpy(textbuffer,"Value:");
 616   cont=&textbuffer[strlen(textbuffer)];
 617   switch(print_type)
 618   {
 619         case( RADIUS_STRING ):
 620         case( RADIUS_BINSTRING ):
 621                 rdconvertbufftostr(cont,tvb,offset+2,avph->avp_length-2);
 622                 break;
 623         case( RADIUS_INTEGER4 ):
 624                 sprintf(cont,"%u", tvb_get_ntohl(tvb,offset+2));
 625                 break;
 626         case( RADIUS_IP_ADDRESS ):
 627                 ip_to_str_buf(tvb_get_ptr(tvb,offset+2,4),cont);
 628                 break;
 629         case( RADIUS_SERVICE_TYPE ):
 630                 valstrarr=radius_service_type_vals;
 631                 strcpy(cont,rd_match_strval(tvb_get_ntohl(tvb,offset+2),valstrarr));
 632                 break;
 633         case( RADIUS_FRAMED_PROTOCOL ):
 634                 valstrarr= radius_framed_protocol_vals;
 635                 strcpy(cont,rd_match_strval(tvb_get_ntohl(tvb,offset+2),valstrarr));
 636                 break;
 637         case( RADIUS_FRAMED_ROUTING ):
 638                 valstrarr=radius_framed_routing_vals;
 639                 strcpy(cont,rd_match_strval(tvb_get_ntohl(tvb,offset+2),valstrarr));
 640                 break;
 641         case( RADIUS_FRAMED_COMPRESSION ):
 642                 valstrarr=radius_framed_compression_vals;
 643                 strcpy(cont,rd_match_strval(tvb_get_ntohl(tvb,offset+2),valstrarr));
 644                 break;
 645         case( RADIUS_LOGIN_SERVICE ):
 646                 valstrarr=radius_login_service_vals;
 647                 strcpy(cont,rd_match_strval(tvb_get_ntohl(tvb,offset+2),valstrarr));
 648                 break;
 649         case( RADIUS_IPX_ADDRESS ):
 650                 pd = tvb_get_ptr(tvb,offset+2,4);
 651                 sprintf(cont,"%u:%u:%u:%u",(guint8)pd[offset+2],
 652                         (guint8)pd[offset+3],(guint8)pd[offset+4],
 653                         (guint8)pd[offset+5]);
 654         case( RADIUS_TERMINATING_ACTION ):
 655                 valstrarr=radius_terminating_action_vals;
 656                 strcpy(cont,rd_match_strval(tvb_get_ntohl(tvb,offset+2),valstrarr));
 657                 break;
 658         case( RADIUS_ACCOUNTING_STATUS_TYPE ):
 659                 valstrarr=radius_accounting_status_type_vals;
 660                 strcpy(cont,rd_match_strval(tvb_get_ntohl(tvb,offset+2),valstrarr));
 661                 break;
 662         case( RADIUS_ACCT_AUTHENTIC ):
 663                 valstrarr=radius_accounting_authentication_vals;
 664                 strcpy(cont,rd_match_strval(tvb_get_ntohl(tvb,offset+2),valstrarr));
 665                 break;
 666         case( RADIUS_ACCT_TERMINATE_CAUSE ):
 667                 valstrarr=radius_acct_terminate_cause_vals;
 668                 strcpy(cont,rd_match_strval(tvb_get_ntohl(tvb,offset+2),valstrarr));
 669                 break;
 670         case( RADIUS_NAS_PORT_TYPE ):
 671                 valstrarr=radius_nas_port_type_vals;
 672                 strcpy(cont,rd_match_strval(tvb_get_ntohl(tvb,offset+2),valstrarr));
 673                 break;
 674         case( RADIUS_TUNNEL_TYPE ):
 675                 valstrarr=radius_tunnel_type_vals;
 676                 /* Tagged ? */
 677                 intval = tvb_get_ntohl(tvb,offset+2);
 678                 if (intval >> 24) {
 679                         sprintf(textbuffer, "Tag:%u, Value:%s",
 680                                 intval >> 24,
 681                                 rd_match_strval(intval & 0xffffff,valstrarr));
 682                         break;
 683                 }
 684                 strcpy(cont,rd_match_strval(intval,valstrarr));
 685                 break;
 686         case( RADIUS_TUNNEL_MEDIUM_TYPE ):
 687                 valstrarr=radius_tunnel_medium_type_vals;
 688                 intval = tvb_get_ntohl(tvb,offset+2);
 689                 /* Tagged ? */
 690                 if (intval >> 24) {
 691                         sprintf(textbuffer, "Tag:%u, Value:%s",
 692                                 intval >> 24,
 693                                 rd_match_strval(intval & 0xffffff,valstrarr));
 694                         break;
 695                 }
 696                 strcpy(cont,rd_match_strval(intval,valstrarr));
 697                 break;
 698         case( RADIUS_STRING_TAGGED ):
 699                 /* Tagged ? */
 700                 tag = tvb_get_guint8(tvb,offset+2);
 701                 if (tag <= 0x1f) {
 702                         sprintf(textbuffer, "Tag:%u, Value:",
 703                                         tag);
 704                         cont=&textbuffer[strlen(textbuffer)];
 705                         rdconvertbufftostr(cont,tvb,offset+3,avph->avp_length-3);
 706                         break;
 707                 }
 708                 rdconvertbufftostr(cont,tvb,offset+2,avph->avp_length-2);
 709                 break;
 710         case ( RADIUS_VENDOR_SPECIFIC ):
 711                 valstrarr=radius_vendor_specific_vendors;
 712                 sprintf(textbuffer,"Vendor:%s, Value:",
 713                                 rd_match_strval(tvb_get_ntohl(tvb,offset+2),valstrarr));
 714                 cont=&textbuffer[strlen(textbuffer)];
 715                 rdconvertbufftostr(cont,tvb,offset+6,avph->avp_length-6);
 716                 break;
 717         case( RADIUS_TIMESTAMP ):
 718                 intval=tvb_get_ntohl(tvb,offset+2);
 719                 rtimestamp=ctime((time_t*)&intval);
 720                 rtimestamp[strlen(rtimestamp)-1]=0;
 721                 sprintf(cont,"%d (%s %s)", tvb_get_ntohl(tvb,offset+2), rtimestamp, *tzname);
 722                 break;
 723         case( RADIUS_UNKNOWN ):
 724         default:
 725                 strcpy(textbuffer,"Unknown Value Type");
 726                 break;
 727   }
 728   if (cont == textbuffer) {
 729         strcpy(cont,"Unknown Value");
 730   }
 731   return textbuffer;
 732 }
 733
 734
 735 void dissect_attribute_value_pairs(tvbuff_t *tvb, int offset, proto_tree *tree,
 736                                    int avplength)
 737 {
 738 /* adds the attribute value pairs to the tree */
 739   e_avphdr avph;
 740   gchar *avptpstrval;
 741   gchar *valstr;
 742   if (avplength==0)
 743   {
 744         proto_tree_add_text(tree, tvb,offset,0,"No Attribute Value Pairs Found");
 745         return;
 746   }
 747
 748   while (avplength > 0 )
 749   {
 750
 751      tvb_memcpy(tvb,(guint8 *)&avph,offset,sizeof(e_avphdr));
 752      avplength=avplength-avph.avp_length;
 753      avptpstrval=match_strval(avph.avp_type, radius_attrib_type_vals);
 754      if (avptpstrval == NULL) avptpstrval="Unknown Type";
 755      valstr=rd_value_to_str(&avph, tvb, offset);
 756      proto_tree_add_text(tree, tvb,offset,avph.avp_length,
 757         "t:%s(%u) l:%u, %s",
 758         avptpstrval,avph.avp_type,avph.avp_length,valstr);
 759      offset=offset+avph.avp_length;
 760      if (avph.avp_length == 0) {
 761         break;
 762      }
 763   }
 764 }
 765
 766 static void dissect_radius(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)
 767 {
 768   proto_tree *radius_tree,*avptree;
 769   proto_item *ti,*avptf;
 770   int rhlength;
 771   int rhcode;
 772   int rhident;
 773   int avplength,hdrlength;
 774   e_radiushdr rh;
 775
 776   gchar *codestrval;
 777
 778   if (check_col(pinfo->fd, COL_PROTOCOL))
 779         col_set_str(pinfo->fd, COL_PROTOCOL, "RADIUS");
 780   if (check_col(pinfo->fd, COL_INFO))
 781         col_clear(pinfo->fd, COL_INFO);
 782
 783   tvb_memcpy(tvb,(guint8 *)&rh,0,sizeof(e_radiushdr));
 784
 785   rhcode= (int)rh.rh_code;
 786   rhident= (int)rh.rh_ident;
 787   rhlength= (int)ntohs(rh.rh_pktlength);
 788   codestrval=  match_strval(rhcode,radius_vals);
 789   if (codestrval==NULL)
 790   {
 791         codestrval="Unknown Packet";
 792   }
 793   if (check_col(pinfo->fd, COL_INFO))
 794   {
 795         col_add_fstr(pinfo->fd,COL_INFO,"%s(%d) (id=%d, l=%d)",
 796                 codestrval, rhcode, rhident, rhlength);
 797   }
 798
 799   if (tree)
 800   {
 801         ti = proto_tree_add_item(tree,proto_radius, tvb, 0, rhlength, FALSE);
 802
 803         radius_tree = proto_item_add_subtree(ti, ett_radius);
 804
 805         proto_tree_add_uint(radius_tree,hf_radius_code, tvb, 0, 1,
 806                 rh.rh_code);
 807         proto_tree_add_uint_format(radius_tree,hf_radius_id, tvb, 1, 1,
 808                 rh.rh_ident, "Packet identifier: 0x%01x (%d)",
 809                         rhident,rhident);
 810
 811         proto_tree_add_uint(radius_tree, hf_radius_length, tvb,
 812                         2, 2, rhlength);
 813         proto_tree_add_text(radius_tree, tvb, 4,
 814                         AUTHENTICATOR_LENGTH,
 815                          "Authenticator");
 816
 817         hdrlength=RD_HDR_LENGTH+AUTHENTICATOR_LENGTH;
 818         avplength= rhlength -hdrlength;
 819
 820         if (avplength > 0) {
 821                 /* list the attribute value pairs */
 822
 823                 avptf = proto_tree_add_text(radius_tree,
 824                                 tvb,hdrlength,avplength,
 825                                 "Attribute value pairs");
 826                 avptree = proto_item_add_subtree(avptf, ett_radius_avp);
 827
 828                 if (avptree !=NULL)
 829                 {
 830                         dissect_attribute_value_pairs(tvb, hdrlength,
 831                                 avptree,avplength);
 832                 }
 833         }
 834   }
 835 }
 836 /* registration with the filtering engine */
 837 void
 838 proto_register_radius(void)
 839 {
 840         static hf_register_info hf[] = {
 841                 { &hf_radius_code,
 842                 { "Code","radius.code", FT_UINT8, BASE_DEC, VALS(radius_vals), 0x0,
 843                         "", HFILL }},
 844
 845                 { &hf_radius_id,
 846                 { "Identifier", "radius.id", FT_UINT8, BASE_DEC, NULL, 0x0,
 847                         "", HFILL }},
 848
 849                 { &hf_radius_length,
 850                 { "Length","radius.length", FT_UINT16, BASE_DEC, NULL, 0x0,
 851                         "", HFILL }}
 852         };
 853         static gint *ett[] = {
 854                 &ett_radius,
 855                 &ett_radius_avp,
 856         };
 857
 858         proto_radius = proto_register_protocol("Radius Protocol", "RADIUS",
 859             "radius");
 860         proto_register_field_array(proto_radius, hf, array_length(hf));
 861         proto_register_subtree_array(ett, array_length(ett));
 862 }
 863
 864 void
 865 proto_reg_handoff_radius(void)
 866 {
 867         dissector_add("udp.port", UDP_PORT_RADIUS, dissect_radius,
 868             proto_radius);
 869         dissector_add("udp.port", UDP_PORT_RADIUS_NEW, dissect_radius,
 870             proto_radius);
 871         dissector_add("udp.port", UDP_PORT_RADACCT, dissect_radius,
 872             proto_radius);
 873         dissector_add("udp.port", UDP_PORT_RADACCT_NEW, dissect_radius,
 874             proto_radius);
 875 }