packet-rtp.c

   1 /* packet-rtp.c
   2  *
   3  * Routines for RTP dissection
   4  * RTP = Real time Transport Protocol
   5  *
   6  * Copyright 2000, Philips Electronics N.V.
   7  * Written by Andreas Sikkema <h323@ramdyne.nl>
   8  *
   9  * $Id: packet-rtp.c,v 1.45 2004/02/14 22:48:53 guy Exp $
  10  *
  11  * Ethereal - Network traffic analyzer
  12  * By Gerald Combs <gerald@ethereal.com>
  13  * Copyright 1998 Gerald Combs
  14  *
  15  * This program is free software; you can redistribute it and/or
  16  * modify it under the terms of the GNU General Public License
  17  * as published by the Free Software Foundation; either version 2
  18  * of the License, or (at your option) any later version.
  19  *
  20  * This program is distributed in the hope that it will be useful,
  21  * but WITHOUT ANY WARRANTY; without even the implied warranty of
  22  * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  23  * GNU General Public License for more details.
  24  *
  25  * You should have received a copy of the GNU General Public License
  26  * along with this program; if not, write to the Free Software
  27  * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307, USA.
  28  */
  29
  30 /*
  31  * This dissector tries to dissect the RTP protocol according to Annex A
  32  * of ITU-T Recommendation H.225.0 (02/98) or RFC 1889
  33  *
  34  * RTP traffic is handled by an even UDP portnumber. This can be any
  35  * port number, but there is a registered port available, port 5004
  36  * See Annex B of ITU-T Recommendation H.225.0, section B.7
  37  *
  38  * This doesn't dissect older versions of RTP, such as:
  39  *
  40  *    the vat protocol ("version 0") - see
  41  *
  42  *      ftp://ftp.ee.lbl.gov/conferencing/vat/alpha-test/vatsrc-4.0b2.tar.gz
  43  *
  44  *    and look in "session-vat.cc" if you want to write a dissector
  45  *    (have fun - there aren't any nice header files showing the packet
  46  *    format);
  47  *
  48  *    version 1, as documented in
  49  *
  50  *      ftp://gaia.cs.umass.edu/pub/hgschulz/rtp/draft-ietf-avt-rtp-04.txt
  51  */
  52
  53
  54 #ifdef HAVE_CONFIG_H
  55 # include "config.h"
  56 #endif
  57
  58 #include <glib.h>
  59 #include <epan/packet.h>
  60
  61 #include <stdio.h>
  62 #include <string.h>
  63
  64 #include "packet-rtp.h"
  65 #include "rtp_pt.h"
  66 #include <epan/conversation.h>
  67 #include "tap.h"
  68
  69 static int rtp_tap = -1;
  70
  71 static dissector_table_t rtp_pt_dissector_table;
  72
  73 /* RTP header fields             */
  74 static int proto_rtp           = -1;
  75 static int hf_rtp_version      = -1;
  76 static int hf_rtp_padding      = -1;
  77 static int hf_rtp_extension    = -1;
  78 static int hf_rtp_csrc_count   = -1;
  79 static int hf_rtp_marker       = -1;
  80 static int hf_rtp_payload_type = -1;
  81 static int hf_rtp_seq_nr       = -1;
  82 static int hf_rtp_timestamp    = -1;
  83 static int hf_rtp_ssrc         = -1;
  84 static int hf_rtp_csrc_item    = -1;
  85 static int hf_rtp_data         = -1;
  86 static int hf_rtp_padding_data = -1;
  87 static int hf_rtp_padding_count= -1;
  88
  89 /* RTP header extension fields   */
  90 static int hf_rtp_prof_define  = -1;
  91 static int hf_rtp_length       = -1;
  92 static int hf_rtp_hdr_ext      = -1;
  93
  94 /* RTP fields defining a sub tree */
  95 static gint ett_rtp       = -1;
  96 static gint ett_csrc_list = -1;
  97 static gint ett_hdr_ext   = -1;
  98
  99 static dissector_handle_t data_handle;
 100
 101 static gboolean dissect_rtp_heur( tvbuff_t *tvb, packet_info *pinfo,
 102     proto_tree *tree );
 103 static void dissect_rtp( tvbuff_t *tvb, packet_info *pinfo,
 104     proto_tree *tree );
 105
 106 /*
 107  * Fields in the first octet of the RTP header.
 108  */
 109
 110 /* Version is the first 2 bits of the first octet*/
 111 #define RTP_VERSION(octet)      ((octet) >> 6)
 112
 113 /* Padding is the third bit; No need to shift, because true is any value
 114    other than 0! */
 115 #define RTP_PADDING(octet)      ((octet) & 0x20)
 116
 117 /* Extension bit is the fourth bit */
 118 #define RTP_EXTENSION(octet)    ((octet) & 0x10)
 119
 120 /* CSRC count is the last four bits */
 121 #define RTP_CSRC_COUNT(octet)   ((octet) & 0xF)
 122
 123 static const value_string rtp_version_vals[] =
 124 {
 125         { 0, "Old VAT Version" },
 126         { 1, "First Draft Version" },
 127         { 2, "RFC 1889 Version" },
 128         { 0, NULL },
 129 };
 130
 131 /*
 132  * Fields in the second octet of the RTP header.
 133  */
 134
 135 /* Marker is the first bit of the second octet */
 136 #define RTP_MARKER(octet)       ((octet) & 0x80)
 137
 138 /* Payload type is the last 7 bits */
 139 #define RTP_PAYLOAD_TYPE(octet) ((octet) & 0x7F)
 140
 141 static const value_string rtp_payload_type_vals[] =
 142 {
 143         { PT_PCMU,      "ITU-T G.711 PCMU" },
 144         { PT_1016,      "USA Federal Standard FS-1016" },
 145         { PT_G721,      "ITU-T G.721" },
 146         { PT_GSM,       "GSM 06.10" },
 147         { PT_G723,      "ITU-T G.723" },
 148         { PT_DVI4_8000, "DVI4 8000 samples/s" },
 149         { PT_DVI4_16000, "DVI4 16000 samples/s" },
 150         { PT_LPC,       "Experimental linear predictive encoding from Xerox PARC" },
 151         { PT_PCMA,      "ITU-T G.711 PCMA" },
 152         { PT_G722,      "ITU-T G.722" },
 153         { PT_L16_STEREO, "16-bit uncompressed audio, stereo" },
 154         { PT_L16_MONO,  "16-bit uncompressed audio, monaural" },
 155         { PT_QCELP,     "Qualcomm Code Excited Linear Predictive coding" },
 156         { PT_CN,        "Comfort noise" },
 157         { PT_MPA,       "MPEG-I/II Audio"},
 158         { PT_G728,      "ITU-T G.728" },
 159         { PT_DVI4_11025, "DVI4 11025 samples/s" },
 160         { PT_DVI4_22050, "DVI4 22050 samples/s" },
 161         { PT_G729,      "ITU-T G.729" },
 162         { PT_CELB,      "Sun CellB video encoding" },
 163         { PT_JPEG,      "JPEG-compressed video" },
 164         { PT_NV,        "'nv' program" },
 165         { PT_H261,      "ITU-T H.261" },
 166         { PT_MPV,       "MPEG-I/II Video"},
 167         { PT_MP2T,      "MPEG-II transport streams"},
 168         { PT_H263,      "ITU-T H.263" },
 169         { 0,            NULL },
 170 };
 171
 172 static address fake_addr;
 173 static int heur_init = FALSE;
 174
 175 void rtp_add_address( packet_info *pinfo, const unsigned char* ip_addr,
 176     int prt )
 177 {
 178         address src_addr;
 179         conversation_t* pconv;
 180
 181         /*
 182          * If this isn't the first time this packet has been processed,
 183          * we've already done this work, so we don't need to do it
 184          * again.
 185          */
 186         if (pinfo->fd->flags.visited)
 187                 return;
 188
 189         src_addr.type = AT_IPv4;
 190         src_addr.len = 4;
 191         src_addr.data = ip_addr;
 192
 193         /*
 194          * The first time the function is called let the tcp dissector
 195          * know that we're interested in traffic
 196          */
 197         if ( ! heur_init ) {
 198                 heur_dissector_add( "udp", dissect_rtp_heur, proto_rtp );
 199                 heur_init = TRUE;
 200         }
 201
 202         /*
 203          * Check if the ip address an dport combination is not
 204          * already registered
 205          */
 206         pconv = find_conversation( &src_addr, &fake_addr, PT_UDP, prt, 0, 0 );
 207
 208         /*
 209          * If not, add
 210          * XXX - use wildcard address and port B?
 211          */
 212         if ( ! pconv ) {
 213                 pconv = conversation_new( &src_addr, &fake_addr, PT_UDP,
 214                     (guint32) prt, (guint32) 0, 0 );
 215                 conversation_add_proto_data(pconv, proto_rtp, NULL);
 216         }
 217
 218 }
 219
 220 #if 0
 221 static void rtp_init( void )
 222 {
 223         unsigned char* tmp_data;
 224         int i;
 225
 226         /* Create a fake adddress... */
 227         fake_addr.type = AT_IPv4;
 228         fake_addr.len = 4;
 229
 230         tmp_data = malloc( fake_addr.len );
 231         for ( i = 0; i < fake_addr.len; i++) {
 232                 tmp_data[i] = 0;
 233         }
 234         fake_addr.data = tmp_data;
 235 }
 236 #endif
 237
 238 static gboolean
 239 dissect_rtp_heur( tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree )
 240 {
 241         conversation_t* pconv;
 242
 243         /* This is a heuristic dissector, which means we get all the TCP
 244          * traffic not sent to a known dissector and not claimed by
 245          * a heuristic dissector called before us!
 246          * So we first check if the frame is really meant for us.
 247          */
 248         if ( ( pconv = find_conversation( &pinfo->src, &fake_addr, pinfo->ptype,
 249             pinfo->srcport, 0, 0 ) ) == NULL ) {
 250                 /*
 251                  * The source ip:port combination was not what we were
 252                  * looking for, check the destination
 253                  */
 254                 if ( ( pconv = find_conversation( &pinfo->dst, &fake_addr,
 255                     pinfo->ptype, pinfo->destport, 0, 0 ) ) == NULL ) {
 256                         return FALSE;
 257                 }
 258         }
 259
 260         /*
 261          * An RTP conversation always has a data item for RTP.
 262          * (Its existence is sufficient to indicate that this is an RTP
 263          * conversation.)
 264          */
 265         if (conversation_get_proto_data(pconv, proto_rtp) == NULL)
 266                 return FALSE;
 267
 268         dissect_rtp( tvb, pinfo, tree );
 269
 270         return TRUE;
 271 }
 272
 273 static void
 274 dissect_rtp_data( tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,
 275     proto_tree *rtp_tree, int offset, unsigned int data_len,
 276     unsigned int data_reported_len, unsigned int payload_type )
 277 {
 278         tvbuff_t *newtvb;
 279
 280         newtvb = tvb_new_subset( tvb, offset, data_len, data_reported_len );
 281         if (!dissector_try_port(rtp_pt_dissector_table, payload_type, newtvb,
 282             pinfo, tree))
 283                 proto_tree_add_item( rtp_tree, hf_rtp_data, newtvb, 0, -1, FALSE );
 284 }
 285
 286 static void
 287 dissect_rtp( tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree )
 288 {
 289         proto_item *ti            = NULL;
 290         proto_tree *rtp_tree      = NULL;
 291         proto_tree *rtp_csrc_tree = NULL;
 292         guint8      octet1, octet2;
 293         unsigned int version;
 294         gboolean    padding_set;
 295         gboolean    extension_set;
 296         unsigned int csrc_count;
 297         gboolean    marker_set;
 298         unsigned int payload_type;
 299         unsigned int i            = 0;
 300         unsigned int hdr_extension= 0;
 301         unsigned int padding_count;
 302         gint        length, reported_length;
 303         int         data_len;
 304         unsigned int offset = 0;
 305         guint16     seq_num;
 306         guint32     timestamp;
 307         guint32     sync_src;
 308         guint32     csrc_item;
 309
 310         static struct _rtp_info rtp_info;
 311
 312         /* Get the fields in the first octet */
 313         octet1 = tvb_get_guint8( tvb, offset );
 314         version = RTP_VERSION( octet1 );
 315
 316         if (version != 2) {
 317                 /*
 318                  * Unknown or unsupported version.
 319                  */
 320                 if ( check_col( pinfo->cinfo, COL_PROTOCOL ) )   {
 321                         col_set_str( pinfo->cinfo, COL_PROTOCOL, "RTP" );
 322                 }
 323
 324                 if ( check_col( pinfo->cinfo, COL_INFO) ) {
 325                         col_add_fstr( pinfo->cinfo, COL_INFO,
 326                             "Unknown RTP version %u", version);
 327                 }
 328
 329                 if ( tree ) {
 330                         ti = proto_tree_add_item( tree, proto_rtp, tvb, offset, -1, FALSE );
 331                         rtp_tree = proto_item_add_subtree( ti, ett_rtp );
 332
 333                         proto_tree_add_uint( rtp_tree, hf_rtp_version, tvb,
 334                             offset, 1, octet1);
 335                 }
 336                 return;
 337         }
 338
 339         padding_set = RTP_PADDING( octet1 );
 340         extension_set = RTP_EXTENSION( octet1 );
 341         csrc_count = RTP_CSRC_COUNT( octet1 );
 342
 343         /* Get the fields in the second octet */
 344         octet2 = tvb_get_guint8( tvb, offset + 1 );
 345         marker_set = RTP_MARKER( octet2 );
 346         payload_type = RTP_PAYLOAD_TYPE( octet2 );
 347
 348         /* Get the subsequent fields */
 349         seq_num = tvb_get_ntohs( tvb, offset + 2 );
 350         timestamp = tvb_get_ntohl( tvb, offset + 4 );
 351         sync_src = tvb_get_ntohl( tvb, offset + 8 );
 352
 353         /* fill in the rtp_info structure */
 354         rtp_info.info_padding_set = padding_set;
 355         rtp_info.info_padding_count = 0;
 356         rtp_info.info_marker_set = marker_set;
 357         rtp_info.info_payload_type = payload_type;
 358         rtp_info.info_seq_num = seq_num;
 359         rtp_info.info_timestamp = timestamp;
 360         rtp_info.info_sync_src = sync_src;
 361
 362         /*
 363          * Do we have all the data?
 364          */
 365         length = tvb_length_remaining(tvb, offset);
 366         reported_length = tvb_reported_length_remaining(tvb, offset);
 367         if (reported_length >= 0 && length >= reported_length) {
 368                 /*
 369                  * Yes.
 370                  */
 371                 rtp_info.info_all_data_present = TRUE;
 372                 rtp_info.info_data_len = reported_length;
 373
 374                 /*
 375                  * Save the pointer to raw rtp data (header + payload incl.
 376                  * padding).
 377                  * That should be safe because the "epan_dissect_t"
 378                  * constructed for the packet has not yet been freed when
 379                  * the taps are called.
 380                  * (Destroying the "epan_dissect_t" will end up freeing
 381                  * all the tvbuffs and hence invalidating pointers to
 382                  * their data.)
 383                  * See "add_packet_to_packet_list()" for details.
 384                  */
 385                 rtp_info.info_data = tvb_get_ptr(tvb, 0, -1);
 386         } else {
 387                 /*
 388                  * No - packet was cut short at capture time.
 389                  */
 390                 rtp_info.info_all_data_present = FALSE;
 391                 rtp_info.info_data_len = 0;
 392                 rtp_info.info_data = NULL;
 393         }
 394
 395         if ( check_col( pinfo->cinfo, COL_PROTOCOL ) )   {
 396                 col_set_str( pinfo->cinfo, COL_PROTOCOL, "RTP" );
 397         }
 398
 399         if ( check_col( pinfo->cinfo, COL_INFO) ) {
 400                 col_add_fstr( pinfo->cinfo, COL_INFO,
 401                     "Payload type=%s, SSRC=%u, Seq=%u, Time=%u%s",
 402                     val_to_str( payload_type, rtp_payload_type_vals,
 403                         "Unknown (%u)" ),
 404                     sync_src,
 405                     seq_num,
 406                     timestamp,
 407                     marker_set ? ", Mark" : "");
 408         }
 409         if ( tree ) {
 410                 ti = proto_tree_add_item( tree, proto_rtp, tvb, offset, -1, FALSE );
 411                 rtp_tree = proto_item_add_subtree( ti, ett_rtp );
 412
 413                 proto_tree_add_uint( rtp_tree, hf_rtp_version, tvb,
 414                     offset, 1, octet1 );
 415                 proto_tree_add_boolean( rtp_tree, hf_rtp_padding, tvb,
 416                     offset, 1, octet1 );
 417                 proto_tree_add_boolean( rtp_tree, hf_rtp_extension, tvb,
 418                     offset, 1, octet1 );
 419                 proto_tree_add_uint( rtp_tree, hf_rtp_csrc_count, tvb,
 420                     offset, 1, octet1 );
 421                 offset++;
 422
 423                 proto_tree_add_boolean( rtp_tree, hf_rtp_marker, tvb, offset,
 424                     1, octet2 );
 425                 proto_tree_add_uint( rtp_tree, hf_rtp_payload_type, tvb,
 426                     offset, 1, octet2 );
 427                 offset++;
 428
 429                 /* Sequence number 16 bits (2 octets) */
 430                 proto_tree_add_uint( rtp_tree, hf_rtp_seq_nr, tvb, offset, 2, seq_num );
 431                 offset += 2;
 432
 433                 /* Timestamp 32 bits (4 octets) */
 434                 proto_tree_add_uint( rtp_tree, hf_rtp_timestamp, tvb, offset, 4, timestamp );
 435                 offset += 4;
 436
 437                 /* Synchronization source identifier 32 bits (4 octets) */
 438                 proto_tree_add_uint( rtp_tree, hf_rtp_ssrc, tvb, offset, 4, sync_src );
 439                 offset += 4;
 440         } else {
 441                 offset += 12;
 442         }
 443         /* CSRC list*/
 444         if ( csrc_count > 0 ) {
 445                 if ( tree ) {
 446                         ti = proto_tree_add_text(rtp_tree, tvb, offset, csrc_count * 4, "Contributing Source identifiers");
 447                         rtp_csrc_tree = proto_item_add_subtree( ti, ett_csrc_list );
 448                 }
 449                 for (i = 0; i < csrc_count; i++ ) {
 450                         csrc_item = tvb_get_ntohl( tvb, offset );
 451                         if ( tree ) proto_tree_add_uint_format( rtp_csrc_tree,
 452                             hf_rtp_csrc_item, tvb, offset, 4,
 453                             csrc_item,
 454                             "CSRC item %d: %u",
 455                             i, csrc_item );
 456                         offset += 4;
 457                 }
 458         }
 459
 460         /* Optional RTP header extension */
 461         if ( extension_set ) {
 462                 /* Defined by profile field is 16 bits (2 octets) */
 463                 if ( tree ) proto_tree_add_uint( rtp_tree, hf_rtp_prof_define, tvb, offset, 2, tvb_get_ntohs( tvb, offset ) );
 464                 offset += 2;
 465
 466                 hdr_extension = tvb_get_ntohs( tvb, offset );
 467                 if ( tree ) proto_tree_add_uint( rtp_tree, hf_rtp_length, tvb,
 468                     offset, 2, hdr_extension);
 469                 offset += 2;
 470                 if ( hdr_extension > 0 ) {
 471                         if ( tree ) {
 472                                 ti = proto_tree_add_text(rtp_tree, tvb, offset, csrc_count * 4, "Header extensions");
 473                                 /* I'm re-using the old tree variable here
 474                                    from the CSRC list!*/
 475                                 rtp_csrc_tree = proto_item_add_subtree( ti,
 476                                     ett_hdr_ext );
 477                         }
 478                         for (i = 0; i < hdr_extension; i++ ) {
 479                                 if ( tree ) proto_tree_add_uint( rtp_csrc_tree, hf_rtp_hdr_ext, tvb, offset, 4, tvb_get_ntohl( tvb, offset ) );
 480                                 offset += 4;
 481                         }
 482                 }
 483         }
 484
 485         if ( padding_set ) {
 486                 /*
 487                  * This RTP frame has padding - find it.
 488                  *
 489                  * The padding count is found in the LAST octet of
 490                  * the packet; it contains the number of octets
 491                  * that can be ignored at the end of the packet.
 492                  */
 493                 if (tvb_length(tvb) < tvb_reported_length(tvb)) {
 494                         /*
 495                          * We don't *have* the last octet of the
 496                          * packet, so we can't get the padding
 497                          * count.
 498                          *
 499                          * Put an indication of that into the
 500                          * tree, and just put in a raw data
 501                          * item.
 502                          */
 503                         if ( tree ) proto_tree_add_text(rtp_tree, tvb, 0, 0,
 504                             "Frame has padding, but not all the frame data was captured");
 505                         call_dissector(data_handle,
 506                             tvb_new_subset(tvb, offset, -1, -1),
 507                             pinfo, rtp_tree);
 508                         return;
 509                 }
 510
 511                 padding_count = tvb_get_guint8( tvb,
 512                     tvb_reported_length( tvb ) - 1 );
 513                 data_len =
 514                     tvb_reported_length_remaining( tvb, offset ) - padding_count;
 515
 516                 rtp_info.info_payload_offset = offset;
 517                 rtp_info.info_payload_len = tvb_length_remaining(tvb, offset);
 518                 rtp_info.info_padding_count = padding_count;
 519
 520                 if (data_len > 0) {
 521                         /*
 522                          * There's data left over when you take out
 523                          * the padding; dissect it.
 524                          */
 525                         dissect_rtp_data( tvb, pinfo, tree, rtp_tree,
 526                             offset,
 527                             data_len,
 528                             data_len,
 529                             payload_type );
 530                         offset += data_len;
 531                 } else if (data_len < 0) {
 532                         /*
 533                          * The padding count is bigger than the
 534                          * amount of RTP payload in the packet!
 535                          * Clip the padding count.
 536                          *
 537                          * XXX - put an item in the tree to indicate
 538                          * that the padding count is bogus?
 539                          */
 540                         padding_count =
 541                             tvb_reported_length_remaining(tvb, offset);
 542                 }
 543                 if (padding_count > 1) {
 544                         /*
 545                          * There's more than one byte of padding;
 546                          * show all but the last byte as padding
 547                          * data.
 548                          */
 549                         if ( tree ) proto_tree_add_item( rtp_tree, hf_rtp_padding_data,
 550                             tvb, offset, padding_count - 1, FALSE );
 551                         offset += padding_count - 1;
 552                 }
 553                 /*
 554                  * Show the last byte in the PDU as the padding
 555                  * count.
 556                  */
 557                 if ( tree ) proto_tree_add_item( rtp_tree, hf_rtp_padding_count,
 558                     tvb, offset, 1, FALSE );
 559         }
 560         else {
 561                 /*
 562                  * No padding.
 563                  */
 564                 dissect_rtp_data( tvb, pinfo, tree, rtp_tree, offset,
 565                     tvb_length_remaining( tvb, offset ),
 566                     tvb_reported_length_remaining( tvb, offset ),
 567                     payload_type );
 568                 rtp_info.info_payload_offset = offset;
 569                 rtp_info.info_payload_len = tvb_length_remaining(tvb, offset);
 570         }
 571         if (!pinfo->in_error_pkt)
 572                 tap_queue_packet(rtp_tap, pinfo, &rtp_info);
 573 }
 574
 575 void
 576 proto_register_rtp(void)
 577 {
 578         static hf_register_info hf[] =
 579         {
 580                 {
 581                         &hf_rtp_version,
 582                         {
 583                                 "Version",
 584                                 "rtp.version",
 585                                 FT_UINT8,
 586                                 BASE_DEC,
 587                                 VALS(rtp_version_vals),
 588                                 0xC0,
 589                                 "", HFILL
 590                         }
 591                 },
 592                 {
 593                         &hf_rtp_padding,
 594                         {
 595                                 "Padding",
 596                                 "rtp.padding",
 597                                 FT_BOOLEAN,
 598                                 8,
 599                                 NULL,
 600                                 0x20,
 601                                 "", HFILL
 602                         }
 603                 },
 604                 {
 605                         &hf_rtp_extension,
 606                         {
 607                                 "Extension",
 608                                 "rtp.ext",
 609                                 FT_BOOLEAN,
 610                                 8,
 611                                 NULL,
 612                                 0x10,
 613                                 "", HFILL
 614                         }
 615                 },
 616                 {
 617                         &hf_rtp_csrc_count,
 618                         {
 619                                 "Contributing source identifiers count",
 620                                 "rtp.cc",
 621                                 FT_UINT8,
 622                                 BASE_DEC,
 623                                 NULL,
 624                                 0x0F,
 625                                 "", HFILL
 626                         }
 627                 },
 628                 {
 629                         &hf_rtp_marker,
 630                         {
 631                                 "Marker",
 632                                 "rtp.marker",
 633                                 FT_BOOLEAN,
 634                                 8,
 635                                 NULL,
 636                                 0x80,
 637                                 "", HFILL
 638                         }
 639                 },
 640                 {
 641                         &hf_rtp_payload_type,
 642                         {
 643                                 "Payload type",
 644                                 "rtp.p_type",
 645                                 FT_UINT8,
 646                                 BASE_DEC,
 647                                 VALS(rtp_payload_type_vals),
 648                                 0x7F,
 649                                 "", HFILL
 650                         }
 651                 },
 652                 {
 653                         &hf_rtp_seq_nr,
 654                         {
 655                                 "Sequence number",
 656                                 "rtp.seq",
 657                                 FT_UINT16,
 658                                 BASE_DEC,
 659                                 NULL,
 660                                 0x0,
 661                                 "", HFILL
 662                         }
 663                 },
 664                 {
 665                         &hf_rtp_timestamp,
 666                         {
 667                                 "Timestamp",
 668                                 "rtp.timestamp",
 669                                 FT_UINT32,
 670                                 BASE_DEC,
 671                                 NULL,
 672                                 0x0,
 673                                 "", HFILL
 674                         }
 675                 },
 676                 {
 677                         &hf_rtp_ssrc,
 678                         {
 679                                 "Synchronization Source identifier",
 680                                 "rtp.ssrc",
 681                                 FT_UINT32,
 682                                 BASE_DEC,
 683                                 NULL,
 684                                 0x0,
 685                                 "", HFILL
 686                         }
 687                 },
 688                 {
 689                         &hf_rtp_prof_define,
 690                         {
 691                                 "Defined by profile",
 692                                 "rtp.ext.profile",
 693                                 FT_UINT16,
 694                                 BASE_DEC,
 695                                 NULL,
 696                                 0x0,
 697                                 "", HFILL
 698                         }
 699                 },
 700                 {
 701                         &hf_rtp_length,
 702                         {
 703                                 "Extension length",
 704                                 "rtp.ext.len",
 705                                 FT_UINT16,
 706                                 BASE_DEC,
 707                                 NULL,
 708                                 0x0,
 709                                 "", HFILL
 710                         }
 711                 },
 712                 {
 713                         &hf_rtp_csrc_item,
 714                         {
 715                                 "CSRC item",
 716                                 "rtp.csrc.item",
 717                                 FT_UINT32,
 718                                 BASE_DEC,
 719                                 NULL,
 720                                 0x0,
 721                                 "", HFILL
 722                         }
 723                 },
 724                 {
 725                         &hf_rtp_hdr_ext,
 726                         {
 727                                 "Header extension",
 728                                 "rtp.hdr_ext",
 729                                 FT_UINT32,
 730                                 BASE_DEC,
 731                                 NULL,
 732                                 0x0,
 733                                 "", HFILL
 734                         }
 735                 },
 736                 {
 737                         &hf_rtp_data,
 738                         {
 739                                 "Payload",
 740                                 "rtp.payload",
 741                                 FT_BYTES,
 742                                 BASE_HEX,
 743                                 NULL,
 744                                 0x0,
 745                                 "", HFILL
 746                         }
 747                 },
 748                 {
 749                         &hf_rtp_padding_data,
 750                         {
 751                                 "Padding data",
 752                                 "rtp.padding.data",
 753                                 FT_BYTES,
 754                                 BASE_HEX,
 755                                 NULL,
 756                                 0x0,
 757                                 "", HFILL
 758                         }
 759                 },
 760                 {
 761                         &hf_rtp_padding_count,
 762                         {
 763                                 "Padding count",
 764                                 "rtp.padding.count",
 765                                 FT_UINT8,
 766                                 BASE_DEC,
 767                                 NULL,
 768                                 0x0,
 769                                 "", HFILL
 770                         }
 771                 },
 772 };
 773
 774         static gint *ett[] =
 775         {
 776                 &ett_rtp,
 777                 &ett_csrc_list,
 778                 &ett_hdr_ext,
 779         };
 780
 781
 782         proto_rtp = proto_register_protocol("Real-Time Transport Protocol",
 783             "RTP", "rtp");
 784         proto_register_field_array(proto_rtp, hf, array_length(hf));
 785         proto_register_subtree_array(ett, array_length(ett));
 786
 787         register_dissector("rtp", dissect_rtp, proto_rtp);
 788         rtp_tap = register_tap("rtp");
 789
 790         rtp_pt_dissector_table = register_dissector_table("rtp.pt",
 791             "RTP payload type", FT_UINT8, BASE_DEC);
 792
 793 #if 0
 794         register_init_routine( &rtp_init );
 795 #endif
 796 }
 797
 798 void
 799 proto_reg_handoff_rtp(void)
 800 {
 801         dissector_handle_t rtp_handle;
 802
 803         data_handle = find_dissector("data");
 804
 805         /*
 806          * Register this dissector as one that can be selected by a
 807          * UDP port number.
 808          */
 809         rtp_handle = find_dissector("rtp");
 810         dissector_add_handle("udp.port", rtp_handle);
 811 }