1*e018180dSDominic Spill /* packet-btbredr.c
2*e018180dSDominic Spill * Routines for Bluetooth baseband dissection
3*e018180dSDominic Spill * Copyright 2014, Dominic Spill <[email protected]>
4*e018180dSDominic Spill * Copyright 2009, Michael Ossmann <[email protected]>
5*e018180dSDominic Spill *
6*e018180dSDominic Spill * Wireshark - Network traffic analyzer
7*e018180dSDominic Spill * By Gerald Combs <[email protected]>
8*e018180dSDominic Spill * Copyright 1998 Gerald Combs
9*e018180dSDominic Spill *
10*e018180dSDominic Spill * This program is free software; you can redistribute it and/or
11*e018180dSDominic Spill * modify it under the terms of the GNU General Public License
12*e018180dSDominic Spill * as published by the Free Software Foundation; either version 2
13*e018180dSDominic Spill * of the License, or (at your option) any later version.
14*e018180dSDominic Spill *
15*e018180dSDominic Spill * This program is distributed in the hope that it will be useful,
16*e018180dSDominic Spill * but WITHOUT ANY WARRANTY; without even the implied warranty of
17*e018180dSDominic Spill * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18*e018180dSDominic Spill * GNU General Public License for more details.
19*e018180dSDominic Spill *
20*e018180dSDominic Spill * You should have received a copy of the GNU General Public License
21*e018180dSDominic Spill * along with this program; if not, write to the Free Software
22*e018180dSDominic Spill * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA.
23*e018180dSDominic Spill */
24*e018180dSDominic Spill
25*e018180dSDominic Spill #ifdef HAVE_CONFIG_H
26*e018180dSDominic Spill #include "config.h"
27*e018180dSDominic Spill #else
28*e018180dSDominic Spill #include <wireshark/config.h>
29*e018180dSDominic Spill #endif
30*e018180dSDominic Spill
31*e018180dSDominic Spill #include <epan/packet.h>
32*e018180dSDominic Spill #include <epan/prefs.h>
33*e018180dSDominic Spill
34*e018180dSDominic Spill #include <stdio.h>
35*e018180dSDominic Spill
36*e018180dSDominic Spill /* function prototypes */
37*e018180dSDominic Spill void proto_reg_handoff_btbredr(void);
38*e018180dSDominic Spill
39*e018180dSDominic Spill /* initialize the protocol and registered fields */
40*e018180dSDominic Spill static int proto_btbredr = -1;
41*e018180dSDominic Spill static int hf_btbredr_meta = -1;
42*e018180dSDominic Spill static int hf_btbredr_channel = -1;
43*e018180dSDominic Spill static int hf_btbredr_signal = -1;
44*e018180dSDominic Spill static int hf_btbredr_noise = -1;
45*e018180dSDominic Spill static int hf_btbredr_ac_offenses = -1;
46*e018180dSDominic Spill static int hf_btbredr_mod = -1;
47*e018180dSDominic Spill static int hf_btbredr_transport = -1;
48*e018180dSDominic Spill static int hf_btbredr_corrected_header = -1;
49*e018180dSDominic Spill static int hf_btbredr_corrected_payload = -1;
50*e018180dSDominic Spill static int hf_btbredr_lap = -1;
51*e018180dSDominic Spill static int hf_btbredr_ref_lap = -1;
52*e018180dSDominic Spill static int hf_btbredr_ref_uap = -1;
53*e018180dSDominic Spill static int hf_btbredr_pkthdr = -1;
54*e018180dSDominic Spill static int hf_btbredr_ltaddr = -1;
55*e018180dSDominic Spill static int hf_btbredr_type = -1;
56*e018180dSDominic Spill static int hf_btbredr_flags = -1;
57*e018180dSDominic Spill static int hf_btbredr_flow = -1;
58*e018180dSDominic Spill static int hf_btbredr_arqn = -1;
59*e018180dSDominic Spill static int hf_btbredr_seqn = -1;
60*e018180dSDominic Spill static int hf_btbredr_hec = -1;
61*e018180dSDominic Spill static int hf_btbredr_payload = -1;
62*e018180dSDominic Spill static int hf_btbredr_pldhdr = -1;
63*e018180dSDominic Spill static int hf_btbredr_llid = -1;
64*e018180dSDominic Spill static int hf_btbredr_pldflow = -1;
65*e018180dSDominic Spill static int hf_btbredr_length = -1;
66*e018180dSDominic Spill static int hf_btbredr_pldbody = -1;
67*e018180dSDominic Spill static int hf_btbredr_crc = -1;
68*e018180dSDominic Spill static int hf_btbredr_fhs_parity = -1;
69*e018180dSDominic Spill static int hf_btbredr_fhs_lap = -1;
70*e018180dSDominic Spill static int hf_btbredr_fhs_eir = -1;
71*e018180dSDominic Spill static int hf_btbredr_fhs_sr = -1;
72*e018180dSDominic Spill static int hf_btbredr_fhs_uap = -1;
73*e018180dSDominic Spill static int hf_btbredr_fhs_nap = -1;
74*e018180dSDominic Spill static int hf_btbredr_fhs_class = -1;
75*e018180dSDominic Spill static int hf_btbredr_fhs_ltaddr = -1;
76*e018180dSDominic Spill static int hf_btbredr_fhs_clk = -1;
77*e018180dSDominic Spill static int hf_btbredr_fhs_psmode = -1;
78*e018180dSDominic Spill
79*e018180dSDominic Spill /* field values */
80*e018180dSDominic Spill static const true_false_string direction = {
81*e018180dSDominic Spill "Slave to Master",
82*e018180dSDominic Spill "Master to Slave"
83*e018180dSDominic Spill };
84*e018180dSDominic Spill
85*e018180dSDominic Spill static const true_false_string clock_bits = {
86*e018180dSDominic Spill "27",
87*e018180dSDominic Spill "6"
88*e018180dSDominic Spill };
89*e018180dSDominic Spill
90*e018180dSDominic Spill static const true_false_string valid_flags = {
91*e018180dSDominic Spill "Invalid",
92*e018180dSDominic Spill "Valid"
93*e018180dSDominic Spill };
94*e018180dSDominic Spill
95*e018180dSDominic Spill static const value_string modulation[] = {
96*e018180dSDominic Spill { 0x0, "Basic Rate (GFSK)" },
97*e018180dSDominic Spill { 0x1, "Enhanced Data Rate (PI/2-DQPSK)" },
98*e018180dSDominic Spill { 0x2, "Enhanced Data Rate (8DPSK)" }
99*e018180dSDominic Spill };
100*e018180dSDominic Spill
101*e018180dSDominic Spill static const value_string transports[] = {
102*e018180dSDominic Spill { 0x0, "unknown" },
103*e018180dSDominic Spill { 0x1, "SCO" },
104*e018180dSDominic Spill { 0x2, "eSCO" },
105*e018180dSDominic Spill { 0x3, "ACL" },
106*e018180dSDominic Spill { 0x4, "CSB" }
107*e018180dSDominic Spill };
108*e018180dSDominic Spill
109*e018180dSDominic Spill static const value_string packet_types[] = {
110*e018180dSDominic Spill /* generic names for unknown logical transport */
111*e018180dSDominic Spill { 0x0, "NULL" },
112*e018180dSDominic Spill { 0x1, "POLL" },
113*e018180dSDominic Spill { 0x2, "FHS" },
114*e018180dSDominic Spill { 0x3, "DM1" },
115*e018180dSDominic Spill { 0x4, "DH1/2-DH1" },
116*e018180dSDominic Spill { 0x5, "HV1" },
117*e018180dSDominic Spill { 0x6, "HV2/2-EV3" },
118*e018180dSDominic Spill { 0x7, "HV3/EV3/3-EV3" },
119*e018180dSDominic Spill { 0x8, "DV/3-DH1" },
120*e018180dSDominic Spill { 0x9, "AUX1" },
121*e018180dSDominic Spill { 0xa, "DM3/2-DH3" },
122*e018180dSDominic Spill { 0xb, "DH3/3-DH3" },
123*e018180dSDominic Spill { 0xc, "EV4/2-EV5" },
124*e018180dSDominic Spill { 0xd, "EV5/3-EV5" },
125*e018180dSDominic Spill { 0xe, "DM5/2-DH5" },
126*e018180dSDominic Spill { 0xf, "DH5/3-DH5" },
127*e018180dSDominic Spill { 0, NULL }
128*e018180dSDominic Spill };
129*e018180dSDominic Spill
130*e018180dSDominic Spill static const value_string sr_modes[] = {
131*e018180dSDominic Spill { 0x0, "R0" },
132*e018180dSDominic Spill { 0x1, "R1" },
133*e018180dSDominic Spill { 0x2, "R2" },
134*e018180dSDominic Spill { 0x3, "Reserved" },
135*e018180dSDominic Spill { 0, NULL }
136*e018180dSDominic Spill };
137*e018180dSDominic Spill
138*e018180dSDominic Spill static const range_string ps_modes[] = {
139*e018180dSDominic Spill { 0x0, 0x0, "Mandatory scan mode" },
140*e018180dSDominic Spill { 0x1, 0x7, "Reserved" },
141*e018180dSDominic Spill { 0, 0, NULL }
142*e018180dSDominic Spill };
143*e018180dSDominic Spill
144*e018180dSDominic Spill static const value_string llid_codes[] = {
145*e018180dSDominic Spill { 0x0, "undefined" },
146*e018180dSDominic Spill { 0x1, "Continuation fragment of an L2CAP message (ACL-U)" },
147*e018180dSDominic Spill { 0x2, "Start of an L2CAP message or no fragmentation (ACL-U)" },
148*e018180dSDominic Spill { 0x3, "LMP message (ACL-C)" },
149*e018180dSDominic Spill { 0, NULL }
150*e018180dSDominic Spill };
151*e018180dSDominic Spill
152*e018180dSDominic Spill /* initialize the subtree pointers */
153*e018180dSDominic Spill static gint ett_btbredr = -1;
154*e018180dSDominic Spill static gint ett_btbredr_meta = -1;
155*e018180dSDominic Spill static gint ett_btbredr_pkthdr = -1;
156*e018180dSDominic Spill static gint ett_btbredr_flags = -1;
157*e018180dSDominic Spill static gint ett_btbredr_payload = -1;
158*e018180dSDominic Spill static gint ett_btbredr_pldhdr = -1;
159*e018180dSDominic Spill
160*e018180dSDominic Spill /* subdissectors */
161*e018180dSDominic Spill static dissector_handle_t btlmp_handle = NULL;
162*e018180dSDominic Spill static dissector_handle_t btl2cap_handle = NULL;
163*e018180dSDominic Spill
164*e018180dSDominic Spill /* packet header flags */
165*e018180dSDominic Spill static const int *flag_fields[] = {
166*e018180dSDominic Spill &hf_btbredr_flow,
167*e018180dSDominic Spill &hf_btbredr_arqn,
168*e018180dSDominic Spill &hf_btbredr_seqn,
169*e018180dSDominic Spill NULL
170*e018180dSDominic Spill };
171*e018180dSDominic Spill
172*e018180dSDominic Spill /* one byte payload header */
173*e018180dSDominic Spill int
dissect_payload_header1(proto_tree * tree,tvbuff_t * tvb,int offset)174*e018180dSDominic Spill dissect_payload_header1(proto_tree *tree, tvbuff_t *tvb, int offset)
175*e018180dSDominic Spill {
176*e018180dSDominic Spill proto_item *hdr_item;
177*e018180dSDominic Spill proto_tree *hdr_tree;
178*e018180dSDominic Spill
179*e018180dSDominic Spill DISSECTOR_ASSERT(tvb_length_remaining(tvb, offset) >= 1);
180*e018180dSDominic Spill
181*e018180dSDominic Spill hdr_item = proto_tree_add_item(tree, hf_btbredr_pldhdr, tvb, offset, 1, ENC_NA);
182*e018180dSDominic Spill hdr_tree = proto_item_add_subtree(hdr_item, ett_btbredr_pldhdr);
183*e018180dSDominic Spill
184*e018180dSDominic Spill proto_tree_add_item(hdr_tree, hf_btbredr_llid, tvb, offset, 1, ENC_NA);
185*e018180dSDominic Spill proto_tree_add_item(hdr_tree, hf_btbredr_pldflow, tvb, offset, 1, ENC_NA);
186*e018180dSDominic Spill proto_tree_add_item(hdr_tree, hf_btbredr_length, tvb, offset, 1, ENC_NA);
187*e018180dSDominic Spill
188*e018180dSDominic Spill /* payload length */
189*e018180dSDominic Spill return tvb_get_guint8(tvb, offset) >> 3;
190*e018180dSDominic Spill }
191*e018180dSDominic Spill
192*e018180dSDominic Spill void
dissect_fhs(proto_tree * tree,tvbuff_t * tvb,packet_info * pinfo,int offset)193*e018180dSDominic Spill dissect_fhs(proto_tree *tree, tvbuff_t *tvb, packet_info *pinfo, int offset)
194*e018180dSDominic Spill {
195*e018180dSDominic Spill proto_item *fhs_item, *psmode_item;
196*e018180dSDominic Spill proto_tree *fhs_tree;
197*e018180dSDominic Spill const gchar *description;
198*e018180dSDominic Spill guint8 psmode;
199*e018180dSDominic Spill
200*e018180dSDominic Spill if(tvb_length_remaining(tvb, offset) != 20) {
201*e018180dSDominic Spill col_add_str(pinfo->cinfo, COL_INFO, "Encrypted or malformed payload data");
202*e018180dSDominic Spill return;
203*e018180dSDominic Spill }
204*e018180dSDominic Spill
205*e018180dSDominic Spill fhs_item = proto_tree_add_item(tree, hf_btbredr_payload, tvb, offset, -1, ENC_NA);
206*e018180dSDominic Spill fhs_tree = proto_item_add_subtree(fhs_item, ett_btbredr_payload);
207*e018180dSDominic Spill
208*e018180dSDominic Spill /* Use proto_tree_add_bits_item() to get around 32bit limit on bitmasks */
209*e018180dSDominic Spill proto_tree_add_bits_item(fhs_tree, hf_btbredr_fhs_parity, tvb, offset*8, 34, ENC_LITTLE_ENDIAN);
210*e018180dSDominic Spill /* proto_tree_add_item(fhs_tree, hf_btbredr_fhs_parity, tvb, offset, 5, ENC_LITTLE_ENDIAN); */
211*e018180dSDominic Spill offset += 4;
212*e018180dSDominic Spill
213*e018180dSDominic Spill proto_tree_add_item(fhs_tree, hf_btbredr_fhs_lap, tvb, offset, 4, ENC_LITTLE_ENDIAN);
214*e018180dSDominic Spill offset += 3;
215*e018180dSDominic Spill
216*e018180dSDominic Spill proto_tree_add_item(fhs_tree, hf_btbredr_fhs_eir, tvb, offset, 1, ENC_NA);
217*e018180dSDominic Spill /* skipping 1 undefined bit */
218*e018180dSDominic Spill proto_tree_add_item(fhs_tree, hf_btbredr_fhs_sr, tvb, offset, 1, ENC_NA);
219*e018180dSDominic Spill /* skipping 2 reserved bits */
220*e018180dSDominic Spill offset += 1;
221*e018180dSDominic Spill
222*e018180dSDominic Spill proto_tree_add_item(fhs_tree, hf_btbredr_fhs_uap, tvb, offset, 1, ENC_NA);
223*e018180dSDominic Spill offset += 1;
224*e018180dSDominic Spill
225*e018180dSDominic Spill proto_tree_add_item(fhs_tree, hf_btbredr_fhs_nap, tvb, offset, 2, ENC_LITTLE_ENDIAN);
226*e018180dSDominic Spill offset += 2;
227*e018180dSDominic Spill
228*e018180dSDominic Spill proto_tree_add_item(fhs_tree, hf_btbredr_fhs_class, tvb, offset, 3, ENC_LITTLE_ENDIAN);
229*e018180dSDominic Spill offset += 3;
230*e018180dSDominic Spill
231*e018180dSDominic Spill proto_tree_add_item(fhs_tree, hf_btbredr_fhs_ltaddr, tvb, offset, 1, ENC_NA);
232*e018180dSDominic Spill proto_tree_add_item(fhs_tree, hf_btbredr_fhs_clk, tvb, offset, 4, ENC_LITTLE_ENDIAN);
233*e018180dSDominic Spill offset += 3;
234*e018180dSDominic Spill
235*e018180dSDominic Spill psmode = tvb_get_guint8(tvb, offset);
236*e018180dSDominic Spill description = try_rval_to_str(psmode, ps_modes);
237*e018180dSDominic Spill psmode_item = proto_tree_add_item(fhs_tree, hf_btbredr_fhs_psmode, tvb, offset, 1, ENC_NA);
238*e018180dSDominic Spill if (description)
239*e018180dSDominic Spill proto_item_append_text(psmode_item, " (%s)", description);
240*e018180dSDominic Spill offset += 1;
241*e018180dSDominic Spill
242*e018180dSDominic Spill proto_tree_add_item(fhs_tree, hf_btbredr_crc, tvb, offset, 2, ENC_LITTLE_ENDIAN);
243*e018180dSDominic Spill offset += 2;
244*e018180dSDominic Spill }
245*e018180dSDominic Spill
246*e018180dSDominic Spill void
dissect_dm1(proto_tree * tree,tvbuff_t * tvb,packet_info * pinfo,int offset)247*e018180dSDominic Spill dissect_dm1(proto_tree *tree, tvbuff_t *tvb, packet_info *pinfo, int offset)
248*e018180dSDominic Spill {
249*e018180dSDominic Spill int len; /* payload length indicated by payload header */
250*e018180dSDominic Spill int llid; /* logical link id */
251*e018180dSDominic Spill int l2len; /* length indicated by l2cap header */
252*e018180dSDominic Spill proto_item *dm1_item;
253*e018180dSDominic Spill proto_tree *dm1_tree;
254*e018180dSDominic Spill tvbuff_t *pld_tvb;
255*e018180dSDominic Spill
256*e018180dSDominic Spill /*
257*e018180dSDominic Spill * FIXME
258*e018180dSDominic Spill * I'm probably doing a terrible, terrible thing here, but it gets my
259*e018180dSDominic Spill * initial test cases working.
260*e018180dSDominic Spill */
261*e018180dSDominic Spill guint16 fake_acl_data;
262*e018180dSDominic Spill
263*e018180dSDominic Spill if(tvb_length_remaining(tvb, offset) < 3) {
264*e018180dSDominic Spill col_add_str(pinfo->cinfo, COL_INFO, "Encrypted or malformed payload data");
265*e018180dSDominic Spill return;
266*e018180dSDominic Spill }
267*e018180dSDominic Spill
268*e018180dSDominic Spill dm1_item = proto_tree_add_item(tree, hf_btbredr_payload, tvb, offset, -1, ENC_NA);
269*e018180dSDominic Spill dm1_tree = proto_item_add_subtree(dm1_item, ett_btbredr_payload);
270*e018180dSDominic Spill
271*e018180dSDominic Spill len = dissect_payload_header1(dm1_tree, tvb, offset);
272*e018180dSDominic Spill llid = tvb_get_guint8(tvb, offset) & 0x3;
273*e018180dSDominic Spill offset += 1;
274*e018180dSDominic Spill
275*e018180dSDominic Spill if(tvb_length_remaining(tvb, offset) < len + 2) {
276*e018180dSDominic Spill col_add_str(pinfo->cinfo, COL_INFO, "Encrypted or malformed payload data");
277*e018180dSDominic Spill return;
278*e018180dSDominic Spill }
279*e018180dSDominic Spill
280*e018180dSDominic Spill if (llid == 3 && btlmp_handle) {
281*e018180dSDominic Spill /* LMP */
282*e018180dSDominic Spill pld_tvb = tvb_new_subset(tvb, offset, len, len);
283*e018180dSDominic Spill call_dissector(btlmp_handle, pld_tvb, pinfo, dm1_tree);
284*e018180dSDominic Spill } else if (llid == 2 && btl2cap_handle) {
285*e018180dSDominic Spill /* unfragmented L2CAP or start of fragment */
286*e018180dSDominic Spill l2len = tvb_get_letohs(tvb, offset);
287*e018180dSDominic Spill if (l2len + 4 == len) {
288*e018180dSDominic Spill /* unfragmented */
289*e018180dSDominic Spill pinfo->private_data = &fake_acl_data;
290*e018180dSDominic Spill pld_tvb = tvb_new_subset(tvb, offset, len, len);
291*e018180dSDominic Spill call_dissector(btl2cap_handle, pld_tvb, pinfo, dm1_tree);
292*e018180dSDominic Spill } else {
293*e018180dSDominic Spill /* start of fragment */
294*e018180dSDominic Spill proto_tree_add_item(dm1_tree, hf_btbredr_pldbody, tvb, offset, len, ENC_NA);
295*e018180dSDominic Spill }
296*e018180dSDominic Spill } else {
297*e018180dSDominic Spill proto_tree_add_item(dm1_tree, hf_btbredr_pldbody, tvb, offset, len, ENC_NA);
298*e018180dSDominic Spill }
299*e018180dSDominic Spill offset += len;
300*e018180dSDominic Spill
301*e018180dSDominic Spill proto_tree_add_item(dm1_tree, hf_btbredr_crc, tvb, offset, 2, ENC_LITTLE_ENDIAN);
302*e018180dSDominic Spill offset += 2;
303*e018180dSDominic Spill }
304*e018180dSDominic Spill
305*e018180dSDominic Spill /* dissect a packet */
306*e018180dSDominic Spill static int
dissect_btbredr(tvbuff_t * tvb,packet_info * pinfo,proto_tree * tree,void * data _U_)307*e018180dSDominic Spill dissect_btbredr(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_)
308*e018180dSDominic Spill {
309*e018180dSDominic Spill proto_item *btbredr_item, *meta_item, *pkthdr_item;
310*e018180dSDominic Spill proto_tree *btbredr_tree, *meta_tree, *pkthdr_tree;
311*e018180dSDominic Spill int offset;
312*e018180dSDominic Spill /* Avoid error: 'type' may be used uninitialized in this function */
313*e018180dSDominic Spill guint8 type = 0xff;
314*e018180dSDominic Spill const gchar *info;
315*e018180dSDominic Spill
316*e018180dSDominic Spill /* sanity check: length */
317*e018180dSDominic Spill if (tvb_length(tvb) > 0 && tvb_length(tvb) < 9)
318*e018180dSDominic Spill /* bad length: look for a different dissector */
319*e018180dSDominic Spill return 0;
320*e018180dSDominic Spill
321*e018180dSDominic Spill /* maybe should verify HEC */
322*e018180dSDominic Spill
323*e018180dSDominic Spill /* make entries in protocol column and info column on summary display */
324*e018180dSDominic Spill col_set_str(pinfo->cinfo, COL_PROTOCOL, "Bluetooth");
325*e018180dSDominic Spill
326*e018180dSDominic Spill if (tvb_length(tvb) == 0) {
327*e018180dSDominic Spill info = "ID";
328*e018180dSDominic Spill } else {
329*e018180dSDominic Spill type = (tvb_get_guint8(tvb, 16) >> 3) & 0x0f;
330*e018180dSDominic Spill info = val_to_str(type, packet_types, "Unknown type: 0x%x");
331*e018180dSDominic Spill }
332*e018180dSDominic Spill
333*e018180dSDominic Spill col_clear(pinfo->cinfo, COL_INFO);
334*e018180dSDominic Spill col_add_str(pinfo->cinfo, COL_INFO, info);
335*e018180dSDominic Spill
336*e018180dSDominic Spill /* see if we are being asked for details */
337*e018180dSDominic Spill if (tree) {
338*e018180dSDominic Spill
339*e018180dSDominic Spill /* create display subtree for the protocol */
340*e018180dSDominic Spill offset = 0;
341*e018180dSDominic Spill btbredr_item = proto_tree_add_item(tree, proto_btbredr, tvb, offset, -1, ENC_NA);
342*e018180dSDominic Spill btbredr_tree = proto_item_add_subtree(btbredr_item, ett_btbredr);
343*e018180dSDominic Spill
344*e018180dSDominic Spill /* ID packets have no header, no payload */
345*e018180dSDominic Spill if (tvb_length(tvb) == 0)
346*e018180dSDominic Spill return 1;
347*e018180dSDominic Spill
348*e018180dSDominic Spill /* meta data */
349*e018180dSDominic Spill meta_item = proto_tree_add_item(btbredr_tree, hf_btbredr_meta, tvb, offset, 3, ENC_NA);
350*e018180dSDominic Spill meta_tree = proto_item_add_subtree(meta_item, ett_btbredr_meta);
351*e018180dSDominic Spill
352*e018180dSDominic Spill proto_tree_add_item(meta_tree, hf_btbredr_channel, tvb, offset, 1, ENC_NA);
353*e018180dSDominic Spill offset += 1;
354*e018180dSDominic Spill proto_tree_add_item(meta_tree, hf_btbredr_signal, tvb, offset, 1, ENC_NA);
355*e018180dSDominic Spill offset += 1;
356*e018180dSDominic Spill proto_tree_add_item(meta_tree, hf_btbredr_noise, tvb, offset, 1, ENC_NA);
357*e018180dSDominic Spill offset += 1;
358*e018180dSDominic Spill proto_tree_add_item(meta_tree, hf_btbredr_ac_offenses, tvb, offset, 1, ENC_NA);
359*e018180dSDominic Spill offset += 1;
360*e018180dSDominic Spill
361*e018180dSDominic Spill proto_tree_add_item(meta_tree, hf_btbredr_mod, tvb, offset, 1, ENC_NA);
362*e018180dSDominic Spill proto_tree_add_item(meta_tree, hf_btbredr_transport, tvb, offset, 1, ENC_NA);
363*e018180dSDominic Spill offset += 1;
364*e018180dSDominic Spill
365*e018180dSDominic Spill proto_tree_add_item(meta_tree, hf_btbredr_corrected_header, tvb, offset, 1, ENC_NA);
366*e018180dSDominic Spill offset += 1;
367*e018180dSDominic Spill proto_tree_add_item(meta_tree, hf_btbredr_corrected_payload, tvb, offset, 2, ENC_LITTLE_ENDIAN);
368*e018180dSDominic Spill offset += 2;
369*e018180dSDominic Spill
370*e018180dSDominic Spill proto_tree_add_item(meta_tree, hf_btbredr_lap, tvb, offset, 4, ENC_LITTLE_ENDIAN);
371*e018180dSDominic Spill offset += 4;
372*e018180dSDominic Spill proto_tree_add_item(meta_tree, hf_btbredr_ref_lap, tvb, offset, 3, ENC_LITTLE_ENDIAN);
373*e018180dSDominic Spill offset += 3;
374*e018180dSDominic Spill proto_tree_add_item(meta_tree, hf_btbredr_ref_uap, tvb, offset, 1, ENC_NA);
375*e018180dSDominic Spill offset += 1;
376*e018180dSDominic Spill
377*e018180dSDominic Spill
378*e018180dSDominic Spill /* packet header */
379*e018180dSDominic Spill pkthdr_item = proto_tree_add_item(btbredr_tree, hf_btbredr_pkthdr, tvb, offset, 3, ENC_NA);
380*e018180dSDominic Spill pkthdr_tree = proto_item_add_subtree(pkthdr_item, ett_btbredr_pkthdr);
381*e018180dSDominic Spill
382*e018180dSDominic Spill proto_tree_add_item(pkthdr_tree, hf_btbredr_ltaddr, tvb, offset, 1, ENC_NA);
383*e018180dSDominic Spill proto_tree_add_item(pkthdr_tree, hf_btbredr_type, tvb, offset, 1, ENC_NA);
384*e018180dSDominic Spill offset += 1;
385*e018180dSDominic Spill proto_tree_add_bitmask(pkthdr_tree, tvb, offset, hf_btbredr_flags,
386*e018180dSDominic Spill ett_btbredr_flags, flag_fields, ENC_NA);
387*e018180dSDominic Spill offset += 1;
388*e018180dSDominic Spill proto_tree_add_item(pkthdr_tree, hf_btbredr_hec, tvb, offset, 1, ENC_NA);
389*e018180dSDominic Spill offset += 2;
390*e018180dSDominic Spill
391*e018180dSDominic Spill /* payload */
392*e018180dSDominic Spill switch (type) {
393*e018180dSDominic Spill case 0x0: /* NULL */
394*e018180dSDominic Spill case 0x1: /* POLL */
395*e018180dSDominic Spill break;
396*e018180dSDominic Spill case 0x2: /* FHS */
397*e018180dSDominic Spill dissect_fhs(btbredr_tree, tvb, pinfo, offset);
398*e018180dSDominic Spill break;
399*e018180dSDominic Spill case 0x3: /* DM1 */
400*e018180dSDominic Spill dissect_dm1(btbredr_tree, tvb, pinfo, offset);
401*e018180dSDominic Spill break;
402*e018180dSDominic Spill case 0x4: /* DH1/2-DH1 */
403*e018180dSDominic Spill dissect_dm1(btbredr_tree, tvb, pinfo, offset);
404*e018180dSDominic Spill break;
405*e018180dSDominic Spill case 0x5: /* HV1 */
406*e018180dSDominic Spill case 0x6: /* HV2/2-EV3 */
407*e018180dSDominic Spill case 0x7: /* HV3/EV3/3-EV3 */
408*e018180dSDominic Spill case 0x8: /* DV/3-DH1 */
409*e018180dSDominic Spill case 0x9: /* AUX1 */
410*e018180dSDominic Spill case 0xa: /* DM3/2-DH3 */
411*e018180dSDominic Spill case 0xb: /* DH3/3-DH3 */
412*e018180dSDominic Spill case 0xc: /* EV4/2-EV5 */
413*e018180dSDominic Spill case 0xd: /* EV5/3-EV5 */
414*e018180dSDominic Spill case 0xe: /* DM5/2-DH5 */
415*e018180dSDominic Spill case 0xf: /* DH5/3-DH5 */
416*e018180dSDominic Spill proto_tree_add_item(btbredr_tree, hf_btbredr_payload, tvb, offset, -1, ENC_NA);
417*e018180dSDominic Spill break;
418*e018180dSDominic Spill default:
419*e018180dSDominic Spill break;
420*e018180dSDominic Spill }
421*e018180dSDominic Spill }
422*e018180dSDominic Spill
423*e018180dSDominic Spill /* Return the amount of data this dissector was able to dissect */
424*e018180dSDominic Spill return tvb_length(tvb);
425*e018180dSDominic Spill }
426*e018180dSDominic Spill
427*e018180dSDominic Spill /* register the protocol with Wireshark */
428*e018180dSDominic Spill void
proto_register_btbredr(void)429*e018180dSDominic Spill proto_register_btbredr(void)
430*e018180dSDominic Spill {
431*e018180dSDominic Spill /* list of fields */
432*e018180dSDominic Spill static hf_register_info hf[] = {
433*e018180dSDominic Spill { &hf_btbredr_meta,
434*e018180dSDominic Spill { "Meta Data", "btbredr.meta",
435*e018180dSDominic Spill FT_NONE, BASE_NONE, NULL, 0x0,
436*e018180dSDominic Spill "Meta Data About the Packet", HFILL }
437*e018180dSDominic Spill },
438*e018180dSDominic Spill { &hf_btbredr_channel,
439*e018180dSDominic Spill { "Channel", "btbredr.channel",
440*e018180dSDominic Spill FT_UINT8, BASE_DEC, NULL, 0x0,
441*e018180dSDominic Spill "Channel (0-78)", HFILL }
442*e018180dSDominic Spill },
443*e018180dSDominic Spill { &hf_btbredr_signal,
444*e018180dSDominic Spill { "Signal", "btbredr.signal",
445*e018180dSDominic Spill FT_UINT8, BASE_DEC, NULL, 0x0,
446*e018180dSDominic Spill "Signal Power", HFILL }
447*e018180dSDominic Spill },
448*e018180dSDominic Spill { &hf_btbredr_noise,
449*e018180dSDominic Spill { "Noise", "btbredr.noise",
450*e018180dSDominic Spill FT_UINT8, BASE_DEC, NULL, 0x0,
451*e018180dSDominic Spill "Noise Power", HFILL }
452*e018180dSDominic Spill },
453*e018180dSDominic Spill { &hf_btbredr_ac_offenses,
454*e018180dSDominic Spill { "AC Offenses", "btbredr.ac_offenses",
455*e018180dSDominic Spill FT_UINT8, BASE_DEC, NULL, 0x0,
456*e018180dSDominic Spill "Access Code Offenses", HFILL }
457*e018180dSDominic Spill },
458*e018180dSDominic Spill { &hf_btbredr_mod,
459*e018180dSDominic Spill { "Transport Rate", "btbredr.mod",
460*e018180dSDominic Spill FT_UINT8, BASE_HEX, VALS(&modulation), 0x02,
461*e018180dSDominic Spill "Transport Data Rate", HFILL }
462*e018180dSDominic Spill },
463*e018180dSDominic Spill { &hf_btbredr_transport,
464*e018180dSDominic Spill { "Transport", "btbredr.transport",
465*e018180dSDominic Spill FT_UINT8, BASE_HEX, VALS(&transports), 0x70,
466*e018180dSDominic Spill "Logical Transport", HFILL }
467*e018180dSDominic Spill },
468*e018180dSDominic Spill { &hf_btbredr_corrected_header,
469*e018180dSDominic Spill { "Corrected Header", "btbredr.corrected_header",
470*e018180dSDominic Spill FT_UINT8, BASE_DEC, NULL, 0x0,
471*e018180dSDominic Spill "Corrected Header Bits", HFILL }
472*e018180dSDominic Spill },
473*e018180dSDominic Spill { &hf_btbredr_corrected_payload,
474*e018180dSDominic Spill { "Corrected Payload", "btbredr.corrected_payload",
475*e018180dSDominic Spill FT_UINT16, BASE_DEC, NULL, 0x0,
476*e018180dSDominic Spill "Corrected Payload Bits", HFILL }
477*e018180dSDominic Spill },
478*e018180dSDominic Spill { &hf_btbredr_lap,
479*e018180dSDominic Spill { "LAP", "btbredr.lap",
480*e018180dSDominic Spill FT_UINT32, BASE_HEX, NULL, 0x0,
481*e018180dSDominic Spill "Lower Address Part", HFILL }
482*e018180dSDominic Spill },
483*e018180dSDominic Spill { &hf_btbredr_ref_lap,
484*e018180dSDominic Spill { "Ref. LAP", "btbredr.ref_lap",
485*e018180dSDominic Spill FT_UINT32, BASE_HEX, NULL, 0x0,
486*e018180dSDominic Spill "Reference LAP", HFILL }
487*e018180dSDominic Spill },
488*e018180dSDominic Spill { &hf_btbredr_ref_uap,
489*e018180dSDominic Spill { "Ref. UAP", "btbredr.ref_uap",
490*e018180dSDominic Spill FT_UINT8, BASE_HEX, NULL, 0x0,
491*e018180dSDominic Spill "Reference UAP", HFILL }
492*e018180dSDominic Spill },
493*e018180dSDominic Spill { &hf_btbredr_pkthdr,
494*e018180dSDominic Spill { "Packet Header", "btbredr.pkthdr",
495*e018180dSDominic Spill FT_NONE, BASE_NONE, NULL, 0x0,
496*e018180dSDominic Spill "Bluetooth Baseband Packet Header", HFILL }
497*e018180dSDominic Spill },
498*e018180dSDominic Spill { &hf_btbredr_ltaddr,
499*e018180dSDominic Spill { "LT_ADDR", "btbredr.lt_addr",
500*e018180dSDominic Spill FT_UINT8, BASE_HEX, NULL, 0x07,
501*e018180dSDominic Spill "Logical Transport Address", HFILL }
502*e018180dSDominic Spill },
503*e018180dSDominic Spill { &hf_btbredr_type,
504*e018180dSDominic Spill { "TYPE", "btbredr.type",
505*e018180dSDominic Spill FT_UINT8, BASE_HEX, VALS(packet_types), 0x78,
506*e018180dSDominic Spill "Packet Type", HFILL }
507*e018180dSDominic Spill },
508*e018180dSDominic Spill { &hf_btbredr_flags,
509*e018180dSDominic Spill { "Flags", "btbredr.flags",
510*e018180dSDominic Spill FT_UINT8, BASE_HEX, NULL, 0x0,
511*e018180dSDominic Spill "Packet Header Flags", HFILL }
512*e018180dSDominic Spill },
513*e018180dSDominic Spill { &hf_btbredr_flow,
514*e018180dSDominic Spill { "FLOW", "btbredr.flow",
515*e018180dSDominic Spill FT_BOOLEAN, 8, NULL, 0x01,
516*e018180dSDominic Spill "Flow control indication", HFILL }
517*e018180dSDominic Spill },
518*e018180dSDominic Spill { &hf_btbredr_arqn,
519*e018180dSDominic Spill { "ARQN", "btbredr.arqn",
520*e018180dSDominic Spill FT_BOOLEAN, 8, NULL, 0x02,
521*e018180dSDominic Spill "Acknowledgment indication", HFILL }
522*e018180dSDominic Spill },
523*e018180dSDominic Spill { &hf_btbredr_seqn,
524*e018180dSDominic Spill { "SEQN", "btbredr.seqn",
525*e018180dSDominic Spill FT_BOOLEAN, 8, NULL, 0x04,
526*e018180dSDominic Spill "Sequence number", HFILL }
527*e018180dSDominic Spill },
528*e018180dSDominic Spill { &hf_btbredr_hec,
529*e018180dSDominic Spill { "HEC", "btbredr.lt_addr",
530*e018180dSDominic Spill FT_UINT8, BASE_HEX, NULL, 0x0,
531*e018180dSDominic Spill "Header Error Check", HFILL }
532*e018180dSDominic Spill },
533*e018180dSDominic Spill { &hf_btbredr_payload,
534*e018180dSDominic Spill { "Payload", "btbredr.payload",
535*e018180dSDominic Spill FT_NONE, BASE_NONE, NULL, 0x0,
536*e018180dSDominic Spill NULL, HFILL }
537*e018180dSDominic Spill },
538*e018180dSDominic Spill { &hf_btbredr_llid,
539*e018180dSDominic Spill { "LLID", "btbredr.llid",
540*e018180dSDominic Spill FT_UINT8, BASE_HEX, VALS(llid_codes), 0x03,
541*e018180dSDominic Spill "Logical Link ID", HFILL }
542*e018180dSDominic Spill },
543*e018180dSDominic Spill { &hf_btbredr_pldflow,
544*e018180dSDominic Spill { "Flow", "btbredr.flow",
545*e018180dSDominic Spill FT_BOOLEAN, 8, NULL, 0x04,
546*e018180dSDominic Spill "Payload Flow indication", HFILL }
547*e018180dSDominic Spill },
548*e018180dSDominic Spill { &hf_btbredr_length,
549*e018180dSDominic Spill { "Length", "btbredr.length",
550*e018180dSDominic Spill FT_UINT8, BASE_DEC, NULL, 0xf8,
551*e018180dSDominic Spill "Payload Length", HFILL }
552*e018180dSDominic Spill },
553*e018180dSDominic Spill { &hf_btbredr_pldhdr,
554*e018180dSDominic Spill { "Payload Header", "btbredr.pldhdr",
555*e018180dSDominic Spill FT_NONE, BASE_NONE, NULL, 0x0,
556*e018180dSDominic Spill NULL, HFILL }
557*e018180dSDominic Spill },
558*e018180dSDominic Spill { &hf_btbredr_pldbody,
559*e018180dSDominic Spill { "Payload Body", "btbredr.pldbody",
560*e018180dSDominic Spill FT_BYTES, BASE_NONE, NULL, 0x0,
561*e018180dSDominic Spill NULL, HFILL }
562*e018180dSDominic Spill },
563*e018180dSDominic Spill { &hf_btbredr_crc,
564*e018180dSDominic Spill { "CRC", "btbredr.crc",
565*e018180dSDominic Spill FT_UINT16, BASE_HEX, NULL, 0x0,
566*e018180dSDominic Spill "Payload CRC", HFILL }
567*e018180dSDominic Spill },
568*e018180dSDominic Spill { &hf_btbredr_fhs_parity,
569*e018180dSDominic Spill { "Parity", "btbredr.parity",
570*e018180dSDominic Spill /* FIXME this doesn't work because bitmasks can only be 32 bits */
571*e018180dSDominic Spill FT_UINT64, BASE_HEX, NULL, /*0x00000003ffffffffULL,*/ 0x0,
572*e018180dSDominic Spill "LAP parity", HFILL }
573*e018180dSDominic Spill },
574*e018180dSDominic Spill { &hf_btbredr_fhs_lap,
575*e018180dSDominic Spill { "LAP", "btbredr.lap",
576*e018180dSDominic Spill FT_UINT24, BASE_HEX, NULL, 0x03fffffc,
577*e018180dSDominic Spill "Lower Address Part", HFILL }
578*e018180dSDominic Spill },
579*e018180dSDominic Spill { &hf_btbredr_fhs_eir,
580*e018180dSDominic Spill { "EIR", "btbredr.eir",
581*e018180dSDominic Spill FT_BOOLEAN, 8, NULL, 0x04,
582*e018180dSDominic Spill "Extended Inquiry Response packet may follow", HFILL }
583*e018180dSDominic Spill },
584*e018180dSDominic Spill { &hf_btbredr_fhs_sr,
585*e018180dSDominic Spill { "SR", "btbredr.sr",
586*e018180dSDominic Spill FT_UINT8, BASE_HEX, VALS(sr_modes), 0x30,
587*e018180dSDominic Spill "Scan Repetition", HFILL }
588*e018180dSDominic Spill },
589*e018180dSDominic Spill { &hf_btbredr_fhs_uap,
590*e018180dSDominic Spill { "UAP", "btbredr.uap",
591*e018180dSDominic Spill FT_UINT8, BASE_HEX, NULL, 0x0,
592*e018180dSDominic Spill "Upper Address Part", HFILL }
593*e018180dSDominic Spill },
594*e018180dSDominic Spill { &hf_btbredr_fhs_nap,
595*e018180dSDominic Spill { "NAP", "btbredr.nap",
596*e018180dSDominic Spill FT_UINT16, BASE_HEX, NULL, 0x0,
597*e018180dSDominic Spill "Non-Significant Address Part", HFILL }
598*e018180dSDominic Spill },
599*e018180dSDominic Spill { &hf_btbredr_fhs_class, /* FIXME break out further */
600*e018180dSDominic Spill { "Class of Device", "btbredr.class",
601*e018180dSDominic Spill FT_UINT24, BASE_HEX, NULL, 0x0,
602*e018180dSDominic Spill NULL, HFILL }
603*e018180dSDominic Spill },
604*e018180dSDominic Spill { &hf_btbredr_fhs_ltaddr,
605*e018180dSDominic Spill { "LT_ADDR", "btbredr.lt_addr",
606*e018180dSDominic Spill FT_UINT8, BASE_HEX, NULL, 0x07,
607*e018180dSDominic Spill "Logical Transport Address", HFILL }
608*e018180dSDominic Spill },
609*e018180dSDominic Spill { &hf_btbredr_fhs_clk,
610*e018180dSDominic Spill { "CLK", "btbredr.clk",
611*e018180dSDominic Spill FT_UINT32, BASE_HEX, NULL, 0x1ffffff8,
612*e018180dSDominic Spill "Clock bits 2 through 27", HFILL }
613*e018180dSDominic Spill },
614*e018180dSDominic Spill { &hf_btbredr_fhs_psmode,
615*e018180dSDominic Spill { "Page Scan Mode", "btbredr.psmode",
616*e018180dSDominic Spill FT_UINT8, BASE_HEX, NULL, 0xe0,
617*e018180dSDominic Spill NULL, HFILL }
618*e018180dSDominic Spill },
619*e018180dSDominic Spill };
620*e018180dSDominic Spill
621*e018180dSDominic Spill /* protocol subtree arrays */
622*e018180dSDominic Spill static gint *ett[] = {
623*e018180dSDominic Spill &ett_btbredr,
624*e018180dSDominic Spill &ett_btbredr_meta,
625*e018180dSDominic Spill &ett_btbredr_pkthdr,
626*e018180dSDominic Spill &ett_btbredr_flags,
627*e018180dSDominic Spill &ett_btbredr_payload,
628*e018180dSDominic Spill &ett_btbredr_pldhdr,
629*e018180dSDominic Spill };
630*e018180dSDominic Spill
631*e018180dSDominic Spill /* register the protocol name and description */
632*e018180dSDominic Spill proto_btbredr = proto_register_protocol(
633*e018180dSDominic Spill "Bluetooth BR/EDR Baseband", /* full name */
634*e018180dSDominic Spill "BT BR/EDR Baseband", /* short name */
635*e018180dSDominic Spill "btbredr" /* abbreviation (e.g. for filters) */
636*e018180dSDominic Spill );
637*e018180dSDominic Spill
638*e018180dSDominic Spill /* register the header fields and subtrees used */
639*e018180dSDominic Spill proto_register_field_array(proto_btbredr, hf, array_length(hf));
640*e018180dSDominic Spill proto_register_subtree_array(ett, array_length(ett));
641*e018180dSDominic Spill }
642*e018180dSDominic Spill
643*e018180dSDominic Spill /* Remove this once recent Wireshark/TCPdump releases are more common */
644*e018180dSDominic Spill #ifndef WTAP_ENCAP_BLUETOOTH_BREDR_BB
645*e018180dSDominic Spill #define WTAP_ENCAP_BLUETOOTH_BREDR_BB 161
646*e018180dSDominic Spill #endif
647*e018180dSDominic Spill
648*e018180dSDominic Spill void
proto_reg_handoff_btbredr(void)649*e018180dSDominic Spill proto_reg_handoff_btbredr(void)
650*e018180dSDominic Spill {
651*e018180dSDominic Spill dissector_handle_t btbredr_handle;
652*e018180dSDominic Spill btbredr_handle = new_create_dissector_handle(dissect_btbredr,
653*e018180dSDominic Spill proto_btbredr);
654*e018180dSDominic Spill dissector_add_uint("wtap_encap",
655*e018180dSDominic Spill WTAP_ENCAP_BLUETOOTH_BREDR_BB,
656*e018180dSDominic Spill btbredr_handle);
657*e018180dSDominic Spill
658*e018180dSDominic Spill btlmp_handle = find_dissector("btlmp");
659*e018180dSDominic Spill btl2cap_handle = find_dissector("btl2cap");
660*e018180dSDominic Spill }
661*e018180dSDominic Spill
662*e018180dSDominic Spill /*
663*e018180dSDominic Spill * Editor modelines - http://www.wireshark.org/tools/modelines.html
664*e018180dSDominic Spill *
665*e018180dSDominic Spill * Local variables:
666*e018180dSDominic Spill * c-basic-offset: 4
667*e018180dSDominic Spill * tab-width: 8
668*e018180dSDominic Spill * indent-tabs-mode: nil
669*e018180dSDominic Spill * End:
670*e018180dSDominic Spill *
671*e018180dSDominic Spill * vi: set shiftwidth=4 tabstop=8 expandtab:
672*e018180dSDominic Spill * :indentSize=4:tabSize=8:noTabs=true:
673*e018180dSDominic Spill */
674