Wireshark Patches
From Linux NFS
(Difference between revisions)
BennyHalevy (Talk | contribs) |
BennyHalevy (Talk | contribs) |
||
Line 4: | Line 4: | ||
---- | ---- | ||
- | < | + | <pre> |
/* packet-nfs.c | /* packet-nfs.c | ||
* Routines for nfs dissection | * Routines for nfs dissection | ||
Line 10,307: | Line 10,307: | ||
} | } | ||
- | </ | + | </pre> |
---- | ---- | ||
- | < | + | <pre> |
/* packet-nfs.h (c) 1999 Uwe Girlich */ | /* packet-nfs.h (c) 1999 Uwe Girlich */ | ||
/* $Id: packet-nfs.h 18787 2006-07-22 22:15:15Z sahlberg $ | /* $Id: packet-nfs.h 18787 2006-07-22 22:15:15Z sahlberg $ | ||
Line 10,477: | Line 10,477: | ||
#endif /* packet-nfs.h */ | #endif /* packet-nfs.h */ | ||
- | </ | + | </pre> |
---- | ---- |
Latest revision as of 15:45, 5 June 2007
updated 2007-06-05, base version wireshark-0.99.5
Just copy packet-nfs.c and packet-nfs.h into wireshark's epan/dissectors/ directory
/* packet-nfs.c * Routines for nfs dissection * Copyright 1999, Uwe Girlich <Uwe.Girlich@philosys.de> * Copyright 2000-2004, Mike Frisch <frisch@hummingbird.com> (NFSv4 decoding) * * $Id: packet-nfs.c 19875 2006-11-10 23:36:57Z sahlberg $ * * Wireshark - Network traffic analyzer * By Gerald Combs <gerald@wireshark.org> * Copyright 1998 Gerald Combs * * Copied from packet-smb.c * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. */ #ifdef HAVE_CONFIG_H #include "config.h" #endif #include <string.h> #include "packet-rpc.h" #include "packet-nfs.h" #include <epan/prefs.h> #include <epan/packet.h> #include <epan/emem.h> static int proto_nfs = -1; static int hf_nfs_procedure_v2 = -1; static int hf_nfs_procedure_v3 = -1; static int hf_nfs_procedure_v4 = -1; static int hf_nfs_fh_length = -1; static int hf_nfs_fh_hash = -1; static int hf_nfs_fh_fhandle_data = -1; static int hf_nfs_fh_mount_fileid = -1; static int hf_nfs_fh_mount_generation = -1; static int hf_nfs_fh_snapid = -1; static int hf_nfs_fh_unused = -1; static int hf_nfs_fh_flags = -1; static int hf_nfs_fh_fileid = -1; static int hf_nfs_fh_generation = -1; static int hf_nfs_fh_fsid = -1; static int hf_nfs_fh_export_fileid = -1; static int hf_nfs_fh_export_generation = -1; static int hf_nfs_fh_export_snapid = -1; static int hf_nfs_fh_file_flag_mntpoint = -1; static int hf_nfs_fh_file_flag_snapdir = -1; static int hf_nfs_fh_file_flag_snapdir_ent = -1; static int hf_nfs_fh_file_flag_empty = -1; static int hf_nfs_fh_file_flag_vbn_access = -1; static int hf_nfs_fh_file_flag_multivolume = -1; static int hf_nfs_fh_file_flag_metadata = -1; static int hf_nfs_fh_file_flag_orphan = -1; static int hf_nfs_fh_file_flag_foster = -1; static int hf_nfs_fh_file_flag_named_attr = -1; static int hf_nfs_fh_file_flag_exp_snapdir = -1; static int hf_nfs_fh_file_flag_vfiler = -1; static int hf_nfs_fh_file_flag_aggr = -1; static int hf_nfs_fh_file_flag_striped = -1; static int hf_nfs_fh_file_flag_private = -1; static int hf_nfs_fh_file_flag_next_gen = -1; static int hf_nfs_fh_handle_type = -1; static int hf_nfs_fh_fsid_major = -1; static int hf_nfs_fh_fsid_minor = -1; static int hf_nfs_fh_fsid_inode = -1; static int hf_nfs_fh_xfsid_major = -1; static int hf_nfs_fh_xfsid_minor = -1; static int hf_nfs_fh_fstype = -1; static int hf_nfs_fh_fn = -1; static int hf_nfs_fh_fn_len = -1; static int hf_nfs_fh_fn_inode = -1; static int hf_nfs_fh_fn_generation = -1; static int hf_nfs_fh_xfn = -1; static int hf_nfs_fh_xfn_len = -1; static int hf_nfs_fh_xfn_inode = -1; static int hf_nfs_fh_xfn_generation = -1; static int hf_nfs_fh_dentry = -1; static int hf_nfs_fh_dev = -1; static int hf_nfs_fh_xdev = -1; static int hf_nfs_fh_dirinode = -1; static int hf_nfs_fh_pinode = -1; static int hf_nfs_fh_hp_len = -1; static int hf_nfs_fh_version = -1; static int hf_nfs_fh_auth_type = -1; static int hf_nfs_fh_fsid_type = -1; static int hf_nfs_fh_fileid_type = -1; static int hf_gxfh3_utlfield = -1; static int hf_gxfh3_utlfield_tree_r = -1; static int hf_gxfh3_utlfield_tree_w = -1; static int hf_gxfh3_utlfield_jun = -1; static int hf_gxfh3_utlfield_jun_not = -1; static int hf_gxfh3_utlfield_ver = -1; static int hf_gxfh3_volcnt = -1; static int hf_gxfh3_epoch = -1; static int hf_gxfh3_ldsid = -1; static int hf_gxfh3_cid = -1; static int hf_gxfh3_resv = -1; static int hf_gxfh3_sfhflags = -1; static int hf_gxfh3_sfhflags_resv1 = -1; static int hf_gxfh3_sfhflags_resv2 = -1; static int hf_gxfh3_sfhflags_ontap7G = -1; static int hf_gxfh3_sfhflags_ontapGX = -1; static int hf_gxfh3_sfhflags_striped = -1; static int hf_gxfh3_sfhflags_empty = -1; static int hf_gxfh3_sfhflags_snapdirent = -1; static int hf_gxfh3_sfhflags_snapdir = -1; static int hf_gxfh3_sfhflags_streamdir = -1; static int hf_gxfh3_spinfid = -1; static int hf_gxfh3_spinfuid = -1; static int hf_gxfh3_exportptid = -1; static int hf_gxfh3_exportptuid = -1; static int hf_nfs_stat = -1; static int hf_nfs_full_name = -1; static int hf_nfs_name = -1; static int hf_nfs_readlink_data = -1; static int hf_nfs_read_offset = -1; static int hf_nfs_read_count = -1; static int hf_nfs_read_totalcount = -1; static int hf_nfs_data = -1; static int hf_nfs_write_beginoffset = -1; static int hf_nfs_write_offset = -1; static int hf_nfs_write_totalcount = -1; static int hf_nfs_symlink_to = -1; static int hf_nfs_readdir_cookie = -1; static int hf_nfs_readdir_count = -1; static int hf_nfs_readdir_entry = -1; static int hf_nfs_readdir_entry_fileid = -1; static int hf_nfs_readdir_entry_name = -1; static int hf_nfs_readdir_entry_cookie = -1; static int hf_nfs_readdir_entry3_fileid = -1; static int hf_nfs_readdir_entry3_name = -1; static int hf_nfs_readdir_entry3_cookie = -1; static int hf_nfs_readdirplus_entry_fileid = -1; static int hf_nfs_readdirplus_entry_name = -1; static int hf_nfs_readdirplus_entry_cookie = -1; static int hf_nfs_readdir_eof = -1; static int hf_nfs_statfs_tsize = -1; static int hf_nfs_statfs_bsize = -1; static int hf_nfs_statfs_blocks = -1; static int hf_nfs_statfs_bfree = -1; static int hf_nfs_statfs_bavail = -1; static int hf_nfs_ftype3 = -1; static int hf_nfs_nfsstat3 = -1; static int hf_nfs_read_eof = -1; static int hf_nfs_write_stable = -1; static int hf_nfs_write_committed = -1; static int hf_nfs_createmode3 = -1; static int hf_nfs_fsstat_invarsec = -1; static int hf_nfs_fsinfo_rtmax = -1; static int hf_nfs_fsinfo_rtpref = -1; static int hf_nfs_fsinfo_rtmult = -1; static int hf_nfs_fsinfo_wtmax = -1; static int hf_nfs_fsinfo_wtpref = -1; static int hf_nfs_fsinfo_wtmult = -1; static int hf_nfs_fsinfo_dtpref = -1; static int hf_nfs_fsinfo_maxfilesize = -1; static int hf_nfs_fsinfo_properties = -1; static int hf_nfs_pathconf_linkmax = -1; static int hf_nfs_pathconf_name_max = -1; static int hf_nfs_pathconf_no_trunc = -1; static int hf_nfs_pathconf_chown_restricted = -1; static int hf_nfs_pathconf_case_insensitive = -1; static int hf_nfs_pathconf_case_preserving = -1; static int hf_nfs_atime = -1; static int hf_nfs_atime_sec = -1; static int hf_nfs_atime_nsec = -1; static int hf_nfs_atime_usec = -1; static int hf_nfs_mtime = -1; static int hf_nfs_mtime_sec = -1; static int hf_nfs_mtime_nsec = -1; static int hf_nfs_mtime_usec = -1; static int hf_nfs_ctime = -1; static int hf_nfs_ctime_sec = -1; static int hf_nfs_ctime_nsec = -1; static int hf_nfs_ctime_usec = -1; static int hf_nfs_dtime = -1; static int hf_nfs_dtime_sec = -1; static int hf_nfs_dtime_nsec = -1; static int hf_nfs_fattr_type = -1; static int hf_nfs_fattr_nlink = -1; static int hf_nfs_fattr_uid = -1; static int hf_nfs_fattr_gid = -1; static int hf_nfs_fattr_size = -1; static int hf_nfs_fattr_blocksize = -1; static int hf_nfs_fattr_rdev = -1; static int hf_nfs_fattr_blocks = -1; static int hf_nfs_fattr_fsid = -1; static int hf_nfs_fattr_fileid = -1; static int hf_nfs_fattr3_type = -1; static int hf_nfs_fattr3_nlink = -1; static int hf_nfs_fattr3_uid = -1; static int hf_nfs_fattr3_gid = -1; static int hf_nfs_fattr3_size = -1; static int hf_nfs_fattr3_used = -1; static int hf_nfs_fattr3_rdev = -1; static int hf_nfs_fattr3_fsid = -1; static int hf_nfs_fattr3_fileid = -1; static int hf_nfs_wcc_attr_size = -1; static int hf_nfs_set_size3_size = -1; static int hf_nfs_cookie3 = -1; static int hf_nfs_fsstat3_resok_tbytes = -1; static int hf_nfs_fsstat3_resok_fbytes = -1; static int hf_nfs_fsstat3_resok_abytes = -1; static int hf_nfs_fsstat3_resok_tfiles = -1; static int hf_nfs_fsstat3_resok_ffiles = -1; static int hf_nfs_fsstat3_resok_afiles = -1; static int hf_nfs_uid3 = -1; static int hf_nfs_gid3 = -1; static int hf_nfs_offset3 = -1; static int hf_nfs_count3 = -1; static int hf_nfs_count3_maxcount = -1; static int hf_nfs_count3_dircount= -1; /* NFSv4 */ static int hf_nfs_nfsstat4 = -1; static int hf_nfs_argop4 = -1; static int hf_nfs_resop4 = -1; static int hf_nfs_linktext4 = -1; static int hf_nfs_tag4 = -1; static int hf_nfs_component4 = -1; static int hf_nfs_clientid4 = -1; static int hf_nfs_ace4 = -1; static int hf_nfs_recall = -1; static int hf_nfs_open_claim_type4 = -1; static int hf_nfs_opentype4 = -1; static int hf_nfs_limit_by4 = -1; static int hf_nfs_open_delegation_type4 = -1; static int hf_nfs_ftype4 = -1; static int hf_nfs_change_info4_atomic = -1; static int hf_nfs_open4_share_access = -1; static int hf_nfs_open4_share_deny = -1; static int hf_nfs_seqid4 = -1; static int hf_nfs_lock_seqid4 = -1; static int hf_nfs_mand_attr = -1; static int hf_nfs_recc_attr = -1; static int hf_nfs_time_how4 = -1; static int hf_nfs_attrlist4 = -1; static int hf_nfs_fattr4_link_support = -1; static int hf_nfs_fattr4_symlink_support = -1; static int hf_nfs_fattr4_named_attr = -1; static int hf_nfs_fattr4_unique_handles = -1; static int hf_nfs_fattr4_archive = -1; static int hf_nfs_fattr4_cansettime = -1; static int hf_nfs_fattr4_case_insensitive = -1; static int hf_nfs_fattr4_case_preserving = -1; static int hf_nfs_fattr4_chown_restricted = -1; static int hf_nfs_fattr4_hidden = -1; static int hf_nfs_fattr4_homogeneous = -1; static int hf_nfs_fattr4_mimetype = -1; static int hf_nfs_fattr4_no_trunc = -1; static int hf_nfs_fattr4_system = -1; static int hf_nfs_fattr4_owner = -1; static int hf_nfs_fattr4_owner_group = -1; static int hf_nfs_fattr4_size = -1; static int hf_nfs_fattr4_aclsupport = -1; static int hf_nfs_fattr4_lease_time = -1; static int hf_nfs_fattr4_fileid = -1; static int hf_nfs_fattr4_files_avail = -1; static int hf_nfs_fattr4_files_free = -1; static int hf_nfs_fattr4_files_total = -1; static int hf_nfs_fattr4_maxfilesize = -1; static int hf_nfs_fattr4_maxlink = -1; static int hf_nfs_fattr4_maxname = -1; static int hf_nfs_fattr4_numlinks = -1; static int hf_nfs_fattr4_maxread = -1; static int hf_nfs_fattr4_maxwrite = -1; static int hf_nfs_fattr4_quota_hard = -1; static int hf_nfs_fattr4_quota_soft = -1; static int hf_nfs_fattr4_quota_used = -1; static int hf_nfs_fattr4_space_avail = -1; static int hf_nfs_fattr4_space_free = -1; static int hf_nfs_fattr4_space_total = -1; static int hf_nfs_fattr4_space_used = -1; static int hf_nfs_who = -1; static int hf_nfs_server = -1; static int hf_nfs_stable_how4 = -1; static int hf_nfs_dirlist4_eof = -1; static int hf_nfs_stateid4 = -1; static int hf_nfs_offset4 = -1; static int hf_nfs_specdata1 = -1; static int hf_nfs_specdata2 = -1; static int hf_nfs_lock_type4 = -1; static int hf_nfs_reclaim4 = -1; static int hf_nfs_length4 = -1; static int hf_nfs_changeid4 = -1; static int hf_nfs_changeid4_before = -1; static int hf_nfs_changeid4_after = -1; static int hf_nfs_nfstime4_seconds = -1; static int hf_nfs_nfstime4_nseconds = -1; static int hf_nfs_fsid4_major = -1; static int hf_nfs_fsid4_minor = -1; static int hf_nfs_acetype4 = -1; static int hf_nfs_aceflag4 = -1; static int hf_nfs_acemask4 = -1; static int hf_nfs_delegate_type = -1; static int hf_nfs_secinfo_flavor = -1; static int hf_nfs_secinfo_arr4 = -1; static int hf_nfs_num_blocks = -1; static int hf_nfs_bytes_per_block = -1; static int hf_nfs_eof = -1; static int hf_nfs_stateid4_delegate_stateid = -1; static int hf_nfs_verifier4 = -1; static int hf_nfs_cookie4 = -1; static int hf_nfs_cookieverf4 = -1; static int hf_nfs_cb_program = -1; static int hf_nfs_cb_location = -1; static int hf_nfs_recall4 = -1; static int hf_nfs_filesize = -1; static int hf_nfs_count4 = -1; static int hf_nfs_count4_dircount = -1; static int hf_nfs_count4_maxcount = -1; static int hf_nfs_minorversion = -1; static int hf_nfs_open_owner4 = -1; static int hf_nfs_lock_owner4 = -1; static int hf_nfs_new_lock_owner = -1; static int hf_nfs_sec_oid4 = -1; static int hf_nfs_qop4 = -1; static int hf_nfs_secinfo_rpcsec_gss_info_service = -1; static int hf_nfs_attrdircreate = -1; static int hf_nfs_client_id4_id = -1; static int hf_nfs_stateid4_other = -1; static int hf_nfs_lock4_reclaim = -1; static int hf_nfs_acl4 = -1; static int hf_nfs_callback_ident = -1; static int hf_nfs_r_netid = -1; static int hf_nfs_r_addr = -1; /* NFSv4.1 */ static int hf_nfs_length4_minlength = -1; static int hf_nfs_layouttype4 = -1; static int hf_nfs_layoutlen = -1; static int hf_nfs_layoutreturn_type4 = -1; static int hf_nfs_iomode4 = -1; static int hf_nfs_fldtype4 = -1; static int hf_nfs_stripetype4 = -1; static int hf_nfs_mdscommit4 = -1; static int hf_nfs_stripeunit4 = -1; static int hf_nfs_newtime4 = -1; static int hf_nfs_newoffset4 = -1; static int hf_nfs_layout_avail4 = -1; static int hf_nfs_newsize4 = -1; static int hf_nfs_layoutupdate4 = -1; static int hf_nfs_deviceid4 = -1; static int hf_nfs_devicenum4 = -1; static int hf_nfs_deviceidx4 = -1; static int hf_nfs_layout4 = -1; static int hf_nfs_stripedevs4 = -1; static int hf_nfs_devaddr4 = -1; static int hf_nfs_notifydsop4 = -1; static int hf_nfs_return_on_close4 = -1; static int hf_nfs_slotid4 = -1; static int hf_nfs_sr_status4 = -1; static int hf_nfs_serverscope4 = -1; static int hf_nfs_minorid4 = -1; static int hf_nfs_majorid4 = -1; static int hf_nfs_padsize4 = -1; static int hf_nfs_cbrenforce4 = -1; static int hf_nfs_hashalg4 = -1; static int hf_nfs_ssvlen4 = -1; static int hf_nfs_maxreqsize4 = -1; static int hf_nfs_maxrespsize4 = -1; static int hf_nfs_maxrespsizecached4 = -1; static int hf_nfs_maxops4 = -1; static int hf_nfs_maxreqs4 = -1; static int hf_nfs_rdmachanattrs4 = -1; static int hf_nfs_machinename4 = -1; static int hf_nfs_flavor4 = -1; static int hf_nfs_stamp4 = -1; static int hf_nfs_uid4 = -1; static int hf_nfs_gid4 = -1; static int hf_nfs_service4 = -1; static int hf_nfs_sessionid4 = -1; static int hf_nfs_exch_id_flags4 = -1; static int hf_nfs_nii_domain4 = -1; static int hf_nfs_nii_name4 = -1; static int hf_nfs_create_session_flags4 = -1; static int hf_nfs_cachethis4 = -1; /* Hidden field for v2, v3, and v4 status */ static int hf_nfs_nfsstat = -1; static gint ett_nfs = -1; static gint ett_nfs_fh_encoding = -1; static gint ett_nfs_fh_mount = -1; static gint ett_nfs_fh_file = -1; static gint ett_nfs_fh_export = -1; static gint ett_nfsv4_fh_export = -1; static gint ett_nfsv4_fh_file = -1; static gint ett_nfsv4_fh_handle_type = -1; static gint ett_nfsv4_fh_export_snapgen = -1; static gint ett_nfsv4_fh_file_flags = -1; static gint ett_nfs_fh_fsid = -1; static gint ett_nfs_fh_xfsid = -1; static gint ett_nfs_fh_fn = -1; static gint ett_nfs_fh_xfn = -1; static gint ett_nfs_fh_hp = -1; static gint ett_nfs_fh_auth = -1; static gint ett_nfs_fhandle = -1; static gint ett_nfs_timeval = -1; static gint ett_nfs_mode = -1; static gint ett_nfs_fattr = -1; static gint ett_nfs_sattr = -1; static gint ett_nfs_diropargs = -1; static gint ett_nfs_readdir_entry = -1; static gint ett_nfs_mode3 = -1; static gint ett_nfs_specdata3 = -1; static gint ett_nfs_fh3 = -1; static gint ett_nfs_nfstime3 = -1; static gint ett_nfs_fattr3 = -1; static gint ett_nfs_post_op_fh3 = -1; static gint ett_nfs_sattr3 = -1; static gint ett_nfs_diropargs3 = -1; static gint ett_nfs_sattrguard3 = -1; static gint ett_nfs_set_mode3 = -1; static gint ett_nfs_set_uid3 = -1; static gint ett_nfs_set_gid3 = -1; static gint ett_nfs_set_size3 = -1; static gint ett_nfs_set_atime = -1; static gint ett_nfs_set_mtime = -1; static gint ett_nfs_pre_op_attr = -1; static gint ett_nfs_post_op_attr = -1; static gint ett_nfs_wcc_attr = -1; static gint ett_nfs_wcc_data = -1; static gint ett_nfs_access = -1; static gint ett_nfs_fsinfo_properties = -1; static gint ett_nfs_gxfh3_utlfield = -1; static gint ett_nfs_gxfh3_sfhfield = -1; static gint ett_nfs_gxfh3_sfhflags = -1; /* NFSv4 */ static gint ett_nfs_compound_call4 = -1; static gint ett_nfs_utf8string = -1; static gint ett_nfs_argop4 = -1; static gint ett_nfs_resop4 = -1; static gint ett_nfs_access4 = -1; static gint ett_nfs_close4 = -1; static gint ett_nfs_commit4 = -1; static gint ett_nfs_create4 = -1; static gint ett_nfs_delegpurge4 = -1; static gint ett_nfs_delegreturn4 = -1; static gint ett_nfs_getattr4 = -1; static gint ett_nfs_getfh4 = -1; static gint ett_nfs_link4 = -1; static gint ett_nfs_lock4 = -1; static gint ett_nfs_lockt4 = -1; static gint ett_nfs_locku4 = -1; static gint ett_nfs_lookup4 = -1; static gint ett_nfs_lookupp4 = -1; static gint ett_nfs_nverify4 = -1; static gint ett_nfs_open4 = -1; static gint ett_nfs_openattr4 = -1; static gint ett_nfs_open_confirm4 = -1; static gint ett_nfs_open_downgrade4 = -1; static gint ett_nfs_putfh4 = -1; static gint ett_nfs_putpubfh4 = -1; static gint ett_nfs_putrootfh4 = -1; static gint ett_nfs_read4 = -1; static gint ett_nfs_readdir4 = -1; static gint ett_nfs_readlink4 = -1; static gint ett_nfs_remove4 = -1; static gint ett_nfs_rename4 = -1; static gint ett_nfs_renew4 = -1; static gint ett_nfs_restorefh4 = -1; static gint ett_nfs_savefh4 = -1; static gint ett_nfs_secinfo4 = -1; static gint ett_nfs_setattr4 = -1; static gint ett_nfs_setclientid4 = -1; static gint ett_nfs_setclientid_confirm4 = -1; static gint ett_nfs_verify4 = -1; static gint ett_nfs_write4 = -1; static gint ett_nfs_release_lockowner4 = -1; static gint ett_nfs_illegal4 = -1; static gint ett_nfs_verifier4 = -1; static gint ett_nfs_opaque = -1; static gint ett_nfs_dirlist4 = -1; static gint ett_nfs_pathname4 = -1; static gint ett_nfs_change_info4 = -1; static gint ett_nfs_open_delegation4 = -1; static gint ett_nfs_open_claim4 = -1; static gint ett_nfs_opentype4 = -1; static gint ett_nfs_lock_owner4 = -1; static gint ett_nfs_cb_client4 = -1; static gint ett_nfs_client_id4 = -1; static gint ett_nfs_bitmap4 = -1; static gint ett_nfs_fattr4 = -1; static gint ett_nfs_fsid4 = -1; static gint ett_nfs_fs_locations4 = -1; static gint ett_nfs_fs_location4 = -1; static gint ett_nfs_open4_result_flags = -1; static gint ett_nfs_secinfo4_flavor_info = -1; static gint ett_nfs_stateid4 = -1; static gint ett_nfs_fattr4_fh_expire_type = -1; static gint ett_nfs_ace4 = -1; static gint ett_nfs_clientaddr4 = -1; static gint ett_nfs_aceflag4 = -1; static gint ett_nfs_acemask4 = -1; static gint ett_nfs_layoutget4 = -1; static gint ett_nfs_layoutcommit4 = -1; static gint ett_nfs_layoutreturn4 = -1; static gint ett_nfs_getdevinfo4 = -1; static gint ett_nfs_getdevlist4 = -1; static gint ett_nfs_notifyds4 = -1; static gint ett_nfs_exchange_id4 = -1; static gint ett_nfs_create_session4 = -1; static gint ett_nfs_destroy_session4 = -1; static gint ett_nfs_sequence4 = -1; static gint ett_nfs_pnfs_create4 = -1; static gint ett_nfs_slotid4 = -1; static gint ett_nfs_sr_status4 = -1; static gint ett_nfs_serverscope4 = -1; static gint ett_nfs_minorid4 = -1; static gint ett_nfs_majorid4 = -1; static gint ett_nfs_persist4 = -1; static gint ett_nfs_backchan4 = -1; static gint ett_nfs_rdmamode4 = -1; static gint ett_nfs_padsize4 = -1; static gint ett_nfs_cbrenforce4 = -1; static gint ett_nfs_hashalg4 = -1; static gint ett_nfs_ssvlen4 = -1; static gint ett_nfs_maxreqsize4 = -1; static gint ett_nfs_maxrespsize4 = -1; static gint ett_nfs_maxrespsizecached4 = -1; static gint ett_nfs_maxops4 = -1; static gint ett_nfs_maxreqs4 = -1; static gint ett_nfs_streamchanattrs4 = -1; static gint ett_nfs_rdmachanattrs4 = -1; static gint ett_nfs_machinename4 = -1; static gint ett_nfs_flavor4 = -1; static gint ett_nfs_stamp4 = -1; static gint ett_nfs_uid4 = -1; static gint ett_nfs_gid4 = -1; static gint ett_nfs_service4 = -1; static gint ett_nfs_sessionid4 = -1; /* what type of fhandles shoudl we dissect as */ static dissector_table_t nfs_fhandle_table; #define FHT_UNKNOWN 0 #define FHT_SVR4 1 #define FHT_LINUX_KNFSD_LE 2 #define FHT_LINUX_NFSD_LE 3 #define FHT_LINUX_KNFSD_NEW 4 #define FHT_NETAPP 5 #define FHT_NETAPP_V4 6 #define FHT_NETAPP_GX_V3 7 static enum_val_t nfs_fhandle_types[] = { { "unknown", "Unknown", FHT_UNKNOWN }, { "svr4", "SVR4", FHT_SVR4 }, { "knfsd_le", "KNFSD_LE", FHT_LINUX_KNFSD_LE }, { "nfsd_le", "NFSD_LE", FHT_LINUX_NFSD_LE }, { "knfsd_new", "KNFSD_NEW", FHT_LINUX_KNFSD_NEW }, { "ontap_v3", "ONTAP_V3", FHT_NETAPP }, { "ontap_v4", "ONTAP_V4", FHT_NETAPP_V4}, { "ontap_gx_v3","ONTAP_GX_V3", FHT_NETAPP_GX_V3}, { NULL, NULL, 0 } }; /* decode all nfs filehandles as this type */ gint default_nfs_fhandle_type=FHT_UNKNOWN; /* For dissector helpers which take a "levels" argument to indicate how * many expansions up they should populate the expansion items with * text to enhance useability, this flag to "levels" specify that the * text should also be appended to COL_INFO */ #define COL_INFO_LEVEL 0x80000000 /* fhandle displayfilters to match also corresponding request/response packet in addition to the one containing the actual filehandle */ gboolean nfs_fhandle_reqrep_matching = FALSE; static emem_tree_t *nfs_fhandle_frame_table = NULL; /* file name snooping */ gboolean nfs_file_name_snooping = FALSE; gboolean nfs_file_name_full_snooping = FALSE; typedef struct nfs_name_snoop { int fh_length; unsigned char *fh; int name_len; unsigned char *name; int parent_len; unsigned char *parent; int full_name_len; unsigned char *full_name; } nfs_name_snoop_t; typedef struct nfs_name_snoop_key { int key; int fh_length; const unsigned char *fh; } nfs_name_snoop_key_t; static GHashTable *nfs_name_snoop_unmatched = NULL; static GHashTable *nfs_name_snoop_matched = NULL; static emem_tree_t *nfs_name_snoop_known = NULL; static emem_tree_t *nfs_file_handles = NULL; /* This function will store one nfs filehandle in our global tree of * filehandles. * We store all filehandles we see in this tree so that every unique * filehandle is only stored once with a unique pointer. * We need to store pointers to filehandles in several of our other * structures and this is a way to make sure we dont keep any redundant * copiesd around for a specific filehandle. * * If this is the first time this filehandle has been seen an se block * is allocated to store the filehandle in. * If this filehandle has already been stored in the tree this function returns * a pointer to the original copy. */ static nfs_fhandle_data_t * store_nfs_file_handle(nfs_fhandle_data_t *nfs_fh) { guint32 fhlen; emem_tree_key_t fhkey[3]; nfs_fhandle_data_t *new_nfs_fh; fhlen=nfs_fh->len/4; fhkey[0].length=1; fhkey[0].key=&fhlen; fhkey[1].length=fhlen; fhkey[1].key=(guint32 *)nfs_fh->fh; fhkey[2].length=0; new_nfs_fh=se_tree_lookup32_array(nfs_file_handles, &fhkey[0]); if(new_nfs_fh){ return new_nfs_fh; } new_nfs_fh=se_alloc(sizeof(nfs_fhandle_data_t)); new_nfs_fh->len=nfs_fh->len; new_nfs_fh->fh=se_alloc(sizeof(guint32)*(nfs_fh->len/4)); memcpy(new_nfs_fh->fh, nfs_fh->fh, nfs_fh->len); new_nfs_fh->tvb=tvb_new_real_data(new_nfs_fh->fh, new_nfs_fh->len, new_nfs_fh->len); fhlen=nfs_fh->len/4; fhkey[0].length=1; fhkey[0].key=&fhlen; fhkey[1].length=fhlen; fhkey[1].key=(guint32 *)nfs_fh->fh; fhkey[2].length=0; se_tree_insert32_array(nfs_file_handles, &fhkey[0], new_nfs_fh); return new_nfs_fh; } static gint nfs_name_snoop_matched_equal(gconstpointer k1, gconstpointer k2) { const nfs_name_snoop_key_t *key1 = (const nfs_name_snoop_key_t *)k1; const nfs_name_snoop_key_t *key2 = (const nfs_name_snoop_key_t *)k2; return (key1->key==key2->key) &&(key1->fh_length==key2->fh_length) &&(!memcmp(key1->fh, key2->fh, key1->fh_length)); } static guint nfs_name_snoop_matched_hash(gconstpointer k) { const nfs_name_snoop_key_t *key = (const nfs_name_snoop_key_t *)k; int i; guint hash; hash=key->key; for(i=0;i<key->fh_length;i++) hash ^= key->fh[i]; return hash; } static gint nfs_name_snoop_unmatched_equal(gconstpointer k1, gconstpointer k2) { guint32 key1 = GPOINTER_TO_UINT(k1); guint32 key2 = GPOINTER_TO_UINT(k2); return key1==key2; } static guint nfs_name_snoop_unmatched_hash(gconstpointer k) { guint32 key = GPOINTER_TO_UINT(k); return key; } static gboolean nfs_name_snoop_unmatched_free_all(gpointer key_arg _U_, gpointer value, gpointer user_data _U_) { nfs_name_snoop_t *nns = (nfs_name_snoop_t *)value; if(nns->name){ g_free((gpointer)nns->name); nns->name=NULL; nns->name_len=0; } if(nns->full_name){ g_free((gpointer)nns->full_name); nns->full_name=NULL; nns->full_name_len=0; } if(nns->parent){ g_free((gpointer)nns->parent); nns->parent=NULL; nns->parent_len=0; } if(nns->fh){ g_free((gpointer)nns->fh); nns->fh=NULL; nns->fh_length=0; } return TRUE; } static void nfs_name_snoop_init(void) { if (nfs_name_snoop_unmatched != NULL) { g_hash_table_foreach_remove(nfs_name_snoop_unmatched, nfs_name_snoop_unmatched_free_all, NULL); } else { /* The fragment table does not exist. Create it */ nfs_name_snoop_unmatched=g_hash_table_new(nfs_name_snoop_unmatched_hash, nfs_name_snoop_unmatched_equal); } if (nfs_name_snoop_matched != NULL) { g_hash_table_foreach_remove(nfs_name_snoop_matched, nfs_name_snoop_unmatched_free_all, NULL); } else { /* The fragment table does not exist. Create it */ nfs_name_snoop_matched=g_hash_table_new(nfs_name_snoop_matched_hash, nfs_name_snoop_matched_equal); } } void nfs_name_snoop_add_name(int xid, tvbuff_t *tvb, int name_offset, int name_len, int parent_offset, int parent_len, unsigned char *name) { nfs_name_snoop_t *nns, *old_nns; const unsigned char *ptr=NULL; /* filter out all '.' and '..' names */ if(!name){ ptr=(const unsigned char *)tvb_get_ptr(tvb, name_offset, name_len); if(ptr[0]=='.'){ if(ptr[1]==0){ return; } if(ptr[1]=='.'){ if(ptr[2]==0){ return; } } } } nns=se_alloc(sizeof(nfs_name_snoop_t)); nns->fh_length=0; nns->fh=NULL; if(parent_len){ nns->parent_len=parent_len; nns->parent=tvb_memdup(tvb, parent_offset, parent_len); } else { nns->parent_len=0; nns->parent=NULL; } if(name){ nns->name_len=strlen(name); nns->name=g_strdup(name); } else { nns->name_len=name_len; nns->name=g_malloc(name_len+1); memcpy(nns->name, ptr, name_len); } nns->name[nns->name_len]=0; nns->full_name_len=0; nns->full_name=NULL; /* remove any old entry for this */ old_nns=g_hash_table_lookup(nfs_name_snoop_unmatched, GINT_TO_POINTER(xid)); if(old_nns){ /* if we haven't seen the reply yet, then there are no matched entries for it, thus we can dealloc the arrays*/ if(!old_nns->fh){ g_free(old_nns->name); old_nns->name=NULL; old_nns->name_len=0; g_free(old_nns->parent); old_nns->parent=NULL; old_nns->parent_len=0; } g_hash_table_remove(nfs_name_snoop_unmatched, GINT_TO_POINTER(xid)); } g_hash_table_insert(nfs_name_snoop_unmatched, GINT_TO_POINTER(xid), nns); } static void nfs_name_snoop_add_fh(int xid, tvbuff_t *tvb, int fh_offset, int fh_length) { unsigned char *fh; nfs_name_snoop_t *nns, *old_nns; nfs_name_snoop_key_t *key; /* find which request we correspond to */ nns=g_hash_table_lookup(nfs_name_snoop_unmatched, GINT_TO_POINTER(xid)); if(!nns){ /* oops couldnt find matching request, bail out */ return; } /* if we have already seen this response earlier */ if(nns->fh){ return; } /* oki, we have a new entry */ fh=tvb_memdup(tvb, fh_offset, fh_length); nns->fh=fh; nns->fh_length=fh_length; key=se_alloc(sizeof(nfs_name_snoop_key_t)); key->key=0; key->fh_length=nns->fh_length; key->fh =nns->fh; /* already have something matched for this fh, remove it from the table */ old_nns=g_hash_table_lookup(nfs_name_snoop_matched, key); if(old_nns){ g_hash_table_remove(nfs_name_snoop_matched, key); } g_hash_table_remove(nfs_name_snoop_unmatched, GINT_TO_POINTER(xid)); g_hash_table_insert(nfs_name_snoop_matched, key, nns); } static void nfs_full_name_snoop(nfs_name_snoop_t *nns, int *len, unsigned char **name, unsigned char **pos) { nfs_name_snoop_t *parent_nns = NULL; nfs_name_snoop_key_t key; /* check if the nns component ends with a '/' else we just allocate an extra byte to len to accommodate for it later */ if(nns->name[nns->name_len-1]!='/'){ (*len)++; } (*len) += nns->name_len; if(nns->parent==NULL){ *name = g_malloc((*len)+1); *pos = *name; *pos += g_snprintf(*pos, (*len)+1, "%s", nns->name); return; } key.key=0; key.fh_length=nns->parent_len; key.fh=nns->parent; parent_nns=g_hash_table_lookup(nfs_name_snoop_matched, &key); if(parent_nns){ nfs_full_name_snoop(parent_nns, len, name, pos); if(*name){ /* make sure components are '/' separated */ *pos += g_snprintf(*pos, (*len)+1, "%s%s", ((*pos)[-1]!='/')?"/":"", nns->name); } return; } return; } static void nfs_name_snoop_fh(packet_info *pinfo, proto_tree *tree, tvbuff_t *tvb, int fh_offset, int fh_length, gboolean hidden) { nfs_name_snoop_key_t key; nfs_name_snoop_t *nns = NULL; /* if this is a new packet, see if we can register the mapping */ if(!pinfo->fd->flags.visited){ key.key=0; key.fh_length=fh_length; key.fh=(const unsigned char *)tvb_get_ptr(tvb, fh_offset, fh_length); nns=g_hash_table_lookup(nfs_name_snoop_matched, &key); if(nns){ guint32 fhlen; emem_tree_key_t fhkey[3]; fhlen=nns->fh_length; fhkey[0].length=1; fhkey[0].key=&fhlen; fhkey[1].length=fhlen/4; fhkey[1].key=(guint32 *)nns->fh; fhkey[2].length=0; se_tree_insert32_array(nfs_name_snoop_known, &fhkey[0], nns); if(nfs_file_name_full_snooping){ unsigned char *name=NULL, *pos=NULL; int len=0; nfs_full_name_snoop(nns, &len, &name, &pos); if(name){ nns->full_name=name; nns->full_name_len=len; } } } } /* see if we know this mapping */ if(!nns){ guint32 fhlen; emem_tree_key_t fhkey[3]; fhlen=fh_length; fhkey[0].length=1; fhkey[0].key=&fhlen; fhkey[1].length=fhlen/4; fhkey[1].key=(guint32 *)tvb_get_ptr(tvb, fh_offset, fh_length); fhkey[2].length=0; nns=se_tree_lookup32_array(nfs_name_snoop_known, &fhkey[0]); } /* if we know the mapping, print the filename */ if(nns){ proto_item *fh_item; if(hidden){ fh_item=proto_tree_add_string_hidden(tree, hf_nfs_name, tvb, fh_offset, 0, nns->name); }else { fh_item=proto_tree_add_string_format(tree, hf_nfs_name, tvb, fh_offset, 0, nns->name, "Name: %s", nns->name); } PROTO_ITEM_SET_GENERATED(fh_item); if(nns->full_name){ if(hidden){ fh_item=proto_tree_add_string_hidden(tree, hf_nfs_full_name, tvb, fh_offset, 0, nns->name); } else { fh_item=proto_tree_add_string_format(tree, hf_nfs_full_name, tvb, fh_offset, 0, nns->name, "Full Name: %s", nns->full_name); } PROTO_ITEM_SET_GENERATED(fh_item); } } } /* file handle dissection */ static const value_string names_fhtype[] = { { FHT_UNKNOWN, "unknown" }, { FHT_SVR4, "System V R4" }, { FHT_LINUX_KNFSD_LE, "Linux knfsd (little-endian)" }, { FHT_LINUX_NFSD_LE, "Linux user-land nfsd (little-endian)" }, { FHT_LINUX_KNFSD_NEW, "Linux knfsd (new)" }, { FHT_NETAPP, "ONTAP 7G nfs v3 file handle" }, { FHT_NETAPP_V4, "ONTAP 7G nfs v4 file handle" }, { FHT_NETAPP_GX_V3, "ONTAP GX nfs v3 file handle" }, { 0, NULL } }; /* SVR4: checked with ReliantUNIX (5.43, 5.44, 5.45) */ static void dissect_fhandle_data_SVR4(tvbuff_t* tvb, packet_info *pinfo _U_, proto_tree *tree) { guint32 nof=0; /* file system id */ { guint32 fsid_O; guint32 fsid_L; guint32 temp; guint32 fsid_major; guint32 fsid_minor; fsid_O = nof; fsid_L = 4; temp = tvb_get_ntohl(tvb, fsid_O); fsid_major = ( temp>>18 ) & 0x3fff; /* 14 bits */ fsid_minor = ( temp ) & 0x3ffff; /* 18 bits */ if (tree) { proto_item* fsid_item = NULL; proto_tree* fsid_tree = NULL; fsid_item = proto_tree_add_text(tree, tvb, fsid_O, fsid_L, "file system ID: %d,%d", fsid_major, fsid_minor); if (fsid_item) { fsid_tree = proto_item_add_subtree(fsid_item, ett_nfs_fh_fsid); proto_tree_add_uint(fsid_tree, hf_nfs_fh_fsid_major, tvb, fsid_O, 2, fsid_major); proto_tree_add_uint(fsid_tree, hf_nfs_fh_fsid_minor, tvb, fsid_O+1, 3, fsid_minor); } } nof = fsid_O + fsid_L; } /* file system type */ { guint32 fstype_O; guint32 fstype_L; guint32 fstype; fstype_O = nof; fstype_L = 4; fstype = tvb_get_ntohl(tvb, fstype_O); if (tree) { proto_tree_add_uint(tree, hf_nfs_fh_fstype, tvb, fstype_O, fstype_L, fstype); } nof = fstype_O + fstype_L; } /* file number */ { guint32 fn_O; guint32 fn_len_O; guint32 fn_len_L; guint32 fn_len; guint32 fn_data_O; guint32 fn_data_inode_O; guint32 fn_data_inode_L; guint32 inode; guint32 fn_data_gen_O; guint32 fn_data_gen_L; guint32 gen; guint32 fn_L; fn_O = nof; fn_len_O = fn_O; fn_len_L = 2; fn_len = tvb_get_ntohs(tvb, fn_len_O); fn_data_O = fn_O + fn_len_L; fn_data_inode_O = fn_data_O + 2; fn_data_inode_L = 4; inode = tvb_get_ntohl(tvb, fn_data_inode_O); fn_data_gen_O = fn_data_inode_O + fn_data_inode_L; fn_data_gen_L = 4; gen = tvb_get_ntohl(tvb, fn_data_gen_O); fn_L = fn_len_L + fn_len; if (tree) { proto_item* fn_item = NULL; proto_tree* fn_tree = NULL; fn_item = proto_tree_add_uint(tree, hf_nfs_fh_fn, tvb, fn_O, fn_L, inode); if (fn_item) { fn_tree = proto_item_add_subtree(fn_item, ett_nfs_fh_fn); proto_tree_add_uint(fn_tree, hf_nfs_fh_fn_len, tvb, fn_len_O, fn_len_L, fn_len); proto_tree_add_uint(fn_tree, hf_nfs_fh_fn_inode, tvb, fn_data_inode_O, fn_data_inode_L, inode); proto_tree_add_uint(fn_tree, hf_nfs_fh_fn_generation, tvb, fn_data_gen_O, fn_data_gen_L, gen); } } nof = fn_O + fn_len_L + fn_len; } /* exported file number */ { guint32 xfn_O; guint32 xfn_len_O; guint32 xfn_len_L; guint32 xfn_len; guint32 xfn_data_O; guint32 xfn_data_inode_O; guint32 xfn_data_inode_L; guint32 xinode; guint32 xfn_data_gen_O; guint32 xfn_data_gen_L; guint32 xgen; guint32 xfn_L; xfn_O = nof; xfn_len_O = xfn_O; xfn_len_L = 2; xfn_len = tvb_get_ntohs(tvb, xfn_len_O); xfn_data_O = xfn_O + xfn_len_L; xfn_data_inode_O = xfn_data_O + 2; xfn_data_inode_L = 4; xinode = tvb_get_ntohl(tvb, xfn_data_inode_O); xfn_data_gen_O = xfn_data_inode_O + xfn_data_inode_L; xfn_data_gen_L = 4; xgen = tvb_get_ntohl(tvb, xfn_data_gen_O); xfn_L = xfn_len_L + xfn_len; if (tree) { proto_item* xfn_item = NULL; proto_tree* xfn_tree = NULL; xfn_item = proto_tree_add_uint(tree, hf_nfs_fh_xfn, tvb, xfn_O, xfn_L, xinode); if (xfn_item) { xfn_tree = proto_item_add_subtree(xfn_item, ett_nfs_fh_xfn); proto_tree_add_uint(xfn_tree, hf_nfs_fh_xfn_len, tvb, xfn_len_O, xfn_len_L, xfn_len); proto_tree_add_uint(xfn_tree, hf_nfs_fh_xfn_inode, tvb, xfn_data_inode_O, xfn_data_inode_L, xinode); proto_tree_add_uint(xfn_tree, hf_nfs_fh_xfn_generation, tvb, xfn_data_gen_O, xfn_data_gen_L, xgen); } } } } /* Checked with RedHat Linux 6.2 (kernel 2.2.14 knfsd) */ static void dissect_fhandle_data_LINUX_KNFSD_LE(tvbuff_t* tvb, packet_info *pinfo _U_, proto_tree *tree) { int offset=0; guint32 dentry; guint32 inode; guint32 dirinode; guint32 temp; guint32 fsid_major; guint32 fsid_minor; guint32 xfsid_major; guint32 xfsid_minor; guint32 xinode; guint32 gen; dentry = tvb_get_letohl(tvb, offset+0); inode = tvb_get_letohl(tvb, offset+4); dirinode = tvb_get_letohl(tvb, offset+8); temp = tvb_get_letohs (tvb,offset+12); fsid_major = (temp >> 8) & 0xff; fsid_minor = (temp ) & 0xff; temp = tvb_get_letohs(tvb,offset+16); xfsid_major = (temp >> 8) & 0xff; xfsid_minor = (temp ) & 0xff; xinode = tvb_get_letohl(tvb,offset+20); gen = tvb_get_letohl(tvb,offset+24); if (tree) { proto_tree_add_uint(tree, hf_nfs_fh_dentry, tvb, offset+0, 4, dentry); proto_tree_add_uint(tree, hf_nfs_fh_fn_inode, tvb, offset+4, 4, inode); proto_tree_add_uint(tree, hf_nfs_fh_dirinode, tvb, offset+8, 4, dirinode); /* file system id (device) */ { proto_item* fsid_item = NULL; proto_tree* fsid_tree = NULL; fsid_item = proto_tree_add_text(tree, tvb, offset+12, 4, "file system ID: %d,%d", fsid_major, fsid_minor); if (fsid_item) { fsid_tree = proto_item_add_subtree(fsid_item, ett_nfs_fh_fsid); proto_tree_add_uint(fsid_tree, hf_nfs_fh_fsid_major, tvb, offset+13, 1, fsid_major); proto_tree_add_uint(fsid_tree, hf_nfs_fh_fsid_minor, tvb, offset+12, 1, fsid_minor); } } /* exported file system id (device) */ { proto_item* xfsid_item = NULL; proto_tree* xfsid_tree = NULL; xfsid_item = proto_tree_add_text(tree, tvb, offset+16, 4, "exported file system ID: %d,%d", xfsid_major, xfsid_minor); if (xfsid_item) { xfsid_tree = proto_item_add_subtree(xfsid_item, ett_nfs_fh_xfsid); proto_tree_add_uint(xfsid_tree, hf_nfs_fh_xfsid_major, tvb, offset+17, 1, xfsid_major); proto_tree_add_uint(xfsid_tree, hf_nfs_fh_xfsid_minor, tvb, offset+16, 1, xfsid_minor); } } proto_tree_add_uint(tree, hf_nfs_fh_xfn_inode, tvb, offset+20, 4, xinode); proto_tree_add_uint(tree, hf_nfs_fh_fn_generation, tvb, offset+24, 4, gen); } } /* Checked with RedHat Linux 5.2 (nfs-server 2.2beta47 user-land nfsd) */ static void dissect_fhandle_data_LINUX_NFSD_LE(tvbuff_t* tvb, packet_info *pinfo _U_, proto_tree *tree) { int offset=0; /* pseudo inode */ { guint32 pinode; pinode = tvb_get_letohl(tvb, offset+0); if (tree) { proto_tree_add_uint(tree, hf_nfs_fh_pinode, tvb, offset+0, 4, pinode); } } /* hash path */ { guint32 hashlen; hashlen = tvb_get_guint8(tvb, offset+4); if (tree) { proto_item* hash_item = NULL; proto_tree* hash_tree = NULL; hash_item = proto_tree_add_text(tree, tvb, offset+4, hashlen + 1, "hash path: %s", tvb_bytes_to_str(tvb,offset+5,hashlen)); if (hash_item) { hash_tree = proto_item_add_subtree(hash_item, ett_nfs_fh_hp); if (hash_tree) { proto_tree_add_uint(hash_tree, hf_nfs_fh_hp_len, tvb, offset+4, 1, hashlen); proto_tree_add_text(hash_tree, tvb, offset+5, hashlen, "key: %s", tvb_bytes_to_str(tvb,offset+5,hashlen)); } } } } } static void dissect_fhandle_data_NETAPP(tvbuff_t* tvb, packet_info *pinfo _U_, proto_tree *tree) { int offset=0; if (tree) { guint32 mount = tvb_get_letohl(tvb, offset + 0); guint32 mount_gen = tvb_get_letohl(tvb, offset + 4); guint16 flags = tvb_get_letohs(tvb, offset + 8); guint8 snapid = tvb_get_guint8(tvb, offset + 10); guint8 unused = tvb_get_guint8(tvb, offset + 11); guint32 inum = tvb_get_ntohl(tvb, offset + 12); guint32 generation = tvb_get_letohl(tvb, offset + 16); guint32 fsid = tvb_get_letohl(tvb, offset + 20); guint32 export = tvb_get_letohl(tvb, offset + 24); guint32 export_snapgen = tvb_get_letohl(tvb, offset + 28); proto_item *item; proto_tree *subtree; char *flag_string; const char *strings[] = { " MNT_PNT", " SNAPDIR", " SNAPDIR_ENT", " EMPTY", " VBN_ACCESS", " MULTIVOLUME", " METADATA" }; guint16 bit = sizeof(strings) / sizeof(strings[0]); flag_string=ep_alloc(512); flag_string[0]=0; while (bit--) if (flags & (1<<bit)) strcat(flag_string, strings[bit]); item = proto_tree_add_text(tree, tvb, offset + 0, 8, "mount (inode %u)", mount); subtree = proto_item_add_subtree(item, ett_nfs_fh_mount); item = proto_tree_add_uint(subtree, hf_nfs_fh_mount_fileid, tvb, offset + 0, 4, mount); item = proto_tree_add_uint(subtree, hf_nfs_fh_mount_generation, tvb, offset + 4, 4, mount_gen); item = proto_tree_add_text(tree, tvb, offset + 8, 16, "file (inode %u)", inum); subtree = proto_item_add_subtree(item, ett_nfs_fh_file); item = proto_tree_add_uint_format(subtree, hf_nfs_fh_flags, tvb, offset + 8, 2, flags, "Flags: %#02x%s", flags, flag_string); item = proto_tree_add_uint(subtree, hf_nfs_fh_snapid, tvb, offset + 10, 1, snapid); item = proto_tree_add_uint(subtree, hf_nfs_fh_unused, tvb, offset + 11, 1, unused); item = proto_tree_add_uint(subtree, hf_nfs_fh_fileid, tvb, offset + 12, 4, inum); item = proto_tree_add_uint(subtree, hf_nfs_fh_generation, tvb, offset + 16, 4, generation); item = proto_tree_add_uint(subtree, hf_nfs_fh_fsid, tvb, offset + 20, 4, fsid); item = proto_tree_add_text(tree, tvb, offset + 24, 8, "export (inode %u)", export); subtree = proto_item_add_subtree(item, ett_nfs_fh_export); item = proto_tree_add_uint(subtree, hf_nfs_fh_export_fileid, tvb, offset + 24, 4, export); item = proto_tree_add_uint(subtree, hf_nfs_fh_export_generation, tvb, offset + 28, 3, export_snapgen & 0xffffff); item = proto_tree_add_uint(subtree, hf_nfs_fh_export_snapid, tvb, offset + 31, 1, export_snapgen >> 24); } } const value_string netapp_file_flag_vals[] = { { 0x0000, "Not set"}, { 0x0001, "Set"}, { 0, NULL} }; static void dissect_fhandle_data_NETAPP_V4(tvbuff_t* tvb, packet_info *pinfo _U_, proto_tree *tree) { int offset=0; proto_item *item = NULL; proto_tree *subtree = NULL; guint8 snapid, unused; guint16 flags; guint32 fileid, snapgen, generation, fsid; guint32 handle_type = tvb_get_ntohl(tvb, offset + 24); guint32 inum = tvb_get_ntohl(tvb, offset + 12); char *handle_string=NULL; const char *handle_type_strings [] = { "NORMAL", "UNEXP", "VOLDIR", "ROOT", "ABSENT", "INVALID" }; char *flag_string; const char *strings[] = { " MNT_PNT", " SNAPDIR", " SNAPDIR_ENT", " EMPTY", " VBN_ACCESS", " MULTIVOLUME", " METADATA", " ORPHAN", " FOSTER", " NAMED_ATTR", " EXP_SNAPDIR", " VFILER", " NS_AGGR", " STRIPED", " NS_PRIVATE", " NEXT_GEN_FH" }; guint16 bit = sizeof(strings) / sizeof(strings[0]); proto_tree *flag_tree = NULL; flag_string=ep_alloc(512); flag_string[0]=0; if(tree){ if( handle_type !=0 && handle_type <= 255) { fileid = tvb_get_ntohl(tvb, offset + 0); snapgen = tvb_get_ntohl(tvb, offset + 4); flags = tvb_get_ntohs(tvb, offset + 8); snapid = tvb_get_guint8(tvb, offset + 10); unused = tvb_get_guint8(tvb, offset + 11); generation = tvb_get_ntohl(tvb, offset + 16); fsid = tvb_get_ntohl(tvb, offset + 20); } else { fileid = tvb_get_letohl(tvb, offset + 0); snapgen = tvb_get_letohl(tvb, offset + 4); flags = tvb_get_letohs(tvb, offset + 8); snapid = tvb_get_guint8(tvb, offset + 10); unused = tvb_get_guint8(tvb, offset + 11); generation = tvb_get_letohl(tvb, offset + 16); fsid = tvb_get_letohl(tvb, offset + 20); handle_type = tvb_get_letohl(tvb, offset + 24); } if(handle_type <= 4) { handle_string=handle_type_strings[handle_type]; } else { handle_string=handle_type_strings[5]; } while (bit--) { if (flags & (1<<bit)) { strcat(flag_string, strings[bit]); } } item = proto_tree_add_text(tree, tvb, offset + 0, 8, "export (inode %u)", fileid); subtree = proto_item_add_subtree(item, ett_nfsv4_fh_export); item = proto_tree_add_uint(subtree, hf_nfs_fh_export_fileid, tvb, offset + 0, 4, fileid); item = proto_tree_add_uint(subtree, hf_nfs_fh_export_generation, tvb, offset + 4, 4, snapgen); item = proto_tree_add_text(tree, tvb, offset + 8, 16, "file (inode %u)", inum); subtree = proto_item_add_subtree(item, ett_nfsv4_fh_file); item = proto_tree_add_uint_format(subtree, hf_nfs_fh_flags, tvb, offset + 8, 2, flags, "Flags: %#02x%s", flags, flag_string); flag_tree = proto_item_add_subtree(item, ett_nfsv4_fh_file_flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_mntpoint, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_snapdir, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_snapdir_ent, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_empty, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_vbn_access, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_multivolume, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_metadata, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_orphan, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_foster, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_named_attr, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_exp_snapdir, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_vfiler, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_aggr, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_striped, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_private, tvb, offset+8, 2, flags); item = proto_tree_add_uint(flag_tree, hf_nfs_fh_file_flag_next_gen, tvb, offset+8, 2, flags); item = proto_tree_add_uint(subtree, hf_nfs_fh_snapid, tvb, offset + 10, 1, snapid); item = proto_tree_add_uint(subtree, hf_nfs_fh_unused, tvb, offset + 11, 1, unused); item = proto_tree_add_uint(subtree, hf_nfs_fh_fileid, tvb, offset + 12, 4, inum); item = proto_tree_add_uint(subtree, hf_nfs_fh_generation, tvb, offset + 16, 4, generation); item = proto_tree_add_uint(subtree, hf_nfs_fh_fsid, tvb, offset + 20, 4, fsid); item = proto_tree_add_uint_format(tree, hf_nfs_fh_handle_type, tvb, offset+24, 4, handle_type, "Handle type: %s(%#02x)", handle_string, handle_type); } } #define NETAPP_GX_FH3_LENGTH 44 #define NFS3GX_FH_TREE_MASK 0x80 #define NFS3GX_FH_JUN_MASK 0x40 #define NFS3GX_FH_VER_MASK 0x3F #define SPINNP_FH_FLAG_RESV1 0x80 #define SPINNP_FH_FLAG_RESV2 0x40 #define SPINNP_FH_FLAG_ONTAP_MASK 0x20 #define SPINNP_FH_FLAG_STRIPED_MASK 0x10 #define SPINNP_FH_FLAG_EMPTY_MASK 0x08 #define SPINNP_FH_FLAG_SNAPDIR_ENT_MASK 0x04 #define SPINNP_FH_FLAG_SNAPDIR_MASK 0x02 #define SPINNP_FH_FLAG_STREAMDIR_MASK 0x01 static void dissect_fhandle_data_NETAPP_GX_v3(tvbuff_t* tvb, packet_info *pinfo _U_, proto_tree *tree) { proto_tree *field_tree; proto_item *tf; guint16 cluster_id; guint16 epoch; guint32 export_id; guint32 export_uid; guint8 flags; guint8 reserved; guint32 local_dsid; guint32 spinfile_id; guint32 spinfile_uid; guint8 utility; guint8 volcnt; guint32 offset = 0; if (tree) { /* = utility = */ utility = tvb_get_guint8(tvb, offset); tf = proto_tree_add_uint_format(tree, hf_gxfh3_utlfield, tvb, offset, 1, utility, " utility: 0x%02x",utility); field_tree = proto_item_add_subtree(tf, ett_nfs_gxfh3_utlfield); if (utility & NFS3GX_FH_TREE_MASK) { proto_tree_add_uint(field_tree, hf_gxfh3_utlfield_tree_w, tvb, offset, 1, utility); } else { proto_tree_add_uint(field_tree, hf_gxfh3_utlfield_tree_r, tvb, offset, 1, utility); } if (utility & NFS3GX_FH_JUN_MASK) { proto_tree_add_uint(field_tree, hf_gxfh3_utlfield_jun, tvb, offset, 1, utility); } else { proto_tree_add_uint(field_tree, hf_gxfh3_utlfield_jun_not, tvb, offset, 1, utility); } proto_tree_add_uint(field_tree, hf_gxfh3_utlfield_ver, tvb, offset, 1, utility); /* = volume count== */ volcnt = tvb_get_guint8(tvb, offset+1); proto_tree_add_uint_format(tree, hf_gxfh3_volcnt, tvb, offset+1, 1, volcnt, " volume count: 0x%02x (%d)", volcnt, volcnt); /* = epoch = */ epoch = tvb_get_letohs(tvb, offset+2); proto_tree_add_uint_format(tree, hf_gxfh3_epoch, tvb, offset+2, 2, epoch, " epoch: 0x%04x (%u)", epoch, epoch); /* = spin file handle = */ local_dsid = tvb_get_letohl(tvb, offset+4); cluster_id = tvb_get_letohs(tvb, offset+8); reserved = tvb_get_guint8(tvb, offset+10); flags = tvb_get_guint8(tvb, offset+11); spinfile_id = tvb_get_letohl(tvb, offset+12); spinfile_uid = tvb_get_letohl(tvb, offset+16); tf = proto_tree_add_text(tree, tvb, offset+4, 16, " spin file handle"); field_tree = proto_item_add_subtree(tf, ett_nfs_gxfh3_sfhfield); proto_tree_add_uint_format(field_tree, hf_gxfh3_ldsid, tvb, offset+4, 4, local_dsid, " local dsid: 0x%08x (%u)", local_dsid, local_dsid); proto_tree_add_uint_format(field_tree, hf_gxfh3_cid, tvb, offset+8, 2, cluster_id, " cluster id: 0x%04x (%u)", cluster_id, cluster_id); proto_tree_add_uint_format(field_tree, hf_gxfh3_resv, tvb, offset+10, 1, reserved, " reserved: 0x%02x (%u)", reserved, reserved); tf = proto_tree_add_uint_format(field_tree, hf_gxfh3_sfhflags, tvb, offset+11, 1, utility, " flags: 0x%02x", flags); field_tree = proto_item_add_subtree(tf, ett_nfs_gxfh3_sfhflags); proto_tree_add_uint(field_tree, hf_gxfh3_sfhflags_resv1, tvb, offset+11, 1, flags); proto_tree_add_uint(field_tree, hf_gxfh3_sfhflags_resv2, tvb, offset+11, 1, flags); if (flags & SPINNP_FH_FLAG_ONTAP_MASK) { proto_tree_add_uint(field_tree, hf_gxfh3_sfhflags_ontap7G, tvb, offset+11, 1, flags); } else { proto_tree_add_uint(field_tree, hf_gxfh3_sfhflags_ontapGX, tvb, offset+11, 1, flags); } proto_tree_add_boolean(field_tree, hf_gxfh3_sfhflags_striped, tvb, offset+11, 1, flags); proto_tree_add_boolean(field_tree, hf_gxfh3_sfhflags_empty, tvb, offset+11, 1, flags); proto_tree_add_boolean(field_tree, hf_gxfh3_sfhflags_snapdirent, tvb, offset+11, 1, flags); proto_tree_add_boolean(field_tree, hf_gxfh3_sfhflags_snapdir, tvb, offset+11, 1, flags); proto_tree_add_boolean(field_tree, hf_gxfh3_sfhflags_streamdir, tvb, offset+11, 1, flags); proto_tree_add_uint_format(field_tree, hf_gxfh3_spinfid, tvb, offset+12, 4, spinfile_id, "spin file id: 0x%08x (%u)", spinfile_id, spinfile_id); proto_tree_add_uint_format(field_tree, hf_gxfh3_spinfuid, tvb, offset+16, 4, spinfile_id, "spin file unique id: 0x%08x (%u)", spinfile_uid, spinfile_uid); /* = spin file handle (mount point) = */ local_dsid = tvb_get_letohl(tvb, offset+20); cluster_id = tvb_get_letohs(tvb, offset+24); reserved = tvb_get_guint8(tvb, offset+26); flags = tvb_get_guint8(tvb, offset+27); spinfile_id = tvb_get_letohl(tvb, offset+28); spinfile_uid = tvb_get_letohl(tvb, offset+32); tf = proto_tree_add_text(tree, tvb, offset+20, 16, " spin (mount point) file handle"); field_tree = proto_item_add_subtree(tf, ett_nfs_gxfh3_sfhfield); proto_tree_add_uint_format(field_tree, hf_gxfh3_ldsid, tvb, offset+20, 4, local_dsid, " local dsid: 0x%08x (%u)", local_dsid, local_dsid); proto_tree_add_uint_format(field_tree, hf_gxfh3_cid, tvb, offset+24, 2, cluster_id, " cluster id: 0x%04x (%u)", cluster_id, cluster_id); proto_tree_add_uint_format(field_tree, hf_gxfh3_resv, tvb, offset+26, 1, reserved, " reserved: 0x%02x (%u)", reserved, reserved); tf = proto_tree_add_uint_format(field_tree, hf_gxfh3_sfhflags, tvb, offset+27, 1, utility, " flags: 0x%02x", flags); field_tree = proto_item_add_subtree(tf, ett_nfs_gxfh3_sfhflags); proto_tree_add_uint(field_tree, hf_gxfh3_sfhflags_resv1, tvb, offset+27, 1, flags); proto_tree_add_uint(field_tree, hf_gxfh3_sfhflags_resv2, tvb, offset+27, 1, flags); if (flags & SPINNP_FH_FLAG_ONTAP_MASK) { proto_tree_add_uint(field_tree, hf_gxfh3_sfhflags_ontap7G, tvb, offset+27, 1, flags); } else { proto_tree_add_uint(field_tree, hf_gxfh3_sfhflags_ontapGX, tvb, offset+27, 1, flags); } proto_tree_add_boolean(field_tree, hf_gxfh3_sfhflags_striped, tvb, offset+27, 1, flags); proto_tree_add_boolean(field_tree, hf_gxfh3_sfhflags_empty, tvb, offset+27, 1, flags); proto_tree_add_boolean(field_tree, hf_gxfh3_sfhflags_snapdirent, tvb, offset+27, 1, flags); proto_tree_add_boolean(field_tree, hf_gxfh3_sfhflags_snapdir, tvb, offset+27, 1, flags); proto_tree_add_boolean(field_tree, hf_gxfh3_sfhflags_streamdir, tvb, offset+27, 1, flags); proto_tree_add_uint_format(field_tree, hf_gxfh3_spinfid, tvb, offset+28, 4, spinfile_id, "spin file id: 0x%08x (%u)", spinfile_id, spinfile_id); proto_tree_add_uint_format(field_tree, hf_gxfh3_spinfuid, tvb, offset+32, 4, spinfile_id, "spin file unique id: 0x%08x (%u)", spinfile_uid, spinfile_uid); /* = export point id = */ export_id = tvb_get_letohl(tvb, offset+36); export_uid = tvb_get_letohl(tvb, offset+40); proto_tree_add_uint_format(tree, hf_gxfh3_exportptid, tvb, offset+36, 4, spinfile_id, " export point id: 0x%08x (%u)", export_id, export_id); /* = export point unique id = */ export_uid = tvb_get_letohl(tvb, offset+40); proto_tree_add_uint_format(tree, hf_gxfh3_exportptuid, tvb, offset+40, 4, spinfile_id, " export point unique id: 0x%08x (%u)", export_uid, export_uid); } /* end of (tree) */ } /* Checked with SuSE 7.1 (kernel 2.4.0 knfsd) */ /* read linux-2.4.5/include/linux/nfsd/nfsfh.h for more details */ #define AUTH_TYPE_NONE 0 static const value_string auth_type_names[] = { { AUTH_TYPE_NONE, "no authentication" }, {0,NULL} }; #define FSID_TYPE_MAJOR_MINOR_INODE 0 static const value_string fsid_type_names[] = { { FSID_TYPE_MAJOR_MINOR_INODE, "major/minor/inode" }, {0,NULL} }; #define FILEID_TYPE_ROOT 0 #define FILEID_TYPE_INODE_GENERATION 1 #define FILEID_TYPE_INODE_GENERATION_PARENT 2 static const value_string fileid_type_names[] = { { FILEID_TYPE_ROOT, "root" }, { FILEID_TYPE_INODE_GENERATION, "inode/generation" }, { FILEID_TYPE_INODE_GENERATION_PARENT, "inode/generation/parent" }, {0,NULL} }; static void dissect_fhandle_data_LINUX_KNFSD_NEW(tvbuff_t* tvb, packet_info *pinfo _U_, proto_tree *tree) { int offset=0; guint8 version; guint8 auth_type; guint8 fsid_type; guint8 fileid_type; version = tvb_get_guint8(tvb, offset + 0); if (tree) { proto_tree_add_uint(tree, hf_nfs_fh_version, tvb, offset+0, 1, version); } switch (version) { case 1: { auth_type = tvb_get_guint8(tvb, offset + 1); fsid_type = tvb_get_guint8(tvb, offset + 2); fileid_type = tvb_get_guint8(tvb, offset + 3); if (tree) { proto_item* encoding_item = proto_tree_add_text(tree, tvb, offset + 1, 3, "encoding: %u %u %u", auth_type, fsid_type, fileid_type); if (encoding_item) { proto_tree* encoding_tree = proto_item_add_subtree(encoding_item, ett_nfs_fh_encoding); if (encoding_tree) { proto_tree_add_uint(encoding_tree, hf_nfs_fh_auth_type, tvb, offset+1, 1, auth_type); proto_tree_add_uint(encoding_tree, hf_nfs_fh_fsid_type, tvb, offset+2, 1, fsid_type); proto_tree_add_uint(encoding_tree, hf_nfs_fh_fileid_type, tvb, offset+3, 1, fileid_type); } } } offset += 4; } break; default: { /* unknown version */ goto out; } } switch (auth_type) { case 0: { /* no authentication */ if (tree) { proto_tree_add_text(tree, tvb, offset + 0, 0, "authentication: none"); } } break; default: { /* unknown authentication type */ goto out; } } switch (fsid_type) { case 0: { guint16 fsid_major; guint16 fsid_minor; guint32 fsid_inode; fsid_major = tvb_get_ntohs(tvb, offset + 0); fsid_minor = tvb_get_ntohs(tvb, offset + 2); fsid_inode = tvb_get_letohl(tvb, offset + 4); if (tree) { proto_item* fsid_item = proto_tree_add_text(tree, tvb, offset+0, 8, "file system ID: %u,%u (inode %u)", fsid_major, fsid_minor, fsid_inode); if (fsid_item) { proto_tree* fsid_tree = proto_item_add_subtree(fsid_item, ett_nfs_fh_fsid); if (fsid_tree) { proto_tree_add_uint(fsid_tree, hf_nfs_fh_fsid_major, tvb, offset+0, 2, fsid_major); proto_tree_add_uint(fsid_tree, hf_nfs_fh_fsid_minor, tvb, offset+2, 2, fsid_minor); proto_tree_add_uint(fsid_tree, hf_nfs_fh_fsid_inode, tvb, offset+4, 4, fsid_inode); } } } offset += 8; } break; default: { /* unknown fsid type */ goto out; } } switch (fileid_type) { case 0: { if (tree) { proto_tree_add_text(tree, tvb, offset+0, 0, "file ID: root inode"); } } break; case 1: { guint32 inode; guint32 generation; inode = tvb_get_letohl(tvb, offset + 0); generation = tvb_get_letohl(tvb, offset + 4); if (tree) { proto_item* fileid_item = proto_tree_add_text(tree, tvb, offset+0, 8, "file ID: %u (%u)", inode, generation); if (fileid_item) { proto_tree* fileid_tree = proto_item_add_subtree( fileid_item, ett_nfs_fh_fn); if (fileid_tree) { proto_tree_add_uint(fileid_tree, hf_nfs_fh_fn_inode, tvb, offset+0, 4, inode); proto_tree_add_uint(fileid_tree, hf_nfs_fh_fn_generation, tvb, offset+4, 4, generation); } } } offset += 8; } break; case 2: { guint32 inode; guint32 generation; guint32 parent_inode; inode = tvb_get_letohl(tvb, offset + 0); generation = tvb_get_letohl(tvb, offset + 4); parent_inode = tvb_get_letohl(tvb, offset + 8); if (tree) { proto_item* fileid_item = proto_tree_add_text(tree, tvb, offset+0, 8, "file ID: %u (%u)", inode, generation); if (fileid_item) { proto_tree* fileid_tree = proto_item_add_subtree( fileid_item, ett_nfs_fh_fn); if (fileid_tree) { proto_tree_add_uint(fileid_tree, hf_nfs_fh_fn_inode, tvb, offset+0, 4, inode); proto_tree_add_uint(fileid_tree, hf_nfs_fh_fn_generation, tvb, offset+4, 4, generation); proto_tree_add_uint(fileid_tree, hf_nfs_fh_dirinode, tvb, offset+8, 4, parent_inode); } } } offset += 12; } break; default: { /* unknown fileid type */ goto out; } } out: ; } static void dissect_fhandle_data_unknown(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree) { guint fhlen=tvb_length(tvb); proto_tree_add_item(tree, hf_nfs_fh_fhandle_data, tvb, 0, fhlen, FALSE); } static void dissect_fhandle_data(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, unsigned int fhlen, gboolean hidden, guint32 *hash) { /* this is to set up fhandle display filters to find both packets of an RPC call */ if(nfs_fhandle_reqrep_matching && (!hidden) ){ nfs_fhandle_data_t *old_fhd=NULL; if( !pinfo->fd->flags.visited ){ nfs_fhandle_data_t fhd; /* first check if we have seen this fhandle before */ fhd.len=fhlen; fhd.fh=(const unsigned char *)tvb_get_ptr(tvb, offset, fhlen); old_fhd=store_nfs_file_handle(&fhd); /* XXX here we should really check that we havent stored this fhandle for this frame number already. We should also make sure we can handle when we have multiple fhandles seen for the same frame, which WILL happen for certain nfs calls. For now, we dont handle this and those calls will not work properly with this feature */ se_tree_insert32(nfs_fhandle_frame_table, pinfo->fd->num, old_fhd); } } /* create a semiunique hash value for the filehandle */ { guint32 fhhash; guint32 i; proto_item *fh_item; for(fhhash=0,i=0;i<(fhlen-3);i+=4){ guint32 val; val = tvb_get_ntohl(tvb, offset+i); fhhash ^= val; fhhash += val; } if(hidden){ fh_item=proto_tree_add_uint_hidden(tree, hf_nfs_fh_hash, tvb, offset, fhlen, fhhash); } else { fh_item=proto_tree_add_uint(tree, hf_nfs_fh_hash, tvb, offset, fhlen, fhhash); } PROTO_ITEM_SET_GENERATED(fh_item); if(hash){ *hash=fhhash; } } if(nfs_file_name_snooping){ nfs_name_snoop_fh(pinfo, tree, tvb, offset, fhlen, hidden); } if(!hidden){ tvbuff_t *fh_tvb; int real_length; proto_tree_add_text(tree, tvb, offset, 0, "decode type as: %s", val_to_str(default_nfs_fhandle_type, names_fhtype, "Unknown")); real_length=fhlen; if(real_length<tvb_length_remaining(tvb, offset)){ real_length=tvb_length_remaining(tvb, offset); } fh_tvb=tvb_new_subset(tvb, offset, real_length, fhlen); if(!dissector_try_port(nfs_fhandle_table, default_nfs_fhandle_type, fh_tvb, pinfo, tree)){ dissect_fhandle_data_unknown(fh_tvb, pinfo, tree); } } } void dissect_fhandle_hidden(packet_info *pinfo, proto_tree *tree, int frame) { nfs_fhandle_data_t *nfd; nfd=se_tree_lookup32(nfs_fhandle_frame_table, frame); if(nfd && nfd->len){ dissect_fhandle_data(nfd->tvb, 0, pinfo, tree, nfd->len, TRUE, NULL); } } /***************************/ /* NFS Version 2, RFC 1094 */ /***************************/ /* RFC 1094, Page 12..14 */ static const value_string names_nfs_stat[] = { { 0, "NFS_OK" }, { 1, "NFSERR_PERM" }, { 2, "NFSERR_NOENT" }, { 5, "NFSERR_IO" }, { 6, "NFSERR_NXIO" }, { 13, "NFSERR_ACCES" }, { 17, "NFSERR_EXIST" }, { 18, "NFSERR_XDEV" }, /* not in spec, but can happen */ { 19, "NFSERR_NODEV" }, { 20, "NFSERR_NOTDIR" }, { 21, "NFSERR_ISDIR" }, { 22, "NFSERR_INVAL" }, /* not in spec, but I think it can happen */ { 26, "NFSERR_TXTBSY" }, /* not in spec, but I think it can happen */ { 27, "NFSERR_FBIG" }, { 28, "NFSERR_NOSPC" }, { 30, "NFSERR_ROFS" }, { 31, "NFSERR_MLINK" }, /* not in spec, but can happen */ { 45, "NFSERR_OPNOTSUPP" }, /* not in spec, but I think it can happen */ { 63, "NFSERR_NAMETOOLONG" }, { 66, "NFSERR_NOTEMPTY" }, { 69, "NFSERR_DQUOT" }, { 70, "NFSERR_STALE" }, { 99, "NFSERR_WFLUSH" }, { 0, NULL } }; /* RFC 1094, Page 12..14 */ static int dissect_stat(tvbuff_t *tvb, int offset, proto_tree *tree, guint32 *status) { guint32 stat; proto_item *stat_item; stat = tvb_get_ntohl(tvb, offset+0); if (tree) { proto_tree_add_uint(tree, hf_nfs_stat, tvb, offset+0, 4, stat); stat_item = proto_tree_add_uint(tree, hf_nfs_nfsstat, tvb, offset+0, 4, stat); PROTO_ITEM_SET_HIDDEN(stat_item); } offset += 4; if (status) *status = stat; return offset; } /* RFC 1094, Page 12..14 */ static int dissect_nfs2_rmdir_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_stat(tvb, offset, tree, &status); switch (status) { case 0: proto_item_append_text(tree, ", RMDIR Reply"); break; default: err=val_to_str(status, names_nfs_stat, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", RMDIR Reply Error:%s", err); } return offset; } static int dissect_nfs2_symlink_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_stat(tvb, offset, tree, &status); switch (status) { case 0: proto_item_append_text(tree, ", SYMLINK Reply"); break; default: err=val_to_str(status, names_nfs_stat, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", SYMLINK Reply Error:%s", err); } return offset; } static int dissect_nfs2_link_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_stat(tvb, offset, tree, &status); switch (status) { case 0: proto_item_append_text(tree, ", LINK Reply"); break; default: err=val_to_str(status, names_nfs_stat, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", LINK Reply Error:%s", err); } return offset; } static int dissect_nfs2_rename_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_stat(tvb, offset, tree, &status); switch (status) { case 0: proto_item_append_text(tree, ", RENAME Reply"); break; default: err=val_to_str(status, names_nfs_stat, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", RENAME Reply Error:%s", err); } return offset; } static int dissect_nfs2_remove_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_stat(tvb, offset, tree, &status); switch (status) { case 0: proto_item_append_text(tree, ", REMOVE Reply"); break; default: err=val_to_str(status, names_nfs_stat, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", REMOVE Reply Error:%s", err); } return offset; } /* RFC 1094, Page 15 */ static int dissect_ftype(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { guint32 ftype; const char* ftype_name = NULL; const value_string nfs2_ftype[] = { { 0, "Non-File" }, { 1, "Regular File" }, { 2, "Directory" }, { 3, "Block Special Device" }, { 4, "Character Special Device" }, { 5, "Symbolic Link" }, { 0, NULL } }; ftype = tvb_get_ntohl(tvb, offset+0); ftype_name = val_to_str(ftype, nfs2_ftype, "%u"); if (tree) { proto_tree_add_text(tree, tvb, offset, 4, "%s: %s (%u)", name, ftype_name, ftype); } offset += 4; return offset; } /* RFC 1094, Page 15 */ int dissect_fhandle(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char *name, guint32 *hash) { proto_item* fitem; proto_tree* ftree = NULL; if (tree) { fitem = proto_tree_add_text(tree, tvb, offset, FHSIZE, "%s", name); if (fitem) ftree = proto_item_add_subtree(fitem, ett_nfs_fhandle); } /* are we snooping fh to filenames ?*/ if((!pinfo->fd->flags.visited) && nfs_file_name_snooping){ rpc_call_info_value *civ=pinfo->private_data; /* NFS v2 LOOKUP, CREATE, MKDIR calls might give us a mapping*/ if( (civ->prog==100003) &&(civ->vers==2) &&(!civ->request) &&((civ->proc==4)||(civ->proc==9)||(civ->proc==14)) ) { nfs_name_snoop_add_fh(civ->xid, tvb, offset, 32); } /* MOUNT v1,v2 MNT replies might give us a filehandle*/ if( (civ->prog==100005) &&(civ->proc==1) &&((civ->vers==1)||(civ->vers==2)) &&(!civ->request) ) { nfs_name_snoop_add_fh(civ->xid, tvb, offset, 32); } } dissect_fhandle_data(tvb, offset, pinfo, ftree, FHSIZE, FALSE, hash); offset += FHSIZE; return offset; } /* RFC 1094, Page 15 */ static int dissect_nfs2_statfs_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 hash; offset = dissect_fhandle(tvb, offset, pinfo, tree, "object", &hash); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", STATFS Call FH:0x%08x", hash); return offset; } static int dissect_nfs2_readlink_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 hash; offset = dissect_fhandle(tvb, offset, pinfo, tree, "object", &hash); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", READLINK Call FH:0x%08x", hash); return offset; } static int dissect_nfs2_getattr_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 hash; offset = dissect_fhandle(tvb, offset, pinfo, tree, "object", &hash); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", GETATTR Call FH:0x%08x", hash); return offset; } /* RFC 1094, Page 15 */ static int dissect_timeval(tvbuff_t *tvb, int offset, proto_tree *tree, int hf_time, int hf_time_sec, int hf_time_usec) { guint32 seconds; guint32 useconds; nstime_t ts; proto_item* time_item; proto_tree* time_tree = NULL; seconds = tvb_get_ntohl(tvb, offset+0); useconds = tvb_get_ntohl(tvb, offset+4); ts.secs = seconds; ts.nsecs = useconds*1000; if (tree) { time_item = proto_tree_add_time(tree, hf_time, tvb, offset, 8, &ts); if (time_item) time_tree = proto_item_add_subtree(time_item, ett_nfs_timeval); } if (time_tree) { proto_tree_add_uint(time_tree, hf_time_sec, tvb, offset, 4, seconds); proto_tree_add_uint(time_tree, hf_time_usec, tvb, offset+4, 4, useconds); } offset += 8; return offset; } /* RFC 1094, Page 16 */ static const value_string nfs2_mode_names[] = { { 0040000, "Directory" }, { 0020000, "Character Special Device" }, { 0060000, "Block Special Device" }, { 0100000, "Regular File" }, { 0120000, "Symbolic Link" }, { 0140000, "Named Socket" }, { 0000000, NULL }, }; static int dissect_mode(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { guint32 mode; proto_item* mode_item = NULL; proto_tree* mode_tree = NULL; mode = tvb_get_ntohl(tvb, offset+0); if (tree) { mode_item = proto_tree_add_text(tree, tvb, offset, 4, "%s: 0%o", name, mode); if (mode_item) mode_tree = proto_item_add_subtree(mode_item, ett_nfs_mode); } if (mode_tree) { proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_enumerated_bitfield(mode, 0160000, 16, nfs2_mode_names, "%s")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 04000, 16, "Set user id on exec", "not SUID")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 02000, 16, "Set group id on exec", "not SGID")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 01000, 16, "Save swapped text even after use", "not save swapped text")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 0400, 16, "Read permission for owner", "no Read permission for owner")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 0200, 16, "Write permission for owner", "no Write permission for owner")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 0100, 16, "Execute permission for owner", "no Execute permission for owner")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 040, 16, "Read permission for group", "no Read permission for group")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 020, 16, "Write permission for group", "no Write permission for group")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 010, 16, "Execute permission for group", "no Execute permission for group")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 04, 16, "Read permission for others", "no Read permission for others")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 02, 16, "Write permission for others", "no Write permission for others")); proto_tree_add_text(mode_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode, 01, 16, "Execute permission for others", "no Execute permission for others")); } offset += 4; return offset; } /* RFC 1094, Page 15 */ int dissect_fattr(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { proto_item* fattr_item = NULL; proto_tree* fattr_tree = NULL; int old_offset = offset; if (tree) { fattr_item = proto_tree_add_text(tree, tvb, offset, -1, "%s", name); fattr_tree = proto_item_add_subtree(fattr_item, ett_nfs_fattr); } offset = dissect_ftype(tvb, offset, fattr_tree, "type"); offset = dissect_mode(tvb, offset, fattr_tree, "mode"); offset = dissect_rpc_uint32(tvb, fattr_tree, hf_nfs_fattr_nlink, offset); offset = dissect_rpc_uint32(tvb, fattr_tree, hf_nfs_fattr_uid, offset); offset = dissect_rpc_uint32(tvb, fattr_tree, hf_nfs_fattr_gid, offset); offset = dissect_rpc_uint32(tvb, fattr_tree, hf_nfs_fattr_size, offset); offset = dissect_rpc_uint32(tvb, fattr_tree, hf_nfs_fattr_blocksize, offset); offset = dissect_rpc_uint32(tvb, fattr_tree, hf_nfs_fattr_rdev, offset); offset = dissect_rpc_uint32(tvb, fattr_tree, hf_nfs_fattr_blocks, offset); offset = dissect_rpc_uint32(tvb, fattr_tree, hf_nfs_fattr_fsid, offset); offset = dissect_rpc_uint32(tvb, fattr_tree, hf_nfs_fattr_fileid, offset); offset = dissect_timeval(tvb, offset, fattr_tree, hf_nfs_atime, hf_nfs_atime_sec, hf_nfs_atime_usec); offset = dissect_timeval(tvb, offset, fattr_tree, hf_nfs_mtime, hf_nfs_mtime_sec, hf_nfs_mtime_usec); offset = dissect_timeval(tvb, offset, fattr_tree, hf_nfs_ctime, hf_nfs_ctime_sec, hf_nfs_ctime_usec); /* now we know, that fattr is shorter */ if (fattr_item) { proto_item_set_len(fattr_item, offset - old_offset); } return offset; } /* RFC 1094, Page 17 */ static int dissect_sattr(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { proto_item* sattr_item = NULL; proto_tree* sattr_tree = NULL; int old_offset = offset; if (tree) { sattr_item = proto_tree_add_text(tree, tvb, offset, -1, "%s", name); sattr_tree = proto_item_add_subtree(sattr_item, ett_nfs_sattr); } if (tvb_get_ntohl(tvb, offset+0) != 0xffffffff) offset = dissect_mode(tvb, offset, sattr_tree, "mode"); else { proto_tree_add_text(sattr_tree, tvb, offset, 4, "mode: no value"); offset += 4; } if (tvb_get_ntohl(tvb, offset+0) != 0xffffffff) offset = dissect_rpc_uint32(tvb, sattr_tree, hf_nfs_fattr_uid, offset); else { proto_tree_add_text(sattr_tree, tvb, offset, 4, "uid: no value"); offset += 4; } if (tvb_get_ntohl(tvb, offset+0) != 0xffffffff) offset = dissect_rpc_uint32(tvb, sattr_tree, hf_nfs_fattr_gid, offset); else { proto_tree_add_text(sattr_tree, tvb, offset, 4, "gid: no value"); offset += 4; } if (tvb_get_ntohl(tvb, offset+0) != 0xffffffff) offset = dissect_rpc_uint32(tvb, sattr_tree, hf_nfs_fattr_size, offset); else { proto_tree_add_text(sattr_tree, tvb, offset, 4, "size: no value"); offset += 4; } if (tvb_get_ntohl(tvb, offset+0) != 0xffffffff) { offset = dissect_timeval(tvb, offset, sattr_tree, hf_nfs_atime, hf_nfs_atime_sec, hf_nfs_atime_usec); } else { proto_tree_add_text(sattr_tree, tvb, offset, 8, "atime: no value"); offset += 8; } if (tvb_get_ntohl(tvb, offset+0) != 0xffffffff) { offset = dissect_timeval(tvb, offset, sattr_tree, hf_nfs_mtime, hf_nfs_mtime_sec, hf_nfs_mtime_usec); } else { proto_tree_add_text(sattr_tree, tvb, offset, 8, "mtime: no value"); offset += 8; } /* now we know, that sattr is shorter */ if (sattr_item) { proto_item_set_len(sattr_item, offset - old_offset); } return offset; } /* RFC 1094, Page 17 */ static int dissect_filename(tvbuff_t *tvb, int offset, proto_tree *tree, int hf, char **string_ret) { offset = dissect_rpc_string(tvb, tree, hf, offset, string_ret); return offset; } /* RFC 1094, Page 17 */ static int dissect_path(tvbuff_t *tvb, int offset, proto_tree *tree, int hf, char **name) { offset = dissect_rpc_string(tvb, tree, hf, offset, name); return offset; } /* RFC 1094, Page 17,18 */ static int dissect_attrstat(tvbuff_t *tvb, int offset, proto_tree *tree, packet_info *pinfo, const char *funcname) { guint32 status; const char *err; offset = dissect_stat(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_fattr(tvb, offset, tree, "attributes"); proto_item_append_text(tree, ", %s Reply", funcname); break; default: err=val_to_str(status, names_nfs_stat, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", %s Reply Error:%s", funcname, err); break; } return offset; } /* RFC 1094, Page 17,18 */ static int dissect_nfs2_write_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { offset = dissect_attrstat(tvb, offset, tree, pinfo, "WRITE"); return offset; } static int dissect_nfs2_setattr_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { offset = dissect_attrstat(tvb, offset, tree, pinfo, "SETATTR"); return offset; } static int dissect_nfs2_getattr_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { offset = dissect_attrstat(tvb, offset, tree, pinfo, "GETATTR"); return offset; } /* RFC 1094, Page 18 */ static int dissect_diropargs(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char* label, guint32 *hash, char **name) { proto_item* diropargs_item = NULL; proto_tree* diropargs_tree = NULL; int old_offset = offset; if (tree) { diropargs_item = proto_tree_add_text(tree, tvb, offset, -1, "%s", label); diropargs_tree = proto_item_add_subtree(diropargs_item, ett_nfs_diropargs); } /* are we snooping fh to filenames ?*/ if((!pinfo->fd->flags.visited) && nfs_file_name_snooping){ /* v2 LOOKUP, CREATE, MKDIR calls might give us a mapping*/ rpc_call_info_value *civ=pinfo->private_data; if( (civ->prog==100003) &&(civ->vers==2) &&(civ->request) &&((civ->proc==4)||(civ->proc==9)||(civ->proc==14)) ) { nfs_name_snoop_add_name(civ->xid, tvb, offset+36, tvb_get_ntohl(tvb, offset+32), offset, 32, NULL); } } offset = dissect_fhandle(tvb, offset, pinfo, diropargs_tree, "dir", hash); offset = dissect_filename(tvb, offset, diropargs_tree, hf_nfs_name, name); /* now we know, that diropargs is shorter */ if (diropargs_item) { proto_item_set_len(diropargs_item, offset - old_offset); } return offset; } /* RFC 1094, Page 18 */ static int dissect_nfs2_rmdir_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 hash; char *name=NULL; offset = dissect_diropargs(tvb, offset, pinfo, tree, "where", &hash, &name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", DH:0x%08x/%s", hash, name); } proto_item_append_text(tree, ", RMDIR Call DH:0x%08x/%s", hash, name); return offset; } static int dissect_nfs2_remove_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 hash; char *name=NULL; offset = dissect_diropargs(tvb, offset, pinfo, tree, "where", &hash, &name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", DH:0x%08x/%s", hash, name); } proto_item_append_text(tree, ", REMOVE Call DH:0x%08x/%s", hash, name); return offset; } static int dissect_nfs2_lookup_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 hash; char *name=NULL; offset = dissect_diropargs(tvb, offset, pinfo, tree, "where", &hash, &name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", DH:0x%08x/%s", hash, name); } proto_item_append_text(tree, ", LOOKUP Call DH:0x%08x/%s", hash, name); return offset; } /* RFC 1094, Page 18 */ static int dissect_diropres(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char *funcname) { guint32 status; guint32 hash; const char *err; offset = dissect_stat(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_fhandle(tvb, offset, pinfo, tree, "file", &hash); offset = dissect_fattr (tvb, offset, tree, "attributes"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", %s Reply FH:0x%08x", funcname, hash); break; default: err=val_to_str(status, names_nfs_stat, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", %s Reply Error:%s", funcname, err); break; } return offset; } /* nfsdata is simply a chunk of RPC opaque data (length, data, fill bytes) */ static int dissect_nfsdata(tvbuff_t *tvb, int offset, proto_tree *tree, int hf) { offset = dissect_rpc_data(tvb, tree, hf, offset); return offset; } /* RFC 1094, Page 18 */ static int dissect_nfs2_mkdir_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { offset = dissect_diropres(tvb, offset, pinfo, tree, "MKDIR"); return offset; } static int dissect_nfs2_create_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { offset = dissect_diropres(tvb, offset, pinfo, tree, "CREATE"); return offset; } static int dissect_nfs2_lookup_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { offset = dissect_diropres(tvb, offset, pinfo, tree, "LOOKUP"); return offset; } /* RFC 1094, Page 6 */ static int dissect_nfs2_setattr_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 hash; offset = dissect_fhandle(tvb, offset, pinfo, tree, "file", &hash); offset = dissect_sattr (tvb, offset, tree, "attributes"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", SETATTR Call FH:0x%08x", hash); return offset; } /* RFC 1094, Page 6 */ static int dissect_nfs2_readlink_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree *tree) { guint32 status; const char *err; char *name=NULL; offset = dissect_stat(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_path(tvb, offset, tree, hf_nfs_readlink_data, &name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Path:%s", name); } proto_item_append_text(tree, ", READLINK Reply Path:%s", name); break; default: err=val_to_str(status, names_nfs_stat, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", READLINK Reply Error:%s", err); break; } return offset; } /* RFC 1094, Page 7 */ static int dissect_nfs2_read_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 offset_value; guint32 count; guint32 totalcount; guint32 hash; offset = dissect_fhandle(tvb, offset, pinfo, tree, "file", &hash); offset_value = tvb_get_ntohl(tvb, offset+0); count = tvb_get_ntohl(tvb, offset+4); totalcount = tvb_get_ntohl(tvb, offset+8); if (tree) { proto_tree_add_uint(tree, hf_nfs_read_offset, tvb, offset+0, 4, offset_value); proto_tree_add_uint(tree, hf_nfs_read_count, tvb, offset+4, 4, count); proto_tree_add_uint(tree, hf_nfs_read_totalcount, tvb, offset+8, 4, totalcount); } offset += 12; if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x Offset:%d Count:%d TotalCount:%d", hash, offset_value, count, totalcount); } proto_item_append_text(tree, ", READ Call FH:0x%08x Offset:%d Count:%d TotalCount:%d", hash, offset_value, count, totalcount); return offset; } /* RFC 1094, Page 7 */ static int dissect_nfs2_read_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_stat(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_fattr(tvb, offset, tree, "attributes"); proto_item_append_text(tree, ", READ Reply"); offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_data); break; default: err=val_to_str(status, names_nfs_stat, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", READ Reply Error:%s", err); break; } return offset; } /* RFC 1094, Page 8 */ static int dissect_nfs2_write_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 beginoffset; guint32 offset_value; guint32 totalcount; guint32 hash; offset = dissect_fhandle(tvb, offset, pinfo, tree, "file", &hash); beginoffset = tvb_get_ntohl(tvb, offset+0); offset_value = tvb_get_ntohl(tvb, offset+4); totalcount = tvb_get_ntohl(tvb, offset+8); if (tree) { proto_tree_add_uint(tree, hf_nfs_write_beginoffset, tvb, offset+0, 4, beginoffset); proto_tree_add_uint(tree, hf_nfs_write_offset, tvb, offset+4, 4, offset_value); proto_tree_add_uint(tree, hf_nfs_write_totalcount, tvb, offset+8, 4, totalcount); } offset += 12; if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x BeginOffset:%d Offset:%d TotalCount:%d", hash, beginoffset, offset_value, totalcount); } proto_item_append_text(tree, ", WRITE Call FH:0x%08x BeginOffset:%d Offset:%d TotalCount:%d", hash, beginoffset, offset_value, totalcount); offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_data); return offset; } /* RFC 1094, Page 8 */ static int dissect_nfs2_mkdir_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 hash; char *name=NULL; offset = dissect_diropargs(tvb, offset, pinfo, tree, "where", &hash, &name); offset = dissect_sattr (tvb, offset, tree, "attributes"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", DH:0x%08x/%s", hash, name); } proto_item_append_text(tree, ", MKDIR Call DH:0x%08x/%s", hash, name); return offset; } static int dissect_nfs2_create_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 hash; char *name=NULL; offset = dissect_diropargs(tvb, offset, pinfo, tree, "where", &hash, &name); offset = dissect_sattr (tvb, offset, tree, "attributes"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", DH:0x%08x/%s", hash, name); } proto_item_append_text(tree, ", CREATE Call DH:0x%08x/%s", hash, name); return offset; } /* RFC 1094, Page 9 */ static int dissect_nfs2_rename_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 from_hash; char *from_name=NULL; guint32 to_hash; char *to_name=NULL; offset = dissect_diropargs(tvb, offset, pinfo, tree, "from", &from_hash, &from_name); offset = dissect_diropargs(tvb, offset, pinfo, tree, "to", &to_hash, &to_name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", From DH:0x%08x/%s To DH:0x%08x/%s", from_hash, from_name, to_hash, to_name); } proto_item_append_text(tree, ", RENAME Call From DH:0x%08x/%s To DH:0x%08x/%s", from_hash, from_name, to_hash, to_name); return offset; } /* RFC 1094, Page 9 */ static int dissect_nfs2_link_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 from_hash; guint32 to_hash; char *to_name=NULL; offset = dissect_fhandle(tvb, offset, pinfo, tree, "from", &from_hash); offset = dissect_diropargs(tvb, offset, pinfo, tree, "to", &to_hash, &to_name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", From DH:0x%08x To DH:0x%08x/%s", from_hash, to_hash, to_name); } proto_item_append_text(tree, ", LINK Call From DH:0x%08x To DH:0x%08x/%s", from_hash, to_hash, to_name); return offset; } /* RFC 1094, Page 10 */ static int dissect_nfs2_symlink_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 from_hash; char *from_name=NULL; char *to_name=NULL; offset = dissect_diropargs(tvb, offset, pinfo, tree, "from", &from_hash, &from_name); offset = dissect_path(tvb, offset, tree, hf_nfs_symlink_to, &to_name); offset = dissect_sattr(tvb, offset, tree, "attributes"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", From DH:0x%08x/%s To %s", from_hash, from_name, to_name); } proto_item_append_text(tree, ", SYMLINK Call From DH:0x%08x/%s To %s", from_hash, from_name, to_name); return offset; } /* RFC 1094, Page 11 */ static int dissect_nfs2_readdir_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 cookie; guint32 count; guint32 hash; offset = dissect_fhandle(tvb, offset, pinfo, tree, "dir", &hash); cookie = tvb_get_ntohl(tvb, offset+ 0); count = tvb_get_ntohl(tvb, offset+ 4); if (tree) { proto_tree_add_uint(tree, hf_nfs_readdir_cookie, tvb, offset+ 0, 4, cookie); proto_tree_add_uint(tree, hf_nfs_readdir_count, tvb, offset+ 4, 4, count); } offset += 8; if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", READDIR Call FH:0x%08x", hash); return offset; } /* RFC 1094, Page 11 */ static int dissect_readdir_entry(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { proto_item* entry_item = NULL; proto_tree* entry_tree = NULL; int old_offset = offset; guint32 fileid; guint32 cookie; char *name; if (tree) { entry_item = proto_tree_add_item(tree, hf_nfs_readdir_entry, tvb, offset+0, -1, FALSE); entry_tree = proto_item_add_subtree(entry_item, ett_nfs_readdir_entry); } fileid = tvb_get_ntohl(tvb, offset + 0); if (entry_tree) proto_tree_add_uint(entry_tree, hf_nfs_readdir_entry_fileid, tvb, offset+0, 4, fileid); offset += 4; offset = dissect_filename(tvb, offset, entry_tree, hf_nfs_readdir_entry_name, &name); if (entry_item) proto_item_set_text(entry_item, "Entry: file ID %u, name %s", fileid, name); cookie = tvb_get_ntohl(tvb, offset + 0); if (entry_tree) proto_tree_add_uint(entry_tree, hf_nfs_readdir_entry_cookie, tvb, offset+0, 4, cookie); offset += 4; /* now we know, that a readdir entry is shorter */ if (entry_item) { proto_item_set_len(entry_item, offset - old_offset); } return offset; } /* RFC 1094, Page 11 */ static int dissect_nfs2_readdir_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 status; guint32 eof_value; const char *err; offset = dissect_stat(tvb, offset, tree, &status); switch (status) { case 0: proto_item_append_text(tree, ", READDIR Reply"); offset = dissect_rpc_list(tvb, pinfo, tree, offset, dissect_readdir_entry); eof_value = tvb_get_ntohl(tvb, offset+0); if (tree) proto_tree_add_uint(tree, hf_nfs_readdir_eof, tvb, offset+ 0, 4, eof_value); offset += 4; break; default: err=val_to_str(status, names_nfs_stat, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", READDIR Reply Error:%s", err); break; } return offset; } /* RFC 1094, Page 12 */ static int dissect_nfs2_statfs_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; guint32 tsize; guint32 bsize; guint32 blocks; guint32 bfree; guint32 bavail; const char *err; offset = dissect_stat(tvb, offset, tree, &status); switch (status) { case 0: tsize = tvb_get_ntohl(tvb, offset+ 0); bsize = tvb_get_ntohl(tvb, offset+ 4); blocks = tvb_get_ntohl(tvb, offset+ 8); bfree = tvb_get_ntohl(tvb, offset+12); bavail = tvb_get_ntohl(tvb, offset+16); if (tree) { proto_tree_add_uint(tree, hf_nfs_statfs_tsize, tvb, offset+ 0, 4, tsize); proto_tree_add_uint(tree, hf_nfs_statfs_bsize, tvb, offset+ 4, 4, bsize); proto_tree_add_uint(tree, hf_nfs_statfs_blocks, tvb, offset+ 8, 4, blocks); proto_tree_add_uint(tree, hf_nfs_statfs_bfree, tvb, offset+12, 4, bfree); proto_tree_add_uint(tree, hf_nfs_statfs_bavail, tvb, offset+16, 4, bavail); } offset += 20; proto_item_append_text(tree, ", STATFS Reply"); break; default: err=val_to_str(status, names_nfs_stat, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", STATFS Reply Error:%s", err); break; } return offset; } /* proc number, "proc name", dissect_request, dissect_reply */ /* NULL as function pointer means: type of arguments is "void". */ static const vsff nfs2_proc[] = { { 0, "NULL", /* OK */ NULL, NULL }, { 1, "GETATTR", /* OK */ dissect_nfs2_getattr_call, dissect_nfs2_getattr_reply }, { 2, "SETATTR", /* OK */ dissect_nfs2_setattr_call, dissect_nfs2_setattr_reply }, { 3, "ROOT", /* OK */ NULL, NULL }, { 4, "LOOKUP", /* OK */ dissect_nfs2_lookup_call, dissect_nfs2_lookup_reply }, { 5, "READLINK", /* OK */ dissect_nfs2_readlink_call, dissect_nfs2_readlink_reply }, { 6, "READ", /* OK */ dissect_nfs2_read_call, dissect_nfs2_read_reply }, { 7, "WRITECACHE", /* OK */ NULL, NULL }, { 8, "WRITE", /* OK */ dissect_nfs2_write_call, dissect_nfs2_write_reply }, { 9, "CREATE", /* OK */ dissect_nfs2_create_call, dissect_nfs2_create_reply }, { 10, "REMOVE", /* OK */ dissect_nfs2_remove_call, dissect_nfs2_remove_reply }, { 11, "RENAME", /* OK */ dissect_nfs2_rename_call, dissect_nfs2_rename_reply }, { 12, "LINK", /* OK */ dissect_nfs2_link_call, dissect_nfs2_link_reply }, { 13, "SYMLINK", /* OK */ dissect_nfs2_symlink_call, dissect_nfs2_symlink_reply }, { 14, "MKDIR", /* OK */ dissect_nfs2_mkdir_call, dissect_nfs2_mkdir_reply }, { 15, "RMDIR", /* OK */ dissect_nfs2_rmdir_call, dissect_nfs2_rmdir_reply }, { 16, "READDIR", /* OK */ dissect_nfs2_readdir_call, dissect_nfs2_readdir_reply }, { 17, "STATFS", /* OK */ dissect_nfs2_statfs_call, dissect_nfs2_statfs_reply }, { 0,NULL,NULL,NULL } }; static const value_string nfsv2_proc_vals[] = { { 0, "NULL" }, { 1, "GETATTR" }, { 2, "SETATTR" }, { 3, "ROOT" }, { 4, "LOOKUP" }, { 5, "READLINK" }, { 6, "READ" }, { 7, "WRITECACHE" }, { 8, "WRITE" }, { 9, "CREATE" }, { 10, "REMOVE" }, { 11, "RENAME" }, { 12, "LINK" }, { 13, "SYMLINK" }, { 14, "MKDIR" }, { 15, "RMDIR" }, { 16, "READDIR" }, { 17, "STATFS" }, { 0, NULL } }; /* end of NFS Version 2 */ /***************************/ /* NFS Version 3, RFC 1813 */ /***************************/ /* RFC 1813, Page 15 */ static int dissect_filename3(tvbuff_t *tvb, int offset, proto_tree *tree, int hf, char **string_ret) { offset = dissect_rpc_string(tvb, tree, hf, offset, string_ret); return offset; } /* RFC 1813, Page 15 */ static int dissect_nfspath3(tvbuff_t *tvb, int offset, proto_tree *tree, int hf, char **name) { offset = dissect_rpc_string(tvb, tree, hf, offset, name); return offset; } /* RFC 1813, Page 15 */ static int dissect_cookieverf3(tvbuff_t *tvb, int offset, proto_tree *tree) { proto_tree_add_text(tree, tvb, offset, NFS3_COOKIEVERFSIZE, "Verifier: Opaque Data"); offset += NFS3_COOKIEVERFSIZE; return offset; } /* RFC 1813, Page 16 */ static int dissect_createverf3(tvbuff_t *tvb, int offset, proto_tree *tree) { proto_tree_add_text(tree, tvb, offset, NFS3_CREATEVERFSIZE, "Verifier: Opaque Data"); offset += NFS3_CREATEVERFSIZE; return offset; } /* RFC 1813, Page 16 */ static int dissect_writeverf3(tvbuff_t *tvb, int offset, proto_tree *tree) { proto_tree_add_text(tree, tvb, offset, NFS3_WRITEVERFSIZE, "Verifier: Opaque Data"); offset += NFS3_WRITEVERFSIZE; return offset; } /* RFC 1813, Page 16 */ static int dissect_mode3(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name, guint32 *mode) { guint32 mode3; proto_item* mode3_item = NULL; proto_tree* mode3_tree = NULL; mode3 = tvb_get_ntohl(tvb, offset+0); if(mode){ *mode=mode3; } if (tree) { mode3_item = proto_tree_add_text(tree, tvb, offset, 4, "%s: 0%o", name, mode3); if (mode3_item) mode3_tree = proto_item_add_subtree(mode3_item, ett_nfs_mode3); } /* RFC 1813, Page 23 */ if (mode3_tree) { proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x800, 12, "Set user id on exec", "not SUID")); proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x400, 12, "Set group id on exec", "not SGID")); proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x200, 12, "Save swapped text even after use", "not save swapped text")); proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x100, 12, "Read permission for owner", "no Read permission for owner")); proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x80, 12, "Write permission for owner", "no Write permission for owner")); proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x40, 12, "Execute permission for owner", "no Execute permission for owner")); proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x20, 12, "Read permission for group", "no Read permission for group")); proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x10, 12, "Write permission for group", "no Write permission for group")); proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x8, 12, "Execute permission for group", "no Execute permission for group")); proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x4, 12, "Read permission for others", "no Read permission for others")); proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x2, 12, "Write permission for others", "no Write permission for others")); proto_tree_add_text(mode3_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(mode3, 0x1, 12, "Execute permission for others", "no Execute permission for others")); } offset += 4; return offset; } /* RFC 1813, Page 16,17 */ static const value_string names_nfs_nfsstat3[] = { { 0, "NFS3_OK" }, { 1, "NFS3ERR_PERM" }, { 2, "NFS3ERR_NOENT" }, { 5, "NFS3ERR_IO" }, { 6, "NFS3ERR_NXIO" }, { 13, "NFS3ERR_ACCES" }, { 17, "NFS3ERR_EXIST" }, { 18, "NFS3ERR_XDEV" }, { 19, "NFS3ERR_NODEV" }, { 20, "NFS3ERR_NOTDIR" }, { 21, "NFS3ERR_ISDIR" }, { 22, "NFS3ERR_INVAL" }, { 27, "NFS3ERR_FBIG" }, { 28, "NFS3ERR_NOSPC" }, { 30, "NFS3ERR_ROFS" }, { 31, "NFS3ERR_MLINK" }, { 63, "NFS3ERR_NAMETOOLONG" }, { 66, "NFS3ERR_NOTEMPTY" }, { 69, "NFS3ERR_DQUOT" }, { 70, "NFS3ERR_STALE" }, { 71, "NFS3ERR_REMOTE" }, { 10001, "NFS3ERR_BADHANDLE" }, { 10002, "NFS3ERR_NOT_SYNC" }, { 10003, "NFS3ERR_BAD_COOKIE" }, { 10004, "NFS3ERR_NOTSUPP" }, { 10005, "NFS3ERR_TOOSMALL" }, { 10006, "NFS3ERR_SERVERFAULT" }, { 10007, "NFS3ERR_BADTYPE" }, { 10008, "NFS3ERR_JUKEBOX" }, { 0, NULL } }; /* RFC 1813, Page 16 */ static int dissect_nfsstat3(tvbuff_t *tvb, int offset, proto_tree *tree,guint32 *status) { guint32 nfsstat3; proto_item *stat_item; nfsstat3 = tvb_get_ntohl(tvb, offset+0); if (tree) { proto_tree_add_uint(tree, hf_nfs_nfsstat3, tvb, offset+0, 4, nfsstat3); stat_item = proto_tree_add_uint(tree, hf_nfs_nfsstat, tvb, offset+0, 4, nfsstat3); PROTO_ITEM_SET_HIDDEN(stat_item); } offset += 4; *status = nfsstat3; return offset; } static const value_string names_nfs_ftype3[] = { { NF3REG, "Regular File" }, { NF3DIR, "Directory" }, { NF3BLK, "Block Special Device" }, { NF3CHR, "Character Special Device" }, { NF3LNK, "Symbolic Link" }, { NF3SOCK,"Socket" }, { NF3FIFO,"Named Pipe" }, { 0, NULL } }; /* RFC 1813, Page 20 */ static int dissect_ftype3(tvbuff_t *tvb, int offset, proto_tree *tree, int hf, guint32* ftype3) { guint32 type; type = tvb_get_ntohl(tvb, offset+0); if (tree) { proto_tree_add_uint(tree, hf, tvb, offset, 4, type); } offset += 4; *ftype3 = type; return offset; } /* RFC 1813, Page 20 */ static int dissect_specdata3(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { guint32 specdata1; guint32 specdata2; proto_item* specdata3_item; proto_tree* specdata3_tree = NULL; specdata1 = tvb_get_ntohl(tvb, offset+0); specdata2 = tvb_get_ntohl(tvb, offset+4); if (tree) { specdata3_item = proto_tree_add_text(tree, tvb, offset, 8, "%s: %u,%u", name, specdata1, specdata2); if (specdata3_item) specdata3_tree = proto_item_add_subtree(specdata3_item, ett_nfs_specdata3); } if (specdata3_tree) { proto_tree_add_text(specdata3_tree, tvb,offset+0,4, "specdata1: %u", specdata1); proto_tree_add_text(specdata3_tree, tvb,offset+4,4, "specdata2: %u", specdata2); } offset += 8; return offset; } /* RFC 1813, Page 21 */ int dissect_nfs_fh3(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char *name, guint32 *hash) { guint fh3_len; guint fh3_len_full; guint fh3_fill; proto_item* fitem = NULL; proto_tree* ftree = NULL; int fh_offset,fh_length; fh3_len = tvb_get_ntohl(tvb, offset+0); fh3_len_full = rpc_roundup(fh3_len); fh3_fill = fh3_len_full - fh3_len; if (tree) { fitem = proto_tree_add_text(tree, tvb, offset, 4+fh3_len_full, "%s", name); if (fitem) ftree = proto_item_add_subtree(fitem, ett_nfs_fh3); } /* are we snooping fh to filenames ?*/ if((!pinfo->fd->flags.visited) && nfs_file_name_snooping){ rpc_call_info_value *civ=pinfo->private_data; /* NFS v3 LOOKUP, CREATE, MKDIR, READDIRPLUS calls might give us a mapping*/ if( (civ->prog==100003) &&(civ->vers==3) &&(!civ->request) &&((civ->proc==3)||(civ->proc==8)||(civ->proc==9)||(civ->proc==17)) ) { fh_length=tvb_get_ntohl(tvb, offset); fh_offset=offset+4; nfs_name_snoop_add_fh(civ->xid, tvb, fh_offset, fh_length); } /* MOUNT v3 MNT replies might give us a filehandle */ if( (civ->prog==100005) &&(civ->vers==3) &&(!civ->request) &&(civ->proc==1) ) { fh_length=tvb_get_ntohl(tvb, offset); fh_offset=offset+4; nfs_name_snoop_add_fh(civ->xid, tvb, fh_offset, fh_length); } } proto_tree_add_uint(ftree, hf_nfs_fh_length, tvb, offset+0, 4, fh3_len); /* Handle WebNFS requests where filehandle may be 0 length */ if (fh3_len > 0) { dissect_fhandle_data(tvb, offset+4, pinfo, ftree, fh3_len, FALSE, hash); offset += fh3_len_full; } offset += 4; return offset; } /* RFC 1813, Page 21 */ static int dissect_nfstime3(tvbuff_t *tvb, int offset, proto_tree *tree, int hf_time, int hf_time_sec, int hf_time_nsec) { guint32 seconds; guint32 nseconds; nstime_t ts; proto_item* time_item; proto_tree* time_tree = NULL; seconds = tvb_get_ntohl(tvb, offset+0); nseconds = tvb_get_ntohl(tvb, offset+4); ts.secs = seconds; ts.nsecs = nseconds; if (tree) { time_item = proto_tree_add_time(tree, hf_time, tvb, offset, 8, &ts); if (time_item) time_tree = proto_item_add_subtree(time_item, ett_nfs_nfstime3); } if (time_tree) { proto_tree_add_uint(time_tree, hf_time_sec, tvb, offset, 4, seconds); proto_tree_add_uint(time_tree, hf_time_nsec, tvb, offset+4, 4, nseconds); } offset += 8; return offset; } /* RFC 1813, Page 22 * The levels parameter tells this helper how many levels up in the tree it * should display useful info such as type,mode,uid,gid * If level has the COL_INFO_LEVEL flag set it will also display * this info in the info column. */ static int dissect_nfs_fattr3(packet_info *pinfo, tvbuff_t *tvb, int offset, proto_tree *tree, const char* name, guint32 levels) { proto_item* fattr3_item = NULL; proto_tree* fattr3_tree = NULL; int old_offset = offset; guint32 type, mode, uid, gid; if (tree) { fattr3_item = proto_tree_add_text(tree, tvb, offset, -1, "%s", name); fattr3_tree = proto_item_add_subtree(fattr3_item, ett_nfs_fattr3); } /* ftype */ offset = dissect_ftype3(tvb,offset,fattr3_tree,hf_nfs_fattr3_type,&type); /* mode */ offset = dissect_mode3(tvb,offset,fattr3_tree,"mode",&mode); /* nlink */ offset = dissect_rpc_uint32(tvb, fattr3_tree, hf_nfs_fattr3_nlink, offset); /* uid */ uid=tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, fattr3_tree, hf_nfs_fattr3_uid, offset); /* gid */ gid=tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, fattr3_tree, hf_nfs_fattr3_gid, offset); /* size*/ offset = dissect_rpc_uint64(tvb, fattr3_tree, hf_nfs_fattr3_size, offset); /* used */ offset = dissect_rpc_uint64(tvb, fattr3_tree, hf_nfs_fattr3_used, offset); /* rdev */ offset = dissect_specdata3(tvb,offset,fattr3_tree,"rdev"); /* fsid */ offset = dissect_rpc_uint64(tvb, fattr3_tree, hf_nfs_fattr3_fsid, offset); /* fileid */ offset = dissect_rpc_uint64(tvb, fattr3_tree, hf_nfs_fattr3_fileid, offset); /* atime */ offset = dissect_nfstime3 (tvb,offset,fattr3_tree,hf_nfs_atime,hf_nfs_atime_sec,hf_nfs_atime_nsec); /* mtime */ offset = dissect_nfstime3 (tvb,offset,fattr3_tree,hf_nfs_mtime,hf_nfs_mtime_sec,hf_nfs_mtime_nsec); /* ctime */ offset = dissect_nfstime3 (tvb,offset,fattr3_tree,hf_nfs_ctime,hf_nfs_ctime_sec,hf_nfs_ctime_nsec); /* now we know, that fattr3 is shorter */ if (fattr3_item) { proto_item_set_len(fattr3_item, offset - old_offset); } /* put some nice info in COL_INFO for GETATTR replies */ if(levels&COL_INFO_LEVEL){ levels&=(~COL_INFO_LEVEL); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO, " %s mode:%04o uid:%d gid:%d", val_to_str(type, names_nfs_ftype3,"Unknown Type:0x%x"), mode&0x0fff, uid, gid ); } } /* populate the expansion lines with some nice useable info */ while( fattr3_tree && levels-- ){ if(fattr3_tree){ proto_item_append_text(fattr3_tree, " %s mode:%04o uid:%d gid:%d", val_to_str(type, names_nfs_ftype3,"Unknown Type:0x%x"), mode&0x0fff, uid, gid ); } fattr3_tree=fattr3_tree->parent; } return offset; } static const value_string value_follows[] = { { 0, "no value" }, { 1, "value follows"}, { 0, NULL } }; /* RFC 1813, Page 23 */ int dissect_nfs_post_op_attr(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char* name) { proto_item* post_op_attr_item = NULL; proto_tree* post_op_attr_tree = NULL; int old_offset = offset; guint32 attributes_follow; if (tree) { post_op_attr_item = proto_tree_add_text(tree, tvb, offset, -1, "%s", name); post_op_attr_tree = proto_item_add_subtree(post_op_attr_item, ett_nfs_post_op_attr); } attributes_follow = tvb_get_ntohl(tvb, offset+0); proto_tree_add_text(post_op_attr_tree, tvb, offset, 4, "attributes_follow: %s (%u)", val_to_str(attributes_follow,value_follows,"Unknown"), attributes_follow); offset += 4; switch (attributes_follow) { case TRUE: offset = dissect_nfs_fattr3(pinfo, tvb, offset, post_op_attr_tree, "attributes",2); break; case FALSE: /* void */ break; } /* now we know, that post_op_attr_tree is shorter */ if (post_op_attr_item) { proto_item_set_len(post_op_attr_item, offset - old_offset); } return offset; } /* RFC 1813, Page 24 */ static int dissect_wcc_attr(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { proto_item* wcc_attr_item = NULL; proto_tree* wcc_attr_tree = NULL; int old_offset = offset; if (tree) { wcc_attr_item = proto_tree_add_text(tree, tvb, offset, -1, "%s", name); wcc_attr_tree = proto_item_add_subtree(wcc_attr_item, ett_nfs_wcc_attr); } offset = dissect_rpc_uint64(tvb, wcc_attr_tree, hf_nfs_wcc_attr_size, offset); offset = dissect_nfstime3(tvb, offset, wcc_attr_tree, hf_nfs_mtime, hf_nfs_mtime_sec, hf_nfs_mtime_nsec); offset = dissect_nfstime3(tvb, offset, wcc_attr_tree, hf_nfs_ctime, hf_nfs_ctime_sec, hf_nfs_ctime_nsec); /* now we know, that wcc_attr_tree is shorter */ if (wcc_attr_item) { proto_item_set_len(wcc_attr_item, offset - old_offset); } return offset; } /* RFC 1813, Page 24 */ static int dissect_pre_op_attr(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { proto_item* pre_op_attr_item = NULL; proto_tree* pre_op_attr_tree = NULL; int old_offset = offset; guint32 attributes_follow; if (tree) { pre_op_attr_item = proto_tree_add_text(tree, tvb, offset, -1, "%s", name); pre_op_attr_tree = proto_item_add_subtree(pre_op_attr_item, ett_nfs_pre_op_attr); } attributes_follow = tvb_get_ntohl(tvb, offset+0); proto_tree_add_text(pre_op_attr_tree, tvb, offset, 4, "attributes_follow: %s (%u)", val_to_str(attributes_follow,value_follows,"Unknown"), attributes_follow); offset += 4; switch (attributes_follow) { case TRUE: offset = dissect_wcc_attr(tvb, offset, pre_op_attr_tree, "attributes"); break; case FALSE: /* void */ break; } /* now we know, that pre_op_attr_tree is shorter */ if (pre_op_attr_item) { proto_item_set_len(pre_op_attr_item, offset - old_offset); } return offset; } /* RFC 1813, Page 24 */ static int dissect_wcc_data(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char* name) { proto_item* wcc_data_item = NULL; proto_tree* wcc_data_tree = NULL; int old_offset = offset; if (tree) { wcc_data_item = proto_tree_add_text(tree, tvb, offset, -1, "%s", name); wcc_data_tree = proto_item_add_subtree(wcc_data_item, ett_nfs_wcc_data); } offset = dissect_pre_op_attr (tvb, offset, wcc_data_tree, "before"); offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, wcc_data_tree, "after" ); /* now we know, that wcc_data is shorter */ if (wcc_data_item) { proto_item_set_len(wcc_data_item, offset - old_offset); } return offset; } /* RFC 1813, Page 25 */ static int dissect_post_op_fh3(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char* name) { proto_item* post_op_fh3_item = NULL; proto_tree* post_op_fh3_tree = NULL; int old_offset = offset; guint32 handle_follows; if (tree) { post_op_fh3_item = proto_tree_add_text(tree, tvb, offset, -1, "%s", name); post_op_fh3_tree = proto_item_add_subtree(post_op_fh3_item, ett_nfs_post_op_fh3); } handle_follows = tvb_get_ntohl(tvb, offset+0); proto_tree_add_text(post_op_fh3_tree, tvb, offset, 4, "handle_follows: %s (%u)", val_to_str(handle_follows,value_follows,"Unknown"), handle_follows); offset += 4; switch (handle_follows) { case TRUE: offset = dissect_nfs_fh3(tvb, offset, pinfo, post_op_fh3_tree, "handle", NULL); break; case FALSE: /* void */ break; } /* now we know, that post_op_fh3_tree is shorter */ if (post_op_fh3_item) { proto_item_set_len(post_op_fh3_item, offset - old_offset); } return offset; } /* RFC 1813, Page 25 */ static int dissect_set_mode3(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { proto_item* set_mode3_item = NULL; proto_tree* set_mode3_tree = NULL; int old_offset = offset; guint32 set_it; const char* set_it_name; set_it = tvb_get_ntohl(tvb, offset+0); set_it_name = val_to_str(set_it,value_follows,"Unknown"); if (tree) { set_mode3_item = proto_tree_add_text(tree, tvb, offset, -1, "%s: %s", name, set_it_name); set_mode3_tree = proto_item_add_subtree(set_mode3_item, ett_nfs_set_mode3); } if (set_mode3_tree) proto_tree_add_text(set_mode3_tree, tvb, offset, 4, "set_it: %s (%u)", set_it_name, set_it); offset += 4; switch (set_it) { case 1: offset = dissect_mode3(tvb, offset, set_mode3_tree, "mode", NULL); break; default: /* void */ break; } /* now we know, that set_mode3 is shorter */ if (set_mode3_item) { proto_item_set_len(set_mode3_item, offset - old_offset); } return offset; } /* RFC 1813, Page 26 */ static int dissect_set_uid3(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { proto_item* set_uid3_item = NULL; proto_tree* set_uid3_tree = NULL; int old_offset = offset; guint32 set_it; const char* set_it_name; set_it = tvb_get_ntohl(tvb, offset+0); set_it_name = val_to_str(set_it,value_follows,"Unknown"); if (tree) { set_uid3_item = proto_tree_add_text(tree, tvb, offset, -1, "%s: %s", name, set_it_name); set_uid3_tree = proto_item_add_subtree(set_uid3_item, ett_nfs_set_uid3); } if (set_uid3_tree) proto_tree_add_text(set_uid3_tree, tvb, offset, 4, "set_it: %s (%u)", set_it_name, set_it); offset += 4; switch (set_it) { case 1: offset = dissect_rpc_uint32(tvb, set_uid3_tree, hf_nfs_uid3, offset); break; default: /* void */ break; } /* now we know, that set_uid3 is shorter */ if (set_uid3_item) { proto_item_set_len(set_uid3_item, offset - old_offset); } return offset; } /* RFC 1813, Page 26 */ static int dissect_set_gid3(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { proto_item* set_gid3_item = NULL; proto_tree* set_gid3_tree = NULL; int old_offset = offset; guint32 set_it; const char* set_it_name; set_it = tvb_get_ntohl(tvb, offset+0); set_it_name = val_to_str(set_it,value_follows,"Unknown"); if (tree) { set_gid3_item = proto_tree_add_text(tree, tvb, offset, -1, "%s: %s", name, set_it_name); set_gid3_tree = proto_item_add_subtree(set_gid3_item, ett_nfs_set_gid3); } if (set_gid3_tree) proto_tree_add_text(set_gid3_tree, tvb, offset, 4, "set_it: %s (%u)", set_it_name, set_it); offset += 4; switch (set_it) { case 1: offset = dissect_rpc_uint32(tvb, set_gid3_tree, hf_nfs_gid3, offset); break; default: /* void */ break; } /* now we know, that set_gid3 is shorter */ if (set_gid3_item) { proto_item_set_len(set_gid3_item, offset - old_offset); } return offset; } /* RFC 1813, Page 26 */ static int dissect_set_size3(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { proto_item* set_size3_item = NULL; proto_tree* set_size3_tree = NULL; int old_offset = offset; guint32 set_it; const char* set_it_name; set_it = tvb_get_ntohl(tvb, offset+0); set_it_name = val_to_str(set_it,value_follows,"Unknown"); if (tree) { set_size3_item = proto_tree_add_text(tree, tvb, offset, -1, "%s: %s", name, set_it_name); set_size3_tree = proto_item_add_subtree(set_size3_item, ett_nfs_set_size3); } if (set_size3_tree) proto_tree_add_text(set_size3_tree, tvb, offset, 4, "set_it: %s (%u)", set_it_name, set_it); offset += 4; switch (set_it) { case 1: offset = dissect_rpc_uint64(tvb, set_size3_tree, hf_nfs_set_size3_size, offset); break; default: /* void */ break; } /* now we know, that set_size3 is shorter */ if (set_size3_item) { proto_item_set_len(set_size3_item, offset - old_offset); } return offset; } /* RFC 1813, Page 25 */ #define DONT_CHANGE 0 #define SET_TO_SERVER_TIME 1 #define SET_TO_CLIENT_TIME 2 static const value_string time_how[] = { { DONT_CHANGE, "don't change" }, { SET_TO_SERVER_TIME, "set to server time" }, { SET_TO_CLIENT_TIME, "set to client time" }, { 0, NULL } }; /* RFC 1813, Page 26 */ static int dissect_set_atime(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { proto_item* set_atime_item = NULL; proto_tree* set_atime_tree = NULL; int old_offset = offset; guint32 set_it; const char* set_it_name; set_it = tvb_get_ntohl(tvb, offset+0); set_it_name = val_to_str(set_it,time_how,"Unknown"); if (tree) { set_atime_item = proto_tree_add_text(tree, tvb, offset, -1, "%s: %s", name, set_it_name); set_atime_tree = proto_item_add_subtree(set_atime_item, ett_nfs_set_atime); } if (set_atime_tree) proto_tree_add_text(set_atime_tree, tvb, offset, 4, "set_it: %s (%u)", set_it_name, set_it); offset += 4; switch (set_it) { case SET_TO_CLIENT_TIME: if (set_atime_item) { offset = dissect_nfstime3(tvb, offset, set_atime_tree, hf_nfs_atime, hf_nfs_atime_sec, hf_nfs_atime_nsec); } break; default: /* void */ break; } /* now we know, that set_atime is shorter */ if (set_atime_item) { proto_item_set_len(set_atime_item, offset - old_offset); } return offset; } /* RFC 1813, Page 26 */ static int dissect_set_mtime(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { proto_item* set_mtime_item = NULL; proto_tree* set_mtime_tree = NULL; int old_offset = offset; guint32 set_it; const char* set_it_name; set_it = tvb_get_ntohl(tvb, offset+0); set_it_name = val_to_str(set_it,time_how,"Unknown"); if (tree) { set_mtime_item = proto_tree_add_text(tree, tvb, offset, -1, "%s: %s", name, set_it_name); set_mtime_tree = proto_item_add_subtree(set_mtime_item, ett_nfs_set_mtime); } if (set_mtime_tree) proto_tree_add_text(set_mtime_tree, tvb, offset, 4, "set_it: %s (%u)", set_it_name, set_it); offset += 4; switch (set_it) { case SET_TO_CLIENT_TIME: if (set_mtime_item) { offset = dissect_nfstime3(tvb, offset, set_mtime_tree, hf_nfs_atime, hf_nfs_atime_sec, hf_nfs_atime_nsec); } break; default: /* void */ break; } /* now we know, that set_mtime is shorter */ if (set_mtime_item) { proto_item_set_len(set_mtime_item, offset - old_offset); } return offset; } /* RFC 1813, Page 25..27 */ static int dissect_sattr3(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { proto_item* sattr3_item = NULL; proto_tree* sattr3_tree = NULL; int old_offset = offset; if (tree) { sattr3_item = proto_tree_add_text(tree, tvb, offset, -1, "%s", name); sattr3_tree = proto_item_add_subtree(sattr3_item, ett_nfs_sattr3); } offset = dissect_set_mode3(tvb, offset, sattr3_tree, "mode"); offset = dissect_set_uid3 (tvb, offset, sattr3_tree, "uid"); offset = dissect_set_gid3 (tvb, offset, sattr3_tree, "gid"); offset = dissect_set_size3(tvb, offset, sattr3_tree, "size"); offset = dissect_set_atime(tvb, offset, sattr3_tree, "atime"); offset = dissect_set_mtime(tvb, offset, sattr3_tree, "mtime"); /* now we know, that sattr3 is shorter */ if (sattr3_item) { proto_item_set_len(sattr3_item, offset - old_offset); } return offset; } /* RFC 1813, Page 27 */ static int dissect_diropargs3(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char* label, guint32 *hash, char **name) { proto_item* diropargs3_item = NULL; proto_tree* diropargs3_tree = NULL; int old_offset = offset; int parent_offset, parent_len; int name_offset, name_len; if (tree) { diropargs3_item = proto_tree_add_text(tree, tvb, offset, -1, "%s", label); diropargs3_tree = proto_item_add_subtree(diropargs3_item, ett_nfs_diropargs3); } parent_offset=offset+4; parent_len=tvb_get_ntohl(tvb, offset); offset = dissect_nfs_fh3(tvb, offset, pinfo, diropargs3_tree, "dir", hash); name_offset=offset+4; name_len=tvb_get_ntohl(tvb, offset); offset = dissect_filename3(tvb, offset, diropargs3_tree, hf_nfs_name, name); /* are we snooping fh to filenames ?*/ if((!pinfo->fd->flags.visited) && nfs_file_name_snooping){ /* v3 LOOKUP, CREATE, MKDIR calls might give us a mapping*/ rpc_call_info_value *civ=pinfo->private_data; if( (civ->prog==100003) &&(civ->vers==3) &&(civ->request) &&((civ->proc==3)||(civ->proc==8)||(civ->proc==9)) ) { nfs_name_snoop_add_name(civ->xid, tvb, name_offset, name_len, parent_offset, parent_len, NULL); } } /* now we know, that diropargs3 is shorter */ if (diropargs3_item) { proto_item_set_len(diropargs3_item, offset - old_offset); } return offset; } static int dissect_nfs3_remove_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 hash; char *name=NULL; offset = dissect_diropargs3(tvb, offset, pinfo, tree, "object", &hash, &name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", DH:0x%08x/%s", hash, name); } proto_item_append_text(tree, ", REMOVE Call DH:0x%08x/%s", hash, name); return offset; } static int dissect_nfs3_null_call(tvbuff_t *tvb _U_, int offset, packet_info *pinfo _U_, proto_tree *tree) { proto_item_append_text(tree, ", NULL Call"); return offset; } static int dissect_nfs3_null_reply(tvbuff_t *tvb _U_, int offset, packet_info *pinfo _U_, proto_tree *tree) { proto_item_append_text(tree, ", NULL Reply"); return offset; } static int dissect_nfs3_rmdir_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 hash; char *name=NULL; offset = dissect_diropargs3(tvb, offset, pinfo, tree, "object", &hash, &name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", DH:0x%08x/%s", hash, name); } proto_item_append_text(tree, ", RMDIR Call DH:0x%08x/%s", hash, name); return offset; } /* RFC 1813, Page 40 */ int dissect_access(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name) { guint32 access; proto_item* access_item = NULL; proto_tree* access_tree = NULL; access = tvb_get_ntohl(tvb, offset+0); if (tree) { access_item = proto_tree_add_text(tree, tvb, offset, 4, "%s: 0x%02x", name, access); if (access_item) access_tree = proto_item_add_subtree(access_item, ett_nfs_access); } if (access_tree) { proto_tree_add_text(access_tree, tvb, offset, 4, "%s READ", decode_boolean_bitfield(access, 0x001, 6, "allow", "not allow")); proto_tree_add_text(access_tree, tvb, offset, 4, "%s LOOKUP", decode_boolean_bitfield(access, 0x002, 6, "allow", "not allow")); proto_tree_add_text(access_tree, tvb, offset, 4, "%s MODIFY", decode_boolean_bitfield(access, 0x004, 6, "allow", "not allow")); proto_tree_add_text(access_tree, tvb, offset, 4, "%s EXTEND", decode_boolean_bitfield(access, 0x008, 6, "allow", "not allow")); proto_tree_add_text(access_tree, tvb, offset, 4, "%s DELETE", decode_boolean_bitfield(access, 0x010, 6, "allow", "not allow")); proto_tree_add_text(access_tree, tvb, offset, 4, "%s EXECUTE", decode_boolean_bitfield(access, 0x020, 6, "allow", "not allow")); } offset += 4; return offset; } /* RFC 1813, Page 32,33 */ static int dissect_nfs3_getattr_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; offset = dissect_nfs_fh3(tvb, offset, pinfo, tree, "object", &hash); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", GETATTR Call FH:0x%08x", hash); return offset; } /* RFC 1813, Page 32,33 */ static int dissect_nfs3_getattr_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; proto_item_append_text(tree, ", GETATTR Reply"); offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_nfs_fattr3(pinfo, tvb, offset, tree, "obj_attributes",2|COL_INFO_LEVEL); break; default: err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, " Error:%s", err); break; } return offset; } /* RFC 1813, Page 33 */ static int dissect_sattrguard3(tvbuff_t *tvb, int offset, proto_tree* tree, const char *name) { proto_item* sattrguard3_item = NULL; proto_tree* sattrguard3_tree = NULL; int old_offset = offset; guint32 check; const char* check_name; check = tvb_get_ntohl(tvb, offset+0); check_name = val_to_str(check,value_follows,"Unknown"); if (tree) { sattrguard3_item = proto_tree_add_text(tree, tvb, offset, -1, "%s: %s", name, check_name); sattrguard3_tree = proto_item_add_subtree(sattrguard3_item, ett_nfs_sattrguard3); } if (sattrguard3_tree) proto_tree_add_text(sattrguard3_tree, tvb, offset, 4, "check: %s (%u)", check_name, check); offset += 4; switch (check) { case TRUE: offset = dissect_nfstime3(tvb, offset, sattrguard3_tree, hf_nfs_ctime, hf_nfs_ctime_sec, hf_nfs_ctime_nsec); break; case FALSE: /* void */ break; } /* now we know, that sattrguard3 is shorter */ if (sattrguard3_item) { proto_item_set_len(sattrguard3_item, offset - old_offset); } return offset; } /* RFC 1813, Page 33..36 */ static int dissect_nfs3_setattr_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; offset = dissect_nfs_fh3 (tvb, offset, pinfo, tree, "object", &hash); offset = dissect_sattr3 (tvb, offset, tree, "new_attributes"); offset = dissect_sattrguard3(tvb, offset, tree, "guard"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", SETATTR Call FH:0x%08x", hash); return offset; } /* RFC 1813, Page 33..36 */ static int dissect_nfs3_setattr_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "obj_wcc"); proto_item_append_text(tree, ", SETATTR Reply"); break; default: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "obj_wcc"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", SETATTR Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 37..39 */ static int dissect_nfs3_lookup_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; char *name=NULL; offset = dissect_diropargs3 (tvb, offset, pinfo, tree, "what", &hash, &name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", DH:0x%08x/%s", hash, name); } proto_item_append_text(tree, ", LOOKUP Call DH:0x%08x/%s", hash, name); return offset; } /* RFC 1813, Page 37..39 */ static int dissect_nfs3_lookup_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 status; const char *err; guint32 hash; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_nfs_fh3(tvb, offset, pinfo, tree, "object", &hash); offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "dir_attributes"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", LOOKUP Reply FH:0x%08x", hash); break; default: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "dir_attributes"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", LOOKUP Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 40..43 */ static int dissect_nfs3_access_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; offset = dissect_nfs_fh3(tvb, offset, pinfo, tree, "object", &hash); offset = dissect_access (tvb, offset, tree, "access"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", ACCESS Call FH:0x%08x", hash); return offset; } /* RFC 1813, Page 40..43 */ static int dissect_nfs3_access_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); offset = dissect_access(tvb, offset, tree, "access"); proto_item_append_text(tree, ", ACCESS Reply"); break; default: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", ACCESS Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 44,45 */ static int dissect_nfs3_readlink_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; offset = dissect_nfs_fh3(tvb, offset, pinfo, tree, "object", &hash); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", READLINK Call FH:0x%08x", hash); return offset; } static int dissect_nfs3_readlink_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; char *name=NULL; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "symlink_attributes"); offset = dissect_nfspath3(tvb, offset, tree, hf_nfs_readlink_data, &name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Path:%s", name); } proto_item_append_text(tree, ", READLINK Reply Path:%s", name); break; default: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "symlink_attributes"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", READLINK Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 46..48 */ static int dissect_nfs3_read_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint64 off; guint32 len; guint32 hash; offset = dissect_nfs_fh3(tvb, offset, pinfo, tree, "file", &hash); off=tvb_get_ntoh64(tvb, offset); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_offset3, offset); len=tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_count3, offset); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x Offset:%" PRIu64 " Len:%u", hash, off, len); } proto_item_append_text(tree, ", READ Call FH:0x%08x Offset:%" PRIu64 " Len:%u", hash, off, len); return offset; } /* RFC 1813, Page 46..48 */ static int dissect_nfs3_read_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; guint32 len; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "file_attributes"); len=tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_count3, offset); offset = dissect_rpc_bool(tvb, tree, hf_nfs_read_eof, offset); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Len:%d", len); } proto_item_append_text(tree, ", READ Reply Len:%d", len); offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_data); break; default: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "file_attributes"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", READ Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 49 */ static const value_string names_stable_how[] = { { UNSTABLE, "UNSTABLE" }, { DATA_SYNC, "DATA_SYNC" }, { FILE_SYNC, "FILE_SYNC" }, { 0, NULL } }; /* RFC 1813, Page 49 */ static int dissect_stable_how(tvbuff_t *tvb, int offset, proto_tree* tree, int hfindex) { guint32 stable_how; stable_how = tvb_get_ntohl(tvb,offset+0); if (tree) { proto_tree_add_uint(tree, hfindex, tvb, offset, 4, stable_how); } offset += 4; return offset; } /* RFC 1813, Page 49..54 */ static int dissect_nfs3_write_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint64 off; guint32 len; guint32 stable; guint32 hash; offset = dissect_nfs_fh3 (tvb, offset, pinfo, tree, "file", &hash); off=tvb_get_ntoh64(tvb, offset); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_offset3, offset); len=tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_count3, offset); stable=tvb_get_ntohl(tvb, offset); offset = dissect_stable_how(tvb, offset, tree, hf_nfs_write_stable); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x Offset:%" PRIu64 " Len:%u %s", hash, off, len, val_to_str(stable, names_stable_how, "Stable:%u")); } proto_item_append_text(tree, ", WRITE Call FH:0x%08x Offset:%" PRIu64 " Len:%u %s", hash, off, len, val_to_str(stable, names_stable_how, "Stable:%u")); offset = dissect_nfsdata (tvb, offset, tree, hf_nfs_data); return offset; } /* RFC 1813, Page 49..54 */ static int dissect_nfs3_write_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; guint32 len; guint32 stable; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "file_wcc"); len=tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_count3, offset); stable=tvb_get_ntohl(tvb, offset); offset = dissect_stable_how(tvb, offset, tree, hf_nfs_write_committed); offset = dissect_writeverf3(tvb, offset, tree); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Len:%d %s", len, val_to_str(stable, names_stable_how, "Stable:%u")); } proto_item_append_text(tree, ", WRITE Reply Len:%d %s", len, val_to_str(stable, names_stable_how, "Stable:%u")); break; default: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "file_wcc"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", WRITE Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 54 */ static const value_string names_createmode3[] = { { UNCHECKED, "UNCHECKED" }, { GUARDED, "GUARDED" }, { EXCLUSIVE, "EXCLUSIVE" }, { 0, NULL } }; /* RFC 1813, Page 54 */ static int dissect_createmode3(tvbuff_t *tvb, int offset, proto_tree* tree, guint32* mode) { guint32 mode_value; mode_value = tvb_get_ntohl(tvb, offset + 0); if (tree) { proto_tree_add_uint(tree, hf_nfs_createmode3, tvb, offset+0, 4, mode_value); } offset += 4; *mode = mode_value; return offset; } /* RFC 1813, Page 54..58 */ static int dissect_nfs3_create_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 mode; guint32 hash; char *name=NULL; offset = dissect_diropargs3 (tvb, offset, pinfo, tree, "where", &hash, &name); offset = dissect_createmode3(tvb, offset, tree, &mode); switch (mode) { case UNCHECKED: case GUARDED: offset = dissect_sattr3(tvb, offset, tree, "obj_attributes"); break; case EXCLUSIVE: offset = dissect_createverf3(tvb, offset, tree); break; } if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", DH:0x%08x/%s Mode:%s", hash, name, val_to_str(mode, names_createmode3, "Unknown Mode:%u")); } proto_item_append_text(tree, ", CREATE Call DH:0x%08x/%s Mode:%s", hash, name, val_to_str(mode, names_createmode3, "Unknown Mode:%u")); return offset; } /* RFC 1813, Page 54..58 */ static int dissect_nfs3_create_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 status; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_post_op_fh3 (tvb, offset, pinfo, tree, "obj"); offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); proto_item_append_text(tree, ", CREATE Reply"); break; default: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", CREATE Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 58..60 */ static int dissect_nfs3_mkdir_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; char *name=NULL; offset = dissect_diropargs3(tvb, offset, pinfo, tree, "where", &hash, &name); offset = dissect_sattr3 (tvb, offset, tree, "attributes"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", DH:0x%08x/%s", hash, name); } proto_item_append_text(tree, ", MKDIR Call DH:0x%08x/%s", hash, name); return offset; } static int dissect_nfs3_mkdir_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 status; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_post_op_fh3 (tvb, offset, pinfo, tree, "obj"); offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); proto_item_append_text(tree, ", MKDIR Reply"); break; default: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", MKDIR Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 61..63 */ static int dissect_nfs3_symlink_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 from_hash; char *from_name=NULL; char *to_name=NULL; offset = dissect_diropargs3(tvb, offset, pinfo, tree, "where", &from_hash, &from_name); offset = dissect_sattr3 (tvb, offset, tree, "symlink_attributes"); offset = dissect_nfspath3 (tvb, offset, tree, hf_nfs_symlink_to, &to_name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", From DH:0x%08x/%s To %s", from_hash, from_name, to_name); } proto_item_append_text(tree, ", SYMLINK Call From DH:0x%08x/%s To %s", from_hash, from_name, to_name); return offset; } static int dissect_nfs3_symlink_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 status; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_post_op_fh3 (tvb, offset, pinfo, tree, "obj"); offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); proto_item_append_text(tree, ", SYMLINK Reply"); break; default: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", SYMLINK Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 63..66 */ static int dissect_nfs3_mknod_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 type; guint32 hash; char *name=NULL; const char *type_str; offset = dissect_diropargs3(tvb, offset, pinfo, tree, "where", &hash, &name); offset = dissect_ftype3(tvb, offset, tree, hf_nfs_ftype3, &type); switch (type) { case NF3CHR: case NF3BLK: offset = dissect_sattr3(tvb, offset, tree, "dev_attributes"); offset = dissect_specdata3(tvb, offset, tree, "spec"); break; case NF3SOCK: case NF3FIFO: offset = dissect_sattr3(tvb, offset, tree, "pipe_attributes"); break; default: /* nothing to do */ break; } type_str=val_to_str(type, names_nfs_ftype3, "Unknown type:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x/%s %s", hash, name, type_str); } proto_item_append_text(tree, ", MKNOD Call FH:0x%08x/%s %s", hash, name, type_str); return offset; } static int dissect_nfs3_mknod_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 status; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_post_op_fh3 (tvb, offset, pinfo, tree, "obj"); offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); proto_item_append_text(tree, ", MKNOD Reply"); break; default: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", MKNOD Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 67..69 */ static int dissect_nfs3_remove_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); proto_item_append_text(tree, ", REMOVE Reply"); break; default: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", REMOVE Reply Error:%s", err); break; } return offset; } static int dissect_nfs3_rmdir_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); proto_item_append_text(tree, ", RMDIR Reply"); break; default: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "dir_wcc"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", RMDIR Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 71..74 */ static int dissect_nfs3_rename_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 from_hash; char *from_name=NULL; guint32 to_hash; char *to_name=NULL; offset = dissect_diropargs3(tvb, offset, pinfo, tree, "from", &from_hash, &from_name); offset = dissect_diropargs3(tvb, offset, pinfo, tree, "to", &to_hash, &to_name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", From DH:0x%08x/%s To DH:0x%08x/%s", from_hash, from_name, to_hash, to_name); } proto_item_append_text(tree, ", RENAME Call From DH:0x%08x/%s To DH:0x%08x/%s", from_hash, from_name, to_hash, to_name); return offset; } /* RFC 1813, Page 71..74 */ static int dissect_nfs3_rename_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "fromdir_wcc"); offset = dissect_wcc_data(tvb, offset, pinfo, tree, "todir_wcc"); proto_item_append_text(tree, ", RENAME Reply"); break; default: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "fromdir_wcc"); offset = dissect_wcc_data(tvb, offset, pinfo, tree, "todir_wcc"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", RENAME Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 74..76 */ static int dissect_nfs3_link_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 from_hash; guint32 to_hash; char *to_name=NULL; offset = dissect_nfs_fh3 (tvb, offset, pinfo, tree, "file", &from_hash); offset = dissect_diropargs3(tvb, offset, pinfo, tree, "link", &to_hash, &to_name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", From DH:0x%08x To DH:0x%08x/%s", from_hash, to_hash, to_name); } proto_item_append_text(tree, ", LINK Call From DH:0x%08x To DH:0x%08x/%s", from_hash, to_hash, to_name); return offset; } /* RFC 1813, Page 74..76 */ static int dissect_nfs3_link_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "file_attributes"); offset = dissect_wcc_data(tvb, offset, pinfo, tree, "linkdir_wcc"); proto_item_append_text(tree, ", LINK Reply"); break; default: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "file_attributes"); offset = dissect_wcc_data(tvb, offset, pinfo, tree, "linkdir_wcc"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", LINK Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 76..80 */ static int dissect_nfs3_readdir_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; offset = dissect_nfs_fh3 (tvb, offset, pinfo, tree, "dir", &hash); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_cookie3, offset); offset = dissect_cookieverf3(tvb, offset, tree); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_count3, offset); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", READDIR Call FH:0x%08x", hash); return offset; } /* RFC 1813, Page 76..80 */ static int dissect_entry3(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { proto_item* entry_item = NULL; proto_tree* entry_tree = NULL; int old_offset = offset; char *name=NULL; if (tree) { entry_item = proto_tree_add_item(tree, hf_nfs_readdir_entry, tvb, offset+0, -1, FALSE); entry_tree = proto_item_add_subtree(entry_item, ett_nfs_readdir_entry); } offset = dissect_rpc_uint64(tvb, entry_tree, hf_nfs_readdir_entry3_fileid, offset); offset = dissect_filename3(tvb, offset, entry_tree, hf_nfs_readdir_entry3_name, &name); if (entry_item) proto_item_set_text(entry_item, "Entry: name %s", name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," %s", name); } offset = dissect_rpc_uint64(tvb, entry_tree, hf_nfs_readdir_entry3_cookie, offset); /* now we know, that a readdir entry is shorter */ if (entry_item) { proto_item_set_len(entry_item, offset - old_offset); } return offset; } /* RFC 1813, Page 76..80 */ static int dissect_nfs3_readdir_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 status; guint32 eof_value; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: proto_item_append_text(tree, ", READDIR Reply"); offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "dir_attributes"); offset = dissect_cookieverf3(tvb, offset, tree); offset = dissect_rpc_list(tvb, pinfo, tree, offset, dissect_entry3); eof_value = tvb_get_ntohl(tvb, offset+0); if (tree) proto_tree_add_uint(tree, hf_nfs_readdir_eof, tvb, offset+ 0, 4, eof_value); offset += 4; break; default: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "dir_attributes"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", READDIR Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 80..83 */ static int dissect_nfs3_readdirplus_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; offset = dissect_nfs_fh3 (tvb, offset, pinfo, tree, "dir", &hash); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_cookie3, offset); offset = dissect_cookieverf3(tvb, offset, tree); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_count3_dircount, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_count3_maxcount, offset); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", READDIRPLUS Call FH:0x%08x", hash); return offset; } /* RFC 1813, Page 80..83 */ static int dissect_entryplus3(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { proto_item* entry_item = NULL; proto_tree* entry_tree = NULL; int old_offset = offset; char *name=NULL; if (tree) { entry_item = proto_tree_add_item(tree, hf_nfs_readdir_entry, tvb, offset+0, -1, FALSE); entry_tree = proto_item_add_subtree(entry_item, ett_nfs_readdir_entry); } offset = dissect_rpc_uint64(tvb, entry_tree, hf_nfs_readdirplus_entry_fileid, offset); offset = dissect_filename3(tvb, offset, entry_tree, hf_nfs_readdirplus_entry_name, &name); /* are we snooping fh to filenames ?*/ if((!pinfo->fd->flags.visited) && nfs_file_name_snooping){ rpc_call_info_value *civ=pinfo->private_data; /* v3 READDIRPLUS replies will give us a mapping */ if( (civ->prog==100003) &&(civ->vers==3) &&(!civ->request) &&((civ->proc==17)) ) { nfs_name_snoop_add_name(civ->xid, tvb, 0, 0, 0/*parent offset*/, 0/*parent len*/, name); } } if (entry_item) proto_item_set_text(entry_item, "Entry: name %s", name); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," %s", name); } offset = dissect_rpc_uint64(tvb, entry_tree, hf_nfs_readdirplus_entry_cookie, offset); offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, entry_tree, "name_attributes"); offset = dissect_post_op_fh3(tvb, offset, pinfo, entry_tree, "name_handle"); /* now we know, that a readdirplus entry is shorter */ if (entry_item) { proto_item_set_len(entry_item, offset - old_offset); } return offset; } /* RFC 1813, Page 80..83 */ static int dissect_nfs3_readdirplus_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 status; guint32 eof_value; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: proto_item_append_text(tree, ", READDIRPLUS Reply"); offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "dir_attributes"); offset = dissect_cookieverf3(tvb, offset, tree); offset = dissect_rpc_list(tvb, pinfo, tree, offset, dissect_entryplus3); eof_value = tvb_get_ntohl(tvb, offset+0); if (tree) proto_tree_add_uint(tree, hf_nfs_readdir_eof, tvb, offset+ 0, 4, eof_value); offset += 4; break; default: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "dir_attributes"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", READDIRPLUS Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 84..86 */ static int dissect_nfs3_fsstat_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; offset = dissect_nfs_fh3(tvb, offset, pinfo, tree, "object", &hash); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", FSSTAT Call DH:0x%08x", hash); return offset; } static int dissect_nfs3_fsstat_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; guint32 invarsec; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_fsstat3_resok_tbytes, offset); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_fsstat3_resok_fbytes, offset); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_fsstat3_resok_abytes, offset); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_fsstat3_resok_tfiles, offset); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_fsstat3_resok_ffiles, offset); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_fsstat3_resok_afiles, offset); invarsec = tvb_get_ntohl(tvb, offset + 0); if (tree) proto_tree_add_uint(tree, hf_nfs_fsstat_invarsec, tvb, offset+0, 4, invarsec); offset += 4; proto_item_append_text(tree, ", FSSTAT Reply"); break; default: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", FSSTAT Reply Error:%s", err); break; } return offset; } #define FSF3_LINK 0x0001 #define FSF3_SYMLINK 0x0002 #define FSF3_HOMOGENEOUS 0x0008 #define FSF3_CANSETTIME 0x0010 /* RFC 1813, Page 86..90 */ static int dissect_nfs3_fsinfo_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; offset = dissect_nfs_fh3(tvb, offset, pinfo, tree, "object", &hash); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", FSINFO Call DH:0x%08x", hash); return offset; } static int dissect_nfs3_fsinfo_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; guint32 rtmax; guint32 rtpref; guint32 rtmult; guint32 wtmax; guint32 wtpref; guint32 wtmult; guint32 dtpref; guint32 properties; proto_item* properties_item = NULL; proto_tree* properties_tree = NULL; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); rtmax = tvb_get_ntohl(tvb, offset+0); if (tree) proto_tree_add_uint(tree, hf_nfs_fsinfo_rtmax, tvb, offset+0, 4, rtmax); offset += 4; rtpref = tvb_get_ntohl(tvb, offset+0); if (tree) proto_tree_add_uint(tree, hf_nfs_fsinfo_rtpref, tvb, offset+0, 4, rtpref); offset += 4; rtmult = tvb_get_ntohl(tvb, offset+0); if (tree) proto_tree_add_uint(tree, hf_nfs_fsinfo_rtmult, tvb, offset+0, 4, rtmult); offset += 4; wtmax = tvb_get_ntohl(tvb, offset+0); if (tree) proto_tree_add_uint(tree, hf_nfs_fsinfo_wtmax, tvb, offset+0, 4, wtmax); offset += 4; wtpref = tvb_get_ntohl(tvb, offset+0); if (tree) proto_tree_add_uint(tree, hf_nfs_fsinfo_wtpref, tvb, offset+0, 4, wtpref); offset += 4; wtmult = tvb_get_ntohl(tvb, offset+0); if (tree) proto_tree_add_uint(tree, hf_nfs_fsinfo_wtmult, tvb, offset+0, 4, wtmult); offset += 4; dtpref = tvb_get_ntohl(tvb, offset+0); if (tree) proto_tree_add_uint(tree, hf_nfs_fsinfo_dtpref, tvb, offset+0, 4, dtpref); offset += 4; offset = dissect_rpc_uint64(tvb, tree, hf_nfs_fsinfo_maxfilesize, offset); offset = dissect_nfstime3(tvb, offset, tree, hf_nfs_dtime, hf_nfs_dtime_sec, hf_nfs_dtime_nsec); properties = tvb_get_ntohl(tvb, offset+0); if (tree) { properties_item = proto_tree_add_uint(tree, hf_nfs_fsinfo_properties, tvb, offset+0, 4, properties); if (properties_item) properties_tree = proto_item_add_subtree(properties_item, ett_nfs_fsinfo_properties); if (properties_tree) { proto_tree_add_text(properties_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(properties, FSF3_CANSETTIME,5, "SETATTR can set time on server", "SETATTR can't set time on server")); proto_tree_add_text(properties_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(properties, FSF3_HOMOGENEOUS,5, "PATHCONF is valid for all files", "PATHCONF should be get for every single file")); proto_tree_add_text(properties_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(properties, FSF3_SYMLINK,5, "File System supports symbolic links", "File System does not symbolic hard links")); proto_tree_add_text(properties_tree, tvb, offset, 4, "%s", decode_boolean_bitfield(properties, FSF3_LINK,5, "File System supports hard links", "File System does not support hard links")); } } offset += 4; proto_item_append_text(tree, ", FSINFO Reply"); break; default: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", FSINFO Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 90..92 */ static int dissect_nfs3_pathconf_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; offset = dissect_nfs_fh3(tvb, offset, pinfo, tree, "object", &hash); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", PATHCONF Call DH:0x%08x", hash); return offset; } static int dissect_nfs3_pathconf_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; guint32 linkmax; guint32 name_max; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); linkmax = tvb_get_ntohl(tvb, offset + 0); if (tree) proto_tree_add_uint(tree, hf_nfs_pathconf_linkmax, tvb, offset+0, 4, linkmax); offset += 4; name_max = tvb_get_ntohl(tvb, offset + 0); if (tree) proto_tree_add_uint(tree, hf_nfs_pathconf_name_max, tvb, offset+0, 4, name_max); offset += 4; offset = dissect_rpc_bool(tvb, tree, hf_nfs_pathconf_no_trunc, offset); offset = dissect_rpc_bool(tvb, tree, hf_nfs_pathconf_chown_restricted, offset); offset = dissect_rpc_bool(tvb, tree, hf_nfs_pathconf_case_insensitive, offset); offset = dissect_rpc_bool(tvb, tree, hf_nfs_pathconf_case_preserving, offset); proto_item_append_text(tree, ", PATHCONF Reply"); break; default: offset = dissect_nfs_post_op_attr(tvb, offset, pinfo, tree, "obj_attributes"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", PATHCONF Reply Error:%s", err); break; } return offset; } /* RFC 1813, Page 92..95 */ static int dissect_nfs3_commit_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 hash; offset = dissect_nfs_fh3(tvb, offset, pinfo, tree, "file", &hash); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_offset3, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_count3, offset); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO,", FH:0x%08x", hash); } proto_item_append_text(tree, ", COMMIT Call FH:0x%08x", hash); return offset; } /* RFC 1813, Page 92..95 */ static int dissect_nfs3_commit_reply(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree* tree) { guint32 status; const char *err; offset = dissect_nfsstat3(tvb, offset, tree, &status); switch (status) { case 0: offset = dissect_wcc_data (tvb, offset, pinfo, tree, "file_wcc"); offset = dissect_writeverf3(tvb, offset, tree); proto_item_append_text(tree, ", COMMIT Reply"); break; default: offset = dissect_wcc_data(tvb, offset, pinfo, tree, "file_wcc"); err=val_to_str(status, names_nfs_nfsstat3, "Unknown error:%u"); if (check_col(pinfo->cinfo, COL_INFO)) { col_append_fstr(pinfo->cinfo, COL_INFO," Error:%s", err); } proto_item_append_text(tree, ", COMMIT Reply Error:%s", err); break; } return offset; } /**********************************************************/ /* NFS Version 4, RFC 3010 with nfs4_prot.x 1.103 changes */ /**********************************************************/ /* NFSv4 Draft Specification, Page 198-199 */ static const value_string names_nfs_nfsstat4[] = { { 0, "NFS4_OK" }, { 1, "NFS4ERR_PERM" }, { 2, "NFS4ERR_NOENT" }, { 5, "NFS4ERR_IO" }, { 6, "NFS4ERR_NXIO" }, { 13, "NFS4ERR_ACCES" }, { 17, "NFS4ERR_EXIST" }, { 18, "NFS4ERR_XDEV" }, { 19, "NFS4ERR_NODEV" }, { 20, "NFS4ERR_NOTDIR" }, { 21, "NFS4ERR_ISDIR" }, { 22, "NFS4ERR_INVAL" }, { 27, "NFS4ERR_FBIG" }, { 28, "NFS4ERR_NOSPC" }, { 30, "NFS4ERR_ROFS" }, { 31, "NFS4ERR_MLINK" }, { 63, "NFS4ERR_NAMETOOLONG" }, { 66, "NFS4ERR_NOTEMPTY" }, { 69, "NFS4ERR_DQUOT" }, { 70, "NFS4ERR_STALE" }, { 10001, "NFS4ERR_BADHANDLE" }, { 10003, "NFS4ERR_BAD_COOKIE" }, { 10004, "NFS4ERR_NOTSUPP" }, { 10005, "NFS4ERR_TOOSMALL" }, { 10006, "NFS4ERR_SERVERFAULT" }, { 10007, "NFS4ERR_BADTYPE" }, { 10008, "NFS4ERR_DELAY" }, { 10009, "NFS4ERR_SAME" }, { 10010, "NFS4ERR_DENIED" }, { 10011, "NFS4ERR_EXPIRED" }, { 10012, "NFS4ERR_LOCKED" }, { 10013, "NFS4ERR_GRACE" }, { 10014, "NFS4ERR_FHEXPIRED" }, { 10015, "NFS4ERR_SHARE_DENIED" }, { 10016, "NFS4ERR_WRONGSEC" }, { 10017, "NFS4ERR_CLID_INUSE" }, { 10018, "NFS4ERR_RESOURCE" }, { 10019, "NFS4ERR_MOVED" }, { 10020, "NFS4ERR_NOFILEHANDLE" }, { 10021, "NFS4ERR_MINOR_VERS_MISMATCH" }, { 10022, "NFS4ERR_STALE_CLIENTID" }, { 10023, "NFS4ERR_STALE_STATEID" }, { 10024, "NFS4ERR_OLD_STATEID" }, { 10025, "NFS4ERR_BAD_STATEID" }, { 10026, "NFS4ERR_BAD_SEQID" }, { 10027, "NFS4ERR_NOT_SAME" }, { 10028, "NFS4ERR_LOCK_RANGE" }, { 10029, "NFS4ERR_SYMLINK" }, { 10030, "NFS4ERR_READDIR_NOSPC" }, { 10031, "NFS4ERR_LEASE_MOVED" }, { 10032, "NFS4ERR_ATTRNOTSUPP" }, { 10033, "NFS4ERR_NO_GRACE" }, { 10034, "NFS4ERR_RECLAIM_BAD" }, { 10035, "NFS4ERR_RECLAIM_CONFLICT" }, { 10036, "NFS4ERR_BADXDR" }, { 10037, "NFS4ERR_LOCKS_HELD" }, { 10038, "NFS4ERR_OPENMODE" }, { 10039, "NFS4ERR_BADOWNER" }, { 10040, "NFS4ERR_BADCHAR" }, { 10041, "NFS4ERR_BADNAME" }, { 10042, "NFS4ERR_BAD_RANGE" }, { 10043, "NFS4ERR_LOCK_NOTSUPP" }, { 10044, "NFS4ERR_OP_ILLEGAL" }, { 10045, "NFS4ERR_DEADLOCK" }, { 10046, "NFS4ERR_FILE_OPEN" }, { 10047, "NFS4ERR_ADMIN_REVOKED" }, { 10048, "NFS4ERR_CB_PATH_DOWN" }, { 10049, "NFS4ERR_BADIOMODE" }, { 10050, "NFS4ERR_BADLAYOUT" }, { 10051, "NFS4ERR_BAD_SESSION_DIGEST" }, { 10052, "NFS4ERR_BADSESSION" }, { 10053, "NFS4ERR_BADSLOT" }, { 10054, "NFS4ERR_COMPLETE_ALREADY" }, { 10055, "NFS4ERR_CONN_NOT_BOUND_TO_SESSION" }, { 10056, "NFS4ERR_DELEG_ALREADY_WANTED" }, { 10057, "NFS4ERR_DIRDELEG_UNAVAIL" }, { 10058, "NFS4ERR_LAYOUTTRYLATER" }, { 10059, "NFS4ERR_LAYOUTUNAVAILABLE" }, { 10060, "NFS4ERR_NOMATCHING_LAYOUT" }, { 10061, "NFS4ERR_RECALLCONFLICT" }, { 10062, "NFS4ERR_UNKNOWN_LAYOUTTYPE" }, { 10063, "NFS4ERR_SEQ_MISORDERED" }, { 10064, "NFS4ERR_SEQUENCE_POS" }, { 10065, "NFS4ERR_REQ_TOO_BIG" }, { 10066, "NFS4ERR_REP_TOO_BIG" }, { 10067, "NFS4ERR_REP_TOO_BIG_TO_CACHE" }, { 10068, "NFS4ERR_RETRY_UNCACHED_REP" }, { 10069, "NFS4ERR_UNSAFE_COMPOUND" }, { 10070, "NFS4ERR_TOO_MANY_OPS" }, { 10071, "NFS4ERR_OP_NOT_IN_SESSION" }, { 10072, "NFS4ERR_HASH_ALG_UNSUPP" }, { 10073, "NFS4ERR_CONN_BINDING_NOT_ENFORCED" }, { 0, NULL } }; static int dissect_nfs_nfsstat4(tvbuff_t *tvb, int offset, proto_tree *tree, guint32 *status) { guint32 stat; proto_item *stat_item; stat = tvb_get_ntohl(tvb, offset+0); if (tree) { proto_tree_add_uint(tree, hf_nfs_nfsstat4, tvb, offset+0, 4, stat); stat_item = proto_tree_add_uint(tree, hf_nfs_nfsstat, tvb, offset+0, 4, stat); PROTO_ITEM_SET_HIDDEN(stat_item); } offset += 4; if (status) *status = stat; return offset; } static int dissect_nfs_utf8string(tvbuff_t *tvb, int offset, proto_tree *tree, int hf, char **string_ret) { /* TODO: this dissector is subject to change; do not remove */ return dissect_rpc_string(tvb, tree, hf, offset, string_ret); } static int dissect_nfs_specdata4(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_rpc_uint32(tvb, tree, hf_nfs_specdata1, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_specdata2, offset); return offset; } static const value_string names_ftype4[] = { { NF4REG, "NF4REG" }, { NF4DIR, "NF4DIR" }, { NF4BLK, "NF4BLK" }, { NF4CHR, "NF4CHR" }, { NF4LNK, "NF4LNK" }, { NF4SOCK, "NF4SOCK" }, { NF4FIFO, "NF4FIFO" }, { NF4ATTRDIR, "NF4ATTRDIR" }, { NF4NAMEDATTR, "NF4NAMEDATTR" }, { 0, NULL } }; static int dissect_nfs_lock_owner4(tvbuff_t *tvb, int offset, proto_tree *tree) { proto_tree *newftree = NULL; proto_item *fitem = NULL; fitem = proto_tree_add_text(tree, tvb, offset, 4, "Owner"); if (fitem) { newftree = proto_item_add_subtree(fitem, ett_nfs_lock_owner4); if (newftree) { offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_clientid4, offset); offset = dissect_nfsdata(tvb, offset, newftree, hf_nfs_data); } } return offset; } static int dissect_nfs_pathname4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint32 comp_count, i; proto_item *fitem = NULL; proto_tree *newftree = NULL; comp_count=tvb_get_ntohl(tvb, offset); fitem = proto_tree_add_text(tree, tvb, offset, 4, "pathname components (%u)", comp_count); offset += 4; if (fitem) { newftree = proto_item_add_subtree(fitem, ett_nfs_pathname4); if (newftree) { for (i = 0; i < comp_count; i++) offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_component4, NULL); } } return offset; } static int dissect_nfs_nfstime4(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_rpc_uint64(tvb, tree, hf_nfs_nfstime4_seconds, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_nfstime4_nseconds, offset); return offset; } static const value_string names_time_how4[] = { #define SET_TO_SERVER_TIME4 0 { SET_TO_SERVER_TIME4, "SET_TO_SERVER_TIME4" }, #define SET_TO_CLIENT_TIME4 1 { SET_TO_CLIENT_TIME4, "SET_TO_CLIENT_TIME4" }, { 0, NULL }, }; static int dissect_nfs_settime4(tvbuff_t *tvb, int offset, proto_tree *tree, const char *name _U_) { guint32 set_it; set_it = tvb_get_ntohl(tvb, offset); proto_tree_add_uint(tree, hf_nfs_time_how4, tvb, offset+0, 4, set_it); offset += 4; if (set_it == SET_TO_CLIENT_TIME4) offset = dissect_nfs_nfstime4(tvb, offset, tree); return offset; } static int dissect_nfs_fsid4(tvbuff_t *tvb, int offset, proto_tree *tree, const char *name) { proto_tree *newftree = NULL; proto_item *fitem = NULL; fitem = proto_tree_add_text(tree, tvb, offset, 0, "%s", name); if (fitem == NULL) return offset; newftree = proto_item_add_subtree(fitem, ett_nfs_fsid4); if (newftree == NULL) return offset; offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_fsid4_major, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_fsid4_minor, offset); return offset; } static const value_string names_acetype4[] = { #define ACE4_ACCESS_ALLOWED_ACE_TYPE 0x00000000 { ACE4_ACCESS_ALLOWED_ACE_TYPE, "ACE4_ACCESS_ALLOWED_ACE_TYPE" }, #define ACE4_ACCESS_DENIED_ACE_TYPE 0x00000001 { ACE4_ACCESS_DENIED_ACE_TYPE, "ACE4_ACCESS_DENIED_ACE_TYPE" }, #define ACE4_SYSTEM_AUDIT_ACE_TYPE 0x00000002 { ACE4_SYSTEM_AUDIT_ACE_TYPE, "ACE4_SYSTEM_AUDIT_ACE_TYPE" }, #define ACE4_SYSTEM_ALARM_ACE_TYPE 0x00000003 { ACE4_SYSTEM_ALARM_ACE_TYPE, "ACE4_SYSTEM_ALARM_ACE_TYPE" }, { 0, NULL } }; /* ACE mask values */ #define ACE4_READ_DATA 0x00000001 #define ACE4_LIST_DIRECTORY 0x00000001 #define ACE4_WRITE_DATA 0x00000002 #define ACE4_ADD_FILE 0x00000002 #define ACE4_APPEND_DATA 0x00000004 #define ACE4_ADD_SUBDIRECTORY 0x00000004 #define ACE4_READ_NAMED_ATTRS 0x00000008 #define ACE4_WRITE_NAMED_ATTRS 0x00000010 #define ACE4_EXECUTE 0x00000020 #define ACE4_DELETE_CHILD 0x00000040 #define ACE4_READ_ATTRIBUTES 0x00000080 #define ACE4_WRITE_ATTRIBUTES 0x00000100 #define ACE4_DELETE 0x00010000 #define ACE4_READ_ACL 0x00020000 #define ACE4_WRITE_ACL 0x00040000 #define ACE4_WRITE_OWNER 0x00080000 #define ACE4_SYNCHRONIZE 0x00100000 static int dissect_nfs_acemask4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint32 acemask; proto_item *acemask_item = NULL; proto_tree *acemask_tree = NULL; acemask = tvb_get_ntohl(tvb, offset); acemask_item = proto_tree_add_text(tree, tvb, offset, 4, "acemask: 0x%08x", acemask); if (acemask_item) acemask_tree = proto_item_add_subtree(acemask_item, ett_nfs_acemask4); if (acemask_tree) { if (acemask & ACE4_READ_DATA) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_READ_DATA/ACE4_LIST_DIRECTORY (0x%08x)", ACE4_READ_DATA); if (acemask & ACE4_WRITE_DATA) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_WRITE_DATA/ACE4_ADD_FILE (0x%08x)", ACE4_WRITE_DATA); if (acemask & ACE4_APPEND_DATA) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_ADD_FILE/ACE4_ADD_SUBDIRECTORY (0x%08x)", ACE4_APPEND_DATA); if (acemask & ACE4_READ_NAMED_ATTRS) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_READ_NAMED_ATTRS (0x%08x)", ACE4_READ_NAMED_ATTRS); if (acemask & ACE4_WRITE_NAMED_ATTRS) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_WRITE_NAMED_ATTRS (0x%08x)", ACE4_WRITE_NAMED_ATTRS); if (acemask & ACE4_EXECUTE) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_EXECUTE (0x%08x)", ACE4_EXECUTE); if (acemask & ACE4_DELETE_CHILD) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_DELETE_CHILD (0x%08x)", ACE4_DELETE_CHILD); if (acemask & ACE4_READ_ATTRIBUTES) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_READ_ATTRIBUTES (0x%08x)", ACE4_READ_ATTRIBUTES); if (acemask & ACE4_WRITE_ATTRIBUTES) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_WRITE_ATTRIBUTES (0x%08x)", ACE4_WRITE_ATTRIBUTES); if (acemask & ACE4_DELETE) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_DELETE (0x%08x)", ACE4_DELETE); if (acemask & ACE4_READ_ACL) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_READ_ACL (0x%08x)", ACE4_READ_ACL); if (acemask & ACE4_WRITE_ACL) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_WRITE_ACL (0x%08x)", ACE4_WRITE_ACL); if (acemask & ACE4_WRITE_OWNER) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_WRITE_OWNER (0x%08x)", ACE4_WRITE_OWNER); if (acemask & ACE4_SYNCHRONIZE) proto_tree_add_text(acemask_tree, tvb, offset, 4, "ACE4_SYNCHRONIZE (0x%08x)", ACE4_SYNCHRONIZE); } offset += 4; return offset; } /* ACE flag values */ #define ACE4_FILE_INHERIT_ACE 0x00000001 #define ACE4_DIRECTORY_INHERIT_ACE 0x00000002 #define ACE4_NO_PROPAGATE_INHERIT_ACE 0x00000004 #define ACE4_INHERIT_ONLY_ACE 0x00000008 #define ACE4_SUCCESSFUL_ACCESS_ACE_FLAG 0x00000010 #define ACE4_FAILED_ACCESS_ACE_FLAG 0x00000020 #define ACE4_IDENTIFIER_GROUP 0x00000040 static int dissect_nfs_ace4(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree *tree) { proto_item* ace_item = NULL; proto_tree* ace_tree = NULL; proto_item *aceflag_item = NULL; proto_tree *aceflag_tree = NULL; guint32 aceflag4; if (tree) { ace_item = proto_tree_add_text(tree, tvb, offset, 4, "ACE"); if (ace_item) ace_tree = proto_item_add_subtree(ace_item, ett_nfs_ace4); } if (ace_tree) { offset = dissect_rpc_uint32(tvb, ace_tree, hf_nfs_acetype4, offset); aceflag4 = tvb_get_ntohl(tvb, offset); aceflag_item = proto_tree_add_text(ace_tree, tvb, offset, 4, "aceflag: 0x%08x", aceflag4); if (aceflag_item) { aceflag_tree = proto_item_add_subtree(aceflag_item, ett_nfs_aceflag4); if (aceflag_tree) { if (aceflag4 & ACE4_FILE_INHERIT_ACE) proto_tree_add_text(aceflag_tree, tvb, offset, 4, "ACE4_FILE_INHERIT_ACE (0x%08x)", ACE4_FILE_INHERIT_ACE); if (aceflag4 & ACE4_DIRECTORY_INHERIT_ACE) proto_tree_add_text(aceflag_tree, tvb, offset, 4, "ACE4_DIRECTORY_INHERIT_ACE (0x%08x)", ACE4_DIRECTORY_INHERIT_ACE); if (aceflag4 & ACE4_INHERIT_ONLY_ACE) proto_tree_add_text(aceflag_tree, tvb, offset, 4, "ACE4_INHERIT_ONLY_ACE (0x%08x)", ACE4_INHERIT_ONLY_ACE); if (aceflag4 & ACE4_SUCCESSFUL_ACCESS_ACE_FLAG) proto_tree_add_text(aceflag_tree, tvb, offset, 4, "ACE4_SUCCESSFUL_ACCESS_ACE_FLAG (0x%08x)", ACE4_SUCCESSFUL_ACCESS_ACE_FLAG); if (aceflag4 & ACE4_FAILED_ACCESS_ACE_FLAG) proto_tree_add_text(aceflag_tree, tvb, offset, 4, "ACE4_FAILED_ACCESS_ACE_FLAG (0x%08x)", ACE4_FAILED_ACCESS_ACE_FLAG); if (aceflag4 & ACE4_IDENTIFIER_GROUP) proto_tree_add_text(aceflag_tree, tvb, offset, 4, "ACE4_IDENTIFIER_GROUP (0x%08x)", ACE4_IDENTIFIER_GROUP); } } offset += 4; offset = dissect_nfs_acemask4(tvb, offset, ace_tree); offset = dissect_nfs_utf8string(tvb, offset, ace_tree, hf_nfs_who, NULL); } return offset; } static int dissect_nfs_fattr4_acl(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { return dissect_rpc_array(tvb, pinfo, tree, offset, dissect_nfs_ace4, hf_nfs_acl4); } static int dissect_nfs_fh4(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char *name) { return dissect_nfs_fh3(tvb, offset, pinfo, tree, name, NULL); } static int dissect_nfs_fs_location4(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree *tree) { proto_tree *newftree = NULL; proto_item *fitem = NULL; fitem = proto_tree_add_text(tree, tvb, offset, 0, "rootpath"); if (fitem == NULL) return offset; newftree = proto_item_add_subtree(fitem, ett_nfs_fs_location4); if (newftree == NULL) return offset; offset = dissect_nfs_utf8string(tvb, offset, tree, hf_nfs_server, NULL); return offset; } static int dissect_nfs_fs_locations4(tvbuff_t *tvb, packet_info *pinfo, int offset, proto_tree *tree, const char *name) { proto_tree *newftree = NULL; proto_item *fitem = NULL; fitem = proto_tree_add_text(tree, tvb, offset, 0, "%s", name); if (fitem == NULL) return offset; newftree = proto_item_add_subtree(fitem, ett_nfs_fs_locations4); if (newftree == NULL) return offset; offset = dissect_nfs_pathname4(tvb, offset, newftree); offset = dissect_rpc_list(tvb, pinfo, tree, offset, dissect_nfs_fs_location4); return offset; } static int dissect_nfs_mode4(tvbuff_t *tvb, int offset, proto_tree *tree, const char *name) { return dissect_mode(tvb, offset, tree, name); } static const value_string nfs4_fattr4_fh_expire_type_names[] = { #define FH4_PERSISTENT 0x00000000 { FH4_PERSISTENT, "FH4_PERSISTENT" }, #define FH4_NOEXPIRE_WITH_OPEN 0x00000001 { FH4_NOEXPIRE_WITH_OPEN, "FH4_NOEXPIRE_WITH_OPEN" }, #define FH4_VOLATILE_ANY 0x00000002 { FH4_VOLATILE_ANY, "FH4_VOLATILE_ANY" }, #define FH4_VOL_MIGRATION 0x00000004 { FH4_VOL_MIGRATION, "FH4_VOL_MIGRATION" }, #define FH4_VOL_RENAME 0x00000008 { FH4_VOL_RENAME, "FH4_VOL_RENAME" }, { 0, NULL } }; static int dissect_nfs_fattr4_fh_expire_type(tvbuff_t *tvb, int offset, proto_tree *tree) { guint32 expire_type; proto_item *expire_type_item = NULL; proto_tree *expire_type_tree = NULL; expire_type = tvb_get_ntohl(tvb, offset + 0); if (tree) { expire_type_item = proto_tree_add_text(tree, tvb, offset, 4, "fattr4_fh_expire_type: 0x%08x", expire_type); if (expire_type_item) expire_type_tree = proto_item_add_subtree(expire_type_item, ett_nfs_fattr4_fh_expire_type); } if (expire_type_tree) { if (expire_type == FH4_PERSISTENT) { proto_tree_add_text(expire_type_tree, tvb, offset, 4, "%s", decode_enumerated_bitfield(expire_type, FH4_PERSISTENT, 8, nfs4_fattr4_fh_expire_type_names, "%s")); } else { if (expire_type & FH4_NOEXPIRE_WITH_OPEN) proto_tree_add_text(expire_type_tree, tvb, offset, 4, "FH4_NOEXPIRE_WITH_OPEN (0x%08x)", FH4_NOEXPIRE_WITH_OPEN); if (expire_type & FH4_VOLATILE_ANY) proto_tree_add_text(expire_type_tree, tvb, offset, 4, "FH4_VOLATILE_ANY (0x%08x)", FH4_VOLATILE_ANY); if (expire_type & FH4_VOL_MIGRATION) proto_tree_add_text(expire_type_tree, tvb, offset, 4, "FH4_VOL_MIGRATION (0x%08x)", FH4_VOL_MIGRATION); if (expire_type & FH4_VOL_RENAME) proto_tree_add_text(expire_type_tree, tvb, offset, 4, "FH4_VOL_RENAME (0x%08x)", FH4_VOL_RENAME); } } offset += 4; return offset; } static const value_string names_fattr4[] = { #define FATTR4_SUPPORTED_ATTRS 0 { FATTR4_SUPPORTED_ATTRS, "FATTR4_SUPPORTED_ATTRS" }, #define FATTR4_TYPE 1 { FATTR4_TYPE, "FATTR4_TYPE" }, #define FATTR4_FH_EXPIRE_TYPE 2 { FATTR4_FH_EXPIRE_TYPE, "FATTR4_FH_EXPIRE_TYPE" }, #define FATTR4_CHANGE 3 { FATTR4_CHANGE, "FATTR4_CHANGE" }, #define FATTR4_SIZE 4 { FATTR4_SIZE, "FATTR4_SIZE" }, #define FATTR4_LINK_SUPPORT 5 { FATTR4_LINK_SUPPORT, "FATTR4_LINK_SUPPORT" }, #define FATTR4_SYMLINK_SUPPORT 6 { FATTR4_SYMLINK_SUPPORT, "FATTR4_SYMLINK_SUPPORT" }, #define FATTR4_NAMED_ATTR 7 { FATTR4_NAMED_ATTR, "FATTR4_NAMED_ATTR" }, #define FATTR4_FSID 8 { FATTR4_FSID, "FATTR4_FSID" }, #define FATTR4_UNIQUE_HANDLES 9 { FATTR4_UNIQUE_HANDLES, "FATTR4_UNIQUE_HANDLES" }, #define FATTR4_LEASE_TIME 10 { FATTR4_LEASE_TIME, "FATTR4_LEASE_TIME" }, #define FATTR4_RDATTR_ERROR 11 { FATTR4_RDATTR_ERROR, "FATTR4_RDATTR_ERROR" }, #define FATTR4_ACL 12 { FATTR4_ACL, "FATTR4_ACL" }, #define FATTR4_ACLSUPPORT 13 { FATTR4_ACLSUPPORT, "FATTR4_ACLSUPPORT" }, #define FATTR4_ARCHIVE 14 { FATTR4_ARCHIVE, "FATTR4_ARCHIVE" }, #define FATTR4_CANSETTIME 15 { FATTR4_CANSETTIME, "FATTR4_CANSETTIME" }, #define FATTR4_CASE_INSENSITIVE 16 { FATTR4_CASE_INSENSITIVE, "FATTR4_CASE_INSENSITIVE" }, #define FATTR4_CASE_PRESERVING 17 { FATTR4_CASE_PRESERVING, "FATTR4_CASE_PRESERVING" }, #define FATTR4_CHOWN_RESTRICTED 18 { FATTR4_CHOWN_RESTRICTED, "FATTR4_CHOWN_RESTRICTED" }, #define FATTR4_FILEHANDLE 19 { FATTR4_FILEHANDLE, "FATTR4_FILEHANDLE" }, #define FATTR4_FILEID 20 { FATTR4_FILEID, "FATTR4_FILEID" }, #define FATTR4_FILES_AVAIL 21 { FATTR4_FILES_AVAIL, "FATTR4_FILES_AVAIL" }, #define FATTR4_FILES_FREE 22 { FATTR4_FILES_FREE, "FATTR4_FILES_FREE" }, #define FATTR4_FILES_TOTAL 23 { FATTR4_FILES_TOTAL, "FATTR4_FILES_TOTAL" }, #define FATTR4_FS_LOCATIONS 24 { FATTR4_FS_LOCATIONS, "FATTR4_FS_LOCATIONS" }, #define FATTR4_HIDDEN 25 { FATTR4_HIDDEN, "FATTR4_HIDDEN" }, #define FATTR4_HOMOGENEOUS 26 { FATTR4_HOMOGENEOUS, "FATTR4_HOMOGENEOUS" }, #define FATTR4_MAXFILESIZE 27 { FATTR4_MAXFILESIZE, "FATTR4_MAXFILESIZE" }, #define FATTR4_MAXLINK 28 { FATTR4_MAXLINK, "FATTR4_MAXLINK" }, #define FATTR4_MAXNAME 29 { FATTR4_MAXNAME, "FATTR4_MAXNAME" }, #define FATTR4_MAXREAD 30 { FATTR4_MAXREAD, "FATTR4_MAXREAD" }, #define FATTR4_MAXWRITE 31 { FATTR4_MAXWRITE, "FATTR4_MAXWRITE" }, #define FATTR4_MIMETYPE 32 { FATTR4_MIMETYPE, "FATTR4_MIMETYPE" }, #define FATTR4_MODE 33 { FATTR4_MODE, "FATTR4_MODE" }, #define FATTR4_NO_TRUNC 34 { FATTR4_NO_TRUNC, "FATTR4_NO_TRUNC" }, #define FATTR4_NUMLINKS 35 { FATTR4_NUMLINKS, "FATTR4_NUMLINKS" }, #define FATTR4_OWNER 36 { FATTR4_OWNER, "FATTR4_OWNER" }, #define FATTR4_OWNER_GROUP 37 { FATTR4_OWNER_GROUP, "FATTR4_OWNER_GROUP" }, #define FATTR4_QUOTA_AVAIL_HARD 38 { FATTR4_QUOTA_AVAIL_HARD, "FATTR4_QUOTA_AVAIL_HARD" }, #define FATTR4_QUOTA_AVAIL_SOFT 39 { FATTR4_QUOTA_AVAIL_SOFT, "FATTR4_QUOTA_AVAIL_SOFT" }, #define FATTR4_QUOTA_USED 40 { FATTR4_QUOTA_USED, "FATTR4_QUOTA_USED" }, #define FATTR4_RAWDEV 41 { FATTR4_RAWDEV, "FATTR4_RAWDEV" }, #define FATTR4_SPACE_AVAIL 42 { FATTR4_SPACE_AVAIL, "FATTR4_SPACE_AVAIL" }, #define FATTR4_SPACE_FREE 43 { FATTR4_SPACE_FREE, "FATTR4_SPACE_FREE" }, #define FATTR4_SPACE_TOTAL 44 { FATTR4_SPACE_TOTAL, "FATTR4_SPACE_TOTAL" }, #define FATTR4_SPACE_USED 45 { FATTR4_SPACE_USED, "FATTR4_SPACE_USED" }, #define FATTR4_SYSTEM 46 { FATTR4_SYSTEM, "FATTR4_SYSTEM" }, #define FATTR4_TIME_ACCESS 47 { FATTR4_TIME_ACCESS, "FATTR4_TIME_ACCESS" }, #define FATTR4_TIME_ACCESS_SET 48 { FATTR4_TIME_ACCESS_SET, "FATTR4_TIME_ACCESS_SET" }, #define FATTR4_TIME_BACKUP 49 { FATTR4_TIME_BACKUP, "FATTR4_TIME_BACKUP" }, #define FATTR4_TIME_CREATE 50 { FATTR4_TIME_CREATE, "FATTR4_TIME_CREATE" }, #define FATTR4_TIME_DELTA 51 { FATTR4_TIME_DELTA, "FATTR4_TIME_DELTA" }, #define FATTR4_TIME_METADATA 52 { FATTR4_TIME_METADATA, "FATTR4_TIME_METADATA" }, #define FATTR4_TIME_MODIFY 53 { FATTR4_TIME_MODIFY, "FATTR4_TIME_MODIFY" }, #define FATTR4_TIME_MODIFY_SET 54 { FATTR4_TIME_MODIFY_SET, "FATTR4_TIME_MODIFY_SET" }, #define FATTR4_MOUNTED_ON_FILEID 55 { FATTR4_MOUNTED_ON_FILEID, "FATTR4_MOUNTED_ON_FILEID" }, #define FATTR4_DIR_NOTIF_DELAY 56 { FATTR4_DIR_NOTIF_DELAY, "FATTR4_DIR_NOTIF_DELAY" }, #define FATTR4_DIRENT_NOTIF_DELAY 57 { FATTR4_DIRENT_NOTIF_DELAY, "FATTR4_DIRENT_NOTIF_DELAY" }, #define FATTR4_SEND_IMPL_ID 58 { FATTR4_SEND_IMPL_ID, "FATTR4_SEND_IMPL_ID" }, #define FATTR4_RECV_IMPL_ID 59 { FATTR4_RECV_IMPL_ID, "FATTR4_RECV_IMPL_ID" }, #define FATTR4_ABSENT 60 { FATTR4_ABSENT, "FATTR4_ABSENT" }, #define FATTR4_FS_STATUS 61 { FATTR4_FS_STATUS, "FATTR4_FS_STATUS" }, #define FATTR4_FS_LAYOUT_TYPES 62 { FATTR4_MOUNTED_ON_FILEID, "FATTR4_FS_LAYOUT_TYPES" }, { 0, NULL } }; #define FATTR4_BITMAP_ONLY 0 #define FATTR4_FULL_DISSECT 1 /* XXX - What's a good maximum? Linux appears to use 10. * FreeBSD appears to use 2. OpenSolaris appears to use 2. */ #define MAX_BITMAP_LEN 10 static int dissect_nfs_attributes(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, int type) { guint32 bitmap_len; proto_item *fitem = NULL; proto_tree *newftree = NULL; proto_item *attr_fitem = NULL; proto_tree *attr_newftree = NULL; guint32 i; gint j; guint32 fattr; guint32 *bitmap=NULL; guint32 sl; int attr_vals_offset; bitmap_len = tvb_get_ntohl(tvb, offset); if (bitmap_len > MAX_BITMAP_LEN) { proto_tree_add_text(tree, tvb, offset, 4, "Huge bitmap length: %u", bitmap_len); THROW(ReportedBoundsError); } tvb_ensure_bytes_exist(tvb, offset, 4 + bitmap_len * 4); fitem = proto_tree_add_text(tree, tvb, offset, 4 + bitmap_len * 4, "%s", "attrmask"); offset += 4; if (fitem == NULL) return offset; newftree = proto_item_add_subtree(fitem, ett_nfs_bitmap4); if (newftree == NULL) return offset; attr_vals_offset = offset + 4 + bitmap_len * 4; if(bitmap_len) bitmap = ep_alloc(bitmap_len * sizeof(guint32)); if (bitmap == NULL) return offset; for (i = 0; i < bitmap_len; i++) { bitmap[i] = tvb_get_ntohl(tvb, offset); sl = 0x00000001; for (j = 0; j < 32; j++) { fattr = 32 * i + j; if (bitmap[i] & sl) { /* switch label if attribute is recommended vs. mandatory */ attr_fitem = proto_tree_add_uint(newftree, (fattr < FATTR4_ACL)? hf_nfs_mand_attr: hf_nfs_recc_attr, tvb, offset, 4, fattr); if (attr_fitem == NULL) break; attr_newftree = proto_item_add_subtree(attr_fitem, ett_nfs_bitmap4); if (attr_newftree == NULL) break; if (type == FATTR4_FULL_DISSECT) { /* do a full decode of the arguments for the set flag */ switch(fattr) { case FATTR4_SUPPORTED_ATTRS: attr_vals_offset = dissect_nfs_attributes(tvb, attr_vals_offset, pinfo, attr_newftree, FATTR4_BITMAP_ONLY); break; case FATTR4_TYPE: attr_vals_offset = dissect_rpc_uint32(tvb, attr_newftree, hf_nfs_ftype4, attr_vals_offset); break; case FATTR4_FH_EXPIRE_TYPE: attr_vals_offset = dissect_nfs_fattr4_fh_expire_type(tvb, attr_vals_offset, attr_newftree); break; case FATTR4_CHANGE: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_changeid4, attr_vals_offset); break; case FATTR4_SIZE: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_size, attr_vals_offset); break; case FATTR4_LINK_SUPPORT: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_link_support, attr_vals_offset); break; case FATTR4_SYMLINK_SUPPORT: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_symlink_support, attr_vals_offset); break; case FATTR4_NAMED_ATTR: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_named_attr, attr_vals_offset); break; case FATTR4_FSID: attr_vals_offset = dissect_nfs_fsid4(tvb, attr_vals_offset, attr_newftree, "fattr4_fsid"); break; case FATTR4_UNIQUE_HANDLES: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_unique_handles, attr_vals_offset); break; case FATTR4_LEASE_TIME: attr_vals_offset = dissect_rpc_uint32(tvb, attr_newftree, hf_nfs_fattr4_lease_time, attr_vals_offset); break; case FATTR4_RDATTR_ERROR: attr_vals_offset = dissect_nfs_nfsstat4(tvb, attr_vals_offset, attr_newftree, NULL); break; case FATTR4_ACL: attr_vals_offset = dissect_nfs_fattr4_acl(tvb, attr_vals_offset, pinfo, attr_newftree); break; case FATTR4_ACLSUPPORT: attr_vals_offset = dissect_rpc_uint32(tvb, attr_newftree, hf_nfs_fattr4_aclsupport, attr_vals_offset); break; case FATTR4_ARCHIVE: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_archive, attr_vals_offset); break; case FATTR4_CANSETTIME: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_cansettime, attr_vals_offset); break; case FATTR4_CASE_INSENSITIVE: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_case_insensitive, attr_vals_offset); break; case FATTR4_CASE_PRESERVING: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_case_preserving, attr_vals_offset); break; case FATTR4_CHOWN_RESTRICTED: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_chown_restricted, attr_vals_offset); break; case FATTR4_FILEID: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_fileid, attr_vals_offset); break; case FATTR4_FILES_AVAIL: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_files_avail, attr_vals_offset); break; case FATTR4_FILEHANDLE: attr_vals_offset = dissect_nfs_fh4(tvb, attr_vals_offset, pinfo, attr_newftree, "fattr4_filehandle"); break; case FATTR4_FILES_FREE: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_files_free, attr_vals_offset); break; case FATTR4_FILES_TOTAL: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_files_total, attr_vals_offset); break; case FATTR4_FS_LOCATIONS: attr_vals_offset = dissect_nfs_fs_locations4(tvb, pinfo, attr_vals_offset, attr_newftree, "fattr4_fs_locations"); break; case FATTR4_HIDDEN: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_hidden, attr_vals_offset); break; case FATTR4_HOMOGENEOUS: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_homogeneous, attr_vals_offset); break; case FATTR4_MAXFILESIZE: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_maxfilesize, attr_vals_offset); break; case FATTR4_MAXLINK: attr_vals_offset = dissect_rpc_uint32(tvb, attr_newftree, hf_nfs_fattr4_maxlink, attr_vals_offset); break; case FATTR4_MAXNAME: attr_vals_offset = dissect_rpc_uint32(tvb, attr_newftree, hf_nfs_fattr4_maxname, attr_vals_offset); break; case FATTR4_MAXREAD: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_maxread, attr_vals_offset); break; case FATTR4_MAXWRITE: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_maxwrite, attr_vals_offset); break; case FATTR4_MIMETYPE: attr_vals_offset = dissect_nfs_utf8string(tvb, attr_vals_offset, attr_newftree, hf_nfs_fattr4_mimetype, NULL); break; case FATTR4_MODE: attr_vals_offset = dissect_nfs_mode4(tvb, attr_vals_offset, attr_newftree, "fattr4_mode"); break; case FATTR4_NO_TRUNC: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_no_trunc, attr_vals_offset); break; case FATTR4_NUMLINKS: attr_vals_offset = dissect_rpc_uint32(tvb, attr_newftree, hf_nfs_fattr4_numlinks, attr_vals_offset); break; case FATTR4_OWNER: attr_vals_offset = dissect_nfs_utf8string(tvb, attr_vals_offset, attr_newftree, hf_nfs_fattr4_owner, NULL); break; case FATTR4_OWNER_GROUP: attr_vals_offset = dissect_nfs_utf8string(tvb, attr_vals_offset, attr_newftree, hf_nfs_fattr4_owner_group, NULL); break; case FATTR4_QUOTA_AVAIL_HARD: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_quota_hard, attr_vals_offset); break; case FATTR4_QUOTA_AVAIL_SOFT: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_quota_soft, attr_vals_offset); break; case FATTR4_QUOTA_USED: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_quota_used, attr_vals_offset); break; case FATTR4_RAWDEV: attr_vals_offset = dissect_nfs_specdata4(tvb, attr_vals_offset, attr_newftree); break; case FATTR4_SPACE_AVAIL: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_space_avail, attr_vals_offset); break; case FATTR4_SPACE_FREE: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_space_free, attr_vals_offset); break; case FATTR4_SPACE_TOTAL: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_space_total, attr_vals_offset); break; case FATTR4_SPACE_USED: attr_vals_offset = dissect_rpc_uint64(tvb, attr_newftree, hf_nfs_fattr4_space_used, attr_vals_offset); break; case FATTR4_SYSTEM: attr_vals_offset = dissect_rpc_bool(tvb, attr_newftree, hf_nfs_fattr4_system, attr_vals_offset); break; case FATTR4_TIME_ACCESS: case FATTR4_TIME_BACKUP: case FATTR4_TIME_CREATE: case FATTR4_TIME_DELTA: case FATTR4_TIME_METADATA: case FATTR4_TIME_MODIFY: attr_vals_offset = dissect_nfs_nfstime4(tvb, attr_vals_offset, attr_newftree); break; case FATTR4_TIME_ACCESS_SET: case FATTR4_TIME_MODIFY_SET: attr_vals_offset = dissect_nfs_settime4(tvb, attr_vals_offset, attr_newftree, "settime4"); break; default: break; } } } sl <<= 1; } offset += 4; } return offset; } static int dissect_nfs_fattr4(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { proto_tree *newftree = NULL; proto_item *fitem = NULL; fitem = proto_tree_add_text(tree, tvb, offset, 4, "obj_attributes"); if (fitem == NULL) return offset; newftree = proto_item_add_subtree(fitem, ett_nfs_fattr4); if (newftree == NULL) return offset; offset = dissect_nfs_attributes(tvb, offset, pinfo, newftree, FATTR4_FULL_DISSECT); offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_attrlist4); return offset; } static const value_string names_open4_share_access[] = { #define OPEN4_SHARE_ACCESS_READ 0x00000001 { OPEN4_SHARE_ACCESS_READ, "OPEN4_SHARE_ACCESS_READ" }, #define OPEN4_SHARE_ACCESS_WRITE 0x00000002 { OPEN4_SHARE_ACCESS_WRITE, "OPEN4_SHARE_ACCESS_WRITE" }, #define OPEN4_SHARE_ACCESS_BOTH 0x00000003 { OPEN4_SHARE_ACCESS_BOTH, "OPEN4_SHARE_ACCESS_BOTH" }, { 0, NULL } }; static int dissect_nfs_open4_share_access(tvbuff_t *tvb, int offset, proto_tree *tree) { guint share_access; share_access = tvb_get_ntohl(tvb, offset); proto_tree_add_uint(tree, hf_nfs_open4_share_access, tvb, offset, 4, share_access); offset += 4; return offset; } static const value_string names_open4_share_deny[] = { #define OPEN4_SHARE_DENY_NONE 0x00000000 { OPEN4_SHARE_DENY_NONE, "OPEN4_SHARE_DENY_NONE" }, #define OPEN4_SHARE_DENY_READ 0x00000001 { OPEN4_SHARE_DENY_READ, "OPEN4_SHARE_DENY_READ" }, #define OPEN4_SHARE_DENY_WRITE 0x00000002 { OPEN4_SHARE_DENY_WRITE, "OPEN4_SHARE_DENY_WRITE" }, #define OPEN4_SHARE_DENY_BOTH 0x00000003 { OPEN4_SHARE_DENY_BOTH, "OPEN4_SHARE_DENY_BOTH" }, { 0, NULL } }; static int dissect_nfs_open4_share_deny(tvbuff_t *tvb, int offset, proto_tree *tree) { guint deny_access; deny_access = tvb_get_ntohl(tvb, offset); proto_tree_add_uint(tree, hf_nfs_open4_share_deny, tvb, offset, 4, deny_access); offset += 4; return offset; } static int dissect_nfs_open_owner4(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_rpc_uint64(tvb, tree, hf_nfs_clientid4, offset); offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_open_owner4); return offset; } static int dissect_nfs_open_claim_delegate_cur4(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_rpc_uint64(tvb, tree, hf_nfs_stateid4_delegate_stateid, offset); offset = dissect_nfs_utf8string(tvb, offset, tree, hf_nfs_component4, NULL); return offset; } #define CLAIM_NULL 0 #define CLAIM_PREVIOUS 1 #define CLAIM_DELEGATE_CUR 2 #define CLAIM_DELEGATE_PREV 3 static const value_string names_claim_type4[] = { { CLAIM_NULL, "CLAIM_NULL" }, { CLAIM_PREVIOUS, "CLAIM_PREVIOUS" }, { CLAIM_DELEGATE_CUR, "CLAIM_DELEGATE_CUR" }, { CLAIM_DELEGATE_PREV, "CLAIM_DELEGATE_PREV" }, { 0, NULL } }; static int dissect_nfs_open_claim4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint open_claim_type4; proto_item *fitem = NULL; proto_tree *newftree = NULL; open_claim_type4 = tvb_get_ntohl(tvb, offset); fitem = proto_tree_add_uint(tree, hf_nfs_open_claim_type4, tvb, offset+0, 4, open_claim_type4); offset += 4; if (fitem) { newftree = proto_item_add_subtree(fitem, ett_nfs_open_claim4); if (newftree) { switch(open_claim_type4) { case CLAIM_NULL: offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_component4, NULL); break; case CLAIM_PREVIOUS: offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_delegate_type, offset); break; case CLAIM_DELEGATE_CUR: offset = dissect_nfs_open_claim_delegate_cur4(tvb, offset, newftree); break; case CLAIM_DELEGATE_PREV: offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_component4, NULL); break; default: break; } } } return offset; } static int dissect_nfs_createhow4(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint mode; /* This is intentional; we're using the same flags as NFSv3 */ mode = tvb_get_ntohl(tvb, offset); proto_tree_add_uint(tree, hf_nfs_createmode3, tvb, offset, 4, mode); offset += 4; switch(mode) { case UNCHECKED: /* UNCHECKED4 */ case GUARDED: /* GUARDED4 */ offset = dissect_nfs_fattr4(tvb, offset, pinfo, tree); break; case EXCLUSIVE: /* EXCLUSIVE4 */ offset = dissect_rpc_uint64(tvb, tree, hf_nfs_verifier4, offset); break; default: break; } return offset; } #define OPEN4_NOCREATE 0 #define OPEN4_CREATE 1 static const value_string names_opentype4[] = { { OPEN4_NOCREATE, "OPEN4_NOCREATE" }, { OPEN4_CREATE, "OPEN4_CREATE" }, { 0, NULL } }; static int dissect_nfs_openflag4(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint opentype4; proto_item *fitem = NULL; proto_tree *newftree = NULL; opentype4 = tvb_get_ntohl(tvb, offset); fitem = proto_tree_add_uint(tree, hf_nfs_opentype4, tvb, offset+0, 4, opentype4); offset += 4; if (fitem) { newftree = proto_item_add_subtree(fitem, ett_nfs_opentype4); if (newftree) { switch(opentype4) { case OPEN4_CREATE: offset = dissect_nfs_createhow4(tvb, offset, pinfo, newftree); break; default: break; } } } return offset; } static int dissect_nfs_clientaddr4(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_r_netid); offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_r_addr); return offset; } static int dissect_nfs_cb_client4(tvbuff_t *tvb, int offset, proto_tree *tree) { proto_tree *cb_location = NULL; proto_item *fitem = NULL; offset = dissect_rpc_uint32(tvb, tree, hf_nfs_cb_program, offset); fitem = proto_tree_add_text(tree, tvb, offset, 0, "cb_location"); if (fitem) { cb_location = proto_item_add_subtree(fitem, ett_nfs_clientaddr4); offset = dissect_nfs_clientaddr4(tvb, offset, cb_location); } return offset; } static const value_string names_stable_how4[] = { #define UNSTABLE4 0 { UNSTABLE4, "UNSTABLE4" }, #define DATA_SYNC4 1 { DATA_SYNC4, "DATA_SYNC4" }, #define FILE_SYNC4 2 { FILE_SYNC4, "FILE_SYNC4" }, { 0, NULL } }; static int dissect_nfs_stable_how4(tvbuff_t *tvb, int offset, proto_tree *tree, const char *name) { guint stable_how4; stable_how4 = tvb_get_ntohl(tvb, offset); proto_tree_add_uint_format(tree, hf_nfs_stable_how4, tvb, offset+0, 4, stable_how4, "%s: %s (%u)", name, val_to_str(stable_how4, names_stable_how4, "%u"), stable_how4); offset += 4; return offset; } static const value_string names_nfsv4_operation[] = { { NFS4_OP_ACCESS, "ACCESS" }, { NFS4_OP_CLOSE, "CLOSE" }, { NFS4_OP_COMMIT, "COMMIT" }, { NFS4_OP_CREATE, "CREATE" }, { NFS4_OP_DELEGPURGE, "DELEGPURGE" }, { NFS4_OP_DELEGRETURN, "DELEGRETURN" }, { NFS4_OP_GETATTR, "GETATTR" }, { NFS4_OP_GETFH, "GETFH" }, { NFS4_OP_LINK, "LINK" }, { NFS4_OP_LOCK, "LOCK" }, { NFS4_OP_LOCKT, "LOCKT" }, { NFS4_OP_LOCKU, "LOCKU" }, { NFS4_OP_LOOKUP, "LOOKUP" }, { NFS4_OP_LOOKUPP, "LOOKUPP" }, { NFS4_OP_NVERIFY, "NVERIFY" }, { NFS4_OP_OPEN, "OPEN" }, { NFS4_OP_OPENATTR, "OPENATTR" }, { NFS4_OP_OPEN_CONFIRM, "OPEN_CONFIRM" }, { NFS4_OP_OPEN_DOWNGRADE, "OPEN_DOWNGRADE" }, { NFS4_OP_PUTFH, "PUTFH" }, { NFS4_OP_PUTPUBFH, "PUTPUBFH" }, { NFS4_OP_PUTROOTFH, "PUTROOTFH" }, { NFS4_OP_READ, "READ" }, { NFS4_OP_READDIR, "READDIR" }, { NFS4_OP_READLINK, "READLINK" }, { NFS4_OP_REMOVE, "REMOVE" }, { NFS4_OP_RENAME, "RENAME" }, { NFS4_OP_RENEW, "RENEW" }, { NFS4_OP_RESTOREFH, "RESTOREFH" }, { NFS4_OP_SAVEFH, "SAVEFH" }, { NFS4_OP_SECINFO, "SECINFO" }, { NFS4_OP_SETATTR, "SETATTR" }, { NFS4_OP_SETCLIENTID, "SETCLIENTID" }, { NFS4_OP_SETCLIENTID_CONFIRM, "SETCLIENTID_CONFIRM" }, { NFS4_OP_VERIFY, "VERIFY" }, { NFS4_OP_WRITE, "WRITE" }, { NFS4_OP_RELEASE_LOCKOWNER, "RELEASE_LOCKOWNER" }, { NFS4_OP_EXCHANGE_ID, "EXCHANGE_ID" }, { NFS4_OP_CREATE_SESSION, "CREATE_SESSION" }, { NFS4_OP_DESTROY_SESSION, "DESTROY_SESSION" }, { NFS4_OP_SEQUENCE, "SEQUENCE" }, { NFS4_OP_GETDEVINFO, "GETDEVINFO"}, { NFS4_OP_GETDEVLIST, "GETDEVLIST"}, { NFS4_OP_LAYOUTCOMMIT, "LAYOUTCOMMIT" }, { NFS4_OP_LAYOUTGET, "LAYOUTGET" }, { NFS4_OP_LAYOUTRETURN, "LAYOUTRETURN" }, { NFS4_OP_NOTIFYDS, "PNFS_NOTIFYDS"}, { NFS4_OP_PNFS_CREATE, "PNFS_CREATE"}, { NFS4_OP_PNFS_WRITE, "PNFS_WRITE"}, { NFS4_OP_PNFS_READ, "PNFS_READ"}, { NFS4_OP_ILLEGAL, "ILLEGAL" }, { 0, NULL } }; gint *nfsv4_operation_ett[] = { &ett_nfs_access4 , &ett_nfs_close4 , &ett_nfs_commit4 , &ett_nfs_create4 , &ett_nfs_delegpurge4 , &ett_nfs_delegreturn4 , &ett_nfs_getattr4 , &ett_nfs_getfh4 , &ett_nfs_link4 , &ett_nfs_lock4 , &ett_nfs_lockt4 , &ett_nfs_locku4 , &ett_nfs_lookup4 , &ett_nfs_lookupp4 , &ett_nfs_nverify4 , &ett_nfs_open4 , &ett_nfs_openattr4 , &ett_nfs_open_confirm4 , &ett_nfs_open_downgrade4 , &ett_nfs_putfh4 , &ett_nfs_putpubfh4 , &ett_nfs_putrootfh4 , &ett_nfs_read4 , &ett_nfs_readdir4 , &ett_nfs_readlink4 , &ett_nfs_remove4 , &ett_nfs_rename4 , &ett_nfs_renew4 , &ett_nfs_restorefh4 , &ett_nfs_savefh4 , &ett_nfs_secinfo4 , &ett_nfs_setattr4 , &ett_nfs_setclientid4 , &ett_nfs_setclientid_confirm4 , &ett_nfs_verify4 , &ett_nfs_write4, &ett_nfs_release_lockowner4, NULL, NULL, &ett_nfs_exchange_id4, &ett_nfs_create_session4, &ett_nfs_destroy_session4, NULL, NULL, &ett_nfs_getdevinfo4, &ett_nfs_getdevlist4, &ett_nfs_layoutcommit4, &ett_nfs_layoutget4, &ett_nfs_layoutreturn4, NULL, &ett_nfs_sequence4, NULL, NULL, NULL, NULL, NULL, NULL, &ett_nfs_notifyds4, &ett_nfs_pnfs_create4, }; static int dissect_nfs_entry4(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree *tree) { offset = dissect_rpc_uint64(tvb, tree, hf_nfs_cookie4, offset); offset = dissect_nfs_utf8string(tvb, offset, tree, hf_nfs_component4, NULL); offset = dissect_nfs_fattr4(tvb, offset, pinfo, tree); return offset; } static int dissect_nfs_dirlist4(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { proto_tree *newftree = NULL; newftree = proto_item_add_subtree(tree, ett_nfs_dirlist4); if (newftree==NULL) return offset; offset = dissect_rpc_list(tvb, pinfo, tree, offset, dissect_nfs_entry4); offset = dissect_rpc_bool(tvb, newftree, hf_nfs_dirlist4_eof, offset); return offset; } static int dissect_nfs_change_info4(tvbuff_t *tvb, int offset, proto_tree *tree, const char *name) { proto_tree *newftree = NULL; proto_tree *fitem = NULL; fitem = proto_tree_add_text(tree, tvb, offset, 0, "%s", name); if (fitem) { newftree = proto_item_add_subtree(fitem, ett_nfs_change_info4); if (newftree) { offset = dissect_rpc_bool(tvb, newftree, hf_nfs_change_info4_atomic, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_changeid4_before, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_changeid4_after, offset); } } return offset; } static const value_string names_nfs_lock_type4[] = { #define READ_LT 1 { READ_LT, "READ_LT" }, #define WRITE_LT 2 { WRITE_LT, "WRITE_LT" }, #define READW_LT 3 { READW_LT, "READW_LT" }, #define WRITEW_LT 4 { WRITEW_LT, "WRITEW_LT" }, #define RELEASE_STATE 5 { RELEASE_STATE, "RELEASE_STATE" }, { 0, NULL } }; static int dissect_nfs_lock4denied(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_rpc_uint64(tvb, tree, hf_nfs_offset4, offset); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_length4, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_lock_type4, offset); offset = dissect_nfs_lock_owner4(tvb, offset, tree); return offset; } static const value_string names_open4_result_flags[] = { #define OPEN4_RESULT_MLOCK 0x00000001 { OPEN4_RESULT_MLOCK, "OPEN4_RESULT_MLOCK" }, #define OPEN4_RESULT_CONFIRM 0x00000002 { OPEN4_RESULT_CONFIRM, "OPEN4_RESULT_CONFIRM" }, #define OPEN4_RESULT_LOCKTYPE_POSIX 0x00000004 { OPEN4_RESULT_LOCKTYPE_POSIX, "OPEN4_RESULT_LOCKTYPE_POSIX" }, { 0, NULL } }; static int dissect_nfs_open4_rflags(tvbuff_t *tvb, int offset, proto_tree *tree, const char *name) { guint rflags; proto_item *rflags_item = NULL; proto_item *rflags_tree = NULL; rflags = tvb_get_ntohl(tvb, offset); if (tree) { rflags_item = proto_tree_add_text(tree, tvb, offset, 4, "%s: 0x%08x", name, rflags); if (rflags_item) { rflags_tree = proto_item_add_subtree(rflags_item, ett_nfs_open4_result_flags); if (rflags_tree) { proto_tree_add_text(rflags_tree, tvb, offset, 4, "%s", decode_enumerated_bitfield(rflags, OPEN4_RESULT_MLOCK, 2, names_open4_result_flags, "%s")); proto_tree_add_text(rflags_tree, tvb, offset, 4, "%s", decode_enumerated_bitfield(rflags, OPEN4_RESULT_CONFIRM, 2, names_open4_result_flags, "%s")); } } } offset += 4; return offset; } static int dissect_nfs_stateid4(tvbuff_t *tvb, int offset, proto_tree *tree) { proto_item *fitem = NULL; proto_tree *newftree = NULL; if(tree){ fitem = proto_tree_add_text(tree, tvb, offset, 4, "stateid"); newftree = proto_item_add_subtree(fitem, ett_nfs_stateid4); } offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_seqid4, offset); proto_tree_add_item(newftree, hf_nfs_stateid4_other, tvb, offset, 12, FALSE); offset+=12; return offset; } static int dissect_nfs_open_read_delegation4(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { offset = dissect_nfs_stateid4(tvb, offset, tree); offset = dissect_rpc_bool(tvb, tree, hf_nfs_recall4, offset); offset = dissect_nfs_ace4(tvb, offset, pinfo, tree); return offset; } static int dissect_nfs_modified_limit4(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_rpc_uint32(tvb, tree, hf_nfs_num_blocks, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_bytes_per_block, offset); return offset; } #define NFS_LIMIT_SIZE 1 #define NFS_LIMIT_BLOCKS 2 static const value_string names_limit_by4[] = { { NFS_LIMIT_SIZE, "NFS_LIMIT_SIZE" }, { NFS_LIMIT_BLOCKS, "NFS_LIMIT_BLOCKS" }, { 0, NULL } }; static int dissect_nfs_space_limit4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint limitby; limitby = tvb_get_ntohl(tvb, offset); proto_tree_add_uint(tree, hf_nfs_limit_by4, tvb, offset+0, 4, limitby); offset += 4; switch(limitby) { case NFS_LIMIT_SIZE: offset = dissect_rpc_uint64(tvb, tree, hf_nfs_filesize, offset); break; case NFS_LIMIT_BLOCKS: offset = dissect_nfs_modified_limit4(tvb, offset, tree); break; default: break; } return offset; } static int dissect_nfs_open_write_delegation4(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { offset = dissect_nfs_stateid4(tvb, offset, tree); offset = dissect_rpc_bool(tvb, tree, hf_nfs_recall, offset); offset = dissect_nfs_space_limit4(tvb, offset, tree); offset = dissect_nfs_ace4(tvb, offset, pinfo, tree); return offset; } #define OPEN_DELEGATE_NONE 0 #define OPEN_DELEGATE_READ 1 #define OPEN_DELEGATE_WRITE 2 static const value_string names_open_delegation_type4[] = { { OPEN_DELEGATE_NONE, "OPEN_DELEGATE_NONE" }, { OPEN_DELEGATE_READ, "OPEN_DELEGATE_READ" }, { OPEN_DELEGATE_WRITE, "OPEN_DELEGATE_WRITE" }, { 0, NULL } }; static int dissect_nfs_open_delegation4(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint delegation_type; proto_tree *newftree = NULL; proto_item *fitem = NULL; delegation_type = tvb_get_ntohl(tvb, offset); fitem = proto_tree_add_uint(tree, hf_nfs_open_delegation_type4, tvb, offset+0, 4, delegation_type); offset += 4; if (fitem) { newftree = proto_item_add_subtree(fitem, ett_nfs_open_delegation4); switch(delegation_type) { case OPEN_DELEGATE_NONE: break; case OPEN_DELEGATE_READ: offset = dissect_nfs_open_read_delegation4(tvb, offset, pinfo, newftree); break; case OPEN_DELEGATE_WRITE: offset = dissect_nfs_open_write_delegation4(tvb, offset, pinfo, newftree); break; default: break; } } return offset; } static int dissect_nfs_rpcsec_gss_info(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_rpc_opaque_data(tvb, offset, tree, NULL, hf_nfs_sec_oid4, FALSE, 0, FALSE, NULL, NULL); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_qop4, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_secinfo_rpcsec_gss_info_service, offset); return offset; } static int dissect_nfs_open_to_lock_owner4(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_rpc_uint32(tvb, tree, hf_nfs_seqid4, offset); offset = dissect_nfs_stateid4(tvb, offset, tree); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_lock_seqid4, offset); offset = dissect_nfs_lock_owner4(tvb, offset, tree); return offset; } static int dissect_nfs_exist_lock_owner4(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_nfs_stateid4(tvb, offset, tree); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_lock_seqid4, offset); return offset; } static int dissect_nfs_locker4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint new_lock_owner; new_lock_owner = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_bool(tvb, tree, hf_nfs_new_lock_owner, offset); if (new_lock_owner) offset = dissect_nfs_open_to_lock_owner4(tvb, offset, tree); else offset = dissect_nfs_exist_lock_owner4(tvb, offset, tree); return offset; } static int dissect_nfs_client_id4(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_rpc_uint64(tvb, tree, hf_nfs_verifier4, offset); offset = dissect_rpc_data(tvb, tree, hf_nfs_client_id4_id, offset); return offset; } static int dissect_nfs_newtime4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint new_time; new_time = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_bool(tvb, tree, hf_nfs_newtime4, offset); if (new_time) { offset = dissect_nfs_nfstime4(tvb, offset, tree); } return offset; } static int dissect_nfs_newsize4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint new_size; new_size = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_bool(tvb, tree, hf_nfs_newsize4, offset); if (new_size) { offset = dissect_rpc_uint64(tvb, tree, hf_nfs_length4, offset); } return offset; } static int dissect_nfs_newoffset4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint new_offset; new_offset = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_bool(tvb, tree, hf_nfs_newoffset4, offset); if (new_offset) { offset = dissect_rpc_uint64(tvb, tree, hf_nfs_offset4, offset); } return offset; } static int dissect_nfs_layoutreturn4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint returntype; returntype = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_layoutreturn_type4, offset); if (returntype == 1) { /* RETURN_FILE */ offset = dissect_rpc_uint64(tvb, tree, hf_nfs_offset4, offset); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_length4, offset); } return offset; } static int dissect_nfs_filedeviceaddr4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint i; guint32 num_devs, file_layout_type; /* No layout type - argh */ /* Assume file layout for now */ file_layout_type = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_fldtype4, offset); num_devs = tvb_get_ntohl(tvb, offset); offset += 4; if (file_layout_type == 1) { /* SIMPLE */ for (i = 0; i < num_devs; i++) { offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_r_netid); offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_r_addr); } } else if (file_layout_type == 2) { /* COMPLEX */ for (i = 0; i < num_devs; i++) { offset = dissect_rpc_uint32(tvb, tree, hf_nfs_deviceid4, offset); } } /* offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_devaddr4); */ return offset; } static int dissect_nfs_device_addr4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint32 layoutlen; /* layout type */ offset = dissect_rpc_uint32(tvb, tree, hf_nfs_layouttype4, offset); /* layout address is opaque and 'len' is the first integer */ offset = dissect_rpc_uint32(tvb, tree, hf_nfs_layoutlen, offset); return dissect_nfs_filedeviceaddr4(tvb, offset, tree); } static int dissect_nfs_devicelist4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint count; guint i; count = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_devicenum4, offset); for (i = 0; i < count; i++) { int opaque_devs, dev_limit; offset = dissect_rpc_uint32(tvb, tree, hf_nfs_deviceid4, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_layouttype4, offset); opaque_devs = tvb_get_ntohl(tvb, offset); offset += 4; dev_limit = opaque_devs + offset; while (offset < dev_limit) { offset = dissect_nfs_filedeviceaddr4(tvb, offset, tree); } } return offset; } static int dissect_rpc_serverowner4(tvbuff_t *tvb, int offset, proto_tree *tree) { offset = dissect_rpc_uint64(tvb, tree, hf_nfs_minorid4, offset); offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_majorid4); return offset; } static int dissect_rpc_binding4args(tvbuff_t *tvb, int offset, proto_tree *tree) { guint enforce; enforce = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_bool(tvb, tree, hf_nfs_cbrenforce4, offset); if (enforce) { guint count, i; count = tvb_get_ntohl(tvb, offset); offset += 4; for (i = 0; i < count; i++) { offset = dissect_rpc_opaque_data(tvb, offset, tree, NULL, hf_nfs_sec_oid4, FALSE, 0, FALSE, NULL, NULL); } } return offset; } static int dissect_rpc_binding4res(tvbuff_t *tvb, int offset, proto_tree *tree) { guint enforce; enforce = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_bool(tvb, tree, hf_nfs_cbrenforce4, offset); if (enforce) { offset = dissect_rpc_uint32(tvb, tree, hf_nfs_hashalg4, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_ssvlen4, offset); } return offset; } static int dissect_rpc_chanattrs4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint i, count; offset = dissect_rpc_uint32(tvb, tree, hf_nfs_maxreqsize4, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_maxrespsize4, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_maxrespsizecached4, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_maxops4, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_maxreqs4, offset); count = tvb_get_ntohl(tvb, offset); offset += 4; for (i = 0; i < count; i++) { offset = dissect_rpc_uint32(tvb, tree, hf_nfs_rdmachanattrs4, offset); } return offset; } static int dissect_rpc_nfs_impl_id4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint i, count; count = tvb_get_ntohl(tvb, offset); offset += 4; for (i = 0; i < count; i++) { offset = dissect_nfs_utf8string(tvb, offset, tree, hf_nfs_nii_domain4, NULL); offset = dissect_nfs_utf8string(tvb, offset, tree, hf_nfs_nii_name4, NULL); offset = dissect_nfs_nfstime4(tvb, offset, tree); } return offset; } static int dissect_rpc_secparms4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint count, i; count = tvb_get_ntohl(tvb, offset); offset += 4; for (i = 0; i < count; i++) { guint j, flavor = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_flavor4, offset); switch(flavor) { case 1: { /* AUTH_SYS */ guint count2; offset = dissect_rpc_uint32(tvb, tree, hf_nfs_stamp4, offset); offset = dissect_nfs_utf8string(tvb, offset, tree, hf_nfs_machinename4, NULL); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_uid4, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_gid4, offset); count2 = tvb_get_ntohl(tvb, offset); offset += 4; for (j = 0; j < count2; j++) { offset = dissect_rpc_uint32(tvb, tree, hf_nfs_gid4, offset); } break; } case 6: /* RPCSEC_GSS */ offset = dissect_rpc_uint32(tvb, tree, hf_nfs_service4, offset); proto_item_append_text(tree, ", Handle from server"); offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_data); proto_item_append_text(tree, ", Handle from client"); offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_data); break; } } return offset; } static int dissect_nfs_notifydsargs4(tvbuff_t *tvb, int offset, proto_tree *tree) { guint op; op = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_notifydsop4, offset); switch(op) { case 0: { /* ADDSTATE */ guint count, i; offset = dissect_rpc_uint64(tvb, tree, hf_nfs_clientid4, offset); proto_tree_add_text(tree, tvb, offset, 0, "filehandle: %s", tvb_bytes_to_str(tvb, offset, 16)); offset += 16; count = tvb_get_ntohl(tvb, offset); offset += 4; for (i = 0; i < count; i++) { offset = dissect_nfs_stateid4(tvb, offset, tree); } break; } case 1: { /* DELSTATE */ guint count, i; count = tvb_get_ntohl(tvb, offset); offset += 4; for (i = 0; i < count; i++) { offset = dissect_nfs_stateid4(tvb, offset, tree); } break; } case 2: /* DELCLIENT */ offset = dissect_rpc_uint64(tvb, tree, hf_nfs_clientid4, offset); break; default: break; } return offset; } static int dissect_nfs_layout(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint layout_type; layout_type = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_layouttype4, offset); if (layout_type == 1) { /* NFS Files */ guint num; guint i; offset += 4; /* Skip past opaque count */ offset = dissect_rpc_uint32(tvb, tree, hf_nfs_stripetype4, offset); offset = dissect_rpc_bool(tvb, tree, hf_nfs_mdscommit4, offset); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_stripeunit4, offset); offset = dissect_rpc_uint64(tvb, tree, hf_nfs_length4, offset); num = tvb_get_ntohl(tvb, offset); /* Len of stripe_devs */ if (num != 0) { offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_stripedevs4); } else { offset += 4; /* skip over */ } num = tvb_get_ntohl(tvb, offset); /* Len of dev list */ offset += 4; for (i = 0; i < num; i++) { offset = dissect_rpc_uint32(tvb, tree, hf_nfs_deviceid4, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_deviceidx4, offset); offset = dissect_nfs_fh4(tvb, offset, pinfo, tree, "filehandle"); } } else { offset = dissect_nfsdata(tvb, offset, tree, hf_nfs_layout4); } return offset; } static int dissect_nfs_argop4(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 ops, ops_counter; guint opcode; proto_item *fitem; proto_tree *ftree = NULL; proto_tree *newftree = NULL; ops = tvb_get_ntohl(tvb, offset+0); fitem = proto_tree_add_text(tree, tvb, offset, 4, "Operations (count: %u)", ops); offset += 4; if (fitem == NULL) return offset; ftree = proto_item_add_subtree(fitem, ett_nfs_argop4); if (ftree == NULL) return offset; for (ops_counter=0; ops_counter<ops; ops_counter++) { opcode = tvb_get_ntohl(tvb, offset); fitem = proto_tree_add_uint(ftree, hf_nfs_argop4, tvb, offset, 4, opcode); offset += 4; /* the opcodes are not contiguous */ if ((opcode < NFS4_OP_ACCESS || opcode > NFS4_OP_PNFS_CREATE) && (opcode != NFS4_OP_ILLEGAL)) break; if (fitem == NULL) break; /* all of the V4 ops are contiguous, except for NFS4_OP_ILLEGAL */ if (opcode == NFS4_OP_ILLEGAL) newftree = proto_item_add_subtree(fitem, ett_nfs_illegal4); else newftree = proto_item_add_subtree(fitem, *nfsv4_operation_ett[opcode - 3]); if (newftree == NULL) break; switch(opcode) { case NFS4_OP_ACCESS: offset = dissect_access(tvb, offset, newftree, "access"); break; case NFS4_OP_CLOSE: offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_seqid4, offset); offset = dissect_nfs_stateid4(tvb, offset, newftree); break; case NFS4_OP_COMMIT: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_offset4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_count4, offset); break; case NFS4_OP_CREATE: { guint create_type; create_type = tvb_get_ntohl(tvb, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_ftype4, offset); switch(create_type) { case NF4LNK: offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_linktext4, NULL); break; case NF4BLK: case NF4CHR: offset = dissect_nfs_specdata4(tvb, offset, newftree); break; case NF4SOCK: case NF4FIFO: case NF4DIR: break; default: break; } offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_component4, NULL); offset = dissect_nfs_fattr4(tvb, offset, pinfo, newftree); } break; case NFS4_OP_DELEGPURGE: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_clientid4, offset); break; case NFS4_OP_DELEGRETURN: offset = dissect_nfs_stateid4(tvb, offset, newftree); break; case NFS4_OP_GETATTR: offset = dissect_nfs_attributes(tvb, offset, pinfo, newftree, FATTR4_BITMAP_ONLY); break; case NFS4_OP_GETFH: break; case NFS4_OP_LINK: offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_component4, NULL); break; case NFS4_OP_LOCK: offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_lock_type4, offset); offset = dissect_rpc_bool(tvb, newftree, hf_nfs_lock4_reclaim, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_offset4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_length4, offset); offset = dissect_nfs_locker4(tvb, offset, newftree); break; case NFS4_OP_LOCKT: offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_lock_type4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_offset4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_length4, offset); offset = dissect_nfs_lock_owner4(tvb, offset, newftree); break; case NFS4_OP_LOCKU: offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_lock_type4, offset); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_seqid4, offset); offset = dissect_nfs_stateid4(tvb, offset, newftree); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_offset4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_length4, offset); break; case NFS4_OP_LOOKUP: offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_component4, NULL); break; case NFS4_OP_LOOKUPP: break; case NFS4_OP_NVERIFY: offset = dissect_nfs_fattr4(tvb, offset, pinfo, newftree); break; case NFS4_OP_OPEN: offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_seqid4, offset); offset = dissect_nfs_open4_share_access(tvb, offset, newftree); offset = dissect_nfs_open4_share_deny(tvb, offset, newftree); offset = dissect_nfs_open_owner4(tvb, offset, newftree); offset = dissect_nfs_openflag4(tvb, offset, pinfo, newftree); offset = dissect_nfs_open_claim4(tvb, offset, newftree); break; case NFS4_OP_OPENATTR: offset = dissect_rpc_bool(tvb, newftree, hf_nfs_attrdircreate, offset); break; case NFS4_OP_OPEN_CONFIRM: offset = dissect_nfs_stateid4(tvb, offset, newftree); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_seqid4, offset); break; case NFS4_OP_OPEN_DOWNGRADE: offset = dissect_nfs_stateid4(tvb, offset, newftree); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_seqid4, offset); offset = dissect_nfs_open4_share_access(tvb, offset, newftree); offset = dissect_nfs_open4_share_deny(tvb, offset, newftree); break; case NFS4_OP_PUTFH: offset = dissect_nfs_fh4(tvb, offset, pinfo, newftree, "filehandle"); break; case NFS4_OP_PUTPUBFH: case NFS4_OP_PUTROOTFH: break; case NFS4_OP_READ: offset = dissect_nfs_stateid4(tvb, offset, newftree); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_offset4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_count4, offset); break; case NFS4_OP_READDIR: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_cookie4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_cookieverf4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_count4_dircount, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_count4_maxcount, offset); offset = dissect_nfs_attributes(tvb, offset, pinfo, newftree, FATTR4_BITMAP_ONLY); break; case NFS4_OP_READLINK: break; case NFS4_OP_REMOVE: offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_component4, NULL); break; case NFS4_OP_RENAME: offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_component4, NULL); offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_component4, NULL); break; case NFS4_OP_RENEW: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_clientid4, offset); break; case NFS4_OP_RESTOREFH: case NFS4_OP_SAVEFH: break; case NFS4_OP_SECINFO: offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_component4, NULL); break; case NFS4_OP_SETATTR: offset = dissect_nfs_stateid4(tvb, offset, newftree); offset = dissect_nfs_fattr4(tvb, offset, pinfo, newftree); break; case NFS4_OP_SETCLIENTID: { proto_tree *client_tree = NULL; proto_tree *callback_tree = NULL; fitem = proto_tree_add_text(newftree, tvb, offset, 0, "client"); if (fitem) { client_tree = proto_item_add_subtree(fitem, ett_nfs_client_id4); if (client_tree) offset = dissect_nfs_client_id4(tvb, offset, client_tree); } fitem = proto_tree_add_text(newftree, tvb, offset, 0, "callback"); if (fitem) { callback_tree = proto_item_add_subtree(fitem, ett_nfs_cb_client4); if (callback_tree) offset = dissect_nfs_cb_client4(tvb, offset, callback_tree); } offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_callback_ident, offset); } break; case NFS4_OP_SETCLIENTID_CONFIRM: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_clientid4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_verifier4, offset); break; case NFS4_OP_VERIFY: offset = dissect_nfs_fattr4(tvb, offset, pinfo, newftree); break; case NFS4_OP_WRITE: offset = dissect_nfs_stateid4(tvb, offset, newftree); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_offset4, offset); offset = dissect_nfs_stable_how4(tvb, offset, newftree, "stable"); offset = dissect_nfsdata(tvb, offset, newftree, hf_nfs_data); break; case NFS4_OP_RELEASE_LOCKOWNER: offset = dissect_nfs_lock_owner4(tvb, offset, newftree); break; /* Minor Version 1 */ case NFS4_OP_EXCHANGE_ID: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_verifier4, offset); proto_item_append_text(newftree, ", Client Owner"); offset = dissect_nfsdata(tvb, offset, newftree, hf_nfs_data); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_exch_id_flags4, offset); offset = dissect_rpc_nfs_impl_id4(tvb, offset, newftree); break; case NFS4_OP_CREATE_SESSION: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_clientid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_seqid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_create_session_flags4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_padsize4, offset); offset = dissect_rpc_binding4args(tvb, offset, newftree); offset = dissect_rpc_chanattrs4(tvb, offset, newftree); offset = dissect_rpc_chanattrs4(tvb, offset, newftree); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_cb_program, offset); offset = dissect_rpc_secparms4(tvb, offset, newftree); break; case NFS4_OP_DESTROY_SESSION: offset = dissect_rpc_opaque_data(tvb, offset, newftree, NULL, hf_nfs_sessionid4, TRUE, 16, FALSE, NULL, NULL); break; /* pNFS */ case NFS4_OP_LAYOUTGET: offset = dissect_rpc_bool(tvb, newftree, hf_nfs_layout_avail4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_layouttype4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_iomode4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_offset4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_length4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_length4_minlength, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_count4_maxcount, offset); break; case NFS4_OP_LAYOUTCOMMIT: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_offset4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_length4, offset); offset = dissect_rpc_bool(tvb, newftree, hf_nfs_reclaim4, offset); offset = dissect_nfs_newoffset4(tvb, offset, newftree); offset = dissect_nfs_newtime4(tvb, offset, newftree); offset = dissect_nfs_newtime4(tvb, offset, newftree); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_layouttype4, offset); offset = dissect_nfsdata(tvb, offset, newftree, hf_nfs_layoutupdate4); break; case NFS4_OP_LAYOUTRETURN: offset = dissect_rpc_bool(tvb, newftree, hf_nfs_reclaim4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_layouttype4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_iomode4, offset); offset = dissect_nfs_layoutreturn4(tvb, offset, newftree); break; case NFS4_OP_GETDEVINFO: offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_deviceid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_layouttype4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_count4_maxcount, offset); break; case NFS4_OP_GETDEVLIST: offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_layouttype4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_count4_maxcount, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_cookie4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_cookieverf4, offset); break; case NFS4_OP_SEQUENCE: offset = dissect_rpc_opaque_data(tvb, offset, newftree, NULL, hf_nfs_sessionid4, TRUE, 16, FALSE, NULL, NULL); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_seqid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_slotid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_slotid4, offset); offset = dissect_rpc_bool(tvb, newftree, hf_nfs_cachethis4, offset); break; case NFS4_OP_NOTIFYDS: offset = dissect_nfs_notifydsargs4(tvb, offset, newftree); break; case NFS4_OP_PNFS_CREATE: offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_component4, NULL); break; /* In theory, it's possible to get this opcode */ case NFS4_OP_ILLEGAL: break; default: break; } } return offset; } static int dissect_nfs4_compound_call(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { offset = dissect_nfs_utf8string(tvb, offset, tree, hf_nfs_tag4, NULL); offset = dissect_rpc_uint32(tvb, tree, hf_nfs_minorversion, offset); offset = dissect_nfs_argop4(tvb, offset, pinfo, tree); return offset; } static int dissect_nfs_secinfo4_res(tvbuff_t *tvb, int offset, packet_info *pinfo _U_, proto_tree *tree) { guint flavor; proto_item *fitem; proto_tree *secftree; flavor = tvb_get_ntohl(tvb, offset); fitem = proto_tree_add_uint(tree, hf_nfs_secinfo_flavor, tvb, offset, 4, flavor); offset += 4; if (fitem) { switch(flavor) { case RPCSEC_GSS: secftree = proto_item_add_subtree(fitem, ett_nfs_secinfo4_flavor_info); if (secftree) offset = dissect_nfs_rpcsec_gss_info(tvb, offset, secftree); break; default: break; } } return offset; } static int dissect_nfs_resop4(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree) { guint32 ops, ops_counter; guint32 opcode; proto_item *fitem; proto_tree *ftree = NULL; proto_tree *newftree = NULL; guint32 status; ops = tvb_get_ntohl(tvb, offset+0); fitem = proto_tree_add_text(tree, tvb, offset, 4, "Operations (count: %u)", ops); offset += 4; if (fitem == NULL) return offset; ftree = proto_item_add_subtree(fitem, ett_nfs_resop4); if (ftree == NULL) return offset; /* error adding new subtree */ for (ops_counter = 0; ops_counter < ops; ops_counter++) { opcode = tvb_get_ntohl(tvb, offset); /* sanity check for bogus packets */ if ((opcode < NFS4_OP_ACCESS || opcode > NFS4_OP_PNFS_CREATE) && (opcode != NFS4_OP_ILLEGAL)) break; fitem = proto_tree_add_uint(ftree, hf_nfs_resop4, tvb, offset, 4, opcode); offset += 4; if (fitem == NULL) break; /* error adding new item to tree */ /* all of the V4 ops are contiguous, except for NFS4_OP_ILLEGAL */ if (opcode == NFS4_OP_ILLEGAL) newftree = proto_item_add_subtree(fitem, ett_nfs_illegal4); else newftree = proto_item_add_subtree(fitem, *nfsv4_operation_ett[opcode - 3]); if (newftree == NULL) break; /* error adding new subtree to operation item */ offset = dissect_nfs_nfsstat4(tvb, offset, newftree, &status); /* * With the exception of NFS4_OP_LOCK, NFS4_OP_LOCKT, and * NFS4_OP_SETATTR, all other ops do *not* return data with the * failed status code. */ if ((status != NFS4_OK) && ((opcode != NFS4_OP_LOCK) && (opcode != NFS4_OP_LOCKT) && (opcode != NFS4_OP_SETATTR))) continue; /* These parsing routines are only executed if the status is NFS4_OK */ switch(opcode) { case NFS4_OP_ACCESS: offset = dissect_access(tvb, offset, newftree, "Supported"); offset = dissect_access(tvb, offset, newftree, "Access"); break; case NFS4_OP_CLOSE: offset = dissect_nfs_stateid4(tvb, offset, newftree); break; case NFS4_OP_COMMIT: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_verifier4, offset); break; case NFS4_OP_CREATE: offset = dissect_nfs_change_info4(tvb, offset, newftree, "change_info"); offset = dissect_nfs_attributes(tvb, offset, pinfo, newftree, FATTR4_BITMAP_ONLY); break; case NFS4_OP_GETATTR: offset = dissect_nfs_fattr4(tvb, offset, pinfo, newftree); break; case NFS4_OP_GETFH: offset = dissect_nfs_fh4(tvb, offset, pinfo, newftree, "Filehandle"); break; case NFS4_OP_LINK: offset = dissect_nfs_change_info4(tvb, offset, newftree, "change_info"); break; case NFS4_OP_LOCK: case NFS4_OP_LOCKT: if (status == NFS4_OK) { if (opcode == NFS4_OP_LOCK) offset = dissect_nfs_stateid4(tvb, offset, newftree); } else if (status == NFS4ERR_DENIED) offset = dissect_nfs_lock4denied(tvb, offset, newftree); break; case NFS4_OP_LOCKU: offset = dissect_nfs_stateid4(tvb, offset, newftree); break; case NFS4_OP_OPEN: offset = dissect_nfs_stateid4(tvb, offset, newftree); offset = dissect_nfs_change_info4(tvb, offset, newftree, "change_info"); offset = dissect_nfs_open4_rflags(tvb, offset, newftree, "result_flags"); offset = dissect_nfs_attributes(tvb, offset, pinfo, newftree, FATTR4_BITMAP_ONLY); offset = dissect_nfs_open_delegation4(tvb, offset, pinfo, newftree); break; case NFS4_OP_OPEN_CONFIRM: case NFS4_OP_OPEN_DOWNGRADE: offset = dissect_nfs_stateid4(tvb, offset, newftree); break; case NFS4_OP_READ: offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_eof, offset); offset = dissect_nfsdata(tvb, offset, newftree, hf_nfs_data); break; case NFS4_OP_READDIR: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_verifier4, offset); offset = dissect_nfs_dirlist4(tvb, offset, pinfo, newftree); break; case NFS4_OP_READLINK: offset = dissect_nfs_utf8string(tvb, offset, newftree, hf_nfs_linktext4, NULL); break; case NFS4_OP_REMOVE: offset = dissect_nfs_change_info4(tvb, offset, newftree, "change_info"); break; case NFS4_OP_RENAME: offset = dissect_nfs_change_info4(tvb, offset, newftree, "source_cinfo"); offset = dissect_nfs_change_info4(tvb, offset, newftree, "target_cinfo"); break; case NFS4_OP_SECINFO: offset = dissect_rpc_array(tvb, pinfo, newftree, offset, dissect_nfs_secinfo4_res, hf_nfs_secinfo_arr4); break; case NFS4_OP_SETATTR: offset = dissect_nfs_attributes(tvb, offset, pinfo, newftree, FATTR4_BITMAP_ONLY); break; case NFS4_OP_SETCLIENTID: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_clientid4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_verifier4, offset); break; case NFS4_OP_WRITE: offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_count4, offset); offset = dissect_nfs_stable_how4(tvb, offset, newftree, "committed"); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_verifier4, offset); break; /* Minor Version 1 */ case NFS4_OP_EXCHANGE_ID: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_clientid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_seqid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_exch_id_flags4, offset); offset = dissect_rpc_serverowner4(tvb, offset, newftree); offset = dissect_nfsdata(tvb, offset, newftree, hf_nfs_serverscope4); offset = dissect_rpc_nfs_impl_id4(tvb, offset, newftree); break; case NFS4_OP_CREATE_SESSION: offset = dissect_rpc_opaque_data(tvb, offset, newftree, NULL, hf_nfs_sessionid4, TRUE, 16, FALSE, NULL, NULL); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_seqid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_create_session_flags4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_padsize4, offset); offset = dissect_rpc_binding4res(tvb, offset, newftree); offset = dissect_rpc_chanattrs4(tvb, offset, newftree); offset = dissect_rpc_chanattrs4(tvb, offset, newftree); break; case NFS4_OP_DESTROY_SESSION: break; case NFS4_OP_LAYOUTGET: offset = dissect_rpc_bool(tvb, newftree, hf_nfs_return_on_close4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_offset4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_length4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_iomode4, offset); offset = dissect_nfs_layout(tvb, offset, pinfo, newftree); break; case NFS4_OP_LAYOUTCOMMIT: offset = dissect_nfs_newsize4(tvb, offset, newftree); break; case NFS4_OP_LAYOUTRETURN: break; case NFS4_OP_GETDEVINFO: offset = dissect_nfs_device_addr4(tvb, offset, newftree); break; case NFS4_OP_GETDEVLIST: offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_cookie4, offset); offset = dissect_rpc_uint64(tvb, newftree, hf_nfs_cookieverf4, offset); offset = dissect_nfs_devicelist4(tvb, offset, newftree); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_eof, offset); break; case NFS4_OP_SEQUENCE: offset = dissect_rpc_opaque_data(tvb, offset, newftree, NULL, hf_nfs_sessionid4, TRUE, 16, FALSE, NULL, NULL); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_seqid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_slotid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_slotid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_slotid4, offset); offset = dissect_rpc_uint32(tvb, newftree, hf_nfs_sr_status4, offset); break; case NFS4_OP_NOTIFYDS: break; case NFS4_OP_PNFS_CREATE: break; default: break; } } return offset; } static int dissect_nfs4_compound_reply(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree* tree) { guint32 status; offset = dissect_nfs_nfsstat4(tvb, offset, tree, &status); offset = dissect_nfs_utf8string(tvb, offset, tree, hf_nfs_tag4, NULL); offset = dissect_nfs_resop4(tvb, offset, pinfo, tree); return offset; } /* proc number, "proc name", dissect_request, dissect_reply */ /* NULL as function pointer means: type of arguments is "void". */ static const vsff nfs3_proc[] = { { 0, "NULL", /* OK */ dissect_nfs3_null_call, dissect_nfs3_null_reply }, { 1, "GETATTR", /* OK */ dissect_nfs3_getattr_call, dissect_nfs3_getattr_reply }, { 2, "SETATTR", /* OK */ dissect_nfs3_setattr_call, dissect_nfs3_setattr_reply }, { 3, "LOOKUP", /* OK */ dissect_nfs3_lookup_call, dissect_nfs3_lookup_reply }, { 4, "ACCESS", /* OK */ dissect_nfs3_access_call, dissect_nfs3_access_reply }, { 5, "READLINK", /* OK */ dissect_nfs3_readlink_call, dissect_nfs3_readlink_reply }, { 6, "READ", /* OK */ dissect_nfs3_read_call, dissect_nfs3_read_reply }, { 7, "WRITE", /* OK */ dissect_nfs3_write_call, dissect_nfs3_write_reply }, { 8, "CREATE", /* OK */ dissect_nfs3_create_call, dissect_nfs3_create_reply }, { 9, "MKDIR", /* OK */ dissect_nfs3_mkdir_call, dissect_nfs3_mkdir_reply }, { 10, "SYMLINK", /* OK */ dissect_nfs3_symlink_call, dissect_nfs3_symlink_reply }, { 11, "MKNOD", /* OK */ dissect_nfs3_mknod_call, dissect_nfs3_mknod_reply }, { 12, "REMOVE", /* OK */ dissect_nfs3_remove_call, dissect_nfs3_remove_reply }, { 13, "RMDIR", /* OK */ dissect_nfs3_rmdir_call, dissect_nfs3_rmdir_reply }, { 14, "RENAME", /* OK */ dissect_nfs3_rename_call, dissect_nfs3_rename_reply }, { 15, "LINK", /* OK */ dissect_nfs3_link_call, dissect_nfs3_link_reply }, { 16, "READDIR", /* OK */ dissect_nfs3_readdir_call, dissect_nfs3_readdir_reply }, { 17, "READDIRPLUS", /* OK */ dissect_nfs3_readdirplus_call, dissect_nfs3_readdirplus_reply }, { 18, "FSSTAT", /* OK */ dissect_nfs3_fsstat_call, dissect_nfs3_fsstat_reply }, { 19, "FSINFO", /* OK */ dissect_nfs3_fsinfo_call, dissect_nfs3_fsinfo_reply }, { 20, "PATHCONF", /* OK */ dissect_nfs3_pathconf_call, dissect_nfs3_pathconf_reply }, { 21, "COMMIT", /* OK */ dissect_nfs3_commit_call, dissect_nfs3_commit_reply }, { 0,NULL,NULL,NULL } }; static const value_string nfsv3_proc_vals[] = { { 0, "NULL" }, { 1, "GETATTR" }, { 2, "SETATTR" }, { 3, "LOOKUP" }, { 4, "ACCESS" }, { 5, "READLINK" }, { 6, "READ" }, { 7, "WRITE" }, { 8, "CREATE" }, { 9, "MKDIR" }, { 10, "SYMLINK" }, { 11, "MKNOD" }, { 12, "REMOVE" }, { 13, "RMDIR" }, { 14, "RENAME" }, { 15, "LINK" }, { 16, "READDIR" }, { 17, "READDIRPLUS" }, { 18, "FSSTAT" }, { 19, "FSINFO" }, { 20, "PATHCONF" }, { 21, "COMMIT" }, { 0, NULL } }; /* end of NFS Version 3 */ /* the call to dissect_nfs3_null_call & dissect_nfs3_null_reply is * intentional. The V4 NULLPROC is the same as V3. */ static const vsff nfs4_proc[] = { { 0, "NULL", dissect_nfs3_null_call, dissect_nfs3_null_reply }, { 1, "COMPOUND", dissect_nfs4_compound_call, dissect_nfs4_compound_reply }, { 0, NULL, NULL, NULL } }; static const value_string nfsv4_proc_vals[] = { { 0, "NULL" }, { 1, "COMPOUND" }, { 0, NULL } }; static struct true_false_string yesno = { "Yes", "No" }; /* * Union of the NFSv2, NFSv3, and NFSv4 status codes. * Use for the "nfs.status" hidden field. */ static const value_string names_nfs_nfsstat[] = { { 0, "OK" }, { 1, "ERR_PERM" }, { 2, "ERR_NOENT" }, { 5, "ERR_IO" }, { 6, "ERR_NXIO" }, { 13, "ERR_ACCES" }, { 17, "ERR_EXIST" }, { 18, "ERR_XDEV" }, { 19, "ERR_NODEV" }, { 20, "ERR_NOTDIR" }, { 21, "ERR_ISDIR" }, { 22, "ERR_INVAL" }, { 26, "ERR_TXTBSY" }, { 27, "ERR_FBIG" }, { 28, "ERR_NOSPC" }, { 30, "ERR_ROFS" }, { 31, "ERR_MLINK" }, { 45, "ERR_OPNOTSUPP" }, { 63, "ERR_NAMETOOLONG" }, { 66, "ERR_NOTEMPTY" }, { 69, "ERR_DQUOT" }, { 70, "ERR_STALE" }, { 71, "ERR_REMOTE" }, { 99, "ERR_WFLUSH" }, { 10001, "ERR_BADHANDLE" }, { 10002, "ERR_NOT_SYNC" }, { 10003, "ERR_BAD_COOKIE" }, { 10004, "ERR_NOTSUPP" }, { 10005, "ERR_TOOSMALL" }, { 10006, "ERR_SERVERFAULT" }, { 10007, "ERR_BADTYPE" }, { 10008, "ERR_DELAY" }, { 10009, "ERR_SAME" }, { 10010, "ERR_DENIED" }, { 10011, "ERR_EXPIRED" }, { 10012, "ERR_LOCKED" }, { 10013, "ERR_GRACE" }, { 10014, "ERR_FHEXPIRED" }, { 10015, "ERR_SHARE_DENIED" }, { 10016, "ERR_WRONGSEC" }, { 10017, "ERR_CLID_INUSE" }, { 10018, "ERR_RESOURCE" }, { 10019, "ERR_MOVED" }, { 10020, "ERR_NOFILEHANDLE" }, { 10021, "ERR_MINOR_VERS_MISMATCH" }, { 10022, "ERR_STALE_CLIENTID" }, { 10023, "ERR_STALE_STATEID" }, { 10024, "ERR_OLD_STATEID" }, { 10025, "ERR_BAD_STATEID" }, { 10026, "ERR_BAD_SEQID" }, { 10027, "ERR_NOT_SAME" }, { 10028, "ERR_LOCK_RANGE" }, { 10029, "ERR_SYMLINK" }, { 10030, "ERR_READDIR_NOSPC" }, { 10031, "ERR_LEASE_MOVED" }, { 10032, "ERR_ATTRNOTSUPP" }, { 10033, "ERR_NO_GRACE" }, { 10034, "ERR_RECLAIM_BAD" }, { 10035, "ERR_RECLAIM_CONFLICT" }, { 10036, "ERR_BADXDR" }, { 10037, "ERR_LOCKS_HELD" }, { 10038, "ERR_OPENMODE" }, { 10039, "ERR_BADOWNER" }, { 10040, "ERR_BADCHAR" }, { 10041, "ERR_BADNAME" }, { 10042, "ERR_BAD_RANGE" }, { 10043, "ERR_LOCK_NOTSUPP" }, { 10044, "ERR_OP_ILLEGAL" }, { 10045, "ERR_DEADLOCK" }, { 10046, "ERR_FILE_OPEN" }, { 10047, "ERR_ADMIN_REVOKED" }, { 10048, "ERR_CB_PATH_DOWN" }, { 0, NULL } }; static const value_string notifydsop_names[] = { { 0, "ADD_STATE" }, { 1, "DEL_STATE" }, { 2, "DEL_CLIENT" }, { 0, NULL } }; static const value_string iomode_names[] = { { 1, "IOMODE_READ"}, { 2, "IOMODE_RW"}, { 3, "IOMODE_ANY"}, { 0, NULL } }; static const value_string stripetype_names[] = { { 1, "STRIPE_SPARSE"}, { 2, "STRIPE_DENSE"}, { 0, NULL } }; static const value_string fldtype_names[] = { { 1, "FILE_SIMPLE"}, { 2, "FILE_COMPLEX"}, { 0, NULL } }; static const value_string layouttype_names[] = { { 1, "LAYOUT_NFSV4_FILES"}, { 2, "LAYOUT_OSD2_OBJECTS"}, { 3, "LAYOUT_BLOCK_VOLUME"}, { 0, NULL } }; static const value_string layoutreturn_names[] = { { 1, "RETURN_FILE"}, { 2, "RETURN_FSID"}, { 3, "RETURN_ALL"}, { 0, NULL } }; void proto_register_nfs(void) { static hf_register_info hf[] = { { &hf_nfs_procedure_v2, { "V2 Procedure", "nfs.procedure_v2", FT_UINT32, BASE_DEC, VALS(nfsv2_proc_vals), 0, "V2 Procedure", HFILL }}, { &hf_nfs_procedure_v3, { "V3 Procedure", "nfs.procedure_v3", FT_UINT32, BASE_DEC, VALS(nfsv3_proc_vals), 0, "V3 Procedure", HFILL }}, { &hf_nfs_procedure_v4, { "V4 Procedure", "nfs.procedure_v4", FT_UINT32, BASE_DEC, VALS(nfsv4_proc_vals), 0, "V4 Procedure", HFILL }}, { &hf_nfs_fh_length, { "length", "nfs.fh.length", FT_UINT32, BASE_DEC, NULL, 0, "file handle length", HFILL }}, { &hf_nfs_fh_hash, { "hash", "nfs.fh.hash", FT_UINT32, BASE_HEX, NULL, 0, "file handle hash", HFILL }}, { &hf_nfs_fh_mount_fileid, { "fileid", "nfs.fh.mount.fileid", FT_UINT32, BASE_DEC, NULL, 0, "mount point fileid", HFILL }}, { &hf_nfs_fh_mount_generation, { "generation", "nfs.fh.mount.generation", FT_UINT32, BASE_HEX, NULL, 0, "mount point generation", HFILL }}, { &hf_nfs_fh_flags, { "flags", "nfs.fh.flags", FT_UINT16, BASE_HEX, NULL, 0, "file handle flags", HFILL }}, { &hf_nfs_fh_snapid, { "snapid", "nfs.fh.snapid", FT_UINT8, BASE_DEC, NULL, 0, "snapshot ID", HFILL }}, { &hf_nfs_fh_unused, { "unused", "nfs.fh.unused", FT_UINT8, BASE_DEC, NULL, 0, "unused", HFILL }}, { &hf_nfs_fh_fileid, { "fileid", "nfs.fh.fileid", FT_UINT32, BASE_DEC, NULL, 0, "file ID", HFILL }}, { &hf_nfs_fh_generation, { "generation", "nfs.fh.generation", FT_UINT32, BASE_HEX, NULL, 0, "inode generation", HFILL }}, { &hf_nfs_fh_fsid, { "fsid", "nfs.fh.fsid", FT_UINT32, BASE_HEX, NULL, 0, "file system ID", HFILL }}, { &hf_nfs_fh_export_fileid, { "fileid", "nfs.fh.export.fileid", FT_UINT32, BASE_DEC, NULL, 0, "export point fileid", HFILL }}, { &hf_nfs_fh_export_generation, { "generation", "nfs.fh.export.generation", FT_UINT32, BASE_HEX, NULL, 0, "export point generation", HFILL }}, { &hf_nfs_fh_export_snapid, { "snapid", "nfs.fh.export.snapid", FT_UINT8, BASE_DEC, NULL, 0, "export point snapid", HFILL }}, { &hf_nfs_fh_handle_type, { "handletype", "nfs.fh.handletype", FT_UINT32, BASE_DEC, NULL, 0, "v4 handle type", HFILL }}, { &hf_nfs_fh_file_flag_mntpoint, { "mount point", "nfs.fh.file.flag.mntpoint", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0001, "file flag: mountpoint", HFILL }}, { &hf_nfs_fh_file_flag_snapdir, { "snapdir", "nfs.fh.file.flag.snapdir", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0002, "file flag: snapdir", HFILL }}, { &hf_nfs_fh_file_flag_snapdir_ent, { "snapdir_ent", "nfs.fh.file.flag.snadir_ent", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0004, "file flag: snapdir_ent", HFILL }}, { &hf_nfs_fh_file_flag_empty, { "empty", "nfs.fh.file.flag.empty", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0008, "file flag: empty", HFILL }}, { &hf_nfs_fh_file_flag_vbn_access, { "vbn_access", "nfs.fh.file.flag.vbn_access", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0010, "file flag: vbn_access", HFILL }}, { &hf_nfs_fh_file_flag_multivolume, { "multivolume", "nfs.fh.file.flag.multivolume", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0020, "file flag: multivolume", HFILL }}, { &hf_nfs_fh_file_flag_metadata, { "metadata", "nfs.fh.file.flag.metadata", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0040, "file flag: metadata", HFILL }}, { &hf_nfs_fh_file_flag_orphan, { "orphan", "nfs.fh.file.flag.orphan", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0080, "file flag: orphan", HFILL }}, { &hf_nfs_fh_file_flag_foster, { "foster", "nfs.fh.file.flag.foster", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0100, "file flag: foster", HFILL }}, { &hf_nfs_fh_file_flag_named_attr, { "named_attr", "nfs.fh.file.flag.named_attr", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0200, "file flag: named_attr", HFILL }}, { &hf_nfs_fh_file_flag_exp_snapdir, { "exp_snapdir", "nfs.fh.file.flag.exp_snapdir", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0400, "file flag: exp_snapdir", HFILL }}, { &hf_nfs_fh_file_flag_vfiler, { "vfiler", "nfs.fh.file.flag.vfiler", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x0800, "file flag: vfiler", HFILL }}, { &hf_nfs_fh_file_flag_aggr, { "aggr", "nfs.fh.file.flag.aggr", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x1000, "file flag: aggr", HFILL }}, { &hf_nfs_fh_file_flag_striped, { "striped", "nfs.fh.file.flag.striped", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x2000, "file flag: striped", HFILL }}, { &hf_nfs_fh_file_flag_private, { "private", "nfs.fh.file.flag.private", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x4000, "file flag: private", HFILL }}, { &hf_nfs_fh_file_flag_next_gen, { "next_gen", "nfs.fh.file.flag.next_gen", FT_UINT16, BASE_HEX, VALS(netapp_file_flag_vals), 0x8000, "file flag: next_gen", HFILL }}, { &hf_nfs_fh_fsid_major, { "major", "nfs.fh.fsid.major", FT_UINT32, BASE_DEC, NULL, 0, "major file system ID", HFILL }}, { &hf_nfs_fh_fsid_minor, { "minor", "nfs.fh.fsid.minor", FT_UINT32, BASE_DEC, NULL, 0, "minor file system ID", HFILL }}, { &hf_nfs_fh_fsid_inode, { "inode", "nfs.fh.fsid.inode", FT_UINT32, BASE_DEC, NULL, 0, "file system inode", HFILL }}, { &hf_nfs_fh_xfsid_major, { "exported major", "nfs.fh.xfsid.major", FT_UINT32, BASE_DEC, NULL, 0, "exported major file system ID", HFILL }}, { &hf_nfs_fh_xfsid_minor, { "exported minor", "nfs.fh.xfsid.minor", FT_UINT32, BASE_DEC, NULL, 0, "exported minor file system ID", HFILL }}, { &hf_nfs_fh_fstype, { "file system type", "nfs.fh.fstype", FT_UINT32, BASE_DEC, NULL, 0, "file system type", HFILL }}, { &hf_nfs_fh_fn, { "file number", "nfs.fh.fn", FT_UINT32, BASE_DEC, NULL, 0, "file number", HFILL }}, { &hf_nfs_fh_fn_len, { "length", "nfs.fh.fn.len", FT_UINT32, BASE_DEC, NULL, 0, "file number length", HFILL }}, { &hf_nfs_fh_fn_inode, { "inode", "nfs.fh.fn.inode", FT_UINT32, BASE_DEC, NULL, 0, "file number inode", HFILL }}, { &hf_nfs_fh_fn_generation, { "generation", "nfs.fh.fn.generation", FT_UINT32, BASE_DEC, NULL, 0, "file number generation", HFILL }}, { &hf_nfs_fh_xfn, { "exported file number", "nfs.fh.xfn", FT_UINT32, BASE_DEC, NULL, 0, "exported file number", HFILL }}, { &hf_nfs_fh_xfn_len, { "length", "nfs.fh.xfn.len", FT_UINT32, BASE_DEC, NULL, 0, "exported file number length", HFILL }}, { &hf_nfs_fh_xfn_inode, { "exported inode", "nfs.fh.xfn.inode", FT_UINT32, BASE_DEC, NULL, 0, "exported file number inode", HFILL }}, { &hf_nfs_fh_xfn_generation, { "generation", "nfs.fh.xfn.generation", FT_UINT32, BASE_DEC, NULL, 0, "exported file number generation", HFILL }}, { &hf_nfs_fh_dentry, { "dentry", "nfs.fh.dentry", FT_UINT32, BASE_HEX, NULL, 0, "dentry (cookie)", HFILL }}, { &hf_nfs_fh_dev, { "device", "nfs.fh.dev", FT_UINT32, BASE_DEC, NULL, 0, "device", HFILL }}, { &hf_nfs_fh_xdev, { "exported device", "nfs.fh.xdev", FT_UINT32, BASE_DEC, NULL, 0, "exported device", HFILL }}, { &hf_nfs_fh_dirinode, { "directory inode", "nfs.fh.dirinode", FT_UINT32, BASE_DEC, NULL, 0, "directory inode", HFILL }}, { &hf_nfs_fh_pinode, { "pseudo inode", "nfs.fh.pinode", FT_UINT32, BASE_HEX, NULL, 0, "pseudo inode", HFILL }}, { &hf_nfs_fh_hp_len, { "length", "nfs.fh.hp.len", FT_UINT32, BASE_DEC, NULL, 0, "hash path length", HFILL }}, { &hf_nfs_fh_version, { "version", "nfs.fh.version", FT_UINT8, BASE_DEC, NULL, 0, "file handle layout version", HFILL }}, { &hf_nfs_fh_auth_type, { "auth_type", "nfs.fh.auth_type", FT_UINT8, BASE_DEC, VALS(auth_type_names), 0, "authentication type", HFILL }}, { &hf_nfs_fh_fsid_type, { "fsid_type", "nfs.fh.fsid_type", FT_UINT8, BASE_DEC, VALS(fsid_type_names), 0, "file system ID type", HFILL }}, { &hf_nfs_fh_fileid_type, { "fileid_type", "nfs.fh.fileid_type", FT_UINT8, BASE_DEC, VALS(fileid_type_names), 0, "file ID type", HFILL }}, { &hf_nfs_stat, { "Status", "nfs.stat", FT_UINT32, BASE_DEC, VALS(names_nfs_stat), 0, "Reply status", HFILL }}, { &hf_nfs_full_name, { "Full Name", "nfs.full_name", FT_STRING, BASE_DEC, NULL, 0, "Full Name", HFILL }}, { &hf_nfs_name, { "Name", "nfs.name", FT_STRING, BASE_DEC, NULL, 0, "Name", HFILL }}, { &hf_nfs_readlink_data, { "Data", "nfs.readlink.data", FT_STRING, BASE_DEC, NULL, 0, "Symbolic Link Data", HFILL }}, { &hf_nfs_read_offset, { "Offset", "nfs.read.offset", FT_UINT32, BASE_DEC, NULL, 0, "Read Offset", HFILL }}, { &hf_nfs_read_count, { "Count", "nfs.read.count", FT_UINT32, BASE_DEC, NULL, 0, "Read Count", HFILL }}, { &hf_nfs_read_totalcount, { "Total Count", "nfs.read.totalcount", FT_UINT32, BASE_DEC, NULL, 0, "Total Count (obsolete)", HFILL }}, { &hf_nfs_data, { "Data", "nfs.data", FT_BYTES, BASE_DEC, NULL, 0, "Data", HFILL }}, { &hf_nfs_write_beginoffset, { "Begin Offset", "nfs.write.beginoffset", FT_UINT32, BASE_DEC, NULL, 0, "Begin offset (obsolete)", HFILL }}, { &hf_nfs_write_offset, { "Offset", "nfs.write.offset", FT_UINT32, BASE_DEC, NULL, 0, "Offset", HFILL }}, { &hf_nfs_write_totalcount, { "Total Count", "nfs.write.totalcount", FT_UINT32, BASE_DEC, NULL, 0, "Total Count (obsolete)", HFILL }}, { &hf_nfs_symlink_to, { "To", "nfs.symlink.to", FT_STRING, BASE_DEC, NULL, 0, "Symbolic link destination name", HFILL }}, { &hf_nfs_readdir_cookie, { "Cookie", "nfs.readdir.cookie", FT_UINT32, BASE_DEC, NULL, 0, "Directory Cookie", HFILL }}, { &hf_nfs_readdir_count, { "Count", "nfs.readdir.count", FT_UINT32, BASE_DEC, NULL, 0, "Directory Count", HFILL }}, { &hf_nfs_readdir_entry, { "Entry", "nfs.readdir.entry", FT_NONE, 0, NULL, 0, "Directory Entry", HFILL }}, { &hf_nfs_readdir_entry_fileid, { "File ID", "nfs.readdir.entry.fileid", FT_UINT32, BASE_DEC, NULL, 0, "File ID", HFILL }}, { &hf_nfs_readdir_entry_name, { "Name", "nfs.readdir.entry.name", FT_STRING, BASE_DEC, NULL, 0, "Name", HFILL }}, { &hf_nfs_readdir_entry_cookie, { "Cookie", "nfs.readdir.entry.cookie", FT_UINT32, BASE_DEC, NULL, 0, "Directory Cookie", HFILL }}, { &hf_nfs_readdir_entry3_fileid, { "File ID", "nfs.readdir.entry3.fileid", FT_UINT64, BASE_DEC, NULL, 0, "File ID", HFILL }}, { &hf_nfs_readdir_entry3_name, { "Name", "nfs.readdir.entry3.name", FT_STRING, BASE_DEC, NULL, 0, "Name", HFILL }}, { &hf_nfs_readdir_entry3_cookie, { "Cookie", "nfs.readdir.entry3.cookie", FT_UINT64, BASE_DEC, NULL, 0, "Directory Cookie", HFILL }}, { &hf_nfs_readdirplus_entry_fileid, { "File ID", "nfs.readdirplus.entry.fileid", FT_UINT64, BASE_DEC, NULL, 0, "Name", HFILL }}, { &hf_nfs_readdirplus_entry_name, { "Name", "nfs.readdirplus.entry.name", FT_STRING, BASE_DEC, NULL, 0, "Name", HFILL }}, { &hf_nfs_readdirplus_entry_cookie, { "Cookie", "nfs.readdirplus.entry.cookie", FT_UINT64, BASE_DEC, NULL, 0, "Directory Cookie", HFILL }}, { &hf_nfs_readdir_eof, { "EOF", "nfs.readdir.eof", FT_UINT32, BASE_DEC, NULL, 0, "EOF", HFILL }}, { &hf_nfs_statfs_tsize, { "Transfer Size", "nfs.statfs.tsize", FT_UINT32, BASE_DEC, NULL, 0, "Transfer Size", HFILL }}, { &hf_nfs_statfs_bsize, { "Block Size", "nfs.statfs.bsize", FT_UINT32, BASE_DEC, NULL, 0, "Block Size", HFILL }}, { &hf_nfs_statfs_blocks, { "Total Blocks", "nfs.statfs.blocks", FT_UINT32, BASE_DEC, NULL, 0, "Total Blocks", HFILL }}, { &hf_nfs_statfs_bfree, { "Free Blocks", "nfs.statfs.bfree", FT_UINT32, BASE_DEC, NULL, 0, "Free Blocks", HFILL }}, { &hf_nfs_statfs_bavail, { "Available Blocks", "nfs.statfs.bavail", FT_UINT32, BASE_DEC, NULL, 0, "Available Blocks", HFILL }}, { &hf_nfs_ftype3, { "Type", "nfs.type", FT_UINT32, BASE_DEC, VALS(names_nfs_ftype3), 0, "File Type", HFILL }}, { &hf_nfs_nfsstat3, { "Status", "nfs.nfsstat3", FT_UINT32, BASE_DEC, VALS(names_nfs_nfsstat3), 0, "Reply status", HFILL }}, { &hf_nfs_read_eof, { "EOF", "nfs.read.eof", FT_BOOLEAN, BASE_NONE, &yesno, 0, "EOF", HFILL }}, { &hf_nfs_write_stable, { "Stable", "nfs.write.stable", FT_UINT32, BASE_DEC, VALS(names_stable_how), 0, "Stable", HFILL }}, { &hf_nfs_write_committed, { "Committed", "nfs.write.committed", FT_UINT32, BASE_DEC, VALS(names_stable_how), 0, "Committed", HFILL }}, { &hf_nfs_createmode3, { "Create Mode", "nfs.createmode", FT_UINT32, BASE_DEC, VALS(names_createmode3), 0, "Create Mode", HFILL }}, { &hf_nfs_fsstat_invarsec, { "invarsec", "nfs.fsstat.invarsec", FT_UINT32, BASE_DEC, NULL, 0, "probable number of seconds of file system invariance", HFILL }}, { &hf_nfs_fsinfo_rtmax, { "rtmax", "nfs.fsinfo.rtmax", FT_UINT32, BASE_DEC, NULL, 0, "maximum READ request", HFILL }}, { &hf_nfs_fsinfo_rtpref, { "rtpref", "nfs.fsinfo.rtpref", FT_UINT32, BASE_DEC, NULL, 0, "Preferred READ request size", HFILL }}, { &hf_nfs_fsinfo_rtmult, { "rtmult", "nfs.fsinfo.rtmult", FT_UINT32, BASE_DEC, NULL, 0, "Suggested READ multiple", HFILL }}, { &hf_nfs_fsinfo_wtmax, { "wtmax", "nfs.fsinfo.wtmax", FT_UINT32, BASE_DEC, NULL, 0, "Maximum WRITE request size", HFILL }}, { &hf_nfs_fsinfo_wtpref, { "wtpref", "nfs.fsinfo.wtpref", FT_UINT32, BASE_DEC, NULL, 0, "Preferred WRITE request size", HFILL }}, { &hf_nfs_fsinfo_wtmult, { "wtmult", "nfs.fsinfo.wtmult", FT_UINT32, BASE_DEC, NULL, 0, "Suggested WRITE multiple", HFILL }}, { &hf_nfs_fsinfo_dtpref, { "dtpref", "nfs.fsinfo.dtpref", FT_UINT32, BASE_DEC, NULL, 0, "Preferred READDIR request", HFILL }}, { &hf_nfs_fsinfo_maxfilesize, { "maxfilesize", "nfs.fsinfo.maxfilesize", FT_UINT64, BASE_DEC, NULL, 0, "Maximum file size", HFILL }}, { &hf_nfs_fsinfo_properties, { "Properties", "nfs.fsinfo.properties", FT_UINT32, BASE_HEX, NULL, 0, "File System Properties", HFILL }}, { &hf_nfs_pathconf_linkmax, { "linkmax", "nfs.pathconf.linkmax", FT_UINT32, BASE_DEC, NULL, 0, "Maximum number of hard links", HFILL }}, { &hf_nfs_pathconf_name_max, { "name_max", "nfs.pathconf.name_max", FT_UINT32, BASE_DEC, NULL, 0, "Maximum file name length", HFILL }}, { &hf_nfs_pathconf_no_trunc, { "no_trunc", "nfs.pathconf.no_trunc", FT_BOOLEAN, BASE_NONE, &yesno, 0, "No long file name truncation", HFILL }}, { &hf_nfs_pathconf_chown_restricted, { "chown_restricted", "nfs.pathconf.chown_restricted", FT_BOOLEAN, BASE_NONE, &yesno, 0, "chown is restricted to root", HFILL }}, { &hf_nfs_pathconf_case_insensitive, { "case_insensitive", "nfs.pathconf.case_insensitive", FT_BOOLEAN, BASE_NONE, &yesno, 0, "file names are treated case insensitive", HFILL }}, { &hf_nfs_pathconf_case_preserving, { "case_preserving", "nfs.pathconf.case_preserving", FT_BOOLEAN, BASE_NONE, &yesno, 0, "file name cases are preserved", HFILL }}, { &hf_nfs_fattr_type, { "type", "nfs.fattr.type", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr.type", HFILL }}, { &hf_nfs_fattr_nlink, { "nlink", "nfs.fattr.nlink", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr.nlink", HFILL }}, { &hf_nfs_fattr_uid, { "uid", "nfs.fattr.uid", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr.uid", HFILL }}, { &hf_nfs_fattr_gid, { "gid", "nfs.fattr.gid", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr.gid", HFILL }}, { &hf_nfs_fattr_size, { "size", "nfs.fattr.size", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr.size", HFILL }}, { &hf_nfs_fattr_blocksize, { "blocksize", "nfs.fattr.blocksize", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr.blocksize", HFILL }}, { &hf_nfs_fattr_rdev, { "rdev", "nfs.fattr.rdev", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr.rdev", HFILL }}, { &hf_nfs_fattr_blocks, { "blocks", "nfs.fattr.blocks", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr.blocks", HFILL }}, { &hf_nfs_fattr_fsid, { "fsid", "nfs.fattr.fsid", FT_UINT32, BASE_HEX, NULL, 0, "nfs.fattr.fsid", HFILL }}, { &hf_nfs_fattr_fileid, { "fileid", "nfs.fattr.fileid", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr.fileid", HFILL }}, { &hf_nfs_fattr3_type, { "Type", "nfs.fattr3.type", FT_UINT32, BASE_DEC, VALS(names_nfs_ftype3), 0, "nfs.fattr3.type", HFILL }}, { &hf_nfs_fattr3_nlink, { "nlink", "nfs.fattr3.nlink", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr3.nlink", HFILL }}, { &hf_nfs_fattr3_uid, { "uid", "nfs.fattr3.uid", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr3.uid", HFILL }}, { &hf_nfs_fattr3_gid, { "gid", "nfs.fattr3.gid", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr3.gid", HFILL }}, { &hf_nfs_fattr3_size, { "size", "nfs.fattr3.size", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr3.size", HFILL }}, { &hf_nfs_fattr3_used, { "used", "nfs.fattr3.used", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr3.used", HFILL }}, { &hf_nfs_fattr3_rdev, { "rdev", "nfs.fattr3.rdev", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr3.rdev", HFILL }}, { &hf_nfs_fattr3_fsid, { "fsid", "nfs.fattr3.fsid", FT_UINT64, BASE_HEX, NULL, 0, "nfs.fattr3.fsid", HFILL }}, { &hf_nfs_fattr3_fileid, { "fileid", "nfs.fattr3.fileid", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr3.fileid", HFILL }}, { &hf_nfs_wcc_attr_size, { "size", "nfs.wcc_attr.size", FT_UINT64, BASE_DEC, NULL, 0, "nfs.wcc_attr.size", HFILL }}, { &hf_nfs_set_size3_size, { "size", "nfs.set_size3.size", FT_UINT64, BASE_DEC, NULL, 0, "nfs.set_size3.size", HFILL }}, { &hf_nfs_uid3, { "uid", "nfs.uid3", FT_UINT32, BASE_DEC, NULL, 0, "nfs.uid3", HFILL }}, { &hf_nfs_gid3, { "gid", "nfs.gid3", FT_UINT32, BASE_DEC, NULL, 0, "nfs.gid3", HFILL }}, { &hf_nfs_cookie3, { "cookie", "nfs.cookie3", FT_UINT64, BASE_DEC, NULL, 0, "nfs.cookie3", HFILL }}, { &hf_nfs_offset3, { "offset", "nfs.offset3", FT_UINT64, BASE_DEC, NULL, 0, "nfs.offset3", HFILL }}, { &hf_nfs_count3, { "count", "nfs.count3", FT_UINT32, BASE_DEC, NULL, 0, "nfs.count3", HFILL }}, { &hf_nfs_count3_maxcount, { "maxcount", "nfs.count3_maxcount", FT_UINT32, BASE_DEC, NULL, 0, "nfs.count3_maxcount", HFILL }}, { &hf_nfs_count3_dircount, { "dircount", "nfs.count3_dircount", FT_UINT32, BASE_DEC, NULL, 0, "nfs.count3_dircount", HFILL }}, { &hf_nfs_fsstat3_resok_tbytes, { "Total bytes", "nfs.fsstat3_resok.tbytes", FT_UINT64, BASE_DEC, NULL, 0, "Total bytes", HFILL }}, { &hf_nfs_fsstat3_resok_fbytes, { "Free bytes", "nfs.fsstat3_resok.fbytes", FT_UINT64, BASE_DEC, NULL, 0, "Free bytes", HFILL }}, { &hf_nfs_fsstat3_resok_abytes, { "Available free bytes", "nfs.fsstat3_resok.abytes", FT_UINT64, BASE_DEC, NULL, 0, "Available free bytes", HFILL }}, { &hf_nfs_fsstat3_resok_tfiles, { "Total file slots", "nfs.fsstat3_resok.tfiles", FT_UINT64, BASE_DEC, NULL, 0, "Total file slots", HFILL }}, { &hf_nfs_fsstat3_resok_ffiles, { "Free file slots", "nfs.fsstat3_resok.ffiles", FT_UINT64, BASE_DEC, NULL, 0, "Free file slots", HFILL }}, { &hf_nfs_fsstat3_resok_afiles, { "Available free file slots", "nfs.fsstat3_resok.afiles", FT_UINT64, BASE_DEC, NULL, 0, "Available free file slots", HFILL }}, /* NFSv4 */ { &hf_nfs_nfsstat4, { "Status", "nfs.nfsstat4", FT_UINT32, BASE_DEC, VALS(names_nfs_nfsstat4), 0, "Reply status", HFILL }}, { &hf_nfs_argop4, { "Opcode", "nfs.call.operation", FT_UINT32, BASE_DEC, VALS(names_nfsv4_operation), 0, "Opcode", HFILL }}, { &hf_nfs_resop4, { "Opcode", "nfs.reply.operation", FT_UINT32, BASE_DEC, VALS(names_nfsv4_operation), 0, "Opcode", HFILL }}, { &hf_nfs_linktext4, { "Name", "nfs.symlink.linktext", FT_STRING, BASE_DEC, NULL, 0, "Symbolic link contents", HFILL }}, { &hf_nfs_component4, { "Filename", "nfs.pathname.component", FT_STRING, BASE_DEC, NULL, 0, "Pathname component", HFILL }}, { &hf_nfs_tag4, { "Tag", "nfs.tag", FT_STRING, BASE_DEC, NULL, 0, "Tag", HFILL }}, { &hf_nfs_clientid4, { "clientid", "nfs.clientid", FT_UINT64, BASE_HEX, NULL, 0, "Client ID", HFILL }}, { &hf_nfs_ace4, { "ace", "nfs.ace", FT_STRING, BASE_DEC, NULL, 0, "Access Control Entry", HFILL }}, { &hf_nfs_recall, { "EOF", "nfs.recall", FT_BOOLEAN, BASE_NONE, &yesno, 0, "Recall", HFILL }}, { &hf_nfs_open_claim_type4, { "Claim Type", "nfs.open.claim_type", FT_UINT32, BASE_DEC, VALS(names_claim_type4), 0, "Claim Type", HFILL }}, { &hf_nfs_opentype4, { "Open Type", "nfs.open.opentype", FT_UINT32, BASE_DEC, VALS(names_opentype4), 0, "Open Type", HFILL }}, { &hf_nfs_limit_by4, { "Space Limit", "nfs.open.limit_by", FT_UINT32, BASE_DEC, VALS(names_limit_by4), 0, "Limit By", HFILL }}, { &hf_nfs_open_delegation_type4, { "Delegation Type", "nfs.open.delegation_type", FT_UINT32, BASE_DEC, VALS(names_open_delegation_type4), 0, "Delegation Type", HFILL }}, { &hf_nfs_ftype4, { "nfs_ftype4", "nfs.nfs_ftype4", FT_UINT32, BASE_DEC, VALS(names_ftype4), 0, "nfs.nfs_ftype4", HFILL }}, { &hf_nfs_change_info4_atomic, { "Atomic", "nfs.change_info.atomic", FT_BOOLEAN, BASE_NONE, &yesno, 0, "Atomic", HFILL }}, { &hf_nfs_open4_share_access, { "share_access", "nfs.open4.share_access", FT_UINT32, BASE_DEC, VALS(names_open4_share_access), 0, "Share Access", HFILL }}, { &hf_nfs_open4_share_deny, { "share_deny", "nfs.open4.share_deny", FT_UINT32, BASE_DEC, VALS(names_open4_share_deny), 0, "Share Deny", HFILL }}, { &hf_nfs_seqid4, { "seqid", "nfs.seqid", FT_UINT32, BASE_HEX, NULL, 0, "Sequence ID", HFILL }}, { &hf_nfs_lock_seqid4, { "lock_seqid", "nfs.lock_seqid", FT_UINT32, BASE_HEX, NULL, 0, "Lock Sequence ID", HFILL }}, { &hf_nfs_mand_attr, { "mand_attr", "nfs.attr", FT_UINT32, BASE_DEC, VALS(names_fattr4), 0, "Mandatory Attribute", HFILL }}, { &hf_nfs_recc_attr, { "recc_attr", "nfs.attr", FT_UINT32, BASE_DEC, VALS(names_fattr4), 0, "Recommended Attribute", HFILL }}, { &hf_nfs_time_how4, { "set_it", "nfs.set_it", FT_UINT32, BASE_DEC, VALS(names_time_how4), 0, "How To Set Time", HFILL }}, { &hf_nfs_attrlist4, { "attr_vals", "nfs.fattr4.attr_vals", FT_BYTES, BASE_DEC, NULL, 0, "attr_vals", HFILL }}, { &hf_nfs_fattr4_link_support, { "fattr4_link_support", "nfs.fattr4_link_support", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_link_support", HFILL }}, { &hf_nfs_fattr4_symlink_support, { "fattr4_symlink_support", "nfs.fattr4_symlink_support", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_symlink_support", HFILL }}, { &hf_nfs_fattr4_named_attr, { "fattr4_named_attr", "nfs.fattr4_named_attr", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_named_attr", HFILL }}, { &hf_nfs_fattr4_unique_handles, { "fattr4_unique_handles", "nfs.fattr4_unique_handles", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_unique_handles", HFILL }}, { &hf_nfs_fattr4_archive, { "fattr4_archive", "nfs.fattr4_archive", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_archive", HFILL }}, { &hf_nfs_fattr4_cansettime, { "fattr4_cansettime", "nfs.fattr4_cansettime", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_cansettime", HFILL }}, { &hf_nfs_fattr4_case_insensitive, { "fattr4_case_insensitive", "nfs.fattr4_case_insensitive", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_case_insensitive", HFILL }}, { &hf_nfs_fattr4_case_preserving, { "fattr4_case_preserving", "nfs.fattr4_case_preserving", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_case_preserving", HFILL }}, { &hf_nfs_fattr4_chown_restricted, { "fattr4_chown_restricted", "nfs.fattr4_chown_restricted", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_chown_restricted", HFILL }}, { &hf_nfs_fattr4_hidden, { "fattr4_hidden", "nfs.fattr4_hidden", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_hidden", HFILL }}, { &hf_nfs_fattr4_homogeneous, { "fattr4_homogeneous", "nfs.fattr4_homogeneous", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_homogeneous", HFILL }}, { &hf_nfs_fattr4_mimetype, { "fattr4_mimetype", "nfs.fattr4_mimetype", FT_STRING, BASE_DEC, NULL, 0, "nfs.fattr4_mimetype", HFILL }}, { &hf_nfs_fattr4_no_trunc, { "fattr4_no_trunc", "nfs.fattr4_no_trunc", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_no_trunc", HFILL }}, { &hf_nfs_fattr4_system, { "fattr4_system", "nfs.fattr4_system", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.fattr4_system", HFILL }}, { &hf_nfs_who, { "who", "nfs.who", FT_STRING, BASE_DEC, NULL, 0, "nfs.who", HFILL }}, { &hf_nfs_server, { "server", "nfs.server", FT_STRING, BASE_DEC, NULL, 0, "nfs.server", HFILL }}, { &hf_nfs_fattr4_owner, { "fattr4_owner", "nfs.fattr4_owner", FT_STRING, BASE_DEC, NULL, 0, "nfs.fattr4_owner", HFILL }}, { &hf_nfs_fattr4_owner_group, { "fattr4_owner_group", "nfs.fattr4_owner_group", FT_STRING, BASE_DEC, NULL, 0, "nfs.fattr4_owner_group", HFILL }}, { &hf_nfs_stable_how4, { "stable_how4", "nfs.stable_how4", FT_UINT32, BASE_DEC, VALS(names_stable_how4), 0, "nfs.stable_how4", HFILL }}, { &hf_nfs_dirlist4_eof, { "eof", "nfs.dirlist4.eof", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.dirlist4.eof", HFILL }}, { &hf_nfs_stateid4, { "stateid", "nfs.stateid4", FT_UINT64, BASE_DEC, NULL, 0, "nfs.stateid4", HFILL }}, { &hf_nfs_offset4, { "offset", "nfs.offset4", FT_UINT64, BASE_DEC, NULL, 0, "nfs.offset4", HFILL }}, { &hf_nfs_specdata1, { "specdata1", "nfs.specdata1", FT_UINT32, BASE_DEC, NULL, 0, "nfs.specdata1", HFILL }}, { &hf_nfs_specdata2, { "specdata2", "nfs.specdata2", FT_UINT32, BASE_DEC, NULL, 0, "nfs.specdata2", HFILL }}, { &hf_nfs_lock_type4, { "locktype", "nfs.locktype4", FT_UINT32, BASE_DEC, VALS(names_nfs_lock_type4), 0, "nfs.locktype4", HFILL }}, { &hf_nfs_reclaim4, { "reclaim", "nfs.reclaim4", FT_BOOLEAN, BASE_NONE, &yesno, 0, "Reclaim", HFILL }}, { &hf_nfs_length4, { "length", "nfs.length4", FT_UINT64, BASE_DEC, NULL, 0, "nfs.length4", HFILL }}, { &hf_nfs_changeid4, { "changeid", "nfs.changeid4", FT_UINT64, BASE_DEC, NULL, 0, "nfs.changeid4", HFILL }}, { &hf_nfs_changeid4_before, { "changeid (before)", "nfs.changeid4.before", FT_UINT64, BASE_DEC, NULL, 0, "nfs.changeid4.before", HFILL }}, { &hf_nfs_changeid4_after, { "changeid (after)", "nfs.changeid4.after", FT_UINT64, BASE_DEC, NULL, 0, "nfs.changeid4.after", HFILL }}, { &hf_nfs_nfstime4_seconds, { "seconds", "nfs.nfstime4.seconds", FT_UINT64, BASE_DEC, NULL, 0, "nfs.nfstime4.seconds", HFILL }}, { &hf_nfs_nfstime4_nseconds, { "nseconds", "nfs.nfstime4.nseconds", FT_UINT32, BASE_DEC, NULL, 0, "nfs.nfstime4.nseconds", HFILL }}, { &hf_nfs_fsid4_major, { "fsid4.major", "nfs.fsid4.major", FT_UINT64, BASE_DEC, NULL, 0, "nfs.nfstime4.fsid4.major", HFILL }}, { &hf_nfs_fsid4_minor, { "fsid4.minor", "nfs.fsid4.minor", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fsid4.minor", HFILL }}, { &hf_nfs_acetype4, { "acetype", "nfs.acetype4", FT_UINT32, BASE_DEC, VALS(names_acetype4), 0, "nfs.acetype4", HFILL }}, { &hf_nfs_aceflag4, { "aceflag", "nfs.aceflag4", FT_UINT32, BASE_DEC, NULL, 0, "nfs.aceflag4", HFILL }}, { &hf_nfs_acemask4, { "acemask", "nfs.acemask4", FT_UINT32, BASE_DEC, NULL, 0, "nfs.acemask4", HFILL }}, { &hf_nfs_fattr4_size, { "size", "nfs.fattr4.size", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.size", HFILL }}, { &hf_nfs_fattr4_lease_time, { "lease_time", "nfs.fattr4.lease_time", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr4.lease_time", HFILL }}, { &hf_nfs_fattr4_aclsupport, { "aclsupport", "nfs.fattr4.aclsupport", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr4.aclsupport", HFILL }}, { &hf_nfs_fattr4_fileid, { "fileid", "nfs.fattr4.fileid", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.fileid", HFILL }}, { &hf_nfs_fattr4_files_avail, { "files_avail", "nfs.fattr4.files_avail", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.files_avail", HFILL }}, { &hf_nfs_fattr4_files_free, { "files_free", "nfs.fattr4.files_free", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.files_free", HFILL }}, { &hf_nfs_fattr4_files_total, { "files_total", "nfs.fattr4.files_total", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.files_total", HFILL }}, { &hf_nfs_fattr4_maxfilesize, { "maxfilesize", "nfs.fattr4.maxfilesize", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.maxfilesize", HFILL }}, { &hf_nfs_fattr4_maxlink, { "maxlink", "nfs.fattr4.maxlink", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr4.maxlink", HFILL }}, { &hf_nfs_fattr4_maxname, { "maxname", "nfs.fattr4.maxname", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr4.maxname", HFILL }}, { &hf_nfs_fattr4_numlinks, { "numlinks", "nfs.fattr4.numlinks", FT_UINT32, BASE_DEC, NULL, 0, "nfs.fattr4.numlinks", HFILL }}, { &hf_nfs_delegate_type, { "delegate_type", "nfs.delegate_type", FT_UINT32, BASE_DEC, NULL, 0, "nfs.delegate_type", HFILL }}, { &hf_nfs_secinfo_flavor, { "flavor", "nfs.secinfo.flavor", FT_UINT32, BASE_DEC, VALS(rpc_auth_flavor), 0, "nfs.secinfo.flavor", HFILL }}, { &hf_nfs_num_blocks, { "num_blocks", "nfs.num_blocks", FT_UINT32, BASE_DEC, NULL, 0, "nfs.num_blocks", HFILL }}, { &hf_nfs_bytes_per_block, { "bytes_per_block", "nfs.bytes_per_block", FT_UINT32, BASE_DEC, NULL, 0, "nfs.bytes_per_block", HFILL }}, { &hf_nfs_eof, { "eof", "nfs.eof", FT_UINT32, BASE_DEC, NULL, 0, "nfs.eof", HFILL }}, { &hf_nfs_fattr4_maxread, { "maxread", "nfs.fattr4.maxread", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.maxread", HFILL }}, { &hf_nfs_fattr4_maxwrite, { "maxwrite", "nfs.fattr4.maxwrite", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.maxwrite", HFILL }}, { &hf_nfs_fattr4_quota_hard, { "quota_hard", "nfs.fattr4.quota_hard", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.quota_hard", HFILL }}, { &hf_nfs_fattr4_quota_soft, { "quota_soft", "nfs.fattr4.quota_soft", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.quota_soft", HFILL }}, { &hf_nfs_fattr4_quota_used, { "quota_used", "nfs.fattr4.quota_used", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.quota_used", HFILL }}, { &hf_nfs_fattr4_space_avail, { "space_avail", "nfs.fattr4.space_avail", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.space_avail", HFILL }}, { &hf_nfs_fattr4_space_free, { "space_free", "nfs.fattr4.space_free", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.space_free", HFILL }}, { &hf_nfs_fattr4_space_total, { "space_total", "nfs.fattr4.space_total", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.space_total", HFILL }}, { &hf_nfs_fattr4_space_used, { "space_used", "nfs.fattr4.space_used", FT_UINT64, BASE_DEC, NULL, 0, "nfs.fattr4.space_used", HFILL }}, { &hf_nfs_stateid4_delegate_stateid, { "delegate_stateid", "nfs.delegate_stateid", FT_UINT64, BASE_DEC, NULL, 0, "nfs.delegate_stateid", HFILL }}, { &hf_nfs_verifier4, { "verifier", "nfs.verifier4", FT_UINT64, BASE_HEX, NULL, 0, "nfs.verifier4", HFILL }}, { &hf_nfs_cookie4, { "cookie", "nfs.cookie4", FT_UINT64, BASE_DEC, NULL, 0, "nfs.cookie4", HFILL }}, { &hf_nfs_cookieverf4, { "cookieverf", "nfs.cookieverf4", FT_UINT64, BASE_DEC, NULL, 0, "nfs.cookieverf4", HFILL }}, { &hf_nfs_cb_location, { "cb_location", "nfs.cb_location", FT_UINT32, BASE_DEC, NULL, 0, "nfs.cb_location", HFILL }}, { &hf_nfs_cb_program, { "cb_program", "nfs.cb_program", FT_UINT32, BASE_HEX, NULL, 0, "nfs.cb_program", HFILL }}, { &hf_nfs_recall4, { "recall", "nfs.recall4", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.recall4", HFILL }}, { &hf_nfs_filesize, { "filesize", "nfs.filesize", FT_UINT64, BASE_DEC, NULL, 0, "nfs.filesize", HFILL }}, { &hf_nfs_count4, { "count", "nfs.count4", FT_UINT32, BASE_DEC, NULL, 0, "nfs.count4", HFILL }}, { &hf_nfs_count4_dircount, { "dircount", "nfs.dircount", FT_UINT32, BASE_DEC, NULL, 0, "nfs.dircount", HFILL }}, { &hf_nfs_count4_maxcount, { "maxcount", "nfs.maxcount", FT_UINT32, BASE_DEC, NULL, 0, "nfs.maxcount", HFILL }}, { &hf_nfs_minorversion, { "minorversion", "nfs.minorversion", FT_UINT32, BASE_DEC, NULL, 0, "nfs.minorversion", HFILL }}, { &hf_nfs_atime, { "atime", "nfs.atime", FT_ABSOLUTE_TIME, BASE_NONE, NULL, 0, "Access Time", HFILL }}, { &hf_nfs_atime_sec, { "seconds", "nfs.atime.sec", FT_UINT32, BASE_DEC, NULL, 0, "Access Time, Seconds", HFILL }}, { &hf_nfs_atime_nsec, { "nano seconds", "nfs.atime.nsec", FT_UINT32, BASE_DEC, NULL, 0, "Access Time, Nano-seconds", HFILL }}, { &hf_nfs_atime_usec, { "micro seconds", "nfs.atime.usec", FT_UINT32, BASE_DEC, NULL, 0, "Access Time, Micro-seconds", HFILL }}, { &hf_nfs_mtime, { "mtime", "nfs.mtime", FT_ABSOLUTE_TIME, BASE_NONE, NULL, 0, "Modify Time", HFILL }}, { &hf_nfs_mtime_sec, { "seconds", "nfs.mtime.sec", FT_UINT32, BASE_DEC, NULL, 0, "Modify Seconds", HFILL }}, { &hf_nfs_mtime_nsec, { "nano seconds", "nfs.mtime.nsec", FT_UINT32, BASE_DEC, NULL, 0, "Modify Time, Nano-seconds", HFILL }}, { &hf_nfs_mtime_usec, { "micro seconds", "nfs.mtime.usec", FT_UINT32, BASE_DEC, NULL, 0, "Modify Time, Micro-seconds", HFILL }}, { &hf_nfs_ctime, { "ctime", "nfs.ctime", FT_ABSOLUTE_TIME, BASE_NONE, NULL, 0, "Creation Time", HFILL }}, { &hf_nfs_ctime_sec, { "seconds", "nfs.ctime.sec", FT_UINT32, BASE_DEC, NULL, 0, "Creation Time, Seconds", HFILL }}, { &hf_nfs_ctime_nsec, { "nano seconds", "nfs.ctime.nsec", FT_UINT32, BASE_DEC, NULL, 0, "Creation Time, Nano-seconds", HFILL }}, { &hf_nfs_ctime_usec, { "micro seconds", "nfs.ctime.usec", FT_UINT32, BASE_DEC, NULL, 0, "Creation Time, Micro-seconds", HFILL }}, { &hf_nfs_dtime, { "time delta", "nfs.dtime", FT_RELATIVE_TIME, BASE_NONE, NULL, 0, "Time Delta", HFILL }}, { &hf_nfs_dtime_sec, { "seconds", "nfs.dtime.sec", FT_UINT32, BASE_DEC, NULL, 0, "Time Delta, Seconds", HFILL }}, { &hf_nfs_dtime_nsec, { "nano seconds", "nfs.dtime.nsec", FT_UINT32, BASE_DEC, NULL, 0, "Time Delta, Nano-seconds", HFILL }}, { &hf_nfs_open_owner4, { "owner", "nfs.open_owner4", FT_BYTES, BASE_DEC, NULL, 0, "owner", HFILL }}, { &hf_nfs_lock_owner4, { "owner", "nfs.lock_owner4", FT_BYTES, BASE_DEC, NULL, 0, "owner", HFILL }}, { &hf_nfs_secinfo_rpcsec_gss_info_service, { "service", "nfs.secinfo.rpcsec_gss_info.service", FT_UINT32, BASE_DEC, VALS(rpc_authgss_svc), 0, "service", HFILL }}, { &hf_nfs_attrdircreate, { "attribute dir create", "nfs.openattr4.createdir", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.openattr4.createdir", HFILL }}, { &hf_nfs_new_lock_owner, { "new lock owner?", "nfs.lock.locker.new_lock_owner", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.lock.locker.new_lock_owner", HFILL }}, { &hf_nfs_lock4_reclaim, { "reclaim?", "nfs.lock.reclaim", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.lock.reclaim", HFILL }}, { &hf_nfs_sec_oid4, { "oid", "nfs.secinfo.flavor_info.rpcsec_gss_info.oid", FT_BYTES, BASE_DEC, NULL, 0, "oid", HFILL }}, { &hf_nfs_qop4, { "qop", "nfs.secinfo.flavor_info.rpcsec_gss_info.qop", FT_UINT32, BASE_DEC, NULL, 0, "qop", HFILL }}, { &hf_nfs_client_id4_id, { "id", "nfs.nfs_client_id4.id", FT_BYTES, BASE_DEC, NULL, 0, "nfs.nfs_client_id4.id", HFILL }}, { &hf_nfs_stateid4_other, { "Data", "nfs.stateid4.other", FT_BYTES, BASE_HEX, NULL, 0, "Data", HFILL }}, { &hf_nfs_acl4, { "ACL", "nfs.acl", FT_NONE, BASE_NONE, NULL, 0, "Access Control List", HFILL }}, { &hf_nfs_callback_ident, { "callback_ident", "nfs.callback.ident", FT_UINT32, BASE_HEX, NULL, 0, "Callback Identifier", HFILL }}, { &hf_nfs_r_netid, { "r_netid", "nfs.r_netid", FT_BYTES, BASE_DEC, NULL, 0, "r_netid", HFILL }}, { &hf_nfs_r_addr, { "r_addr", "nfs.r_addr", FT_BYTES, BASE_DEC, NULL, 0, "r_addr", HFILL }}, { &hf_nfs_fh_fhandle_data, { "filehandle", "nfs.fhandle", FT_BYTES, BASE_HEX, NULL, 0, "Opaque nfs filehandle", HFILL }}, { &hf_nfs_secinfo_arr4, { "Flavors Info", "nfs.flavors.info", FT_NONE, BASE_NONE, NULL, 0, "Flavors Info", HFILL }}, { &hf_gxfh3_utlfield, { "utility", "nfs.gxfh3.utility", FT_UINT8, BASE_HEX, NULL, 0, "utility", HFILL }}, { &hf_gxfh3_utlfield_tree_r, { "tree R", "nfs.gxfh3.utlfield.treeR", FT_UINT8, BASE_HEX, NULL, NFS3GX_FH_TREE_MASK, "", HFILL }}, { &hf_gxfh3_utlfield_tree_w, { "tree W", "nfs.gxfh3.utlfield.treeW", FT_UINT8, BASE_HEX, NULL, NFS3GX_FH_TREE_MASK, "", HFILL }}, { &hf_gxfh3_utlfield_jun, { "broken junction", "nfs.gxfh3.utlfield.junction", FT_UINT8, BASE_HEX, NULL, NFS3GX_FH_JUN_MASK, "", HFILL }}, { &hf_gxfh3_utlfield_jun_not, { "not broken junction", "nfs.gxfh3.utlfield.notjunction", FT_UINT8, BASE_HEX, NULL, NFS3GX_FH_JUN_MASK, "", HFILL }}, { &hf_gxfh3_utlfield_ver, { "file handle version","nfs.gxfh3.utlfield.version", FT_UINT8, BASE_HEX, NULL, NFS3GX_FH_VER_MASK, "", HFILL }}, { &hf_gxfh3_volcnt, { "volume count", "nfs.gxfh3.volcnt", FT_UINT8, BASE_HEX, NULL, 0, "volume count", HFILL }}, { &hf_gxfh3_epoch, { "epoch", "nfs.gxfh3.epoch", FT_UINT16, BASE_HEX, NULL, 0, "epoch", HFILL }}, { &hf_gxfh3_ldsid, { " local dsid", "nfs.gxfh3.ldsid", FT_UINT32, BASE_HEX, NULL, 0, "local dsid", HFILL }}, { &hf_gxfh3_cid, { " cluster id", "nfs.gxfh3.cid", FT_UINT16, BASE_HEX, NULL, 0, "cluster id", HFILL }}, { &hf_gxfh3_resv, { " reserved", "nfs.gxfh3.reserved", FT_UINT16, BASE_HEX, NULL, 0, "reserved", HFILL }}, { &hf_gxfh3_sfhflags, { " flags", "nfs.gxfh3.sfhflags", FT_UINT8, BASE_HEX, NULL, 0, " flags", HFILL }}, { &hf_gxfh3_sfhflags_resv1, { "reserved", "nfs.gxfh3.sfhflags.reserve1", FT_UINT8, BASE_HEX, NULL, SPINNP_FH_FLAG_RESV1, "", HFILL }}, { &hf_gxfh3_sfhflags_resv2, { "reserved", "nfs.gxfh3.sfhflags.reserv2", FT_UINT8, BASE_HEX, NULL, SPINNP_FH_FLAG_RESV2, "", HFILL }}, { &hf_gxfh3_sfhflags_ontap7G, { "ontap-7g", "nfs.gxfh3.sfhflags.ontap7g", FT_UINT8, BASE_HEX, NULL, SPINNP_FH_FLAG_ONTAP_MASK, "", HFILL }}, { &hf_gxfh3_sfhflags_ontapGX, { "ontap-gx", "nfs.gxfh3.sfhflags.ontapgx", FT_UINT8, BASE_HEX, NULL, SPINNP_FH_FLAG_ONTAP_MASK, "", HFILL }}, { &hf_gxfh3_sfhflags_striped, { "striped", "nfs.gxfh3.sfhflags.striped", FT_BOOLEAN, 8, TFS(&flags_set_truth), SPINNP_FH_FLAG_STRIPED_MASK, "", HFILL }}, { &hf_gxfh3_sfhflags_empty, { "empty", "nfs.gxfh3.sfhflags.empty", FT_BOOLEAN, 8, TFS(&flags_set_truth), SPINNP_FH_FLAG_EMPTY_MASK, "", HFILL }}, { &hf_gxfh3_sfhflags_snapdirent, { "snap dir ent", "nfs.gxfh3.sfhflags.snapdirent", FT_BOOLEAN, 8, TFS(&flags_set_truth), SPINNP_FH_FLAG_SNAPDIR_ENT_MASK, "", HFILL }}, { &hf_gxfh3_sfhflags_snapdir, { "snap dir", "nfs.gxfh3.sfhflags.snapdir", FT_BOOLEAN, 8, TFS(&flags_set_truth), SPINNP_FH_FLAG_SNAPDIR_MASK, "", HFILL }}, { &hf_gxfh3_sfhflags_streamdir, { "stream dir", "nfs.gxfh3.sfhflags.streamdir", FT_BOOLEAN, 8, TFS(&flags_set_truth), SPINNP_FH_FLAG_STREAMDIR_MASK, "", HFILL }}, { &hf_gxfh3_spinfid, { "spin file id", "nfs.gxfh3.spinfid", FT_UINT32, BASE_HEX, NULL, 0, "spin file id", HFILL }}, { &hf_gxfh3_spinfuid, { "spin file unique id", "nfs.gxfh3.spinfuid", FT_UINT32, BASE_HEX, NULL, 0, "spin file unique id", HFILL }}, { &hf_gxfh3_exportptid, { "export point id", "nfs.gxfh3.exportptid", FT_UINT32, BASE_HEX, NULL, 0, "export point id", HFILL }}, { &hf_gxfh3_exportptuid, { "export point unique id", "nfs.gxfh3.exportptuid", FT_UINT32, BASE_HEX, NULL, 0, "export point unique id", HFILL }}, { &hf_nfs_length4_minlength, { "min length", "nfs.minlength4", FT_UINT64, BASE_DEC, NULL, 0, "min length", HFILL }}, { &hf_nfs_layouttype4, { "layout type", "nfs.layouttype", FT_UINT32, BASE_DEC, VALS(layouttype_names), 0, "layout type", HFILL }}, { &hf_nfs_layoutlen, { "layout opaque len", "nfs.layoutlen", FT_UINT32, BASE_DEC, VALS(layouttype_names), 0, "layout opaque len", HFILL }}, { &hf_nfs_layoutreturn_type4, { "return type", "nfs.returntype", FT_UINT32, BASE_DEC, VALS(layoutreturn_names), 0, "return type ", HFILL }}, { &hf_nfs_iomode4, { "IO mode", "nfs.iomode", FT_UINT32, BASE_DEC, VALS(iomode_names), 0, "IO mode", HFILL }}, { &hf_nfs_fldtype4, { "device type", "nfs.fldtype", FT_UINT32, BASE_DEC, VALS(fldtype_names), 0, "device type", HFILL }}, { &hf_nfs_stripetype4, { "stripe type", "nfs.stripetype", FT_UINT32, BASE_DEC, VALS(stripetype_names), 0, "stripe type", HFILL }}, { &hf_nfs_stripeunit4, { "stripe unit", "nfs.stripeunit", FT_UINT64, BASE_DEC, NULL, 0, "stripe unit", HFILL }}, { &hf_nfs_newtime4, { "new time?", "nfs.newtime", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.newtime", HFILL }}, { &hf_nfs_newoffset4, { "new offset?", "nfs.newoffset", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.newoffset", HFILL }}, { &hf_nfs_newsize4, { "new size?", "nfs.newsize", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.newsize", HFILL }}, { &hf_nfs_layout_avail4, { "layout available?", "nfs.layoutavail", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.layoutavail", HFILL }}, { &hf_nfs_mdscommit4, { "MDS commit?", "nfs.mdscommit", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.mdscommit", HFILL }}, { &hf_nfs_layoutupdate4, { "layout update", "nfs.layoutupdate", FT_BYTES, BASE_DEC, NULL, 0, "layout update", HFILL }}, { &hf_nfs_deviceid4, { "device ID", "nfs.deviceid", FT_UINT32, BASE_DEC, NULL, 0, "device ID", HFILL }}, { &hf_nfs_devicenum4, { "num devices", "nfs.devicenum4", FT_UINT32, BASE_DEC, NULL, 0, "num devices", HFILL }}, { &hf_nfs_deviceidx4, { "device index", "nfs.deviceidx", FT_UINT32, BASE_DEC, NULL, 0, "device index", HFILL }}, { &hf_nfs_layout4, { "layout", "nfs.layout", FT_BYTES, BASE_DEC, NULL, 0, "layout", HFILL }}, { &hf_nfs_stripedevs4, { "stripe devs", "nfs.stripedevs", FT_UINT32, BASE_DEC, NULL, 0, "stripe devs", HFILL }}, { &hf_nfs_devaddr4, { "device addr", "nfs.devaddr", FT_BYTES, BASE_DEC, NULL, 0, "device addr", HFILL }}, { &hf_nfs_notifydsop4, { "NotifyDS op", "nfs.notifydsop", FT_UINT32, BASE_DEC, VALS(notifydsop_names), 0, "NotifyDS op", HFILL }}, { &hf_nfs_return_on_close4, { "return on close?", "nfs.retclose4", FT_BOOLEAN, BASE_NONE, &yesno, 0, "return on close", HFILL }}, { &hf_nfs_slotid4, { "slot ID", "nfs.slotid4", FT_UINT32, BASE_DEC, NULL, 0, "slot ID", HFILL }}, { &hf_nfs_sr_status4, { "status", "nfs.status", FT_UINT32, BASE_DEC, NULL, 0, "status", HFILL }}, { &hf_nfs_serverscope4, { "server scope", "nfs.scope", FT_BYTES, BASE_DEC, NULL, 0, "server scope", HFILL }}, { &hf_nfs_minorid4, { "minor ID", "nfs.minorid4", FT_UINT64, BASE_DEC, NULL, 0, "minor ID", HFILL }}, { &hf_nfs_majorid4, { "major ID", "nfs.majorid4", FT_BYTES, BASE_DEC, NULL, 0, "major ID", HFILL }}, { &hf_nfs_padsize4, { "hdr pad size", "nfs.padsize4", FT_UINT32, BASE_DEC, NULL, 0, "hdr pad size", HFILL }}, { &hf_nfs_cbrenforce4, { "binding enforce?", "nfs.cbrenforce4", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.cbrenforce4", HFILL }}, { &hf_nfs_hashalg4, { "hash alg", "nfs.hashalg4", FT_UINT32, BASE_DEC, NULL, 0, "hash alg", HFILL }}, { &hf_nfs_ssvlen4, { "ssv len", "nfs.ssvlen4", FT_UINT32, BASE_DEC, NULL, 0, "ssv len", HFILL }}, { &hf_nfs_maxreqsize4, { "max req size", "nfs.maxreqsize4", FT_UINT32, BASE_DEC, NULL, 0, "max req size", HFILL }}, { &hf_nfs_maxrespsize4, { "max resp size", "nfs.maxrespsize4", FT_UINT32, BASE_DEC, NULL, 0, "max resp size", HFILL }}, { &hf_nfs_maxrespsizecached4, { "max resp size cached", "nfs.maxrespsizecached4", FT_UINT32, BASE_DEC, NULL, 0, "max resp size cached", HFILL }}, { &hf_nfs_maxops4, { "max ops", "nfs.maxops4", FT_UINT32, BASE_DEC, NULL, 0, "max ops", HFILL }}, { &hf_nfs_maxreqs4, { "max reqs", "nfs.maxreqs4", FT_UINT32, BASE_DEC, NULL, 0, "max reqs", HFILL }}, { &hf_nfs_rdmachanattrs4, { "RDMA chan attrs", "nfs.rdmachanattrs4", FT_UINT32, BASE_DEC, NULL, 0, "RDMA chan attrs", HFILL }}, { &hf_nfs_machinename4, { "machine name", "nfs.machinename4", FT_STRING, BASE_DEC, NULL, 0, "machine name", HFILL }}, { &hf_nfs_flavor4, { "flavor", "nfs.flavor4", FT_UINT32, BASE_DEC, NULL, 0, "flavor", HFILL }}, { &hf_nfs_stamp4, { "stamp", "nfs.stamp4", FT_UINT32, BASE_DEC, NULL, 0, "stamp", HFILL }}, { &hf_nfs_uid4, { "uid", "nfs.uid4", FT_UINT32, BASE_DEC, NULL, 0, "nfs.uid4", HFILL }}, { &hf_nfs_gid4, { "gid", "nfs.gid4", FT_UINT32, BASE_DEC, NULL, 0, "nfs.gid4", HFILL }}, { &hf_nfs_service4, { "gid", "nfs.service4", FT_UINT32, BASE_DEC, NULL, 0, "nfs.service4", HFILL }}, { &hf_nfs_sessionid4, { "sessionid", "nfs.session_id4", FT_BYTES, BASE_HEX, NULL, 0, "nfs.session_id4", HFILL }}, { &hf_nfs_exch_id_flags4, { "EXCHANGE_ID flags", "nfs.exch_id_flags", FT_UINT32, BASE_HEX, NULL, 0, "EXCHANGE_ID flags", HFILL }}, { &hf_nfs_nii_domain4, { "Implementer Domain name", "nfs.nii_domain4", FT_STRING, BASE_DEC, NULL, 0, "Implementer Domain name", HFILL }}, { &hf_nfs_nii_name4, { "Implementation name", "nfs.nii_name4", FT_STRING, BASE_DEC, NULL, 0, "Implementation name", HFILL }}, { &hf_nfs_create_session_flags4, { "CREATE_SESSION flags", "nfs.create_session_flags", FT_UINT32, BASE_HEX, NULL, 0, "CREATE_SESSION flags", HFILL }}, { &hf_nfs_cachethis4, { "Cache this?", "nfs.cachethis4", FT_BOOLEAN, BASE_NONE, &yesno, 0, "nfs.cachethis4", HFILL }}, /* Hidden field for v2, v3, and v4 status */ { &hf_nfs_nfsstat, { "Status", "nfs.status", FT_UINT32, BASE_DEC, VALS(names_nfs_nfsstat), 0, "Reply status", HFILL }}, }; static gint *ett[] = { &ett_nfs, &ett_nfs_fh_encoding, &ett_nfs_fh_fsid, &ett_nfs_fh_file, &ett_nfs_fh_mount, &ett_nfs_fh_export, &ett_nfsv4_fh_export, &ett_nfsv4_fh_file, &ett_nfsv4_fh_handle_type, &ett_nfsv4_fh_export_snapgen, &ett_nfsv4_fh_file_flags, &ett_nfs_fh_xfsid, &ett_nfs_fh_fn, &ett_nfs_fh_xfn, &ett_nfs_fh_hp, &ett_nfs_fh_auth, &ett_nfs_fhandle, &ett_nfs_timeval, &ett_nfs_mode, &ett_nfs_fattr, &ett_nfs_sattr, &ett_nfs_diropargs, &ett_nfs_readdir_entry, &ett_nfs_mode3, &ett_nfs_specdata3, &ett_nfs_fh3, &ett_nfs_nfstime3, &ett_nfs_fattr3, &ett_nfs_post_op_fh3, &ett_nfs_sattr3, &ett_nfs_diropargs3, &ett_nfs_sattrguard3, &ett_nfs_set_mode3, &ett_nfs_set_uid3, &ett_nfs_set_gid3, &ett_nfs_set_size3, &ett_nfs_set_atime, &ett_nfs_set_mtime, &ett_nfs_pre_op_attr, &ett_nfs_post_op_attr, &ett_nfs_wcc_attr, &ett_nfs_wcc_data, &ett_nfs_access, &ett_nfs_fsinfo_properties, &ett_nfs_compound_call4, &ett_nfs_utf8string, &ett_nfs_argop4, &ett_nfs_resop4, &ett_nfs_access4, &ett_nfs_close4, &ett_nfs_commit4, &ett_nfs_create4, &ett_nfs_delegpurge4, &ett_nfs_delegreturn4, &ett_nfs_getattr4, &ett_nfs_getfh4, &ett_nfs_link4, &ett_nfs_lock4, &ett_nfs_lockt4, &ett_nfs_locku4, &ett_nfs_lookup4, &ett_nfs_lookupp4, &ett_nfs_nverify4, &ett_nfs_open4, &ett_nfs_openattr4, &ett_nfs_open_confirm4, &ett_nfs_open_downgrade4, &ett_nfs_putfh4, &ett_nfs_putpubfh4, &ett_nfs_putrootfh4, &ett_nfs_read4, &ett_nfs_readdir4, &ett_nfs_readlink4, &ett_nfs_remove4, &ett_nfs_rename4, &ett_nfs_renew4, &ett_nfs_restorefh4, &ett_nfs_savefh4, &ett_nfs_setattr4, &ett_nfs_setclientid4, &ett_nfs_setclientid_confirm4, &ett_nfs_verify4, &ett_nfs_write4, &ett_nfs_release_lockowner4, &ett_nfs_exchange_id4, &ett_nfs_create_session4, &ett_nfs_destroy_session4, &ett_nfs_sequence4, &ett_nfs_layoutget4, &ett_nfs_layoutcommit4, &ett_nfs_layoutreturn4, &ett_nfs_getdevinfo4, &ett_nfs_getdevlist4, &ett_nfs_notifyds4, &ett_nfs_pnfs_create4, &ett_nfs_illegal4, &ett_nfs_verifier4, &ett_nfs_opaque, &ett_nfs_dirlist4, &ett_nfs_pathname4, &ett_nfs_change_info4, &ett_nfs_open_delegation4, &ett_nfs_open_claim4, &ett_nfs_opentype4, &ett_nfs_lock_owner4, &ett_nfs_cb_client4, &ett_nfs_client_id4, &ett_nfs_bitmap4, &ett_nfs_fattr4, &ett_nfs_fsid4, &ett_nfs_fs_locations4, &ett_nfs_fs_location4, &ett_nfs_open4_result_flags, &ett_nfs_secinfo4, &ett_nfs_secinfo4_flavor_info, &ett_nfs_stateid4, &ett_nfs_fattr4_fh_expire_type, &ett_nfs_ace4, &ett_nfs_clientaddr4, &ett_nfs_aceflag4, &ett_nfs_acemask4, &ett_nfs_gxfh3_utlfield, &ett_nfs_gxfh3_sfhfield, &ett_nfs_gxfh3_sfhflags, &ett_nfs_slotid4, &ett_nfs_sr_status4, &ett_nfs_serverscope4, &ett_nfs_minorid4, &ett_nfs_majorid4, &ett_nfs_persist4, &ett_nfs_backchan4, &ett_nfs_rdmamode4, &ett_nfs_padsize4, &ett_nfs_cbrenforce4, &ett_nfs_hashalg4, &ett_nfs_ssvlen4, &ett_nfs_maxreqsize4, &ett_nfs_maxrespsize4, &ett_nfs_maxrespsizecached4, &ett_nfs_maxops4, &ett_nfs_maxreqs4, &ett_nfs_streamchanattrs4, &ett_nfs_rdmachanattrs4, &ett_nfs_machinename4, &ett_nfs_flavor4, &ett_nfs_stamp4, &ett_nfs_uid4, &ett_nfs_gid4, &ett_nfs_service4, &ett_nfs_sessionid4, }; module_t *nfs_module; proto_nfs = proto_register_protocol("Network File System", "NFS", "nfs"); proto_register_field_array(proto_nfs, hf, array_length(hf)); proto_register_subtree_array(ett, array_length(ett)); nfs_module=prefs_register_protocol(proto_nfs, NULL); prefs_register_bool_preference(nfs_module, "file_name_snooping", "Snoop FH to filename mappings", "Whether the dissector should snoop the FH to filename mappings by looking inside certain packets", &nfs_file_name_snooping); prefs_register_bool_preference(nfs_module, "file_full_name_snooping", "Snoop full path to filenames", "Whether the dissector should snoop the full pathname for files for matching FH's", &nfs_file_name_full_snooping); prefs_register_bool_preference(nfs_module, "fhandle_find_both_reqrep", "Fhandle filters finds both request/response", "With this option display filters for nfs fhandles (nfs.fh.{name|full_name|hash}) will find both the request and response packets for a RPC call, even if the actual fhandle is only present in one of the packets", &nfs_fhandle_reqrep_matching); nfs_fhandle_table = register_dissector_table("nfs_fhandle.type", "NFS Filehandle types", FT_UINT8, BASE_HEX); prefs_register_enum_preference(nfs_module, "default_fhandle_type", "Decode nfs fhandles as", "Decode all NFS file handles as if they are of this type", &default_nfs_fhandle_type, nfs_fhandle_types, FALSE); nfs_name_snoop_known=se_tree_create(EMEM_TREE_TYPE_RED_BLACK, "nfs_name_snoop_known"); nfs_file_handles=se_tree_create(EMEM_TREE_TYPE_RED_BLACK, "nfs_file_handles"); nfs_fhandle_frame_table=se_tree_create(EMEM_TREE_TYPE_RED_BLACK, "nfs_fhandle_frame_table"); register_init_routine(nfs_name_snoop_init); } void proto_reg_handoff_nfs(void) { dissector_handle_t fhandle_handle; /* Register the protocol as RPC */ rpc_init_prog(proto_nfs, NFS_PROGRAM, ett_nfs); /* Register the procedure tables */ rpc_init_proc_table(NFS_PROGRAM, 2, nfs2_proc, hf_nfs_procedure_v2); rpc_init_proc_table(NFS_PROGRAM, 3, nfs3_proc, hf_nfs_procedure_v3); rpc_init_proc_table(NFS_PROGRAM, 4, nfs4_proc, hf_nfs_procedure_v4); fhandle_handle=create_dissector_handle(dissect_fhandle_data_SVR4, proto_nfs); dissector_add("nfs_fhandle.type", FHT_SVR4, fhandle_handle); fhandle_handle=create_dissector_handle(dissect_fhandle_data_LINUX_KNFSD_LE, proto_nfs); dissector_add("nfs_fhandle.type", FHT_LINUX_KNFSD_LE, fhandle_handle); fhandle_handle=create_dissector_handle(dissect_fhandle_data_LINUX_NFSD_LE, proto_nfs); dissector_add("nfs_fhandle.type", FHT_LINUX_NFSD_LE, fhandle_handle); fhandle_handle=create_dissector_handle(dissect_fhandle_data_LINUX_KNFSD_NEW, proto_nfs); dissector_add("nfs_fhandle.type", FHT_LINUX_KNFSD_NEW, fhandle_handle); fhandle_handle=create_dissector_handle(dissect_fhandle_data_NETAPP, proto_nfs); dissector_add("nfs_fhandle.type", FHT_NETAPP, fhandle_handle); fhandle_handle=create_dissector_handle(dissect_fhandle_data_NETAPP_V4, proto_nfs); dissector_add("nfs_fhandle.type", FHT_NETAPP_V4, fhandle_handle); fhandle_handle=create_dissector_handle(dissect_fhandle_data_NETAPP_GX_v3, proto_nfs); dissector_add("nfs_fhandle.type", FHT_NETAPP_GX_V3, fhandle_handle); fhandle_handle=create_dissector_handle(dissect_fhandle_data_unknown, proto_nfs); dissector_add("nfs_fhandle.type", FHT_UNKNOWN, fhandle_handle); }
/* packet-nfs.h (c) 1999 Uwe Girlich */ /* $Id: packet-nfs.h 18787 2006-07-22 22:15:15Z sahlberg $ * * Wireshark - Network traffic analyzer * By Gerald Combs <gerald@wireshark.org> * Copyright 1998 Gerald Combs * * This program is free software; you can redistribute it and/or * modify it under the terms of the GNU General Public License * as published by the Free Software Foundation; either version 2 * of the License, or (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA. */ #ifndef __PACKET_NFS_H__ #define __PACKET_NFS_H__ #include "packet-rpc.h" #define NFS_PROGRAM 100003 #define FHSIZE 32 /* verifier */ #define NFS3_COOKIEVERFSIZE 8 #define NFS3_CREATEVERFSIZE 8 #define NFS3_WRITEVERFSIZE 8 /* for ftype3 */ #define NF3REG 1 #define NF3DIR 2 #define NF3BLK 3 #define NF3CHR 4 #define NF3LNK 5 #define NF3SOCK 6 #define NF3FIFO 7 /* * NFSv4 error codes used in code, as opposed to UI */ #define NFS4_OK 0 #define NFS4ERR_DENIED 10010 #define NFS4ERR_CLID_INUSE 10017 /* * NFSv4 file types */ #define NF4REG 1 #define NF4DIR 2 #define NF4BLK 3 #define NF4CHR 4 #define NF4LNK 5 #define NF4SOCK 6 #define NF4FIFO 7 #define NF4ATTRDIR 8 #define NF4NAMEDATTR 9 /* * Since NFSv4 "operations" are handled differently than previous NFS * versions, these tokens are necessary. */ #define NFS4_OP_ACCESS 3 #define NFS4_OP_CLOSE 4 #define NFS4_OP_COMMIT 5 #define NFS4_OP_CREATE 6 #define NFS4_OP_DELEGPURGE 7 #define NFS4_OP_DELEGRETURN 8 #define NFS4_OP_GETATTR 9 #define NFS4_OP_GETFH 10 #define NFS4_OP_LINK 11 #define NFS4_OP_LOCK 12 #define NFS4_OP_LOCKT 13 #define NFS4_OP_LOCKU 14 #define NFS4_OP_LOOKUP 15 #define NFS4_OP_LOOKUPP 16 #define NFS4_OP_NVERIFY 17 #define NFS4_OP_OPEN 18 #define NFS4_OP_OPENATTR 19 #define NFS4_OP_OPEN_CONFIRM 20 #define NFS4_OP_OPEN_DOWNGRADE 21 #define NFS4_OP_PUTFH 22 #define NFS4_OP_PUTPUBFH 23 #define NFS4_OP_PUTROOTFH 24 #define NFS4_OP_READ 25 #define NFS4_OP_READDIR 26 #define NFS4_OP_READLINK 27 #define NFS4_OP_REMOVE 28 #define NFS4_OP_RENAME 29 #define NFS4_OP_RENEW 30 #define NFS4_OP_RESTOREFH 31 #define NFS4_OP_SAVEFH 32 #define NFS4_OP_SECINFO 33 #define NFS4_OP_SETATTR 34 #define NFS4_OP_SETCLIENTID 35 #define NFS4_OP_SETCLIENTID_CONFIRM 36 #define NFS4_OP_VERIFY 37 #define NFS4_OP_WRITE 38 #define NFS4_OP_RELEASE_LOCKOWNER 39 /* Minor version 1 */ #define NFS4_OP_EXCHANGE_ID 42 #define NFS4_OP_CREATE_SESSION 43 #define NFS4_OP_DESTROY_SESSION 44 #define NFS4_OP_GETDEVINFO 47 #define NFS4_OP_GETDEVLIST 48 #define NFS4_OP_LAYOUTCOMMIT 49 #define NFS4_OP_LAYOUTGET 50 #define NFS4_OP_LAYOUTRETURN 51 #define NFS4_OP_SEQUENCE 53 #define NFS4_OP_NOTIFYDS 60 #define NFS4_OP_PNFS_CREATE 61 #define NFS4_OP_PNFS_WRITE 62 #define NFS4_OP_PNFS_READ 63 #define NFS4_OP_ILLEGAL 10044 /* for write */ #define UNSTABLE 0 #define DATA_SYNC 1 #define FILE_SYNC 2 /* for create */ #define UNCHECKED 0 #define GUARDED 1 #define EXCLUSIVE 2 extern gboolean nfs_file_name_snooping; extern int dissect_fhandle(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char *name, guint32 *hash); extern int dissect_nfs_fh3(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char *name, guint32 *hash); int dissect_nfs_post_op_attr(tvbuff_t *tvb, int offset, packet_info *pinfo, proto_tree *tree, const char* name); void nfs_name_snoop_add_name(int xid, tvbuff_t *tvb, int name_offset, int name_len, int parent_offset, int parent_len, unsigned char *name); extern gboolean nfs_fhandle_reqrep_matching; typedef struct nfs_fhandle_data { int len; const unsigned char *fh; tvbuff_t *tvb; } nfs_fhandle_data_t; void dissect_fhandle_hidden(packet_info *pinfo, proto_tree *tree, int frame); typedef int (diss_p)(tvbuff_t *tvb, int offset, proto_tree *tree, int hf); /* Used in packet-nfsacl.c for NFS_ACL dissection */ extern int dissect_fattr(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name); extern int dissect_access(tvbuff_t *tvb, int offset, proto_tree *tree, const char* name); extern gint default_nfs_fhandle_type; #endif /* packet-nfs.h */