/* packet-juniper.c

 * Routines for Juniper Networks, Inc. packet disassembly

 * Copyright 2005 Hannes Gredler <hannes@juniper.net>

 *

 * Wireshark - Network traffic analyzer

 * By Gerald Combs <gerald@wireshark.org>

 * Copyright 1998 Gerald Combs

 *

 * SPDX-License-Identifier: GPL-2.0-or-later

 */

#include "config.h"

#include <epan/packet.h>

#include <epan/expert.h>

#include <epan/addr_resolv.h>

#include <epan/ppptypes.h>

#include <epan/etypes.h>

#include <epan/ipproto.h>

#include <epan/tfs.h>

#include <wsutil/array.h>

#include "packet-juniper.h"

#include <epan/nlpid.h>

void proto_register_juniper(void);

void proto_reg_handoff_juniper(void);

#define JUNIPER_FLAG_PKT_OUT        0x00     /* Outgoing packet */

#define JUNIPER_FLAG_PKT_IN         0x01     /* Incoming packet */

#define JUNIPER_FLAG_NO_L2          0x02     /* L2 header stripped */

#define JUNIPER_FLAG_EXT            0x80     /* extensions present */

#define EXT_TLV_HEADER_SIZE 2

#define JUNIPER_ATM2_PKT_TYPE_MASK  0x70

#define JUNIPER_ATM2_GAP_COUNT_MASK 0x3F

#define JUNIPER_PCAP_MAGIC          0x4d4743

#define JUNIPER_PIC_ATM1   1

#define JUNIPER_PIC_ATM2   2

#define JUNIPER_PIC_MLPPP  3

#define JUNIPER_PIC_MLFR   4

#define JUNIPER_HDR_SNAP   0xaaaa03

#define JUNIPER_HDR_NLPID  0xfefe03

#define JUNIPER_HDR_LLC_UI 0x03

#define JUNIPER_HDR_PPP    0xff03

#define ML_PIC_COOKIE_LEN 2

#define LS_PIC_COOKIE_LEN 4

#define AS_PIC_COOKIE_LEN 8

#define GSP_SVC_REQ_APOLLO 0x40

#define GSP_SVC_REQ_LSQ    0x47

#define LSQ_COOKIE_RE         0x2

#define LSQ_COOKIE_DIR        0x1

#define LSQ_L3_PROTO_SHIFT     4

#define LSQ_L3_PROTO_MASK     0xf0

#define LSQ_L3_PROTO_IPV4     (0 << LSQ_L3_PROTO_SHIFT)

#define LSQ_L3_PROTO_IPV6     (1 << LSQ_L3_PROTO_SHIFT)

#define LSQ_L3_PROTO_MPLS     (2 << LSQ_L3_PROTO_SHIFT)

#define LSQ_L3_PROTO_ISO      (3 << LSQ_L3_PROTO_SHIFT)

#define EXT_TLV_IFD_IDX           1

#define EXT_TLV_IFD_NAME          2

#define EXT_TLV_IFD_MEDIATYPE     3

#define EXT_TLV_IFL_IDX           4

#define EXT_TLV_IFL_UNIT          5

#define EXT_TLV_IFL_ENCAPS        6

#define EXT_TLV_TTP_IFD_MEDIATYPE 7

#define EXT_TLV_TTP_IFL_ENCAPS    8

/* VN related defines */

#define VN_TLV_HDR_SIZE   2

#define VN_FLAG_ALERT     0x00000002

#define VN_FLAG_DROP      0x00000004

#define VN_FLAG_DENY      0x00000008

#define VN_FLAG_LOG       0x00000010

#define VN_FLAG_PASS      0x00000020

#define VN_FLAG_REJECT    0x00000040

#define VN_FLAG_MIRROR    0x00000080

#define VN_FLAG_DIRECTION 0x40000000

#define VN_FLAG_MASK      0xFFFFFFFF

enum {

    VN_TLV_HOST_IP = 1,

    VN_TLV_FLAGS   = 2,

    VN_TLV_SRC_VN  = 3,

    VN_TLV_DST_VN  = 4,

    VN_TLV_LAST    = 255

};

static const value_string ext_tlv_vals[] = {

  { EXT_TLV_IFD_IDX,           "Device Interface Index" },

  { EXT_TLV_IFD_NAME,          "Device Interface Name" },

  { EXT_TLV_IFD_MEDIATYPE,     "Device Media Type" },

  { EXT_TLV_IFL_IDX,           "Logical Interface Index" },

  { EXT_TLV_IFL_UNIT,          "Logical Unit Number" },

  { EXT_TLV_IFL_ENCAPS,        "Logical Interface Encapsulation" },

  { EXT_TLV_TTP_IFD_MEDIATYPE, "TTP derived Device Media Type" },

  { EXT_TLV_TTP_IFL_ENCAPS,    "TTP derived Logical Interface Encapsulation" },

  { 0,             NULL }

};

static const value_string juniper_direction_vals[] = {

  {JUNIPER_FLAG_PKT_OUT, "Out"},

  {JUNIPER_FLAG_PKT_IN,  "In"},

  {0,                    NULL}

};

static const value_string juniper_l2hdr_presence_vals[] = {

  { 0, "Present"},

  { 2, "none"},

  {0,                    NULL}

};

#define JUNIPER_IFML_ETHER              1

#define JUNIPER_IFML_FDDI               2

#define JUNIPER_IFML_TOKENRING          3

#define JUNIPER_IFML_PPP                4

#define JUNIPER_IFML_FRAMERELAY         5

#define JUNIPER_IFML_CISCOHDLC          6

#define JUNIPER_IFML_SMDSDXI            7

#define JUNIPER_IFML_ATMPVC             8

#define JUNIPER_IFML_PPP_CCC            9

#define JUNIPER_IFML_FRAMERELAY_CCC     10

#define JUNIPER_IFML_IPIP               11

#define JUNIPER_IFML_GRE                12

#define JUNIPER_IFML_PIM                13

#define JUNIPER_IFML_PIMD               14

#define JUNIPER_IFML_CISCOHDLC_CCC      15

#define JUNIPER_IFML_VLAN_CCC           16

#define JUNIPER_IFML_MLPPP              17

#define JUNIPER_IFML_MLFR               18

#define JUNIPER_IFML_ML                 19

#define JUNIPER_IFML_LSI                20

#define JUNIPER_IFML_DFE                21

#define JUNIPER_IFML_ATM_CELLRELAY_CCC  22

#define JUNIPER_IFML_CRYPTO             23

#define JUNIPER_IFML_GGSN               24

#define JUNIPER_IFML_LSI_PPP            25

#define JUNIPER_IFML_LSI_CISCOHDLC      26

#define JUNIPER_IFML_PPP_TCC            27

#define JUNIPER_IFML_FRAMERELAY_TCC     28

#define JUNIPER_IFML_CISCOHDLC_TCC      29

#define JUNIPER_IFML_ETHERNET_CCC       30

#define JUNIPER_IFML_VT                 31

#define JUNIPER_IFML_EXTENDED_VLAN_CCC  32

#define JUNIPER_IFML_ETHER_OVER_ATM     33

#define JUNIPER_IFML_MONITOR            34

#define JUNIPER_IFML_ETHERNET_TCC       35

#define JUNIPER_IFML_VLAN_TCC           36

#define JUNIPER_IFML_EXTENDED_VLAN_TCC  37

#define JUNIPER_IFML_CONTROLLER         38

#define JUNIPER_IFML_MFR                39

#define JUNIPER_IFML_LS                 40

#define JUNIPER_IFML_ETHERNET_VPLS      41

#define JUNIPER_IFML_ETHERNET_VLAN_VPLS 42

#define JUNIPER_IFML_ETHERNET_EXTENDED_VLAN_VPLS 43

#define JUNIPER_IFML_LT                 44

#define JUNIPER_IFML_SERVICES           45

#define JUNIPER_IFML_ETHER_VPLS_OVER_ATM 46

#define JUNIPER_IFML_FR_PORT_CCC        47

#define JUNIPER_IFML_FRAMERELAY_EXT_CCC 48

#define JUNIPER_IFML_FRAMERELAY_EXT_TCC 49

#define JUNIPER_IFML_FRAMERELAY_FLEX    50

#define JUNIPER_IFML_GGSNI              51

#define JUNIPER_IFML_ETHERNET_FLEX      52

#define JUNIPER_IFML_COLLECTOR          53

#define JUNIPER_IFML_AGGREGATOR         54

#define JUNIPER_IFML_LAPD               55

#define JUNIPER_IFML_PPPOE              56

#define JUNIPER_IFML_PPP_SUBORDINATE    57

#define JUNIPER_IFML_CISCOHDLC_SUBORDINATE  58

#define JUNIPER_IFML_DFC                59

#define JUNIPER_IFML_PICPEER            60

static const value_string juniper_ifmt_vals[] = {

  { JUNIPER_IFML_ETHER, "Ethernet" },

  { JUNIPER_IFML_FDDI, "FDDI" },

  { JUNIPER_IFML_TOKENRING, "Token-Ring" },

  { JUNIPER_IFML_PPP, "PPP" },

  { JUNIPER_IFML_PPP_SUBORDINATE, "PPP-Subordinate" },

  { JUNIPER_IFML_FRAMERELAY, "Frame-Relay" },

  { JUNIPER_IFML_CISCOHDLC, "Cisco-HDLC" },

  { JUNIPER_IFML_SMDSDXI, "SMDS-DXI" },

  { JUNIPER_IFML_ATMPVC, "ATM-PVC" },

  { JUNIPER_IFML_PPP_CCC, "PPP-CCC" },

  { JUNIPER_IFML_FRAMERELAY_CCC, "Frame-Relay-CCC" },

  { JUNIPER_IFML_FRAMERELAY_EXT_CCC, "Extended FR-CCC" },

  { JUNIPER_IFML_IPIP, "IP-over-IP" },

  { JUNIPER_IFML_GRE, "GRE" },

  { JUNIPER_IFML_PIM, "PIM-Encapsulator" },

  { JUNIPER_IFML_PIMD, "PIM-Decapsulator" },

  { JUNIPER_IFML_CISCOHDLC_CCC, "Cisco-HDLC-CCC" },

  { JUNIPER_IFML_VLAN_CCC, "VLAN-CCC" },

  { JUNIPER_IFML_EXTENDED_VLAN_CCC, "Extended-VLAN-CCC" },

  { JUNIPER_IFML_MLPPP, "Multilink-PPP" },

  { JUNIPER_IFML_MLFR, "Multilink-FR" },

  { JUNIPER_IFML_MFR, "Multilink-FR-UNI-NNI" },

  { JUNIPER_IFML_ML, "Multilink" },

  { JUNIPER_IFML_LS, "LinkService" },

  { JUNIPER_IFML_LSI, "LSI" },

  { JUNIPER_IFML_ATM_CELLRELAY_CCC, "ATM-CCC-Cell-Relay" },

  { JUNIPER_IFML_CRYPTO, "IPSEC-over-IP" },

  { JUNIPER_IFML_GGSN, "GGSN" },

  { JUNIPER_IFML_PPP_TCC, "PPP-TCC" },

  { JUNIPER_IFML_FRAMERELAY_TCC, "Frame-Relay-TCC" },

  { JUNIPER_IFML_FRAMERELAY_EXT_TCC, "Extended FR-TCC" },

  { JUNIPER_IFML_CISCOHDLC_TCC, "Cisco-HDLC-TCC" },

  { JUNIPER_IFML_ETHERNET_CCC, "Ethernet-CCC" },

  { JUNIPER_IFML_VT, "VPN-Loopback-tunnel" },

  { JUNIPER_IFML_ETHER_OVER_ATM, "Ethernet-over-ATM" },

  { JUNIPER_IFML_ETHER_VPLS_OVER_ATM, "Ethernet-VPLS-over-ATM" },

  { JUNIPER_IFML_MONITOR, "Monitor" },

  { JUNIPER_IFML_ETHERNET_TCC, "Ethernet-TCC" },

  { JUNIPER_IFML_VLAN_TCC, "VLAN-TCC" },

  { JUNIPER_IFML_EXTENDED_VLAN_TCC, "Extended-VLAN-TCC" },

  { JUNIPER_IFML_CONTROLLER, "Controller" },

  { JUNIPER_IFML_ETHERNET_VPLS, "VPLS" },

  { JUNIPER_IFML_ETHERNET_VLAN_VPLS, "VLAN-VPLS" },

  { JUNIPER_IFML_ETHERNET_EXTENDED_VLAN_VPLS, "Extended-VLAN-VPLS" },

  { JUNIPER_IFML_LT, "Logical-tunnel" },

  { JUNIPER_IFML_SERVICES, "General-Services" },

  { JUNIPER_IFML_PPPOE, "PPPoE" },

  { JUNIPER_IFML_ETHERNET_FLEX, "Flexible-Ethernet-Services" },

  { JUNIPER_IFML_FRAMERELAY_FLEX, "Flexible-FrameRelay" },

  { JUNIPER_IFML_COLLECTOR, "Flow-collection" },

  { JUNIPER_IFML_PICPEER, "PIC Peer" },

  { JUNIPER_IFML_DFC, "Dynamic-Flow-Capture" },

  {0,                    NULL}

};

#define JUNIPER_IFLE_ATM_SNAP           2

#define JUNIPER_IFLE_ATM_NLPID          3

#define JUNIPER_IFLE_ATM_VCMUX          4

#define JUNIPER_IFLE_ATM_LLC            5

#define JUNIPER_IFLE_ATM_PPP_VCMUX      6

#define JUNIPER_IFLE_ATM_PPP_LLC        7

#define JUNIPER_IFLE_ATM_PPP_FUNI       8

#define JUNIPER_IFLE_ATM_CCC            9

#define JUNIPER_IFLE_FR_NLPID           10

#define JUNIPER_IFLE_FR_SNAP            11

#define JUNIPER_IFLE_FR_PPP             12

#define JUNIPER_IFLE_FR_CCC             13

#define JUNIPER_IFLE_ENET2              14

#define JUNIPER_IFLE_IEEE8023_SNAP      15

#define JUNIPER_IFLE_IEEE8023_LLC       16

#define JUNIPER_IFLE_PPP                17

#define JUNIPER_IFLE_CISCOHDLC          18

#define JUNIPER_IFLE_PPP_CCC            19

#define JUNIPER_IFLE_IPIP_NULL          20

#define JUNIPER_IFLE_PIM_NULL           21

#define JUNIPER_IFLE_GRE_NULL           22

#define JUNIPER_IFLE_GRE_PPP            23

#define JUNIPER_IFLE_PIMD_DECAPS        24

#define JUNIPER_IFLE_CISCOHDLC_CCC      25

#define JUNIPER_IFLE_ATM_CISCO_NLPID    26

#define JUNIPER_IFLE_VLAN_CCC           27

#define JUNIPER_IFLE_MLPPP              28

#define JUNIPER_IFLE_MLFR               29

#define JUNIPER_IFLE_LSI_NULL           30

#define JUNIPER_IFLE_AGGREGATE_UNUSED   31

#define JUNIPER_IFLE_ATM_CELLRELAY_CCC  32

#define JUNIPER_IFLE_CRYPTO             33

#define JUNIPER_IFLE_GGSN               34

#define JUNIPER_IFLE_ATM_TCC            35

#define JUNIPER_IFLE_FR_TCC             36

#define JUNIPER_IFLE_PPP_TCC            37

#define JUNIPER_IFLE_CISCOHDLC_TCC      38

#define JUNIPER_IFLE_ETHERNET_CCC       39

#define JUNIPER_IFLE_VT                 40

#define JUNIPER_IFLE_ATM_EOA_LLC        41

#define JUNIPER_IFLE_EXTENDED_VLAN_CCC          42

#define JUNIPER_IFLE_ATM_SNAP_TCC       43

#define JUNIPER_IFLE_MONITOR            44

#define JUNIPER_IFLE_ETHERNET_TCC       45

#define JUNIPER_IFLE_VLAN_TCC           46

#define JUNIPER_IFLE_EXTENDED_VLAN_TCC  47

#define JUNIPER_IFLE_MFR                48

#define JUNIPER_IFLE_ETHERNET_VPLS      49

#define JUNIPER_IFLE_ETHERNET_VLAN_VPLS 50

#define JUNIPER_IFLE_ETHERNET_EXTENDED_VLAN_VPLS 51

#define JUNIPER_IFLE_SERVICES           52

#define JUNIPER_IFLE_ATM_ETHER_VPLS_ATM_LLC                53

#define JUNIPER_IFLE_FR_PORT_CCC        54

#define JUNIPER_IFLE_ATM_MLPPP_LLC      55

#define JUNIPER_IFLE_ATM_EOA_CCC        56

#define JUNIPER_IFLE_LT_VLAN            57

#define JUNIPER_IFLE_COLLECTOR          58

#define JUNIPER_IFLE_AGGREGATOR         59

#define JUNIPER_IFLE_LAPD               60

#define JUNIPER_IFLE_ATM_PPPOE_LLC          61

#define JUNIPER_IFLE_ETHERNET_PPPOE         62

#define JUNIPER_IFLE_PPPOE                  63

#define JUNIPER_IFLE_PPP_SUBORDINATE        64

#define JUNIPER_IFLE_CISCOHDLC_SUBORDINATE  65

#define JUNIPER_IFLE_DFC                    66

#define JUNIPER_IFLE_PICPEER                67

static const value_string juniper_ifle_vals[] = {

  { JUNIPER_IFLE_AGGREGATOR, "Aggregator" },

  { JUNIPER_IFLE_ATM_CCC, "CCC over ATM" },

  { JUNIPER_IFLE_ATM_CELLRELAY_CCC, "ATM CCC Cell Relay" },

  { JUNIPER_IFLE_ATM_CISCO_NLPID, "CISCO compatible NLPID" },

  { JUNIPER_IFLE_ATM_EOA_CCC, "Ethernet over ATM CCC" },

  { JUNIPER_IFLE_ATM_EOA_LLC, "Ethernet over ATM LLC" },

  { JUNIPER_IFLE_ATM_ETHER_VPLS_ATM_LLC, "Ethernet VPLS over ATM LLC" },

  { JUNIPER_IFLE_ATM_LLC, "ATM LLC" },

  { JUNIPER_IFLE_ATM_MLPPP_LLC, "MLPPP over ATM LLC" },

  { JUNIPER_IFLE_ATM_NLPID, "ATM NLPID" },

  { JUNIPER_IFLE_ATM_PPPOE_LLC, "PPPoE over ATM LLC" },

  { JUNIPER_IFLE_ATM_PPP_FUNI, "PPP over FUNI" },

  { JUNIPER_IFLE_ATM_PPP_LLC, "PPP over ATM LLC" },

  { JUNIPER_IFLE_ATM_PPP_VCMUX, "PPP over ATM VCMUX" },

  { JUNIPER_IFLE_ATM_SNAP, "ATM SNAP" },

  { JUNIPER_IFLE_ATM_SNAP_TCC, "ATM SNAP TCC" },

  { JUNIPER_IFLE_ATM_TCC, "ATM VCMUX TCC" },

  { JUNIPER_IFLE_ATM_VCMUX, "ATM VCMUX" },

  { JUNIPER_IFLE_CISCOHDLC, "C-HDLC" },

  { JUNIPER_IFLE_CISCOHDLC_CCC, "C-HDLC CCC" },

  { JUNIPER_IFLE_CISCOHDLC_SUBORDINATE, "C-HDLC via dialer" },

  { JUNIPER_IFLE_CISCOHDLC_TCC, "C-HDLC TCC" },

  { JUNIPER_IFLE_COLLECTOR, "Collector" },

  { JUNIPER_IFLE_CRYPTO, "Crypto" },

  { JUNIPER_IFLE_ENET2, "Ethernet" },

  { JUNIPER_IFLE_ETHERNET_CCC, "Ethernet CCC" },

  { JUNIPER_IFLE_ETHERNET_EXTENDED_VLAN_VPLS, "Extended VLAN VPLS" },

  { JUNIPER_IFLE_ETHERNET_PPPOE, "PPPoE over Ethernet" },

  { JUNIPER_IFLE_ETHERNET_TCC, "Ethernet TCC" },

  { JUNIPER_IFLE_ETHERNET_VLAN_VPLS, "VLAN VPLS" },

  { JUNIPER_IFLE_ETHERNET_VPLS, "VPLS" },

  { JUNIPER_IFLE_EXTENDED_VLAN_CCC, "Extended VLAN CCC" },

  { JUNIPER_IFLE_EXTENDED_VLAN_TCC, "Extended VLAN TCC" },

  { JUNIPER_IFLE_FR_CCC, "FR CCC" },

  { JUNIPER_IFLE_FR_NLPID, "FR NLPID" },

  { JUNIPER_IFLE_FR_PORT_CCC, "FR Port CCC" },

  { JUNIPER_IFLE_FR_PPP, "FR PPP" },

  { JUNIPER_IFLE_FR_SNAP, "FR SNAP" },

  { JUNIPER_IFLE_FR_TCC, "FR TCC" },

  { JUNIPER_IFLE_GGSN, "GGSN" },

  { JUNIPER_IFLE_GRE_NULL, "GRE NULL" },

  { JUNIPER_IFLE_GRE_PPP, "PPP over GRE" },

  { JUNIPER_IFLE_IPIP_NULL, "IPIP" },

  { JUNIPER_IFLE_LAPD, "LAPD" },

  { JUNIPER_IFLE_LSI_NULL, "LSI Null" },

  { JUNIPER_IFLE_LT_VLAN, "LT VLAN" },

  { JUNIPER_IFLE_MFR, "MFR" },

  { JUNIPER_IFLE_MLFR, "MLFR" },

  { JUNIPER_IFLE_MLPPP, "MLPPP" },

  { JUNIPER_IFLE_MONITOR, "Monitor" },

  { JUNIPER_IFLE_PIMD_DECAPS, "PIMd" },

  { JUNIPER_IFLE_PIM_NULL, "PIM Null" },

  { JUNIPER_IFLE_PPP, "PPP" },

  { JUNIPER_IFLE_PPPOE, "PPPoE" },

  { JUNIPER_IFLE_PPP_CCC, "PPP CCC" },

  { JUNIPER_IFLE_PPP_SUBORDINATE, "" },

  { JUNIPER_IFLE_PPP_TCC, "PPP TCC" },

  { JUNIPER_IFLE_SERVICES, "General Services" },

  { JUNIPER_IFLE_VLAN_CCC, "VLAN CCC" },

  { JUNIPER_IFLE_VLAN_TCC, "VLAN TCC" },

  { JUNIPER_IFLE_VT, "VT" },

  {0,                    NULL}

};

static int proto_juniper;

static int hf_juniper_magic;

static int hf_juniper_direction;

static int hf_juniper_l2hdr_presence;

static int hf_juniper_ext_total_len;

static int hf_juniper_cookie_len;

static int hf_juniper_atm1_cookie;

static int hf_juniper_atm2_cookie;

static int hf_juniper_mlpic_cookie;

static int hf_juniper_lspic_cookie;

static int hf_juniper_aspic_cookie;

static int hf_juniper_vlan;

static int hf_juniper_proto;

static int hf_juniper_payload_type;

static int hf_juniper_encap_type;

static int hf_juniper_ext_ifd;

static int hf_juniper_ext_ifl;

static int hf_juniper_ext_unit;

static int hf_juniper_ext_ifmt;

static int hf_juniper_ext_ifle;

static int hf_juniper_ext_ttp_ifmt;

static int hf_juniper_ext_ttp_ifle;

static int hf_juniper_unknown_data;

static expert_field ei_juniper_no_magic;

static expert_field ei_juniper_vn_incorrect_format;

static int hf_juniper_vn_host_ip;

static int hf_juniper_vn_src;

static int hf_juniper_vn_dst;

static int hf_juniper_vn_flags;

static int hf_juniper_vn_flag_alert;

static int hf_juniper_vn_flag_drop;

static int hf_juniper_vn_flag_deny;

static int hf_juniper_vn_flag_log;

static int hf_juniper_vn_flag_pass;

static int hf_juniper_vn_flag_reject;

static int hf_juniper_vn_flag_mirror;

static int hf_juniper_vn_flag_direction;

static int hf_juniper_st_eth_dst;

static int hf_juniper_st_eth_src;

static int hf_juniper_st_eth_type;

static int hf_juniper_st_ip_len;

static int hf_juniper_st_ip_proto;

static int hf_juniper_st_esp_spi;

static int hf_juniper_st_esp_seq;

static int ett_juniper;

static int ett_juniper_vn_flags;

static int ett_juniper_st_eth;

static int ett_juniper_st_ip;

static int ett_juniper_st_esp;

static int ett_juniper_st_unknown;

static dissector_table_t payload_table;

static int dissect_juniper_payload_proto(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, proto_tree *juniper_subtree, unsigned proto, unsigned offset);

static void dissect_juniper_atm(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, uint16_t atm_pictype);

static bool ppp_heuristic_guess(uint16_t proto);

static unsigned ip_heuristic_guess(uint8_t ip_header_byte);

static unsigned juniper_svc_cookie_len (uint64_t cookie);

static unsigned juniper_svc_cookie_proto (uint64_t cookie, uint16_t pictype, uint8_t flags);

static const value_string juniper_proto_vals[] = {

  {JUNIPER_PROTO_IP, "IPv4"},

  {JUNIPER_PROTO_MPLS_IP, "MPLS->IPv4"},

  {JUNIPER_PROTO_IP_MPLS, "IPv4->MPLS"},

  {JUNIPER_PROTO_IP6, "IPv6"},

  {JUNIPER_PROTO_MPLS_IP6, "MPLS->IPv6"},

  {JUNIPER_PROTO_IP6_MPLS, "IPv6->MPLS"},

  {JUNIPER_PROTO_PPP, "PPP"},

  {JUNIPER_PROTO_CLNP, "CLNP"},

  {JUNIPER_PROTO_MPLS_CLNP, "MPLS->CLNP"},

  {JUNIPER_PROTO_CLNP_MPLS, "CLNP->MPLS"},

  {JUNIPER_PROTO_ISO, "OSI"},

  {JUNIPER_PROTO_MPLS, "MPLS"},

  {JUNIPER_PROTO_LLC, "LLC"},

  {JUNIPER_PROTO_LLC_SNAP, "LLC/SNAP"},

  {JUNIPER_PROTO_ETHER, "Ethernet"},

  {JUNIPER_PROTO_OAM, "ATM OAM Cell"},

  {JUNIPER_PROTO_Q933, "Q.933"},

  {JUNIPER_PROTO_FRELAY, "Frame-Relay"},

  {JUNIPER_PROTO_CHDLC, "C-HDLC"},

  {0,                    NULL}

};

static int * const vn_flags[] = {

  &hf_juniper_vn_flag_direction,

  &hf_juniper_vn_flag_mirror,

  &hf_juniper_vn_flag_reject,

  &hf_juniper_vn_flag_pass,

  &hf_juniper_vn_flag_log,

  &hf_juniper_vn_flag_deny,

  &hf_juniper_vn_flag_drop,

  &hf_juniper_vn_flag_alert,

  NULL

  };

/* return a TLV value based on TLV length and TLV type (host/network order) */

static int

juniper_ext_get_tlv_value(tvbuff_t *tvb, unsigned tlv_type, unsigned tlv_len, unsigned offset) {

  int tlv_value;

  if (tlv_type < 128) {

    /* TLVs < 128 are little-endian / host order encoded */

    switch (tlv_len) {

    case 1:

      tlv_value = tvb_get_uint8(tvb, offset);

      break;

    case 2:

      tlv_value = tvb_get_letohs(tvb, offset);

      break;

    case 3:

      tlv_value = tvb_get_letoh24(tvb, offset);

      break;

    case 4:

      tlv_value = tvb_get_letohl(tvb, offset);

      break;

    default:

      tlv_value = -1;

      break;

    }

  } else {

    /* TLVs >= 128 are big-endian / network order encoded */

    switch (tlv_len) {

    case 1:

      tlv_value = tvb_get_uint8(tvb, offset);

      break;

    case 2:

      tlv_value = tvb_get_ntohs(tvb, offset);

      break;

    case 3:

      tlv_value = tvb_get_ntoh24(tvb, offset);

      break;

    case 4:

      tlv_value = tvb_get_ntohl(tvb, offset);

      break;

    default:

      tlv_value = -1;

      break;

    }

  }

  return tlv_value;

}

/* generic juniper header dissector  */

static int

dissect_juniper_header(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, proto_tree *juniper_subtree, uint8_t *flags)

{

  proto_item *tisub, *magic_item;

  uint8_t    proto,ext_type,ext_len;

  uint16_t   ext_total_len,ext_offset=6,hdr_len;

  uint32_t   magic_number,ext_val;

  proto_tree *juniper_ext_subtree = NULL, *juniper_ext_subtree_item = NULL;

  magic_number = tvb_get_ntoh24(tvb, 0);

  *flags = tvb_get_uint8(tvb, 3);

  magic_item = proto_tree_add_item(juniper_subtree, hf_juniper_magic, tvb, 0, 3, ENC_BIG_ENDIAN);

  /* be liberal with magic-number detection -

   * some older JUNOS releases (e.g. 6.4),

   * which are still in the field do not generate magic-numbers */

  if (magic_number != JUNIPER_PCAP_MAGIC) {

    expert_add_info(pinfo, magic_item, &ei_juniper_no_magic);

    return 0;

  }

  proto_tree_add_item(juniper_subtree, hf_juniper_direction, tvb, 3, 1, ENC_NA);

  proto_tree_add_item(juniper_subtree, hf_juniper_l2hdr_presence, tvb, 3, 1, ENC_NA);

  /* calculate hdr_len before cookie, payload */

  /* meta-info extensions (JUNOS >= 7.5) ? */

  if ((*flags & JUNIPER_FLAG_EXT) == JUNIPER_FLAG_EXT) {

    ext_total_len = tvb_get_ntohs(tvb,4);

    hdr_len = 6 + ext_total_len; /* MGC,flags,ext_total_len */

    tisub = proto_tree_add_uint (juniper_subtree, hf_juniper_ext_total_len, tvb, 4, 2, ext_total_len);

    juniper_ext_subtree = proto_item_add_subtree(tisub, ett_juniper);

    while (ext_total_len > EXT_TLV_HEADER_SIZE) {

      ext_type = tvb_get_uint8(tvb, ext_offset);

      ext_len = tvb_get_uint8(tvb, ext_offset+1);

      if (ext_len == 0 || ext_len > (ext_total_len - EXT_TLV_HEADER_SIZE)) /* a few sanity checks */

        break;

      juniper_ext_subtree_item = proto_tree_add_subtree_format(juniper_ext_subtree, tvb, ext_offset, EXT_TLV_HEADER_SIZE + ext_len,

                                   ett_juniper, &tisub, "%s Extension TLV #%u, length: %u",

                                   val_to_str_const(ext_type, ext_tlv_vals, "Unknown"),

                                   ext_type,

                                   ext_len);

      ext_val = juniper_ext_get_tlv_value(tvb, ext_type, ext_len, ext_offset+EXT_TLV_HEADER_SIZE);

      switch (ext_type) {

      case EXT_TLV_IFD_MEDIATYPE:

        proto_tree_add_uint(juniper_ext_subtree_item, hf_juniper_ext_ifmt,

                                    tvb, ext_offset+EXT_TLV_HEADER_SIZE, ext_len, ext_val);

        break;

      case EXT_TLV_TTP_IFD_MEDIATYPE:

        proto_tree_add_uint(juniper_ext_subtree_item, hf_juniper_ext_ttp_ifmt,

                                    tvb, ext_offset+EXT_TLV_HEADER_SIZE, ext_len, ext_val);

        break;

      case EXT_TLV_IFL_ENCAPS:

        proto_tree_add_uint(juniper_ext_subtree_item, hf_juniper_ext_ifle,

                                    tvb, ext_offset+EXT_TLV_HEADER_SIZE, ext_len, ext_val);

        break;

      case EXT_TLV_TTP_IFL_ENCAPS:

        proto_tree_add_uint(juniper_ext_subtree_item, hf_juniper_ext_ttp_ifle,

                                    tvb, ext_offset+EXT_TLV_HEADER_SIZE, ext_len, ext_val);

        break;

      case EXT_TLV_IFL_IDX:

        proto_tree_add_uint(juniper_ext_subtree_item, hf_juniper_ext_ifl,

                            tvb, ext_offset+EXT_TLV_HEADER_SIZE, ext_len, ext_val);

        break;

      case EXT_TLV_IFL_UNIT:

        proto_tree_add_uint(juniper_ext_subtree_item, hf_juniper_ext_unit,

                            tvb, ext_offset+EXT_TLV_HEADER_SIZE, ext_len, ext_val);

        break;

      case EXT_TLV_IFD_IDX:

        proto_tree_add_uint(juniper_ext_subtree_item, hf_juniper_ext_ifd,

                            tvb, ext_offset+EXT_TLV_HEADER_SIZE, ext_len, ext_val);

        break;

      case EXT_TLV_IFD_NAME: /* FIXME print ifname string - lets fall-through for now */

      default:

        proto_item_append_text(tisub, "Unknown");

        break;

      }

      ext_offset += EXT_TLV_HEADER_SIZE + ext_len;

      ext_total_len -= EXT_TLV_HEADER_SIZE + ext_len;

    }

  } else

    hdr_len = 4; /* MGC,flags */

  if ((*flags & JUNIPER_FLAG_NO_L2) == JUNIPER_FLAG_NO_L2) { /* no link header present ? */

    proto = tvb_get_letohl(tvb,hdr_len); /* proto is stored in host-order */

    dissect_juniper_payload_proto(tvb, pinfo, tree, juniper_subtree, proto, hdr_len + 4);

    return -1;

  }

  return hdr_len; /* bytes parsed */

}

/* print the payload protocol  */

static int

dissect_juniper_payload_proto(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,

                              proto_tree *juniper_subtree, unsigned proto, unsigned offset)

{

  proto_item *ti;

  tvbuff_t   *next_tvb;

  ti = proto_tree_add_uint(juniper_subtree, hf_juniper_payload_type, tvb, offset, 0, proto);

  proto_item_set_generated(ti);

  switch (proto)

  {

    /* XXX - 0xa248 stands for ??? */

    case 0xa248:

      proto_tree_add_item(juniper_subtree, hf_juniper_unknown_data, tvb, offset, 4, ENC_NA);

      offset += 4;

      proto = JUNIPER_PROTO_IP;

      break;

    default:

      break;

  }

  proto_item_set_len(juniper_subtree, offset);

  next_tvb = tvb_new_subset_remaining(tvb, offset);

  if (!dissector_try_uint(payload_table, proto, next_tvb, pinfo, tree))

  {

    /* XXX - left in for posterity, dissection was never done */

    /* case JUNIPER_PROTO_OAM: FIXME call OAM dissector without leading HEC byte */

    call_data_dissector(next_tvb, pinfo, tree);

  }

  return 0;

}

/* MLFR dissector */

static int

dissect_juniper_mlfr(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)

{

  proto_item *ti;

  proto_tree* juniper_subtree;

  unsigned   offset;

  int        bytes_processed;

  uint8_t    flags;

  uint64_t   aspic_cookie;

  uint32_t   lspic_cookie;

  uint16_t   mlpic_cookie;

  unsigned   proto,cookie_len;

  col_set_str(pinfo->cinfo, COL_PROTOCOL, "Juniper MLFR");

  col_clear(pinfo->cinfo, COL_INFO);

  offset = 0;

  juniper_subtree = proto_tree_add_subtree(tree, tvb, offset, 4, ett_juniper, NULL, "Juniper Multi-Link Frame-Relay (FRF.15)");

  /* parse header, match mgc, extract flags and build first tree */

  bytes_processed = dissect_juniper_header(tvb, pinfo, tree, juniper_subtree, &flags);

  if(bytes_processed == -1)

    return 4;

  else

    offset+=bytes_processed;

  aspic_cookie = tvb_get_ntoh64(tvb,offset);

  proto = juniper_svc_cookie_proto(aspic_cookie, JUNIPER_PIC_MLFR, flags);

  cookie_len = juniper_svc_cookie_len(aspic_cookie);

  if (cookie_len == AS_PIC_COOKIE_LEN)

    proto_tree_add_uint64(juniper_subtree, hf_juniper_aspic_cookie,

                          tvb, offset, AS_PIC_COOKIE_LEN, aspic_cookie);

  if (cookie_len == LS_PIC_COOKIE_LEN) {

    lspic_cookie = tvb_get_ntohl(tvb,offset);

    proto_tree_add_uint(juniper_subtree, hf_juniper_lspic_cookie,

                        tvb, offset, LS_PIC_COOKIE_LEN, lspic_cookie);

  }

  offset += cookie_len;

  mlpic_cookie = tvb_get_ntohs(tvb, offset);

  /* AS-PIC IS-IS */

  if (cookie_len == AS_PIC_COOKIE_LEN &&

      proto == JUNIPER_PROTO_UNKNOWN &&

      tvb_get_uint8(tvb,offset) == JUNIPER_HDR_LLC_UI) {

    offset += 1;

    proto = JUNIPER_PROTO_ISO;

  }

  /* LS-PIC IS-IS */

  if (cookie_len == LS_PIC_COOKIE_LEN) {

    if ( tvb_get_ntohs(tvb,offset) == JUNIPER_HDR_LLC_UI ||

         tvb_get_ntohs(tvb,offset) == (JUNIPER_HDR_LLC_UI<<8)) {

      offset += 2;

    }

  }

  /* LS-PIC ? */

  if (cookie_len == LS_PIC_COOKIE_LEN && tvb_get_uint8(tvb,offset) == JUNIPER_HDR_LLC_UI) {

    offset += 1;

  }

  /* child link of an LS-PIC bundle ? */

  if (cookie_len == 0 && tvb_get_ntohs(tvb,offset+ML_PIC_COOKIE_LEN) ==

      (JUNIPER_HDR_LLC_UI<<8 | NLPID_Q_933)) {

    cookie_len = ML_PIC_COOKIE_LEN;

    proto_tree_add_uint(juniper_subtree, hf_juniper_mlpic_cookie,

                        tvb, offset, ML_PIC_COOKIE_LEN, mlpic_cookie);

    offset += 3;

    proto = JUNIPER_PROTO_Q933;

  }

  /* child link of an ML-, LS-, AS-PIC bundle / ML-PIC bundle ? */

  if (cookie_len == 0) {

    if (tvb_get_ntohs(tvb,offset+ML_PIC_COOKIE_LEN) == JUNIPER_HDR_LLC_UI ||

        tvb_get_ntohs(tvb,offset+ML_PIC_COOKIE_LEN) == (JUNIPER_HDR_LLC_UI<<8)) {

      cookie_len = ML_PIC_COOKIE_LEN;

      proto_tree_add_uint(juniper_subtree, hf_juniper_mlpic_cookie,

                          tvb, offset, ML_PIC_COOKIE_LEN, mlpic_cookie);

      offset += 4;

      proto = JUNIPER_PROTO_ISO;

    }

  }

  /* ML-PIC bundle ? */

  if (cookie_len == 0 && tvb_get_uint8(tvb,offset+ML_PIC_COOKIE_LEN) == JUNIPER_HDR_LLC_UI) {

    cookie_len = ML_PIC_COOKIE_LEN;

    proto_tree_add_uint(juniper_subtree, hf_juniper_mlpic_cookie,

                        tvb, offset, ML_PIC_COOKIE_LEN, mlpic_cookie);

    offset += 3;

    proto = JUNIPER_PROTO_ISO;

  }

  ti = proto_tree_add_uint(juniper_subtree, hf_juniper_cookie_len, tvb, offset, 0, cookie_len);

  proto_item_set_generated(ti);

  dissect_juniper_payload_proto(tvb, pinfo, tree, juniper_subtree, proto, offset);

  return tvb_captured_length(tvb);

}

/* MLPPP dissector */

static int

dissect_juniper_mlppp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)

{

  proto_item *ti;

  proto_tree* juniper_subtree;

  unsigned   offset;

  int        bytes_processed;

  uint8_t    flags;

  uint64_t   aspic_cookie;

  uint32_t   lspic_cookie;

  uint16_t   mlpic_cookie;

  unsigned   proto,cookie_len;

  col_set_str(pinfo->cinfo, COL_PROTOCOL, "Juniper MLPPP");

  col_clear(pinfo->cinfo, COL_INFO);

  offset = 0;

  juniper_subtree = proto_tree_add_subtree(tree, tvb, offset, 4, ett_juniper, NULL, "Juniper MLPPP");

  /* parse header, match mgc, extract flags and build first tree */

  bytes_processed = dissect_juniper_header(tvb, pinfo, tree, juniper_subtree, &flags);

  if(bytes_processed == -1)

    return 4;

  else

    offset+=bytes_processed;

  aspic_cookie = tvb_get_ntoh64(tvb,offset);

  proto = juniper_svc_cookie_proto(aspic_cookie, JUNIPER_PIC_MLPPP, flags);

  cookie_len = juniper_svc_cookie_len(aspic_cookie);

  if (cookie_len == AS_PIC_COOKIE_LEN)

    proto_tree_add_uint64(juniper_subtree, hf_juniper_aspic_cookie,

                          tvb, offset, AS_PIC_COOKIE_LEN, aspic_cookie);

  if (cookie_len == LS_PIC_COOKIE_LEN) {

    lspic_cookie = tvb_get_ntohl(tvb,offset);

    proto_tree_add_uint(juniper_subtree, hf_juniper_lspic_cookie,

                        tvb, offset, LS_PIC_COOKIE_LEN, lspic_cookie);

  }

  /* no cookie pattern identified - lets guess from now on */

  /* child link of an LS-PIC bundle ? */

  if (cookie_len == 0 && tvb_get_ntohs(tvb, offset) == JUNIPER_HDR_PPP) {

    proto = JUNIPER_PROTO_PPP;

    offset += 2;

  }

  /* ML-PIC ? */

  if (cookie_len == 0 && ppp_heuristic_guess(tvb_get_ntohs(tvb, offset+2))) {

    proto = JUNIPER_PROTO_PPP;

    cookie_len = 2;

    mlpic_cookie = tvb_get_ntohs(tvb, offset);

    proto_tree_add_uint(juniper_subtree, hf_juniper_mlpic_cookie,

                        tvb, offset, ML_PIC_COOKIE_LEN, mlpic_cookie);

  }

  /* child link of an ML-PIC bundle ? */

  if (cookie_len == 0 && ppp_heuristic_guess(tvb_get_ntohs(tvb, offset))) {

    proto = JUNIPER_PROTO_PPP;

  }

  ti = proto_tree_add_uint(juniper_subtree, hf_juniper_cookie_len, tvb, offset, 0, cookie_len);

  proto_item_set_generated(ti);

  offset += cookie_len;

  dissect_juniper_payload_proto(tvb, pinfo, tree, juniper_subtree, proto, offset);

  return tvb_captured_length(tvb);

}

/* PPPoE dissector */

static int

dissect_juniper_pppoe(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)

{

  proto_tree* juniper_subtree;

  unsigned   offset;

  int        bytes_processed;

  uint8_t    flags;

  col_set_str(pinfo->cinfo, COL_PROTOCOL, "Juniper PPPoE");

  col_clear(pinfo->cinfo, COL_INFO);

  offset = 0;

  juniper_subtree = proto_tree_add_subtree(tree, tvb, offset, 4, ett_juniper, NULL, "Juniper PPPoE PIC");

  /* parse header, match mgc, extract flags and build first tree */

  bytes_processed = dissect_juniper_header(tvb, pinfo, tree, juniper_subtree, &flags);

  if(bytes_processed == -1)

    return 4;

  else

    offset+=bytes_processed;

  dissect_juniper_payload_proto(tvb, pinfo, tree, juniper_subtree, JUNIPER_PROTO_ETHER, offset);

  return tvb_captured_length(tvb);

}

/* Ethernet dissector */

static int

dissect_juniper_ether(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)

{

  proto_tree* juniper_subtree;

  unsigned   offset;

  int        bytes_processed;

  uint8_t    flags;

  col_set_str(pinfo->cinfo, COL_PROTOCOL, "Juniper Ethernet");

  col_clear(pinfo->cinfo, COL_INFO);

  offset = 0;

  juniper_subtree = proto_tree_add_subtree(tree, tvb, offset, 4, ett_juniper, NULL, "Juniper Ethernet");

  /* parse header, match mgc, extract flags and build first tree */

  bytes_processed = dissect_juniper_header(tvb, pinfo, tree, juniper_subtree, &flags);

  if(bytes_processed == -1)

    return 4;

  else

    offset+=bytes_processed;

  dissect_juniper_payload_proto(tvb, pinfo, tree, juniper_subtree, JUNIPER_PROTO_ETHER, offset);

  return tvb_captured_length(tvb);

}

/* PPP dissector */

static int

dissect_juniper_ppp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)

{

  proto_tree* juniper_subtree;

  unsigned   offset;

  int        bytes_processed;

  uint8_t    flags;

  col_set_str(pinfo->cinfo, COL_PROTOCOL, "Juniper PPP");

  col_clear(pinfo->cinfo, COL_INFO);

  offset = 0;

  juniper_subtree = proto_tree_add_subtree(tree, tvb, offset, 4, ett_juniper, NULL, "Juniper PPP");

  /* parse header, match mgc, extract flags and build first tree */

  bytes_processed = dissect_juniper_header(tvb, pinfo, tree, juniper_subtree, &flags);

  if(bytes_processed == -1)

    return 4;

  else

    offset+=bytes_processed;

  dissect_juniper_payload_proto(tvb, pinfo, tree, juniper_subtree, JUNIPER_PROTO_PPP, offset+2);

  return tvb_captured_length(tvb);

}

/* Frame-Relay dissector */

static int

dissect_juniper_frelay(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)

{

  proto_tree* juniper_subtree;

  unsigned   offset;

  int        bytes_processed;

  uint8_t    flags;

  col_set_str(pinfo->cinfo, COL_PROTOCOL, "Juniper Frame-Relay");

  col_clear(pinfo->cinfo, COL_INFO);

  offset = 0;

  juniper_subtree = proto_tree_add_subtree(tree, tvb, offset, 4, ett_juniper, NULL, "Juniper Frame-Relay");

  /* parse header, match mgc, extract flags and build first tree */

  bytes_processed = dissect_juniper_header(tvb, pinfo, tree, juniper_subtree, &flags);

  if(bytes_processed == -1)

    return 4;

  else

    offset+=bytes_processed;

  dissect_juniper_payload_proto(tvb, pinfo, tree, juniper_subtree, JUNIPER_PROTO_FRELAY, offset);

  return tvb_captured_length(tvb);

}

/* C-HDLC dissector */

static int

dissect_juniper_chdlc(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)

{

  proto_tree* juniper_subtree;

  unsigned   offset = 0;

  int        bytes_processed;

  uint8_t    flags;

  col_set_str(pinfo->cinfo, COL_PROTOCOL, "Juniper C-HDLC");

  col_clear(pinfo->cinfo, COL_INFO);

  juniper_subtree = proto_tree_add_subtree(tree, tvb, offset, 4, ett_juniper, NULL, "Juniper C-HDLC");

  /* parse header, match mgc, extract flags and build first tree */

  bytes_processed = dissect_juniper_header(tvb, pinfo, tree, juniper_subtree, &flags);

  if(bytes_processed == -1)

    return 4;

  else

    offset+=bytes_processed;

  dissect_juniper_payload_proto(tvb, pinfo, tree, juniper_subtree, JUNIPER_PROTO_CHDLC, offset);

  return tvb_captured_length(tvb);

}

/* wrapper for passing the PIC type to the generic ATM dissector */

static int

dissect_juniper_atm1(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)

{

  dissect_juniper_atm(tvb,pinfo,tree, JUNIPER_PIC_ATM1);

  return tvb_captured_length(tvb);

}

/* wrapper for passing the PIC type to the generic ATM dissector */

static int

dissect_juniper_atm2(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data _U_)

{

  dissect_juniper_atm(tvb,pinfo,tree, JUNIPER_PIC_ATM2);

  return tvb_captured_length(tvb);

}