/* packet-zbee-nwk.c

 * Dissector routines for the ZigBee Network Layer (NWK)

 * By Owen Kirby <osk@exegin.com>

 * Copyright 2009 Exegin Technologies Limited

 *

 * Wireshark - Network traffic analyzer

 * By Gerald Combs <gerald@wireshark.org>

 * Copyright 1998 Gerald Combs

 *

 * SPDX-License-Identifier: GPL-2.0-or-later

 */

/*  Include Files */

#include "config.h"

#include <epan/packet.h>

#include <epan/exceptions.h>

#include <epan/prefs.h>

#include <epan/addr_resolv.h>

#include <epan/address_types.h>

#include <epan/expert.h>

#include <epan/proto_data.h>

#include <epan/conversation_table.h>

#include <epan/conversation_filter.h>

#include <epan/tap.h>

#include <wsutil/bits_ctz.h>    /* for ws_ctz */

#include <wsutil/pint.h>

#include "packet-ieee802154.h"

#include "packet-zbee.h"

#include "packet-zbee-nwk.h"

#include "packet-zbee-aps.h"    /* for ZBEE_APS_CMD_KEY_LENGTH */

#include "packet-zbee-zdp.h"

#include "packet-zbee-security.h"

#include "packet-zbee-tlv.h"

/*************************/

/* Function Declarations */

/*************************/

/* Dissector Routines */

static int         dissect_zbee_nwk        (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data);

static void        dissect_zbee_nwk_cmd    (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, zbee_nwk_packet* packet);

static int         dissect_zbee_beacon     (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data);

static int         dissect_zbip_beacon     (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data);

static int         dissect_zbee_ie         (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data);

static void        dissect_ieee802154_zigbee_rejoin(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, unsigned *offset);

static void        dissect_ieee802154_zigbee_txpower(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree, unsigned *offset);

/* Command Dissector Helpers */

static unsigned    dissect_zbee_nwk_route_req  (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,

                                                zbee_nwk_packet * packet, unsigned offset);

static unsigned    dissect_zbee_nwk_route_rep  (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset, uint8_t version);

static unsigned    dissect_zbee_nwk_status     (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset);

static unsigned    dissect_zbee_nwk_leave      (tvbuff_t *tvb, proto_tree *tree, unsigned offset);

static unsigned    dissect_zbee_nwk_route_rec  (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,

                                                zbee_nwk_packet * packet, unsigned offset);

static unsigned    dissect_zbee_nwk_rejoin_req (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,

                                                zbee_nwk_packet * packet, unsigned offset);

static unsigned    dissect_zbee_nwk_rejoin_resp(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,

                                                zbee_nwk_packet * packet, unsigned offset);

static unsigned    dissect_zbee_nwk_link_status(tvbuff_t *tvb, proto_tree *tree, unsigned offset);

static unsigned    dissect_zbee_nwk_report     (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset);

static unsigned    dissect_zbee_nwk_update     (tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset);

static unsigned    dissect_zbee_nwk_ed_timeout_request(tvbuff_t *tvb, proto_tree *tree, unsigned offset);

static unsigned    dissect_zbee_nwk_ed_timeout_response(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset);

static unsigned    dissect_zbee_nwk_link_pwr_delta(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset);

static unsigned    dissect_zbee_nwk_commissioning_request(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,

                                                        zbee_nwk_packet * packet, unsigned offset);

static unsigned    dissect_zbee_nwk_commissioning_response(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree,

                                                         zbee_nwk_packet * packet, unsigned offset);

static void        proto_init_zbee_nwk         (void);

static void        proto_cleanup_zbee_nwk(void);

void               proto_register_zbee_nwk(void);

void               proto_reg_handoff_zbee_nwk(void);

/********************/

/* Global Variables */

/********************/

static int proto_zbee_nwk;

static int proto_zbee_beacon;

static int proto_zbip_beacon;

static int proto_zbee_ie;

static int hf_zbee_nwk_fcf;

static int hf_zbee_nwk_frame_type;

static int hf_zbee_nwk_proto_version;

static int hf_zbee_nwk_discover_route;

static int hf_zbee_nwk_multicast;

static int hf_zbee_nwk_security;

static int hf_zbee_nwk_source_route;

static int hf_zbee_nwk_ext_dst;

static int hf_zbee_nwk_ext_src;

static int hf_zbee_nwk_end_device_initiator;

static int hf_zbee_nwk_dst;

static int hf_zbee_nwk_src;

static int hf_zbee_nwk_addr;

static int hf_zbee_nwk_radius;

static int hf_zbee_nwk_seqno;

static int hf_zbee_nwk_mcast;

static int hf_zbee_nwk_mcast_mode;

static int hf_zbee_nwk_mcast_radius;

static int hf_zbee_nwk_mcast_max_radius;

static int hf_zbee_nwk_dst64;

static int hf_zbee_nwk_src64;

static int hf_zbee_nwk_addr64;

static int hf_zbee_nwk_src64_origin;

static int hf_zbee_nwk_relay_count;

static int hf_zbee_nwk_relay_index;

static int hf_zbee_nwk_relay;

static int hf_zbee_nwk_cmd_id;

static int hf_zbee_nwk_cmd_addr;

static int hf_zbee_nwk_cmd_route_id;

static int hf_zbee_nwk_cmd_route_dest;

static int hf_zbee_nwk_cmd_route_orig;

static int hf_zbee_nwk_cmd_route_resp;

static int hf_zbee_nwk_cmd_route_dest_ext;

static int hf_zbee_nwk_cmd_route_orig_ext;

static int hf_zbee_nwk_cmd_route_resp_ext;

static int hf_zbee_nwk_cmd_route_cost;

static int hf_zbee_nwk_cmd_route_options;

static int hf_zbee_nwk_cmd_route_opt_repair;

static int hf_zbee_nwk_cmd_route_opt_multicast;

static int hf_zbee_nwk_cmd_route_opt_dest_ext;

static int hf_zbee_nwk_cmd_route_opt_resp_ext;

static int hf_zbee_nwk_cmd_route_opt_orig_ext;

static int hf_zbee_nwk_cmd_route_opt_many_to_one;

static int hf_zbee_nwk_cmd_nwk_status;

static int hf_zbee_nwk_cmd_nwk_status_command_id;

static int hf_zbee_nwk_cmd_leave_rejoin;

static int hf_zbee_nwk_cmd_leave_request;

static int hf_zbee_nwk_cmd_leave_children;

static int hf_zbee_nwk_cmd_relay_count;

static int hf_zbee_nwk_cmd_relay_device;

static int hf_zbee_nwk_cmd_cinfo;

static int hf_zbee_nwk_cmd_cinfo_alt_coord;

static int hf_zbee_nwk_cmd_cinfo_type;

static int hf_zbee_nwk_cmd_cinfo_power;

static int hf_zbee_nwk_cmd_cinfo_idle_rx;

static int hf_zbee_nwk_cmd_cinfo_security;

static int hf_zbee_nwk_cmd_cinfo_alloc;

static int hf_zbee_nwk_cmd_rejoin_status;

static int hf_zbee_nwk_cmd_link_last;

static int hf_zbee_nwk_cmd_link_first;

static int hf_zbee_nwk_cmd_link_count;

static int hf_zbee_nwk_cmd_link_address;

static int hf_zbee_nwk_cmd_link_incoming_cost;

static int hf_zbee_nwk_cmd_link_outgoing_cost;

static int hf_zbee_nwk_cmd_report_type;

static int hf_zbee_nwk_cmd_report_count;

static int hf_zbee_nwk_cmd_update_type;

static int hf_zbee_nwk_cmd_update_count;

static int hf_zbee_nwk_cmd_update_id;

static int hf_zbee_nwk_panid;

static int hf_zbee_zboss_nwk_cmd_key;

static int hf_zbee_nwk_cmd_epid;

static int hf_zbee_nwk_cmd_end_device_timeout_request_enum;

static int hf_zbee_nwk_cmd_end_device_configuration;

static int hf_zbee_nwk_cmd_end_device_timeout_resp_status;

static int hf_zbee_nwk_cmd_end_device_timeout_resp_parent_info;

static int hf_zbee_nwk_cmd_prnt_info_mac_data_poll_keepalive_supported;

static int hf_zbee_nwk_cmd_prnt_info_ed_to_req_keepalive_supported;

static int hf_zbee_nwk_cmd_prnt_info_power_negotiation_supported;

static int hf_zbee_nwk_cmd_link_pwr_list_count;

static int hf_zbee_nwk_cmd_link_pwr_type;

static int hf_zbee_nwk_cmd_link_pwr_device_address;

static int hf_zbee_nwk_cmd_link_pwr_power_delta;

static int hf_zbee_nwk_cmd_association_type;

/*  ZigBee Beacons */

static int hf_zbee_beacon_protocol;

static int hf_zbee_beacon_stack_profile;

static int hf_zbee_beacon_version;

static int hf_zbee_beacon_router_capacity;

static int hf_zbee_beacon_depth;

static int hf_zbee_beacon_end_device_capacity;

static int hf_zbee_beacon_epid;

static int hf_zbee_beacon_tx_offset;

static int hf_zbee_beacon_update_id;

static int hf_zbip_beacon_allow_join;

static int hf_zbip_beacon_router_capacity;

static int hf_zbip_beacon_host_capacity;

static int hf_zbip_beacon_unsecure;

static int hf_zbip_beacon_network_id;

/* IEEE 802.15.4 IEs (Information Elements) */

static int hf_ieee802154_zigbee_ie;

static int hf_ieee802154_zigbee_ie_id;

static int hf_ieee802154_zigbee_ie_length;

static int hf_ieee802154_zigbee_ie_tx_power;

static int hf_ieee802154_zigbee_ie_source_addr;

static int hf_ieee802154_zigbee_rejoin_epid;

static int hf_ieee802154_zigbee_rejoin_source_addr;

static int ett_zbee_nwk;

static int ett_zbee_nwk_beacon;

static int ett_zbee_nwk_fcf;

static int ett_zbee_nwk_fcf_ext;

static int ett_zbee_nwk_mcast;

static int ett_zbee_nwk_route;

static int ett_zbee_nwk_cmd;

static int ett_zbee_nwk_cmd_options;

static int ett_zbee_nwk_cmd_cinfo;

static int ett_zbee_nwk_cmd_link;

static int ett_zbee_nwk_cmd_ed_to_rsp_prnt_info;

static int ett_zbee_nwk_cmd_link_pwr_struct;

static int ett_zbee_nwk_zigbee_ie_fields;

static int ett_zbee_nwk_ie_rejoin;

static int ett_zbee_nwk_header;

static int ett_zbee_nwk_header_ie;

static int ett_zbee_nwk_beacon_bitfield;

static expert_field ei_zbee_nwk_missing_payload;

static dissector_handle_t   aps_handle;

static dissector_handle_t   zbee_gp_handle;

static int zbee_nwk_address_type = -1;

static int zbee_nwk_tap;

/* Cached protocol identifier */

static int proto_ieee802154;

/********************/

/* Field Names      */

/********************/

/* Frame Types */

static const value_string zbee_nwk_frame_types[] = {

    { ZBEE_NWK_FCF_DATA,    "Data" },

    { ZBEE_NWK_FCF_CMD,     "Command" },

    { ZBEE_NWK_FCF_INTERPAN,"Interpan" },

    { 0, NULL }

};

/* Route Discovery Modes */

static const value_string zbee_nwk_discovery_modes[] = {

    { ZBEE_NWK_FCF_DISCOVERY_SUPPRESS,  "Suppress" },

    { ZBEE_NWK_FCF_DISCOVERY_ENABLE,    "Enable" },

    { ZBEE_NWK_FCF_DISCOVERY_FORCE,     "Force" },

    { 0, NULL }

};

/* Command Names*/

static const value_string zbee_nwk_cmd_names[] = {

    { ZBEE_NWK_CMD_ROUTE_REQ,           "Route Request" },

    { ZBEE_NWK_CMD_ROUTE_REPLY,         "Route Reply" },

    { ZBEE_NWK_CMD_NWK_STATUS,          "Network Status" },

    { ZBEE_NWK_CMD_LEAVE,               "Leave" },

    { ZBEE_NWK_CMD_ROUTE_RECORD,        "Route Record" },

    { ZBEE_NWK_CMD_REJOIN_REQ,          "Rejoin Request" },

    { ZBEE_NWK_CMD_REJOIN_RESP,         "Rejoin Response" },

    { ZBEE_NWK_CMD_LINK_STATUS,         "Link Status" },

    { ZBEE_NWK_CMD_NWK_REPORT,          "Network Report" },

    { ZBEE_NWK_CMD_NWK_UPDATE,          "Network Update" },

    { ZBEE_NWK_CMD_ED_TIMEOUT_REQUEST,  "End Device Timeout Request" },

    { ZBEE_NWK_CMD_ED_TIMEOUT_RESPONSE, "End Device Timeout Response" },

    { ZBEE_NWK_CMD_LINK_PWR_DELTA,      "Link Power Delta" },

    { ZBEE_NWK_CMD_COMMISSIONING_REQUEST,  "Network Commissioning Request" },

    { ZBEE_NWK_CMD_COMMISSIONING_RESPONSE,  "Network Commissioning Response" },

    { 0, NULL }

};

/* Many-To-One Route Discovery Modes. */

static const value_string zbee_nwk_cmd_route_many_modes[] = {

    { ZBEE_NWK_CMD_ROUTE_OPTION_MANY_NONE,  "Not Many-to-One" },

    { ZBEE_NWK_CMD_ROUTE_OPTION_MANY_REC,   "With Source Routing" },

    { ZBEE_NWK_CMD_ROUTE_OPTION_MANY_NOREC, "Without Source Routing" },

    { 0, NULL }

};

/* Rejoin Status Codes */

static const value_string zbee_nwk_rejoin_codes[] = {

    { IEEE802154_CMD_ASRSP_AS_SUCCESS,      "Success" },

    { IEEE802154_CMD_ASRSP_PAN_FULL,        "PAN Full" },

    { IEEE802154_CMD_ASRSP_PAN_DENIED,      "PAN Access Denied" },

    { 0, NULL }

};

/* Network Report Types */

static const value_string zbee_nwk_report_types[] = {

    { ZBEE_NWK_CMD_NWK_REPORT_ID_PAN_CONFLICT,  "PAN Identifier Conflict" },

    { ZBEE_NWK_CMD_NWK_REPORT_ID_ZBOSS_KEY_TRACE,  "ZBOSS key trace" },

    { 0, NULL }

};

/* Network Update Types */

static const value_string zbee_nwk_update_types[] = {

    { ZBEE_NWK_CMD_NWK_UPDATE_ID_PAN_UPDATE,  "PAN Identifier Update" },

    { 0, NULL }

};

/* Network Status Codes */

static const value_string zbee_nwk_status_codes[] = {

    { ZBEE_NWK_STATUS_NO_ROUTE_AVAIL,       "No Route Available" },

    { ZBEE_NWK_STATUS_TREE_LINK_FAIL,       "Tree Link Failure" },

    { ZBEE_NWK_STATUS_NON_TREE_LINK_FAIL,   "Non-tree Link Failure" },

    { ZBEE_NWK_STATUS_LOW_BATTERY,          "Low Battery" },

    { ZBEE_NWK_STATUS_NO_ROUTING,           "No Routing Capacity" },

    { ZBEE_NWK_STATUS_NO_INDIRECT,          "No Indirect Capacity" },

    { ZBEE_NWK_STATUS_INDIRECT_EXPIRE,      "Indirect Transaction Expiry" },

    { ZBEE_NWK_STATUS_DEVICE_UNAVAIL,       "Target Device Unavailable" },

    { ZBEE_NWK_STATUS_ADDR_UNAVAIL,         "Target Address Unallocated" },

    { ZBEE_NWK_STATUS_PARENT_LINK_FAIL,     "Parent Link Failure" },

    { ZBEE_NWK_STATUS_VALIDATE_ROUTE,       "Validate Route" },

    { ZBEE_NWK_STATUS_SOURCE_ROUTE_FAIL,    "Source Route Failure" },

    { ZBEE_NWK_STATUS_MANY_TO_ONE_FAIL,     "Many-to-One Route Failure" },

    { ZBEE_NWK_STATUS_ADDRESS_CONFLICT,     "Address Conflict" },

    { ZBEE_NWK_STATUS_VERIFY_ADDRESS,       "Verify Address" },

    { ZBEE_NWK_STATUS_PANID_UPDATE,         "PAN ID Update" },

    { ZBEE_NWK_STATUS_ADDRESS_UPDATE,       "Network Address Update" },

    { ZBEE_NWK_STATUS_BAD_FRAME_COUNTER,    "Bad Frame Counter" },

    { ZBEE_NWK_STATUS_BAD_KEY_SEQNO,        "Bad Key Sequence Number" },

    { 0, NULL }

};

/* Stack Profile Values. */

static const value_string zbee_nwk_stack_profiles[] = {

    { 0x00, "Network Specific" },

    { 0x01, "ZigBee Home" },

    { 0x02, "ZigBee PRO" },

    { 0, NULL }

};

/* ED Requested Timeout Enumerated Values */

static const value_string zbee_nwk_end_device_timeout_request[] = {

    { 0, "10 sec" },

    { 1, "2 min" },

    { 2, "4 min" },

    { 3, "8 min" },

    { 4, "16 min" },

    { 5, "32 min" },

    { 6, "64 min" },

    { 7, "128 min" },

    { 8, "256 min" },

    { 9, "512 min" },

    { 10, "1024 min" },

    { 11, "2048 min" },

    { 12, "4096 min" },

    { 13, "8192 min" },

    { 14, "16384 min" },

    { 0, NULL }

};

/* End Device Timeout Response Status Codes */

static const value_string zbee_nwk_end_device_timeout_resp_status[] = {

    { 0,      "Success" },

    { 1,      "Incorrect value" },

    { 0, NULL }

};

/* Names of IEEE 802.15.4 IEs (Information Elements) for ZigBee */

static const value_string ieee802154_zigbee_ie_names[] = {

    { ZBEE_ZIGBEE_IE_REJOIN,                    "Rejoin"   },

    { ZBEE_ZIGBEE_IE_TX_POWER,                  "Tx Power" },

    { ZBEE_ZIGBEE_IE_BEACON_PAYLOAD,            "Extended Beacon Payload" },

    { 0, NULL }

};

/* Stack Profile Values. */

static const value_string zbee_nwk_link_power_delta_types[] = {

    { 0x00, "Notification" },

    { 0x01, "Request" },

    { 0x02, "Response" },

    { 0x03, "Reserved" },

    { 0, NULL }

};

static const value_string zbee_nwk_commissioning_types[] = {

    { 0x00, "Initial Join" },

    { 0x01, "Rejoin" },

    { 0x02, "Establish Trusted Link" },

    { 0, NULL }

};

/* TODO: much of the following copied from ieee80154 dissector */

/*-------------------------------------

 * Hash Tables and Lists

 *-------------------------------------

 */

ieee802154_map_tab_t zbee_nwk_map;

GHashTable *zbee_table_nwk_keyring;

GHashTable *zbee_table_link_keyring;

static int zbee_nwk_address_to_str(const address* addr, char *buf, int buf_len)

{

    uint16_t zbee_nwk_addr = pletohu16(addr->data);

    if ((zbee_nwk_addr == ZBEE_BCAST_ALL) || (zbee_nwk_addr == ZBEE_BCAST_ACTIVE) || (zbee_nwk_addr == ZBEE_BCAST_ROUTERS)) {

        return (int)g_strlcpy(buf, "Broadcast", buf_len) + 1;

    }

    else {

        return snprintf(buf, buf_len, "0x%04x", zbee_nwk_addr) + 1;

    }

}

static int zbee_nwk_address_str_len(const address* addr _U_)

{

    return sizeof("Broadcast");

}

static int zbee_nwk_address_len(void)

{

    return sizeof(uint16_t);

}

/**

 *Extracts an integer sub-field from an int with a given mask

 *

*/

unsigned

zbee_get_bit_field(unsigned input, unsigned mask)

{

    /* Sanity Check, don't want infinite loops. */

    if (mask == 0) return 0;

    /* Shift input and mask together. */

    while (!(mask & 0x1)) {

        input >>= 1;

        mask >>=1;

    } /* while */

    return (input & mask);

} /* zbee_get_bit_field */

/**

 *Heuristic interpreter for the ZigBee network dissectors.

 *

 *@param tvb pointer to buffer containing raw packet.

 *@param pinfo pointer to packet information fields

 *@param tree pointer to data tree Wireshark uses to display packet.

 *@return Boolean value, whether it handles the packet or not.

*/

static bool

dissect_zbee_nwk_heur(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data)

{

    ieee802154_packet   *packet = (ieee802154_packet *)data;

    uint16_t            fcf;

    unsigned            ver;

    unsigned            type;

    /* All ZigBee frames must always have a 16-bit source and destination address. */

    if (packet == NULL) return false;

    /* If the frame type and version are not sane, then it's probably not ZigBee. */

    fcf = tvb_get_letohs(tvb, 0);

    ver = zbee_get_bit_field(fcf, ZBEE_NWK_FCF_VERSION);

    type = zbee_get_bit_field(fcf, ZBEE_NWK_FCF_FRAME_TYPE);

    if ((ver < ZBEE_VERSION_2004) || (ver > ZBEE_VERSION_2007)) return false;

    if (!try_val_to_str(type, zbee_nwk_frame_types)) return false;

    /* All interpan frames should originate from an extended address. */

    if (type == ZBEE_NWK_FCF_INTERPAN) {

        if (packet->src_addr_mode != IEEE802154_FCF_ADDR_EXT) return false;

    }

    /* All other ZigBee frames must have 16-bit source and destination addresses. */

    else {

        if (packet->src_addr_mode != IEEE802154_FCF_ADDR_SHORT) return false;

        if (packet->dst_addr_mode != IEEE802154_FCF_ADDR_SHORT) return false;

    }

    /* Assume it's ZigBee */

    dissect_zbee_nwk(tvb, pinfo, tree, packet);

    return true;

} /* dissect_zbee_heur */

/**

 *ZigBee NWK packet dissection routine for 2006, 2007 and Pro stack versions.

 *

 *@param tvb pointer to buffer containing raw packet.

 *@param pinfo pointer to packet information fields.

 *@param tree pointer to data tree Wireshark uses to display packet.

 *@param data raw packet private data.

*/

static int

dissect_zbee_nwk_full(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data)

{

    tvbuff_t            *payload_tvb = NULL;

    proto_item          *proto_root;

    proto_item          *ti = NULL;

    proto_tree          *nwk_tree;

    zbee_nwk_packet     packet;

    ieee802154_packet   *ieee_packet;

    unsigned            offset = 0;

    char                *src_addr, *dst_addr;

    uint16_t            fcf;

    ieee802154_short_addr   addr16;

    ieee802154_map_rec     *map_rec;

    ieee802154_hints_t     *ieee_hints;

    zbee_nwk_hints_t       *nwk_hints;

    bool                    unicast_src;

    static int * const fcf_flags_2007[] = {

        &hf_zbee_nwk_frame_type,

        &hf_zbee_nwk_proto_version,

        &hf_zbee_nwk_discover_route,

        &hf_zbee_nwk_multicast,

        &hf_zbee_nwk_security,

        &hf_zbee_nwk_source_route,

        &hf_zbee_nwk_ext_dst,

        &hf_zbee_nwk_ext_src,

        &hf_zbee_nwk_end_device_initiator,

        NULL

    };

    static int * const fcf_flags[] = {

        &hf_zbee_nwk_frame_type,

        &hf_zbee_nwk_proto_version,

        &hf_zbee_nwk_discover_route,

        &hf_zbee_nwk_security,

        NULL

    };

    /* Reject the packet if data is NULL */

    if (data == NULL)

        return 0;

    ieee_packet = (ieee802154_packet *)data;

    memset(&packet, 0, sizeof(packet));

    /* Set up hint structures */

    if (!pinfo->fd->visited) {

        /* Allocate frame data with hints for upper layers */

        nwk_hints = wmem_new0(wmem_file_scope(), zbee_nwk_hints_t);

        p_add_proto_data(wmem_file_scope(), pinfo, proto_zbee_nwk, 0, nwk_hints);

    } else {

        /* Retrieve existing structure */

        nwk_hints = (zbee_nwk_hints_t *)p_get_proto_data(wmem_file_scope(), pinfo, proto_zbee_nwk, 0);

    }

    ieee_hints = (ieee802154_hints_t *)p_get_proto_data(wmem_file_scope(), pinfo, proto_ieee802154, 0);

    /* Add ourself to the protocol column, clear the info column, and create the protocol tree. */

    col_set_str(pinfo->cinfo, COL_PROTOCOL, "ZigBee");

    col_clear(pinfo->cinfo, COL_INFO);

    proto_root = proto_tree_add_item(tree, proto_zbee_nwk, tvb, offset, -1, ENC_NA);

    nwk_tree = proto_item_add_subtree(proto_root, ett_zbee_nwk);

    /* Get and parse the FCF */

    fcf = tvb_get_letohs(tvb, offset);

    packet.type         = zbee_get_bit_field(fcf, ZBEE_NWK_FCF_FRAME_TYPE);

    packet.version      = zbee_get_bit_field(fcf, ZBEE_NWK_FCF_VERSION);

    packet.discovery    = zbee_get_bit_field(fcf, ZBEE_NWK_FCF_DISCOVER_ROUTE);

    packet.security     = zbee_get_bit_field(fcf, ZBEE_NWK_FCF_SECURITY);

    packet.multicast    = zbee_get_bit_field(fcf, ZBEE_NWK_FCF_MULTICAST);

    packet.route        = zbee_get_bit_field(fcf, ZBEE_NWK_FCF_SOURCE_ROUTE);

    packet.ext_dst      = zbee_get_bit_field(fcf, ZBEE_NWK_FCF_EXT_DEST);

    packet.ext_src      = zbee_get_bit_field(fcf, ZBEE_NWK_FCF_EXT_SOURCE);

    /* Display the FCF. */

    if (packet.version >= ZBEE_VERSION_2007) {

        ti = proto_tree_add_bitmask(nwk_tree, tvb, offset, hf_zbee_nwk_fcf, ett_zbee_nwk_fcf, fcf_flags_2007, ENC_LITTLE_ENDIAN);

    } else {

        ti = proto_tree_add_bitmask(nwk_tree, tvb, offset, hf_zbee_nwk_fcf, ett_zbee_nwk_fcf, fcf_flags, ENC_LITTLE_ENDIAN);

    }

    proto_item_append_text(ti, " %s", val_to_str_const(packet.type, zbee_nwk_frame_types, "Unknown"));

    offset += 2;

    /* Add the frame type to the info column and protocol root. */

    proto_item_append_text(proto_root, " %s", val_to_str_const(packet.type, zbee_nwk_frame_types, "Unknown Type"));

    col_set_str(pinfo->cinfo, COL_INFO, val_to_str_const(packet.type, zbee_nwk_frame_types, "Reserved Frame Type"));

    if (packet.type != ZBEE_NWK_FCF_INTERPAN) {

        /* Get the destination address. */

        packet.dst = tvb_get_letohs(tvb, offset);

        set_address_tvb(&pinfo->net_dst, zbee_nwk_address_type, 2, tvb, offset);

        copy_address_shallow(&pinfo->dst, &pinfo->net_dst);

        dst_addr = address_to_str(pinfo->pool, &pinfo->dst);

        proto_tree_add_uint(nwk_tree, hf_zbee_nwk_dst, tvb, offset, 2, packet.dst);

        ti = proto_tree_add_uint(nwk_tree, hf_zbee_nwk_addr, tvb, offset, 2, packet.dst);

        proto_item_set_generated(ti);

        proto_item_set_hidden(ti);

        offset += 2;

        proto_item_append_text(proto_root, ", Dst: %s", dst_addr);

        col_append_fstr(pinfo->cinfo, COL_INFO, ", Dst: %s", dst_addr);

        /* Get the short nwk source address and pass it to upper layers */

        packet.src = tvb_get_letohs(tvb, offset);

        set_address_tvb(&pinfo->net_src, zbee_nwk_address_type, 2, tvb, offset);

        copy_address_shallow(&pinfo->src, &pinfo->net_src);

        src_addr = address_to_str(pinfo->pool, &pinfo->src);

        if (nwk_hints)

            nwk_hints->src = packet.src;

        proto_tree_add_uint(nwk_tree, hf_zbee_nwk_src, tvb, offset, 2, packet.src);

        ti = proto_tree_add_uint(nwk_tree, hf_zbee_nwk_addr, tvb, offset, 2, packet.src);

        proto_item_set_generated(ti);

        proto_item_set_hidden(ti);

        offset += 2;

        if (   (packet.src == ZBEE_BCAST_ALL)

               || (packet.src == ZBEE_BCAST_ACTIVE)

               || (packet.src == ZBEE_BCAST_ROUTERS)){

            /* Source Broadcast doesn't make much sense. */

            unicast_src = false;

        }

        else {

            unicast_src = true;

        }

        proto_item_append_text(proto_root, ", Src: %s", src_addr);

        col_append_fstr(pinfo->cinfo, COL_INFO, ", Src: %s", src_addr);

        /* Get and display the radius. */

        packet.radius = tvb_get_uint8(tvb, offset);

        proto_tree_add_uint(nwk_tree, hf_zbee_nwk_radius, tvb, offset, 1, packet.radius);

        offset += 1;

        /* Get and display the sequence number. */

        packet.seqno = tvb_get_uint8(tvb, offset);

        proto_tree_add_uint(nwk_tree, hf_zbee_nwk_seqno, tvb, offset, 1, packet.seqno);

        offset += 1;

        /* Add the extended destination address (ZigBee 2006 and later). */

        if ((packet.version >= ZBEE_VERSION_2007) && packet.ext_dst) {

            packet.dst64 = tvb_get_letoh64(tvb, offset);

            proto_tree_add_item(nwk_tree, hf_zbee_nwk_dst64, tvb, offset, 8, ENC_LITTLE_ENDIAN);

            ti = proto_tree_add_eui64(nwk_tree, hf_zbee_nwk_addr64, tvb, offset, 8, packet.dst64);

            proto_item_set_generated(ti);

            proto_item_set_hidden(ti);

            offset += 8;

        }

        /* Display the extended source address. (ZigBee 2006 and later). */

        if (packet.version >= ZBEE_VERSION_2007) {

            addr16.pan = ieee_packet->src_pan;

            if (packet.ext_src) {

                packet.src64 = tvb_get_letoh64(tvb, offset);

                proto_tree_add_item(nwk_tree, hf_zbee_nwk_src64, tvb, offset, 8, ENC_LITTLE_ENDIAN);

                ti = proto_tree_add_eui64(nwk_tree, hf_zbee_nwk_addr64, tvb, offset, 8, packet.src64);

                proto_item_set_generated(ti);

                proto_item_set_hidden(ti);

                offset += 8;

                if (!pinfo->fd->visited && nwk_hints) {

                    /* Provide hints to upper layers */

                    nwk_hints->src_pan = ieee_packet->src_pan;

                    /* Update nwk extended address hash table */

                    if ( unicast_src ) {

                        nwk_hints->map_rec = ieee802154_addr_update(&zbee_nwk_map,

                                                                    packet.src, addr16.pan, packet.src64, pinfo->current_proto, pinfo->num);

                    }

                }

            }

            else {

                /* See if extended source info was previously sniffed */

                if (!pinfo->fd->visited && nwk_hints) {

                    nwk_hints->src_pan = ieee_packet->src_pan;

                    addr16.addr = packet.src;

                    map_rec = (ieee802154_map_rec *) g_hash_table_lookup(zbee_nwk_map.short_table, &addr16);

                    if (map_rec) {

                        /* found a nwk mapping record */

                        nwk_hints->map_rec = map_rec;

                    }

                    else {

                        /* does ieee layer know? */

                        map_rec = (ieee802154_map_rec *) g_hash_table_lookup(ieee_packet->short_table, &addr16);

                        if (map_rec) nwk_hints->map_rec = map_rec;

                    }

                } /* (!pinfo->fd->visited) */

                else {

                    if (nwk_hints && nwk_hints->map_rec ) {

                        /* Display inferred source address info */

                        ti = proto_tree_add_eui64(nwk_tree, hf_zbee_nwk_src64, tvb, offset, 0,

                                                  nwk_hints->map_rec->addr64);

                        proto_item_set_generated(ti);

                        ti = proto_tree_add_eui64(nwk_tree, hf_zbee_nwk_addr64, tvb, offset, 0, nwk_hints->map_rec->addr64);

                        proto_item_set_generated(ti);

                        proto_item_set_hidden(ti);

                        if ( nwk_hints->map_rec->start_fnum ) {

                            ti = proto_tree_add_uint(nwk_tree, hf_zbee_nwk_src64_origin, tvb, 0, 0,

                                                     nwk_hints->map_rec->start_fnum);

                        }

                        else {

                            ti = proto_tree_add_uint_format_value(nwk_tree, hf_zbee_nwk_src64_origin, tvb, 0, 0, 0, "Pre-configured");

                        }

                        proto_item_set_generated(ti);

                    }

                }

            }

            /* If ieee layer didn't know its extended source address, and nwk layer does, fill it in */

            if (!pinfo->fd->visited) {

                if ( (ieee_packet->src_addr_mode == IEEE802154_FCF_ADDR_SHORT) &&

                     ieee_hints && !ieee_hints->map_rec ) {

                    addr16.pan = ieee_packet->src_pan;

                    addr16.addr = ieee_packet->src16;

                    map_rec = (ieee802154_map_rec *) g_hash_table_lookup(zbee_nwk_map.short_table, &addr16);

                    if (map_rec) {

                        /* found a ieee mapping record */

                        ieee_hints->map_rec = map_rec;

                    }

                }

            } /* (!pinfo->fd->visited */

        } /* (pinfo->zbee_stack_vers >= ZBEE_VERSION_2007) */

        /* Add multicast control field (ZigBee 2006 and later). */

        if ((packet.version >= ZBEE_VERSION_2007) && packet.multicast) {

            static int * const multicast_flags[] = {

                &hf_zbee_nwk_mcast_mode,

                &hf_zbee_nwk_mcast_radius,

                &hf_zbee_nwk_mcast_max_radius,

                NULL

            };

            uint8_t mcast_control = tvb_get_uint8(tvb, offset);

            packet.mcast_mode = zbee_get_bit_field(mcast_control, ZBEE_NWK_MCAST_MODE);

            packet.mcast_radius = zbee_get_bit_field(mcast_control, ZBEE_NWK_MCAST_RADIUS);

            packet.mcast_max_radius = zbee_get_bit_field(mcast_control, ZBEE_NWK_MCAST_MAX_RADIUS);

            proto_tree_add_bitmask(nwk_tree, tvb, offset, hf_zbee_nwk_mcast, ett_zbee_nwk_mcast, multicast_flags, ENC_NA);

            offset += 1;

        }

        /* Add the Source Route field. (ZigBee 2006 and later). */

        if ((packet.version >= ZBEE_VERSION_2007) && packet.route) {

            proto_tree *field_tree;

            uint8_t     relay_count;

            uint16_t    relay_addr;

            unsigned    i;

            /* Create a subtree for the source route field. */

            field_tree = proto_tree_add_subtree(nwk_tree, tvb, offset, 1, ett_zbee_nwk_route, &ti, "Source Route");

            /* Get and display the relay count. */

            relay_count = tvb_get_uint8(tvb, offset);

            proto_tree_add_uint(field_tree, hf_zbee_nwk_relay_count, tvb, offset, 1, relay_count);

            proto_item_append_text(ti, ", Length: %d", relay_count);

            offset += 1;

            /* Correct the length of the source route fields. */

            proto_item_set_len(ti, 1 + relay_count*2);

            /* Get and display the relay index. */

            proto_tree_add_item(field_tree, hf_zbee_nwk_relay_index, tvb, offset, 1, ENC_NA);

            offset += 1;

            /* Get and display the relay list. */

            for (i=0; i<relay_count; i++) {

                relay_addr = tvb_get_letohs(tvb, offset);

                proto_tree_add_uint_format(field_tree, hf_zbee_nwk_relay, tvb, offset, 2, relay_addr, "Relay %d: 0x%04x", i+1, relay_addr);

                offset += 2;

            } /* for */

        }

    } /* if not interpan */

    /*

     * Ensure that the payload exists. There are no valid ZigBee network

     * packets that have no payload.

     */

    if (offset >= tvb_captured_length(tvb)) {

        /* Non-existent or truncated payload. */

        expert_add_info(pinfo, proto_root, &ei_zbee_nwk_missing_payload);

        return tvb_captured_length(tvb);

    }

    /* Payload is encrypted, attempt security operations. */

    else if (packet.security) {

        payload_tvb = dissect_zbee_secure(tvb, pinfo, nwk_tree, offset);

        if (payload_tvb == NULL) {

            /* If Payload_tvb is NULL, then the security dissector cleaned up. */

            return tvb_captured_length(tvb);

        }

    }

    /* Plaintext payload. */

    else {

        payload_tvb = tvb_new_subset_remaining(tvb, offset);

    }

    if (packet.type == ZBEE_NWK_FCF_CMD) {

        /* Dissect the Network Command. */

        dissect_zbee_nwk_cmd(payload_tvb, pinfo, nwk_tree, &packet);

    }

    else if (packet.type == ZBEE_NWK_FCF_DATA || packet.type == ZBEE_NWK_FCF_INTERPAN) {

        /* Dissect the Network Payload (APS layer). */

        call_dissector_with_data(aps_handle, payload_tvb, pinfo, tree, &packet);

    }

    else {

        /* Invalid type. */

        call_data_dissector(payload_tvb, pinfo, tree);

    }

    tap_queue_packet(zbee_nwk_tap, pinfo, NULL);

    return tvb_captured_length(tvb);

} /* dissect_zbee_nwk */

/**

 *ZigBee packet dissection with proto version determination.

 *

 *@param tvb pointer to buffer containing raw packet.

 *@param pinfo pointer to packet information fields.

 *@param tree pointer to data tree Wireshark uses to display packet.

 *@param data raw packet private data.

*/

static int

dissect_zbee_nwk(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void* data)

{

    uint8_t fcf0;

    uint8_t proto_version;

    fcf0 = tvb_get_uint8(tvb, 0);

    proto_version = (fcf0 & ZBEE_NWK_FCF_VERSION) >> 2;

    if (proto_version == ZBEE_VERSION_GREEN_POWER) {

        call_dissector_with_data(zbee_gp_handle, tvb, pinfo, tree, data);

    } else {

        /* TODO: add check for FCF proto versions. */

        dissect_zbee_nwk_full(tvb, pinfo, tree, data);

    }

    return tvb_captured_length(tvb);

}

/**

 *ZigBee Network command packet dissection routine for Wireshark.

 *

 *@param tvb pointer to buffer containing raw packet.

 *@param pinfo pointer to packet information fields

 *@param tree pointer to data tree Wireshark uses to display packet.

*/

static void dissect_zbee_nwk_cmd(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, zbee_nwk_packet* packet)

{

    proto_tree  *cmd_tree;

    proto_item  *cmd_root;

    unsigned    offset=0;

    uint8_t     cmd_id = tvb_get_uint8(tvb, offset);

    /* Create a subtree for this command. */

    cmd_tree = proto_tree_add_subtree_format(tree, tvb, offset, -1, ett_zbee_nwk_cmd, &cmd_root, "Command Frame: %s",

                                    val_to_str_const(cmd_id, zbee_nwk_cmd_names, "Unknown"));

    /* Add the command ID. */

    proto_tree_add_uint(cmd_tree, hf_zbee_nwk_cmd_id, tvb, offset, 1, cmd_id);

    offset += 1;

    /* Add the command name to the info column. */

    col_set_str(pinfo->cinfo, COL_INFO, val_to_str_const(cmd_id, zbee_nwk_cmd_names, "Unknown Command"));

    /* Handle the command. */

    switch(cmd_id){

        case ZBEE_NWK_CMD_ROUTE_REQ:

            /* Route Request Command. */

            offset = dissect_zbee_nwk_route_req(tvb, pinfo, cmd_tree, packet, offset);

            break;

        case ZBEE_NWK_CMD_ROUTE_REPLY:

            /* Route Reply Command. */

            offset = dissect_zbee_nwk_route_rep(tvb, pinfo, cmd_tree, offset, packet->version);

            break;

        case ZBEE_NWK_CMD_NWK_STATUS:

            /* Network Status Command. */

            offset = dissect_zbee_nwk_status(tvb, pinfo, cmd_tree, offset);

            break;

        case ZBEE_NWK_CMD_LEAVE:

            /* Leave Command. */

            offset = dissect_zbee_nwk_leave(tvb, cmd_tree, offset);

            break;

        case ZBEE_NWK_CMD_ROUTE_RECORD:

            /* Route Record Command. */

            offset = dissect_zbee_nwk_route_rec(tvb, pinfo, cmd_tree, packet, offset);

            break;

        case ZBEE_NWK_CMD_REJOIN_REQ:

            /* Rejoin Request Command. */

            offset = dissect_zbee_nwk_rejoin_req(tvb, pinfo, cmd_tree, packet, offset);

            break;

        case ZBEE_NWK_CMD_REJOIN_RESP:

            /* Rejoin Response Command. */

            offset = dissect_zbee_nwk_rejoin_resp(tvb, pinfo, cmd_tree, packet, offset);

            break;

        case ZBEE_NWK_CMD_LINK_STATUS:

            /* Link Status Command. */

            offset = dissect_zbee_nwk_link_status(tvb, cmd_tree, offset);

            break;

        case ZBEE_NWK_CMD_NWK_REPORT:

            /* Network Report Command. */

            offset = dissect_zbee_nwk_report(tvb, pinfo, cmd_tree, offset);

            break;

        case ZBEE_NWK_CMD_NWK_UPDATE:

            /* Network Update Command. */

            offset = dissect_zbee_nwk_update(tvb, pinfo, cmd_tree, offset);

            break;

        case ZBEE_NWK_CMD_ED_TIMEOUT_REQUEST:

            /* Network End Device Timeout Request Command. */

            offset = dissect_zbee_nwk_ed_timeout_request(tvb, cmd_tree, offset);

            break;

        case ZBEE_NWK_CMD_ED_TIMEOUT_RESPONSE:

            /* Network End Device Timeout Response Command. */

            offset = dissect_zbee_nwk_ed_timeout_response(tvb, pinfo, cmd_tree, offset);

            break;

        case ZBEE_NWK_CMD_LINK_PWR_DELTA:

            offset = dissect_zbee_nwk_link_pwr_delta(tvb, pinfo, cmd_tree, offset);

            break;

        case ZBEE_NWK_CMD_COMMISSIONING_REQUEST:

            /* Network Commissioning Request Command. */

            offset = dissect_zbee_nwk_commissioning_request(tvb, pinfo, cmd_tree, packet, offset);

            break;

        case ZBEE_NWK_CMD_COMMISSIONING_RESPONSE:

            /* Network Commissioning Response Command. */

            offset = dissect_zbee_nwk_commissioning_response(tvb, pinfo, cmd_tree, packet, offset);

            break;

        default:

            /* Just break out and let the overflow handler deal with the payload. */

            break;

    } /* switch */

    /* Dissect any TLVs */

    offset = dissect_zbee_tlvs(tvb, pinfo, tree, offset, NULL, ZBEE_TLV_SRC_TYPE_ZBEE_NWK, cmd_id);

    /* There is excess data in the packet. */

    if (offset < tvb_captured_length(tvb)) {

        /* There are leftover bytes! */

        tvbuff_t    *leftover_tvb   = tvb_new_subset_remaining(tvb, offset);

        proto_tree  *root;

        /* Correct the length of the command tree. */

        root = proto_tree_get_root(tree);

        proto_item_set_len(cmd_root, offset);

        /* Dump the leftover to the data dissector. */

        call_data_dissector(leftover_tvb, pinfo, root);

    }

} /* dissect_zbee_nwk_cmd */

/**

 *Helper dissector for the Route Request command.

 *

 *@param tvb pointer to buffer containing raw packet.

 *@param pinfo pointer to packet information fields

 *@param tree pointer to the command subtree.

 *@param packet pointer to the network packet struct.

 *@param  offset into the tvb to begin dissection.

 *@return offset after command dissection.

*/

static unsigned

dissect_zbee_nwk_route_req(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, zbee_nwk_packet * packet, unsigned offset)

{

    uint8_t route_options;

    uint16_t dest_addr;

    static int * const nwk_route_command_options_2007[] = {

        &hf_zbee_nwk_cmd_route_opt_multicast,

        &hf_zbee_nwk_cmd_route_opt_dest_ext,

        &hf_zbee_nwk_cmd_route_opt_many_to_one,

        NULL

    };

    static int * const nwk_route_command_options[] = {

        &hf_zbee_nwk_cmd_route_opt_repair,

        NULL

    };

    /* Get and display the route options field. */

    route_options = tvb_get_uint8(tvb, offset);

    if (packet->version >= ZBEE_VERSION_2007) {

        proto_tree_add_bitmask(tree, tvb, offset, hf_zbee_nwk_cmd_route_options, ett_zbee_nwk_cmd_options, nwk_route_command_options_2007, ENC_NA);

    } else {

        proto_tree_add_bitmask(tree, tvb, offset, hf_zbee_nwk_cmd_route_options, ett_zbee_nwk_cmd_options, nwk_route_command_options, ENC_NA);

    }

    offset += 1;

    /* Get and display the route request ID. */

    proto_tree_add_item(tree, hf_zbee_nwk_cmd_route_id, tvb, offset, 1, ENC_NA);

    offset += 1;

    /* Get and display the destination address. */

    dest_addr = tvb_get_letohs(tvb, offset);

    proto_tree_add_uint(tree, hf_zbee_nwk_cmd_route_dest, tvb, offset, 2, dest_addr);

    offset += 2;

    /* Get and display the path cost. */

    proto_tree_add_item(tree, hf_zbee_nwk_cmd_route_cost, tvb, offset, 1, ENC_NA);

    offset += 1;

    /* Get and display the extended destination address. */

    if (route_options & ZBEE_NWK_CMD_ROUTE_OPTION_DEST_EXT) {

        proto_tree_add_item(tree, hf_zbee_nwk_cmd_route_dest_ext, tvb, offset, 8, ENC_LITTLE_ENDIAN);

        offset += 8;

    }

    /* Update the info column. */

    if (route_options & ZBEE_NWK_CMD_ROUTE_OPTION_MANY_MASK) {

        col_clear(pinfo->cinfo, COL_INFO);

        col_append_str(pinfo->cinfo, COL_INFO, "Many-to-One Route Request");

    }

    col_append_fstr(pinfo->cinfo, COL_INFO, ", Dst: 0x%04x, Src: 0x%04x", dest_addr, packet->src);

    /* Done */

    return offset;

} /* dissect_zbee_nwk_route_req */

/**

 *Helper dissector for the Route Reply command.

 *

 *@param tvb pointer to buffer containing raw packet.

 *@param pinfo pointer to packet information fields

 *@param tree pointer to the command subtree.

 *@param  offset into the tvb to begin dissection.

 *@return offset after command dissection.

*/

static unsigned

dissect_zbee_nwk_route_rep(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, unsigned offset, uint8_t version)

{

    uint8_t route_options;

    uint16_t orig_addr;

    uint16_t resp_addr;

    static int * const nwk_route_command_options_2007[] = {

        &hf_zbee_nwk_cmd_route_opt_multicast,

        &hf_zbee_nwk_cmd_route_opt_resp_ext,

        &hf_zbee_nwk_cmd_route_opt_orig_ext,

        NULL

    };

    static int * const nwk_route_command_options[] = {

        &hf_zbee_nwk_cmd_route_opt_repair,

        NULL

    };

    /* Get and display the route options field. */

    route_options = tvb_get_uint8(tvb, offset);

    if (version >= ZBEE_VERSION_2007) {

        proto_tree_add_bitmask(tree, tvb, offset, hf_zbee_nwk_cmd_route_options, ett_zbee_nwk_cmd_options, nwk_route_command_options_2007, ENC_NA);

    } else {

        proto_tree_add_bitmask(tree, tvb, offset, hf_zbee_nwk_cmd_route_options, ett_zbee_nwk_cmd_options, nwk_route_command_options, ENC_NA);

    }

    offset += 1;

    /* Get and display the route request ID. */

    proto_tree_add_item(tree, hf_zbee_nwk_cmd_route_id, tvb, offset, 1, ENC_NA);

    offset += 1;

    /* Get and display the originator address. */

    orig_addr = tvb_get_letohs(tvb, offset);

    proto_tree_add_uint(tree, hf_zbee_nwk_cmd_route_orig, tvb, offset, 2, orig_addr);

    offset += 2;

    /* Get and display the responder address. */

    resp_addr = tvb_get_letohs(tvb, offset);

    proto_tree_add_uint(tree, hf_zbee_nwk_cmd_route_resp, tvb, offset, 2, resp_addr);

    offset += 2;