/* packet-doip.c

 * Routines for DoIP (ISO13400) protocol packet disassembly

 *

 * Wireshark - Network traffic analyzer

 * By Gerald Combs <gerald@wireshark.org>

 * Copyright 1998 Gerald Combs

 *

 * SPDX-License-Identifier: GPL-2.0-or-later

 */

#include "config.h"

#include <epan/packet.h>

#include <epan/uat.h>

#include <epan/expert.h>

#include <epan/proto_data.h>

#include "packet-tcp.h"

#include "packet-tls.h"

#include "packet-doip.h"

void proto_register_doip(void);

void proto_reg_handoff_doip(void);

#define DOIP_PORT                                  13400

#define DOIP_TLS_PORT                               3496

#define DOIP_GENERIC_NACK                          0x0000

#define DOIP_VEHICLE_IDENTIFICATION_REQ            0x0001

#define DOIP_VEHICLE_IDENTIFICATION_REQ_EID        0x0002

#define DOIP_VEHICLE_IDENTIFICATION_REQ_VIN        0x0003

#define DOIP_VEHICLE_ANNOUNCEMENT_MESSAGE          0x0004

#define DOIP_ROUTING_ACTIVATION_REQUEST            0x0005

#define DOIP_ROUTING_ACTIVATION_RESPONSE           0x0006

#define DOIP_ALIVE_CHECK_REQUEST                   0x0007

#define DOIP_ALIVE_CHECK_RESPONSE                  0x0008

#define DOIP_ENTITY_STATUS_REQUEST                 0x4001

#define DOIP_ENTITY_STATUS_RESPONSE                0x4002

#define DOIP_POWER_INFORMATION_REQUEST             0x4003

#define DOIP_POWER_INFORMATION_RESPONSE            0x4004

#define DOIP_DIAGNOSTIC_MESSAGE                    0x8001

#define DOIP_DIAGNOSTIC_MESSAGE_ACK                0x8002

#define DOIP_DIAGNOSTIC_MESSAGE_NACK               0x8003

/* Header */

#define DOIP_VERSION_OFFSET                        0

#define DOIP_VERSION_LEN                           1

#define DOIP_INV_VERSION_OFFSET                    (DOIP_VERSION_OFFSET + DOIP_VERSION_LEN)

#define DOIP_INV_VERSION_LEN                       1

#define DOIP_TYPE_OFFSET                           (DOIP_INV_VERSION_OFFSET + DOIP_INV_VERSION_LEN)

#define DOIP_TYPE_LEN                              2

#define DOIP_LENGTH_OFFSET                         (DOIP_TYPE_OFFSET + DOIP_TYPE_LEN)

#define DOIP_LENGTH_LEN                            4

#define DOIP_HEADER_LEN                            (DOIP_LENGTH_OFFSET + DOIP_LENGTH_LEN)

#define RESERVED_VER                               0x00

#define ISO13400_2010                              0x01

#define ISO13400_2012                              0x02

#define ISO13400_2019                              0x03

#define ISO13400_2019_AMD1                         0x04

#define DEFAULT_VALUE                              0xFF

/* Generic NACK */

#define DOIP_GENERIC_NACK_OFFSET                   DOIP_HEADER_LEN

#define DOIP_GENERIC_NACK_LEN                      1

/* Common */

#define DOIP_COMMON_VIN_LEN                        17

#define DOIP_COMMON_EID_LEN                        6

/* Vehicle identification request */

#define DOIP_VEHICLE_IDENTIFICATION_EID_OFFSET     DOIP_HEADER_LEN

#define DOIP_VEHICLE_IDENTIFICATION_VIN_OFFSET     DOIP_HEADER_LEN

/* Routing activation request */

#define DOIP_ROUTING_ACTIVATION_REQ_SRC_OFFSET     DOIP_HEADER_LEN

#define DOIP_ROUTING_ACTIVATION_REQ_SRC_LEN        2

#define DOIP_ROUTING_ACTIVATION_REQ_TYPE_OFFSET    (DOIP_ROUTING_ACTIVATION_REQ_SRC_OFFSET + DOIP_ROUTING_ACTIVATION_REQ_SRC_LEN)

#define DOIP_ROUTING_ACTIVATION_REQ_TYPE_LEN_V1    2

#define DOIP_ROUTING_ACTIVATION_REQ_TYPE_LEN_V2    1

#define DOIP_ROUTING_ACTIVATION_REQ_ISO_OFFSET_V1  (DOIP_ROUTING_ACTIVATION_REQ_TYPE_OFFSET + DOIP_ROUTING_ACTIVATION_REQ_TYPE_LEN_V1)

#define DOIP_ROUTING_ACTIVATION_REQ_ISO_OFFSET_V2  (DOIP_ROUTING_ACTIVATION_REQ_TYPE_OFFSET + DOIP_ROUTING_ACTIVATION_REQ_TYPE_LEN_V2)

#define DOIP_ROUTING_ACTIVATION_REQ_ISO_LEN        4

#define DOIP_ROUTING_ACTIVATION_REQ_OEM_OFFSET_V1  (DOIP_ROUTING_ACTIVATION_REQ_ISO_OFFSET_V1 + DOIP_ROUTING_ACTIVATION_REQ_ISO_LEN)

#define DOIP_ROUTING_ACTIVATION_REQ_OEM_OFFSET_V2  (DOIP_ROUTING_ACTIVATION_REQ_ISO_OFFSET_V2 + DOIP_ROUTING_ACTIVATION_REQ_ISO_LEN)

#define DOIP_ROUTING_ACTIVATION_REQ_OEM_LEN        4

/* Routing activation response */

#define DOIP_ROUTING_ACTIVATION_RES_TESTER_OFFSET  DOIP_HEADER_LEN

#define DOIP_ROUTING_ACTIVATION_RES_TESTER_LEN     2

#define DOIP_ROUTING_ACTIVATION_RES_ENTITY_OFFSET  (DOIP_ROUTING_ACTIVATION_RES_TESTER_OFFSET + DOIP_ROUTING_ACTIVATION_RES_TESTER_LEN)

#define DOIP_ROUTING_ACTIVATION_RES_ENTITY_LEN     2

#define DOIP_ROUTING_ACTIVATION_RES_CODE_OFFSET    (DOIP_ROUTING_ACTIVATION_RES_ENTITY_OFFSET + DOIP_ROUTING_ACTIVATION_RES_ENTITY_LEN)

#define DOIP_ROUTING_ACTIVATION_RES_CODE_LEN       1

#define DOIP_ROUTING_ACTIVATION_RES_ISO_OFFSET     (DOIP_ROUTING_ACTIVATION_RES_CODE_OFFSET + DOIP_ROUTING_ACTIVATION_RES_CODE_LEN)

#define DOIP_ROUTING_ACTIVATION_RES_ISO_LEN        4

#define DOIP_ROUTING_ACTIVATION_RES_OEM_OFFSET     (DOIP_ROUTING_ACTIVATION_RES_ISO_OFFSET + DOIP_ROUTING_ACTIVATION_RES_ISO_LEN)

#define DOIP_ROUTING_ACTIVATION_RES_OEM_LEN        4

/* Vehicle announcement message */

#define DOIP_VEHICLE_ANNOUNCEMENT_VIN_OFFSET       DOIP_HEADER_LEN

#define DOIP_VEHICLE_ANNOUNCEMENT_ADDRESS_OFFSET   (DOIP_VEHICLE_ANNOUNCEMENT_VIN_OFFSET + DOIP_COMMON_VIN_LEN)

#define DOIP_VEHICLE_ANNOUNCEMENT_ADDRESS_LEN      2

#define DOIP_VEHICLE_ANNOUNCEMENT_EID_OFFSET       (DOIP_VEHICLE_ANNOUNCEMENT_ADDRESS_OFFSET + DOIP_VEHICLE_ANNOUNCEMENT_ADDRESS_LEN)

#define DOIP_VEHICLE_ANNOUNCEMENT_GID_OFFSET       (DOIP_VEHICLE_ANNOUNCEMENT_EID_OFFSET + DOIP_COMMON_EID_LEN)

#define DOIP_VEHICLE_ANNOUNCEMENT_GID_LEN          6

#define DOIP_VEHICLE_ANNOUNCEMENT_ACTION_OFFSET    (DOIP_VEHICLE_ANNOUNCEMENT_GID_OFFSET + DOIP_VEHICLE_ANNOUNCEMENT_GID_LEN)

#define DOIP_VEHICLE_ANNOUNCEMENT_ACTION_LEN       1

#define DOIP_VEHICLE_ANNOUNCEMENT_SYNC_OFFSET      (DOIP_VEHICLE_ANNOUNCEMENT_ACTION_OFFSET + DOIP_VEHICLE_ANNOUNCEMENT_ACTION_LEN)

#define DOIP_VEHICLE_ANNOUNCEMENT_SYNC_LEN         1

/* Alive check response */

#define DOIP_ALIVE_CHECK_RESPONSE_SOURCE_OFFSET    DOIP_HEADER_LEN

#define DOIP_ALIVE_CHECK_RESPONSE_SOURCE_LEN       2

/* Entity status response */

#define DOIP_ENTITY_STATUS_RESPONSE_NODE_OFFSET    DOIP_HEADER_LEN

#define DOIP_ENTITY_STATUS_RESPONSE_NODE_LEN       1

#define DOIP_ENTITY_STATUS_RESPONSE_MCTS_OFFSET    (DOIP_ENTITY_STATUS_RESPONSE_NODE_OFFSET + DOIP_ENTITY_STATUS_RESPONSE_NODE_LEN)

#define DOIP_ENTITY_STATUS_RESPONSE_MCTS_LEN       1

#define DOIP_ENTITY_STATUS_RESPONSE_NCTS_OFFSET    (DOIP_ENTITY_STATUS_RESPONSE_MCTS_OFFSET + DOIP_ENTITY_STATUS_RESPONSE_MCTS_LEN)

#define DOIP_ENTITY_STATUS_RESPONSE_NCTS_LEN       1

#define DOIP_ENTITY_STATUS_RESPONSE_MDS_OFFSET     (DOIP_ENTITY_STATUS_RESPONSE_NCTS_OFFSET + DOIP_ENTITY_STATUS_RESPONSE_NCTS_LEN)

#define DOIP_ENTITY_STATUS_RESPONSE_MDS_LEN        4

/* Diagnostic power mode information response */

#define DOIP_POWER_MODE_OFFSET                     DOIP_HEADER_LEN

#define DOIP_POWER_MODE_LEN                        1

/* Common */

#define DOIP_DIAG_COMMON_SOURCE_OFFSET             DOIP_HEADER_LEN

#define DOIP_DIAG_COMMON_SOURCE_LEN                2

#define DOIP_DIAG_COMMON_TARGET_OFFSET             (DOIP_DIAG_COMMON_SOURCE_OFFSET + DOIP_DIAG_COMMON_SOURCE_LEN)

#define DOIP_DIAG_COMMON_TARGET_LEN                2

/* Diagnostic message */

#define DOIP_DIAG_MESSAGE_DATA_OFFSET              (DOIP_DIAG_COMMON_TARGET_OFFSET + DOIP_DIAG_COMMON_TARGET_LEN)

/* Diagnostic message ACK */

#define DOIP_DIAG_MESSAGE_ACK_CODE_OFFSET          (DOIP_DIAG_COMMON_TARGET_OFFSET + DOIP_DIAG_COMMON_TARGET_LEN)

#define DOIP_DIAG_MESSAGE_ACK_CODE_LEN             1

#define DOIP_DIAG_MESSAGE_ACK_PREVIOUS_OFFSET      (DOIP_DIAG_MESSAGE_ACK_CODE_OFFSET + DOIP_DIAG_MESSAGE_ACK_CODE_LEN)

/* Diagnostic message NACK */

#define DOIP_DIAG_MESSAGE_NACK_CODE_OFFSET         (DOIP_DIAG_COMMON_TARGET_OFFSET + DOIP_DIAG_COMMON_TARGET_LEN)

#define DOIP_DIAG_MESSAGE_NACK_CODE_LEN            1

#define DOIP_DIAG_MESSAGE_NACK_PREVIOUS_OFFSET     (DOIP_DIAG_MESSAGE_NACK_CODE_OFFSET + DOIP_DIAG_MESSAGE_NACK_CODE_LEN)

/*

 * Enums

 */

/* Header */

/* Protocol version */

static const value_string doip_versions[] = {

    { RESERVED_VER,         "Reserved" },

    { ISO13400_2010,        "DoIP ISO/DIS 13400-2:2010" },

    { ISO13400_2012,        "DoIP ISO 13400-2:2012" },

    { ISO13400_2019,        "DoIP ISO 13400-2:2019" },

    { ISO13400_2019_AMD1,   "DoIP ISO 13400-2:2019 Amd1 (experimental)" },

    { DEFAULT_VALUE,        "Default value for vehicle identification request messages" },

    { 0, NULL }

};

/* Payload type */

static const value_string doip_payloads[] = {

    { DOIP_GENERIC_NACK,                    "Generic DoIP header NACK" },

    { DOIP_VEHICLE_IDENTIFICATION_REQ,      "Vehicle identification request" },

    { DOIP_VEHICLE_IDENTIFICATION_REQ_EID,  "Vehicle identification request with EID" },

    { DOIP_VEHICLE_IDENTIFICATION_REQ_VIN,  "Vehicle identification request with VIN" },

    { DOIP_VEHICLE_ANNOUNCEMENT_MESSAGE,    "Vehicle announcement message/vehicle identification response message" },

    { DOIP_ROUTING_ACTIVATION_REQUEST,      "Routing activation request" },

    { DOIP_ROUTING_ACTIVATION_RESPONSE,     "Routing activation response" },

    { DOIP_ALIVE_CHECK_REQUEST,             "Alive check request" },

    { DOIP_ALIVE_CHECK_RESPONSE,            "Alive check response" },

    { DOIP_ENTITY_STATUS_REQUEST,           "DoIP entity status request" },

    { DOIP_ENTITY_STATUS_RESPONSE,          "DoIP entity status response" },

    { DOIP_POWER_INFORMATION_REQUEST,       "Diagnostic power mode information request" },

    { DOIP_POWER_INFORMATION_RESPONSE,      "Diagnostic power mode information response" },

    { DOIP_DIAGNOSTIC_MESSAGE,              "Diagnostic message" },

    { DOIP_DIAGNOSTIC_MESSAGE_ACK,          "Diagnostic message ACK" },

    { DOIP_DIAGNOSTIC_MESSAGE_NACK,         "Diagnostic message NACK" },

    { 0, NULL }

};

/* Generic NACK */

static const value_string nack_codes[] = {

    { 0x00, "Incorrect pattern format" },

    { 0x01, "Unknown payload type" },

    { 0x02, "Message too large" },

    { 0x03, "Out of memory" },

    { 0x04, "Invalid payload length" },

    { 0, NULL }

};

/* Routing activation request */

static const value_string activation_types[] = {

    { 0x00, "Default" },

    { 0x01, "WWH-OBD" },

    { 0xE0, "Central security" },

    { 0, NULL }

};

/* Routing activation response */

static const value_string activation_codes[] = {

    { 0x00, "Routing activation denied due to unknown source address." },

    { 0x01, "Routing activation denied because all concurrently supported TCP_DATA sockets are registered and active." },

    { 0x02, "Routing activation denied because an SA different from the table connection entry was received on the already activated TCP_DATA socket." },

    { 0x03, "Routing activation denied because the SA is already registered and active on a different TCP_DATA socket." },

    { 0x04, "Routing activation denied due to missing authentication." },

    { 0x05, "Routing activation denied due to rejected confirmation." },

    { 0x06, "Routing activation denied due to unsupported routing activation type." },

    { 0x07, "Routing activation denied due to request for encrypted connection via TLS." },

    { 0x08, "Reserved by ISO 13400." },

    { 0x09, "Reserved by ISO 13400." },

    { 0x0A, "Reserved by ISO 13400." },

    { 0x0B, "Reserved by ISO 13400." },

    { 0x0C, "Reserved by ISO 13400." },

    { 0x0D, "Reserved by ISO 13400." },

    { 0x0E, "Reserved by ISO 13400." },

    { 0x0F, "Reserved by ISO 13400." },

    { 0x10, "Routing successfully activated." },

    { 0x11, "Routing will be activated; confirmation required." },

    { 0, NULL }

};

/* Vehicle announcement message */

/* Action code */

static const value_string action_codes[] = {

    { 0x00, "No further action required" },

    { 0x01, "Reserved by ISO 13400" },

    { 0x02, "Reserved by ISO 13400" },

    { 0x03, "Reserved by ISO 13400" },

    { 0x04, "Reserved by ISO 13400" },

    { 0x05, "Reserved by ISO 13400" },

    { 0x06, "Reserved by ISO 13400" },

    { 0x07, "Reserved by ISO 13400" },

    { 0x08, "Reserved by ISO 13400" },

    { 0x09, "Reserved by ISO 13400" },

    { 0x0A, "Reserved by ISO 13400" },

    { 0x0B, "Reserved by ISO 13400" },

    { 0x0C, "Reserved by ISO 13400" },

    { 0x0D, "Reserved by ISO 13400" },

    { 0x0E, "Reserved by ISO 13400" },

    { 0x0F, "Reserved by ISO 13400" },

    { 0x10, "Routing activation required to initiate central security" },

    { 0, NULL }

};

/* Sync status */

static const value_string sync_status[] = {

    { 0x00, "VIN and/or GID are synchronized" },

    { 0x01, "Reserved by ISO 13400" },

    { 0x02, "Reserved by ISO 13400" },

    { 0x03, "Reserved by ISO 13400" },

    { 0x04, "Reserved by ISO 13400" },

    { 0x05, "Reserved by ISO 13400" },

    { 0x06, "Reserved by ISO 13400" },

    { 0x07, "Reserved by ISO 13400" },

    { 0x08, "Reserved by ISO 13400" },

    { 0x09, "Reserved by ISO 13400" },

    { 0x0A, "Reserved by ISO 13400" },

    { 0x0B, "Reserved by ISO 13400" },

    { 0x0C, "Reserved by ISO 13400" },

    { 0x0D, "Reserved by ISO 13400" },

    { 0x0E, "Reserved by ISO 13400" },

    { 0x0F, "Reserved by ISO 13400" },

    { 0x10, "Incomplete: VIN and GID are NOT synchronized" },

    { 0, NULL }

};

/* Entity status response */

/* Node type */

static const value_string node_types[] = {

    { 0x00, "DoIP gateway" },

    { 0x01, "DoIp node" },

    { 0, NULL }

};

/* Diagnostic power mode information response */

/* Power mode */

static const value_string power_modes[] = {

    { 0x00, "not ready" },

    { 0x01, "ready" },

    { 0x02, "not supported" },

    { 0, NULL }

};

/* Diagnostic message ACK */

static const value_string diag_ack_codes[] = {

    { 0x00, "ACK" },

    { 0, NULL }

};

/* Diagnostic message NACK */

static const value_string diag_nack_codes[] = {

    { 0x00, "Reserved by ISO 13400" },

    { 0x01, "Reserved by ISO 13400" },

    { 0x02, "Invalid source address" },

    { 0x03, "Unknown target address" },

    { 0x04, "Diagnostic message too large" },

    { 0x05, "Out of memory" },

    { 0x06, "Target unreachable" },

    { 0x07, "Unknown network" },

    { 0x08, "Transport protocol error" },

    { 0, NULL }

};

/*

 * Config

 */

static bool doip_hide_address_names = true;

 /*

 * Fields

 */

/* DoIP header */

static int hf_doip_version;

static int hf_doip_inv_version;

static int hf_doip_type;

static int hf_doip_length;

/* Generic NACK */

static int hf_generic_nack_code;

/* Common */

static int hf_reserved_iso;

static int hf_reserved_oem;

/* Routing activation request */

static int hf_activation_type_v1;

static int hf_activation_type_v2;

/* Routing activation response */

static int hf_tester_logical_address;

static int hf_tester_logical_address_name;

static int hf_response_code;

/* Vehicle announcement message */

static int hf_logical_address;

static int hf_logical_address_name;

static int hf_gid;

static int hf_further_action;

static int hf_sync_status;

/* Diagnostic power mode information response */

static int hf_power_mode;

/* Entity status response */

static int hf_node_type;

static int hf_max_sockets;

static int hf_current_sockets;

static int hf_max_data_size;

/* Common */

static int hf_vin;

static int hf_eid;

static int hf_source_address;

static int hf_source_address_name;

static int hf_target_address;

static int hf_target_address_name;

static int hf_previous;

/* Diagnostic message */

static int hf_data;

/* Diagnostic message ACK */

static int hf_ack_code;

/* Diagnostic message NACK */

static int hf_nack_code;

/*

 * Trees

 */

static int ett_doip;

static int ett_header;

static int ett_address;

/* Misc */

static dissector_handle_t doip_handle;

static dissector_handle_t uds_handle;

static int proto_doip;

/* expert info items */

static expert_field ei_doip_illegal_length_field;

/*

 * UATs

 */

typedef struct _generic_one_id_string {

    unsigned   id;

    char   *name;

} generic_one_id_string_t;

/* ID -> Name */

static void *

copy_generic_one_id_string_cb(void* n, const void* o, size_t size _U_) {

    generic_one_id_string_t* new_rec = (generic_one_id_string_t*)n;

    const generic_one_id_string_t* old_rec = (const generic_one_id_string_t*)o;

    new_rec->name = g_strdup(old_rec->name);

    new_rec->id = old_rec->id;

    return new_rec;

}

static bool

update_generic_one_identifier_16bit(void *r, char **err) {

    generic_one_id_string_t *rec = (generic_one_id_string_t *)r;

    if (rec->id > 0xffff) {

        *err = ws_strdup_printf("We currently only support 16 bit identifiers (ID: %i  Name: %s)", rec->id, rec->name);

        return false;

    }

    if (rec->name == NULL || rec->name[0] == 0) {

        *err = g_strdup("Name cannot be empty");

        return false;

    }

    return true;

}

static void

free_generic_one_id_string_cb(void*r) {

    generic_one_id_string_t* rec = (generic_one_id_string_t*)r;

    /* freeing result of g_strdup */

    g_free(rec->name);

    rec->name = NULL;

}

/*

 * UAT DoIP Diagnostic Addresses

 */

#define DATAFILE_DOIP_DIAG_ADDRESSES "DoIP_diagnostic_addresses"

static GHashTable *data_doip_diag_addresses;

static generic_one_id_string_t* doip_diag_addresses;

static unsigned doip_diag_address_count;

UAT_HEX_CB_DEF(doip_diag_addresses, id, generic_one_id_string_t)

Unexecuted instantiation: packet-doip.c:doip_diag_addresses_id_set_cb

Unexecuted instantiation: packet-doip.c:doip_diag_addresses_id_tostr_cb

UAT_CSTRING_CB_DEF(doip_diag_addresses, name, generic_one_id_string_t)

static void

post_update_doip_diag_addresses(void) {

    /* destroy old hash table, if it exists */

    if (data_doip_diag_addresses) {

        g_hash_table_destroy(data_doip_diag_addresses);

    }

    /* create new hash table */

    data_doip_diag_addresses = g_hash_table_new_full(g_direct_hash, g_direct_equal, NULL, NULL);

    for (unsigned i = 0; i < doip_diag_address_count; i++) {

        g_hash_table_insert(data_doip_diag_addresses, GUINT_TO_POINTER(doip_diag_addresses[i].id), doip_diag_addresses[i].name);

    }

}

static void

reset_doip_diag_addresses_cb(void) {

    /* destroy hash table, if it exists */

    if (data_doip_diag_addresses) {

        g_hash_table_destroy(data_doip_diag_addresses);

        data_doip_diag_addresses = NULL;

    }

}

static proto_item *

doip_prototree_add_with_resolv(proto_tree* doip_tree, int hfindex, int hfindex_name, tvbuff_t* tvb, const int start, int length, const unsigned encoding, unsigned *diag_addr) {

    unsigned diag_addr_tmp;

    proto_item *ti;

    proto_tree *tree;

    ti = proto_tree_add_item_ret_uint(doip_tree, hfindex, tvb, start, length, encoding, &diag_addr_tmp);

    const char *name = NULL;

    if (data_doip_diag_addresses != NULL) {

        name = g_hash_table_lookup(data_doip_diag_addresses, GUINT_TO_POINTER(diag_addr_tmp));

    }

    if (name != NULL) {

        proto_item_append_text(ti, " (%s)", name);

        tree = proto_item_add_subtree(ti, ett_address);

        ti = proto_tree_add_string(tree, hfindex_name, tvb, start, length, name);

        if (doip_hide_address_names) {

            proto_item_set_hidden(ti);

        }

    }

    if (diag_addr != NULL) {

        *diag_addr = diag_addr_tmp;

    }

    return ti;

}

/*

 * UAT DoIP Payload Types

 */

#define DATAFILE_DOIP_PAYLOAD_TYPES "DoIP_payload_types"

static GHashTable *data_doip_payload_types;

static generic_one_id_string_t* doip_payload_types;

static unsigned doip_payload_type_count;

UAT_HEX_CB_DEF(doip_payload_types, id, generic_one_id_string_t)

Unexecuted instantiation: packet-doip.c:doip_payload_types_id_set_cb

Unexecuted instantiation: packet-doip.c:doip_payload_types_id_tostr_cb

UAT_CSTRING_CB_DEF(doip_payload_types, name, generic_one_id_string_t)

static void

post_update_doip_payload_types(void) {

    /* destroy old hash table, if it exists */

    if (data_doip_payload_types) {

        g_hash_table_destroy(data_doip_payload_types);

    }

    /* create new hash table */

    data_doip_payload_types = g_hash_table_new_full(g_direct_hash, g_direct_equal, NULL, NULL);

    for (unsigned i = 0; i < doip_payload_type_count; i++) {

        g_hash_table_insert(data_doip_payload_types, GUINT_TO_POINTER(doip_payload_types[i].id), doip_payload_types[i].name);

    }

}

static void

reset_doip_payload_type_cb(void) {

    /* destroy hash table, if it exists */

    if (data_doip_payload_types) {

        g_hash_table_destroy(data_doip_payload_types);

        data_doip_payload_types = NULL;

    }

}

static const char*

resolve_doip_payload_type(wmem_allocator_t *scope, uint16_t payload_type, bool is_col) {

    const char *tmp = NULL;

    if (data_doip_payload_types != NULL) {

        tmp = g_hash_table_lookup(data_doip_payload_types, GUINT_TO_POINTER(payload_type));

    }

    /* lets look at the static values, if nothing is configured */

    if (tmp == NULL) {

        tmp = try_val_to_str(payload_type, doip_payloads);

    }

    /* no configured or standardized name known */

    if (tmp != NULL) {

        if (is_col) {

            return tmp;

        } else {

            return wmem_strdup_printf(scope, "%s (0x%04x)", tmp, payload_type);

        }

    }

    /* just give back unknown */

    if (is_col) {

        return wmem_strdup_printf(scope, "0x%04x Unknown Payload", payload_type);

    } else {

        return wmem_strdup_printf(scope, "Unknown (0x%04x)", payload_type);

    }

}

static void

add_header(tvbuff_t *tvb, packet_info *pinfo, proto_tree *doip_tree)

{

    uint32_t len;

    uint32_t payload_type;

    proto_tree *subtree = proto_tree_add_subtree(doip_tree, tvb, DOIP_VERSION_OFFSET, DOIP_HEADER_LEN, ett_header, NULL, "Header");

    proto_tree_add_item(subtree, hf_doip_version, tvb, DOIP_VERSION_OFFSET, DOIP_VERSION_LEN, ENC_BIG_ENDIAN);

    proto_tree_add_item(subtree, hf_doip_inv_version, tvb, DOIP_INV_VERSION_OFFSET, DOIP_INV_VERSION_LEN, ENC_BIG_ENDIAN);

    payload_type = tvb_get_uint16(tvb, DOIP_TYPE_OFFSET, ENC_BIG_ENDIAN);

    proto_tree_add_uint_format(subtree, hf_doip_type, tvb, DOIP_TYPE_OFFSET, DOIP_TYPE_LEN, payload_type, "Type: %s", resolve_doip_payload_type(pinfo->pool, payload_type, false));

    proto_tree_add_item_ret_uint(subtree, hf_doip_length, tvb, DOIP_LENGTH_OFFSET, DOIP_LENGTH_LEN, ENC_BIG_ENDIAN, &len);

    if (tvb_captured_length(tvb) < len) {

        proto_tree_add_expert(doip_tree, pinfo, &ei_doip_illegal_length_field, tvb, DOIP_LENGTH_OFFSET, DOIP_LENGTH_LEN);

        col_append_str(pinfo->cinfo, COL_INFO, " [DoIP Length Field: Illegal Value]");

    }

}

static void

add_generic_header_nack_fields(proto_tree *doip_tree, tvbuff_t *tvb)

{

    proto_tree_add_item(doip_tree, hf_generic_nack_code, tvb, DOIP_GENERIC_NACK_OFFSET, DOIP_GENERIC_NACK_LEN, ENC_NA);

}

static void

add_vehicle_identification_eid_fields(proto_tree *doip_tree, tvbuff_t *tvb)

{

    proto_tree_add_item(doip_tree, hf_eid, tvb, DOIP_VEHICLE_IDENTIFICATION_EID_OFFSET, DOIP_COMMON_EID_LEN, ENC_NA);

}

static void

add_vehicle_identification_vin_fields(proto_tree *doip_tree, tvbuff_t *tvb)

{

    proto_tree_add_item(doip_tree, hf_vin, tvb, DOIP_VEHICLE_IDENTIFICATION_VIN_OFFSET, DOIP_COMMON_VIN_LEN, ENC_ASCII);

}

static void

add_routing_activation_request_fields(proto_tree *doip_tree, tvbuff_t *tvb, uint8_t version)

{

    doip_prototree_add_with_resolv(doip_tree, hf_source_address, hf_source_address_name, tvb, DOIP_ROUTING_ACTIVATION_REQ_SRC_OFFSET, DOIP_ROUTING_ACTIVATION_REQ_SRC_LEN, ENC_BIG_ENDIAN, NULL);

    if (version == ISO13400_2010) {

        proto_tree_add_item(doip_tree, hf_activation_type_v1, tvb, DOIP_ROUTING_ACTIVATION_REQ_TYPE_OFFSET, DOIP_ROUTING_ACTIVATION_REQ_TYPE_LEN_V1, ENC_BIG_ENDIAN);

        proto_tree_add_item(doip_tree, hf_reserved_iso, tvb, DOIP_ROUTING_ACTIVATION_REQ_ISO_OFFSET_V1, DOIP_ROUTING_ACTIVATION_REQ_ISO_LEN, ENC_BIG_ENDIAN);

        if ( tvb_bytes_exist(tvb, DOIP_ROUTING_ACTIVATION_REQ_OEM_OFFSET_V1, DOIP_ROUTING_ACTIVATION_REQ_OEM_LEN) ) {

            proto_tree_add_item(doip_tree, hf_reserved_oem, tvb, DOIP_ROUTING_ACTIVATION_REQ_OEM_OFFSET_V1, DOIP_ROUTING_ACTIVATION_REQ_OEM_LEN, ENC_BIG_ENDIAN);

        }

    } else if ((version == ISO13400_2012) || (version == ISO13400_2019)) {

        proto_tree_add_item(doip_tree, hf_activation_type_v2, tvb, DOIP_ROUTING_ACTIVATION_REQ_TYPE_OFFSET, DOIP_ROUTING_ACTIVATION_REQ_TYPE_LEN_V2, ENC_NA);

        proto_tree_add_item(doip_tree, hf_reserved_iso, tvb, DOIP_ROUTING_ACTIVATION_REQ_ISO_OFFSET_V2, DOIP_ROUTING_ACTIVATION_REQ_ISO_LEN, ENC_BIG_ENDIAN);

        if ( tvb_bytes_exist(tvb, DOIP_ROUTING_ACTIVATION_REQ_OEM_OFFSET_V2, DOIP_ROUTING_ACTIVATION_REQ_OEM_LEN) ) {

            proto_tree_add_item(doip_tree, hf_reserved_oem, tvb, DOIP_ROUTING_ACTIVATION_REQ_OEM_OFFSET_V2, DOIP_ROUTING_ACTIVATION_REQ_OEM_LEN, ENC_BIG_ENDIAN);

        }

    }

}

static void

add_routing_activation_response_fields(proto_tree *doip_tree, tvbuff_t *tvb)

{

    doip_prototree_add_with_resolv(doip_tree, hf_tester_logical_address, hf_tester_logical_address_name, tvb, DOIP_ROUTING_ACTIVATION_RES_TESTER_OFFSET, DOIP_ROUTING_ACTIVATION_RES_TESTER_LEN, ENC_BIG_ENDIAN, NULL);

    doip_prototree_add_with_resolv(doip_tree, hf_source_address, hf_source_address_name, tvb, DOIP_ROUTING_ACTIVATION_RES_ENTITY_OFFSET, DOIP_ROUTING_ACTIVATION_RES_ENTITY_LEN, ENC_BIG_ENDIAN, NULL);

    proto_tree_add_item(doip_tree, hf_response_code, tvb, DOIP_ROUTING_ACTIVATION_RES_CODE_OFFSET, DOIP_ROUTING_ACTIVATION_RES_CODE_LEN, ENC_NA);

    proto_tree_add_item(doip_tree, hf_reserved_iso, tvb, DOIP_ROUTING_ACTIVATION_RES_ISO_OFFSET, DOIP_ROUTING_ACTIVATION_RES_ISO_LEN, ENC_BIG_ENDIAN);

    if ( tvb_bytes_exist(tvb, DOIP_ROUTING_ACTIVATION_RES_OEM_OFFSET, DOIP_ROUTING_ACTIVATION_RES_OEM_LEN) ) {

        proto_tree_add_item(doip_tree, hf_reserved_oem, tvb, DOIP_ROUTING_ACTIVATION_RES_OEM_OFFSET, DOIP_ROUTING_ACTIVATION_RES_OEM_LEN, ENC_BIG_ENDIAN);

    }

}

static void

add_vehicle_announcement_message_fields(proto_tree *doip_tree, tvbuff_t *tvb)

{

    proto_tree_add_item(doip_tree, hf_vin, tvb, DOIP_VEHICLE_ANNOUNCEMENT_VIN_OFFSET, DOIP_COMMON_VIN_LEN, ENC_ASCII);

    doip_prototree_add_with_resolv(doip_tree, hf_logical_address, hf_logical_address_name, tvb, DOIP_VEHICLE_ANNOUNCEMENT_ADDRESS_OFFSET, DOIP_VEHICLE_ANNOUNCEMENT_ADDRESS_LEN, ENC_BIG_ENDIAN, NULL);

    proto_tree_add_item(doip_tree, hf_eid, tvb, DOIP_VEHICLE_ANNOUNCEMENT_EID_OFFSET, DOIP_COMMON_EID_LEN, ENC_NA);

    proto_tree_add_item(doip_tree, hf_gid, tvb, DOIP_VEHICLE_ANNOUNCEMENT_GID_OFFSET, DOIP_VEHICLE_ANNOUNCEMENT_GID_LEN, ENC_NA);

    proto_tree_add_item(doip_tree, hf_further_action, tvb, DOIP_VEHICLE_ANNOUNCEMENT_ACTION_OFFSET, DOIP_VEHICLE_ANNOUNCEMENT_ACTION_LEN, ENC_BIG_ENDIAN);

    if ( tvb_bytes_exist(tvb, DOIP_VEHICLE_ANNOUNCEMENT_SYNC_OFFSET, DOIP_VEHICLE_ANNOUNCEMENT_SYNC_LEN) ) {

        /* Not part of version 1 and optional in version 2. */

        proto_tree_add_item(doip_tree, hf_sync_status, tvb, DOIP_VEHICLE_ANNOUNCEMENT_SYNC_OFFSET, DOIP_VEHICLE_ANNOUNCEMENT_SYNC_LEN, ENC_BIG_ENDIAN);

    }

}

static void

add_alive_check_response_fields(proto_tree *doip_tree, tvbuff_t *tvb)

{

    doip_prototree_add_with_resolv(doip_tree, hf_source_address, hf_source_address_name, tvb, DOIP_ALIVE_CHECK_RESPONSE_SOURCE_OFFSET, DOIP_ALIVE_CHECK_RESPONSE_SOURCE_LEN, ENC_BIG_ENDIAN, NULL);

}

static void

add_entity_status_response_fields(proto_tree *doip_tree, tvbuff_t *tvb)

{

    proto_tree_add_item(doip_tree, hf_node_type, tvb, DOIP_ENTITY_STATUS_RESPONSE_NODE_OFFSET, DOIP_ENTITY_STATUS_RESPONSE_NODE_LEN, ENC_NA);

    proto_tree_add_item(doip_tree, hf_max_sockets, tvb, DOIP_ENTITY_STATUS_RESPONSE_MCTS_OFFSET, DOIP_ENTITY_STATUS_RESPONSE_MCTS_LEN, ENC_NA);

    proto_tree_add_item(doip_tree, hf_current_sockets, tvb, DOIP_ENTITY_STATUS_RESPONSE_NCTS_OFFSET, DOIP_ENTITY_STATUS_RESPONSE_NCTS_LEN, ENC_NA);

    if ( tvb_bytes_exist(tvb, DOIP_ENTITY_STATUS_RESPONSE_MDS_OFFSET, DOIP_ENTITY_STATUS_RESPONSE_MDS_LEN) ) {

        proto_tree_add_item(doip_tree, hf_max_data_size, tvb, DOIP_ENTITY_STATUS_RESPONSE_MDS_OFFSET, DOIP_ENTITY_STATUS_RESPONSE_MDS_LEN, ENC_BIG_ENDIAN);

    }

}

static void

add_power_mode_information_response_fields(proto_tree *doip_tree, tvbuff_t *tvb)

{

    proto_tree_add_item(doip_tree, hf_power_mode, tvb, DOIP_POWER_MODE_OFFSET, DOIP_POWER_MODE_LEN, ENC_NA);

}

static void

add_diagnostic_message_fields(proto_tree *doip_tree, tvbuff_t *tvb, packet_info *pinfo, proto_tree *parent_tree)

{

    doip_info_t doip_info;

    uint32_t tmp;

    doip_prototree_add_with_resolv(doip_tree, hf_source_address, hf_source_address_name, tvb, DOIP_DIAG_COMMON_SOURCE_OFFSET, DOIP_DIAG_COMMON_SOURCE_LEN, ENC_BIG_ENDIAN, &tmp);

    doip_info.source_address = tmp;

    doip_prototree_add_with_resolv(doip_tree, hf_target_address, hf_target_address_name, tvb, DOIP_DIAG_COMMON_TARGET_OFFSET, DOIP_DIAG_COMMON_TARGET_LEN, ENC_BIG_ENDIAN, &tmp);

    doip_info.target_address = tmp;

    if (uds_handle != 0) {

        call_dissector_with_data(uds_handle, tvb_new_subset_remaining(tvb, DOIP_DIAG_MESSAGE_DATA_OFFSET), pinfo, parent_tree, &doip_info);

    } else if (tvb_reported_length_remaining(tvb, DOIP_DIAG_MESSAGE_DATA_OFFSET) > 0) {

        proto_tree_add_item(doip_tree, hf_data, tvb, DOIP_DIAG_MESSAGE_DATA_OFFSET, tvb_reported_length_remaining(tvb, DOIP_DIAG_MESSAGE_DATA_OFFSET), ENC_NA);

    }

}

static void

add_diagnostic_message_ack_fields(proto_tree *doip_tree, tvbuff_t *tvb)

{

    doip_prototree_add_with_resolv(doip_tree, hf_source_address, hf_source_address_name, tvb, DOIP_DIAG_COMMON_SOURCE_OFFSET, DOIP_DIAG_COMMON_SOURCE_LEN, ENC_BIG_ENDIAN, NULL);

    doip_prototree_add_with_resolv(doip_tree, hf_target_address, hf_target_address_name, tvb, DOIP_DIAG_COMMON_TARGET_OFFSET, DOIP_DIAG_COMMON_TARGET_LEN, ENC_BIG_ENDIAN, NULL);

    proto_tree_add_item(doip_tree, hf_ack_code, tvb, DOIP_DIAG_MESSAGE_ACK_CODE_OFFSET, DOIP_DIAG_MESSAGE_ACK_CODE_LEN, ENC_NA);

    if (tvb_captured_length_remaining(tvb, DOIP_DIAG_MESSAGE_ACK_PREVIOUS_OFFSET) > 0) {

        proto_tree_add_item(doip_tree, hf_previous, tvb, DOIP_DIAG_MESSAGE_ACK_PREVIOUS_OFFSET, tvb_captured_length_remaining(tvb, DOIP_DIAG_MESSAGE_ACK_PREVIOUS_OFFSET), ENC_NA);

    }

}

static void

add_diagnostic_message_nack_fields(proto_tree *doip_tree, tvbuff_t *tvb)

{

    doip_prototree_add_with_resolv(doip_tree, hf_source_address, hf_source_address_name, tvb, DOIP_DIAG_COMMON_SOURCE_OFFSET, DOIP_DIAG_COMMON_SOURCE_LEN, ENC_BIG_ENDIAN, NULL);

    doip_prototree_add_with_resolv(doip_tree, hf_target_address, hf_target_address_name, tvb, DOIP_DIAG_COMMON_TARGET_OFFSET, DOIP_DIAG_COMMON_TARGET_LEN, ENC_BIG_ENDIAN, NULL);

    proto_tree_add_item(doip_tree, hf_nack_code, tvb, DOIP_DIAG_MESSAGE_NACK_CODE_OFFSET, DOIP_DIAG_MESSAGE_NACK_CODE_LEN, ENC_NA);

    if (tvb_captured_length_remaining(tvb, DOIP_DIAG_MESSAGE_NACK_PREVIOUS_OFFSET) > 0) {

        proto_tree_add_item(doip_tree, hf_previous, tvb, DOIP_DIAG_MESSAGE_NACK_PREVIOUS_OFFSET, tvb_captured_length_remaining(tvb, DOIP_DIAG_MESSAGE_NACK_PREVIOUS_OFFSET), ENC_NA);

    }

}

/* DoIP protocol dissector */

static void

dissect_doip_message(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree)

{

    uint8_t version = tvb_get_uint8(tvb, DOIP_VERSION_OFFSET);

    uint16_t payload_type = tvb_get_ntohs(tvb, DOIP_TYPE_OFFSET);

    int raw_offset_tvb = tvb_raw_offset(tvb);

    int *first_offset  = (int *)p_get_proto_data(wmem_file_scope(), pinfo, proto_doip, 0);

    if (!first_offset) {

        first_offset = wmem_new0(wmem_file_scope(), int);

        *first_offset = raw_offset_tvb;

        p_add_proto_data(wmem_file_scope(), pinfo, proto_doip, 0, first_offset);

    }

    /* Set protocol and clear information columns */

    col_set_str(pinfo->cinfo, COL_PROTOCOL, "DoIP");

    if (*first_offset == raw_offset_tvb) {

        col_clear(pinfo->cinfo, COL_INFO);

    } else {

        col_append_str(pinfo->cinfo, COL_INFO, " / ");

    }

    if (

        version == ISO13400_2010 ||

        version == ISO13400_2012 ||

        version == ISO13400_2019 ||

        version == ISO13400_2019_AMD1 ||

        (version == DEFAULT_VALUE && (payload_type >= DOIP_VEHICLE_IDENTIFICATION_REQ && payload_type <= DOIP_VEHICLE_IDENTIFICATION_REQ_VIN))

        ) {

        col_append_str(pinfo->cinfo, COL_INFO, resolve_doip_payload_type(pinfo->pool, payload_type, true));

    } else {

        col_append_str(pinfo->cinfo, COL_INFO, "Invalid/unsupported DoIP version");

    }

    if (tree) {

        proto_item *ti = NULL;

        proto_tree *doip_tree = NULL;

        ti = proto_tree_add_item(tree, proto_doip, tvb, 0, -1, ENC_NA);

        doip_tree = proto_item_add_subtree(ti, ett_doip);

        add_header(tvb, pinfo, doip_tree);

        switch (payload_type) {

        case DOIP_GENERIC_NACK:

            add_generic_header_nack_fields(doip_tree, tvb);

            break;

        case DOIP_VEHICLE_IDENTIFICATION_REQ:

            break;

        case DOIP_VEHICLE_IDENTIFICATION_REQ_EID:

            add_vehicle_identification_eid_fields(doip_tree, tvb);

            break;

        case DOIP_VEHICLE_IDENTIFICATION_REQ_VIN:

            add_vehicle_identification_vin_fields(doip_tree, tvb);

            break;

        case DOIP_ROUTING_ACTIVATION_REQUEST:

            add_routing_activation_request_fields(doip_tree, tvb, version);

            break;

        case DOIP_ROUTING_ACTIVATION_RESPONSE:

            add_routing_activation_response_fields(doip_tree, tvb);

            break;

        case DOIP_VEHICLE_ANNOUNCEMENT_MESSAGE:

            add_vehicle_announcement_message_fields(doip_tree, tvb);

            break;

        case DOIP_ALIVE_CHECK_REQUEST:

            break;

        case DOIP_ALIVE_CHECK_RESPONSE:

            add_alive_check_response_fields(doip_tree, tvb);

            break;

        case DOIP_ENTITY_STATUS_REQUEST:

            break;

        case DOIP_ENTITY_STATUS_RESPONSE:

            add_entity_status_response_fields(doip_tree, tvb);

            break;

        case DOIP_POWER_INFORMATION_REQUEST:

            break;

        case DOIP_POWER_INFORMATION_RESPONSE:

            add_power_mode_information_response_fields(doip_tree, tvb);

            break;

        case DOIP_DIAGNOSTIC_MESSAGE:

            add_diagnostic_message_fields(doip_tree, tvb, pinfo, tree);

            break;

        case DOIP_DIAGNOSTIC_MESSAGE_ACK:

            add_diagnostic_message_ack_fields(doip_tree, tvb);

            break;

        case DOIP_DIAGNOSTIC_MESSAGE_NACK:

            add_diagnostic_message_nack_fields(doip_tree, tvb);

            break;

        }

    } else if (payload_type == DOIP_DIAGNOSTIC_MESSAGE) {

        /* Show UDS details in info column */

        if (uds_handle != 0) {

            doip_info_t doip_info;

            doip_info.source_address = tvb_get_uint16(tvb, DOIP_DIAG_COMMON_SOURCE_OFFSET, ENC_BIG_ENDIAN);

            doip_info.target_address = tvb_get_uint16(tvb, DOIP_DIAG_COMMON_TARGET_OFFSET, ENC_BIG_ENDIAN);

            call_dissector_with_data(uds_handle, tvb_new_subset_remaining(tvb, DOIP_DIAG_MESSAGE_DATA_OFFSET), pinfo, NULL, &doip_info);

        }

    }

}

/* determine PDU length of protocol DoIP */

static unsigned

get_doip_message_len(packet_info *pinfo _U_, tvbuff_t *tvb, int offset, void *p _U_)

{

    uint8_t ver1 = tvb_get_uint8(tvb, offset + DOIP_VERSION_OFFSET);

    uint8_t ver2 = tvb_get_uint8(tvb, offset + DOIP_INV_VERSION_OFFSET);

    if (ver1 != ((~ver2) & 0xff)) {

        /* if ver2 is not the inverse of ver1, we are not at the start of a DoIP message! */

        /* bounds_error: (0 < return < DOIP_HEADER_LEN) */

        return 1;

    }

    /* PDU Length = length field value + header length */

    uint32_t ret = tvb_get_ntohl(tvb, offset + DOIP_LENGTH_OFFSET) + DOIP_HEADER_LEN;

    if (ret < DOIP_HEADER_LEN || ret > 0x7fffffff) {

        /* catch illegal length fields (overflow or too big) */

        return DOIP_HEADER_LEN;

    }

    return ret;

}

static int

dissect_doip_pdu(tvbuff_t *tvb, packet_info *pinfo, proto_tree *tree, void *data _U_)

{

    dissect_doip_message(tvb, pinfo, tree);

    return tvb_captured_length(tvb);

}

static int

dissect_doip(tvbuff_t *tvb, packet_info *pinfo _U_, proto_tree *tree _U_, void *data)

{

    tcp_dissect_pdus(tvb, pinfo, tree, true, DOIP_HEADER_LEN, get_doip_message_len, dissect_doip_pdu, data);

    return tvb_captured_length(tvb);

}

/* Register DoIP Protocol */

void

proto_register_doip(void)

{

    module_t        *doip_module = NULL;

    expert_module_t *expert_module_doip = NULL;

    uat_t           *doip_diag_addr_uat = NULL;

    uat_t           *doip_payload_type_uat = NULL;

    static hf_register_info hf[] = {

        /* Header */

        { &hf_doip_version,

          { "Version", "doip.version",

            FT_UINT8, BASE_HEX,

            VALS(doip_versions), 0x0,

            NULL, HFILL }

        },

        { &hf_doip_inv_version,

          { "Inverse version", "doip.inverse",

            FT_UINT8, BASE_HEX,

            NULL, 0x0,

            NULL, HFILL }

        },

        { &hf_doip_type,

          { "Type", "doip.type",

            FT_UINT16, BASE_HEX,

            VALS(doip_payloads), 0x0,

            NULL, HFILL }

        },

        { &hf_doip_length,

          { "Length", "doip.length",

            FT_UINT32, BASE_DEC,

            NULL, 0x0,

            NULL, HFILL }

        },

        /* Generic NACK */

        {

            &hf_generic_nack_code,

            {

                "DoIP Header NACK code", "doip.nack_code",