From a2b163becad4e9ff68551d67df951af4007bdaca Mon Sep 17 00:00:00 2001
From: havup <42641299+havup@users.noreply.github.com>
Date: Wed, 25 Mar 2020 19:04:00 +0800
Subject: Update ndpi_protocol_ids.h
---
src/include/ndpi_protocol_ids.h | 1 +
1 file changed, 1 insertion(+)
(limited to 'src')
diff --git a/src/include/ndpi_protocol_ids.h b/src/include/ndpi_protocol_ids.h
index d2190afc1..ee71038cc 100644
--- a/src/include/ndpi_protocol_ids.h
+++ b/src/include/ndpi_protocol_ids.h
@@ -278,6 +278,7 @@ typedef enum {
NDPI_PROTOCOL_BLOOMBERG = 246,
NDPI_PROTOCOL_CAPWAP = 247,
NDPI_PROTOCOL_ZABBIX = 248,
+ NDPI_PROTOCOL_S7COMM = 249,
#ifdef CUSTOM_NDPI_PROTOCOLS
#include "../../../nDPI-custom/custom_ndpi_protocol_ids.h"
--
cgit v1.2.3
From 6c3cbe50e24c1d6b278643fb825e76ec09b7bb88 Mon Sep 17 00:00:00 2001
From: havup <42641299+havup@users.noreply.github.com>
Date: Wed, 25 Mar 2020 19:04:35 +0800
Subject: Update ndpi_protocols.h
---
src/include/ndpi_protocols.h | 1 +
1 file changed, 1 insertion(+)
(limited to 'src')
diff --git a/src/include/ndpi_protocols.h b/src/include/ndpi_protocols.h
index 2cae4b203..a5113acf5 100644
--- a/src/include/ndpi_protocols.h
+++ b/src/include/ndpi_protocols.h
@@ -216,4 +216,5 @@ void init_wireguard_dissector(struct ndpi_detection_module_struct *ndpi_struct,
void init_targus_getdata_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id, NDPI_PROTOCOL_BITMASK *detection_bitmask);
void init_dnp3_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id, NDPI_PROTOCOL_BITMASK *detection_bitmask);
void init_104_dissector(struct ndpi_detection_module_struct *ndpi_struct, u_int32_t *id, NDPI_PROTOCOL_BITMASK *detection_bitmask);
+void init_s7comm_dissector(struct ndpi_detection_module_struct *ndpi_struct,u_int32_t *id, NDPI_PROTOCOL_BITMASK *detection_bitmask);
#endif /* __NDPI_PROTOCOLS_H__ */
--
cgit v1.2.3
From 4d95dae2ae2beabbd9c4ceb86444a9643781ab8f Mon Sep 17 00:00:00 2001
From: havup <42641299+havup@users.noreply.github.com>
Date: Wed, 25 Mar 2020 19:05:49 +0800
Subject: Update ndpi_main.c
---
src/lib/ndpi_main.c | 6 ++++++
1 file changed, 6 insertions(+)
(limited to 'src')
diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c
index 21491c5e7..a9caf52ec 100644
--- a/src/lib/ndpi_main.c
+++ b/src/lib/ndpi_main.c
@@ -1782,6 +1782,12 @@ static void ndpi_init_protocol_defaults(struct ndpi_detection_module_struct *ndp
ndpi_build_default_ports(ports_a, 10050, 0, 0, 0, 0) /* TCP */,
ndpi_build_default_ports(ports_b, 0, 0, 0, 0, 0) /* UDP */
);
+ ndpi_set_proto_defaults(ndpi_str, NDPI_PROTOCOL_ACCEPTABLE, NDPI_PROTOCOL_S7COMM,
+ 1 /* no subprotocol */, no_master,
+ no_master, "s7comm", NDPI_PROTOCOL_CATEGORY_NETWORK,
+ ndpi_build_default_ports(ports_a, 102, 0, 0, 0, 0) /* TCP */,
+ ndpi_build_default_ports(ports_b, 0, 0, 0, 0, 0) /* UDP */
+ );
#ifdef CUSTOM_NDPI_PROTOCOLS
#include "../../../nDPI-custom/custom_ndpi_main.c"
--
cgit v1.2.3
From ac17e0bea7a4629477ab32b6624daa9c6484b9b6 Mon Sep 17 00:00:00 2001
From: havup <42641299+havup@users.noreply.github.com>
Date: Wed, 25 Mar 2020 19:06:36 +0800
Subject: Update ndpi_main.c
---
src/lib/ndpi_main.c | 3 +++
1 file changed, 3 insertions(+)
(limited to 'src')
diff --git a/src/lib/ndpi_main.c b/src/lib/ndpi_main.c
index a9caf52ec..e6d7385e5 100644
--- a/src/lib/ndpi_main.c
+++ b/src/lib/ndpi_main.c
@@ -3531,6 +3531,9 @@ void ndpi_set_protocol_detection_bitmask2(struct ndpi_detection_module_struct *n
/* Targus Getdata */
init_targus_getdata_dissector(ndpi_str, &a, detection_bitmask);
+
+ /* S7 comm */
+ init_s7comm_dissector(ndpi_str, &a, detection_bitmask);
#ifdef CUSTOM_NDPI_PROTOCOLS
#include "../../../nDPI-custom/custom_ndpi_main_init.c"
--
cgit v1.2.3
From 779d9a6e517e742002b1bb096bc4757e37169c4d Mon Sep 17 00:00:00 2001
From: havup <42641299+havup@users.noreply.github.com>
Date: Wed, 25 Mar 2020 19:09:14 +0800
Subject: Add files via upload
---
src/lib/protocols/s7comm.c | 58 ++++++++++++++++++++++++++++++++++++++++++++++
1 file changed, 58 insertions(+)
create mode 100644 src/lib/protocols/s7comm.c
(limited to 'src')
diff --git a/src/lib/protocols/s7comm.c b/src/lib/protocols/s7comm.c
new file mode 100644
index 000000000..e8f637c97
--- /dev/null
+++ b/src/lib/protocols/s7comm.c
@@ -0,0 +1,58 @@
+/*
+ * ndpi_main.c
+ *
+ * Copyright (C) 2011-20 - ntop.org
+ *
+ * This file is part of nDPI, an open source deep packet inspection
+ * library based on the OpenDPI and PACE technology by ipoque GmbH
+ *
+ * nDPI is free software: you can redistribute it and/or modify
+ * it under the terms of the GNU Lesser General Public License as published by
+ * the Free Software Foundation, either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * nDPI is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU Lesser General Public License for more details.
+ *
+ * You should have received a copy of the GNU Lesser General Public License
+ * along with nDPI. If not, see .
+ *
+ */
+#include "ndpi_protocol_ids.h"
+#include "ndpi_api.h"
+#define NDPI_CURRENT_PROTO NDPI_PROTOCOL_S7COMM
+#define S7_COMMON_PORT 102
+void ndpi_search_s7comm_tcp(struct ndpi_detection_module_struct *ndpi_struct,
+ struct ndpi_flow_struct *flow) {
+ struct ndpi_packet_struct *packet = &flow->packet
+ ;
+ NDPI_LOG_DBG(ndpi_struct, "search S7\n");
+ u_int16_t s7comm_port = htons(S7_COMMON_PORT);
+ if(packet->tcp) {
+
+ if((packet->payload[0]==0x03)&&(packet->payload[1]==0x00)&&((packet->tcp->dest == s7comm_port) || (packet->tcp->source == s7comm_port))) {
+ NDPI_LOG_INFO(ndpi_struct, "found S7\n");
+ ndpi_set_detected_protocol(ndpi_struct, flow, NDPI_PROTOCOL_S7COMM, NDPI_PROTOCOL_UNKNOWN);
+
+ return;
+
+ }
+ }
+
+ NDPI_EXCLUDE_PROTO(ndpi_struct, flow);
+
+}
+
+void init_s7comm_dissector(struct ndpi_detection_module_struct *ndpi_struct,
+ u_int32_t *id, NDPI_PROTOCOL_BITMASK *detection_bitmask) {
+
+ ndpi_set_bitmask_protocol_detection("S7COMM", ndpi_struct, detection_bitmask, *id,
+ NDPI_PROTOCOL_S7COMM,
+ ndpi_search_s7comm_tcp, NDPI_SELECTION_BITMASK_PROTOCOL_V4_V6_TCP_WITH_PAYLOAD,
+ SAVE_DETECTION_BITMASK_AS_UNKNOWN,
+ ADD_TO_DETECTION_BITMASK);
+ *id += 1;
+}
+
--
cgit v1.2.3
From 74825ffc6efd4c8c73af39d6eadcaa15b8b7185c Mon Sep 17 00:00:00 2001
From: havup <42641299+havup@users.noreply.github.com>
Date: Thu, 26 Mar 2020 13:06:02 +0800
Subject: Update s7comm.c
---
src/lib/protocols/s7comm.c | 7 +++----
1 file changed, 3 insertions(+), 4 deletions(-)
(limited to 'src')
diff --git a/src/lib/protocols/s7comm.c b/src/lib/protocols/s7comm.c
index e8f637c97..9a9f4c52b 100644
--- a/src/lib/protocols/s7comm.c
+++ b/src/lib/protocols/s7comm.c
@@ -23,13 +23,12 @@
#include "ndpi_protocol_ids.h"
#include "ndpi_api.h"
#define NDPI_CURRENT_PROTO NDPI_PROTOCOL_S7COMM
-#define S7_COMMON_PORT 102
+
void ndpi_search_s7comm_tcp(struct ndpi_detection_module_struct *ndpi_struct,
struct ndpi_flow_struct *flow) {
- struct ndpi_packet_struct *packet = &flow->packet
- ;
+ struct ndpi_packet_struct *packet = &flow->packet;
NDPI_LOG_DBG(ndpi_struct, "search S7\n");
- u_int16_t s7comm_port = htons(S7_COMMON_PORT);
+ u_int16_t s7comm_port = htons(102);
if(packet->tcp) {
if((packet->payload[0]==0x03)&&(packet->payload[1]==0x00)&&((packet->tcp->dest == s7comm_port) || (packet->tcp->source == s7comm_port))) {
--
cgit v1.2.3
From efdac78ddc127fb081a2d31f9154e78f77eec2b1 Mon Sep 17 00:00:00 2001
From: havup <42641299+havup@users.noreply.github.com>
Date: Fri, 27 Mar 2020 11:19:50 +0800
Subject: Update s7comm.c
---
src/lib/protocols/s7comm.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
(limited to 'src')
diff --git a/src/lib/protocols/s7comm.c b/src/lib/protocols/s7comm.c
index 9a9f4c52b..7efe8665b 100644
--- a/src/lib/protocols/s7comm.c
+++ b/src/lib/protocols/s7comm.c
@@ -49,7 +49,7 @@ void init_s7comm_dissector(struct ndpi_detection_module_struct *ndpi_struct,
ndpi_set_bitmask_protocol_detection("S7COMM", ndpi_struct, detection_bitmask, *id,
NDPI_PROTOCOL_S7COMM,
- ndpi_search_s7comm_tcp, NDPI_SELECTION_BITMASK_PROTOCOL_V4_V6_TCP_WITH_PAYLOAD,
+ ndpi_search_s7comm_tcp, NDPI_SELECTION_BITMASK_PROTOCOL_V4_V6_TCP_WITH_PAYLOAD_WITHOUT_RETRANSMISSION,
SAVE_DETECTION_BITMASK_AS_UNKNOWN,
ADD_TO_DETECTION_BITMASK);
*id += 1;
--
cgit v1.2.3
From 803b13a7a8fa66f88f9f136ea8470c2b1372e19f Mon Sep 17 00:00:00 2001
From: havup <42641299+havup@users.noreply.github.com>
Date: Fri, 27 Mar 2020 12:58:56 +0800
Subject: Update s7comm.c
---
src/lib/protocols/s7comm.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
(limited to 'src')
diff --git a/src/lib/protocols/s7comm.c b/src/lib/protocols/s7comm.c
index 7efe8665b..143d44b27 100644
--- a/src/lib/protocols/s7comm.c
+++ b/src/lib/protocols/s7comm.c
@@ -1,5 +1,5 @@
/*
- * ndpi_main.c
+ * s7comm.c
*
* Copyright (C) 2011-20 - ntop.org
*
--
cgit v1.2.3
From 24bb0b7f53675acc88200c094dfb0ca2e23e4673 Mon Sep 17 00:00:00 2001
From: havup <42641299+havup@users.noreply.github.com>
Date: Fri, 27 Mar 2020 13:09:46 +0800
Subject: Update s7comm.c
---
src/lib/protocols/s7comm.c | 5 ++---
1 file changed, 2 insertions(+), 3 deletions(-)
(limited to 'src')
diff --git a/src/lib/protocols/s7comm.c b/src/lib/protocols/s7comm.c
index 143d44b27..e73711fc0 100644
--- a/src/lib/protocols/s7comm.c
+++ b/src/lib/protocols/s7comm.c
@@ -1,8 +1,7 @@
/*
* s7comm.c
- *
* Copyright (C) 2011-20 - ntop.org
- *
+ *
* This file is part of nDPI, an open source deep packet inspection
* library based on the OpenDPI and PACE technology by ipoque GmbH
*
@@ -18,7 +17,7 @@
*
* You should have received a copy of the GNU Lesser General Public License
* along with nDPI. If not, see .
- *
+ *
*/
#include "ndpi_protocol_ids.h"
#include "ndpi_api.h"
--
cgit v1.2.3
From 1bab8a1c2238860c655ebff2ace5cf79e7873e63 Mon Sep 17 00:00:00 2001
From: havup <42641299+havup@users.noreply.github.com>
Date: Fri, 27 Mar 2020 14:02:10 +0800
Subject: Update s7comm.c
---
src/lib/protocols/s7comm.c | 1 +
1 file changed, 1 insertion(+)
(limited to 'src')
diff --git a/src/lib/protocols/s7comm.c b/src/lib/protocols/s7comm.c
index e73711fc0..8a522a2c7 100644
--- a/src/lib/protocols/s7comm.c
+++ b/src/lib/protocols/s7comm.c
@@ -1,5 +1,6 @@
/*
* s7comm.c
+ *
* Copyright (C) 2011-20 - ntop.org
*
* This file is part of nDPI, an open source deep packet inspection
--
cgit v1.2.3