3 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
4 * The Regents of the University of California. All rights reserved.
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that: (1) source code distributions
8 * retain the above copyright notice and this paragraph in its entirety, (2)
9 * distributions including binary code include the above copyright notice and
10 * this paragraph in its entirety in the documentation or other materials
11 * provided with the distribution, and (3) all advertising materials mentioning
12 * features or use of this software display the following acknowledgement:
13 * ``This product includes software developed by the University of California,
14 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
15 * the University nor the names of its contributors may be used to endorse
16 * or promote products derived from this software without specific prior
18 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
19 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
20 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
24 #include <pcap-stdinc.h>
31 #ifdef HAVE_SYS_BITYPES_H
32 #include <sys/bitypes.h>
34 #include <sys/types.h>
48 * To quote the MSDN page for getaddrinfo() at
50 * https://msdn.microsoft.com/en-us/library/windows/desktop/ms738520(v=vs.85).aspx
52 * "Support for getaddrinfo on Windows 2000 and older versions
53 * The getaddrinfo function was added to the Ws2_32.dll on Windows XP and
54 * later. To execute an application that uses this function on earlier
55 * versions of Windows, then you need to include the Ws2tcpip.h and
56 * Wspiapi.h files. When the Wspiapi.h include file is added, the
57 * getaddrinfo function is defined to the WspiapiGetAddrInfo inline
58 * function in the Wspiapi.h file. At runtime, the WspiapiGetAddrInfo
59 * function is implemented in such a way that if the Ws2_32.dll or the
60 * Wship6.dll (the file containing getaddrinfo in the IPv6 Technology
61 * Preview for Windows 2000) does not include getaddrinfo, then a
62 * version of getaddrinfo is implemented inline based on code in the
63 * Wspiapi.h header file. This inline code will be used on older Windows
64 * platforms that do not natively support the getaddrinfo function."
66 * We use getaddrinfo(), so we include Wspiapi.h here. pcap-stdinc.h
67 * includes Ws2tcpip.h, so we don't need to include it ourselves.
71 #include <sys/socket.h> /* for "struct sockaddr" in "struct addrinfo" */
72 #include <netdb.h> /* for "struct addrinfo" */
75 /* Workaround for AIX 4.3 */
76 #if !defined(AI_NUMERICHOST)
77 #define AI_NUMERICHOST 0x04
82 #include <pcap/namedb.h>
85 #ifdef HAVE_OS_PROTO_H
89 static int stoi(char *);
90 static inline int xdtoi(int);
95 static YY_BUFFER_STATE in_buffer;
97 static const char *in_buffer;
100 #define getc(fp) (*in_buffer == 0 ? EOF : *in_buffer++)
103 #define yylval pcap_lval
104 extern YYSTYPE yylval;
108 N ([0-9]+|(0X|0x)[0-9A-Fa-f]+)
109 B ([0-9A-Fa-f][0-9A-Fa-f]?)
110 B2 ([0-9A-Fa-f][0-9A-Fa-f][0-9A-Fa-f][0-9A-Fa-f])
111 W ([0-9A-Fa-f][0-9A-Fa-f]?[0-9A-Fa-f]?[0-9A-Fa-f]?)
120 V680 {W}:{W}:{W}:{W}:{W}:{W}:{W}:{W}
122 V670 ::{W}:{W}:{W}:{W}:{W}:{W}:{W}
123 V671 {W}::{W}:{W}:{W}:{W}:{W}:{W}
124 V672 {W}:{W}::{W}:{W}:{W}:{W}:{W}
125 V673 {W}:{W}:{W}::{W}:{W}:{W}:{W}
126 V674 {W}:{W}:{W}:{W}::{W}:{W}:{W}
127 V675 {W}:{W}:{W}:{W}:{W}::{W}:{W}
128 V676 {W}:{W}:{W}:{W}:{W}:{W}::{W}
129 V677 {W}:{W}:{W}:{W}:{W}:{W}:{W}::
131 V660 ::{W}:{W}:{W}:{W}:{W}:{W}
132 V661 {W}::{W}:{W}:{W}:{W}:{W}
133 V662 {W}:{W}::{W}:{W}:{W}:{W}
134 V663 {W}:{W}:{W}::{W}:{W}:{W}
135 V664 {W}:{W}:{W}:{W}::{W}:{W}
136 V665 {W}:{W}:{W}:{W}:{W}::{W}
137 V666 {W}:{W}:{W}:{W}:{W}:{W}::
139 V650 ::{W}:{W}:{W}:{W}:{W}
140 V651 {W}::{W}:{W}:{W}:{W}
141 V652 {W}:{W}::{W}:{W}:{W}
142 V653 {W}:{W}:{W}::{W}:{W}
143 V654 {W}:{W}:{W}:{W}::{W}
144 V655 {W}:{W}:{W}:{W}:{W}::
146 V640 ::{W}:{W}:{W}:{W}
147 V641 {W}::{W}:{W}:{W}
148 V642 {W}:{W}::{W}:{W}
149 V643 {W}:{W}:{W}::{W}
150 V644 {W}:{W}:{W}:{W}::
166 V6604 {W}:{W}:{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N}
168 V6504 ::{W}:{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N}
169 V6514 {W}::{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N}
170 V6524 {W}:{W}::{W}:{W}:{W}:{N}\.{N}\.{N}\.{N}
171 V6534 {W}:{W}:{W}::{W}:{W}:{N}\.{N}\.{N}\.{N}
172 V6544 {W}:{W}:{W}:{W}::{W}:{N}\.{N}\.{N}\.{N}
173 V6554 {W}:{W}:{W}:{W}:{W}::{N}\.{N}\.{N}\.{N}
175 V6404 ::{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N}
176 V6414 {W}::{W}:{W}:{W}:{N}\.{N}\.{N}\.{N}
177 V6424 {W}:{W}::{W}:{W}:{N}\.{N}\.{N}\.{N}
178 V6434 {W}:{W}:{W}::{W}:{N}\.{N}\.{N}\.{N}
179 V6444 {W}:{W}:{W}:{W}::{N}\.{N}\.{N}\.{N}
181 V6304 ::{W}:{W}:{W}:{N}\.{N}\.{N}\.{N}
182 V6314 {W}::{W}:{W}:{N}\.{N}\.{N}\.{N}
183 V6324 {W}:{W}::{W}:{N}\.{N}\.{N}\.{N}
184 V6334 {W}:{W}:{W}::{N}\.{N}\.{N}\.{N}
186 V6204 ::{W}:{W}:{N}\.{N}\.{N}\.{N}
187 V6214 {W}::{W}:{N}\.{N}\.{N}\.{N}
188 V6224 {W}:{W}::{N}\.{N}\.{N}\.{N}
190 V6104 ::{W}:{N}\.{N}\.{N}\.{N}
191 V6114 {W}::{N}\.{N}\.{N}\.{N}
193 V6004 ::{N}\.{N}\.{N}\.{N}
196 V6 ({V680}|{V670}|{V671}|{V672}|{V673}|{V674}|{V675}|{V676}|{V677}|{V660}|{V661}|{V662}|{V663}|{V664}|{V665}|{V666}|{V650}|{V651}|{V652}|{V653}|{V654}|{V655}|{V640}|{V641}|{V642}|{V643}|{V644}|{V630}|{V631}|{V632}|{V633}|{V620}|{V621}|{V622}|{V610}|{V611}|{V600}|{V6604}|{V6504}|{V6514}|{V6524}|{V6534}|{V6544}|{V6554}|{V6404}|{V6414}|{V6424}|{V6434}|{V6444}|{V6304}|{V6314}|{V6324}|{V6334}|{V6204}|{V6214}|{V6224}|{V6104}|{V6114}|{V6004})
198 MAC ({B}:{B}:{B}:{B}:{B}:{B}|{B}\-{B}\-{B}\-{B}\-{B}\-{B}|{B}\.{B}\.{B}\.{B}\.{B}\.{B}|{B2}\.{B2}\.{B2}|{B2}{3})
206 link|ether|ppp|slip return LINK;
207 fddi|tr|wlan return LINK;
229 decnet return DECNET;
254 netbeui return NETBEUI;
260 portrange return PORTRANGE;
264 bpf_error("%s not supported", yytext);
270 gateway return GATEWAY;
273 subtype return SUBTYPE;
274 direction|dir return DIR;
275 address1|addr1 return ADDR1;
276 address2|addr2 return ADDR2;
277 address3|addr3 return ADDR3;
278 address4|addr4 return ADDR4;
283 greater return GREATER;
285 broadcast return TK_BROADCAST;
286 multicast return TK_MULTICAST;
292 len|length return LEN;
293 inbound return INBOUND;
294 outbound return OUTBOUND;
298 pppoed return PPPOED;
299 pppoes return PPPOES;
300 geneve return GENEVE;
308 oamf4ec return OAMF4EC;
309 oamf4sc return OAMF4SC;
314 connectmsg return CONNECTMSG;
315 metaconnect return METACONNECT;
317 on|ifname return PF_IFNAME;
318 rset|ruleset return PF_RSET;
319 rnr|rulenum return PF_RNR;
320 srnr|subrulenum return PF_SRNR;
321 reason return PF_REASON;
322 action return PF_ACTION;
341 [+\-*/%:\[\]!<>()&|\^=] return yytext[0];
348 ${B} { yylval.e = pcap_ether_aton(((char *)yytext)+1);
349 if (yylval.e == NULL)
352 {MAC} { yylval.e = pcap_ether_aton((char *)yytext);
353 if (yylval.e == NULL)
356 {N} { yylval.i = stoi((char *)yytext); return NUM; }
357 ({N}\.{N})|({N}\.{N}\.{N})|({N}\.{N}\.{N}\.{N}) {
358 yylval.s = sdup((char *)yytext); return HID; }
361 struct addrinfo hints, *res;
362 memset(&hints, 0, sizeof(hints));
363 hints.ai_family = AF_INET6;
364 hints.ai_flags = AI_NUMERICHOST;
365 if (getaddrinfo(yytext, NULL, &hints, &res))
366 bpf_error("bogus IPv6 address %s", yytext);
369 yylval.s = sdup((char *)yytext); return HID6;
372 bpf_error("IPv6 address %s not supported", yytext);
375 {B}:+({B}:+)+ { bpf_error("bogus ethernet address %s", yytext); }
376 icmptype { yylval.i = 0; return NUM; }
377 icmpcode { yylval.i = 1; return NUM; }
378 icmp-echoreply { yylval.i = 0; return NUM; }
379 icmp-unreach { yylval.i = 3; return NUM; }
380 icmp-sourcequench { yylval.i = 4; return NUM; }
381 icmp-redirect { yylval.i = 5; return NUM; }
382 icmp-echo { yylval.i = 8; return NUM; }
383 icmp-routeradvert { yylval.i = 9; return NUM; }
384 icmp-routersolicit { yylval.i = 10; return NUM; }
385 icmp-timxceed { yylval.i = 11; return NUM; }
386 icmp-paramprob { yylval.i = 12; return NUM; }
387 icmp-tstamp { yylval.i = 13; return NUM; }
388 icmp-tstampreply { yylval.i = 14; return NUM; }
389 icmp-ireq { yylval.i = 15; return NUM; }
390 icmp-ireqreply { yylval.i = 16; return NUM; }
391 icmp-maskreq { yylval.i = 17; return NUM; }
392 icmp-maskreply { yylval.i = 18; return NUM; }
393 tcpflags { yylval.i = 13; return NUM; }
394 tcp-fin { yylval.i = 0x01; return NUM; }
395 tcp-syn { yylval.i = 0x02; return NUM; }
396 tcp-rst { yylval.i = 0x04; return NUM; }
397 tcp-push { yylval.i = 0x08; return NUM; }
398 tcp-ack { yylval.i = 0x10; return NUM; }
399 tcp-urg { yylval.i = 0x20; return NUM; }
400 [A-Za-z0-9]([-_.A-Za-z0-9]*[.A-Za-z0-9])? {
401 yylval.s = sdup((char *)yytext); return ID; }
402 "\\"[^ !()\n\t]+ { yylval.s = sdup((char *)yytext + 1); return ID; }
403 [^ \[\]\t\n\-_.A-Za-z0-9!<>()&|=]+ {
404 bpf_error("illegal token: %s", yytext); }
405 . { bpf_error("illegal char '%c'", *yytext); }
412 in_buffer = yy_scan_string(buf);
419 * Do any cleanup necessary after parsing.
425 if (in_buffer != NULL)
426 yy_delete_buffer(in_buffer);
432 * Also define a yywrap. Note that if we're using flex, it will
433 * define a macro to map this identifier to pcap_wrap.
441 /* Hex digit to integer. */
455 * Convert string to integer. Just like atoi(), but checks for
456 * preceding 0x or 0 and uses hex or octal instead of decimal.
466 if (s[1] == 'x' || s[1] == 'X') {
476 n = n * base + xdtoi(*s++);