Tony Li's changes, from FreeBSD, to support filtering for OSI packets

[libpcap] / gencode.c

diff --git a/gencode.c b/gencode.c
index 394290b5fa6769cb7a8d41300ab2d9d5dedee25a..ea844903b1a8b74c85109358f532d1565ef29abb 100644 (file)
--- a/gencode.c
+++ b/gencode.c
@@ -21,7 +21,7 @@
  */
 #ifndef lint
 static const char rcsid[] =
  */
 #ifndef lint
 static const char rcsid[] =

-    "@(#) $Header: /tcpdump/master/libpcap/gencode.c,v 1.128 2000-10-28 09:06:06 guy Exp $ (LBL)";
+    "@(#) $Header: /tcpdump/master/libpcap/gencode.c,v 1.129 2000-10-28 09:30:21 guy Exp $ (LBL)";

 #endif
 
 #ifdef HAVE_CONFIG_H
 #endif
 
 #ifdef HAVE_CONFIG_H


@@ -50,6 +50,7 @@ struct rtentry;
 #include "pcap-int.h"
 
 #include "ethertype.h"
 #include "pcap-int.h"
 
 #include "ethertype.h"

+#include "nlpid.h"

 #include "gencode.h"
 #include "ppp.h"
 #include <pcap-namedb.h>
 #include "gencode.h"
 #include "ppp.h"
 #include <pcap-namedb.h>


@@ -58,6 +59,10 @@ struct rtentry;
 #include <sys/socket.h>
 #endif /*INET6*/
 
 #include <sys/socket.h>
 #endif /*INET6*/
 

+#define LLC_ISO_LSAP   0xfe
+
+#define ETHERMTU       1500
+

 #ifdef HAVE_OS_PROTO_H
 #include "os-proto.h"
 #endif
 #ifdef HAVE_OS_PROTO_H
 #include "os-proto.h"
 #endif


@@ -730,6 +735,17 @@ gen_linktype(proto)
                 */
                switch (proto) {
 
                 */
                switch (proto) {
 

+               case LLC_ISO_LSAP:
+                       /*
+                        * OSI protocols always use 802.2 encapsulation.
+                        */
+                       b0 = gen_cmp_gt(off_linktype, BPF_H, ETHERMTU);
+                       gen_not(b0);
+                       b1 = gen_cmp(off_linktype + 2, BPF_H, (long)
+                                    ((LLC_ISO_LSAP << 8) | LLC_ISO_LSAP));
+                       gen_and(b0, b1);
+                       return b1;
+

                case ETHERTYPE_ATALK:
                case ETHERTYPE_AARP:
                        /*
                case ETHERTYPE_ATALK:
                case ETHERTYPE_AARP:
                        /*


@@ -742,7 +758,7 @@ gen_linktype(proto)
                         * we check for an Ethernet type field less than
                         * 1500, which means it's an 802.3 length field.
                         */
                         * we check for an Ethernet type field less than
                         * 1500, which means it's an 802.3 length field.
                         */

-                       b0 = gen_cmp_gt(off_linktype, BPF_H, 1500);
+                       b0 = gen_cmp_gt(off_linktype, BPF_H, ETHERMTU);

                        gen_not(b0);
 
                        /*
                        gen_not(b0);
 
                        /*


@@ -1143,6 +1159,9 @@ gen_dnhostop(addr, dir, base_off)
                gen_or(b0, b1);
                return b1;
 
                gen_or(b0, b1);
                return b1;
 

+       case Q_ISO:
+               bpf_error("ISO host filtering not implemented");
+               

        default:
                abort();
        }
        default:
                abort();
        }


@@ -1528,6 +1547,18 @@ gen_proto_abbrev(proto)
 #endif
                break;
 
 #endif
                break;
 

+       case Q_ISO:
+               b1 = gen_linktype(LLC_ISO_LSAP);
+               break;
+
+       case Q_ESIS:
+               b1 = gen_proto(ISO9542_ESIS, Q_ISO, Q_DEFAULT);
+               break;
+
+       case Q_ISIS:
+               b1 = gen_proto(ISO10589_ISIS, Q_ISO, Q_DEFAULT);
+               break;
+

        default:
                abort();
        }
        default:
                abort();
        }


@@ -2099,6 +2130,12 @@ gen_proto(v, proto, dir)
                gen_and(b0, b1);
                return b1;
 
                gen_and(b0, b1);
                return b1;
 

+       case Q_ISO:
+               b0 = gen_linktype(LLC_ISO_LSAP);
+               b1 = gen_cmp(off_nl + 3, BPF_B, (long)v);
+               gen_and(b0, b1);
+               return b1;
+

        case Q_ARP:
                bpf_error("arp does not encapsulate another protocol");
                /* NOTREACHED */
        case Q_ARP:
                bpf_error("arp does not encapsulate another protocol");
                /* NOTREACHED */


@@ -2914,6 +2951,9 @@ gen_greater(n)
        return gen_len(BPF_JGE, n);
 }
 
        return gen_len(BPF_JGE, n);
 }
 

+/*
+ * Actually, this is less than or equal.
+ */

 struct block *
 gen_less(n)
        int n;
 struct block *
 gen_less(n)
        int n;