]> The Tcpdump Group git mirrors - tcpdump/blob - print-ppp.c
projects / tcpdump / blob
summary | shortlog | log | commit | commitdiff | tree
history | raw | HEAD
whitespace cleanup
[tcpdump] / print-ppp.c
1 /*
2 * Copyright (c) 1990, 1991, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 *
21 * Extensively modified by Motonori Shindo (mshindo@mshindo.net) for more
22 * complete PPP support.
23 */
24
25 /*
26 * TODO:
27 * o resolve XXX as much as possible
28 * o MP support
29 * o BAP support
30 */
31
32 #ifndef lint
33 static const char rcsid[] =
34 "@(#) $Header: /tcpdump/master/tcpdump/print-ppp.c,v 1.67 2002-06-11 17:08:54 itojun Exp $ (LBL)";
35 #endif
36
37 #ifdef HAVE_CONFIG_H
38 #include "config.h"
39 #endif
40
41 #include <sys/param.h>
42 #include <sys/time.h>
43
44 #ifdef __bsdi__
45 #include <net/slcompress.h>
46 #include <net/if_ppp.h>
47 #endif
48
49 #include <netinet/in.h>
50
51 #include <ctype.h>
52 #include <netdb.h>
53 #include <pcap.h>
54 #include <stdio.h>
55
56 #include "interface.h"
57 #include "extract.h"
58 #include "addrtoname.h"
59 #include "ppp.h"
60 #include "chdlc.h"
61 #include "ethertype.h"
62
63 /*
64 * The following constatns are defined by IANA. Please refer to
65 * http://www.isi.edu/in-notes/iana/assignments/ppp-numbers
66 * for the up-to-date information.
67 */
68
69 /* Control Protocols (LCP/IPCP/CCP etc.) Codes */
70
71 #define CPCODES_VEXT 0 /* Vendor-Specific (RFC2153) */
72 #define CPCODES_CONF_REQ 1 /* Configure-Request */
73 #define CPCODES_CONF_ACK 2 /* Configure-Ack */
74 #define CPCODES_CONF_NAK 3 /* Configure-Nak */
75 #define CPCODES_CONF_REJ 4 /* Configure-Reject */
76 #define CPCODES_TERM_REQ 5 /* Terminate-Request */
77 #define CPCODES_TERM_ACK 6 /* Terminate-Ack */
78 #define CPCODES_CODE_REJ 7 /* Code-Reject */
79 #define CPCODES_PROT_REJ 8 /* Protocol-Reject (LCP only) */
80 #define CPCODES_ECHO_REQ 9 /* Echo-Request (LCP only) */
81 #define CPCODES_ECHO_RPL 10 /* Echo-Reply (LCP only) */
82 #define CPCODES_DISC_REQ 11 /* Discard-Request (LCP only) */
83 #define CPCODES_ID 12 /* Identification (LCP only) */
84 #define CPCODES_TIME_REM 13 /* Time-Remaining (LCP only) */
85 #define CPCODES_RESET_REQ 14 /* Reset-Request (CCP only) */
86 #define CPCODES_RESET_REP 15 /* Reset-Reply (CCP only) */
87
88 #define CPCODES_MIN CPCODES_VEXT
89 #define CPCODES_MAX CPCODES_RESET_REP
90
91 static const char *cpcodes[] = {
92 /*
93 * Control Protocol code values (RFC1661)
94 */
95 "Vend-Ext", /* (0) RFC2153 */
96 "Conf-Req", /* (1) */
97 "Conf-Ack", /* (2) */
98 "Conf-Nak", /* (3) */
99 "Conf-Rej", /* (4) */
100 "Term-Req", /* (5) */
101 "Term-Ack", /* (6) */
102 "Code-Rej", /* (7) */
103 "Prot-Rej", /* (8) */
104 "Echo-Req", /* (9) */
105 "Echo-Rep", /* (10) */
106 "Disc-Req", /* (11) */
107 "Ident", /* (12) RFC1570 */
108 "Time-Rem", /* (13) RFC1570 */
109 "Reset-Req", /* (14) RFC1962 */
110 "Reset-Ack", /* (15) RFC1962 */
111 };
112
113 /* LCP Config Options */
114
115 #define LCPOPT_VEXT 0
116 #define LCPOPT_MRU 1
117 #define LCPOPT_ACCM 2
118 #define LCPOPT_AP 3
119 #define LCPOPT_QP 4
120 #define LCPOPT_MN 5
121 #define LCPOPT_DEP6 6
122 #define LCPOPT_PFC 7
123 #define LCPOPT_ACFC 8
124 #define LCPOPT_FCSALT 9
125 #define LCPOPT_SDP 10
126 #define LCPOPT_NUMMODE 11
127 #define LCPOPT_DEP12 12
128 #define LCPOPT_CBACK 13
129 #define LCPOPT_DEP14 14
130 #define LCPOPT_DEP15 15
131 #define LCPOPT_DEP16 16
132 #define LCPOPT_MLMRRU 17
133 #define LCPOPT_MLSSNHF 18
134 #define LCPOPT_MLED 19
135 #define LCPOPT_PROP 20
136 #define LCPOPT_DCEID 21
137 #define LCPOPT_MPP 22
138 #define LCPOPT_LD 23
139 #define LCPOPT_LCPAOPT 24
140 #define LCPOPT_COBS 25
141 #define LCPOPT_PE 26
142 #define LCPOPT_MLHF 27
143 #define LCPOPT_I18N 28
144 #define LCPOPT_SDLOS 29
145 #define LCPOPT_PPPMUX 30
146
147 #define LCPOPT_MIN LCPOPT_VEXT
148 #define LCPOPT_MAX LCPOPT_PPPMUX
149
150 static const char *lcpconfopts[] = {
151 "Vend-Ext", /* (0) */
152 "MRU", /* (1) */
153 "ACCM", /* (2) */
154 "Auth-Prot", /* (3) */
155 "Qual-Prot", /* (4) */
156 "Magic-Num", /* (5) */
157 "deprecated(6)", /* used to be a Quality Protocol */
158 "PFC", /* (7) */
159 "ACFC", /* (8) */
160 "FCS-Alt", /* (9) */
161 "SDP", /* (10) */
162 "Num-Mode", /* (11) */
163 "deprecated(12)", /* used to be a Multi-Link-Procedure*/
164 "Call-Back", /* (13) */
165 "deprecated(14)", /* used to be a Connect-Time */
166 "deprecated(15)", /* used to be a Compund-Frames */
167 "deprecated(16)", /* used to be a Nominal-Data-Encap */
168 "MRRU", /* (17) */
169 "SSNHF", /* (18) */
170 "End-Disc", /* (19) */
171 "Proprietary", /* (20) */
172 "DCE-Id", /* (21) */
173 "MP+", /* (22) */
174 "Link-Disc", /* (23) */
175 "LCP-Auth-Opt", /* (24) */
176 "COBS", /* (25) */
177 "Prefix-elision", /* (26) */
178 "Multilink-header-Form",/* (27) */
179 "I18N", /* (28) */
180 "SDL-over-SONET/SDH", /* (29) */
181 "PPP-Muxing", /* (30) */
182 };
183
184 /* IPV6CP - to be supported */
185 /* ECP - to be supported */
186
187 /* CCP Config Options */
188
189 #define CCPOPT_OUI 0 /* RFC1962 */
190 #define CCPOPT_PRED1 1 /* RFC1962 */
191 #define CCPOPT_PRED2 2 /* RFC1962 */
192 #define CCPOPT_PJUMP 3 /* RFC1962 */
193 /* 4-15 unassigned */
194 #define CCPOPT_HPPPC 16 /* RFC1962 */
195 #define CCPOPT_STACLZS 17 /* RFC1974 */
196 #define CCPOPT_MPPC 18 /* RFC2118 */
197 #define CCPOPT_GFZA 19 /* RFC1962 */
198 #define CCPOPT_V42BIS 20 /* RFC1962 */
199 #define CCPOPT_BSDCOMP 21 /* RFC1977 */
200 /* 22 unassigned */
201 #define CCPOPT_LZSDCP 23 /* RFC1967 */
202 #define CCPOPT_MVRCA 24 /* RFC1975 */
203 #define CCPOPT_DEC 25 /* RFC1976 */
204 #define CCPOPT_DEFLATE 26 /* RFC1979 */
205 /* 27-254 unassigned */
206 #define CCPOPT_RESV 255 /* RFC1962 */
207
208 #define CCPOPT_MIN CCPOPT_OUI
209 #define CCPOPT_MAX CCPOPT_DEFLATE /* XXX: should be CCPOPT_RESV but... */
210
211 static const char *ccpconfopts[] = {
212 "OUI", /* (0) */
213 "Pred-1", /* (1) */
214 "Pred-2", /* (2) */
215 "Puddle", /* (3) */
216 "unassigned(4)", /* (4) */
217 "unassigned(5)", /* (5) */
218 "unassigned(6)", /* (6) */
219 "unassigned(7)", /* (7) */
220 "unassigned(8)", /* (8) */
221 "unassigned(9)", /* (9) */
222 "unassigned(10)", /* (10) */
223 "unassigned(11)", /* (11) */
224 "unassigned(12)", /* (12) */
225 "unassigned(13)", /* (13) */
226 "unassigned(14)", /* (14) */
227 "unassigned(15)", /* (15) */
228 "HP-PPC", /* (16) */
229 "Stac-LZS", /* (17) */
230 "MPPC", /* (18) */
231 "Gand-FZA", /* (19) */
232 "V.42bis", /* (20) */
233 "BSD-Comp", /* (21) */
234 "unassigned(22)", /* (22) */
235 "LZS-DCP", /* (23) */
236 "MVRCA", /* (24) */
237 "DEC", /* (25) */
238 "Deflate", /* (26) */
239 };
240
241 /* BACP Config Options */
242
243 #define BACPOPT_FPEER 1 /* RFC2125 */
244
245 /* SDCP - to be supported */
246
247 /* IPCP Config Options */
248
249 #define IPCPOPT_2ADDR 1 /* RFC1172, RFC1332 (deprecated) */
250 #define IPCPOPT_IPCOMP 2 /* RFC1332 */
251 #define IPCPOPT_ADDR 3 /* RFC1332 */
252 #define IPCPOPT_MOBILE4 4 /* RFC2290 */
253
254 #define IPCPOPT_PRIDNS 129 /* RFC1877 */
255 #define IPCPOPT_PRINBNS 130 /* RFC1877 */
256 #define IPCPOPT_SECDNS 131 /* RFC1877 */
257 #define IPCPOPT_SECNBNS 132 /* RFC1877 */
258
259 /* ATCP - to be supported */
260 /* OSINLCP - to be supported */
261 /* BVCP - to be supported */
262 /* BCP - to be supported */
263 /* IPXCP - to be supported */
264
265 /* Auth Algorithms */
266
267 /* 0-4 Reserved (RFC1994) */
268 #define AUTHALG_CHAPMD5 5 /* RFC1994 */
269 #define AUTHALG_MSCHAP1 128 /* RFC2433 */
270 #define AUTHALG_MSCHAP2 129 /* RFC2795 */
271
272 /* FCS Alternatives - to be supported */
273
274 /* Multilink Endpoint Discriminator (RFC1717) */
275 #define MEDCLASS_NULL 0 /* Null Class */
276 #define MEDCLASS_LOCAL 1 /* Locally Assigned */
277 #define MEDCLASS_IPV4 2 /* Internet Protocol (IPv4) */
278 #define MEDCLASS_MAC 3 /* IEEE 802.1 global MAC address */
279 #define MEDCLASS_MNB 4 /* PPP Magic Number Block */
280 #define MEDCLASS_PSNDN 5 /* Public Switched Network Director Number */
281
282 /* PPP LCP Callback */
283 #define CALLBACK_AUTH 0 /* Location determined by user auth */
284 #define CALLBACK_DSTR 1 /* Dialing string */
285 #define CALLBACK_LID 2 /* Location identifier */
286 #define CALLBACK_E164 3 /* E.164 number */
287 #define CALLBACK_X500 4 /* X.500 distinguished name */
288 #define CALLBACK_CBCP 6 /* Location is determined during CBCP nego */
289
290 /* CHAP */
291
292 #define CHAP_CHAL 1
293 #define CHAP_RESP 2
294 #define CHAP_SUCC 3
295 #define CHAP_FAIL 4
296
297 #define CHAP_CODEMIN CHAP_CHAL
298 #define CHAP_CODEMAX CHAP_FAIL
299
300 static const char *chapcode[] = {
301 "Chal", /* (1) */
302 "Resp", /* (2) */
303 "Succ", /* (3) */
304 "Fail", /* (4) */
305 };
306
307 /* PAP */
308
309 #define PAP_AREQ 1
310 #define PAP_AACK 2
311 #define PAP_ANAK 3
312
313 #define PAP_CODEMIN PAP_AREQ
314 #define PAP_CODEMAX PAP_ANAK
315
316 static const char *papcode[] = {
317 "Auth-Req", /* (1) */
318 "Auth-Ack", /* (2) */
319 "Auth-Nak", /* (3) */
320 };
321
322 /* BAP */
323 #define BAP_CALLREQ 1
324 #define BAP_CALLRES 2
325 #define BAP_CBREQ 3
326 #define BAP_CBRES 4
327 #define BAP_LDQREQ 5
328 #define BAP_LDQRES 6
329 #define BAP_CSIND 7
330 #define BAP_CSRES 8
331
332 static const char *ppp_protoname (u_int proto);
333 static void handle_ctrl_proto (u_int proto,const u_char *p, int length);
334 static void handle_chap (const u_char *p, int length);
335 static void handle_pap (const u_char *p, int length);
336 static void handle_bap (const u_char *p, int length);
337 static int print_lcp_config_options (const u_char *p, int);
338 static int print_ipcp_config_options (const u_char *p, int);
339 static int print_ccp_config_options (const u_char *p, int);
340 static int print_bacp_config_options (const u_char *p, int);
341 static void handle_ppp (u_int proto, const u_char *p, int length);
342
343 static const char *
344 ppp_protoname(u_int proto)
345 {
346 static char buf[20];
347
348 switch (proto) {
349 case PPP_IP: return "IP";
350 case PPP_IPV6: return "IPv6";
351 #ifdef PPP_XNS
352 case PPP_XNS: return "XNS";
353 #endif
354 case PPP_IPX: return "IPX";
355 case PPP_OSI: return "OSI";
356 case PPP_VJC: return "VJC";
357 case PPP_VJNC: return "VJNC";
358 case PPP_COMP: return "COMP";
359 case PPP_IPCP: return "IPCP";
360 case PPP_IPV6CP: return "IPv6CP";
361 case PPP_IPXCP: return "IPXCP";
362 case PPP_OSICP: return "OSICP";
363 case PPP_CCP: return "CCP";
364 case PPP_LCP: return "LCP";
365 case PPP_PAP: return "PAP";
366 #ifdef PPP_LQR
367 case PPP_LQR: return "LQR";
368 #endif
369 case PPP_CHAP: return "CHAP";
370 case PPP_BACP: return "BACP";
371 case PPP_BAP: return "BAP";
372 default:
373 snprintf(buf, sizeof(buf), "unknown-0x%04x", proto);
374 return buf;
375 }
376 }
377
378 /* generic Control Protocol (e.g. LCP, IPCP, CCP, etc.) handler */
379 static void
380 handle_ctrl_proto(u_int proto, const u_char *p, int length)
381 {
382 u_int code, len;
383 int (*pfunc)(const u_char *, int);
384 int x, j;
385
386 if (length < 1) {
387 printf("[|%s]", ppp_protoname(proto));
388 return;
389 } else if (length < 4) {
390 printf("[|%s 0x%02x]", ppp_protoname(proto), *p);
391 return;
392 }
393
394 code = *p;
395 if ((code >= CPCODES_MIN) && (code <= CPCODES_MAX))
396 printf("%s", cpcodes[code]);
397 else {
398 printf("0x%02x", code);
399 return;
400 }
401 p++;
402
403 printf("(%u)", *p); /* ID */
404 p++;
405
406 len = EXTRACT_16BITS(p);
407 p += 2;
408
409 if (length <= 4)
410 return; /* there may be a NULL confreq etc. */
411
412 switch (code) {
413 case CPCODES_VEXT:
414 if (length < 11)
415 break;
416 printf(", Magic-Num=%08x", EXTRACT_32BITS(p));
417 p += 4;
418 printf(" OUI=%02x%02x%02x", p[0], p[1], p[2]);
419 /* XXX: need to decode Kind and Value(s)? */
420 break;
421 case CPCODES_CONF_REQ:
422 case CPCODES_CONF_ACK:
423 case CPCODES_CONF_NAK:
424 case CPCODES_CONF_REJ:
425 x = len - 4; /* Code(1), Identifier(1) and Length(2) */
426 do {
427 switch (proto) {
428 case PPP_LCP:
429 pfunc = print_lcp_config_options;
430 break;
431 case PPP_IPCP:
432 pfunc = print_ipcp_config_options;
433 break;
434 case PPP_CCP:
435 pfunc = print_ccp_config_options;
436 break;
437 case PPP_BACP:
438 pfunc = print_bacp_config_options;
439 break;
440 default:
441 /*
442 * This should never happen, but we set
443 * "pfunc" to squelch uninitialized
444 * variable warnings from compilers.
445 */
446 pfunc = NULL;
447 break;
448 }
449 if ((j = (*pfunc)(p, len)) == 0)
450 break;
451 x -= j;
452 p += j;
453 } while (x > 0);
454 break;
455
456 case CPCODES_TERM_REQ:
457 case CPCODES_TERM_ACK:
458 /* XXX: need to decode Data? */
459 break;
460 case CPCODES_CODE_REJ:
461 /* XXX: need to decode Rejected-Packet? */
462 break;
463 case CPCODES_PROT_REJ:
464 if (length < 6)
465 break;
466 printf(", Rejected-Protocol=%04x", EXTRACT_16BITS(p));
467 /* XXX: need to decode Rejected-Information? */
468 break;
469 case CPCODES_ECHO_REQ:
470 case CPCODES_ECHO_RPL:
471 case CPCODES_DISC_REQ:
472 case CPCODES_ID:
473 if (length < 8)
474 break;
475 printf(", Magic-Num=%08x", EXTRACT_32BITS(p));
476 /* XXX: need to decode Data? */
477 break;
478 case CPCODES_TIME_REM:
479 if (length < 12)
480 break;
481 printf(", Magic-Num=%08x", EXTRACT_32BITS(p));
482 printf(" Seconds-Remaining=%u", EXTRACT_32BITS(p + 4));
483 /* XXX: need to decode Message? */
484 break;
485 default:
486 printf(", unknown-Codes-0x%02x", code);
487 break;
488 }
489 }
490
491 /* LCP config options */
492 static int
493 print_lcp_config_options(const u_char *p, int length)
494 {
495 int len, opt;
496
497 if (length < 2)
498 return 0;
499 len = p[1];
500 opt = p[0];
501 if (length < len)
502 return 0;
503 if ((opt >= LCPOPT_MIN) && (opt <= LCPOPT_MAX))
504 printf(", %s", lcpconfopts[opt]);
505 else {
506 printf(", unknwhown-%d", opt);
507 return len;
508 }
509
510 switch (opt) {
511 case LCPOPT_VEXT:
512 if (len >= 6) {
513 printf(" OUI=%02x%02x%02x", p[2], p[3], p[4]);
514 #if 0
515 printf(" kind=%02x", p[5]);
516 printf(" val=")
517 for (i = 0; i < len - 6; i++) {
518 printf("%02x", p[6 + i]);
519 }
520 #endif
521 }
522 break;
523 case LCPOPT_MRU:
524 if (len == 4)
525 printf("=%u", EXTRACT_16BITS(p + 2));
526 break;
527 case LCPOPT_ACCM:
528 if (len == 6)
529 printf("=%08x", EXTRACT_32BITS(p + 2));
530 break;
531 case LCPOPT_AP:
532 if (len >= 4) {
533 if (p[2] == 0xc0 && p[3] == 0x23)
534 printf(" PAP");
535 else if (p[2] == 0xc2 && p[3] == 0x23) {
536 printf(" CHAP/");
537 switch (p[4]) {
538 default:
539 printf("unknown-algorithm-%u", p[4]);
540 break;
541 case AUTHALG_CHAPMD5:
542 printf("MD5");
543 break;
544 case AUTHALG_MSCHAP1:
545 printf("MSCHAPv1");
546 break;
547 case AUTHALG_MSCHAP2:
548 printf("MSCHAPv2");
549 break;
550 }
551 }
552 else if (p[2] == 0xc2 && p[3] == 0x27)
553 printf(" EAP");
554 else if (p[2] == 0xc0 && p[3] == 0x27)
555 printf(" SPAP");
556 else if (p[2] == 0xc1 && p[3] == 0x23)
557 printf(" Old-SPAP");
558 else
559 printf("unknown");
560 }
561 break;
562 case LCPOPT_QP:
563 if (len >= 4) {
564 if (p[2] == 0xc0 && p[3] == 0x25)
565 printf(" LQR");
566 else
567 printf(" unknown");
568 }
569 break;
570 case LCPOPT_MN:
571 if (len == 6)
572 printf("=%08x", EXTRACT_32BITS(p + 2));
573 break;
574 case LCPOPT_PFC:
575 break;
576 case LCPOPT_ACFC:
577 break;
578 case LCPOPT_LD:
579 if (len == 4)
580 printf("=%04x", EXTRACT_16BITS(p + 2));
581 break;
582 case LCPOPT_CBACK:
583 if (len < 3)
584 break;
585 switch (p[2]) { /* Operation */
586 case CALLBACK_AUTH:
587 printf(" UserAuth");
588 break;
589 case CALLBACK_DSTR:
590 printf(" DialString");
591 break;
592 case CALLBACK_LID:
593 printf(" LocalID");
594 break;
595 case CALLBACK_E164:
596 printf(" E.164");
597 break;
598 case CALLBACK_X500:
599 printf(" X.500");
600 break;
601 case CALLBACK_CBCP:
602 printf(" CBCP");
603 break;
604 default:
605 printf(" unknown-operation=%u", p[2]);
606 break;
607 }
608 break;
609 case LCPOPT_MLMRRU:
610 if (len == 4)
611 printf("=%u", EXTRACT_16BITS(p + 2));
612 break;
613 case LCPOPT_MLED:
614 if (len < 3)
615 break;
616 switch (p[2]) { /* class */
617 case MEDCLASS_NULL:
618 printf(" Null");
619 break;
620 case MEDCLASS_LOCAL:
621 printf(" Local"); /* XXX */
622 break;
623 case MEDCLASS_IPV4:
624 if (len != 7)
625 break;
626 printf(" IPv4=%s", ipaddr_string(p + 3));
627 break;
628 case MEDCLASS_MAC:
629 if (len != 9)
630 break;
631 printf(" MAC=%02x:%02x:%02x:%02x:%02x:%02x",
632 p[3], p[4], p[5], p[6], p[7], p[8]);
633 break;
634 case MEDCLASS_MNB:
635 printf(" Magic-Num-Block"); /* XXX */
636 break;
637 case MEDCLASS_PSNDN:
638 printf(" PSNDN"); /* XXX */
639 break;
640 }
641 break;
642
643 /* XXX: to be supported */
644 #if 0
645 case LCPOPT_DEP6:
646 case LCPOPT_FCSALT:
647 case LCPOPT_SDP:
648 case LCPOPT_NUMMODE:
649 case LCPOPT_DEP12:
650 case LCPOPT_DEP14:
651 case LCPOPT_DEP15:
652 case LCPOPT_DEP16:
653 case LCPOPT_MLSSNHF:
654 case LCPOPT_PROP:
655 case LCPOPT_DCEID:
656 case LCPOPT_MPP:
657 case LCPOPT_LCPAOPT:
658 case LCPOPT_COBS:
659 case LCPOPT_PE:
660 case LCPOPT_MLHF:
661 case LCPOPT_I18N:
662 case LCPOPT_SDLOS:
663 case LCPOPT_PPPMUX:
664 break;
665 #endif
666 }
667 return len;
668 }
669
670 /* CHAP */
671 static void
672 handle_chap(const u_char *p, int length)
673 {
674 u_int code, len;
675 int val_size, name_size, msg_size;
676 const u_char *p0;
677 int i;
678
679 p0 = p;
680 if (length < 1) {
681 printf("[|chap]");
682 return;
683 } else if (length < 4) {
684 printf("[|chap 0x%02x]", *p);
685 return;
686 }
687
688 code = *p;
689 if ((code >= CHAP_CODEMIN) && (code <= CHAP_CODEMAX))
690 printf("%s", chapcode[code - 1]);
691 else {
692 printf("0x%02x", code);
693 return;
694 }
695 p++;
696
697 printf("(%u)", *p); /* ID */
698 p++;
699
700 len = EXTRACT_16BITS(p);
701 p += 2;
702
703 /*
704 * Note that this is a generic CHAP decoding routine. Since we
705 * don't know which flavor of CHAP (i.e. CHAP-MD5, MS-CHAPv1,
706 * MS-CHAPv2) is used at this point, we can't decode packet
707 * specifically to each algorithms. Instead, we simply decode
708 * the GCD (Gratest Common Denominator) for all algorithms.
709 */
710 switch (code) {
711 case CHAP_CHAL:
712 case CHAP_RESP:
713 if (length - (p - p0) < 1)
714 return;
715 val_size = *p; /* value size */
716 p++;
717 if (length - (p - p0) < val_size)
718 return;
719 printf(", Value=");
720 for (i = 0; i < val_size; i++)
721 printf("%02x", *p++);
722 name_size = len - (p - p0);
723 printf(", Name=");
724 for (i = 0; i < name_size; i++)
725 safeputchar(*p++);
726 break;
727 case CHAP_SUCC:
728 case CHAP_FAIL:
729 msg_size = len - (p - p0);
730 printf(", Msg=");
731 for (i = 0; i< msg_size; i++)
732 safeputchar(*p++);
733 break;
734 }
735 }
736
737 /* PAP (see RFC 1334) */
738 static void
739 handle_pap(const u_char *p, int length)
740 {
741 u_int code, len;
742 int peerid_len, passwd_len, msg_len;
743 const u_char *p0;
744 int i;
745
746 p0 = p;
747 if (length < 1) {
748 printf("[|pap]");
749 return;
750 } else if (length < 4) {
751 printf("[|pap 0x%02x]", *p);
752 return;
753 }
754
755 code = *p;
756 if ((code >= PAP_CODEMIN) && (code <= PAP_CODEMAX))
757 printf("%s", papcode[code - 1]);
758 else {
759 printf("0x%02x", code);
760 return;
761 }
762 p++;
763
764 printf("(%u)", *p); /* ID */
765 p++;
766
767 len = EXTRACT_16BITS(p);
768 p += 2;
769
770 switch (code) {
771 case PAP_AREQ:
772 if (length - (p - p0) < 1)
773 return;
774 peerid_len = *p; /* Peer-ID Length */
775 p++;
776 if (length - (p - p0) < peerid_len)
777 return;
778 printf(", Peer=");
779 for (i = 0; i < peerid_len; i++)
780 safeputchar(*p++);
781
782 if (length - (p - p0) < 1)
783 return;
784 passwd_len = *p; /* Password Length */
785 p++;
786 if (length - (p - p0) < passwd_len)
787 return;
788 printf(", Name=");
789 for (i = 0; i < passwd_len; i++)
790 safeputchar(*p++);
791 break;
792 case PAP_AACK:
793 case PAP_ANAK:
794 if (length - (p - p0) < 1)
795 return;
796 msg_len = *p; /* Msg-Length */
797 p++;
798 if (length - (p - p0) < msg_len)
799 return;
800 printf(", Msg=");
801 for (i = 0; i< msg_len; i++)
802 safeputchar(*p++);
803 break;
804 }
805 return;
806 }
807
808 /* BAP */
809 static void
810 handle_bap(const u_char *p, int length)
811 {
812 /* XXX: to be supported!! */
813 }
814
815
816 /* IPCP config options */
817 static int
818 print_ipcp_config_options(const u_char *p, int length)
819 {
820 int len, opt;
821
822 if (length < 2)
823 return 0;
824 len = p[1];
825 opt = p[0];
826 if (length < len)
827 return 0;
828 switch (opt) {
829 case IPCPOPT_2ADDR: /* deprecated */
830 if (len != 10)
831 goto invlen;
832 printf(", IP-Addrs src=%s dst=%s",
833 ipaddr_string(p + 2),
834 ipaddr_string(p + 6));
835 break;
836 case IPCPOPT_IPCOMP:
837 if (len < 4)
838 goto invlen;
839 printf(", IP-Comp");
840 if (EXTRACT_16BITS(p + 2) == PPP_VJC) {
841 printf(" VJ-Comp");
842 /* XXX: VJ-Comp parameters should be decoded */
843 } else
844 printf(" unknown-comp-proto=%04x", EXTRACT_16BITS(p + 2));
845 break;
846 case IPCPOPT_ADDR:
847 if (len != 6)
848 goto invlen;
849 printf(", IP-Addr=%s", ipaddr_string(p + 2));
850 break;
851 case IPCPOPT_MOBILE4:
852 if (len != 6)
853 goto invlen;
854 printf(", Home-Addr=%s", ipaddr_string(p + 2));
855 break;
856 case IPCPOPT_PRIDNS:
857 if (len != 6)
858 goto invlen;
859 printf(", Pri-DNS=%s", ipaddr_string(p + 2));
860 break;
861 case IPCPOPT_PRINBNS:
862 if (len != 6)
863 goto invlen;
864 printf(", Pri-NBNS=%s", ipaddr_string(p + 2));
865 break;
866 case IPCPOPT_SECDNS:
867 if (len != 6)
868 goto invlen;
869 printf(", Sec-DNS=%s", ipaddr_string(p + 2));
870 break;
871 case IPCPOPT_SECNBNS:
872 if (len != 6)
873 goto invlen;
874 printf(", Sec-NBNS=%s", ipaddr_string(p + 2));
875 break;
876 default:
877 printf(", unknown-%d", opt);
878 break;
879 }
880 return len;
881
882 invlen:
883 printf(", invalid-length-%d", opt);
884 return 0;
885 }
886
887 /* CCP config options */
888 static int
889 print_ccp_config_options(const u_char *p, int length)
890 {
891 int len, opt;
892
893 if (length < 2)
894 return 0;
895 len = p[1];
896 opt = p[0];
897 if (length < len)
898 return 0;
899 if ((opt >= CCPOPT_MIN) && (opt <= CCPOPT_MAX))
900 printf(", %s", ccpconfopts[opt]);
901 #if 0 /* XXX */
902 switch (opt) {
903 case CCPOPT_OUI:
904 case CCPOPT_PRED1:
905 case CCPOPT_PRED2:
906 case CCPOPT_PJUMP:
907 case CCPOPT_HPPPC:
908 case CCPOPT_STACLZS:
909 case CCPOPT_MPPC:
910 case CCPOPT_GFZA:
911 case CCPOPT_V42BIS:
912 case CCPOPT_BSDCOMP:
913 case CCPOPT_LZSDCP:
914 case CCPOPT_MVRCA:
915 case CCPOPT_DEC:
916 case CCPOPT_DEFLATE:
917 case CCPOPT_RESV:
918 break;
919
920 default:
921 printf(", unknown-%d", opt);
922 break;
923 }
924 #endif
925 return len;
926 }
927
928 /* BACP config options */
929 static int
930 print_bacp_config_options(const u_char *p, int length)
931 {
932 int len, opt;
933
934 if (length < 2)
935 return 0;
936 len = p[1];
937 opt = p[0];
938 if (length < len)
939 return 0;
940 if (opt == BACPOPT_FPEER) {
941 printf(", Favored-Peer");
942 printf(" Magic-Num=%08x", EXTRACT_32BITS(p + 2));
943 } else {
944 printf(", unknown-option-%d", opt);
945 }
946 return len;
947 }
948
949
950 /* PPP */
951 static void
952 handle_ppp(u_int proto, const u_char *p, int length)
953 {
954 switch (proto) {
955 case PPP_LCP:
956 case PPP_IPCP:
957 case PPP_CCP:
958 case PPP_BACP:
959 handle_ctrl_proto(proto, p, length);
960 break;
961 case PPP_CHAP:
962 handle_chap(p, length);
963 break;
964 case PPP_PAP:
965 handle_pap(p, length);
966 break;
967 case PPP_BAP: /* XXX: not yet completed */
968 handle_bap(p, length);
969 break;
970 case ETHERTYPE_IP: /*XXX*/
971 case PPP_IP:
972 ip_print(p, length);
973 break;
974 #ifdef INET6
975 case ETHERTYPE_IPV6: /*XXX*/
976 case PPP_IPV6:
977 ip6_print(p, length);
978 break;
979 #endif
980 case ETHERTYPE_IPX: /*XXX*/
981 case PPP_IPX:
982 ipx_print(p, length);
983 break;
984 case PPP_OSI:
985 isoclns_print(p, length, length, NULL, NULL);
986 break;
987 default:
988 break;
989 }
990 }
991
992 /* Standard PPP printer */
993 u_int
994 ppp_print(register const u_char *p, u_int length)
995 {
996 u_int proto;
997 u_int full_length = length;
998 u_int hdr_len = 0;
999
1000 /*
1001 * Here, we assume that p points to the Address and Control
1002 * field (if they present).
1003 */
1004 if (length < 2)
1005 goto trunc;
1006 if (*p == PPP_ADDRESS && *(p + 1) == PPP_CONTROL) {
1007 p += 2; /* ACFC not used */
1008 length -= 2;
1009 hdr_len += 2;
1010 }
1011
1012 if (length < 2)
1013 goto trunc;
1014 if (*p % 2) {
1015 proto = *p; /* PFC is used */
1016 p++;
1017 length--;
1018 hdr_len++;
1019 } else {
1020 proto = EXTRACT_16BITS(p);
1021 p += 2;
1022 length -= 2;
1023 hdr_len += 2;
1024 }
1025
1026 printf("%s %d: ", ppp_protoname(proto), full_length);
1027
1028 handle_ppp(proto, p, length);
1029 return (hdr_len);
1030 trunc:
1031 printf("[|ppp]");
1032 return (0);
1033 }
1034
1035
1036 /* PPP I/F printer */
1037 void
1038 ppp_if_print(u_char *user, const struct pcap_pkthdr *h,
1039 register const u_char *p)
1040 {
1041 register u_int length = h->len;
1042 register u_int caplen = h->caplen;
1043
1044 ++infodelay;
1045 ts_print(&h->ts);
1046
1047 if (caplen < PPP_HDRLEN) {
1048 printf("[|ppp]");
1049 goto out;
1050 }
1051
1052 /*
1053 * Some printers want to get back at the link level addresses,
1054 * and/or check that they're not walking off the end of the packet.
1055 * Rather than pass them all the way down, we set these globals. */
1056
1057 packetp = p;
1058 snapend = p + caplen;
1059
1060 #if 0
1061 /*
1062 * XXX: seems to assume that there are 2 octets prepended to an
1063 * actual PPP frame. The 1st octet looks like Input/Output flag
1064 * while 2nd octet is unknown, at least to me
1065 * (mshindo@mshindo.net).
1066 *
1067 * That was what the original tcpdump code did.
1068 *
1069 * FreeBSD's "if_ppp.c" *does* set the first octet to 1 for outbound
1070 * packets and 0 for inbound packets - but only if the
1071 * protocol field has the 0x8000 bit set (i.e., it's a network
1072 * control protocol); it does so before running the packet through
1073 * "bpf_filter" to see if it should be discarded, and to see
1074 * if we should update the time we sent the most recent packet...
1075 *
1076 * ...but it puts the original address field back after doing
1077 * so.
1078 *
1079 * NetBSD's "if_ppp.c" doesn't set the first octet in that fashion.
1080 *
1081 * I don't know if any PPP implementation handed up to a BPF
1082 * device packets with the first octet being 1 for outbound and
1083 * 0 for inbound packets, so I (guy@alum.mit.edu) don't know
1084 * whether that ever needs to be checked or not.
1085 *
1086 * Note that NetBSD has a DLT_PPP_SERIAL, which it uses for PPP,
1087 * and its tcpdump appears to assume that the frame always
1088 * begins with an address field and a control field, and that
1089 * the address field might be 0x0f or 0x8f, for Cisco
1090 * point-to-point with HDLC framing as per section 4.3.1 of RFC
1091 * 1547, as well as 0xff, for PPP in HDLC-like framing as per
1092 * RFC 1662.
1093 *
1094 * (Is the Cisco framing in question what DLT_C_HDLC, in
1095 * BSD/OS, is?)
1096 */
1097 if (eflag)
1098 printf("%c %4d %02x ", p[0] ? 'O' : 'I', length, p[1]);
1099 #endif
1100
1101 ppp_print(p, length);
1102
1103 if (xflag)
1104 default_print(p, caplen);
1105 out:
1106 putchar('\n');
1107 --infodelay;
1108 if (infoprint)
1109 info(0);
1110 }
1111
1112 /*
1113 * PPP I/F printer to use if we know that RFC 1662-style PPP in HDLC-like
1114 * framing, or Cisco PPP with HDLC framing as per section 4.3.1 of RFC 1547,
1115 * is being used (i.e., we don't check for PPP_ADDRESS and PPP_CONTROL,
1116 * discard them *if* those are the first two octets, and parse the remaining
1117 * packet as a PPP packet, as "ppp_print()" does).
1118 *
1119 * This handles, for example, DLT_PPP_SERIAL in NetBSD.
1120 */
1121 void
1122 ppp_hdlc_if_print(u_char *user, const struct pcap_pkthdr *h,
1123 register const u_char *p)
1124 {
1125 register u_int length = h->len;
1126 register u_int caplen = h->caplen;
1127 u_int proto;
1128
1129 ++infodelay;
1130 ts_print(&h->ts);
1131
1132 if (caplen < 2) {
1133 printf("[|ppp]");
1134 goto out;
1135 }
1136
1137 /*
1138 * Some printers want to get back at the link level addresses,
1139 * and/or check that they're not walking off the end of the packet.
1140 * Rather than pass them all the way down, we set these globals.
1141 */
1142 packetp = p;
1143 snapend = p + caplen;
1144
1145 switch (p[0]) {
1146
1147 case PPP_ADDRESS:
1148 if (caplen < 4) {
1149 printf("[|ppp]");
1150 goto out;
1151 }
1152
1153 if (eflag)
1154 printf("%02x %02x %d ", p[0], p[1], length);
1155 p += 2;
1156 length -= 2;
1157
1158 proto = EXTRACT_16BITS(p);
1159 p += 2;
1160 length -= 2;
1161 printf("%s: ", ppp_protoname(proto));
1162
1163 handle_ppp(proto, p, length);
1164 break;
1165
1166 case CHDLC_UNICAST:
1167 case CHDLC_BCAST:
1168 chdlc_print(p, length, caplen);
1169 goto out;
1170
1171 default:
1172 if (eflag)
1173 printf("%02x %02x %d ", p[0], p[1], length);
1174 p += 2;
1175 length -= 2;
1176
1177 /*
1178 * XXX - NetBSD's "ppp_netbsd_serial_if_print()" treats
1179 * the next two octets as an Ethernet type; does that
1180 * ever happen?
1181 */
1182 printf("unknown addr %02x; ctrl %02x", p[0], p[1]);
1183 break;
1184 }
1185
1186 if (xflag)
1187 default_print(p, caplen);
1188 out:
1189 putchar('\n');
1190 --infodelay;
1191 if (infoprint)
1192 info(0);
1193 }
1194
1195
1196
1197 struct tok ppptype2str[] = {
1198 { PPP_IP, "IP" },
1199 { PPP_OSI, "OSI" },
1200 { PPP_NS, "NS" },
1201 { PPP_DECNET, "DECNET" },
1202 { PPP_APPLE, "APPLE" },
1203 { PPP_IPX, "IPX" },
1204 { PPP_VJC, "VJC" },
1205 { PPP_VJNC, "VJNC" },
1206 { PPP_BRPDU, "BRPDU" },
1207 { PPP_STII, "STII" },
1208 { PPP_VINES, "VINES" },
1209
1210 { PPP_HELLO, "HELLO" },
1211 { PPP_LUXCOM, "LUXCOM" },
1212 { PPP_SNS, "SNS" },
1213 { PPP_IPCP, "IPCP" },
1214 { PPP_OSICP, "OSICP" },
1215 { PPP_NSCP, "NSCP" },
1216 { PPP_DECNETCP, "DECNETCP" },
1217 { PPP_APPLECP, "APPLECP" },
1218 { PPP_IPXCP, "IPXCP" },
1219 { PPP_STIICP, "STIICP" },
1220 { PPP_VINESCP, "VINESCP" },
1221
1222 { PPP_LCP, "LCP" },
1223 { PPP_PAP, "PAP" },
1224 { PPP_LQM, "LQM" },
1225 { PPP_CHAP, "CHAP" },
1226 { PPP_BACP, "BACP" },
1227 { PPP_BAP, "BAP" },
1228 { PPP_MP, "MP" },
1229 { 0, NULL }
1230 };
1231
1232 #define PPP_BSDI_HDRLEN 24
1233
1234 /* BSD/OS specific PPP printer */
1235 void
1236 ppp_bsdos_if_print(u_char *user, const struct pcap_pkthdr *h,
1237 register const u_char *p)
1238 {
1239 #ifdef __bsdi__
1240 register u_int length = h->len;
1241 register u_int caplen = h->caplen;
1242 register int hdrlength;
1243 u_int16_t ptype;
1244 const u_char *q;
1245 int i;
1246
1247 ++infodelay;
1248 ts_print(&h->ts);
1249
1250 if (caplen < PPP_BSDI_HDRLEN) {
1251 printf("[|ppp]");
1252 goto out;
1253 }
1254
1255 /*
1256 * Some printers want to get back at the link level addresses,
1257 * and/or check that they're not walking off the end of the packet.
1258 * Rather than pass them all the way down, we set these globals.
1259 */
1260 packetp = p;
1261 snapend = p + caplen;
1262 hdrlength = 0;
1263
1264 #if 0
1265 if (p[0] == PPP_ADDRESS && p[1] == PPP_CONTROL) {
1266 if (eflag)
1267 printf("%02x %02x ", p[0], p[1]);
1268 p += 2;
1269 hdrlength = 2;
1270 }
1271
1272 if (eflag)
1273 printf("%d ", length);
1274 /* Retrieve the protocol type */
1275 if (*p & 01) {
1276 /* Compressed protocol field */
1277 ptype = *p;
1278 if (eflag)
1279 printf("%02x ", ptype);
1280 p++;
1281 hdrlength += 1;
1282 } else {
1283 /* Un-compressed protocol field */
1284 ptype = ntohs(*(u_int16_t *)p);
1285 if (eflag)
1286 printf("%04x ", ptype);
1287 p += 2;
1288 hdrlength += 2;
1289 }
1290 #else
1291 ptype = 0; /*XXX*/
1292 if (eflag)
1293 printf("%c ", p[SLC_DIR] ? 'O' : 'I');
1294 if (p[SLC_LLHL]) {
1295 /* link level header */
1296 struct ppp_header *ph;
1297
1298 q = p + SLC_BPFHDRLEN;
1299 ph = (struct ppp_header *)q;
1300 if (ph->phdr_addr == PPP_ADDRESS
1301 && ph->phdr_ctl == PPP_CONTROL) {
1302 if (eflag)
1303 printf("%02x %02x ", q[0], q[1]);
1304 ptype = ntohs(ph->phdr_type);
1305 if (eflag && (ptype == PPP_VJC || ptype == PPP_VJNC)) {
1306 printf("%s ", tok2str(ppptype2str,
1307 "proto-#%d", ptype));
1308 }
1309 } else {
1310 if (eflag) {
1311 printf("LLH=[");
1312 for (i = 0; i < p[SLC_LLHL]; i++)
1313 printf("%02x", q[i]);
1314 printf("] ");
1315 }
1316 }
1317 }
1318 if (eflag)
1319 printf("%d ", length);
1320 if (p[SLC_CHL]) {
1321 q = p + SLC_BPFHDRLEN + p[SLC_LLHL];
1322
1323 switch (ptype) {
1324 case PPP_VJC:
1325 ptype = vjc_print(q, length - (q - p), ptype);
1326 hdrlength = PPP_BSDI_HDRLEN;
1327 p += hdrlength;
1328 switch (ptype) {
1329 case PPP_IP:
1330 ip_print(p, length);
1331 break;
1332 #ifdef INET6
1333 case PPP_IPV6:
1334 ip6_print(p, length);
1335 break;
1336 #endif
1337 }
1338 goto printx;
1339 case PPP_VJNC:
1340 ptype = vjc_print(q, length - (q - p), ptype);
1341 hdrlength = PPP_BSDI_HDRLEN;
1342 p += hdrlength;
1343 switch (ptype) {
1344 case PPP_IP:
1345 ip_print(p, length);
1346 break;
1347 #ifdef INET6
1348 case PPP_IPV6:
1349 ip6_print(p, length);
1350 break;
1351 #endif
1352 }
1353 goto printx;
1354 default:
1355 if (eflag) {
1356 printf("CH=[");
1357 for (i = 0; i < p[SLC_LLHL]; i++)
1358 printf("%02x", q[i]);
1359 printf("] ");
1360 }
1361 break;
1362 }
1363 }
1364
1365 hdrlength = PPP_BSDI_HDRLEN;
1366 #endif
1367
1368 length -= hdrlength;
1369 p += hdrlength;
1370
1371 switch (ptype) {
1372 case PPP_IP:
1373 ip_print(p, length);
1374 break;
1375 #ifdef INET6
1376 case PPP_IPV6:
1377 ip6_print(p, length);
1378 break;
1379 #endif
1380 default:
1381 printf("%s ", tok2str(ppptype2str, "proto-#%d", ptype));
1382 }
1383
1384 printx:
1385 if (xflag)
1386 default_print((const u_char *)p, caplen - hdrlength);
1387 out:
1388 putchar('\n');
1389 --infodelay;
1390 if (infoprint)
1391 info(0);
1392 #endif /* __bsdi__ */
1393 }
[mirror] the TCPdump network dissector