2 * Marko Kiiskila carnil@cs.tut.fi
4 * Tampere University of Technology - Telecommunications Laboratory
6 * Permission to use, copy, modify and distribute this
7 * software and its documentation is hereby granted,
8 * provided that both the copyright notice and this
9 * permission notice appear in all copies of the software,
10 * derivative works or modified versions, and any portions
11 * thereof, that both notices appear in supporting
12 * documentation, and that the use of this software is
13 * acknowledged in any publications resulting from using
16 * TUT ALLOWS FREE USE OF THIS SOFTWARE IN ITS "AS IS"
17 * CONDITION AND DISCLAIMS ANY LIABILITY OF ANY KIND FOR
18 * ANY DAMAGES WHATSOEVER RESULTING FROM THE USE OF THIS
29 #include <tcpdump-stdinc.h>
34 #include "interface.h"
35 #include "addrtoname.h"
36 #include "ethertype.h"
39 #define RFC1483LLC_LEN 8
41 static const unsigned char rfcllc
[] = {
42 0xaa, /* DSAP: non-ISO */
43 0xaa, /* SSAP: non-ISO */
44 0x03, /* Ctrl: Unnumbered Information Command PDU */
45 0x00, /* OUI: EtherType */
53 * There is no MAC-layer header, so just print the length.
55 printf("%d: ", length
);
59 * This is the top level routine of the printer. 'p' points
60 * to the LLC/SNAP or raw header of the packet, 'h->ts' is the timestamp,
61 * 'h->len' is the length of the packet off the wire, and 'h->caplen'
62 * is the number of bytes actually captured.
65 cip_if_print(const struct pcap_pkthdr
*h
, const u_char
*p
)
67 u_int caplen
= h
->caplen
;
68 u_int length
= h
->len
;
69 u_short extracted_ethertype
;
71 if (memcmp(rfcllc
, p
, sizeof(rfcllc
))==0 && caplen
< RFC1483LLC_LEN
) {
79 if (memcmp(rfcllc
, p
, sizeof(rfcllc
)) == 0) {
81 * LLC header is present. Try to print it & higher layers.
83 if (llc_print(p
, length
, caplen
, NULL
, NULL
,
84 &extracted_ethertype
) == 0) {
85 /* ether_type not known, print raw packet */
88 if (extracted_ethertype
) {
90 etherproto_string(htons(extracted_ethertype
)));
92 if (!suppress_default_print
)
93 default_print(p
, caplen
);
97 * LLC header is absent; treat it as just IP.
99 ip_print(gndo
, p
, length
);
108 * c-style: whitesmith