]> The Tcpdump Group git mirrors - tcpdump/blob - print-udp.c
projects / tcpdump / blob
summary | shortlog | log | commit | commitdiff | tree
history | raw | HEAD
ASCII patches for tcpdump.
[tcpdump] / print-udp.c
1 /*
2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 */
21
22 #ifndef lint
23 static const char rcsid[] =
24 "@(#) $Header: /tcpdump/master/tcpdump/print-udp.c,v 1.62 1999-10-17 21:56:54 mcr Exp $ (LBL)";
25 #endif
26
27 #include <sys/param.h>
28 #include <sys/time.h>
29 #include <sys/socket.h>
30
31 #define __FAVOR_BSD
32
33 #include <netinet/in.h>
34 #include <netinet/in_systm.h>
35 #include <netinet/ip.h>
36 #include <netinet/udp.h>
37
38 #ifdef NOERROR
39 #undef NOERROR /* Solaris sucks */
40 #endif
41 #ifdef T_UNSPEC
42 #undef T_UNSPEC /* SINIX does too */
43 #endif
44 #include <arpa/nameser.h>
45 #ifdef SEGSIZE
46 #undef SEGSIZE
47 #endif
48 #include <arpa/tftp.h>
49
50 #include <rpc/rpc.h>
51
52 #include <stdio.h>
53
54 #include "interface.h"
55 #include "addrtoname.h"
56 #include "appletalk.h"
57
58 #include "nfsv2.h"
59 #include "bootp.h"
60
61 struct rtcphdr {
62 u_short rh_flags; /* T:2 P:1 CNT:5 PT:8 */
63 u_short rh_len; /* length of message (in words) */
64 u_int rh_ssrc; /* synchronization src id */
65 };
66
67 typedef struct {
68 u_int upper; /* more significant 32 bits */
69 u_int lower; /* less significant 32 bits */
70 } ntp64;
71
72 /*
73 * Sender report.
74 */
75 struct rtcp_sr {
76 ntp64 sr_ntp; /* 64-bit ntp timestamp */
77 u_int sr_ts; /* reference media timestamp */
78 u_int sr_np; /* no. packets sent */
79 u_int sr_nb; /* no. bytes sent */
80 };
81
82 /*
83 * Receiver report.
84 * Time stamps are middle 32-bits of ntp timestamp.
85 */
86 struct rtcp_rr {
87 u_int rr_srcid; /* sender being reported */
88 u_int rr_nl; /* no. packets lost */
89 u_int rr_ls; /* extended last seq number received */
90 u_int rr_dv; /* jitter (delay variance) */
91 u_int rr_lsr; /* orig. ts from last rr from this src */
92 u_int rr_dlsr; /* time from recpt of last rr to xmit time */
93 };
94
95 /*XXX*/
96 #define RTCP_PT_SR 200
97 #define RTCP_PT_RR 201
98 #define RTCP_PT_SDES 202
99 #define RTCP_SDES_CNAME 1
100 #define RTCP_SDES_NAME 2
101 #define RTCP_SDES_EMAIL 3
102 #define RTCP_SDES_PHONE 4
103 #define RTCP_SDES_LOC 5
104 #define RTCP_SDES_TOOL 6
105 #define RTCP_SDES_NOTE 7
106 #define RTCP_SDES_PRIV 8
107 #define RTCP_PT_BYE 203
108 #define RTCP_PT_APP 204
109
110 static void
111 vat_print(const void *hdr, u_int len, register const struct udphdr *up)
112 {
113 /* vat/vt audio */
114 u_int ts = *(u_short *)hdr;
115 if ((ts & 0xf060) != 0) {
116 /* probably vt */
117 (void)printf(" udp/vt %u %d / %d",
118 (u_int32_t)(ntohs(up->uh_ulen) - sizeof(*up)),
119 ts & 0x3ff, ts >> 10);
120 } else {
121 /* probably vat */
122 u_int i0 = ntohl(((u_int *)hdr)[0]);
123 u_int i1 = ntohl(((u_int *)hdr)[1]);
124 printf(" udp/vat %u c%d %u%s",
125 (u_int32_t)(ntohs(up->uh_ulen) - sizeof(*up) - 8),
126 i0 & 0xffff,
127 i1, i0 & 0x800000? "*" : "");
128 /* audio format */
129 if (i0 & 0x1f0000)
130 printf(" f%d", (i0 >> 16) & 0x1f);
131 if (i0 & 0x3f000000)
132 printf(" s%d", (i0 >> 24) & 0x3f);
133 }
134 }
135
136 static void
137 rtp_print(const void *hdr, u_int len, register const struct udphdr *up)
138 {
139 /* rtp v1 or v2 */
140 u_int *ip = (u_int *)hdr;
141 u_int hasopt, hasext, contype, hasmarker;
142 u_int i0 = ntohl(((u_int *)hdr)[0]);
143 u_int i1 = ntohl(((u_int *)hdr)[1]);
144 u_int dlen = ntohs(up->uh_ulen) - sizeof(*up) - 8;
145 const char * ptype;
146
147 ip += 2;
148 len >>= 2;
149 len -= 2;
150 hasopt = 0;
151 hasext = 0;
152 if ((i0 >> 30) == 1) {
153 /* rtp v1 */
154 hasopt = i0 & 0x800000;
155 contype = (i0 >> 16) & 0x3f;
156 hasmarker = i0 & 0x400000;
157 ptype = "rtpv1";
158 } else {
159 /* rtp v2 */
160 hasext = i0 & 0x10000000;
161 contype = (i0 >> 16) & 0x7f;
162 hasmarker = i0 & 0x800000;
163 dlen -= 4;
164 ptype = "rtp";
165 ip += 1;
166 len -= 1;
167 }
168 printf(" udp/%s %d c%d %s%s %d %u",
169 ptype,
170 dlen,
171 contype,
172 (hasopt || hasext)? "+" : "",
173 hasmarker? "*" : "",
174 i0 & 0xffff,
175 i1);
176 if (vflag) {
177 printf(" %u", i1);
178 if (hasopt) {
179 u_int i2, optlen;
180 do {
181 i2 = ip[0];
182 optlen = (i2 >> 16) & 0xff;
183 if (optlen == 0 || optlen > len) {
184 printf(" !opt");
185 return;
186 }
187 ip += optlen;
188 len -= optlen;
189 } while ((int)i2 >= 0);
190 }
191 if (hasext) {
192 u_int i2, extlen;
193 i2 = ip[0];
194 extlen = (i2 & 0xffff) + 1;
195 if (extlen > len) {
196 printf(" !ext");
197 return;
198 }
199 ip += extlen;
200 }
201 if (contype == 0x1f) /*XXX H.261 */
202 printf(" 0x%04x", ip[0] >> 16);
203 }
204 }
205
206 static const u_char *
207 rtcp_print(const u_char *hdr, const u_char *ep)
208 {
209 /* rtp v2 control (rtcp) */
210 struct rtcp_rr *rr = 0;
211 struct rtcp_sr *sr;
212 struct rtcphdr *rh = (struct rtcphdr *)hdr;
213 u_int len;
214 u_short flags;
215 int cnt;
216 double ts, dts;
217 if ((u_char *)(rh + 1) > ep) {
218 printf(" [|rtcp]");
219 return (ep);
220 }
221 len = (ntohs(rh->rh_len) + 1) * 4;
222 flags = ntohs(rh->rh_flags);
223 cnt = (flags >> 8) & 0x1f;
224 switch (flags & 0xff) {
225 case RTCP_PT_SR:
226 sr = (struct rtcp_sr *)(rh + 1);
227 printf(" sr");
228 if (len != cnt * sizeof(*rr) + sizeof(*sr) + sizeof(*rh))
229 printf(" [%d]", len);
230 if (vflag)
231 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
232 if ((u_char *)(sr + 1) > ep) {
233 printf(" [|rtcp]");
234 return (ep);
235 }
236 ts = (double)((u_int32_t)ntohl(sr->sr_ntp.upper)) +
237 ((double)((u_int32_t)ntohl(sr->sr_ntp.lower)) /
238 4294967296.0);
239 printf(" @%.2f %u %up %ub", ts, (u_int32_t)ntohl(sr->sr_ts),
240 (u_int32_t)ntohl(sr->sr_np), (u_int32_t)ntohl(sr->sr_nb));
241 rr = (struct rtcp_rr *)(sr + 1);
242 break;
243 case RTCP_PT_RR:
244 printf(" rr");
245 if (len != cnt * sizeof(*rr) + sizeof(*rh))
246 printf(" [%d]", len);
247 rr = (struct rtcp_rr *)(rh + 1);
248 if (vflag)
249 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
250 break;
251 case RTCP_PT_SDES:
252 printf(" sdes %d", len);
253 if (vflag)
254 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
255 cnt = 0;
256 break;
257 case RTCP_PT_BYE:
258 printf(" bye %d", len);
259 if (vflag)
260 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
261 cnt = 0;
262 break;
263 default:
264 printf(" type-0x%x %d", flags & 0xff, len);
265 cnt = 0;
266 break;
267 }
268 if (cnt > 1)
269 printf(" c%d", cnt);
270 while (--cnt >= 0) {
271 if ((u_char *)(rr + 1) > ep) {
272 printf(" [|rtcp]");
273 return (ep);
274 }
275 if (vflag)
276 printf(" %u", (u_int32_t)ntohl(rr->rr_srcid));
277 ts = (double)((u_int32_t)ntohl(rr->rr_lsr)) / 65536.;
278 dts = (double)((u_int32_t)ntohl(rr->rr_dlsr)) / 65536.;
279 printf(" %ul %us %uj @%.2f+%.2f",
280 (u_int32_t)ntohl(rr->rr_nl) & 0x00ffffff,
281 (u_int32_t)ntohl(rr->rr_ls),
282 (u_int32_t)ntohl(rr->rr_dv), ts, dts);
283 }
284 return (hdr + len);
285 }
286
287 /* XXX probably should use getservbyname() and cache answers */
288 #define TFTP_PORT 69 /*XXX*/
289 #define KERBEROS_PORT 88 /*XXX*/
290 #define SUNRPC_PORT 111 /*XXX*/
291 #define SNMP_PORT 161 /*XXX*/
292 #define NTP_PORT 123 /*XXX*/
293 #define SNMPTRAP_PORT 162 /*XXX*/
294 #define RIP_PORT 520 /*XXX*/
295 #define KERBEROS_SEC_PORT 750 /*XXX*/
296
297 #define ISAKMP_PORT 500
298 #define ISAKMP_UPORT1 7500
299 #define ISAKMP_UPORT2 8500
300
301 void
302 udp_print(register const u_char *bp, u_int length, register const u_char *bp2)
303 {
304 register const struct udphdr *up;
305 register const struct ip *ip;
306 register const u_char *cp;
307 register const u_char *ep = bp + length;
308 u_short sport, dport, ulen;
309
310 if (ep > snapend)
311 ep = snapend;
312 up = (struct udphdr *)bp;
313 ip = (struct ip *)bp2;
314 cp = (u_char *)(up + 1);
315 if (cp > snapend) {
316 printf("[|udp]");
317 return;
318 }
319 if (length < sizeof(struct udphdr)) {
320 (void)printf(" truncated-udp %d", length);
321 return;
322 }
323 length -= sizeof(struct udphdr);
324
325 sport = ntohs(up->uh_sport);
326 dport = ntohs(up->uh_dport);
327 ulen = ntohs(up->uh_ulen);
328 if (packettype) {
329 register struct rpc_msg *rp;
330 enum msg_type direction;
331
332 switch (packettype) {
333
334 case PT_VAT:
335 (void)printf("%s.%s > %s.%s:",
336 ipaddr_string(&ip->ip_src),
337 udpport_string(sport),
338 ipaddr_string(&ip->ip_dst),
339 udpport_string(dport));
340 vat_print((void *)(up + 1), length, up);
341 break;
342
343 case PT_WB:
344 (void)printf("%s.%s > %s.%s:",
345 ipaddr_string(&ip->ip_src),
346 udpport_string(sport),
347 ipaddr_string(&ip->ip_dst),
348 udpport_string(dport));
349 wb_print((void *)(up + 1), length);
350 break;
351
352 case PT_RPC:
353 rp = (struct rpc_msg *)(up + 1);
354 direction = (enum msg_type)ntohl(rp->rm_direction);
355 if (direction == CALL)
356 sunrpcrequest_print((u_char *)rp, length,
357 (u_char *)ip);
358 else
359 nfsreply_print((u_char *)rp, length,
360 (u_char *)ip); /*XXX*/
361 break;
362
363 case PT_RTP:
364 (void)printf("%s.%s > %s.%s:",
365 ipaddr_string(&ip->ip_src),
366 udpport_string(sport),
367 ipaddr_string(&ip->ip_dst),
368 udpport_string(dport));
369 rtp_print((void *)(up + 1), length, up);
370 break;
371
372 case PT_RTCP:
373 (void)printf("%s.%s > %s.%s:",
374 ipaddr_string(&ip->ip_src),
375 udpport_string(sport),
376 ipaddr_string(&ip->ip_dst),
377 udpport_string(dport));
378 while (cp < ep)
379 cp = rtcp_print(cp, ep);
380 break;
381
382 case PT_SNMP:
383 (void)printf("%s.%s > %s.%s:",
384 ipaddr_string(&ip->ip_src),
385 udpport_string(sport),
386 ipaddr_string(&ip->ip_dst),
387 udpport_string(dport));
388 snmp_print((const u_char *)(up + 1), length);
389 break;
390 }
391 return;
392 }
393
394 if (!qflag) {
395 register struct rpc_msg *rp;
396 enum msg_type direction;
397
398 rp = (struct rpc_msg *)(up + 1);
399 if (TTEST(rp->rm_direction)) {
400 direction = (enum msg_type)ntohl(rp->rm_direction);
401 if (dport == NFS_PORT && direction == CALL) {
402 nfsreq_print((u_char *)rp, length,
403 (u_char *)ip);
404 return;
405 }
406 if (sport == NFS_PORT && direction == REPLY) {
407 nfsreply_print((u_char *)rp, length,
408 (u_char *)ip);
409 return;
410 }
411 #ifdef notdef
412 if (dport == SUNRPC_PORT && direction == CALL) {
413 sunrpcrequest_print((u_char *)rp, length, (u_char *)ip);
414 return;
415 }
416 #endif
417 }
418 if (TTEST(((struct LAP *)cp)->type) &&
419 ((struct LAP *)cp)->type == lapDDP &&
420 (atalk_port(sport) || atalk_port(dport))) {
421 if (vflag)
422 fputs("kip ", stdout);
423 atalk_print(cp, length);
424 return;
425 }
426 }
427 (void)printf("%s.%s > %s.%s:",
428 ipaddr_string(&ip->ip_src), udpport_string(sport),
429 ipaddr_string(&ip->ip_dst), udpport_string(dport));
430
431 if (!qflag) {
432 #define ISPORT(p) (dport == (p) || sport == (p))
433 if (ISPORT(NAMESERVER_PORT))
434 ns_print((const u_char *)(up + 1), length);
435 else if (ISPORT(TFTP_PORT))
436 tftp_print((const u_char *)(up + 1), length);
437 else if (ISPORT(IPPORT_BOOTPC) || ISPORT(IPPORT_BOOTPS))
438 bootp_print((const u_char *)(up + 1), length,
439 sport, dport);
440 else if (ISPORT(RIP_PORT))
441 rip_print((const u_char *)(up + 1), length);
442 else if (ISPORT(SNMP_PORT) || ISPORT(SNMPTRAP_PORT))
443 snmp_print((const u_char *)(up + 1), length);
444 else if (ISPORT(NTP_PORT))
445 ntp_print((const u_char *)(up + 1), length);
446 else if (ISPORT(KERBEROS_PORT) || ISPORT(KERBEROS_SEC_PORT))
447 krb_print((const void *)(up + 1), length);
448 else if (ISPORT(ISAKMP_PORT) ||
449 ISPORT(ISAKMP_UPORT1) ||
450 ISPORT(ISAKMP_UPORT2)) {
451 isakmp_print((const u_char *)(up + 1), length);
452 }
453 else if (dport == 3456)
454 vat_print((const void *)(up + 1), length, up);
455 /*
456 * Kludge in test for whiteboard packets.
457 */
458 else if (dport == 4567)
459 wb_print((const void *)(up + 1), length);
460 else
461 (void)printf(" udp %u",
462 (u_int32_t)(ulen - sizeof(*up)));
463 #undef ISPORT
464 } else
465 (void)printf(" udp %u", (u_int32_t)(ulen - sizeof(*up)));
466 }
[mirror] the TCPdump network dissector