]> The Tcpdump Group git mirrors - tcpdump/blob - print-arcnet.c
VRRP: add a sample capture and two test cases
[tcpdump] / print-arcnet.c
1 /*
2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 *
21 * From: NetBSD: print-arcnet.c,v 1.2 2000/04/24 13:02:28 itojun Exp
22 */
23
24 #ifdef HAVE_CONFIG_H
25 #include "config.h"
26 #endif
27
28 #include <tcpdump-stdinc.h>
29
30 #include <stdio.h>
31
32 #include "interface.h"
33 #include "extract.h"
34
35 /*
36 * from: NetBSD: if_arc.h,v 1.13 1999/11/19 20:41:19 thorpej Exp
37 */
38
39 /*
40 * Structure of a 2.5MB/s Arcnet header on the BSDs,
41 * as given to interface code.
42 */
43 struct arc_header {
44 u_int8_t arc_shost;
45 u_int8_t arc_dhost;
46 u_int8_t arc_type;
47 /*
48 * only present for newstyle encoding with LL fragmentation.
49 * Don't use sizeof(anything), use ARC_HDR{,NEW}LEN instead.
50 */
51 u_int8_t arc_flag;
52 u_int16_t arc_seqid;
53
54 /*
55 * only present in exception packets (arc_flag == 0xff)
56 */
57 u_int8_t arc_type2; /* same as arc_type */
58 u_int8_t arc_flag2; /* real flag value */
59 u_int16_t arc_seqid2; /* real seqid value */
60 };
61
62 #define ARC_HDRLEN 3
63 #define ARC_HDRNEWLEN 6
64 #define ARC_HDRNEWLEN_EXC 10
65
66 /* RFC 1051 */
67 #define ARCTYPE_IP_OLD 240 /* IP protocol */
68 #define ARCTYPE_ARP_OLD 241 /* address resolution protocol */
69
70 /* RFC 1201 */
71 #define ARCTYPE_IP 212 /* IP protocol */
72 #define ARCTYPE_ARP 213 /* address resolution protocol */
73 #define ARCTYPE_REVARP 214 /* reverse addr resolution protocol */
74
75 #define ARCTYPE_ATALK 221 /* Appletalk */
76 #define ARCTYPE_BANIAN 247 /* Banyan Vines */
77 #define ARCTYPE_IPX 250 /* Novell IPX */
78
79 #define ARCTYPE_INET6 0xc4 /* IPng */
80 #define ARCTYPE_DIAGNOSE 0x80 /* as per ANSI/ATA 878.1 */
81
82 /*
83 * Structure of a 2.5MB/s Arcnet header on Linux. Linux has
84 * an extra "offset" field when given to interface code, and
85 * never presents packets that look like exception frames.
86 */
87 struct arc_linux_header {
88 u_int8_t arc_shost;
89 u_int8_t arc_dhost;
90 u_int16_t arc_offset;
91 u_int8_t arc_type;
92 /*
93 * only present for newstyle encoding with LL fragmentation.
94 * Don't use sizeof(anything), use ARC_LINUX_HDR{,NEW}LEN
95 * instead.
96 */
97 u_int8_t arc_flag;
98 u_int16_t arc_seqid;
99 };
100
101 #define ARC_LINUX_HDRLEN 5
102 #define ARC_LINUX_HDRNEWLEN 8
103
104 static int arcnet_encap_print(u_char arctype, const u_char *p,
105 u_int length, u_int caplen);
106
107 static const struct tok arctypemap[] = {
108 { ARCTYPE_IP_OLD, "oldip" },
109 { ARCTYPE_ARP_OLD, "oldarp" },
110 { ARCTYPE_IP, "ip" },
111 { ARCTYPE_ARP, "arp" },
112 { ARCTYPE_REVARP, "rarp" },
113 { ARCTYPE_ATALK, "atalk" },
114 { ARCTYPE_BANIAN, "banyan" },
115 { ARCTYPE_IPX, "ipx" },
116 { ARCTYPE_INET6, "ipv6" },
117 { ARCTYPE_DIAGNOSE, "diag" },
118 { 0, 0 }
119 };
120
121 static inline void
122 arcnet_print(const u_char *bp, u_int length, int phds, int flag, u_int seqid)
123 {
124 const struct arc_header *ap;
125 const char *arctypename;
126
127
128 ap = (const struct arc_header *)bp;
129
130
131 if (qflag) {
132 (void)printf("%02x %02x %d: ",
133 ap->arc_shost,
134 ap->arc_dhost,
135 length);
136 return;
137 }
138
139 arctypename = tok2str(arctypemap, "%02x", ap->arc_type);
140
141 if (!phds) {
142 (void)printf("%02x %02x %s %d: ",
143 ap->arc_shost, ap->arc_dhost, arctypename,
144 length);
145 return;
146 }
147
148 if (flag == 0) {
149 (void)printf("%02x %02x %s seqid %04x %d: ",
150 ap->arc_shost, ap->arc_dhost, arctypename, seqid,
151 length);
152 return;
153 }
154
155 if (flag & 1)
156 (void)printf("%02x %02x %s seqid %04x "
157 "(first of %d fragments) %d: ",
158 ap->arc_shost, ap->arc_dhost, arctypename, seqid,
159 (flag + 3) / 2, length);
160 else
161 (void)printf("%02x %02x %s seqid %04x "
162 "(fragment %d) %d: ",
163 ap->arc_shost, ap->arc_dhost, arctypename, seqid,
164 flag/2 + 1, length);
165 }
166
167 /*
168 * This is the top level routine of the printer. 'p' points
169 * to the ARCNET header of the packet, 'h->ts' is the timestamp,
170 * 'h->len' is the length of the packet off the wire, and 'h->caplen'
171 * is the number of bytes actually captured.
172 */
173 u_int
174 arcnet_if_print(const struct pcap_pkthdr *h, const u_char *p)
175 {
176 u_int caplen = h->caplen;
177 u_int length = h->len;
178 const struct arc_header *ap;
179
180 int phds, flag = 0, archdrlen = 0;
181 u_int seqid = 0;
182 u_char arc_type;
183
184 if (caplen < ARC_HDRLEN) {
185 printf("[|arcnet]");
186 return (caplen);
187 }
188
189 ap = (const struct arc_header *)p;
190 arc_type = ap->arc_type;
191
192 switch (arc_type) {
193 default:
194 phds = 1;
195 break;
196 case ARCTYPE_IP_OLD:
197 case ARCTYPE_ARP_OLD:
198 case ARCTYPE_DIAGNOSE:
199 phds = 0;
200 archdrlen = ARC_HDRLEN;
201 break;
202 }
203
204 if (phds) {
205 if (caplen < ARC_HDRNEWLEN) {
206 arcnet_print(p, length, 0, 0, 0);
207 printf("[|phds]");
208 return (caplen);
209 }
210
211 if (ap->arc_flag == 0xff) {
212 if (caplen < ARC_HDRNEWLEN_EXC) {
213 arcnet_print(p, length, 0, 0, 0);
214 printf("[|phds extended]");
215 return (caplen);
216 }
217 flag = ap->arc_flag2;
218 seqid = EXTRACT_16BITS(&ap->arc_seqid2);
219 archdrlen = ARC_HDRNEWLEN_EXC;
220 } else {
221 flag = ap->arc_flag;
222 seqid = EXTRACT_16BITS(&ap->arc_seqid);
223 archdrlen = ARC_HDRNEWLEN;
224 }
225 }
226
227
228 if (eflag)
229 arcnet_print(p, length, phds, flag, seqid);
230
231 /*
232 * Go past the ARCNET header.
233 */
234 length -= archdrlen;
235 caplen -= archdrlen;
236 p += archdrlen;
237
238 if (phds && flag && (flag & 1) == 0) {
239 /*
240 * This is a middle fragment.
241 */
242 return (archdrlen);
243 }
244
245 if (!arcnet_encap_print(arc_type, p, length, caplen))
246 default_print(p, caplen);
247
248 return (archdrlen);
249 }
250
251 /*
252 * This is the top level routine of the printer. 'p' points
253 * to the ARCNET header of the packet, 'h->ts' is the timestamp,
254 * 'h->len' is the length of the packet off the wire, and 'h->caplen'
255 * is the number of bytes actually captured. It is quite similar
256 * to the non-Linux style printer except that Linux doesn't ever
257 * supply packets that look like exception frames, it always supplies
258 * reassembled packets rather than raw frames, and headers have an
259 * extra "offset" field between the src/dest and packet type.
260 */
261 u_int
262 arcnet_linux_if_print(const struct pcap_pkthdr *h, const u_char *p)
263 {
264 u_int caplen = h->caplen;
265 u_int length = h->len;
266 const struct arc_linux_header *ap;
267
268 int archdrlen = 0;
269 u_char arc_type;
270
271 if (caplen < ARC_LINUX_HDRLEN) {
272 printf("[|arcnet]");
273 return (caplen);
274 }
275
276 ap = (const struct arc_linux_header *)p;
277 arc_type = ap->arc_type;
278
279 switch (arc_type) {
280 default:
281 archdrlen = ARC_LINUX_HDRNEWLEN;
282 if (caplen < ARC_LINUX_HDRNEWLEN) {
283 printf("[|arcnet]");
284 return (caplen);
285 }
286 break;
287 case ARCTYPE_IP_OLD:
288 case ARCTYPE_ARP_OLD:
289 case ARCTYPE_DIAGNOSE:
290 archdrlen = ARC_LINUX_HDRLEN;
291 break;
292 }
293
294 if (eflag)
295 arcnet_print(p, length, 0, 0, 0);
296
297 /*
298 * Go past the ARCNET header.
299 */
300 length -= archdrlen;
301 caplen -= archdrlen;
302 p += archdrlen;
303
304 if (!arcnet_encap_print(arc_type, p, length, caplen))
305 default_print(p, caplen);
306
307 return (archdrlen);
308 }
309
310 /*
311 * Prints the packet encapsulated in an ARCnet data field,
312 * given the ARCnet system code.
313 *
314 * Returns non-zero if it can do so, zero if the system code is unknown.
315 */
316
317
318 static int
319 arcnet_encap_print(u_char arctype, const u_char *p,
320 u_int length, u_int caplen)
321 {
322 switch (arctype) {
323
324 case ARCTYPE_IP_OLD:
325 case ARCTYPE_IP:
326 ip_print(gndo, p, length);
327 return (1);
328
329 #ifdef INET6
330 case ARCTYPE_INET6:
331 ip6_print(gndo, p, length);
332 return (1);
333 #endif /*INET6*/
334
335 case ARCTYPE_ARP_OLD:
336 case ARCTYPE_ARP:
337 case ARCTYPE_REVARP:
338 arp_print(gndo, p, length, caplen);
339 return (1);
340
341 case ARCTYPE_ATALK: /* XXX was this ever used? */
342 if (vflag)
343 fputs("et1 ", stdout);
344 atalk_print(p, length);
345 return (1);
346
347 case ARCTYPE_IPX:
348 ipx_print(p, length);
349 return (1);
350
351 default:
352 return (0);
353 }
354 }
355
356 /*
357 * Local Variables:
358 * c-style: bsd
359 * End:
360 */
361