]> The Tcpdump Group git mirrors - tcpdump/blob - print-ospf6.c
Revert partially the commit 21b1273
[tcpdump] / print-ospf6.c
1 /*
2 * Copyright (c) 1992, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 *
21 * OSPF support contributed by Jeffrey Honig (jch@mitchell.cit.cornell.edu)
22 */
23
24 /* \summary: IPv6 Open Shortest Path First (OSPFv3) printer */
25
26 #ifdef HAVE_CONFIG_H
27 #include <config.h>
28 #endif
29
30 #include "netdissect-stdinc.h"
31
32 #include <string.h>
33
34 #include "netdissect.h"
35 #include "addrtoname.h"
36 #include "extract.h"
37
38 #include "ospf.h"
39
40 #define OSPF_TYPE_HELLO 1 /* Hello */
41 #define OSPF_TYPE_DD 2 /* Database Description */
42 #define OSPF_TYPE_LS_REQ 3 /* Link State Request */
43 #define OSPF_TYPE_LS_UPDATE 4 /* Link State Update */
44 #define OSPF_TYPE_LS_ACK 5 /* Link State Ack */
45
46 /* Options *_options */
47 #define OSPF6_OPTION_V6 0x01 /* V6 bit: A bit for peeping tom */
48 #define OSPF6_OPTION_E 0x02 /* E bit: External routes advertised */
49 #define OSPF6_OPTION_MC 0x04 /* MC bit: Multicast capable */
50 #define OSPF6_OPTION_N 0x08 /* N bit: For type-7 LSA */
51 #define OSPF6_OPTION_R 0x10 /* R bit: Router bit */
52 #define OSPF6_OPTION_DC 0x20 /* DC bit: Demand circuits */
53 /* The field is actually 24-bit (RFC5340 Section A.2). */
54 #define OSPF6_OPTION_AF 0x0100 /* AF bit: Multiple address families */
55 #define OSPF6_OPTION_L 0x0200 /* L bit: Link-local signaling (LLS) */
56 #define OSPF6_OPTION_AT 0x0400 /* AT bit: Authentication trailer */
57
58
59 /* db_flags */
60 #define OSPF6_DB_INIT 0x04 /* */
61 #define OSPF6_DB_MORE 0x02
62 #define OSPF6_DB_MASTER 0x01
63 #define OSPF6_DB_M6 0x10 /* IPv6 MTU */
64
65 /* ls_type */
66 #define LS_TYPE_ROUTER 1 /* router link */
67 #define LS_TYPE_NETWORK 2 /* network link */
68 #define LS_TYPE_INTER_AP 3 /* Inter-Area-Prefix */
69 #define LS_TYPE_INTER_AR 4 /* Inter-Area-Router */
70 #define LS_TYPE_ASE 5 /* ASE */
71 #define LS_TYPE_GROUP 6 /* Group membership */
72 #define LS_TYPE_NSSA 7 /* NSSA */
73 #define LS_TYPE_LINK 8 /* Link LSA */
74 #define LS_TYPE_INTRA_AP 9 /* Intra-Area-Prefix */
75 #define LS_TYPE_INTRA_ATE 10 /* Intra-Area-TE */
76 #define LS_TYPE_GRACE 11 /* Grace LSA */
77 #define LS_TYPE_RI 12 /* Router information */
78 #define LS_TYPE_INTER_ASTE 13 /* Inter-AS-TE */
79 #define LS_TYPE_L1VPN 14 /* L1VPN */
80 #define LS_TYPE_MASK 0x1fff
81
82 #define LS_SCOPE_LINKLOCAL 0x0000
83 #define LS_SCOPE_AREA 0x2000
84 #define LS_SCOPE_AS 0x4000
85 #define LS_SCOPE_MASK 0x6000
86 #define LS_SCOPE_U 0x8000
87
88 /* rla_link.link_type */
89 #define RLA_TYPE_ROUTER 1 /* point-to-point to another router */
90 #define RLA_TYPE_TRANSIT 2 /* connection to transit network */
91 #define RLA_TYPE_VIRTUAL 4 /* virtual link */
92
93 /* rla_flags */
94 #define RLA_FLAG_B 0x01
95 #define RLA_FLAG_E 0x02
96 #define RLA_FLAG_V 0x04
97 #define RLA_FLAG_W 0x08
98 #define RLA_FLAG_N 0x10
99
100 /* lsa_prefix options */
101 #define LSA_PREFIX_OPT_NU 0x01
102 #define LSA_PREFIX_OPT_LA 0x02
103 #define LSA_PREFIX_OPT_MC 0x04
104 #define LSA_PREFIX_OPT_P 0x08
105 #define LSA_PREFIX_OPT_DN 0x10
106
107 /* sla_tosmetric breakdown */
108 #define SLA_MASK_TOS 0x7f000000
109 #define SLA_MASK_METRIC 0x00ffffff
110 #define SLA_SHIFT_TOS 24
111
112 /* asla_metric */
113 #define ASLA_FLAG_FWDADDR 0x02000000
114 #define ASLA_FLAG_ROUTETAG 0x01000000
115 #define ASLA_MASK_METRIC 0x00ffffff
116
117 /* RFC6506 Section 4.1 */
118 #define OSPF6_AT_HDRLEN 16U
119 #define OSPF6_AUTH_TYPE_HMAC 0x0001
120
121 typedef nd_uint32_t rtrid_t;
122
123 /* link state advertisement header */
124 struct lsa6_hdr {
125 nd_uint16_t ls_age;
126 nd_uint16_t ls_type;
127 rtrid_t ls_stateid;
128 rtrid_t ls_router;
129 nd_uint32_t ls_seq;
130 nd_uint16_t ls_chksum;
131 nd_uint16_t ls_length;
132 };
133
134 /* Length of an IPv6 address, in bytes. */
135 #define IPV6_ADDR_LEN_BYTES (128/8)
136
137 struct lsa6_prefix {
138 nd_uint8_t lsa_p_len;
139 nd_uint8_t lsa_p_opt;
140 nd_uint16_t lsa_p_metric;
141 nd_byte lsa_p_prefix[IPV6_ADDR_LEN_BYTES]; /* maximum length */
142 };
143
144 /* link state advertisement */
145 struct lsa6 {
146 struct lsa6_hdr ls_hdr;
147
148 /* Link state types */
149 union {
150 /* Router links advertisements */
151 struct {
152 union {
153 nd_uint8_t flg;
154 nd_uint32_t opt;
155 } rla_flgandopt;
156 #define rla_flags rla_flgandopt.flg
157 #define rla_options rla_flgandopt.opt
158 struct rlalink6 {
159 nd_uint8_t link_type;
160 nd_byte link_zero;
161 nd_uint16_t link_metric;
162 nd_uint32_t link_ifid;
163 nd_uint32_t link_nifid;
164 rtrid_t link_nrtid;
165 } rla_link[1]; /* may repeat */
166 } un_rla;
167
168 /* Network links advertisements */
169 struct {
170 nd_uint32_t nla_options;
171 rtrid_t nla_router[1]; /* may repeat */
172 } un_nla;
173
174 /* Inter Area Prefix LSA */
175 struct {
176 nd_uint32_t inter_ap_metric;
177 struct lsa6_prefix inter_ap_prefix[1];
178 } un_inter_ap;
179
180 /* AS external links advertisements */
181 struct {
182 nd_uint32_t asla_metric;
183 struct lsa6_prefix asla_prefix[1];
184 /* some optional fields follow */
185 } un_asla;
186
187 #if 0
188 /* Summary links advertisements */
189 struct {
190 nd_ipv4 sla_mask;
191 nd_uint32_t sla_tosmetric[1]; /* may repeat */
192 } un_sla;
193
194 /* Multicast group membership */
195 struct mcla {
196 nd_uint32_t mcla_vtype;
197 nd_ipv4 mcla_vid;
198 } un_mcla[1];
199 #endif
200
201 /* Type 7 LSA */
202
203 /* Link LSA */
204 struct llsa {
205 union {
206 nd_uint8_t pri;
207 nd_uint32_t opt;
208 } llsa_priandopt;
209 #define llsa_priority llsa_priandopt.pri
210 #define llsa_options llsa_priandopt.opt
211 nd_ipv6 llsa_lladdr;
212 nd_uint32_t llsa_nprefix;
213 struct lsa6_prefix llsa_prefix[1];
214 } un_llsa;
215
216 /* Intra-Area-Prefix */
217 struct {
218 nd_uint16_t intra_ap_nprefix;
219 nd_uint16_t intra_ap_lstype;
220 rtrid_t intra_ap_lsid;
221 rtrid_t intra_ap_rtid;
222 struct lsa6_prefix intra_ap_prefix[1];
223 } un_intra_ap;
224 } lsa_un;
225 };
226
227 /*
228 * the main header
229 */
230 struct ospf6hdr {
231 nd_uint8_t ospf6_version;
232 nd_uint8_t ospf6_type;
233 nd_uint16_t ospf6_len;
234 rtrid_t ospf6_routerid;
235 rtrid_t ospf6_areaid;
236 nd_uint16_t ospf6_chksum;
237 nd_uint8_t ospf6_instanceid;
238 nd_uint8_t ospf6_rsvd;
239 };
240
241 /*
242 * The OSPF6 header length is 16 bytes, regardless of how your compiler
243 * might choose to pad the above structure.
244 */
245 #define OSPF6HDR_LEN 16
246
247 /* Hello packet */
248 struct hello6 {
249 nd_uint32_t hello_ifid;
250 union {
251 nd_uint8_t pri;
252 nd_uint32_t opt;
253 } hello_priandopt;
254 #define hello_priority hello_priandopt.pri
255 #define hello_options hello_priandopt.opt
256 nd_uint16_t hello_helloint;
257 nd_uint16_t hello_deadint;
258 rtrid_t hello_dr;
259 rtrid_t hello_bdr;
260 rtrid_t hello_neighbor[1]; /* may repeat */
261 };
262
263 /* Database Description packet */
264 struct dd6 {
265 nd_uint32_t db_options;
266 nd_uint16_t db_mtu;
267 nd_uint8_t db_mbz;
268 nd_uint8_t db_flags;
269 nd_uint32_t db_seq;
270 struct lsa6_hdr db_lshdr[1]; /* may repeat */
271 };
272
273 /* Link State Request */
274 struct lsr6 {
275 nd_uint16_t ls_mbz;
276 nd_uint16_t ls_type;
277 rtrid_t ls_stateid;
278 rtrid_t ls_router;
279 };
280
281 /* Link State Update */
282 struct lsu6 {
283 nd_uint32_t lsu_count;
284 struct lsa6 lsu_lsa[1]; /* may repeat */
285 };
286
287
288 static const struct tok ospf6_option_values[] = {
289 { OSPF6_OPTION_V6, "V6" },
290 { OSPF6_OPTION_E, "External" },
291 { OSPF6_OPTION_MC, "Deprecated" },
292 { OSPF6_OPTION_N, "NSSA" },
293 { OSPF6_OPTION_R, "Router" },
294 { OSPF6_OPTION_DC, "Demand Circuit" },
295 { OSPF6_OPTION_AF, "AFs Support" },
296 { OSPF6_OPTION_L, "LLS" },
297 { OSPF6_OPTION_AT, "Authentication Trailer" },
298 { 0, NULL }
299 };
300
301 static const struct tok ospf6_rla_flag_values[] = {
302 { RLA_FLAG_B, "ABR" },
303 { RLA_FLAG_E, "External" },
304 { RLA_FLAG_V, "Virtual-Link Endpoint" },
305 { RLA_FLAG_W, "Wildcard Receiver" },
306 { RLA_FLAG_N, "NSSA Translator" },
307 { 0, NULL }
308 };
309
310 static const struct tok ospf6_asla_flag_values[] = {
311 { ASLA_FLAG_EXTERNAL, "External Type 2" },
312 { ASLA_FLAG_FWDADDR, "Forwarding" },
313 { ASLA_FLAG_ROUTETAG, "Tag" },
314 { 0, NULL }
315 };
316
317 static const struct tok ospf6_type_values[] = {
318 { OSPF_TYPE_HELLO, "Hello" },
319 { OSPF_TYPE_DD, "Database Description" },
320 { OSPF_TYPE_LS_REQ, "LS-Request" },
321 { OSPF_TYPE_LS_UPDATE, "LS-Update" },
322 { OSPF_TYPE_LS_ACK, "LS-Ack" },
323 { 0, NULL }
324 };
325
326 static const struct tok ospf6_lsa_values[] = {
327 { LS_TYPE_ROUTER, "Router" },
328 { LS_TYPE_NETWORK, "Network" },
329 { LS_TYPE_INTER_AP, "Inter-Area Prefix" },
330 { LS_TYPE_INTER_AR, "Inter-Area Router" },
331 { LS_TYPE_ASE, "External" },
332 { LS_TYPE_GROUP, "Deprecated" },
333 { LS_TYPE_NSSA, "NSSA" },
334 { LS_TYPE_LINK, "Link" },
335 { LS_TYPE_INTRA_AP, "Intra-Area Prefix" },
336 { LS_TYPE_INTRA_ATE, "Intra-Area TE" },
337 { LS_TYPE_GRACE, "Grace" },
338 { LS_TYPE_RI, "Router Information" },
339 { LS_TYPE_INTER_ASTE, "Inter-AS-TE" },
340 { LS_TYPE_L1VPN, "Layer 1 VPN" },
341 { 0, NULL }
342 };
343
344 static const struct tok ospf6_ls_scope_values[] = {
345 { LS_SCOPE_LINKLOCAL, "Link Local" },
346 { LS_SCOPE_AREA, "Area Local" },
347 { LS_SCOPE_AS, "Domain Wide" },
348 { 0, NULL }
349 };
350
351 static const struct tok ospf6_dd_flag_values[] = {
352 { OSPF6_DB_INIT, "Init" },
353 { OSPF6_DB_MORE, "More" },
354 { OSPF6_DB_MASTER, "Master" },
355 { OSPF6_DB_M6, "IPv6 MTU" },
356 { 0, NULL }
357 };
358
359 static const struct tok ospf6_lsa_prefix_option_values[] = {
360 { LSA_PREFIX_OPT_NU, "No Unicast" },
361 { LSA_PREFIX_OPT_LA, "Local address" },
362 { LSA_PREFIX_OPT_MC, "Deprecated" },
363 { LSA_PREFIX_OPT_P, "Propagate" },
364 { LSA_PREFIX_OPT_DN, "Down" },
365 { 0, NULL }
366 };
367
368 static const struct tok ospf6_auth_type_str[] = {
369 { OSPF6_AUTH_TYPE_HMAC, "HMAC" },
370 { 0, NULL }
371 };
372
373 static void
374 ospf6_print_ls_type(netdissect_options *ndo,
375 u_int ls_type, const rtrid_t *ls_stateid)
376 {
377 ND_PRINT("\n\t %s LSA (%u), %s Scope%s, LSA-ID %s",
378 tok2str(ospf6_lsa_values, "Unknown", ls_type & LS_TYPE_MASK),
379 ls_type & LS_TYPE_MASK,
380 tok2str(ospf6_ls_scope_values, "Unknown", ls_type & LS_SCOPE_MASK),
381 ls_type &0x8000 ? ", transitive" : "", /* U-bit */
382 GET_IPADDR_STRING((const u_char *)ls_stateid));
383 }
384
385 static int
386 ospf6_print_lshdr(netdissect_options *ndo,
387 const struct lsa6_hdr *lshp, const u_char *dataend)
388 {
389 if ((const u_char *)(lshp + 1) > dataend)
390 goto trunc;
391
392 ND_PRINT("\n\t Advertising Router %s, seq 0x%08x, age %us, length %u",
393 GET_IPADDR_STRING(lshp->ls_router),
394 GET_BE_U_4(lshp->ls_seq),
395 GET_BE_U_2(lshp->ls_age),
396 GET_BE_U_2(lshp->ls_length)-(u_int)sizeof(struct lsa6_hdr));
397
398 ospf6_print_ls_type(ndo, GET_BE_U_2(lshp->ls_type),
399 &lshp->ls_stateid);
400
401 return (0);
402 trunc:
403 return (1);
404 }
405
406 static int
407 ospf6_print_lsaprefix(netdissect_options *ndo,
408 const uint8_t *tptr, u_int lsa_length)
409 {
410 const struct lsa6_prefix *lsapp = (const struct lsa6_prefix *)tptr;
411 u_int wordlen;
412 nd_ipv6 prefix;
413
414 if (lsa_length < sizeof (*lsapp) - IPV6_ADDR_LEN_BYTES)
415 goto trunc;
416 lsa_length -= sizeof (*lsapp) - IPV6_ADDR_LEN_BYTES;
417 ND_TCHECK_LEN(lsapp, sizeof(*lsapp) - IPV6_ADDR_LEN_BYTES);
418 wordlen = (GET_U_1(lsapp->lsa_p_len) + 31) / 32;
419 if (wordlen * 4 > sizeof(nd_ipv6)) {
420 ND_PRINT(" bogus prefixlen /%u", GET_U_1(lsapp->lsa_p_len));
421 goto trunc;
422 }
423 if (lsa_length < wordlen * 4)
424 goto trunc;
425 lsa_length -= wordlen * 4;
426 ND_TCHECK_LEN(lsapp->lsa_p_prefix, wordlen * 4);
427 memset(prefix, 0, sizeof(prefix));
428 memcpy(prefix, lsapp->lsa_p_prefix, wordlen * 4);
429 ND_PRINT("\n\t\t%s/%u", ip6addr_string(ndo, prefix), /* local buffer, not packet data; don't use GET_IP6ADDR_STRING() */
430 GET_U_1(lsapp->lsa_p_len));
431 if (GET_U_1(lsapp->lsa_p_opt)) {
432 ND_PRINT(", Options [%s]",
433 bittok2str(ospf6_lsa_prefix_option_values,
434 "none", GET_U_1(lsapp->lsa_p_opt)));
435 }
436 ND_PRINT(", metric %u", GET_BE_U_2(lsapp->lsa_p_metric));
437 return sizeof(*lsapp) - IPV6_ADDR_LEN_BYTES + wordlen * 4;
438
439 trunc:
440 return -1;
441 }
442
443
444 /*
445 * Print a single link state advertisement. If truncated return 1, else 0.
446 */
447 static int
448 ospf6_print_lsa(netdissect_options *ndo,
449 const struct lsa6 *lsap, const u_char *dataend)
450 {
451 const struct rlalink6 *rlp;
452 #if 0
453 const struct tos_metric *tosp;
454 #endif
455 const rtrid_t *ap;
456 #if 0
457 const struct aslametric *almp;
458 const struct mcla *mcp;
459 #endif
460 const struct llsa *llsap;
461 const struct lsa6_prefix *lsapp;
462 #if 0
463 const uint32_t *lp;
464 #endif
465 u_int prefixes;
466 int bytelen;
467 u_int length, lsa_length;
468 uint32_t flags32;
469 const uint8_t *tptr;
470
471 if (ospf6_print_lshdr(ndo, &lsap->ls_hdr, dataend))
472 return (1);
473 length = GET_BE_U_2(lsap->ls_hdr.ls_length);
474
475 /*
476 * The LSA length includes the length of the header;
477 * it must have a value that's at least that length.
478 * If it does, find the length of what follows the
479 * header.
480 */
481 if (length < sizeof(struct lsa6_hdr) || (const u_char *)lsap + length > dataend)
482 return (1);
483 lsa_length = length - sizeof(struct lsa6_hdr);
484 tptr = (const uint8_t *)lsap+sizeof(struct lsa6_hdr);
485
486 switch (GET_BE_U_2(lsap->ls_hdr.ls_type)) {
487 case LS_TYPE_ROUTER | LS_SCOPE_AREA:
488 if (lsa_length < sizeof (lsap->lsa_un.un_rla.rla_options))
489 return (1);
490 lsa_length -= sizeof (lsap->lsa_un.un_rla.rla_options);
491 ND_PRINT("\n\t Options [%s]",
492 bittok2str(ospf6_option_values, "none",
493 GET_BE_U_4(lsap->lsa_un.un_rla.rla_options)));
494 ND_PRINT(", RLA-Flags [%s]",
495 bittok2str(ospf6_rla_flag_values, "none",
496 GET_U_1(lsap->lsa_un.un_rla.rla_flags)));
497
498 rlp = lsap->lsa_un.un_rla.rla_link;
499 while (lsa_length != 0) {
500 if (lsa_length < sizeof (*rlp))
501 return (1);
502 lsa_length -= sizeof (*rlp);
503 ND_TCHECK_SIZE(rlp);
504 switch (GET_U_1(rlp->link_type)) {
505
506 case RLA_TYPE_VIRTUAL:
507 ND_PRINT("\n\t Virtual Link: Neighbor Router-ID %s"
508 "\n\t Neighbor Interface-ID %s, Interface %s",
509 GET_IPADDR_STRING(rlp->link_nrtid),
510 GET_IPADDR_STRING(rlp->link_nifid),
511 GET_IPADDR_STRING(rlp->link_ifid));
512 break;
513
514 case RLA_TYPE_ROUTER:
515 ND_PRINT("\n\t Neighbor Router-ID %s"
516 "\n\t Neighbor Interface-ID %s, Interface %s",
517 GET_IPADDR_STRING(rlp->link_nrtid),
518 GET_IPADDR_STRING(rlp->link_nifid),
519 GET_IPADDR_STRING(rlp->link_ifid));
520 break;
521
522 case RLA_TYPE_TRANSIT:
523 ND_PRINT("\n\t Neighbor Network-ID %s"
524 "\n\t Neighbor Interface-ID %s, Interface %s",
525 GET_IPADDR_STRING(rlp->link_nrtid),
526 GET_IPADDR_STRING(rlp->link_nifid),
527 GET_IPADDR_STRING(rlp->link_ifid));
528 break;
529
530 default:
531 ND_PRINT("\n\t Unknown Router Links Type 0x%02x",
532 GET_U_1(rlp->link_type));
533 return (0);
534 }
535 ND_PRINT(", metric %u", GET_BE_U_2(rlp->link_metric));
536 rlp++;
537 }
538 break;
539
540 case LS_TYPE_NETWORK | LS_SCOPE_AREA:
541 if (lsa_length < sizeof (lsap->lsa_un.un_nla.nla_options))
542 return (1);
543 lsa_length -= sizeof (lsap->lsa_un.un_nla.nla_options);
544 ND_PRINT("\n\t Options [%s]",
545 bittok2str(ospf6_option_values, "none",
546 GET_BE_U_4(lsap->lsa_un.un_nla.nla_options)));
547
548 ND_PRINT("\n\t Connected Routers:");
549 ap = lsap->lsa_un.un_nla.nla_router;
550 while (lsa_length != 0) {
551 if (lsa_length < sizeof (*ap))
552 return (1);
553 lsa_length -= sizeof (*ap);
554 ND_TCHECK_SIZE(ap);
555 ND_PRINT("\n\t\t%s", GET_IPADDR_STRING(*ap));
556 ++ap;
557 }
558 break;
559
560 case LS_TYPE_INTER_AP | LS_SCOPE_AREA:
561 if (lsa_length < sizeof (lsap->lsa_un.un_inter_ap.inter_ap_metric))
562 return (1);
563 lsa_length -= sizeof (lsap->lsa_un.un_inter_ap.inter_ap_metric);
564 ND_PRINT(", metric %u",
565 GET_BE_U_4(lsap->lsa_un.un_inter_ap.inter_ap_metric) & SLA_MASK_METRIC);
566
567 tptr = (const uint8_t *)lsap->lsa_un.un_inter_ap.inter_ap_prefix;
568 while (lsa_length != 0) {
569 bytelen = ospf6_print_lsaprefix(ndo, tptr, lsa_length);
570 if (bytelen < 0)
571 goto trunc;
572 /*
573 * ospf6_print_lsaprefix() will return -1 if
574 * the length is too high, so this will not
575 * underflow.
576 */
577 lsa_length -= bytelen;
578 tptr += bytelen;
579 }
580 break;
581
582 case LS_TYPE_ASE | LS_SCOPE_AS:
583 if (lsa_length < sizeof (lsap->lsa_un.un_asla.asla_metric))
584 return (1);
585 lsa_length -= sizeof (lsap->lsa_un.un_asla.asla_metric);
586 flags32 = GET_BE_U_4(lsap->lsa_un.un_asla.asla_metric);
587 ND_PRINT("\n\t Flags [%s]",
588 bittok2str(ospf6_asla_flag_values, "none", flags32));
589 ND_PRINT(" metric %u",
590 GET_BE_U_4(lsap->lsa_un.un_asla.asla_metric) &
591 ASLA_MASK_METRIC);
592
593 tptr = (const uint8_t *)lsap->lsa_un.un_asla.asla_prefix;
594 lsapp = (const struct lsa6_prefix *)tptr;
595 bytelen = ospf6_print_lsaprefix(ndo, tptr, lsa_length);
596 if (bytelen < 0)
597 goto trunc;
598 /*
599 * ospf6_print_lsaprefix() will return -1 if
600 * the length is too high, so this will not
601 * underflow.
602 */
603 lsa_length -= bytelen;
604 tptr += bytelen;
605
606 if ((flags32 & ASLA_FLAG_FWDADDR) != 0) {
607 if (lsa_length < sizeof (nd_ipv6))
608 return (1);
609 lsa_length -= sizeof (nd_ipv6);
610 ND_PRINT(" forward %s",
611 GET_IP6ADDR_STRING(tptr));
612 tptr += sizeof(nd_ipv6);
613 }
614
615 if ((flags32 & ASLA_FLAG_ROUTETAG) != 0) {
616 if (lsa_length < sizeof (uint32_t))
617 return (1);
618 lsa_length -= sizeof (uint32_t);
619 ND_PRINT(" tag %s",
620 GET_IPADDR_STRING(tptr));
621 tptr += sizeof(uint32_t);
622 }
623
624 if (GET_U_1(lsapp->lsa_p_metric)) {
625 if (lsa_length < sizeof (uint32_t))
626 return (1);
627 lsa_length -= sizeof (uint32_t);
628 ND_PRINT(" RefLSID: %s",
629 GET_IPADDR_STRING(tptr));
630 tptr += sizeof(uint32_t);
631 }
632 break;
633
634 case LS_TYPE_LINK:
635 /* Link LSA */
636 llsap = &lsap->lsa_un.un_llsa;
637 if (lsa_length < sizeof (llsap->llsa_priandopt))
638 return (1);
639 lsa_length -= sizeof (llsap->llsa_priandopt);
640 ND_TCHECK_SIZE(&llsap->llsa_priandopt);
641 ND_PRINT("\n\t Options [%s]",
642 bittok2str(ospf6_option_values, "none",
643 GET_BE_U_4(llsap->llsa_options)));
644
645 if (lsa_length < sizeof (llsap->llsa_lladdr) + sizeof (llsap->llsa_nprefix))
646 return (1);
647 lsa_length -= sizeof (llsap->llsa_lladdr) + sizeof (llsap->llsa_nprefix);
648 prefixes = GET_BE_U_4(llsap->llsa_nprefix);
649 ND_PRINT("\n\t Priority %u, Link-local address %s, Prefixes %u:",
650 GET_U_1(llsap->llsa_priority),
651 GET_IP6ADDR_STRING(llsap->llsa_lladdr),
652 prefixes);
653
654 tptr = (const uint8_t *)llsap->llsa_prefix;
655 while (prefixes > 0) {
656 bytelen = ospf6_print_lsaprefix(ndo, tptr, lsa_length);
657 if (bytelen < 0)
658 goto trunc;
659 prefixes--;
660 /*
661 * ospf6_print_lsaprefix() will return -1 if
662 * the length is too high, so this will not
663 * underflow.
664 */
665 lsa_length -= bytelen;
666 tptr += bytelen;
667 }
668 break;
669
670 case LS_TYPE_INTRA_AP | LS_SCOPE_AREA:
671 /* Intra-Area-Prefix LSA */
672 if (lsa_length < sizeof (lsap->lsa_un.un_intra_ap.intra_ap_rtid))
673 return (1);
674 lsa_length -= sizeof (lsap->lsa_un.un_intra_ap.intra_ap_rtid);
675 ND_TCHECK_4(lsap->lsa_un.un_intra_ap.intra_ap_rtid);
676 ospf6_print_ls_type(ndo,
677 GET_BE_U_2(lsap->lsa_un.un_intra_ap.intra_ap_lstype),
678 &lsap->lsa_un.un_intra_ap.intra_ap_lsid);
679
680 if (lsa_length < sizeof (lsap->lsa_un.un_intra_ap.intra_ap_nprefix))
681 return (1);
682 lsa_length -= sizeof (lsap->lsa_un.un_intra_ap.intra_ap_nprefix);
683 prefixes = GET_BE_U_2(lsap->lsa_un.un_intra_ap.intra_ap_nprefix);
684 ND_PRINT("\n\t Prefixes %u:", prefixes);
685
686 tptr = (const uint8_t *)lsap->lsa_un.un_intra_ap.intra_ap_prefix;
687 while (prefixes > 0) {
688 bytelen = ospf6_print_lsaprefix(ndo, tptr, lsa_length);
689 if (bytelen < 0)
690 goto trunc;
691 prefixes--;
692 /*
693 * ospf6_print_lsaprefix() will return -1 if
694 * the length is too high, so this will not
695 * underflow.
696 */
697 lsa_length -= bytelen;
698 tptr += bytelen;
699 }
700 break;
701
702 case LS_TYPE_GRACE | LS_SCOPE_LINKLOCAL:
703 if (ospf_grace_lsa_print(ndo, tptr, lsa_length) == -1) {
704 return 1;
705 }
706 break;
707
708 case LS_TYPE_INTRA_ATE | LS_SCOPE_LINKLOCAL:
709 if (ospf_te_lsa_print(ndo, tptr, lsa_length) == -1) {
710 return 1;
711 }
712 break;
713
714 default:
715 if(!print_unknown_data(ndo,tptr,
716 "\n\t ",
717 lsa_length)) {
718 return (1);
719 }
720 break;
721 }
722
723 return (0);
724 trunc:
725 return (1);
726 }
727
728 static int
729 ospf6_decode_v3(netdissect_options *ndo,
730 const struct ospf6hdr *op,
731 const u_char *dataend)
732 {
733 const rtrid_t *ap;
734 const struct lsr6 *lsrp;
735 const struct lsa6_hdr *lshp;
736 const struct lsa6 *lsap;
737 int i;
738
739 switch (GET_U_1(op->ospf6_type)) {
740
741 case OSPF_TYPE_HELLO: {
742 const struct hello6 *hellop = (const struct hello6 *)((const uint8_t *)op + OSPF6HDR_LEN);
743
744 ND_PRINT("\n\tOptions [%s]",
745 bittok2str(ospf6_option_values, "none",
746 GET_BE_U_4(hellop->hello_options)));
747
748 ND_PRINT("\n\t Hello Timer %us, Dead Timer %us, Interface-ID %s, Priority %u",
749 GET_BE_U_2(hellop->hello_helloint),
750 GET_BE_U_2(hellop->hello_deadint),
751 GET_IPADDR_STRING(hellop->hello_ifid),
752 GET_U_1(hellop->hello_priority));
753
754 if (GET_BE_U_4(hellop->hello_dr) != 0)
755 ND_PRINT("\n\t Designated Router %s",
756 GET_IPADDR_STRING(hellop->hello_dr));
757 if (GET_BE_U_4(hellop->hello_bdr) != 0)
758 ND_PRINT(", Backup Designated Router %s",
759 GET_IPADDR_STRING(hellop->hello_bdr));
760 if (ndo->ndo_vflag > 1) {
761 ND_PRINT("\n\t Neighbor List:");
762 ap = hellop->hello_neighbor;
763 while ((const u_char *)ap < dataend) {
764 ND_TCHECK_SIZE(ap);
765 ND_PRINT("\n\t %s", GET_IPADDR_STRING(*ap));
766 ++ap;
767 }
768 }
769 break; /* HELLO */
770 }
771
772 case OSPF_TYPE_DD: {
773 const struct dd6 *ddp = (const struct dd6 *)((const uint8_t *)op + OSPF6HDR_LEN);
774
775 ND_PRINT("\n\tOptions [%s]",
776 bittok2str(ospf6_option_values, "none",
777 GET_BE_U_4(ddp->db_options)));
778 ND_PRINT(", DD Flags [%s]",
779 bittok2str(ospf6_dd_flag_values,"none",GET_U_1(ddp->db_flags)));
780
781 ND_PRINT(", MTU %u, DD-Sequence 0x%08x",
782 GET_BE_U_2(ddp->db_mtu),
783 GET_BE_U_4(ddp->db_seq));
784 if (ndo->ndo_vflag > 1) {
785 /* Print all the LS adv's */
786 lshp = ddp->db_lshdr;
787 while ((const u_char *)lshp < dataend) {
788 if (ospf6_print_lshdr(ndo, lshp++, dataend))
789 goto trunc;
790 }
791 }
792 break;
793 }
794
795 case OSPF_TYPE_LS_REQ:
796 if (ndo->ndo_vflag > 1) {
797 lsrp = (const struct lsr6 *)((const uint8_t *)op + OSPF6HDR_LEN);
798 while ((const u_char *)lsrp < dataend) {
799 ND_TCHECK_SIZE(lsrp);
800 ND_PRINT("\n\t Advertising Router %s",
801 GET_IPADDR_STRING(lsrp->ls_router));
802 ospf6_print_ls_type(ndo,
803 GET_BE_U_2(lsrp->ls_type),
804 &lsrp->ls_stateid);
805 ++lsrp;
806 }
807 }
808 break;
809
810 case OSPF_TYPE_LS_UPDATE:
811 if (ndo->ndo_vflag > 1) {
812 const struct lsu6 *lsup = (const struct lsu6 *)((const uint8_t *)op + OSPF6HDR_LEN);
813
814 i = GET_BE_U_4(lsup->lsu_count);
815 lsap = lsup->lsu_lsa;
816 while ((const u_char *)lsap < dataend && i--) {
817 if (ospf6_print_lsa(ndo, lsap, dataend))
818 goto trunc;
819 lsap = (const struct lsa6 *)((const u_char *)lsap +
820 GET_BE_U_2(lsap->ls_hdr.ls_length));
821 }
822 }
823 break;
824
825 case OSPF_TYPE_LS_ACK:
826 if (ndo->ndo_vflag > 1) {
827 lshp = (const struct lsa6_hdr *)((const uint8_t *)op + OSPF6HDR_LEN);
828 while ((const u_char *)lshp < dataend) {
829 if (ospf6_print_lshdr(ndo, lshp++, dataend))
830 goto trunc;
831 }
832 }
833 break;
834
835 default:
836 break;
837 }
838 return (0);
839 trunc:
840 return (1);
841 }
842
843 /* RFC5613 Section 2.2 (w/o the TLVs) */
844 static int
845 ospf6_print_lls(netdissect_options *ndo,
846 const u_char *cp, const u_int len)
847 {
848 uint16_t llsdatalen;
849
850 if (len == 0)
851 return 0;
852 if (len < OSPF_LLS_HDRLEN)
853 goto trunc;
854 /* Checksum */
855 ND_PRINT("\n\tLLS Checksum 0x%04x", GET_BE_U_2(cp));
856 cp += 2;
857 /* LLS Data Length */
858 llsdatalen = GET_BE_U_2(cp);
859 ND_PRINT(", Data Length %u", llsdatalen);
860 if (llsdatalen < OSPF_LLS_HDRLEN || llsdatalen > len)
861 goto trunc;
862 cp += 2;
863 /* LLS TLVs */
864 ND_TCHECK_LEN(cp, llsdatalen - OSPF_LLS_HDRLEN);
865 /* FIXME: code in print-ospf.c can be reused to decode the TLVs */
866
867 return llsdatalen;
868 trunc:
869 return -1;
870 }
871
872 /* RFC6506 Section 4.1 */
873 static int
874 ospf6_decode_at(netdissect_options *ndo,
875 const u_char *cp, const u_int len)
876 {
877 uint16_t authdatalen;
878
879 if (len == 0)
880 return 0;
881 if (len < OSPF6_AT_HDRLEN)
882 goto trunc;
883 /* Authentication Type */
884 ND_PRINT("\n\tAuthentication Type %s",
885 tok2str(ospf6_auth_type_str, "unknown (0x%04x)", GET_BE_U_2(cp)));
886 cp += 2;
887 /* Auth Data Len */
888 authdatalen = GET_BE_U_2(cp);
889 ND_PRINT(", Length %u", authdatalen);
890 if (authdatalen < OSPF6_AT_HDRLEN || authdatalen > len)
891 goto trunc;
892 cp += 2;
893 /* Reserved */
894 cp += 2;
895 /* Security Association ID */
896 ND_PRINT(", SAID %u", GET_BE_U_2(cp));
897 cp += 2;
898 /* Cryptographic Sequence Number (High-Order 32 Bits) */
899 ND_PRINT(", CSN 0x%08x", GET_BE_U_4(cp));
900 cp += 4;
901 /* Cryptographic Sequence Number (Low-Order 32 Bits) */
902 ND_PRINT(":%08x", GET_BE_U_4(cp));
903 cp += 4;
904 /* Authentication Data */
905 ND_TCHECK_LEN(cp, authdatalen - OSPF6_AT_HDRLEN);
906 if (ndo->ndo_vflag > 1)
907 print_unknown_data(ndo,cp, "\n\tAuthentication Data ", authdatalen - OSPF6_AT_HDRLEN);
908 return 0;
909
910 trunc:
911 return 1;
912 }
913
914 /* The trailing data may include LLS and/or AT data (in this specific order).
915 * LLS data may be present only in Hello and DBDesc packets with the L-bit set.
916 * AT data may be present in Hello and DBDesc packets with the AT-bit set or in
917 * any other packet type, thus decode the AT data regardless of the AT-bit.
918 */
919 static int
920 ospf6_decode_v3_trailer(netdissect_options *ndo,
921 const struct ospf6hdr *op, const u_char *cp, const unsigned len)
922 {
923 uint8_t type;
924 int llslen = 0;
925 int lls_hello = 0;
926 int lls_dd = 0;
927
928 type = GET_U_1(op->ospf6_type);
929 if (type == OSPF_TYPE_HELLO) {
930 const struct hello6 *hellop = (const struct hello6 *)((const uint8_t *)op + OSPF6HDR_LEN);
931 if (GET_BE_U_4(hellop->hello_options) & OSPF6_OPTION_L)
932 lls_hello = 1;
933 } else if (type == OSPF_TYPE_DD) {
934 const struct dd6 *ddp = (const struct dd6 *)((const uint8_t *)op + OSPF6HDR_LEN);
935 if (GET_BE_U_4(ddp->db_options) & OSPF6_OPTION_L)
936 lls_dd = 1;
937 }
938 if ((lls_hello || lls_dd) && (llslen = ospf6_print_lls(ndo, cp, len)) < 0)
939 goto trunc;
940 return ospf6_decode_at(ndo, cp + llslen, len - llslen);
941
942 trunc:
943 return 1;
944 }
945
946 void
947 ospf6_print(netdissect_options *ndo,
948 const u_char *bp, u_int length)
949 {
950 const struct ospf6hdr *op;
951 const u_char *dataend;
952 const char *cp;
953 uint16_t datalen;
954
955 ndo->ndo_protocol = "ospf3";
956 op = (const struct ospf6hdr *)bp;
957
958 /* If the type is valid translate it, or just print the type */
959 /* value. If it's not valid, say so and return */
960 cp = tok2str(ospf6_type_values, "unknown packet type (%u)",
961 GET_U_1(op->ospf6_type));
962 ND_PRINT("OSPFv%u, %s, length %u", GET_U_1(op->ospf6_version), cp,
963 length);
964 if (*cp == 'u') {
965 return;
966 }
967
968 if(!ndo->ndo_vflag) { /* non verbose - so lets bail out here */
969 return;
970 }
971
972 /* OSPFv3 data always comes first and optional trailing data may follow. */
973 datalen = GET_BE_U_2(op->ospf6_len);
974 if (datalen > length) {
975 ND_PRINT(" [len %u]", datalen);
976 return;
977 }
978 dataend = bp + datalen;
979
980 ND_PRINT("\n\tRouter-ID %s", GET_IPADDR_STRING(op->ospf6_routerid));
981
982 if (GET_BE_U_4(op->ospf6_areaid) != 0)
983 ND_PRINT(", Area %s", GET_IPADDR_STRING(op->ospf6_areaid));
984 else
985 ND_PRINT(", Backbone Area");
986 if (GET_U_1(op->ospf6_instanceid))
987 ND_PRINT(", Instance %u", GET_U_1(op->ospf6_instanceid));
988
989 /* Do rest according to version. */
990 switch (GET_U_1(op->ospf6_version)) {
991
992 case 3:
993 /* ospf version 3 */
994 if (ospf6_decode_v3(ndo, op, dataend) ||
995 ospf6_decode_v3_trailer(ndo, op, dataend, length - datalen))
996 goto trunc;
997 break;
998 } /* end switch on version */
999
1000 return;
1001 trunc:
1002 nd_print_trunc(ndo);
1003 }