The Tcpdump Group git mirrors - tcpdump/blob - print-mobility.c

   1 /*
   2  * Copyright (C) 2002 WIDE Project.
   3  * All rights reserved.
   4  *
   5  * Redistribution and use in source and binary forms, with or without
   6  * modification, are permitted provided that the following conditions
   7  * are met:
   8  * 1. Redistributions of source code must retain the above copyright
   9  *    notice, this list of conditions and the following disclaimer.
  10  * 2. Redistributions in binary form must reproduce the above copyright
  11  *    notice, this list of conditions and the following disclaimer in the
  12  *    documentation and/or other materials provided with the distribution.
  13  * 3. Neither the name of the project nor the names of its contributors
  14  *    may be used to endorse or promote products derived from this software
  15  *    without specific prior written permission.
  16  *
  17  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
  18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
  21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  27  * SUCH DAMAGE.
  28  */
  29
  30 #define NETDISSECT_REWORKED
  31 #ifdef HAVE_CONFIG_H
  32 #include "config.h"
  33 #endif
  34
  35 #ifdef INET6
  36 #include <tcpdump-stdinc.h>
  37
  38 #include "ip6.h"
  39 #include "interface.h"
  40 #include "addrtoname.h"
  41 #include "extract.h"            /* must come after interface.h */
  42
  43 /* Mobility header */
  44 struct ip6_mobility {
  45         uint8_t ip6m_pproto;    /* following payload protocol (for PG) */
  46         uint8_t ip6m_len;       /* length in units of 8 octets */
  47         uint8_t ip6m_type;      /* message type */
  48         uint8_t reserved;       /* reserved */
  49         uint16_t ip6m_cksum;    /* sum of IPv6 pseudo-header and MH */
  50         union {
  51                 uint16_t        ip6m_un_data16[1]; /* type-specific field */
  52                 uint8_t         ip6m_un_data8[2];  /* type-specific field */
  53         } ip6m_dataun;
  54 };
  55
  56 #define ip6m_data16     ip6m_dataun.ip6m_un_data16
  57 #define ip6m_data8      ip6m_dataun.ip6m_un_data8
  58
  59 #define IP6M_MINLEN     8
  60
  61 /* http://www.iana.org/assignments/mobility-parameters/mobility-parameters.xhtml */
  62
  63 /* message type */
  64 #define IP6M_BINDING_REQUEST    0       /* Binding Refresh Request */
  65 #define IP6M_HOME_TEST_INIT     1       /* Home Test Init */
  66 #define IP6M_CAREOF_TEST_INIT   2       /* Care-of Test Init */
  67 #define IP6M_HOME_TEST          3       /* Home Test */
  68 #define IP6M_CAREOF_TEST        4       /* Care-of Test */
  69 #define IP6M_BINDING_UPDATE     5       /* Binding Update */
  70 #define IP6M_BINDING_ACK        6       /* Binding Acknowledgement */
  71 #define IP6M_BINDING_ERROR      7       /* Binding Error */
  72 #define IP6M_MAX                7
  73
  74 static const unsigned ip6m_hdrlen[IP6M_MAX + 1] = {
  75         IP6M_MINLEN,      /* IP6M_BINDING_REQUEST  */
  76         IP6M_MINLEN + 8,  /* IP6M_HOME_TEST_INIT   */
  77         IP6M_MINLEN + 8,  /* IP6M_CAREOF_TEST_INIT */
  78         IP6M_MINLEN + 16, /* IP6M_HOME_TEST        */
  79         IP6M_MINLEN + 16, /* IP6M_CAREOF_TEST      */
  80         IP6M_MINLEN + 4,  /* IP6M_BINDING_UPDATE   */
  81         IP6M_MINLEN + 4,  /* IP6M_BINDING_ACK      */
  82         IP6M_MINLEN + 16, /* IP6M_BINDING_ERROR    */
  83 };
  84
  85 /* XXX: unused */
  86 #define IP6MOPT_BU_MINLEN       10
  87 #define IP6MOPT_BA_MINLEN       13
  88 #define IP6MOPT_BR_MINLEN       2
  89
  90 /* Mobility Header Options */
  91 #define IP6MOPT_MINLEN          2
  92 #define IP6MOPT_PAD1          0x0       /* Pad1 */
  93 #define IP6MOPT_PADN          0x1       /* PadN */
  94 #define IP6MOPT_REFRESH       0x2       /* Binding Refresh Advice */
  95 #define IP6MOPT_REFRESH_MINLEN  4
  96 #define IP6MOPT_ALTCOA        0x3       /* Alternate Care-of Address */
  97 #define IP6MOPT_ALTCOA_MINLEN  18
  98 #define IP6MOPT_NONCEID       0x4       /* Nonce Indices */
  99 #define IP6MOPT_NONCEID_MINLEN  6
 100 #define IP6MOPT_AUTH          0x5       /* Binding Authorization Data */
 101 #define IP6MOPT_AUTH_MINLEN    12
 102
 103 static void
 104 mobility_opt_print(netdissect_options *ndo,
 105                    const u_char *bp, const unsigned len)
 106 {
 107         unsigned i, optlen;
 108
 109         for (i = 0; i < len; i += optlen) {
 110                 ND_TCHECK(bp[i]);
 111                 if (bp[i] == IP6MOPT_PAD1)
 112                         optlen = 1;
 113                 else {
 114                         if (i + 1 < len) {
 115                                 ND_TCHECK(bp[i + 1]);
 116                                 optlen = bp[i + 1] + 2;
 117                         }
 118                         else
 119                                 goto trunc;
 120                 }
 121                 if (i + optlen > len)
 122                         goto trunc;
 123                 ND_TCHECK(bp[i + optlen]);
 124
 125                 switch (bp[i]) {
 126                 case IP6MOPT_PAD1:
 127                         ND_PRINT((ndo, "(pad1)"));
 128                         break;
 129                 case IP6MOPT_PADN:
 130                         if (len - i < IP6MOPT_MINLEN) {
 131                                 ND_PRINT((ndo, "(padn: trunc)"));
 132                                 goto trunc;
 133                         }
 134                         ND_PRINT((ndo, "(padn)"));
 135                         break;
 136                 case IP6MOPT_REFRESH:
 137                         if (len - i < IP6MOPT_REFRESH_MINLEN) {
 138                                 ND_PRINT((ndo, "(refresh: trunc)"));
 139                                 goto trunc;
 140                         }
 141                         /* units of 4 secs */
 142                         ND_PRINT((ndo, "(refresh: %u)",
 143                                 EXTRACT_16BITS(&bp[i+2]) << 2));
 144                         break;
 145                 case IP6MOPT_ALTCOA:
 146                         if (len - i < IP6MOPT_ALTCOA_MINLEN) {
 147                                 ND_PRINT((ndo, "(altcoa: trunc)"));
 148                                 goto trunc;
 149                         }
 150                         ND_PRINT((ndo, "(alt-CoA: %s)", ip6addr_string(ndo, &bp[i+2])));
 151                         break;
 152                 case IP6MOPT_NONCEID:
 153                         if (len - i < IP6MOPT_NONCEID_MINLEN) {
 154                                 ND_PRINT((ndo, "(ni: trunc)"));
 155                                 goto trunc;
 156                         }
 157                         ND_PRINT((ndo, "(ni: ho=0x%04x co=0x%04x)",
 158                                 EXTRACT_16BITS(&bp[i+2]),
 159                                 EXTRACT_16BITS(&bp[i+4])));
 160                         break;
 161                 case IP6MOPT_AUTH:
 162                         if (len - i < IP6MOPT_AUTH_MINLEN) {
 163                                 ND_PRINT((ndo, "(auth: trunc)"));
 164                                 goto trunc;
 165                         }
 166                         ND_PRINT((ndo, "(auth)"));
 167                         break;
 168                 default:
 169                         if (len - i < IP6MOPT_MINLEN) {
 170                                 ND_PRINT((ndo, "(sopt_type %u: trunc)", bp[i]));
 171                                 goto trunc;
 172                         }
 173                         ND_PRINT((ndo, "(type-0x%02x: len=%u)", bp[i], bp[i + 1]));
 174                         break;
 175                 }
 176         }
 177         return;
 178
 179 trunc:
 180         ND_PRINT((ndo, "[trunc] "));
 181 }
 182
 183 /*
 184  * Mobility Header
 185  */
 186 int
 187 mobility_print(netdissect_options *ndo,
 188                const u_char *bp, const u_char *bp2 _U_)
 189 {
 190         const struct ip6_mobility *mh;
 191         const u_char *ep;
 192         unsigned mhlen, hlen;
 193         uint8_t type;
 194
 195         mh = (struct ip6_mobility *)bp;
 196
 197         /* 'ep' points to the end of available data. */
 198         ep = ndo->ndo_snapend;
 199
 200         if (!ND_TTEST(mh->ip6m_len)) {
 201                 /*
 202                  * There's not enough captured data to include the
 203                  * mobility header length.
 204                  *
 205                  * Our caller expects us to return the length, however,
 206                  * so return a value that will run to the end of the
 207                  * captured data.
 208                  *
 209                  * XXX - "ip6_print()" doesn't do anything with the
 210                  * returned length, however, as it breaks out of the
 211                  * header-processing loop.
 212                  */
 213                 mhlen = ep - bp;
 214                 goto trunc;
 215         }
 216         mhlen = (mh->ip6m_len + 1) << 3;
 217
 218         /* XXX ip6m_cksum */
 219
 220         ND_TCHECK(mh->ip6m_type);
 221         type = mh->ip6m_type;
 222         if (type <= IP6M_MAX && mhlen < ip6m_hdrlen[type]) {
 223                 ND_PRINT((ndo, "(header length %u is too small for type %u)", mhlen, type));
 224                 goto trunc;
 225         }
 226         switch (type) {
 227         case IP6M_BINDING_REQUEST:
 228                 ND_PRINT((ndo, "mobility: BRR"));
 229                 hlen = IP6M_MINLEN;
 230                 break;
 231         case IP6M_HOME_TEST_INIT:
 232         case IP6M_CAREOF_TEST_INIT:
 233                 ND_PRINT((ndo, "mobility: %soTI",
 234                         type == IP6M_HOME_TEST_INIT ? "H" : "C"));
 235                 hlen = IP6M_MINLEN;
 236                 if (ndo->ndo_vflag) {
 237                         ND_TCHECK2(*mh, hlen + 8);
 238                         ND_PRINT((ndo, " %s Init Cookie=%08x:%08x",
 239                                type == IP6M_HOME_TEST_INIT ? "Home" : "Care-of",
 240                                EXTRACT_32BITS(&bp[hlen]),
 241                                EXTRACT_32BITS(&bp[hlen + 4])));
 242                 }
 243                 hlen += 8;
 244                 break;
 245         case IP6M_HOME_TEST:
 246         case IP6M_CAREOF_TEST:
 247                 ND_PRINT((ndo, "mobility: %soT",
 248                         type == IP6M_HOME_TEST ? "H" : "C"));
 249                 ND_TCHECK(mh->ip6m_data16[0]);
 250                 ND_PRINT((ndo, " nonce id=0x%x", EXTRACT_16BITS(&mh->ip6m_data16[0])));
 251                 hlen = IP6M_MINLEN;
 252                 if (ndo->ndo_vflag) {
 253                         ND_TCHECK2(*mh, hlen + 8);
 254                         ND_PRINT((ndo, " %s Init Cookie=%08x:%08x",
 255                                type == IP6M_HOME_TEST ? "Home" : "Care-of",
 256                                EXTRACT_32BITS(&bp[hlen]),
 257                                EXTRACT_32BITS(&bp[hlen + 4])));
 258                 }
 259                 hlen += 8;
 260                 if (ndo->ndo_vflag) {
 261                         ND_TCHECK2(*mh, hlen + 8);
 262                         ND_PRINT((ndo, " %s Keygen Token=%08x:%08x",
 263                                type == IP6M_HOME_TEST ? "Home" : "Care-of",
 264                                EXTRACT_32BITS(&bp[hlen]),
 265                                EXTRACT_32BITS(&bp[hlen + 4])));
 266                 }
 267                 hlen += 8;
 268                 break;
 269         case IP6M_BINDING_UPDATE:
 270                 ND_PRINT((ndo, "mobility: BU"));
 271                 ND_TCHECK(mh->ip6m_data16[0]);
 272                 ND_PRINT((ndo, " seq#=%u", EXTRACT_16BITS(&mh->ip6m_data16[0])));
 273                 hlen = IP6M_MINLEN;
 274                 ND_TCHECK2(*mh, hlen + 1);
 275                 if (bp[hlen] & 0xf0)
 276                         ND_PRINT((ndo, " "));
 277                 if (bp[hlen] & 0x80)
 278                         ND_PRINT((ndo, "A"));
 279                 if (bp[hlen] & 0x40)
 280                         ND_PRINT((ndo, "H"));
 281                 if (bp[hlen] & 0x20)
 282                         ND_PRINT((ndo, "L"));
 283                 if (bp[hlen] & 0x10)
 284                         ND_PRINT((ndo, "K"));
 285                 /* Reserved (4bits) */
 286                 hlen += 1;
 287                 /* Reserved (8bits) */
 288                 hlen += 1;
 289                 ND_TCHECK2(*mh, hlen + 2);
 290                 /* units of 4 secs */
 291                 ND_PRINT((ndo, " lifetime=%u", EXTRACT_16BITS(&bp[hlen]) << 2));
 292                 hlen += 2;
 293                 break;
 294         case IP6M_BINDING_ACK:
 295                 ND_PRINT((ndo, "mobility: BA"));
 296                 ND_TCHECK(mh->ip6m_data8[0]);
 297                 ND_PRINT((ndo, " status=%u", mh->ip6m_data8[0]));
 298                 if (mh->ip6m_data8[1] & 0x80)
 299                         ND_PRINT((ndo, " K"));
 300                 /* Reserved (7bits) */
 301                 hlen = IP6M_MINLEN;
 302                 ND_TCHECK2(*mh, hlen + 2);
 303                 ND_PRINT((ndo, " seq#=%u", EXTRACT_16BITS(&bp[hlen])));
 304                 hlen += 2;
 305                 ND_TCHECK2(*mh, hlen + 2);
 306                 /* units of 4 secs */
 307                 ND_PRINT((ndo, " lifetime=%u", EXTRACT_16BITS(&bp[hlen]) << 2));
 308                 hlen += 2;
 309                 break;
 310         case IP6M_BINDING_ERROR:
 311                 ND_PRINT((ndo, "mobility: BE"));
 312                 ND_TCHECK(mh->ip6m_data8[0]);
 313                 ND_PRINT((ndo, " status=%u", mh->ip6m_data8[0]));
 314                 /* Reserved */
 315                 hlen = IP6M_MINLEN;
 316                 ND_TCHECK2(*mh, hlen + 16);
 317                 ND_PRINT((ndo, " homeaddr %s", ip6addr_string(ndo, &bp[hlen])));
 318                 hlen += 16;
 319                 break;
 320         default:
 321                 ND_PRINT((ndo, "mobility: type-#%u len=%u", type, mh->ip6m_len));
 322                 return(mhlen);
 323                 break;
 324         }
 325         if (ndo->ndo_vflag)
 326                 mobility_opt_print(ndo, &bp[hlen], mhlen - hlen);
 327
 328         return(mhlen);
 329
 330  trunc:
 331         ND_PRINT((ndo, "[|MOBILITY]"));
 332         return(mhlen);
 333 }
 334 #endif /* INET6 */