]>
The Tcpdump Group git mirrors - tcpdump/blob - print-udp.c
2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
23 static const char rcsid
[] =
24 "@(#) $Header: /tcpdump/master/tcpdump/print-udp.c,v 1.65 1999-11-21 09:37:03 fenner Exp $ (LBL)";
31 #include <sys/param.h>
33 #include <sys/socket.h>
35 #include <netinet/in.h>
36 #include <netinet/in_systm.h>
37 #include <netinet/ip.h>
38 #include <netinet/ip_var.h>
39 #include <netinet/udp.h>
40 #include <netinet/udp_var.h>
43 #undef NOERROR /* Solaris sucks */
46 #undef T_UNSPEC /* SINIX does too */
48 #include <arpa/nameser.h>
52 #include <arpa/tftp.h>
59 #include <netinet/ip6.h>
62 #include "interface.h"
63 #include "addrtoname.h"
64 #include "appletalk.h"
70 u_short rh_flags
; /* T:2 P:1 CNT:5 PT:8 */
71 u_short rh_len
; /* length of message (in words) */
72 u_int rh_ssrc
; /* synchronization src id */
76 u_int upper
; /* more significant 32 bits */
77 u_int lower
; /* less significant 32 bits */
84 ntp64 sr_ntp
; /* 64-bit ntp timestamp */
85 u_int sr_ts
; /* reference media timestamp */
86 u_int sr_np
; /* no. packets sent */
87 u_int sr_nb
; /* no. bytes sent */
92 * Time stamps are middle 32-bits of ntp timestamp.
95 u_int rr_srcid
; /* sender being reported */
96 u_int rr_nl
; /* no. packets lost */
97 u_int rr_ls
; /* extended last seq number received */
98 u_int rr_dv
; /* jitter (delay variance) */
99 u_int rr_lsr
; /* orig. ts from last rr from this src */
100 u_int rr_dlsr
; /* time from recpt of last rr to xmit time */
104 #define RTCP_PT_SR 200
105 #define RTCP_PT_RR 201
106 #define RTCP_PT_SDES 202
107 #define RTCP_SDES_CNAME 1
108 #define RTCP_SDES_NAME 2
109 #define RTCP_SDES_EMAIL 3
110 #define RTCP_SDES_PHONE 4
111 #define RTCP_SDES_LOC 5
112 #define RTCP_SDES_TOOL 6
113 #define RTCP_SDES_NOTE 7
114 #define RTCP_SDES_PRIV 8
115 #define RTCP_PT_BYE 203
116 #define RTCP_PT_APP 204
119 vat_print(const void *hdr
, u_int len
, register const struct udphdr
*up
)
122 u_int ts
= *(u_short
*)hdr
;
123 if ((ts
& 0xf060) != 0) {
125 (void)printf(" udp/vt %u %d / %d",
126 (u_int32_t
)(ntohs(up
->uh_ulen
) - sizeof(*up
)),
127 ts
& 0x3ff, ts
>> 10);
130 u_int i0
= ntohl(((u_int
*)hdr
)[0]);
131 u_int i1
= ntohl(((u_int
*)hdr
)[1]);
132 printf(" udp/vat %u c%d %u%s",
133 (u_int32_t
)(ntohs(up
->uh_ulen
) - sizeof(*up
) - 8),
135 i1
, i0
& 0x800000? "*" : "");
138 printf(" f%d", (i0
>> 16) & 0x1f);
140 printf(" s%d", (i0
>> 24) & 0x3f);
145 rtp_print(const void *hdr
, u_int len
, register const struct udphdr
*up
)
148 u_int
*ip
= (u_int
*)hdr
;
149 u_int hasopt
, hasext
, contype
, hasmarker
;
150 u_int i0
= ntohl(((u_int
*)hdr
)[0]);
151 u_int i1
= ntohl(((u_int
*)hdr
)[1]);
152 u_int dlen
= ntohs(up
->uh_ulen
) - sizeof(*up
) - 8;
160 if ((i0
>> 30) == 1) {
162 hasopt
= i0
& 0x800000;
163 contype
= (i0
>> 16) & 0x3f;
164 hasmarker
= i0
& 0x400000;
168 hasext
= i0
& 0x10000000;
169 contype
= (i0
>> 16) & 0x7f;
170 hasmarker
= i0
& 0x800000;
176 printf(" udp/%s %d c%d %s%s %d %u",
180 (hasopt
|| hasext
)? "+" : "",
190 optlen
= (i2
>> 16) & 0xff;
191 if (optlen
== 0 || optlen
> len
) {
197 } while ((int)i2
>= 0);
202 extlen
= (i2
& 0xffff) + 1;
209 if (contype
== 0x1f) /*XXX H.261 */
210 printf(" 0x%04x", ip
[0] >> 16);
214 static const u_char
*
215 rtcp_print(const u_char
*hdr
, const u_char
*ep
)
217 /* rtp v2 control (rtcp) */
218 struct rtcp_rr
*rr
= 0;
220 struct rtcphdr
*rh
= (struct rtcphdr
*)hdr
;
225 if ((u_char
*)(rh
+ 1) > ep
) {
229 len
= (ntohs(rh
->rh_len
) + 1) * 4;
230 flags
= ntohs(rh
->rh_flags
);
231 cnt
= (flags
>> 8) & 0x1f;
232 switch (flags
& 0xff) {
234 sr
= (struct rtcp_sr
*)(rh
+ 1);
236 if (len
!= cnt
* sizeof(*rr
) + sizeof(*sr
) + sizeof(*rh
))
237 printf(" [%d]", len
);
239 printf(" %u", (u_int32_t
)ntohl(rh
->rh_ssrc
));
240 if ((u_char
*)(sr
+ 1) > ep
) {
244 ts
= (double)((u_int32_t
)ntohl(sr
->sr_ntp
.upper
)) +
245 ((double)((u_int32_t
)ntohl(sr
->sr_ntp
.lower
)) /
247 printf(" @%.2f %u %up %ub", ts
, (u_int32_t
)ntohl(sr
->sr_ts
),
248 (u_int32_t
)ntohl(sr
->sr_np
), (u_int32_t
)ntohl(sr
->sr_nb
));
249 rr
= (struct rtcp_rr
*)(sr
+ 1);
253 if (len
!= cnt
* sizeof(*rr
) + sizeof(*rh
))
254 printf(" [%d]", len
);
255 rr
= (struct rtcp_rr
*)(rh
+ 1);
257 printf(" %u", (u_int32_t
)ntohl(rh
->rh_ssrc
));
260 printf(" sdes %d", len
);
262 printf(" %u", (u_int32_t
)ntohl(rh
->rh_ssrc
));
266 printf(" bye %d", len
);
268 printf(" %u", (u_int32_t
)ntohl(rh
->rh_ssrc
));
272 printf(" type-0x%x %d", flags
& 0xff, len
);
279 if ((u_char
*)(rr
+ 1) > ep
) {
284 printf(" %u", (u_int32_t
)ntohl(rr
->rr_srcid
));
285 ts
= (double)((u_int32_t
)ntohl(rr
->rr_lsr
)) / 65536.;
286 dts
= (double)((u_int32_t
)ntohl(rr
->rr_dlsr
)) / 65536.;
287 printf(" %ul %us %uj @%.2f+%.2f",
288 (u_int32_t
)ntohl(rr
->rr_nl
) & 0x00ffffff,
289 (u_int32_t
)ntohl(rr
->rr_ls
),
290 (u_int32_t
)ntohl(rr
->rr_dv
), ts
, dts
);
295 /* XXX probably should use getservbyname() and cache answers */
296 #define TFTP_PORT 69 /*XXX*/
297 #define KERBEROS_PORT 88 /*XXX*/
298 #define SUNRPC_PORT 111 /*XXX*/
299 #define SNMP_PORT 161 /*XXX*/
300 #define NTP_PORT 123 /*XXX*/
301 #define SNMPTRAP_PORT 162 /*XXX*/
302 #define ISAKMP_PORT 500 /*XXX*/
303 #define RIP_PORT 520 /*XXX*/
304 #define KERBEROS_SEC_PORT 750 /*XXX*/
305 #define L2TP_PORT 1701 /*XXX*/
306 #define ISAKMP_PORT_USER1 7500 /*??? - nonstandard*/
307 #define ISAKMP_PORT_USER2 8500 /*??? - nonstandard*/
308 #define RX_PORT_LOW 7000 /*XXX*/
309 #define RX_PORT_HIGH 7009 /*XXX*/
312 #define RIPNG_PORT 521 /*XXX*/
313 #define DHCP6_SERV_PORT 546 /*XXX*/
314 #define DHCP6_CLI_PORT 547 /*XXX*/
318 udp_print(register const u_char
*bp
, u_int length
, register const u_char
*bp2
)
320 register const struct udphdr
*up
;
321 register const struct ip
*ip
;
322 register const u_char
*cp
;
323 register const u_char
*ep
= bp
+ length
;
324 u_short sport
, dport
, ulen
;
326 register const struct ip6_hdr
*ip6
;
331 up
= (struct udphdr
*)bp
;
332 ip
= (struct ip
*)bp2
;
335 ip6
= (struct ip6_hdr
*)bp2
;
339 cp
= (u_char
*)(up
+ 1);
344 if (length
< sizeof(struct udphdr
)) {
345 (void)printf(" truncated-udp %d", length
);
348 length
-= sizeof(struct udphdr
);
350 sport
= ntohs(up
->uh_sport
);
351 dport
= ntohs(up
->uh_dport
);
352 ulen
= ntohs(up
->uh_ulen
);
354 register struct rpc_msg
*rp
;
355 enum msg_type direction
;
357 switch (packettype
) {
360 (void)printf("%s.%s > %s.%s:",
361 ipaddr_string(&ip
->ip_src
),
362 udpport_string(sport
),
363 ipaddr_string(&ip
->ip_dst
),
364 udpport_string(dport
));
365 vat_print((void *)(up
+ 1), length
, up
);
369 (void)printf("%s.%s > %s.%s:",
370 ipaddr_string(&ip
->ip_src
),
371 udpport_string(sport
),
372 ipaddr_string(&ip
->ip_dst
),
373 udpport_string(dport
));
374 wb_print((void *)(up
+ 1), length
);
378 rp
= (struct rpc_msg
*)(up
+ 1);
379 direction
= (enum msg_type
)ntohl(rp
->rm_direction
);
380 if (direction
== CALL
)
381 sunrpcrequest_print((u_char
*)rp
, length
,
384 nfsreply_print((u_char
*)rp
, length
,
385 (u_char
*)ip
); /*XXX*/
389 (void)printf("%s.%s > %s.%s:",
390 ipaddr_string(&ip
->ip_src
),
391 udpport_string(sport
),
392 ipaddr_string(&ip
->ip_dst
),
393 udpport_string(dport
));
394 rtp_print((void *)(up
+ 1), length
, up
);
398 (void)printf("%s.%s > %s.%s:",
399 ipaddr_string(&ip
->ip_src
),
400 udpport_string(sport
),
401 ipaddr_string(&ip
->ip_dst
),
402 udpport_string(dport
));
404 cp
= rtcp_print(cp
, ep
);
408 (void)printf("%s.%s > %s.%s:",
409 ipaddr_string(&ip
->ip_src
),
410 udpport_string(sport
),
411 ipaddr_string(&ip
->ip_dst
),
412 udpport_string(dport
));
413 snmp_print((const u_char
*)(up
+ 1), length
);
420 register struct rpc_msg
*rp
;
421 enum msg_type direction
;
423 rp
= (struct rpc_msg
*)(up
+ 1);
424 if (TTEST(rp
->rm_direction
)) {
425 direction
= (enum msg_type
)ntohl(rp
->rm_direction
);
426 if (dport
== NFS_PORT
&& direction
== CALL
) {
427 nfsreq_print((u_char
*)rp
, length
,
431 if (sport
== NFS_PORT
&& direction
== REPLY
) {
432 nfsreply_print((u_char
*)rp
, length
,
437 if (dport
== SUNRPC_PORT
&& direction
== CALL
) {
438 sunrpcrequest_print((u_char
*)rp
, length
, (u_char
*)ip
);
443 if (TTEST(((struct LAP
*)cp
)->type
) &&
444 ((struct LAP
*)cp
)->type
== lapDDP
&&
445 (atalk_port(sport
) || atalk_port(dport
))) {
447 fputs("kip ", stdout
);
448 atalk_print(cp
, length
);
453 (void)printf("%s.%s > %s.%s:",
454 ipaddr_string(&ip
->ip_src
), udpport_string(sport
),
455 ipaddr_string(&ip
->ip_dst
), udpport_string(dport
));
459 if (ip6
->ip6_nxt
== IPPROTO_UDP
) {
460 (void)printf("%s.%s > %s.%s: ",
461 ip6addr_string(&ip6
->ip6_src
),
462 udpport_string(sport
),
463 ip6addr_string(&ip6
->ip6_dst
),
464 udpport_string(dport
));
466 (void)printf("%s > %s: ",
467 udpport_string(sport
), udpport_string(dport
));
472 if (ip
->ip_p
== IPPROTO_UDP
) {
473 (void)printf("%s.%s > %s.%s: ",
474 ipaddr_string(&ip
->ip_src
),
475 udpport_string(sport
),
476 ipaddr_string(&ip
->ip_dst
),
477 udpport_string(dport
));
479 (void)printf("%s > %s: ",
480 udpport_string(sport
), udpport_string(dport
));
486 #define ISPORT(p) (dport == (p) || sport == (p))
487 if (ISPORT(NAMESERVER_PORT
))
488 ns_print((const u_char
*)(up
+ 1), length
);
489 else if (ISPORT(TFTP_PORT
))
490 tftp_print((const u_char
*)(up
+ 1), length
);
491 else if (ISPORT(IPPORT_BOOTPC
) || ISPORT(IPPORT_BOOTPS
))
492 bootp_print((const u_char
*)(up
+ 1), length
,
494 else if (ISPORT(RIP_PORT
))
495 rip_print((const u_char
*)(up
+ 1), length
);
496 else if (ISPORT(ISAKMP_PORT
))
497 isakmp_print((const u_char
*)(up
+ 1), length
, bp2
);
499 else if (ISPORT(ISAKMP_PORT_USER1
) || ISPORT(ISAKMP_PORT_USER2
))
500 isakmp_print((const u_char
*)(up
+ 1), length
, bp2
);
502 else if (ISPORT(SNMP_PORT
) || ISPORT(SNMPTRAP_PORT
))
503 snmp_print((const u_char
*)(up
+ 1), length
);
504 else if (ISPORT(NTP_PORT
))
505 ntp_print((const u_char
*)(up
+ 1), length
);
506 else if (ISPORT(KERBEROS_PORT
) || ISPORT(KERBEROS_SEC_PORT
))
507 krb_print((const void *)(up
+ 1), length
);
508 else if (ISPORT(L2TP_PORT
))
509 l2tp_print((const u_char
*)(up
+ 1), length
);
510 else if (dport
== 3456)
511 vat_print((const void *)(up
+ 1), length
, up
);
513 * Since there are 10 possible ports to check, I think
514 * a <> test would be more efficient
516 else if ((sport
>= RX_PORT_LOW
&& sport
<= RX_PORT_HIGH
) ||
517 (dport
>= RX_PORT_LOW
&& dport
<= RX_PORT_HIGH
))
518 rx_print((const void *)(up
+ 1), length
, sport
, dport
,
521 else if (ISPORT(RIPNG_PORT
))
522 ripng_print((const u_char
*)(up
+ 1), length
);
523 else if (ISPORT(DHCP6_SERV_PORT
) || ISPORT(DHCP6_CLI_PORT
)) {
524 dhcp6_print((const u_char
*)(up
+ 1), length
,
529 * Kludge in test for whiteboard packets.
531 else if (dport
== 4567)
532 wb_print((const void *)(up
+ 1), length
);
534 (void)printf(" udp %u",
535 (u_int32_t
)(ulen
- sizeof(*up
)));
538 (void)printf(" udp %u", (u_int32_t
)(ulen
- sizeof(*up
)));