The Tcpdump Group git mirrors - tcpdump/blob - netdissect.h

   1 /*
   2  * Copyright (c) 1988-1997
   3  *      The Regents of the University of California.  All rights reserved.
   4  *
   5  * Copyright (c) 1998-2012  Michael Richardson <mcr@tcpdump.org>
   6  *      The TCPDUMP project
   7  *
   8  * Redistribution and use in source and binary forms, with or without
   9  * modification, are permitted provided that: (1) source code distributions
  10  * retain the above copyright notice and this paragraph in its entirety, (2)
  11  * distributions including binary code include the above copyright notice and
  12  * this paragraph in its entirety in the documentation or other materials
  13  * provided with the distribution, and (3) all advertising materials mentioning
  14  * features or use of this software display the following acknowledgement:
  15  * ``This product includes software developed by the University of California,
  16  * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
  17  * the University nor the names of its contributors may be used to endorse
  18  * or promote products derived from this software without specific prior
  19  * written permission.
  20  * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
  21  * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
  22  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
  23  */
  24
  25 #ifndef netdissect_h
  26 #define netdissect_h
  27
  28 #ifdef HAVE_OS_PROTO_H
  29 #include "os-proto.h"
  30 #endif
  31 #include <sys/types.h>
  32
  33 /*
  34  * Used to declare a structure unaligned, so that the C compiler,
  35  * if necessary, generates code that doesn't assume alignment.
  36  * This is required because there is no guarantee that the packet
  37  * data we get from libpcap/WinPcap is properly aligned.
  38  *
  39  * This assumes that, for all compilers that support __attribute__((packed)),
  40  * for all instruction set architectures requiring strict alignment, declaring
  41  * a structure with that attribute causes the compiler to generate code that
  42  * handles misaligned 2-byte, 4-byte, and 8-byte integral quantities.
  43  *
  44  * It does not (yet) handle compilers where you can get the compiler
  45  * to generate code of that sort by some other means.
  46  *
  47  * This is required in order to, for example, keep the compiler from
  48  * generating, for
  49  *
  50  *      if (bp->bp_htype == 1 && bp->bp_hlen == 6 && bp->bp_op == BOOTPREQUEST) {
  51  *
  52  * in print-bootp.c, code that loads the first 4-byte word of a
  53  * "struct bootp", masking out the bp_hops field, and comparing the result
  54  * against 0x01010600.
  55  *
  56  * Note: this also requires that padding be put into the structure,
  57  * at least for compilers where it's implemented as __attribute__((packed)).
  58  *
  59  * XXX - now that we're using nd_ types that are just arrays of bytes, is
  60  * this still necessary?  Are there any compilers that align structures,
  61  * none of whose members require more than byte alignment, on more than
  62  * one-byte boundaries, and assume a structure is aligned on such a
  63  * boundary?  (I have vague memories of either m68k or ARM compilers
  64  * aligning on at least 2-byte boundaries.)
  65  */
  66 #if ND_IS_AT_LEAST_GNUC_VERSION(2,0) || \
  67     ND_IS_AT_LEAST_XL_C_VERSION(6,0)
  68   /*
  69    * GCC 2.0 or later, or a compiler that claims to be GCC 2.0 or later,
  70    * or IBM XL C 6.0 or later.
  71    *
  72    * Use __attribute__((packed)).
  73    */
  74   #define ND_UNALIGNED  __attribute__((packed))
  75 #else
  76   /*
  77    * Nothing.
  78    */
  79   #define ND_UNALIGNED
  80 #endif
  81
  82 /*
  83  * Data types corresponding to multi-byte integral values within data
  84  * structures.  These are defined as arrays of octets, so that they're
  85  * not aligned on their "natural" boundaries, and so that you *must*
  86  * use the EXTRACT_ macros to extract them (which you should be doing
  87  * *anyway*, so as not to assume a particular byte order or alignment
  88  * in your code).
  89  *
  90  * We even want EXTRACT_U_1 used for 8-bit integral values, so we
  91  * define nd_uint8_t and nd_int8_t as arrays as well.
  92  */
  93 typedef unsigned char nd_uint8_t[1];
  94 typedef unsigned char nd_uint16_t[2];
  95 typedef unsigned char nd_uint24_t[3];
  96 typedef unsigned char nd_uint32_t[4];
  97 typedef unsigned char nd_uint40_t[5];
  98 typedef unsigned char nd_uint48_t[6];
  99 typedef unsigned char nd_uint56_t[7];
 100 typedef unsigned char nd_uint64_t[8];
 101
 102 typedef signed char nd_int8_t[1];
 103
 104 /*
 105  * "unsigned char" so that sign extension isn't done on the
 106  * individual bytes while they're being assembled.
 107  */
 108 typedef unsigned char nd_int32_t[4];
 109 typedef unsigned char nd_int64_t[8];
 110
 111 /*
 112  * Use this for IPv4 addresses and netmasks.
 113  *
 114  * It's defined as an array of octets, so that it's not guaranteed to
 115  * be aligned on its "natural" boundary (in some packet formats, it
 116  * *isn't* so aligned).  We have separate EXTRACT_ calls for them;
 117  * sometimes you want the host-byte-order value, other times you want
 118  * the network-byte-order value.
 119  *
 120  * Don't use EXTRACT_BE_U_4() on them, use EXTRACT_IPV4_TO_HOST_ORDER()
 121  * if you want them in host byte order and EXTRACT_IPV4_TO_NETWORK_ORDER()
 122  * if you want them in network byte order (which you want with system APIs
 123  * that expect network-order IPv4 addresses, such as inet_ntop()).
 124  *
 125  * If, on your little-endian machine (e.g., an "IBM-compatible PC", no matter
 126  * what the OS, or an Intel Mac, no matter what the OS), you get the wrong
 127  * answer, and you've used EXTRACT_BE_U_4(), do *N*O*T* "fix" this by using
 128  * EXTRACT_LE_U_4(), fix it by using EXTRACT_IPV4_TO_NETWORK_ORDER(),
 129  * otherwise you're breaking the result on big-endian machines (e.g.,
 130  * most PowerPC/Power ISA machines, System/390 and z/Architecture, SPARC,
 131  * etc.).
 132  *
 133  * Yes, people do this; that's why Wireshark has tvb_get_ipv4(), to extract
 134  * an IPv4 address from a packet data buffer; it was introduced in reaction
 135  * to somebody who *had* done that.
 136  */
 137 typedef unsigned char nd_ipv4[4];
 138
 139 /*
 140  * Use this for IPv6 addresses and netmasks.
 141  */
 142 typedef unsigned char nd_ipv6[16];
 143
 144 /*
 145  * Use this for MAC addresses.
 146  */
 147 #define MAC_ADDR_LEN    6               /* length of MAC addresses */
 148 typedef unsigned char nd_mac_addr[MAC_ADDR_LEN];
 149
 150 /*
 151  * Use this for blobs of bytes; make them arrays of nd_byte.
 152  */
 153 typedef unsigned char nd_byte;
 154
 155 /* nd_snprintf et al */
 156
 157 #include <stdarg.h>
 158 #include <pcap.h>
 159
 160 #include "ip.h" /* struct ip for nextproto4_cksum() */
 161 #include "ip6.h" /* struct ip6 for nextproto6_cksum() */
 162
 163 extern int32_t thiszone;        /* seconds offset from gmt to local time */
 164 /* invalid string to print '(invalid)' for malformed or corrupted packets */
 165 extern const char istr[];
 166
 167 #ifndef HAVE_STRLCAT
 168 extern size_t strlcat (char *, const char *, size_t);
 169 #endif
 170 #ifndef HAVE_STRLCPY
 171 extern size_t strlcpy (char *, const char *, size_t);
 172 #endif
 173
 174 #ifndef HAVE_STRDUP
 175 extern char *strdup (const char *str);
 176 #endif
 177
 178 #ifndef HAVE_STRSEP
 179 extern char *strsep(char **, const char *);
 180 #endif
 181
 182 struct tok {
 183         u_int v;                /* value */
 184         const char *s;          /* string */
 185 };
 186
 187 extern const char *tok2strbuf(const struct tok *, const char *, u_int,
 188                               char *buf, size_t bufsize);
 189
 190 /* tok2str is deprecated */
 191 extern const char *tok2str(const struct tok *, const char *, u_int);
 192 extern char *bittok2str(const struct tok *, const char *, u_int);
 193 extern char *bittok2str_nosep(const struct tok *, const char *, u_int);
 194
 195 /* Initialize netdissect. */
 196 extern int nd_init(char *, size_t);
 197 /* Clean up netdissect. */
 198 extern void nd_cleanup(void);
 199
 200 /* Do we have libsmi support? */
 201 extern int nd_have_smi_support(void);
 202 /* Load an SMI module. */
 203 extern int nd_load_smi_module(const char *, char *, size_t);
 204 /* Flag indicating whether an SMI module has been loaded. */
 205 extern int nd_smi_module_loaded;
 206 /* Version number of the SMI library, or NULL if we don't have libsmi support. */
 207 extern const char *nd_smi_version_string(void);
 208
 209 typedef struct netdissect_options netdissect_options;
 210
 211 #define IF_PRINTER_ARGS (netdissect_options *, const struct pcap_pkthdr *, const u_char *)
 212
 213 typedef u_int (*if_printer) IF_PRINTER_ARGS;
 214
 215 struct netdissect_options {
 216   int ndo_bflag;                /* print 4 byte ASes in ASDOT notation */
 217   int ndo_eflag;                /* print ethernet header */
 218   int ndo_fflag;                /* don't translate "foreign" IP address */
 219   int ndo_Kflag;                /* don't check IP, TCP or UDP checksums */
 220   int ndo_nflag;                /* leave addresses as numbers */
 221   int ndo_Nflag;                /* remove domains from printed host names */
 222   int ndo_qflag;                /* quick (shorter) output */
 223   int ndo_Sflag;                /* print raw TCP sequence numbers */
 224   int ndo_tflag;                /* print packet arrival time */
 225   int ndo_uflag;                /* Print undecoded NFS handles */
 226   int ndo_vflag;                /* verbosity level */
 227   int ndo_xflag;                /* print packet in hex */
 228   int ndo_Xflag;                /* print packet in hex/ASCII */
 229   int ndo_Aflag;                /* print packet only in ASCII observing TAB,
 230                                  * LF, CR and SPACE as graphical chars
 231                                  */
 232   int ndo_Hflag;                /* dissect 802.11s draft mesh standard */
 233   int ndo_packet_number;        /* print a packet number in the beginning of line */
 234   int ndo_suppress_default_print; /* don't use default_print() for unknown packet types */
 235   int ndo_tstamp_precision;     /* requested time stamp precision */
 236   const char *program_name;     /* Name of the program using the library */
 237
 238   char *ndo_espsecret;
 239   struct sa_list *ndo_sa_list_head;  /* used by print-esp.c */
 240   struct sa_list *ndo_sa_default;
 241
 242   char *ndo_sigsecret;          /* Signature verification secret key */
 243
 244   int   ndo_packettype; /* as specified by -T */
 245
 246   int   ndo_snaplen;
 247
 248   /*global pointers to beginning and end of current packet (during printing) */
 249   const u_char *ndo_packetp;
 250   const u_char *ndo_snapend;
 251
 252   /* pointer to the if_printer function */
 253   if_printer ndo_if_printer;
 254
 255   /* pointer to void function to output stuff */
 256   void (*ndo_default_print)(netdissect_options *,
 257                             const u_char *bp, u_int length);
 258
 259   /* pointer to function to do regular output */
 260   int  (*ndo_printf)(netdissect_options *,
 261                      const char *fmt, ...)
 262                      PRINTFLIKE_FUNCPTR(2, 3);
 263   /* pointer to function to output errors */
 264   void NORETURN_FUNCPTR (*ndo_error)(netdissect_options *,
 265                                      const char *fmt, ...)
 266                                      PRINTFLIKE_FUNCPTR(2, 3);
 267   /* pointer to function to output warnings */
 268   void (*ndo_warning)(netdissect_options *,
 269                       const char *fmt, ...)
 270                       PRINTFLIKE_FUNCPTR(2, 3);
 271 };
 272
 273 #define PT_VAT          1       /* Visual Audio Tool */
 274 #define PT_WB           2       /* distributed White Board */
 275 #define PT_RPC          3       /* Remote Procedure Call */
 276 #define PT_RTP          4       /* Real-Time Applications protocol */
 277 #define PT_RTCP         5       /* Real-Time Applications control protocol */
 278 #define PT_SNMP         6       /* Simple Network Management Protocol */
 279 #define PT_CNFP         7       /* Cisco NetFlow protocol */
 280 #define PT_TFTP         8       /* trivial file transfer protocol */
 281 #define PT_AODV         9       /* Ad-hoc On-demand Distance Vector Protocol */
 282 #define PT_CARP         10      /* Common Address Redundancy Protocol */
 283 #define PT_RADIUS       11      /* RADIUS authentication Protocol */
 284 #define PT_ZMTP1        12      /* ZeroMQ Message Transport Protocol 1.0 */
 285 #define PT_VXLAN        13      /* Virtual eXtensible Local Area Network */
 286 #define PT_PGM          14      /* [UDP-encapsulated] Pragmatic General Multicast */
 287 #define PT_PGM_ZMTP1    15      /* ZMTP/1.0 inside PGM (native or UDP-encapsulated) */
 288 #define PT_LMP          16      /* Link Management Protocol */
 289 #define PT_RESP         17      /* RESP */
 290
 291 #ifndef min
 292 #define min(a,b) ((a)>(b)?(b):(a))
 293 #endif
 294 #ifndef max
 295 #define max(a,b) ((b)>(a)?(b):(a))
 296 #endif
 297
 298 /* For source or destination ports tests (UDP, TCP, ...) */
 299 #define IS_SRC_OR_DST_PORT(p) (sport == (p) || dport == (p))
 300
 301 /*
 302  * Maximum snapshot length.  This should be enough to capture the full
 303  * packet on most network interfaces.
 304  *
 305  *
 306  * Somewhat arbitrary, but chosen to be:
 307  *
 308  *    1) big enough for maximum-size Linux loopback packets (65549)
 309  *       and some USB packets captured with USBPcap:
 310  *
 311  *           http://desowin.org/usbpcap/
 312  *
 313  *       (> 131072, < 262144)
 314  *
 315  * and
 316  *
 317  *    2) small enough not to cause attempts to allocate huge amounts of
 318  *       memory; some applications might use the snapshot length in a
 319  *       savefile header to control the size of the buffer they allocate,
 320  *       so a size of, say, 2^31-1 might not work well.
 321  *
 322  * XXX - does it need to be bigger still?  Note that, for versions of
 323  * libpcap with pcap_create()/pcap_activate(), if no -s flag is specified
 324  * or -s 0 is specified, we won't set the snapshot length at all, and will
 325  * let libpcap choose a snapshot length; newer versions may choose a bigger
 326  * value than 262144 for D-Bus, for example.
 327  */
 328 #define MAXIMUM_SNAPLEN 262144
 329
 330 /*
 331  * True if "l" bytes of "var" were captured.
 332  *
 333  * The "ndo->ndo_snapend - (l) <= ndo->ndo_snapend" checks to make sure
 334  * "l" isn't so large that "ndo->ndo_snapend - (l)" underflows.
 335  *
 336  * The check is for <= rather than < because "l" might be 0.
 337  *
 338  * We cast the pointers to uintptr_t to make sure that the compiler
 339  * doesn't optimize away any of these tests (which it is allowed to
 340  * do, as adding an integer to, or subtracting an integer from, a
 341  * pointer assumes that the pointer is a pointer to an element of an
 342  * array and that the result of the addition or subtraction yields a
 343  * pointer to another member of the array, so that, for example, if
 344  * you subtract a positive integer from a pointer, the result is
 345  * guaranteed to be less than the original pointer value). See
 346  *
 347  *      http://www.kb.cert.org/vuls/id/162289
 348  */
 349
 350 /*
 351  * Test in two parts to avoid these warnings:
 352  * comparison of unsigned expression >= 0 is always true [-Wtype-limits],
 353  * comparison is always true due to limited range of data type [-Wtype-limits].
 354  */
 355 #define IS_NOT_NEGATIVE(x) (((x) > 0) || ((x) == 0))
 356
 357 #define ND_TTEST_LEN(p, l) \
 358   (IS_NOT_NEGATIVE(l) && \
 359         ((uintptr_t)ndo->ndo_snapend - (l) <= (uintptr_t)ndo->ndo_snapend && \
 360          (uintptr_t)(p) <= (uintptr_t)ndo->ndo_snapend - (l)))
 361
 362 /* True if "*(p)" was captured */
 363 #define ND_TTEST_SIZE(p) ND_TTEST_LEN(p, sizeof(*(p)))
 364
 365 /* Bail out if "l" bytes from "p" were not captured */
 366 #define ND_TCHECK_LEN(p, l) if (!ND_TTEST_LEN(p, l)) goto trunc
 367
 368 /* Bail out if "*(p)" was not captured */
 369 #define ND_TCHECK_SIZE(p) ND_TCHECK_LEN(p, sizeof(*(p)))
 370
 371 #define ND_PRINT(...) (ndo->ndo_printf)(ndo, __VA_ARGS__)
 372 #define ND_DEFAULTPRINT(ap, length) (*ndo->ndo_default_print)(ndo, ap, length)
 373
 374 extern void ts_print(netdissect_options *, const struct timeval *);
 375 extern void signed_relts_print(netdissect_options *, int32_t);
 376 extern void unsigned_relts_print(netdissect_options *, uint32_t);
 377
 378 extern void fn_print_char(netdissect_options *, u_char);
 379 extern int fn_print(netdissect_options *, const u_char *, const u_char *);
 380 extern u_int fn_printztn(netdissect_options *ndo, const u_char *, u_int, const u_char *);
 381 extern int fn_printn(netdissect_options *, const u_char *, u_int, const u_char *);
 382 extern int fn_printzp(netdissect_options *, const u_char *, u_int, const u_char *);
 383
 384 /*
 385  * Flags for txtproto_print().
 386  */
 387 #define RESP_CODE_SECOND_TOKEN  0x00000001      /* response code is second token in response line */
 388
 389 extern void txtproto_print(netdissect_options *, const u_char *, u_int,
 390     const char *, const char **, u_int);
 391
 392 /*
 393  * Locale-independent macros for testing character properties and
 394  * stripping the 8th bit from characters.  Assumed to be handed
 395  * a value between 0 and 255, i.e. don't hand them a char, as
 396  * those might be in the range -128 to 127.
 397  */
 398 #define ND_ISASCII(c)   (!((c) & 0x80)) /* value is an ASCII code point */
 399 #define ND_ISPRINT(c)   ((c) >= 0x20 && (c) <= 0x7E)
 400 #define ND_ISGRAPH(c)   ((c) > 0x20 && (c) <= 0x7E)
 401 #define ND_TOASCII(c)   ((c) & 0x7F)
 402
 403 extern void safeputchar(netdissect_options *, const u_char);
 404 extern void safeputs(netdissect_options *, const u_char *, const u_int);
 405
 406 #if (defined(__i386__) || defined(_M_IX86) || defined(__X86__) || defined(__x86_64__) || defined(_M_X64)) || \
 407     (defined(__arm__) || defined(_M_ARM) || defined(__aarch64__)) || \
 408     (defined(__m68k__) && (!defined(__mc68000__) && !defined(__mc68010__))) || \
 409     (defined(__ppc__) || defined(__ppc64__) || defined(_M_PPC) || defined(_ARCH_PPC) || defined(_ARCH_PPC64)) || \
 410     (defined(__s390__) || defined(__s390x__) || defined(__zarch__)) || \
 411     defined(__vax__)
 412 /*
 413  * The procesor natively handles unaligned loads, so just use memcpy()
 414  * and memcmp(), to enable those optimizations.
 415  *
 416  * XXX - are those all the x86 tests we need?
 417  * XXX - do we need to worry about ARMv1 through ARMv5, which didn't
 418  * support unaligned loads, and, if so, do we need to worry about all
 419  * of them, or just some of them, e.g. ARMv5?
 420  * XXX - are those the only 68k tests we need not to generated
 421  * unaligned accesses if the target is the 68000 or 68010?
 422  * XXX - are there any tests we don't need, because some definitions are for
 423  * compilers that also predefine the GCC symbols?
 424  * XXX - do we need to test for both 32-bit and 64-bit versions of those
 425  * architectures in all cases?
 426  */
 427 #define UNALIGNED_MEMCPY(p, q, l)       memcpy((p), (q), (l))
 428 #define UNALIGNED_MEMCMP(p, q, l)       memcmp((p), (q), (l))
 429 #else
 430 /*
 431  * The processor doesn't natively handle unaligned loads,
 432  * and the compiler might "helpfully" optimize memcpy()
 433  * and memcmp(), when handed pointers that would normally
 434  * be properly aligned, into sequences that assume proper
 435  * alignment.
 436  *
 437  * Do copies and compares of possibly-unaligned data by
 438  * calling routines that wrap memcpy() and memcmp(), to
 439  * prevent that optimization.
 440  */
 441 extern void unaligned_memcpy(void *, const void *, size_t);
 442 extern int unaligned_memcmp(const void *, const void *, size_t);
 443 #define UNALIGNED_MEMCPY(p, q, l)       unaligned_memcpy((p), (q), (l))
 444 #define UNALIGNED_MEMCMP(p, q, l)       unaligned_memcmp((p), (q), (l))
 445 #endif
 446
 447 #define PLURAL_SUFFIX(n) \
 448         (((n) != 1) ? "s" : "")
 449
 450 extern const char *tok2strary_internal(const char **, int, const char *, int);
 451 #define tok2strary(a,f,i) tok2strary_internal(a, sizeof(a)/sizeof(a[0]),f,i)
 452
 453 extern if_printer lookup_printer(int);
 454
 455 /* The DLT printer routines */
 456
 457 extern u_int ap1394_if_print IF_PRINTER_ARGS;
 458 extern u_int arcnet_if_print IF_PRINTER_ARGS;
 459 extern u_int arcnet_linux_if_print IF_PRINTER_ARGS;
 460 extern u_int atm_if_print IF_PRINTER_ARGS;
 461 extern u_int bt_if_print IF_PRINTER_ARGS;
 462 extern u_int chdlc_if_print IF_PRINTER_ARGS;
 463 extern u_int cip_if_print IF_PRINTER_ARGS;
 464 extern u_int enc_if_print IF_PRINTER_ARGS;
 465 extern u_int ether_if_print IF_PRINTER_ARGS;
 466 extern u_int fddi_if_print IF_PRINTER_ARGS;
 467 extern u_int fr_if_print IF_PRINTER_ARGS;
 468 extern u_int ieee802_11_if_print IF_PRINTER_ARGS;
 469 extern u_int ieee802_11_radio_avs_if_print IF_PRINTER_ARGS;
 470 extern u_int ieee802_11_radio_if_print IF_PRINTER_ARGS;
 471 extern u_int ieee802_15_4_if_print IF_PRINTER_ARGS;
 472 extern u_int ipfc_if_print IF_PRINTER_ARGS;
 473 extern u_int ipnet_if_print IF_PRINTER_ARGS;
 474 extern u_int juniper_atm1_if_print IF_PRINTER_ARGS;
 475 extern u_int juniper_atm2_if_print IF_PRINTER_ARGS;
 476 extern u_int juniper_chdlc_if_print IF_PRINTER_ARGS;
 477 extern u_int juniper_es_if_print IF_PRINTER_ARGS;
 478 extern u_int juniper_ether_if_print IF_PRINTER_ARGS;
 479 extern u_int juniper_frelay_if_print IF_PRINTER_ARGS;
 480 extern u_int juniper_ggsn_if_print IF_PRINTER_ARGS;
 481 extern u_int juniper_mfr_if_print IF_PRINTER_ARGS;
 482 extern u_int juniper_mlfr_if_print IF_PRINTER_ARGS;
 483 extern u_int juniper_mlppp_if_print IF_PRINTER_ARGS;
 484 extern u_int juniper_monitor_if_print IF_PRINTER_ARGS;
 485 extern u_int juniper_ppp_if_print IF_PRINTER_ARGS;
 486 extern u_int juniper_pppoe_atm_if_print IF_PRINTER_ARGS;
 487 extern u_int juniper_pppoe_if_print IF_PRINTER_ARGS;
 488 extern u_int juniper_services_if_print IF_PRINTER_ARGS;
 489 extern u_int lane_if_print IF_PRINTER_ARGS;
 490 extern u_int ltalk_if_print IF_PRINTER_ARGS;
 491 extern u_int mfr_if_print IF_PRINTER_ARGS;
 492 extern u_int netanalyzer_if_print IF_PRINTER_ARGS;
 493 extern u_int netanalyzer_transparent_if_print IF_PRINTER_ARGS;
 494 extern u_int nflog_if_print IF_PRINTER_ARGS;
 495 extern u_int null_if_print IF_PRINTER_ARGS;
 496 extern u_int pflog_if_print IF_PRINTER_ARGS;
 497 extern u_int pktap_if_print IF_PRINTER_ARGS;
 498 extern u_int ppi_if_print IF_PRINTER_ARGS;
 499 extern u_int ppp_bsdos_if_print IF_PRINTER_ARGS;
 500 extern u_int ppp_hdlc_if_print IF_PRINTER_ARGS;
 501 extern u_int ppp_if_print IF_PRINTER_ARGS;
 502 extern u_int pppoe_if_print IF_PRINTER_ARGS;
 503 extern u_int prism_if_print IF_PRINTER_ARGS;
 504 extern u_int raw_if_print IF_PRINTER_ARGS;
 505 extern u_int sl_bsdos_if_print IF_PRINTER_ARGS;
 506 extern u_int sl_if_print IF_PRINTER_ARGS;
 507 extern u_int sll_if_print IF_PRINTER_ARGS;
 508 extern u_int sunatm_if_print IF_PRINTER_ARGS;
 509 extern u_int symantec_if_print IF_PRINTER_ARGS;
 510 extern u_int token_if_print IF_PRINTER_ARGS;
 511 extern u_int usb_linux_48_byte_if_print IF_PRINTER_ARGS;
 512 extern u_int usb_linux_64_byte_if_print IF_PRINTER_ARGS;
 513
 514 /*
 515  * Structure passed to some printers to allow them to print
 516  * link-layer address information if ndo_eflag isn't set
 517  * (because they are for protocols that don't have their
 518  * own addresses, so that we'd want to report link-layer
 519  * address information).
 520  *
 521  * This contains a pointer to an address and a pointer to a routine
 522  * to which we pass that pointer in order to get a string.
 523  */
 524 struct lladdr_info {
 525         const char *(*addr_string)(netdissect_options *, const u_char *);
 526         const u_char *addr;
 527 };
 528
 529 /* The printer routines. */
 530
 531 extern void aarp_print(netdissect_options *, const u_char *, u_int);
 532 extern int ah_print(netdissect_options *, const u_char *);
 533 extern void ahcp_print(netdissect_options *, const u_char *, const u_int);
 534 extern void aodv_print(netdissect_options *, const u_char *, u_int, int);
 535 extern void aoe_print(netdissect_options *, const u_char *, const u_int);
 536 extern void arp_print(netdissect_options *, const u_char *, u_int, u_int);
 537 extern void ascii_print(netdissect_options *, const u_char *, u_int);
 538 extern void atalk_print(netdissect_options *, const u_char *, u_int);
 539 extern void atm_print(netdissect_options *, u_int, u_int, u_int, const u_char *, u_int, u_int);
 540 extern void babel_print(netdissect_options *, const u_char *, u_int);
 541 extern void beep_print(netdissect_options *, const u_char *, u_int);
 542 extern void bfd_print(netdissect_options *, const u_char *, u_int, u_int);
 543 extern void bgp_print(netdissect_options *, const u_char *, u_int);
 544 extern char *bgp_vpn_rd_print (netdissect_options *, const u_char *);
 545 extern void bootp_print(netdissect_options *, const u_char *, u_int);
 546 extern void calm_fast_print(netdissect_options *, const u_char *, u_int, const struct lladdr_info *);
 547 extern void carp_print(netdissect_options *, const u_char *, u_int, u_int);
 548 extern void cdp_print(netdissect_options *, const u_char *, u_int, u_int);
 549 extern void cfm_print(netdissect_options *, const u_char *, u_int);
 550 extern u_int chdlc_print(netdissect_options *, const u_char *, u_int);
 551 extern void cisco_autorp_print(netdissect_options *, const u_char *, u_int);
 552 extern void cnfp_print(netdissect_options *, const u_char *);
 553 extern void dccp_print(netdissect_options *, const u_char *, const u_char *, u_int);
 554 extern void decnet_print(netdissect_options *, const u_char *, u_int, u_int);
 555 extern void dhcp6_print(netdissect_options *, const u_char *, u_int);
 556 extern int dstopt_print(netdissect_options *, const u_char *);
 557 extern void dtp_print(netdissect_options *, const u_char *, u_int);
 558 extern void dvmrp_print(netdissect_options *, const u_char *, u_int);
 559 extern void eap_print(netdissect_options *, const u_char *, u_int);
 560 extern void egp_print(netdissect_options *, const u_char *, u_int);
 561 extern void eigrp_print(netdissect_options *, const u_char *, u_int);
 562 extern int esp_print(netdissect_options *, const u_char *, const int, const u_char *, u_int *, u_int *);
 563 extern u_int ether_print(netdissect_options *, const u_char *, u_int, u_int, void (*)(netdissect_options *, const u_char *), const u_char *);
 564 extern int ethertype_print(netdissect_options *, u_short, const u_char *, u_int, u_int, const struct lladdr_info *, const struct lladdr_info *);
 565 extern u_int fddi_print(netdissect_options *, const u_char *, u_int, u_int);
 566 extern void forces_print(netdissect_options *, const u_char *, u_int);
 567 extern u_int fr_print(netdissect_options *, const u_char *, u_int);
 568 extern int frag6_print(netdissect_options *, const u_char *, const u_char *);
 569 extern void ftp_print(netdissect_options *, const u_char *, u_int);
 570 extern void geneve_print(netdissect_options *, const u_char *, u_int);
 571 extern void geonet_print(netdissect_options *, const u_char *, u_int, const struct lladdr_info *);
 572 extern void gre_print(netdissect_options *, const u_char *, u_int);
 573 extern int hbhopt_print(netdissect_options *, const u_char *);
 574 extern void hex_and_ascii_print(netdissect_options *, const char *, const u_char *, u_int);
 575 extern void hex_and_ascii_print_with_offset(netdissect_options *, const char *, const u_char *, u_int, u_int);
 576 extern void hex_print(netdissect_options *, const char *ident, const u_char *cp, u_int);
 577 extern void hex_print_with_offset(netdissect_options *, const char *ident, const u_char *cp, u_int, u_int);
 578 extern void hncp_print(netdissect_options *, const u_char *, u_int);
 579 extern void hsrp_print(netdissect_options *, const u_char *, u_int);
 580 extern void http_print(netdissect_options *, const u_char *, u_int);
 581 extern void icmp6_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
 582 extern void icmp_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
 583 extern void igmp_print(netdissect_options *, const u_char *, u_int);
 584 extern void igrp_print(netdissect_options *, const u_char *, u_int);
 585 extern void ip6_print(netdissect_options *, const u_char *, u_int);
 586 extern void ipN_print(netdissect_options *, const u_char *, u_int);
 587 extern void ip_print(netdissect_options *, const u_char *, u_int);
 588 extern void ip_print_inner(netdissect_options *, const u_char *, u_int, u_int nh, const u_char *);
 589 extern void ipcomp_print(netdissect_options *, const u_char *);
 590 extern void ipx_netbios_print(netdissect_options *, const u_char *, u_int);
 591 extern void ipx_print(netdissect_options *, const u_char *, u_int);
 592 extern void isakmp_print(netdissect_options *, const u_char *, u_int, const u_char *);
 593 extern void isakmp_rfc3948_print(netdissect_options *, const u_char *, u_int, const u_char *);
 594 extern void isoclns_print(netdissect_options *, const u_char *, u_int);
 595 extern void krb_print(netdissect_options *, const u_char *);
 596 extern void l2tp_print(netdissect_options *, const u_char *, u_int);
 597 extern void lane_print(netdissect_options *, const u_char *, u_int, u_int);
 598 extern void ldp_print(netdissect_options *, const u_char *, u_int);
 599 extern void lisp_print(netdissect_options *, const u_char *, u_int);
 600 extern u_int llap_print(netdissect_options *, const u_char *, u_int);
 601 extern int llc_print(netdissect_options *, const u_char *, u_int, u_int, const struct lladdr_info *, const struct lladdr_info *);
 602 extern void lldp_print(netdissect_options *, const u_char *, u_int);
 603 extern void lmp_print(netdissect_options *, const u_char *, u_int);
 604 extern void loopback_print(netdissect_options *, const u_char *, const u_int);
 605 extern void lspping_print(netdissect_options *, const u_char *, u_int);
 606 extern void lwapp_control_print(netdissect_options *, const u_char *, u_int, int);
 607 extern void lwapp_data_print(netdissect_options *, const u_char *, u_int);
 608 extern void lwres_print(netdissect_options *, const u_char *, u_int);
 609 extern void m3ua_print(netdissect_options *, const u_char *, const u_int);
 610 extern void medsa_print(netdissect_options *, const u_char *, u_int, u_int, const struct lladdr_info *, const struct lladdr_info *);
 611 extern u_int mfr_print(netdissect_options *, const u_char *, u_int);
 612 extern void mobile_print(netdissect_options *, const u_char *, u_int);
 613 extern int mobility_print(netdissect_options *, const u_char *, const u_char *);
 614 extern void mpcp_print(netdissect_options *, const u_char *, u_int);
 615 extern void mpls_print(netdissect_options *, const u_char *, u_int);
 616 extern int mptcp_print(netdissect_options *, const u_char *, u_int, u_char);
 617 extern void msdp_print(netdissect_options *, const u_char *, u_int);
 618 extern void msnlb_print(netdissect_options *, const u_char *);
 619 extern void nbt_tcp_print(netdissect_options *, const u_char *, u_int);
 620 extern void nbt_udp137_print(netdissect_options *, const u_char *, u_int);
 621 extern void nbt_udp138_print(netdissect_options *, const u_char *, u_int);
 622 extern void netbeui_print(netdissect_options *, u_short, const u_char *, u_int);
 623 extern void nfsreply_print(netdissect_options *, const u_char *, u_int, const u_char *);
 624 extern void nfsreply_noaddr_print(netdissect_options *, const u_char *, u_int, const u_char *);
 625 extern void nfsreq_noaddr_print(netdissect_options *, const u_char *, u_int, const u_char *);
 626 extern const u_char * ns_nprint (netdissect_options *, const u_char *, const u_char *);
 627 extern void domain_print(netdissect_options *, const u_char *, u_int, int);
 628 extern void nsh_print(netdissect_options *ndo, const u_char *bp, u_int len);
 629 extern void ntp_print(netdissect_options *, const u_char *, u_int);
 630 extern void oam_print(netdissect_options *, const u_char *, u_int, u_int);
 631 extern void olsr_print(netdissect_options *, const u_char *, u_int, int);
 632 extern void openflow_print(netdissect_options *, const u_char *, const u_int);
 633 extern void ospf6_print(netdissect_options *, const u_char *, u_int);
 634 extern void ospf_print(netdissect_options *, const u_char *, u_int, const u_char *);
 635 extern int ospf_print_grace_lsa(netdissect_options *, const u_char *, u_int);
 636 extern int ospf_print_te_lsa(netdissect_options *, const u_char *, u_int);
 637 extern void otv_print(netdissect_options *, const u_char *, u_int);
 638 extern void pgm_print(netdissect_options *, const u_char *, u_int, const u_char *);
 639 extern void pim_print(netdissect_options *, const u_char *, u_int, const u_char *);
 640 extern void pimv1_print(netdissect_options *, const u_char *, u_int);
 641 extern u_int ppp_print(netdissect_options *, const u_char *, u_int);
 642 extern u_int pppoe_print(netdissect_options *, const u_char *, u_int);
 643 extern void pptp_print(netdissect_options *, const u_char *);
 644 extern int print_unknown_data(netdissect_options *, const u_char *, const char *, int);
 645 extern char *q922_string(netdissect_options *, const u_char *, u_int);
 646 extern void q933_print(netdissect_options *, const u_char *, u_int);
 647 extern void radius_print(netdissect_options *, const u_char *, u_int);
 648 extern void resp_print(netdissect_options *, const u_char *, u_int);
 649 extern void rip_print(netdissect_options *, const u_char *, u_int);
 650 extern void ripng_print(netdissect_options *, const u_char *, unsigned int);
 651 extern void rpki_rtr_print(netdissect_options *, const u_char *, u_int);
 652 extern void rrcp_print(netdissect_options *, const u_char *, u_int, const struct lladdr_info *, const struct lladdr_info *);
 653 extern void rsvp_print(netdissect_options *, const u_char *, u_int);
 654 extern int rt6_print(netdissect_options *, const u_char *, const u_char *);
 655 extern void rtsp_print(netdissect_options *, const u_char *, u_int);
 656 extern void rx_print(netdissect_options *, const u_char *, u_int, u_int, u_int, const u_char *);
 657 extern void sctp_print(netdissect_options *, const u_char *, const u_char *, u_int);
 658 extern void sflow_print(netdissect_options *, const u_char *, u_int);
 659 extern void sip_print(netdissect_options *, const u_char *, u_int);
 660 extern void slow_print(netdissect_options *, const u_char *, u_int);
 661 extern void smb_print_data(netdissect_options *, const u_char *, u_int);
 662 extern void smb_tcp_print(netdissect_options *, const u_char *, u_int);
 663 extern void smtp_print(netdissect_options *, const u_char *, u_int);
 664 extern int snap_print(netdissect_options *, const u_char *, u_int, u_int, const struct lladdr_info *, const struct lladdr_info *, u_int);
 665 extern void snmp_print(netdissect_options *, const u_char *, u_int);
 666 extern void stp_print(netdissect_options *, const u_char *, u_int);
 667 extern void sunrpc_print(netdissect_options *, const u_char *, u_int, const u_char *);
 668 extern void syslog_print(netdissect_options *, const u_char *, u_int);
 669 extern void tcp_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
 670 extern void telnet_print(netdissect_options *, const u_char *, u_int);
 671 extern void tftp_print(netdissect_options *, const u_char *, u_int);
 672 extern void timed_print(netdissect_options *, const u_char *);
 673 extern void tipc_print(netdissect_options *, const u_char *, u_int, u_int);
 674 extern u_int token_print(netdissect_options *, const u_char *, u_int, u_int);
 675 extern void udld_print(netdissect_options *, const u_char *, u_int);
 676 extern void udp_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
 677 extern int vjc_print(netdissect_options *, const u_char *, u_short);
 678 extern void vqp_print(netdissect_options *, const u_char *, u_int);
 679 extern void vrrp_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
 680 extern void vtp_print(netdissect_options *, const u_char *, u_int);
 681 extern void vxlan_gpe_print(netdissect_options *ndo, const u_char *bp, u_int len);
 682 extern void vxlan_print(netdissect_options *, const u_char *, u_int);
 683 extern void wb_print(netdissect_options *, const u_char *, u_int);
 684 extern void zephyr_print(netdissect_options *, const u_char *, int);
 685 extern void zmtp1_print(netdissect_options *, const u_char *, u_int);
 686 extern void zmtp1_datagram_print(netdissect_options *, const u_char *, const u_int);
 687
 688 /* checksum routines */
 689 extern void init_checksum(void);
 690 extern uint16_t verify_crc10_cksum(uint16_t, const u_char *, int);
 691 extern uint16_t create_osi_cksum(const uint8_t *, int, int);
 692
 693 struct cksum_vec {
 694         const uint8_t   *ptr;
 695         int             len;
 696 };
 697 extern uint16_t in_cksum(const struct cksum_vec *, int);
 698 extern uint16_t in_cksum_shouldbe(uint16_t, uint16_t);
 699
 700 extern int nextproto4_cksum(netdissect_options *, const struct ip *, const uint8_t *, u_int, u_int, u_int);
 701
 702 /* in print-ip6.c */
 703 extern int nextproto6_cksum(netdissect_options *, const struct ip6_hdr *, const uint8_t *, u_int, u_int, u_int);
 704
 705 /* Utilities */
 706 extern int mask2plen(uint32_t);
 707 extern int mask62plen(const u_char *);
 708
 709 extern const char *dnname_string(netdissect_options *, u_short);
 710 extern const char *dnnum_string(netdissect_options *, u_short);
 711
 712 extern char *smb_errstr(int, int);
 713 extern const char *nt_errstr(uint32_t);
 714
 715 extern int decode_prefix4(netdissect_options *, const u_char *, u_int, char *, u_int);
 716 extern int decode_prefix6(netdissect_options *, const u_char *, u_int, char *, u_int);
 717
 718 extern void esp_print_decodesecret(netdissect_options *);
 719 extern int esp_print_decrypt_buffer_by_ikev2(netdissect_options *, int,
 720                                              const u_char spii[8],
 721                                              const u_char spir[8],
 722                                              const u_char *, const u_char *);
 723
 724 #endif  /* netdissect_h */