]> The Tcpdump Group git mirrors - tcpdump/blob - print-domain.c
projects / tcpdump / blob
summary | shortlog | log | commit | commitdiff | tree
history | raw | HEAD
We have to set the filter on every new file.
[tcpdump] / print-domain.c
1 /*
2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 */
21
22 #ifdef HAVE_CONFIG_H
23 #include "config.h"
24 #endif
25
26 #include <netdissect-stdinc.h>
27
28 #include "nameser.h"
29
30 #include <string.h>
31
32 #include "netdissect.h"
33 #include "addrtoname.h"
34 #include "addrtostr.h"
35 #include "extract.h"
36
37 static const char *ns_ops[] = {
38 "", " inv_q", " stat", " op3", " notify", " update", " op6", " op7",
39 " op8", " updateA", " updateD", " updateDA",
40 " updateM", " updateMA", " zoneInit", " zoneRef",
41 };
42
43 static const char *ns_resp[] = {
44 "", " FormErr", " ServFail", " NXDomain",
45 " NotImp", " Refused", " YXDomain", " YXRRSet",
46 " NXRRSet", " NotAuth", " NotZone", " Resp11",
47 " Resp12", " Resp13", " Resp14", " NoChange",
48 };
49
50 /* skip over a domain name */
51 static const u_char *
52 ns_nskip(netdissect_options *ndo,
53 register const u_char *cp)
54 {
55 register u_char i;
56
57 if (!ND_TTEST2(*cp, 1))
58 return (NULL);
59 i = *cp++;
60 while (i) {
61 if ((i & INDIR_MASK) == INDIR_MASK)
62 return (cp + 1);
63 if ((i & INDIR_MASK) == EDNS0_MASK) {
64 int bitlen, bytelen;
65
66 if ((i & ~INDIR_MASK) != EDNS0_ELT_BITLABEL)
67 return(NULL); /* unknown ELT */
68 if (!ND_TTEST2(*cp, 1))
69 return (NULL);
70 if ((bitlen = *cp++) == 0)
71 bitlen = 256;
72 bytelen = (bitlen + 7) / 8;
73 cp += bytelen;
74 } else
75 cp += i;
76 if (!ND_TTEST2(*cp, 1))
77 return (NULL);
78 i = *cp++;
79 }
80 return (cp);
81 }
82
83 /* print a <domain-name> */
84 static const u_char *
85 blabel_print(netdissect_options *ndo,
86 const u_char *cp)
87 {
88 int bitlen, slen, b;
89 const u_char *bitp, *lim;
90 char tc;
91
92 if (!ND_TTEST2(*cp, 1))
93 return(NULL);
94 if ((bitlen = *cp) == 0)
95 bitlen = 256;
96 slen = (bitlen + 3) / 4;
97 lim = cp + 1 + slen;
98
99 /* print the bit string as a hex string */
100 ND_PRINT((ndo, "\\[x"));
101 for (bitp = cp + 1, b = bitlen; bitp < lim && b > 7; b -= 8, bitp++) {
102 ND_TCHECK(*bitp);
103 ND_PRINT((ndo, "%02x", *bitp));
104 }
105 if (b > 4) {
106 ND_TCHECK(*bitp);
107 tc = *bitp++;
108 ND_PRINT((ndo, "%02x", tc & (0xff << (8 - b))));
109 } else if (b > 0) {
110 ND_TCHECK(*bitp);
111 tc = *bitp++;
112 ND_PRINT((ndo, "%1x", ((tc >> 4) & 0x0f) & (0x0f << (4 - b))));
113 }
114 ND_PRINT((ndo, "/%d]", bitlen));
115 return lim;
116 trunc:
117 ND_PRINT((ndo, ".../%d]", bitlen));
118 return NULL;
119 }
120
121 static int
122 labellen(netdissect_options *ndo,
123 const u_char *cp)
124 {
125 register u_int i;
126
127 if (!ND_TTEST2(*cp, 1))
128 return(-1);
129 i = *cp;
130 if ((i & INDIR_MASK) == EDNS0_MASK) {
131 int bitlen, elt;
132 if ((elt = (i & ~INDIR_MASK)) != EDNS0_ELT_BITLABEL) {
133 ND_PRINT((ndo, "<ELT %d>", elt));
134 return(-1);
135 }
136 if (!ND_TTEST2(*(cp + 1), 1))
137 return(-1);
138 if ((bitlen = *(cp + 1)) == 0)
139 bitlen = 256;
140 return(((bitlen + 7) / 8) + 1);
141 } else
142 return(i);
143 }
144
145 const u_char *
146 ns_nprint(netdissect_options *ndo,
147 register const u_char *cp, register const u_char *bp)
148 {
149 register u_int i, l;
150 register const u_char *rp = NULL;
151 register int compress = 0;
152 int chars_processed;
153 int elt;
154 int data_size = ndo->ndo_snapend - bp;
155
156 if ((l = labellen(ndo, cp)) == (u_int)-1)
157 return(NULL);
158 if (!ND_TTEST2(*cp, 1))
159 return(NULL);
160 chars_processed = 1;
161 if (((i = *cp++) & INDIR_MASK) != INDIR_MASK) {
162 compress = 0;
163 rp = cp + l;
164 }
165
166 if (i != 0)
167 while (i && cp < ndo->ndo_snapend) {
168 if ((i & INDIR_MASK) == INDIR_MASK) {
169 if (!compress) {
170 rp = cp + 1;
171 compress = 1;
172 }
173 if (!ND_TTEST2(*cp, 1))
174 return(NULL);
175 cp = bp + (((i << 8) | *cp) & 0x3fff);
176 if ((l = labellen(ndo, cp)) == (u_int)-1)
177 return(NULL);
178 if (!ND_TTEST2(*cp, 1))
179 return(NULL);
180 i = *cp++;
181 chars_processed++;
182
183 /*
184 * If we've looked at every character in
185 * the message, this pointer will make
186 * us look at some character again,
187 * which means we're looping.
188 */
189 if (chars_processed >= data_size) {
190 ND_PRINT((ndo, "<LOOP>"));
191 return (NULL);
192 }
193 continue;
194 }
195 if ((i & INDIR_MASK) == EDNS0_MASK) {
196 elt = (i & ~INDIR_MASK);
197 switch(elt) {
198 case EDNS0_ELT_BITLABEL:
199 if (blabel_print(ndo, cp) == NULL)
200 return (NULL);
201 break;
202 default:
203 /* unknown ELT */
204 ND_PRINT((ndo, "<ELT %d>", elt));
205 return(NULL);
206 }
207 } else {
208 if (fn_printn(ndo, cp, l, ndo->ndo_snapend))
209 return(NULL);
210 }
211
212 cp += l;
213 chars_processed += l;
214 ND_PRINT((ndo, "."));
215 if ((l = labellen(ndo, cp)) == (u_int)-1)
216 return(NULL);
217 if (!ND_TTEST2(*cp, 1))
218 return(NULL);
219 i = *cp++;
220 chars_processed++;
221 if (!compress)
222 rp += l + 1;
223 }
224 else
225 ND_PRINT((ndo, "."));
226 return (rp);
227 }
228
229 /* print a <character-string> */
230 static const u_char *
231 ns_cprint(netdissect_options *ndo,
232 register const u_char *cp)
233 {
234 register u_int i;
235
236 if (!ND_TTEST2(*cp, 1))
237 return (NULL);
238 i = *cp++;
239 if (fn_printn(ndo, cp, i, ndo->ndo_snapend))
240 return (NULL);
241 return (cp + i);
242 }
243
244 /* http://www.iana.org/assignments/dns-parameters */
245 const struct tok ns_type2str[] = {
246 { T_A, "A" }, /* RFC 1035 */
247 { T_NS, "NS" }, /* RFC 1035 */
248 { T_MD, "MD" }, /* RFC 1035 */
249 { T_MF, "MF" }, /* RFC 1035 */
250 { T_CNAME, "CNAME" }, /* RFC 1035 */
251 { T_SOA, "SOA" }, /* RFC 1035 */
252 { T_MB, "MB" }, /* RFC 1035 */
253 { T_MG, "MG" }, /* RFC 1035 */
254 { T_MR, "MR" }, /* RFC 1035 */
255 { T_NULL, "NULL" }, /* RFC 1035 */
256 { T_WKS, "WKS" }, /* RFC 1035 */
257 { T_PTR, "PTR" }, /* RFC 1035 */
258 { T_HINFO, "HINFO" }, /* RFC 1035 */
259 { T_MINFO, "MINFO" }, /* RFC 1035 */
260 { T_MX, "MX" }, /* RFC 1035 */
261 { T_TXT, "TXT" }, /* RFC 1035 */
262 { T_RP, "RP" }, /* RFC 1183 */
263 { T_AFSDB, "AFSDB" }, /* RFC 1183 */
264 { T_X25, "X25" }, /* RFC 1183 */
265 { T_ISDN, "ISDN" }, /* RFC 1183 */
266 { T_RT, "RT" }, /* RFC 1183 */
267 { T_NSAP, "NSAP" }, /* RFC 1706 */
268 { T_NSAP_PTR, "NSAP_PTR" },
269 { T_SIG, "SIG" }, /* RFC 2535 */
270 { T_KEY, "KEY" }, /* RFC 2535 */
271 { T_PX, "PX" }, /* RFC 2163 */
272 { T_GPOS, "GPOS" }, /* RFC 1712 */
273 { T_AAAA, "AAAA" }, /* RFC 1886 */
274 { T_LOC, "LOC" }, /* RFC 1876 */
275 { T_NXT, "NXT" }, /* RFC 2535 */
276 { T_EID, "EID" }, /* Nimrod */
277 { T_NIMLOC, "NIMLOC" }, /* Nimrod */
278 { T_SRV, "SRV" }, /* RFC 2782 */
279 { T_ATMA, "ATMA" }, /* ATM Forum */
280 { T_NAPTR, "NAPTR" }, /* RFC 2168, RFC 2915 */
281 { T_KX, "KX" }, /* RFC 2230 */
282 { T_CERT, "CERT" }, /* RFC 2538 */
283 { T_A6, "A6" }, /* RFC 2874 */
284 { T_DNAME, "DNAME" }, /* RFC 2672 */
285 { T_SINK, "SINK" },
286 { T_OPT, "OPT" }, /* RFC 2671 */
287 { T_APL, "APL" }, /* RFC 3123 */
288 { T_DS, "DS" }, /* RFC 4034 */
289 { T_SSHFP, "SSHFP" }, /* RFC 4255 */
290 { T_IPSECKEY, "IPSECKEY" }, /* RFC 4025 */
291 { T_RRSIG, "RRSIG" }, /* RFC 4034 */
292 { T_NSEC, "NSEC" }, /* RFC 4034 */
293 { T_DNSKEY, "DNSKEY" }, /* RFC 4034 */
294 { T_SPF, "SPF" }, /* RFC-schlitt-spf-classic-02.txt */
295 { T_UINFO, "UINFO" },
296 { T_UID, "UID" },
297 { T_GID, "GID" },
298 { T_UNSPEC, "UNSPEC" },
299 { T_UNSPECA, "UNSPECA" },
300 { T_TKEY, "TKEY" }, /* RFC 2930 */
301 { T_TSIG, "TSIG" }, /* RFC 2845 */
302 { T_IXFR, "IXFR" }, /* RFC 1995 */
303 { T_AXFR, "AXFR" }, /* RFC 1035 */
304 { T_MAILB, "MAILB" }, /* RFC 1035 */
305 { T_MAILA, "MAILA" }, /* RFC 1035 */
306 { T_ANY, "ANY" },
307 { 0, NULL }
308 };
309
310 const struct tok ns_class2str[] = {
311 { C_IN, "IN" }, /* Not used */
312 { C_CHAOS, "CHAOS" },
313 { C_HS, "HS" },
314 { C_ANY, "ANY" },
315 { 0, NULL }
316 };
317
318 /* print a query */
319 static const u_char *
320 ns_qprint(netdissect_options *ndo,
321 register const u_char *cp, register const u_char *bp, int is_mdns)
322 {
323 register const u_char *np = cp;
324 register u_int i, class;
325
326 cp = ns_nskip(ndo, cp);
327
328 if (cp == NULL || !ND_TTEST2(*cp, 4))
329 return(NULL);
330
331 /* print the qtype */
332 i = EXTRACT_16BITS(cp);
333 cp += 2;
334 ND_PRINT((ndo, " %s", tok2str(ns_type2str, "Type%d", i)));
335 /* print the qclass (if it's not IN) */
336 i = EXTRACT_16BITS(cp);
337 cp += 2;
338 if (is_mdns)
339 class = (i & ~C_QU);
340 else
341 class = i;
342 if (class != C_IN)
343 ND_PRINT((ndo, " %s", tok2str(ns_class2str, "(Class %d)", class)));
344 if (is_mdns) {
345 ND_PRINT((ndo, i & C_QU ? " (QU)" : " (QM)"));
346 }
347
348 ND_PRINT((ndo, "? "));
349 cp = ns_nprint(ndo, np, bp);
350 return(cp ? cp + 4 : NULL);
351 }
352
353 /* print a reply */
354 static const u_char *
355 ns_rprint(netdissect_options *ndo,
356 register const u_char *cp, register const u_char *bp, int is_mdns)
357 {
358 register u_int i, class, opt_flags = 0;
359 register u_short typ, len;
360 register const u_char *rp;
361
362 if (ndo->ndo_vflag) {
363 ND_PRINT((ndo, " "));
364 if ((cp = ns_nprint(ndo, cp, bp)) == NULL)
365 return NULL;
366 } else
367 cp = ns_nskip(ndo, cp);
368
369 if (cp == NULL || !ND_TTEST2(*cp, 10))
370 return (ndo->ndo_snapend);
371
372 /* print the type/qtype */
373 typ = EXTRACT_16BITS(cp);
374 cp += 2;
375 /* print the class (if it's not IN and the type isn't OPT) */
376 i = EXTRACT_16BITS(cp);
377 cp += 2;
378 if (is_mdns)
379 class = (i & ~C_CACHE_FLUSH);
380 else
381 class = i;
382 if (class != C_IN && typ != T_OPT)
383 ND_PRINT((ndo, " %s", tok2str(ns_class2str, "(Class %d)", class)));
384 if (is_mdns) {
385 if (i & C_CACHE_FLUSH)
386 ND_PRINT((ndo, " (Cache flush)"));
387 }
388
389 if (typ == T_OPT) {
390 /* get opt flags */
391 cp += 2;
392 opt_flags = EXTRACT_16BITS(cp);
393 /* ignore rest of ttl field */
394 cp += 2;
395 } else if (ndo->ndo_vflag > 2) {
396 /* print ttl */
397 ND_PRINT((ndo, " ["));
398 relts_print(ndo, EXTRACT_32BITS(cp));
399 ND_PRINT((ndo, "]"));
400 cp += 4;
401 } else {
402 /* ignore ttl */
403 cp += 4;
404 }
405
406 len = EXTRACT_16BITS(cp);
407 cp += 2;
408
409 rp = cp + len;
410
411 ND_PRINT((ndo, " %s", tok2str(ns_type2str, "Type%d", typ)));
412 if (rp > ndo->ndo_snapend)
413 return(NULL);
414
415 switch (typ) {
416 case T_A:
417 if (!ND_TTEST2(*cp, sizeof(struct in_addr)))
418 return(NULL);
419 ND_PRINT((ndo, " %s", intoa(htonl(EXTRACT_32BITS(cp)))));
420 break;
421
422 case T_NS:
423 case T_CNAME:
424 case T_PTR:
425 #ifdef T_DNAME
426 case T_DNAME:
427 #endif
428 ND_PRINT((ndo, " "));
429 if (ns_nprint(ndo, cp, bp) == NULL)
430 return(NULL);
431 break;
432
433 case T_SOA:
434 if (!ndo->ndo_vflag)
435 break;
436 ND_PRINT((ndo, " "));
437 if ((cp = ns_nprint(ndo, cp, bp)) == NULL)
438 return(NULL);
439 ND_PRINT((ndo, " "));
440 if ((cp = ns_nprint(ndo, cp, bp)) == NULL)
441 return(NULL);
442 if (!ND_TTEST2(*cp, 5 * 4))
443 return(NULL);
444 ND_PRINT((ndo, " %u", EXTRACT_32BITS(cp)));
445 cp += 4;
446 ND_PRINT((ndo, " %u", EXTRACT_32BITS(cp)));
447 cp += 4;
448 ND_PRINT((ndo, " %u", EXTRACT_32BITS(cp)));
449 cp += 4;
450 ND_PRINT((ndo, " %u", EXTRACT_32BITS(cp)));
451 cp += 4;
452 ND_PRINT((ndo, " %u", EXTRACT_32BITS(cp)));
453 cp += 4;
454 break;
455 case T_MX:
456 ND_PRINT((ndo, " "));
457 if (!ND_TTEST2(*cp, 2))
458 return(NULL);
459 if (ns_nprint(ndo, cp + 2, bp) == NULL)
460 return(NULL);
461 ND_PRINT((ndo, " %d", EXTRACT_16BITS(cp)));
462 break;
463
464 case T_TXT:
465 while (cp < rp) {
466 ND_PRINT((ndo, " \""));
467 cp = ns_cprint(ndo, cp);
468 if (cp == NULL)
469 return(NULL);
470 ND_PRINT((ndo, "\""));
471 }
472 break;
473
474 case T_SRV:
475 ND_PRINT((ndo, " "));
476 if (!ND_TTEST2(*cp, 6))
477 return(NULL);
478 if (ns_nprint(ndo, cp + 6, bp) == NULL)
479 return(NULL);
480 ND_PRINT((ndo, ":%d %d %d", EXTRACT_16BITS(cp + 4),
481 EXTRACT_16BITS(cp), EXTRACT_16BITS(cp + 2)));
482 break;
483
484 case T_AAAA:
485 {
486 char ntop_buf[INET6_ADDRSTRLEN];
487
488 if (!ND_TTEST2(*cp, sizeof(struct in6_addr)))
489 return(NULL);
490 ND_PRINT((ndo, " %s",
491 addrtostr6(cp, ntop_buf, sizeof(ntop_buf))));
492
493 break;
494 }
495
496 case T_A6:
497 {
498 struct in6_addr a;
499 int pbit, pbyte;
500 char ntop_buf[INET6_ADDRSTRLEN];
501
502 if (!ND_TTEST2(*cp, 1))
503 return(NULL);
504 pbit = *cp;
505 pbyte = (pbit & ~7) / 8;
506 if (pbit > 128) {
507 ND_PRINT((ndo, " %u(bad plen)", pbit));
508 break;
509 } else if (pbit < 128) {
510 if (!ND_TTEST2(*(cp + 1), sizeof(a) - pbyte))
511 return(NULL);
512 memset(&a, 0, sizeof(a));
513 memcpy(&a.s6_addr[pbyte], cp + 1, sizeof(a) - pbyte);
514 ND_PRINT((ndo, " %u %s", pbit,
515 addrtostr6(&a, ntop_buf, sizeof(ntop_buf))));
516 }
517 if (pbit > 0) {
518 ND_PRINT((ndo, " "));
519 if (ns_nprint(ndo, cp + 1 + sizeof(a) - pbyte, bp) == NULL)
520 return(NULL);
521 }
522 break;
523 }
524
525 case T_OPT:
526 ND_PRINT((ndo, " UDPsize=%u", class));
527 if (opt_flags & 0x8000)
528 ND_PRINT((ndo, " DO"));
529 break;
530
531 case T_UNSPECA: /* One long string */
532 if (!ND_TTEST2(*cp, len))
533 return(NULL);
534 if (fn_printn(ndo, cp, len, ndo->ndo_snapend))
535 return(NULL);
536 break;
537
538 case T_TSIG:
539 {
540 if (cp + len > ndo->ndo_snapend)
541 return(NULL);
542 if (!ndo->ndo_vflag)
543 break;
544 ND_PRINT((ndo, " "));
545 if ((cp = ns_nprint(ndo, cp, bp)) == NULL)
546 return(NULL);
547 cp += 6;
548 if (!ND_TTEST2(*cp, 2))
549 return(NULL);
550 ND_PRINT((ndo, " fudge=%u", EXTRACT_16BITS(cp)));
551 cp += 2;
552 if (!ND_TTEST2(*cp, 2))
553 return(NULL);
554 ND_PRINT((ndo, " maclen=%u", EXTRACT_16BITS(cp)));
555 cp += 2 + EXTRACT_16BITS(cp);
556 if (!ND_TTEST2(*cp, 2))
557 return(NULL);
558 ND_PRINT((ndo, " origid=%u", EXTRACT_16BITS(cp)));
559 cp += 2;
560 if (!ND_TTEST2(*cp, 2))
561 return(NULL);
562 ND_PRINT((ndo, " error=%u", EXTRACT_16BITS(cp)));
563 cp += 2;
564 if (!ND_TTEST2(*cp, 2))
565 return(NULL);
566 ND_PRINT((ndo, " otherlen=%u", EXTRACT_16BITS(cp)));
567 cp += 2;
568 }
569 }
570 return (rp); /* XXX This isn't always right */
571 }
572
573 void
574 ns_print(netdissect_options *ndo,
575 register const u_char *bp, u_int length, int is_mdns)
576 {
577 register const HEADER *np;
578 register int qdcount, ancount, nscount, arcount;
579 register const u_char *cp;
580 uint16_t b2;
581
582 np = (const HEADER *)bp;
583 ND_TCHECK(*np);
584 /* get the byte-order right */
585 qdcount = EXTRACT_16BITS(&np->qdcount);
586 ancount = EXTRACT_16BITS(&np->ancount);
587 nscount = EXTRACT_16BITS(&np->nscount);
588 arcount = EXTRACT_16BITS(&np->arcount);
589
590 if (DNS_QR(np)) {
591 /* this is a response */
592 ND_PRINT((ndo, "%d%s%s%s%s%s%s",
593 EXTRACT_16BITS(&np->id),
594 ns_ops[DNS_OPCODE(np)],
595 ns_resp[DNS_RCODE(np)],
596 DNS_AA(np)? "*" : "",
597 DNS_RA(np)? "" : "-",
598 DNS_TC(np)? "|" : "",
599 DNS_AD(np)? "$" : ""));
600
601 if (qdcount != 1)
602 ND_PRINT((ndo, " [%dq]", qdcount));
603 /* Print QUESTION section on -vv */
604 cp = (const u_char *)(np + 1);
605 while (qdcount--) {
606 if (qdcount < EXTRACT_16BITS(&np->qdcount) - 1)
607 ND_PRINT((ndo, ","));
608 if (ndo->ndo_vflag > 1) {
609 ND_PRINT((ndo, " q:"));
610 if ((cp = ns_qprint(ndo, cp, bp, is_mdns)) == NULL)
611 goto trunc;
612 } else {
613 if ((cp = ns_nskip(ndo, cp)) == NULL)
614 goto trunc;
615 cp += 4; /* skip QTYPE and QCLASS */
616 }
617 }
618 ND_PRINT((ndo, " %d/%d/%d", ancount, nscount, arcount));
619 if (ancount--) {
620 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
621 goto trunc;
622 while (cp < ndo->ndo_snapend && ancount--) {
623 ND_PRINT((ndo, ","));
624 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
625 goto trunc;
626 }
627 }
628 if (ancount > 0)
629 goto trunc;
630 /* Print NS and AR sections on -vv */
631 if (ndo->ndo_vflag > 1) {
632 if (cp < ndo->ndo_snapend && nscount--) {
633 ND_PRINT((ndo, " ns:"));
634 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
635 goto trunc;
636 while (cp < ndo->ndo_snapend && nscount--) {
637 ND_PRINT((ndo, ","));
638 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
639 goto trunc;
640 }
641 }
642 if (nscount > 0)
643 goto trunc;
644 if (cp < ndo->ndo_snapend && arcount--) {
645 ND_PRINT((ndo, " ar:"));
646 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
647 goto trunc;
648 while (cp < ndo->ndo_snapend && arcount--) {
649 ND_PRINT((ndo, ","));
650 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
651 goto trunc;
652 }
653 }
654 if (arcount > 0)
655 goto trunc;
656 }
657 }
658 else {
659 /* this is a request */
660 ND_PRINT((ndo, "%d%s%s%s", EXTRACT_16BITS(&np->id), ns_ops[DNS_OPCODE(np)],
661 DNS_RD(np) ? "+" : "",
662 DNS_CD(np) ? "%" : ""));
663
664 /* any weirdness? */
665 b2 = EXTRACT_16BITS(((const u_short *)np)+1);
666 if (b2 & 0x6cf)
667 ND_PRINT((ndo, " [b2&3=0x%x]", b2));
668
669 if (DNS_OPCODE(np) == IQUERY) {
670 if (qdcount)
671 ND_PRINT((ndo, " [%dq]", qdcount));
672 if (ancount != 1)
673 ND_PRINT((ndo, " [%da]", ancount));
674 }
675 else {
676 if (ancount)
677 ND_PRINT((ndo, " [%da]", ancount));
678 if (qdcount != 1)
679 ND_PRINT((ndo, " [%dq]", qdcount));
680 }
681 if (nscount)
682 ND_PRINT((ndo, " [%dn]", nscount));
683 if (arcount)
684 ND_PRINT((ndo, " [%dau]", arcount));
685
686 cp = (const u_char *)(np + 1);
687 if (qdcount--) {
688 cp = ns_qprint(ndo, cp, (const u_char *)np, is_mdns);
689 if (!cp)
690 goto trunc;
691 while (cp < ndo->ndo_snapend && qdcount--) {
692 cp = ns_qprint(ndo, (const u_char *)cp,
693 (const u_char *)np,
694 is_mdns);
695 if (!cp)
696 goto trunc;
697 }
698 }
699 if (qdcount > 0)
700 goto trunc;
701
702 /* Print remaining sections on -vv */
703 if (ndo->ndo_vflag > 1) {
704 if (ancount--) {
705 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
706 goto trunc;
707 while (cp < ndo->ndo_snapend && ancount--) {
708 ND_PRINT((ndo, ","));
709 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
710 goto trunc;
711 }
712 }
713 if (ancount > 0)
714 goto trunc;
715 if (cp < ndo->ndo_snapend && nscount--) {
716 ND_PRINT((ndo, " ns:"));
717 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
718 goto trunc;
719 while (nscount-- && cp < ndo->ndo_snapend) {
720 ND_PRINT((ndo, ","));
721 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
722 goto trunc;
723 }
724 }
725 if (nscount > 0)
726 goto trunc;
727 if (cp < ndo->ndo_snapend && arcount--) {
728 ND_PRINT((ndo, " ar:"));
729 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
730 goto trunc;
731 while (cp < ndo->ndo_snapend && arcount--) {
732 ND_PRINT((ndo, ","));
733 if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
734 goto trunc;
735 }
736 }
737 if (arcount > 0)
738 goto trunc;
739 }
740 }
741 ND_PRINT((ndo, " (%d)", length));
742 return;
743
744 trunc:
745 ND_PRINT((ndo, "[|domain]"));
746 }
[mirror] the TCPdump network dissector