]> The Tcpdump Group git mirrors - tcpdump/blob - print-rip.c
Try the new ND_LCHECK*() macros. [skip ci]
[tcpdump] / print-rip.c
1 /*
2 * Copyright (c) 1989, 1990, 1991, 1993, 1994, 1996
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 */
21
22 /* \summary: Routing Information Protocol (RIP) printer */
23
24 /* specification: RFC 1058, RFC 2453, RFC 4822 */
25
26 #ifdef HAVE_CONFIG_H
27 #include <config.h>
28 #endif
29
30 #include "netdissect-stdinc.h"
31
32 #define ND_LONGJMP_FROM_TCHECK
33 #include "netdissect.h"
34 #include "addrtoname.h"
35 #include "extract.h"
36
37 #include "af.h"
38
39
40 /*
41 * RFC 1058 and RFC 2453 header of packet.
42 *
43 * 0 1 2 3 3
44 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
45 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
46 * | Command (1) | Version (1) | unused |
47 * +---------------+---------------+-------------------------------+
48 */
49 struct rip {
50 nd_uint8_t rip_cmd; /* request/response */
51 nd_uint8_t rip_vers; /* protocol version # */
52 nd_byte unused[2]; /* unused */
53 };
54
55 #define RIPCMD_REQUEST 1 /* want info */
56 #define RIPCMD_RESPONSE 2 /* responding to request */
57 #define RIPCMD_TRACEON 3 /* turn tracing on */
58 #define RIPCMD_TRACEOFF 4 /* turn it off */
59 /* 5 is reserved */
60 #define RIPCMD_TRIGREQ 6
61 #define RIPCMD_TRIGRESP 7
62 #define RIPCMD_TRIGACK 8
63 #define RIPCMD_UPDREQ 9
64 #define RIPCMD_UPDRESP 10
65 #define RIPCMD_UPDACK 11
66
67 static const struct tok rip_cmd_values[] = {
68 { RIPCMD_REQUEST, "Request" },
69 { RIPCMD_RESPONSE, "Response" },
70 { RIPCMD_TRACEON, "Trace on" },
71 { RIPCMD_TRACEOFF, "Trace off" },
72 { RIPCMD_TRIGREQ, "Triggered Request" },
73 { RIPCMD_TRIGRESP, "Triggered Response" },
74 { RIPCMD_TRIGACK, "Triggered Acknowledgement" },
75 { RIPCMD_UPDREQ, "Update Request" },
76 { RIPCMD_UPDRESP, "Update Response" },
77 { RIPCMD_UPDACK, "Update Acknowledge" },
78 { 0, NULL}
79 };
80
81 #define RIP_AUTHLEN 16
82 #define RIP_ROUTELEN 20
83
84 /*
85 * First 4 bytes of all RIPv1/RIPv2 entries.
86 */
87 struct rip_entry_header {
88 nd_uint16_t rip_family;
89 nd_uint16_t rip_tag;
90 };
91
92 /*
93 * RFC 1058 entry.
94 *
95 * 0 1 2 3 3
96 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
97 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
98 * | Address Family Identifier (2) | must be zero (2) |
99 * +-------------------------------+-------------------------------+
100 * | IP Address (4) |
101 * +---------------------------------------------------------------+
102 * | must be zero (4) |
103 * +---------------------------------------------------------------+
104 * | must be zero (4) |
105 * +---------------------------------------------------------------+
106 * | Metric (4) |
107 * +---------------------------------------------------------------+
108 */
109 struct rip_netinfo_v1 {
110 nd_uint16_t rip_family;
111 nd_byte rip_mbz1[2];
112 nd_ipv4 rip_dest;
113 nd_byte rip_mbz2[4];
114 nd_byte rip_mbz3[4];
115 nd_uint32_t rip_metric; /* cost of route */
116 };
117
118
119 /*
120 * RFC 2453 route entry
121 *
122 * 0 1 2 3 3
123 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
124 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
125 * | Address Family Identifier (2) | Route Tag (2) |
126 * +-------------------------------+-------------------------------+
127 * | IP Address (4) |
128 * +---------------------------------------------------------------+
129 * | Subnet Mask (4) |
130 * +---------------------------------------------------------------+
131 * | Next Hop (4) |
132 * +---------------------------------------------------------------+
133 * | Metric (4) |
134 * +---------------------------------------------------------------+
135 *
136 */
137
138 struct rip_netinfo_v2 {
139 nd_uint16_t rip_family;
140 nd_uint16_t rip_tag;
141 nd_ipv4 rip_dest;
142 nd_uint32_t rip_dest_mask;
143 nd_ipv4 rip_router;
144 nd_uint32_t rip_metric; /* cost of route */
145 };
146
147 /*
148 * RFC 2453 authentication entry
149 *
150 * 0 1 2 3 3
151 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
152 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
153 * | 0xFFFF | Authentication Type (2) |
154 * +-------------------------------+-------------------------------+
155 * - Authentication (16) -
156 * +---------------------------------------------------------------+
157 */
158
159 struct rip_auth_v2 {
160 nd_uint16_t rip_family;
161 nd_uint16_t rip_tag;
162 nd_byte rip_auth[16];
163 };
164
165 /*
166 * RFC 4822 Cryptographic Authentication entry.
167 *
168 * 0 1 2 3 3
169 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
170 * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
171 * | RIPv2 Packet Length | Key ID | Auth Data Len |
172 * +---------------+---------------+---------------+---------------+
173 * | Sequence Number (non-decreasing) |
174 * +---------------+---------------+---------------+---------------+
175 * | reserved must be zero |
176 * +---------------+---------------+---------------+---------------+
177 * | reserved must be zero |
178 * +---------------+---------------+---------------+---------------+
179 */
180 struct rip_auth_crypto_v2 {
181 nd_uint16_t rip_packet_len;
182 nd_uint8_t rip_key_id;
183 nd_uint8_t rip_auth_data_len;
184 nd_uint32_t rip_seq_num;
185 nd_byte rip_mbz1[4];
186 nd_byte rip_mbz2[4];
187 };
188
189 static unsigned
190 rip_entry_print_v1(netdissect_options *ndo, const u_char *p,
191 unsigned remaining)
192 {
193 const struct rip_entry_header *eh = (const struct rip_entry_header *)p;
194 u_short family;
195 const struct rip_netinfo_v1 *ni = (const struct rip_netinfo_v1 *)p;
196
197 /* RFC 1058 */
198 ND_LCHECKMSG_U(remaining, RIP_ROUTELEN, "remaining data length");
199 ND_TCHECK_SIZE(ni);
200 family = GET_BE_U_2(ni->rip_family);
201 if (family != BSD_AFNUM_INET && family != 0) {
202 ND_PRINT("\n\t AFI %s, ", tok2str(bsd_af_values, "Unknown (%u)", family));
203 print_unknown_data(ndo, p + sizeof(*eh), "\n\t ", RIP_ROUTELEN - sizeof(*eh));
204 return (RIP_ROUTELEN);
205 }
206 if (GET_BE_U_2(ni->rip_mbz1) ||
207 GET_BE_U_4(ni->rip_mbz2) ||
208 GET_BE_U_4(ni->rip_mbz3)) {
209 /* MBZ fields not zero */
210 print_unknown_data(ndo, p, "\n\t ", RIP_ROUTELEN);
211 return (RIP_ROUTELEN);
212 }
213 if (family == 0) {
214 ND_PRINT("\n\t AFI 0, %s, metric: %u",
215 GET_IPADDR_STRING(ni->rip_dest),
216 GET_BE_U_4(ni->rip_metric));
217 return (RIP_ROUTELEN);
218 } /* BSD_AFNUM_INET */
219 ND_PRINT("\n\t %s, metric: %u",
220 GET_IPADDR_STRING(ni->rip_dest),
221 GET_BE_U_4(ni->rip_metric));
222 return (RIP_ROUTELEN);
223 invalid:
224 return 0;
225 }
226
227 static unsigned
228 rip_entry_print_v2(netdissect_options *ndo, const u_char *p,
229 unsigned remaining)
230 {
231 const struct rip_entry_header *eh = (const struct rip_entry_header *)p;
232 u_short family;
233 const struct rip_netinfo_v2 *ni;
234
235 ND_LCHECKMSG_ZU(remaining, sizeof(*eh), "remaining data length");
236 ND_TCHECK_SIZE(eh);
237 family = GET_BE_U_2(eh->rip_family);
238 if (family == 0xFFFF) { /* variable-sized authentication structures */
239 uint16_t auth_type = GET_BE_U_2(eh->rip_tag);
240
241 p += sizeof(*eh);
242 remaining -= sizeof(*eh);
243 if (auth_type == 2) {
244 ND_PRINT("\n\t Simple Text Authentication data: ");
245 nd_printjnp(ndo, p, RIP_AUTHLEN);
246 } else if (auth_type == 3) {
247 const struct rip_auth_crypto_v2 *ch;
248
249 ch = (const struct rip_auth_crypto_v2 *)p;
250 ND_LCHECKMSG_ZU(remaining, sizeof(*ch), "remaining data length");
251 ND_PRINT("\n\t Auth header:");
252 ND_PRINT(" Packet Len %u,",
253 GET_BE_U_2(ch->rip_packet_len));
254 ND_PRINT(" Key-ID %u,", GET_U_1(ch->rip_key_id));
255 ND_PRINT(" Auth Data Len %u,",
256 GET_U_1(ch->rip_auth_data_len));
257 ND_PRINT(" SeqNo %u,", GET_BE_U_4(ch->rip_seq_num));
258 ND_PRINT(" MBZ %u,", GET_BE_U_4(ch->rip_mbz1));
259 ND_PRINT(" MBZ %u", GET_BE_U_4(ch->rip_mbz2));
260 } else if (auth_type == 1) {
261 ND_PRINT("\n\t Auth trailer:");
262 print_unknown_data(ndo, p, "\n\t ", remaining);
263 return (sizeof(*eh) + remaining); /* AT spans till the packet end */
264 } else {
265 ND_PRINT("\n\t Unknown (%u) Authentication data:",
266 auth_type);
267 print_unknown_data(ndo, p, "\n\t ", remaining);
268 return (sizeof(*eh) + remaining); /* we don't know how long this is, so we go to the packet end */
269 }
270 } else if (family != BSD_AFNUM_INET && family != 0) {
271 ND_PRINT("\n\t AFI %s", tok2str(bsd_af_values, "Unknown (%u)", family));
272 print_unknown_data(ndo, p + sizeof(*eh), "\n\t ", RIP_ROUTELEN - sizeof(*eh));
273 } else { /* BSD_AFNUM_INET or AFI 0 */
274 ni = (const struct rip_netinfo_v2 *)p;
275 ND_LCHECKMSG_ZU(remaining, sizeof(*ni), "remaining data length");
276 ND_PRINT("\n\t AFI %s, %15s/%-2d, tag 0x%04x, metric: %u, next-hop: ",
277 tok2str(bsd_af_values, "%u", family),
278 GET_IPADDR_STRING(ni->rip_dest),
279 mask2plen(GET_BE_U_4(ni->rip_dest_mask)),
280 GET_BE_U_2(ni->rip_tag),
281 GET_BE_U_4(ni->rip_metric));
282 if (GET_BE_U_4(ni->rip_router))
283 ND_PRINT("%s", GET_IPADDR_STRING(ni->rip_router));
284 else
285 ND_PRINT("self");
286 }
287 return (RIP_ROUTELEN);
288 invalid:
289 return 0;
290 }
291
292 void
293 rip_print(netdissect_options *ndo,
294 const u_char *p, u_int len)
295 {
296 const struct rip *rp;
297 uint8_t vers, cmd;
298 unsigned entry_size;
299
300 ndo->ndo_protocol = "rip";
301 ND_LCHECKMSG_ZU(len, sizeof(*rp), "packet length");
302
303 rp = (const struct rip *)p;
304
305 vers = GET_U_1(rp->rip_vers);
306 ND_PRINT("%sRIPv%u",
307 (ndo->ndo_vflag >= 1) ? "\n\t" : "",
308 vers);
309
310 /* dump version and lets see if we know the commands name*/
311 cmd = GET_U_1(rp->rip_cmd);
312 ND_PRINT(", %s, length: %u",
313 tok2str(rip_cmd_values, "unknown command (%u)", cmd),
314 len);
315
316 ND_TCHECK_SIZE(rp);
317 if (ndo->ndo_vflag < 1)
318 return;
319 p += sizeof(*rp);
320 len -= sizeof(*rp);
321
322 switch (cmd) {
323
324 case RIPCMD_REQUEST:
325 case RIPCMD_RESPONSE:
326 switch (vers) {
327
328 case 1:
329 ND_PRINT(", routes: %u", len / RIP_ROUTELEN);
330 while (len != 0) {
331 entry_size = rip_entry_print_v1(ndo, p, len);
332 if (entry_size == 0) {
333 /* Error */
334 goto invalid;
335 }
336 ND_LCHECKMSG_U(len, entry_size, "remaining entries length");
337 p += entry_size;
338 len -= entry_size;
339 }
340 break;
341
342 case 2:
343 ND_PRINT(", routes: %u or less", len / RIP_ROUTELEN);
344 while (len != 0) {
345 entry_size = rip_entry_print_v2(ndo, p, len);
346 if (entry_size == 0) {
347 /* Error */
348 goto invalid;
349 }
350 ND_LCHECKMSG_U(len, entry_size, "remaining entries length");
351 p += entry_size;
352 len -= entry_size;
353 }
354 break;
355
356 default:
357 ND_PRINT(", unknown version");
358 break;
359 }
360 break;
361
362 case RIPCMD_TRACEON:
363 case RIPCMD_TRACEOFF:
364 case RIPCMD_TRIGREQ:
365 case RIPCMD_TRIGRESP:
366 case RIPCMD_TRIGACK:
367 case RIPCMD_UPDREQ:
368 case RIPCMD_UPDRESP:
369 case RIPCMD_UPDACK:
370 break;
371
372 default:
373 if (ndo->ndo_vflag <= 1) {
374 if (!print_unknown_data(ndo, p, "\n\t", len))
375 return;
376 }
377 break;
378 }
379 /* do we want to see an additionally hexdump ? */
380 if (ndo->ndo_vflag> 1) {
381 if (!print_unknown_data(ndo, p, "\n\t", len))
382 return;
383 }
384 return;
385 invalid:
386 nd_print_invalid(ndo);
387 ND_TCHECK_LEN(p, len);
388 }