]> The Tcpdump Group git mirrors - tcpdump/blob - print-dhcp6.c
projects / tcpdump / blob
summary | shortlog | log | commit | commitdiff | tree
history | raw | HEAD
ntp: always make sure the entire extension field is in the capture.
[tcpdump] / print-dhcp6.c
1 /*
2 * Copyright (C) 1998 and 1999 WIDE Project.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of the project nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 */
29
30 /* \summary: IPv6 DHCP printer */
31
32 /*
33 * RFC3315: DHCPv6
34 * supported DHCPv6 options:
35 * RFC3319: Session Initiation Protocol (SIP) Servers options,
36 * RFC3633: IPv6 Prefix options,
37 * RFC3646: DNS Configuration options,
38 * RFC3898: Network Information Service (NIS) Configuration options,
39 * RFC4075: Simple Network Time Protocol (SNTP) Configuration option,
40 * RFC4242: Information Refresh Time option,
41 * RFC4280: Broadcast and Multicast Control Servers options,
42 * RFC5908: Network Time Protocol (NTP) Server Option for DHCPv6
43 * RFC6334: Dual-Stack Lite option,
44 */
45
46 #ifdef HAVE_CONFIG_H
47 #include <config.h>
48 #endif
49
50 #include "netdissect-stdinc.h"
51
52 #include "netdissect.h"
53 #include "addrtoname.h"
54 #include "extract.h"
55
56 /* lease duration */
57 #define DHCP6_DURATION_INFINITE 0xffffffff
58
59 /* Error Values */
60 #define DH6ERR_FAILURE 16
61 #define DH6ERR_AUTHFAIL 17
62 #define DH6ERR_POORLYFORMED 18
63 #define DH6ERR_UNAVAIL 19
64 #define DH6ERR_OPTUNAVAIL 20
65
66 /* Message type */
67 #define DH6_SOLICIT 1
68 #define DH6_ADVERTISE 2
69 #define DH6_REQUEST 3
70 #define DH6_CONFIRM 4
71 #define DH6_RENEW 5
72 #define DH6_REBIND 6
73 #define DH6_REPLY 7
74 #define DH6_RELEASE 8
75 #define DH6_DECLINE 9
76 #define DH6_RECONFIGURE 10
77 #define DH6_INFORM_REQ 11
78 #define DH6_RELAY_FORW 12
79 #define DH6_RELAY_REPLY 13
80 #define DH6_LEASEQUERY 14
81 #define DH6_LQ_REPLY 15
82
83 static const struct tok dh6_msgtype_str[] = {
84 { DH6_SOLICIT, "solicit" },
85 { DH6_ADVERTISE, "advertise" },
86 { DH6_REQUEST, "request" },
87 { DH6_CONFIRM, "confirm" },
88 { DH6_RENEW, "renew" },
89 { DH6_REBIND, "rebind" },
90 { DH6_REPLY, "reply" },
91 { DH6_RELEASE, "release" },
92 { DH6_DECLINE, "decline" },
93 { DH6_RECONFIGURE, "reconfigure" },
94 { DH6_INFORM_REQ, "inf-req" },
95 { DH6_RELAY_FORW, "relay-fwd" },
96 { DH6_RELAY_REPLY, "relay-reply" },
97 { DH6_LEASEQUERY, "leasequery" },
98 { DH6_LQ_REPLY, "leasequery-reply" },
99 { 0, NULL }
100 };
101
102 /* DHCP6 base packet format */
103 struct dhcp6 {
104 union {
105 nd_uint8_t msgtype;
106 nd_uint32_t xid;
107 } dh6_msgtypexid;
108 /* options follow */
109 };
110 #define DH6_XIDMASK 0x00ffffff
111
112 /* DHCPv6 relay messages */
113 struct dhcp6_relay {
114 nd_uint8_t dh6relay_msgtype;
115 nd_uint8_t dh6relay_hcnt;
116 nd_ipv6 dh6relay_linkaddr; /* XXX: badly aligned */
117 nd_ipv6 dh6relay_peeraddr;
118 /* options follow */
119 };
120
121 /* options */
122 #define DH6OPT_CLIENTID 1
123 #define DH6OPT_SERVERID 2
124 # define DUID_LLT 1 /* RFC8415 */
125 # define DUID_EN 2 /* RFC8415 */
126 # define DUID_LL 3 /* RFC8415 */
127 # define DUID_UUID 4 /* RFC6355 */
128 #define DH6OPT_IA_NA 3
129 #define DH6OPT_IA_TA 4
130 #define DH6OPT_IA_ADDR 5
131 #define DH6OPT_ORO 6
132 #define DH6OPT_PREFERENCE 7
133 # define DH6OPT_PREF_MAX 255
134 #define DH6OPT_ELAPSED_TIME 8
135 #define DH6OPT_RELAY_MSG 9
136 /*#define DH6OPT_SERVER_MSG 10 deprecated */
137 #define DH6OPT_AUTH 11
138 # define DH6OPT_AUTHPROTO_DELAYED 2
139 # define DH6OPT_AUTHPROTO_RECONFIG 3
140 # define DH6OPT_AUTHALG_HMACMD5 1
141 # define DH6OPT_AUTHRDM_MONOCOUNTER 0
142 # define DH6OPT_AUTHRECONFIG_KEY 1
143 # define DH6OPT_AUTHRECONFIG_HMACMD5 2
144 #define DH6OPT_UNICAST 12
145 #define DH6OPT_STATUS_CODE 13
146 # define DH6OPT_STCODE_SUCCESS 0
147 # define DH6OPT_STCODE_UNSPECFAIL 1
148 # define DH6OPT_STCODE_NOADDRAVAIL 2
149 # define DH6OPT_STCODE_NOBINDING 3
150 # define DH6OPT_STCODE_NOTONLINK 4
151 # define DH6OPT_STCODE_USEMULTICAST 5
152 # define DH6OPT_STCODE_NOPREFIXAVAIL 6
153 # define DH6OPT_STCODE_UNKNOWNQUERYTYPE 7
154 # define DH6OPT_STCODE_MALFORMEDQUERY 8
155 # define DH6OPT_STCODE_NOTCONFIGURED 9
156 # define DH6OPT_STCODE_NOTALLOWED 10
157 #define DH6OPT_RAPID_COMMIT 14
158 #define DH6OPT_USER_CLASS 15
159 #define DH6OPT_VENDOR_CLASS 16
160 #define DH6OPT_VENDOR_OPTS 17
161 #define DH6OPT_INTERFACE_ID 18
162 #define DH6OPT_RECONF_MSG 19
163 #define DH6OPT_RECONF_ACCEPT 20
164 #define DH6OPT_SIP_SERVER_D 21
165 #define DH6OPT_SIP_SERVER_A 22
166 #define DH6OPT_DNS_SERVERS 23
167 #define DH6OPT_DOMAIN_LIST 24
168 #define DH6OPT_IA_PD 25
169 #define DH6OPT_IA_PD_PREFIX 26
170 #define DH6OPT_NIS_SERVERS 27
171 #define DH6OPT_NISP_SERVERS 28
172 #define DH6OPT_NIS_NAME 29
173 #define DH6OPT_NISP_NAME 30
174 #define DH6OPT_SNTP_SERVERS 31
175 #define DH6OPT_LIFETIME 32
176 #define DH6OPT_BCMCS_SERVER_D 33
177 #define DH6OPT_BCMCS_SERVER_A 34
178 #define DH6OPT_GEOCONF_CIVIC 36
179 #define DH6OPT_REMOTE_ID 37
180 #define DH6OPT_SUBSCRIBER_ID 38
181 #define DH6OPT_CLIENT_FQDN 39
182 #define DH6OPT_PANA_AGENT 40
183 #define DH6OPT_NEW_POSIX_TIMEZONE 41
184 #define DH6OPT_NEW_TZDB_TIMEZONE 42
185 #define DH6OPT_ERO 43
186 #define DH6OPT_LQ_QUERY 44
187 #define DH6OPT_CLIENT_DATA 45
188 #define DH6OPT_CLT_TIME 46
189 #define DH6OPT_LQ_RELAY_DATA 47
190 #define DH6OPT_LQ_CLIENT_LINK 48
191 #define DH6OPT_NTP_SERVER 56
192 # define DH6OPT_NTP_SUBOPTION_SRV_ADDR 1
193 # define DH6OPT_NTP_SUBOPTION_MC_ADDR 2
194 # define DH6OPT_NTP_SUBOPTION_SRV_FQDN 3
195 #define DH6OPT_BOOTFILE_URL 59 /* RFC5970 */
196 #define DH6OPT_AFTR_NAME 64
197 #define DH6OPT_MUDURL 112
198 #define DH6OPT_SZTP_REDIRECT 136 /* RFC8572 */
199
200 static const struct tok dh6opt_str[] = {
201 { DH6OPT_CLIENTID, "client-ID" },
202 { DH6OPT_SERVERID, "server-ID" },
203 { DH6OPT_IA_NA, "IA_NA" },
204 { DH6OPT_IA_TA, "IA_TA" },
205 { DH6OPT_IA_ADDR, "IA_ADDR" },
206 { DH6OPT_ORO, "option-request" },
207 { DH6OPT_PREFERENCE, "preference" },
208 { DH6OPT_ELAPSED_TIME, "elapsed-time" },
209 { DH6OPT_RELAY_MSG, "relay-message" },
210 { DH6OPT_AUTH, "authentication" },
211 { DH6OPT_UNICAST, "server-unicast" },
212 { DH6OPT_STATUS_CODE, "status-code" },
213 { DH6OPT_RAPID_COMMIT, "rapid-commit" },
214 { DH6OPT_USER_CLASS, "user-class" },
215 { DH6OPT_VENDOR_CLASS, "vendor-class" },
216 { DH6OPT_VENDOR_OPTS, "vendor-specific-info" },
217 { DH6OPT_INTERFACE_ID, "interface-ID" },
218 { DH6OPT_RECONF_MSG, "reconfigure-message" },
219 { DH6OPT_RECONF_ACCEPT, "reconfigure-accept" },
220 { DH6OPT_SIP_SERVER_D, "SIP-servers-domain" },
221 { DH6OPT_SIP_SERVER_A, "SIP-servers-address" },
222 { DH6OPT_DNS_SERVERS, "DNS-server" },
223 { DH6OPT_DOMAIN_LIST, "DNS-search-list" },
224 { DH6OPT_IA_PD, "IA_PD" },
225 { DH6OPT_IA_PD_PREFIX, "IA_PD-prefix" },
226 { DH6OPT_SNTP_SERVERS, "SNTP-servers" },
227 { DH6OPT_LIFETIME, "lifetime" },
228 { DH6OPT_NIS_SERVERS, "NIS-server" },
229 { DH6OPT_NISP_SERVERS, "NIS+-server" },
230 { DH6OPT_NIS_NAME, "NIS-domain-name" },
231 { DH6OPT_NISP_NAME, "NIS+-domain-name" },
232 { DH6OPT_BCMCS_SERVER_D, "BCMCS-domain-name" },
233 { DH6OPT_BCMCS_SERVER_A, "BCMCS-server" },
234 { DH6OPT_GEOCONF_CIVIC, "Geoconf-Civic" },
235 { DH6OPT_REMOTE_ID, "Remote-ID" },
236 { DH6OPT_SUBSCRIBER_ID, "Subscriber-ID" },
237 { DH6OPT_CLIENT_FQDN, "Client-FQDN" },
238 { DH6OPT_PANA_AGENT, "PANA-agent" },
239 { DH6OPT_NEW_POSIX_TIMEZONE, "POSIX-timezone" },
240 { DH6OPT_NEW_TZDB_TIMEZONE, "POSIX-tz-database" },
241 { DH6OPT_ERO, "Echo-request-option" },
242 { DH6OPT_LQ_QUERY, "Lease-query" },
243 { DH6OPT_CLIENT_DATA, "LQ-client-data" },
244 { DH6OPT_CLT_TIME, "Clt-time" },
245 { DH6OPT_LQ_RELAY_DATA, "LQ-relay-data" },
246 { DH6OPT_LQ_CLIENT_LINK, "LQ-client-link" },
247 { DH6OPT_NTP_SERVER, "NTP-server" },
248 { DH6OPT_BOOTFILE_URL, "Bootfile-URL" },
249 { DH6OPT_AFTR_NAME, "AFTR-Name" },
250 { DH6OPT_MUDURL, "MUD-URL" },
251 { DH6OPT_SZTP_REDIRECT, "SZTP-redirect" },
252 { 0, NULL }
253 };
254
255 static const struct tok dh6opt_stcode_str[] = {
256 { DH6OPT_STCODE_SUCCESS, "Success" }, /* RFC3315 */
257 { DH6OPT_STCODE_UNSPECFAIL, "UnspecFail" }, /* RFC3315 */
258 { DH6OPT_STCODE_NOADDRAVAIL, "NoAddrsAvail" }, /* RFC3315 */
259 { DH6OPT_STCODE_NOBINDING, "NoBinding" }, /* RFC3315 */
260 { DH6OPT_STCODE_NOTONLINK, "NotOnLink" }, /* RFC3315 */
261 { DH6OPT_STCODE_USEMULTICAST, "UseMulticast" }, /* RFC3315 */
262 { DH6OPT_STCODE_NOPREFIXAVAIL, "NoPrefixAvail" }, /* RFC3633 */
263 { DH6OPT_STCODE_UNKNOWNQUERYTYPE, "UnknownQueryType" }, /* RFC5007 */
264 { DH6OPT_STCODE_MALFORMEDQUERY, "MalformedQuery" }, /* RFC5007 */
265 { DH6OPT_STCODE_NOTCONFIGURED, "NotConfigured" }, /* RFC5007 */
266 { DH6OPT_STCODE_NOTALLOWED, "NotAllowed" }, /* RFC5007 */
267 { 0, NULL }
268 };
269
270 struct dhcp6opt {
271 nd_uint16_t dh6opt_type;
272 nd_uint16_t dh6opt_len;
273 /* type-dependent data follows */
274 };
275
276 static const char *
277 dhcp6stcode(const uint16_t code)
278 {
279 return code > 255 ? "INVALID code" : tok2str(dh6opt_stcode_str, "code%u", code);
280 }
281
282 static void
283 dhcp6opt_print(netdissect_options *ndo,
284 const u_char *cp, const u_char *ep)
285 {
286 const struct dhcp6opt *dh6o;
287 const u_char *tp;
288 u_int i;
289 uint16_t opttype;
290 u_int optlen;
291 uint8_t auth_proto;
292 uint8_t auth_alg;
293 uint8_t auth_rdm;
294 u_int authinfolen, authrealmlen;
295 u_int remain_len; /* Length of remaining options */
296 u_int label_len; /* Label length */
297 uint16_t subopt_code;
298 uint16_t subopt_len;
299 uint8_t dh6_reconf_type;
300 uint8_t dh6_lq_query_type;
301 u_int first_list_value;
302 u_int max_char;
303
304 if (cp == ep)
305 return;
306 while (cp < ep) {
307 if (ep < cp + sizeof(*dh6o))
308 goto trunc;
309 dh6o = (const struct dhcp6opt *)cp;
310 ND_TCHECK_SIZE(dh6o);
311 optlen = GET_BE_U_2(dh6o->dh6opt_len);
312 if (ep < cp + sizeof(*dh6o) + optlen)
313 goto trunc;
314 opttype = GET_BE_U_2(dh6o->dh6opt_type);
315 ND_PRINT(" (%s", tok2str(dh6opt_str, "opt_%u", opttype));
316 ND_TCHECK_LEN(cp + sizeof(*dh6o), optlen);
317 switch (opttype) {
318 case DH6OPT_CLIENTID:
319 case DH6OPT_SERVERID:
320 if (optlen < 2) {
321 /*(*/
322 ND_PRINT(" ?)");
323 break;
324 }
325 tp = (const u_char *)(dh6o + 1);
326 switch (GET_BE_U_2(tp)) {
327 case DUID_LLT:
328 if (optlen >= 2 + 6) {
329 ND_PRINT(" hwaddr/time type %u time %u ",
330 GET_BE_U_2(tp + 2),
331 GET_BE_U_4(tp + 4));
332 for (i = 8; i < optlen; i++)
333 ND_PRINT("%02x",
334 GET_U_1(tp + i));
335 /*(*/
336 ND_PRINT(")");
337 } else {
338 /*(*/
339 ND_PRINT(" ?)");
340 }
341 break;
342 case DUID_EN:
343 if (optlen >= 2 + 4) {
344 ND_PRINT(" enterprise %u ", GET_BE_U_4(tp + 2));
345 for (i = 2 + 4; i < optlen; i++)
346 ND_PRINT("%02x",
347 GET_U_1(tp + i));
348 /*(*/
349 ND_PRINT(")");
350 } else {
351 /*(*/
352 ND_PRINT(" ?)");
353 }
354 break;
355 case DUID_LL:
356 if (optlen >= 2 + 2) {
357 ND_PRINT(" hwaddr type %u ",
358 GET_BE_U_2(tp + 2));
359 for (i = 4; i < optlen; i++)
360 ND_PRINT("%02x",
361 GET_U_1(tp + i));
362 /*(*/
363 ND_PRINT(")");
364 } else {
365 /*(*/
366 ND_PRINT(" ?)");
367 }
368 break;
369 case DUID_UUID:
370 ND_PRINT(" uuid ");
371 if (optlen == 2 + 16) {
372 for (i = 2; i < optlen; i++)
373 ND_PRINT("%02x",
374 GET_U_1(tp + i));
375 /*(*/
376 ND_PRINT(")");
377 } else {
378 /*(*/
379 ND_PRINT(" ?)");
380 }
381 break;
382 default:
383 ND_PRINT(" type %u)", GET_BE_U_2(tp));
384 break;
385 }
386 break;
387 case DH6OPT_IA_ADDR:
388 if (optlen < 24) {
389 /*(*/
390 ND_PRINT(" ?)");
391 break;
392 }
393 tp = (const u_char *)(dh6o + 1);
394 ND_PRINT(" %s", GET_IP6ADDR_STRING(tp));
395 ND_PRINT(" pltime:%u vltime:%u",
396 GET_BE_U_4(tp + 16),
397 GET_BE_U_4(tp + 20));
398 if (optlen > 24) {
399 /* there are sub-options */
400 dhcp6opt_print(ndo, tp + 24, tp + optlen);
401 }
402 ND_PRINT(")");
403 break;
404 case DH6OPT_ORO:
405 case DH6OPT_ERO:
406 if (optlen % 2) {
407 ND_PRINT(" ?)");
408 break;
409 }
410 tp = (const u_char *)(dh6o + 1);
411 for (i = 0; i < optlen; i += 2) {
412 ND_PRINT(" %s",
413 tok2str(dh6opt_str, "opt_%u", GET_BE_U_2(tp + i)));
414 }
415 ND_PRINT(")");
416 break;
417 case DH6OPT_PREFERENCE:
418 if (optlen != 1) {
419 ND_PRINT(" ?)");
420 break;
421 }
422 tp = (const u_char *)(dh6o + 1);
423 ND_PRINT(" %u)", GET_U_1(tp));
424 break;
425 case DH6OPT_ELAPSED_TIME:
426 if (optlen != 2) {
427 ND_PRINT(" ?)");
428 break;
429 }
430 tp = (const u_char *)(dh6o + 1);
431 ND_PRINT(" %u)", GET_BE_U_2(tp));
432 break;
433 case DH6OPT_RELAY_MSG:
434 {
435 const u_char *snapend_save;
436
437 ND_PRINT(" (");
438 tp = (const u_char *)(dh6o + 1);
439 /*
440 * Update the snapend to the end of the option before
441 * calling recursively dhcp6_print() for the nested
442 * packet. Other options may be present after the
443 * nested DHCPv6 packet. This prevents that, in
444 * dhcp6_print(), for the nested DHCPv6 packet, the
445 * remaining length < remaining caplen.
446 */
447 snapend_save = ndo->ndo_snapend;
448 ndo->ndo_snapend = ND_MIN(tp + optlen, ndo->ndo_snapend);
449 dhcp6_print(ndo, tp, optlen);
450 ndo->ndo_snapend = snapend_save;
451 ND_PRINT(")");
452 break;
453 }
454 case DH6OPT_AUTH:
455 if (optlen < 11) {
456 ND_PRINT(" ?)");
457 break;
458 }
459 tp = (const u_char *)(dh6o + 1);
460 auth_proto = GET_U_1(tp);
461 switch (auth_proto) {
462 case DH6OPT_AUTHPROTO_DELAYED:
463 ND_PRINT(" proto: delayed");
464 break;
465 case DH6OPT_AUTHPROTO_RECONFIG:
466 ND_PRINT(" proto: reconfigure");
467 break;
468 default:
469 ND_PRINT(" proto: %u", auth_proto);
470 break;
471 }
472 tp++;
473 auth_alg = GET_U_1(tp);
474 switch (auth_alg) {
475 case DH6OPT_AUTHALG_HMACMD5:
476 /* XXX: may depend on the protocol */
477 ND_PRINT(", alg: HMAC-MD5");
478 break;
479 default:
480 ND_PRINT(", alg: %u", auth_alg);
481 break;
482 }
483 tp++;
484 auth_rdm = GET_U_1(tp);
485 switch (auth_rdm) {
486 case DH6OPT_AUTHRDM_MONOCOUNTER:
487 ND_PRINT(", RDM: mono");
488 break;
489 default:
490 ND_PRINT(", RDM: %u", auth_rdm);
491 break;
492 }
493 tp++;
494 ND_PRINT(", RD:");
495 for (i = 0; i < 4; i++, tp += 2)
496 ND_PRINT(" %04x", GET_BE_U_2(tp));
497
498 /* protocol dependent part */
499 authinfolen = optlen - 11;
500 switch (auth_proto) {
501 case DH6OPT_AUTHPROTO_DELAYED:
502 if (authinfolen == 0)
503 break;
504 if (authinfolen < 20) {
505 ND_PRINT(" ??");
506 break;
507 }
508 authrealmlen = authinfolen - 20;
509 if (authrealmlen > 0) {
510 ND_PRINT(", realm: ");
511 }
512 for (i = 0; i < authrealmlen; i++, tp++)
513 ND_PRINT("%02x", GET_U_1(tp));
514 ND_PRINT(", key ID: %08x", GET_BE_U_4(tp));
515 tp += 4;
516 ND_PRINT(", HMAC-MD5:");
517 for (i = 0; i < 4; i++, tp+= 4)
518 ND_PRINT(" %08x", GET_BE_U_4(tp));
519 break;
520 case DH6OPT_AUTHPROTO_RECONFIG:
521 if (authinfolen != 17) {
522 ND_PRINT(" ??");
523 break;
524 }
525 switch (GET_U_1(tp)) {
526 case DH6OPT_AUTHRECONFIG_KEY:
527 ND_PRINT(" reconfig-key");
528 break;
529 case DH6OPT_AUTHRECONFIG_HMACMD5:
530 ND_PRINT(" type: HMAC-MD5");
531 break;
532 default:
533 ND_PRINT(" type: ??");
534 break;
535 }
536 tp++;
537 ND_PRINT(" value:");
538 for (i = 0; i < 4; i++, tp+= 4)
539 ND_PRINT(" %08x", GET_BE_U_4(tp));
540 break;
541 default:
542 ND_PRINT(" ??");
543 break;
544 }
545
546 ND_PRINT(")");
547 break;
548 case DH6OPT_RAPID_COMMIT: /* nothing todo */
549 ND_PRINT(")");
550 break;
551 case DH6OPT_INTERFACE_ID:
552 case DH6OPT_SUBSCRIBER_ID:
553 tp = (const u_char *)(dh6o + 1);
554 ND_PRINT(" ");
555 /*
556 * if ndo_vflag < 2, print hex dump up to 10 characters.
557 */
558 if (ndo->ndo_vflag < 2)
559 max_char = ND_MIN(optlen, 10);
560 else
561 max_char = optlen;
562 for (i = 0; i < max_char; i++)
563 ND_PRINT("%02x", GET_U_1(tp + i));
564 if (i < optlen)
565 ND_PRINT("...");
566 ND_PRINT(")");
567 break;
568 case DH6OPT_RECONF_MSG:
569 if (optlen != 1) {
570 ND_PRINT(" ?)");
571 break;
572 }
573 tp = (const u_char *)(dh6o + 1);
574 dh6_reconf_type = GET_U_1(tp);
575 switch (dh6_reconf_type) {
576 case DH6_RENEW:
577 ND_PRINT(" for renew)");
578 break;
579 case DH6_INFORM_REQ:
580 ND_PRINT(" for inf-req)");
581 break;
582 default:
583 ND_PRINT(" for ?\?\?(%02x))", dh6_reconf_type);
584 break;
585 }
586 break;
587 case DH6OPT_RECONF_ACCEPT: /* nothing todo */
588 ND_PRINT(")");
589 break;
590 case DH6OPT_SIP_SERVER_A:
591 case DH6OPT_DNS_SERVERS:
592 case DH6OPT_SNTP_SERVERS:
593 case DH6OPT_NIS_SERVERS:
594 case DH6OPT_NISP_SERVERS:
595 case DH6OPT_BCMCS_SERVER_A:
596 case DH6OPT_PANA_AGENT:
597 case DH6OPT_LQ_CLIENT_LINK:
598 if (optlen % 16) {
599 ND_PRINT(" ?)");
600 break;
601 }
602 tp = (const u_char *)(dh6o + 1);
603 for (i = 0; i < optlen; i += 16)
604 ND_PRINT(" %s", GET_IP6ADDR_STRING(tp + i));
605 ND_PRINT(")");
606 break;
607 case DH6OPT_SIP_SERVER_D:
608 case DH6OPT_DOMAIN_LIST:
609 tp = (const u_char *)(dh6o + 1);
610 while (tp < cp + sizeof(*dh6o) + optlen) {
611 ND_PRINT(" ");
612 if ((tp = fqdn_print(ndo, tp, cp + sizeof(*dh6o) + optlen)) == NULL)
613 goto trunc;
614 }
615 ND_PRINT(")");
616 break;
617 case DH6OPT_STATUS_CODE:
618 if (optlen < 2) {
619 ND_PRINT(" ?)");
620 break;
621 }
622 tp = (const u_char *)(dh6o + 1);
623 ND_PRINT(" %s)", dhcp6stcode(GET_BE_U_2(tp)));
624 break;
625 case DH6OPT_IA_NA:
626 case DH6OPT_IA_PD:
627 if (optlen < 12) {
628 ND_PRINT(" ?)");
629 break;
630 }
631 tp = (const u_char *)(dh6o + 1);
632 ND_PRINT(" IAID:%u T1:%u T2:%u",
633 GET_BE_U_4(tp),
634 GET_BE_U_4(tp + 4),
635 GET_BE_U_4(tp + 8));
636 if (optlen > 12) {
637 /* there are sub-options */
638 dhcp6opt_print(ndo, tp + 12, tp + optlen);
639 }
640 ND_PRINT(")");
641 break;
642 case DH6OPT_IA_TA:
643 if (optlen < 4) {
644 ND_PRINT(" ?)");
645 break;
646 }
647 tp = (const u_char *)(dh6o + 1);
648 ND_PRINT(" IAID:%u", GET_BE_U_4(tp));
649 if (optlen > 4) {
650 /* there are sub-options */
651 dhcp6opt_print(ndo, tp + 4, tp + optlen);
652 }
653 ND_PRINT(")");
654 break;
655 case DH6OPT_IA_PD_PREFIX:
656 if (optlen < 25) {
657 ND_PRINT(" ?)");
658 break;
659 }
660 tp = (const u_char *)(dh6o + 1);
661 ND_PRINT(" %s/%u", GET_IP6ADDR_STRING(tp + 9),
662 GET_U_1(tp + 8));
663 ND_PRINT(" pltime:%u vltime:%u",
664 GET_BE_U_4(tp),
665 GET_BE_U_4(tp + 4));
666 if (optlen > 25) {
667 /* there are sub-options */
668 dhcp6opt_print(ndo, tp + 25, tp + optlen);
669 }
670 ND_PRINT(")");
671 break;
672 case DH6OPT_LIFETIME:
673 case DH6OPT_CLT_TIME:
674 if (optlen != 4) {
675 ND_PRINT(" ?)");
676 break;
677 }
678 tp = (const u_char *)(dh6o + 1);
679 ND_PRINT(" %u)", GET_BE_U_4(tp));
680 break;
681 case DH6OPT_REMOTE_ID:
682 if (optlen < 4) {
683 ND_PRINT(" ?)");
684 break;
685 }
686 tp = (const u_char *)(dh6o + 1);
687 ND_PRINT(" enterprise %u ", GET_BE_U_4(tp));
688 tp += 4;
689 /*
690 * if ndo_vflag < 2, print hex dump up to 10 characters.
691 */
692 if (ndo->ndo_vflag < 2)
693 max_char = ND_MIN(optlen - 4, 10);
694 else
695 max_char = optlen - 4;
696 for (i = 0; i < max_char; i++)
697 ND_PRINT("%02x", GET_U_1(tp + i));
698 if (i < optlen - 4)
699 ND_PRINT("...");
700 ND_PRINT(")");
701 break;
702 case DH6OPT_LQ_QUERY:
703 if (optlen < 17) {
704 ND_PRINT(" ?)");
705 break;
706 }
707 tp = (const u_char *)(dh6o + 1);
708 dh6_lq_query_type = GET_U_1(tp);
709 switch (dh6_lq_query_type) {
710 case 1:
711 ND_PRINT(" by-address");
712 break;
713 case 2:
714 ND_PRINT(" by-clientID");
715 break;
716 default:
717 ND_PRINT(" type_%u", dh6_lq_query_type);
718 break;
719 }
720 ND_PRINT(" %s", GET_IP6ADDR_STRING(tp + 1));
721 if (optlen > 17) {
722 /* there are query-options */
723 dhcp6opt_print(ndo, tp + 17, tp + optlen);
724 }
725 ND_PRINT(")");
726 break;
727 case DH6OPT_CLIENT_DATA:
728 tp = (const u_char *)(dh6o + 1);
729 if (optlen > 0) {
730 /* there are encapsulated options */
731 dhcp6opt_print(ndo, tp, tp + optlen);
732 }
733 ND_PRINT(")");
734 break;
735 case DH6OPT_LQ_RELAY_DATA:
736 if (optlen < 16) {
737 ND_PRINT(" ?)");
738 break;
739 }
740 tp = (const u_char *)(dh6o + 1);
741 ND_PRINT(" %s ", GET_IP6ADDR_STRING(tp));
742 tp += 16;
743 /*
744 * if ndo_vflag < 2, print hex dump up to 10 characters.
745 */
746 if (ndo->ndo_vflag < 2)
747 max_char = ND_MIN(optlen - 16, 10);
748 else
749 max_char = optlen - 16;
750 for (i = 0; i < max_char; i++)
751 ND_PRINT("%02x", GET_U_1(tp + i));
752 if (i < optlen - 16)
753 ND_PRINT("...");
754 ND_PRINT(")");
755 break;
756 case DH6OPT_NTP_SERVER:
757 if (optlen < 4) {
758 ND_PRINT(" ?)");
759 break;
760 }
761 tp = (const u_char *)(dh6o + 1);
762 while (tp < cp + sizeof(*dh6o) + optlen - 4) {
763 subopt_code = GET_BE_U_2(tp);
764 tp += 2;
765 subopt_len = GET_BE_U_2(tp);
766 tp += 2;
767 if (tp + subopt_len > cp + sizeof(*dh6o) + optlen)
768 goto trunc;
769 ND_PRINT(" subopt:%u", subopt_code);
770 switch (subopt_code) {
771 case DH6OPT_NTP_SUBOPTION_SRV_ADDR:
772 case DH6OPT_NTP_SUBOPTION_MC_ADDR:
773 if (subopt_len != 16) {
774 ND_PRINT(" ?");
775 break;
776 }
777 ND_PRINT(" %s", GET_IP6ADDR_STRING(tp));
778 break;
779 case DH6OPT_NTP_SUBOPTION_SRV_FQDN:
780 ND_PRINT(" ");
781 if (fqdn_print(ndo, tp, tp + subopt_len) == NULL)
782 goto trunc;
783 break;
784 default:
785 ND_PRINT(" ?");
786 break;
787 }
788 tp += subopt_len;
789 }
790 ND_PRINT(")");
791 break;
792 case DH6OPT_AFTR_NAME:
793 if (optlen < 3) {
794 ND_PRINT(" ?)");
795 break;
796 }
797 tp = (const u_char *)(dh6o + 1);
798 remain_len = optlen;
799 ND_PRINT(" ");
800 /* Encoding is described in section 3.1 of RFC 1035 */
801 while (remain_len && GET_U_1(tp)) {
802 label_len = GET_U_1(tp);
803 tp++;
804 if (label_len < remain_len - 1) {
805 nd_printjnp(ndo, tp, label_len);
806 tp += label_len;
807 remain_len -= (label_len + 1);
808 if (GET_U_1(tp)) ND_PRINT(".");
809 } else {
810 ND_PRINT(" ?");
811 break;
812 }
813 }
814 ND_PRINT(")");
815 break;
816 case DH6OPT_NEW_POSIX_TIMEZONE: /* all three of these options */
817 case DH6OPT_NEW_TZDB_TIMEZONE: /* are encoded similarly */
818 case DH6OPT_MUDURL: /* although GMT might not work */
819 if (optlen < 5) {
820 ND_PRINT(" ?)");
821 break;
822 }
823 tp = (const u_char *)(dh6o + 1);
824 ND_PRINT(" ");
825 nd_printjnp(ndo, tp, optlen);
826 ND_PRINT(")");
827 break;
828
829 case DH6OPT_BOOTFILE_URL:
830 tp = (const u_char *)(dh6o + 1);
831 ND_PRINT(" ");
832 nd_printjn(ndo, tp, optlen);
833 ND_PRINT(")");
834 break;
835
836 case DH6OPT_SZTP_REDIRECT:
837 case DH6OPT_USER_CLASS:
838 ND_PRINT(" ");
839 tp = (const u_char *)(dh6o + 1);
840 first_list_value = TRUE;
841 remain_len = optlen;
842 while (remain_len >= 2) {
843 if (first_list_value == FALSE) {
844 ND_PRINT(",");
845 }
846 first_list_value = FALSE;
847 subopt_len = GET_BE_U_2(tp);
848 if (subopt_len > remain_len - 2) {
849 ND_PRINT(" ?");
850 break;
851 }
852 tp += 2;
853 nd_printjn(ndo, tp, subopt_len);
854 tp += subopt_len;
855 remain_len -= (subopt_len + 2);
856 }
857 if (remain_len != 0)
858 ND_PRINT(" ?");
859 ND_PRINT(")");
860 break;
861
862 case DH6OPT_VENDOR_CLASS:
863 /* RFC 8415 section 21.16 */
864 if (optlen < 4) {
865 ND_PRINT(" ?)");
866 break;
867 }
868 tp = (const u_char *)(dh6o + 1);
869 remain_len = optlen;
870 ND_PRINT(" enterprise %u", GET_BE_U_4(tp));
871 remain_len -= 4;
872 tp += 4;
873 while (remain_len >= 2) {
874 /* there are vendor-class-data */
875 subopt_len = GET_BE_U_2(tp);
876 ND_PRINT(" (len %u", subopt_len);
877 tp += 2;
878 remain_len -= 2;
879 if (subopt_len > remain_len) {
880 ND_PRINT(" ?");
881 break;
882 }
883 if (subopt_len > 0) {
884 ND_PRINT(" data ");
885 nd_printjn(ndo, tp, subopt_len);
886 tp += subopt_len;
887 remain_len -= subopt_len;
888 }
889 ND_PRINT(")");
890 }
891 if (remain_len != 0)
892 ND_PRINT(" ?");
893 ND_PRINT(")");
894 break;
895
896 case DH6OPT_VENDOR_OPTS:
897 /* RFC 8415 section 21.17 */
898 if (optlen < 4) {
899 ND_PRINT(" ?)");
900 break;
901 }
902 tp = (const u_char *)(dh6o + 1);
903 remain_len = optlen;
904 ND_PRINT(" enterprise %u", GET_BE_U_4(tp));
905 remain_len -= 4;
906 tp += 4;
907 while (remain_len >= 4) {
908 /* there are sub-options */
909 ND_PRINT(" (code %u", GET_BE_U_2(tp));
910 tp += 2;
911 subopt_len = GET_BE_U_2(tp);
912 ND_PRINT(" len %u", subopt_len);
913 tp += 2;
914 remain_len -= 4;
915 if (subopt_len > remain_len) {
916 ND_PRINT(" ?");
917 break;
918 }
919 if (subopt_len > 0) {
920 ND_PRINT(" data ");
921 /*
922 * if ndo_vflag < 2, print hex dump up
923 * to 10 characters.
924 */
925 if (ndo->ndo_vflag < 2)
926 max_char = ND_MIN(subopt_len, 10);
927 else
928 max_char = subopt_len;
929 for (i = 0; i < max_char; i++)
930 ND_PRINT("%02x",
931 GET_U_1(tp + i));
932 if (i < subopt_len)
933 ND_PRINT("...");
934 tp += subopt_len;
935 remain_len -= subopt_len;
936 }
937 ND_PRINT(")");
938 }
939 if (remain_len != 0)
940 ND_PRINT(" ?");
941 ND_PRINT(")");
942 break;
943
944 default:
945 ND_PRINT(")");
946 break;
947 }
948
949 cp += sizeof(*dh6o) + optlen;
950 }
951 return;
952
953 trunc:
954 nd_print_trunc(ndo);
955 }
956
957 /*
958 * Print dhcp6 packets
959 */
960 void
961 dhcp6_print(netdissect_options *ndo,
962 const u_char *cp, u_int length)
963 {
964 const struct dhcp6 *dh6;
965 const struct dhcp6_relay *dh6relay;
966 uint8_t msgtype;
967 const u_char *ep;
968 const u_char *extp;
969 const char *name;
970
971 ndo->ndo_protocol = "dhcp6";
972 nd_print_protocol(ndo);
973
974 ep = ndo->ndo_snapend;
975 if (cp + length < ep)
976 ep = cp + length;
977
978 dh6 = (const struct dhcp6 *)cp;
979 dh6relay = (const struct dhcp6_relay *)cp;
980 ND_TCHECK_4(dh6->dh6_msgtypexid.xid);
981 msgtype = GET_U_1(dh6->dh6_msgtypexid.msgtype);
982 name = tok2str(dh6_msgtype_str, "msgtype-%u", msgtype);
983
984 if (!ndo->ndo_vflag) {
985 ND_PRINT(" %s", name);
986 return;
987 }
988
989 /* XXX relay agent messages have to be handled differently */
990
991 ND_PRINT(" %s (", name); /*)*/
992 if (msgtype != DH6_RELAY_FORW && msgtype != DH6_RELAY_REPLY) {
993 ND_PRINT("xid=%x",
994 GET_BE_U_4(dh6->dh6_msgtypexid.xid) & DH6_XIDMASK);
995 extp = (const u_char *)(dh6 + 1);
996 dhcp6opt_print(ndo, extp, ep);
997 } else { /* relay messages */
998 ND_PRINT("linkaddr=%s", GET_IP6ADDR_STRING(dh6relay->dh6relay_linkaddr));
999
1000 ND_PRINT(" peeraddr=%s", GET_IP6ADDR_STRING(dh6relay->dh6relay_peeraddr));
1001
1002 dhcp6opt_print(ndo, (const u_char *)(dh6relay + 1), ep);
1003 }
1004 /*(*/
1005 ND_PRINT(")");
1006 return;
1007
1008 trunc:
1009 nd_print_trunc(ndo);
1010 }
[mirror] the TCPdump network dissector