2 * Copyright (c) 1988-1997
3 * The Regents of the University of California. All rights reserved.
5 * Copyright (c) 1998-2012 Michael Richardson <mcr@tcpdump.org>
8 * Redistribution and use in source and binary forms, with or without
9 * modification, are permitted provided that: (1) source code distributions
10 * retain the above copyright notice and this paragraph in its entirety, (2)
11 * distributions including binary code include the above copyright notice and
12 * this paragraph in its entirety in the documentation or other materials
13 * provided with the distribution, and (3) all advertising materials mentioning
14 * features or use of this software display the following acknowledgement:
15 * ``This product includes software developed by the University of California,
16 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
17 * the University nor the names of its contributors may be used to endorse
18 * or promote products derived from this software without specific prior
20 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
21 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
22 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
28 #ifdef HAVE_OS_PROTO_H
31 #include <sys/types.h>
33 #ifndef HAVE___ATTRIBUTE__
34 #define __attribute__(x)
41 #if !defined(HAVE_SNPRINTF)
42 int snprintf (char *str
, size_t sz
, const char *format
, ...)
43 #ifdef __ATTRIBUTE___FORMAT_OK
44 __attribute__((format (printf
, 3, 4)))
45 #endif /* __ATTRIBUTE___FORMAT_OK */
47 #endif /* !defined(HAVE_SNPRINTF) */
49 #if !defined(HAVE_VSNPRINTF)
50 int vsnprintf (char *str
, size_t sz
, const char *format
, va_list ap
)
51 #ifdef __ATTRIBUTE___FORMAT_OK
52 __attribute__((format (printf
, 3, 0)))
53 #endif /* __ATTRIBUTE___FORMAT_OK */
55 #endif /* !defined(HAVE_SNPRINTF) */
58 extern size_t strlcat (char *, const char *, size_t);
61 extern size_t strlcpy (char *, const char *, size_t);
65 extern char *strdup (const char *str
);
69 extern char *strsep(char **, const char *);
74 const char *s
; /* string */
77 #define TOKBUFSIZE 128
78 extern const char *tok2strbuf(const struct tok
*, const char *, int,
79 char *buf
, size_t bufsize
);
81 /* tok2str is deprecated */
82 extern const char *tok2str(const struct tok
*, const char *, int);
83 extern char *bittok2str(const struct tok
*, const char *, int);
84 extern char *bittok2str_nosep(const struct tok
*, const char *, int);
87 typedef struct netdissect_options netdissect_options
;
89 struct netdissect_options
{
90 int ndo_aflag
; /* translate network and broadcast addresses */
91 int ndo_bflag
; /* print 4 byte ASes in ASDOT notation */
92 int ndo_eflag
; /* print ethernet header */
93 int ndo_fflag
; /* don't translate "foreign" IP address */
94 int ndo_Kflag
; /* don't check TCP checksums */
95 int ndo_nflag
; /* leave addresses as numbers */
96 int ndo_Nflag
; /* remove domains from printed host names */
97 int ndo_qflag
; /* quick (shorter) output */
98 int ndo_Rflag
; /* print sequence # field in AH/ESP*/
99 int ndo_sflag
; /* use the libsmi to translate OIDs */
100 int ndo_Sflag
; /* print raw TCP sequence numbers */
101 int ndo_tflag
; /* print packet arrival time */
102 int ndo_Uflag
; /* "unbuffered" output of dump files */
103 int ndo_uflag
; /* Print undecoded NFS handles */
104 int ndo_vflag
; /* verbose */
105 int ndo_xflag
; /* print packet in hex */
106 int ndo_Xflag
; /* print packet in hex/ascii */
107 int ndo_Aflag
; /* print packet only in ascii observing TAB,
108 * LF, CR and SPACE as graphical chars
110 int ndo_Bflag
; /* buffer size */
111 int ndo_Iflag
; /* rfmon (monitor) mode */
112 int ndo_Oflag
; /* run filter code optimizer */
113 int ndo_dlt
; /* if != -1, ask libpcap for the DLT it names*/
114 int ndo_jflag
; /* packet time stamp source */
115 int ndo_pflag
; /* don't go promiscuous */
117 int ndo_Cflag
; /* rotate dump files after this many bytes */
118 int ndo_Cflag_count
; /* Keep track of which file number we're writing */
119 int ndo_Gflag
; /* rotate dump files after this many seconds */
120 int ndo_Gflag_count
; /* number of files created with Gflag rotation */
121 time_t ndo_Gflag_time
; /* The last time_t the dump file was rotated. */
122 int ndo_Wflag
; /* recycle output files after this number of files */
124 int ndo_Hflag
; /* dissect 802.11s draft mesh standard */
125 int ndo_suppress_default_print
; /* don't use default_print() for unknown packet types */
126 const char *ndo_dltname
;
129 struct sa_list
*ndo_sa_list_head
; /* used by print-esp.c */
130 struct sa_list
*ndo_sa_default
;
132 char *ndo_sigsecret
; /* Signature verification secret key */
134 struct esp_algorithm
*ndo_espsecret_xform
; /* cache of decoded */
135 char *ndo_espsecret_key
;
137 int ndo_packettype
; /* as specified by -T */
139 char *ndo_program_name
; /*used to generate self-identifying messages */
141 int32_t ndo_thiszone
; /* seconds offset from gmt to local time */
145 /*global pointers to beginning and end of current packet (during printing) */
146 const u_char
*ndo_packetp
;
147 const u_char
*ndo_snapend
;
149 /* bookkeeping for ^T output */
152 /* pointer to void function to output stuff */
153 void (*ndo_default_print
)(netdissect_options
*,
154 register const u_char
*bp
, register u_int length
);
155 void (*ndo_info
)(netdissect_options
*, int verbose
);
157 int (*ndo_printf
)(netdissect_options
*,
158 const char *fmt
, ...)
159 #ifdef __ATTRIBUTE___FORMAT_OK_FOR_FUNCTION_POINTERS
160 __attribute__ ((format (printf
, 2, 3)))
163 void (*ndo_error
)(netdissect_options
*,
164 const char *fmt
, ...)
165 #ifdef __ATTRIBUTE___NORETURN_OK_FOR_FUNCTION_POINTERS
166 __attribute__ ((noreturn
))
167 #endif /* __ATTRIBUTE___NORETURN_OK_FOR_FUNCTION_POINTERS */
168 #ifdef __ATTRIBUTE___FORMAT_OK_FOR_FUNCTION_POINTERS
169 __attribute__ ((format (printf
, 2, 3)))
170 #endif /* __ATTRIBUTE___FORMAT_OK_FOR_FUNCTION_POINTERS */
172 void (*ndo_warning
)(netdissect_options
*,
173 const char *fmt
, ...)
174 #ifdef __ATTRIBUTE___FORMAT_OK_FOR_FUNCTION_POINTERS
175 __attribute__ ((format (printf
, 2, 3)))
180 #define PT_VAT 1 /* Visual Audio Tool */
181 #define PT_WB 2 /* distributed White Board */
182 #define PT_RPC 3 /* Remote Procedure Call */
183 #define PT_RTP 4 /* Real-Time Applications protocol */
184 #define PT_RTCP 5 /* Real-Time Applications control protocol */
185 #define PT_SNMP 6 /* Simple Network Management Protocol */
186 #define PT_CNFP 7 /* Cisco NetFlow protocol */
187 #define PT_TFTP 8 /* trivial file transfer protocol */
188 #define PT_AODV 9 /* Ad-hoc On-demand Distance Vector Protocol */
189 #define PT_CARP 10 /* Common Address Redundancy Protocol */
190 #define PT_RADIUS 11 /* RADIUS authentication Protocol */
191 #define PT_ZMTP1 12 /* ZeroMQ Message Transport Protocol 1.0 */
192 #define PT_VXLAN 13 /* Virtual eXtensible Local Area Network */
193 #define PT_PGM 14 /* [UDP-encapsulated] Pragmatic General Multicast */
194 #define PT_PGM_ZMTP1 15 /* ZMTP/1.0 inside PGM (native or UDP-encapsulated) */
195 #define PT_LMP 16 /* Link Management Protocol */
198 #define min(a,b) ((a)>(b)?(b):(a))
201 #define max(a,b) ((b)>(a)?(b):(a))
205 * Maximum snapshot length. This should be enough to capture the full
206 * packet on most network interfaces.
208 * XXX - could it be larger? If so, should it? Some applications might
209 * use the snapshot length in a savefile header to control the size of
210 * the buffer they allocate, so a size of, say, 2^31-1 might not work
213 #define MAXIMUM_SNAPLEN 65535
216 * The default snapshot length is the maximum.
218 #define DEFAULT_SNAPLEN MAXIMUM_SNAPLEN
220 #define ESRC(ep) ((ep)->ether_shost)
221 #define EDST(ep) ((ep)->ether_dhost)
224 #define NTOHL(x) (x) = ntohl(x)
225 #define NTOHS(x) (x) = ntohs(x)
226 #define HTONL(x) (x) = htonl(x)
227 #define HTONS(x) (x) = htons(x)
231 * True if "l" bytes of "var" were captured.
233 * The "ndo->ndo_snapend - (l) <= ndo->ndo_snapend" checks to make sure
234 * "l" isn't so large that "ndo->ndo_snapend - (l)" underflows.
236 * The check is for <= rather than < because "l" might be 0.
238 #define ND_TTEST2(var, l) (ndo->ndo_snapend - (l) <= ndo->ndo_snapend && \
239 (const u_char *)&(var) <= ndo->ndo_snapend - (l))
241 /* True if "var" was captured */
242 #define ND_TTEST(var) ND_TTEST2(var, sizeof(var))
244 /* Bail if "l" bytes of "var" were not captured */
245 #define ND_TCHECK2(var, l) if (!ND_TTEST2(var, l)) goto trunc
247 /* Bail if "var" was not captured */
248 #define ND_TCHECK(var) ND_TCHECK2(var, sizeof(var))
250 #define ND_PRINT(STUFF) (*ndo->ndo_printf)STUFF
251 #define ND_DEFAULTPRINT(ap, length) (*ndo->ndo_default_print)(ndo, ap, length)
254 extern void ts_print(netdissect_options
*ipdo
,
255 const struct timeval
*);
256 extern void relts_print(int);
259 extern int fn_print(const u_char
*, const u_char
*);
260 extern int fn_printn(const u_char
*, u_int
, const u_char
*);
261 extern const char *tok2str(const struct tok
*, const char *, int);
263 extern void wrapup(int);
266 extern char *read_infile(netdissect_options
*, char *);
267 extern char *copy_argv(netdissect_options
*, char **);
270 extern void safeputchar(int);
271 extern void safeputs(const char *, int);
273 #define PLURAL_SUFFIX(n) \
274 (((n) != 1) ? "s" : "")
277 extern const char *isonsap_string(netdissect_options
*, const u_char
*);
278 extern const char *protoid_string(netdissect_options
*, const u_char
*);
279 extern const char *dnname_string(netdissect_options
*, u_short
);
280 extern const char *dnnum_string(netdissect_options
*, u_short
);
283 /* The printer routines. */
287 typedef u_int (*if_ndo_printer
)(struct netdissect_options
*ndo
,
288 const struct pcap_pkthdr
*, const u_char
*);
289 typedef u_int (*if_printer
)(const struct pcap_pkthdr
*, const u_char
*);
291 extern if_ndo_printer
lookup_ndo_printer(int);
292 extern if_printer
lookup_printer(int);
294 extern void eap_print(netdissect_options
*,const u_char
*, u_int
);
295 extern int esp_print(netdissect_options
*,
296 register const u_char
*bp
, int len
, register const u_char
*bp2
,
297 int *nhdr
, int *padlen
);
298 extern void arp_print(netdissect_options
*,const u_char
*, u_int
, u_int
);
299 extern void tipc_print(netdissect_options
*, const u_char
*, u_int
, u_int
);
300 extern void msnlb_print(netdissect_options
*, const u_char
*);
301 extern void icmp6_print(netdissect_options
*ndo
, const u_char
*,
302 u_int
, const u_char
*, int);
303 extern void isakmp_print(netdissect_options
*,const u_char
*,
304 u_int
, const u_char
*);
305 extern void isakmp_rfc3948_print(netdissect_options
*,const u_char
*,
306 u_int
, const u_char
*);
307 extern void ip_print(netdissect_options
*,const u_char
*, u_int
);
308 extern void ip_print_inner(netdissect_options
*ndo
,
309 const u_char
*bp
, u_int length
, u_int nh
,
311 extern void rrcp_print(netdissect_options
*,const u_char
*, u_int
);
312 extern void loopback_print(netdissect_options
*, const u_char
*, u_int
);
314 extern void ether_print(netdissect_options
*,
315 const u_char
*, u_int
, u_int
,
316 void (*)(netdissect_options
*, const u_char
*),
319 extern u_int
ether_if_print(netdissect_options
*,
320 const struct pcap_pkthdr
*,const u_char
*);
321 extern u_int
netanalyzer_if_print(netdissect_options
*,
322 const struct pcap_pkthdr
*,const u_char
*);
323 extern u_int
netanalyzer_transparent_if_print(netdissect_options
*,
324 const struct pcap_pkthdr
*,
327 extern int ethertype_print(netdissect_options
*,u_short
, const u_char
*,
330 extern int print_unknown_data(netdissect_options
*,const u_char
*, const char *,int);
331 extern void hex_print_with_offset(netdissect_options
*, const char *ident
, const u_char
*cp
,
333 extern void hex_print(netdissect_options
*,const char *ident
, const u_char
*cp
,u_int
);
335 /* stuff that has not yet been rototiled */
336 extern const u_char
* ns_nprint (register const u_char
*, register const u_char
*);
339 extern void ascii_print(netdissect_options
*,u_int
);
340 extern void hex_and_ascii_print_with_offset(netdissect_options
*,const char *,
342 extern void hex_and_ascii_print(netdissect_options
*,const char *, u_int
);
343 extern void telnet_print(netdissect_options
*,const u_char
*, u_int
);
344 extern int llc_print(netdissect_options
*,
345 const u_char
*, u_int
, u_int
, const u_char
*,
346 const u_char
*, u_short
*);
347 extern void aarp_print(netdissect_options
*,const u_char
*, u_int
);
348 extern void atalk_print(netdissect_options
*,const u_char
*, u_int
);
349 extern void atm_if_print(u_char
*,const struct pcap_pkthdr
*, const u_char
*);
350 extern void bootp_print(netdissect_options
*,const u_char
*,
351 u_int
, u_short
, u_short
);
352 extern void bgp_print(netdissect_options
*,const u_char
*, int);
353 extern void bxxp_print(netdissect_options
*,const u_char
*, u_int
);
354 extern void chdlc_if_print(u_char
*user
, const struct pcap_pkthdr
*h
,
355 register const u_char
*p
);
356 extern void chdlc_print(netdissect_options
*ndo
,
357 register const u_char
*p
, u_int length
, u_int caplen
);
358 extern void cisco_autorp_print(netdissect_options
*,
359 const u_char
*, u_int
);
360 extern void cnfp_print(netdissect_options
*,const u_char
*cp
,
361 u_int len
, const u_char
*bp
);
362 extern void decnet_print(netdissect_options
*,const u_char
*,
364 extern void default_print(netdissect_options
*,const u_char
*, u_int
);
365 extern void dvmrp_print(netdissect_options
*,const u_char
*, u_int
);
366 extern void egp_print(netdissect_options
*,const u_char
*, u_int
,
369 extern void arcnet_if_print(u_char
*,const struct pcap_pkthdr
*,const u_char
*);
370 extern void token_if_print(u_char
*,const struct pcap_pkthdr
*,const u_char
*);
371 extern void fddi_if_print(u_char
*,const struct pcap_pkthdr
*, const u_char
*);
373 extern void gre_print(netdissect_options
*,const u_char
*, u_int
);
374 extern void icmp_print(netdissect_options
*,const u_char
*, u_int
,
376 extern void hsrp_print(netdissect_options
*ndo
,
377 register const u_char
*bp
, register u_int len
);
378 extern void ieee802_11_if_print(u_char
*,const struct pcap_pkthdr
*, const u_char
*);
379 extern void igmp_print(netdissect_options
*,
380 register const u_char
*, u_int
);
381 extern void igrp_print(netdissect_options
*,const u_char
*, u_int
,
383 extern int nextproto4_cksum(const struct ip
*, const u_int8_t
*, u_int
, u_int
);
384 extern void ipN_print(netdissect_options
*,const u_char
*, u_int
);
385 extern void ipx_print(netdissect_options
*,const u_char
*, u_int
);
386 extern void isoclns_print(netdissect_options
*,const u_char
*,
387 u_int
, u_int
, const u_char
*, const u_char
*);
388 extern void krb_print(netdissect_options
*,const u_char
*, u_int
);
389 extern void llap_print(netdissect_options
*,const u_char
*, u_int
);
390 extern const char *linkaddr_string(netdissect_options
*ndo
,
391 const u_char
*ep
, const unsigned int len
);
392 extern void ltalk_if_print(netdissect_options
*ndo
,
393 u_char
*user
, const struct pcap_pkthdr
*h
,
395 extern void mpls_print(netdissect_options
*ndo
,
396 const u_char
*bp
, u_int length
);
397 extern void msdp_print(netdissect_options
*ndo
,
398 const unsigned char *sp
, u_int length
);
399 extern void nfsreply_print(netdissect_options
*,const u_char
*,
400 u_int
, const u_char
*);
401 extern void nfsreq_print(netdissect_options
*,const u_char
*,
402 u_int
, const u_char
*);
403 extern void ns_print(netdissect_options
*,const u_char
*, u_int
);
404 extern void ntp_print(netdissect_options
*,const u_char
*, u_int
);
405 extern void null_if_print(u_char
*,const struct pcap_pkthdr
*, const u_char
*);
406 extern void ospf_print(netdissect_options
*,const u_char
*,
407 u_int
, const u_char
*);
408 extern void pimv1_print(netdissect_options
*,const u_char
*, u_int
);
409 extern void mobile_print(netdissect_options
*,const u_char
*, u_int
);
410 extern void pim_print(netdissect_options
*,const u_char
*, u_int
, u_int
);
411 extern void pppoe_if_print(u_char
*,const struct pcap_pkthdr
*, const u_char
*);
412 extern void pppoe_print(netdissect_options
*,const u_char
*, u_int
);
413 extern void ppp_print(netdissect_options
*,
414 register const u_char
*, u_int
);
416 extern void ppp_if_print(u_char
*,const struct pcap_pkthdr
*, const u_char
*);
417 extern void ppp_hdlc_if_print(u_char
*,
418 const struct pcap_pkthdr
*, const u_char
*);
419 extern void ppp_bsdos_if_print(u_char
*,
420 const struct pcap_pkthdr
*, const u_char
*);
422 extern int vjc_print(netdissect_options
*,register const char *,
423 register u_int
, u_short
);
425 extern void raw_if_print(u_char
*,
426 const struct pcap_pkthdr
*, const u_char
*);
428 extern void rip_print(netdissect_options
*,const u_char
*, u_int
);
429 extern void rpki_rtr_print(netdissect_options
*,const u_char
*, u_int
);
431 extern void sctp_print(netdissect_options
*ndo
,
432 const u_char
*bp
, const u_char
*bp2
,
433 u_int sctpPacketLength
);
435 extern void sl_if_print(u_char
*,const struct pcap_pkthdr
*, const u_char
*);
437 extern void lane_if_print(u_char
*,const struct pcap_pkthdr
*,const u_char
*);
438 extern void cip_if_print(u_char
*,const struct pcap_pkthdr
*,const u_char
*);
439 extern void sl_bsdos_if_print(u_char
*,
440 const struct pcap_pkthdr
*, const u_char
*);
441 extern void sll_if_print(u_char
*,
442 const struct pcap_pkthdr
*, const u_char
*);
444 extern void snmp_print(netdissect_options
*,const u_char
*, u_int
);
445 extern void sunrpcrequest_print(netdissect_options
*,const u_char
*,
446 u_int
, const u_char
*);
447 extern void tcp_print(netdissect_options
*,const u_char
*, u_int
,
448 const u_char
*, int);
449 extern void tftp_print(netdissect_options
*,const u_char
*, u_int
);
450 extern void timed_print(netdissect_options
*,const u_char
*, u_int
);
451 extern void udp_print(netdissect_options
*,const u_char
*, u_int
,
452 const u_char
*, int);
453 extern void wb_print(netdissect_options
*,const void *, u_int
);
454 extern int ah_print(netdissect_options
*,register const u_char
*,
455 register const u_char
*);
456 extern void esp_print_decodesecret(netdissect_options
*ndo
);
457 extern int ipcomp_print(netdissect_options
*,register const u_char
*,
458 register const u_char
*, int *);
459 extern void rx_print(netdissect_options
*,register const u_char
*,
460 int, int, int, u_char
*);
461 extern void netbeui_print(netdissect_options
*,u_short
,
462 const u_char
*, int);
463 extern void ipx_netbios_print(netdissect_options
*,const u_char
*, u_int
);
464 extern void nbt_tcp_print(netdissect_options
*,const u_char
*, int);
465 extern void nbt_udp137_print(netdissect_options
*,
466 const u_char
*data
, int);
467 extern void nbt_udp138_print(netdissect_options
*,
468 const u_char
*data
, int);
469 extern char *smb_errstr(netdissect_options
*,int, int);
470 extern const char *nt_errstr(netdissect_options
*, u_int32_t
);
471 extern void print_data(netdissect_options
*,const unsigned char *, int);
472 extern void l2tp_print(netdissect_options
*,const u_char
*, u_int
);
473 extern void lcp_print(netdissect_options
*,const u_char
*, u_int
);
474 extern void vrrp_print(netdissect_options
*,const u_char
*bp
,
476 extern void carp_print(netdissect_options
*,const u_char
*bp
,
478 extern void cdp_print(netdissect_options
*,const u_char
*,
479 u_int
, u_int
, const u_char
*, const u_char
*);
480 extern void stp_print(netdissect_options
*,const u_char
*p
, u_int length
);
481 extern void radius_print(netdissect_options
*,const u_char
*, u_int
);
482 extern void lwres_print(netdissect_options
*,const u_char
*, u_int
);
483 extern void pptp_print(netdissect_options
*,const u_char
*, u_int
);
486 extern u_int
ipnet_if_print(netdissect_options
*,const struct pcap_pkthdr
*, const u_char
*);
487 extern u_int
ppi_if_print(netdissect_options
*,const struct pcap_pkthdr
*, const u_char
*);
488 extern u_int
nflog_if_print(netdissect_options
*,const struct pcap_pkthdr
*, const u_char
*);
489 extern u_int
ieee802_15_4_if_print(netdissect_options
*,const struct pcap_pkthdr
*, const u_char
*);
492 extern void ip6_print(netdissect_options
*,const u_char
*, u_int
);
494 extern void ip6_opt_print(netdissect_options
*,const u_char
*, int);
495 extern int nextproto6_cksum(const struct ip6_hdr
*, const u_int8_t
*, u_int
, u_int
);
496 extern int hbhopt_print(netdissect_options
*,const u_char
*);
497 extern int dstopt_print(netdissect_options
*,const u_char
*);
498 extern int frag6_print(netdissect_options
*,const u_char
*,
500 extern void icmp6_print(netdissect_options
*,const u_char
*,
502 extern void ripng_print(netdissect_options
*,const u_char
*, int);
503 extern int rt6_print(netdissect_options
*,const u_char
*, const u_char
*);
504 extern void ospf6_print(netdissect_options
*,const u_char
*, u_int
);
505 extern void dhcp6_print(netdissect_options
*,const u_char
*,
506 u_int
, u_int16_t
, u_int16_t
);
508 extern void zephyr_print(netdissect_options
* ndo
,
509 const u_char
*cp
, int length
);
519 extern u_int16_t
in_cksum(const struct cksum_vec
*, int);
520 extern u_int16_t
in_cksum_shouldbe(u_int16_t
, u_int16_t
);
523 extern void esp_print_decodesecret(netdissect_options
*ndo
);
524 extern int esp_print_decrypt_buffer_by_ikev2(netdissect_options
*ndo
,
526 u_char spii
[8], u_char spir
[8],
527 u_char
*buf
, u_char
*end
);
530 extern void geonet_print(netdissect_options
*ndo
,const u_char
*eth_hdr
,const u_char
*geo_pck
, u_int len
);
531 extern void calm_fast_print(netdissect_options
*ndo
,const u_char
*eth_hdr
,const u_char
*calm_pck
, u_int len
);
533 #endif /* netdissect_h */