The Tcpdump Group git mirrors - tcpdump/blob - print-babel.c

   1 /*
   2  * Copyright (c) 2007-2011 Grégoire Henry, Juliusz Chroboczek
   3  *
   4  * Redistribution and use in source and binary forms, with or without
   5  * modification, are permitted provided that the following conditions
   6  * are met:
   7  * 1. Redistributions of source code must retain the above copyright
   8  *    notice, this list of conditions and the following disclaimer.
   9  * 2. Redistributions in binary form must reproduce the above copyright
  10  *    notice, this list of conditions and the following disclaimer in the
  11  *    documentation and/or other materials provided with the distribution.
  12  * 3. Neither the name of the project nor the names of its contributors
  13  *    may be used to endorse or promote products derived from this software
  14  *    without specific prior written permission.
  15  *
  16  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
  17  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  18  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  19  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
  20  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  21  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  22  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  23  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  24  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  25  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  26  * SUCH DAMAGE.
  27  */
  28
  29 /* \summary: Babel Routing Protocol printer */
  30
  31 #ifdef HAVE_CONFIG_H
  32 #include "config.h"
  33 #endif
  34
  35 #include <netdissect-stdinc.h>
  36
  37 #include <stdio.h>
  38 #include <string.h>
  39
  40 #include "netdissect.h"
  41 #include "addrtoname.h"
  42 #include "extract.h"
  43
  44 static const char tstr[] = "[|babel]";
  45
  46 static void babel_print_v2(netdissect_options *, const u_char *cp, u_int length);
  47
  48 void
  49 babel_print(netdissect_options *ndo,
  50             const u_char *cp, u_int length)
  51 {
  52     ND_PRINT((ndo, "babel"));
  53
  54     ND_TCHECK2(*cp, 4);
  55
  56     if(cp[0] != 42) {
  57         ND_PRINT((ndo, " invalid header"));
  58         return;
  59     } else {
  60         ND_PRINT((ndo, " %d", cp[1]));
  61     }
  62
  63     switch(cp[1]) {
  64     case 2:
  65         babel_print_v2(ndo, cp, length);
  66         break;
  67     default:
  68         ND_PRINT((ndo, " unknown version"));
  69         break;
  70     }
  71
  72     return;
  73
  74  trunc:
  75     ND_PRINT((ndo, " %s", tstr));
  76     return;
  77 }
  78
  79 /* TLVs */
  80 #define MESSAGE_PAD1 0
  81 #define MESSAGE_PADN 1
  82 #define MESSAGE_ACK_REQ 2
  83 #define MESSAGE_ACK 3
  84 #define MESSAGE_HELLO 4
  85 #define MESSAGE_IHU 5
  86 #define MESSAGE_ROUTER_ID 6
  87 #define MESSAGE_NH 7
  88 #define MESSAGE_UPDATE 8
  89 #define MESSAGE_REQUEST 9
  90 #define MESSAGE_MH_REQUEST 10
  91 #define MESSAGE_TSPC 11
  92 #define MESSAGE_HMAC 12
  93 #define MESSAGE_UPDATE_SRC_SPECIFIC 13
  94 #define MESSAGE_REQUEST_SRC_SPECIFIC 14
  95 #define MESSAGE_MH_REQUEST_SRC_SPECIFIC 15
  96
  97 /* sub-TLVs */
  98 #define MESSAGE_SUB_PAD1 0
  99 #define MESSAGE_SUB_PADN 1
 100 #define MESSAGE_SUB_DIVERSITY 2
 101 #define MESSAGE_SUB_TIMESTAMP 3
 102
 103 /* Diversity sub-TLV channel codes */
 104 static const struct tok diversity_str[] = {
 105     { 0,   "reserved" },
 106     { 255, "all"      },
 107     { 0, NULL }
 108 };
 109
 110 static const char *
 111 format_id(const u_char *id)
 112 {
 113     static char buf[25];
 114     snprintf(buf, 25, "%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x",
 115              id[0], id[1], id[2], id[3], id[4], id[5], id[6], id[7]);
 116     buf[24] = '\0';
 117     return buf;
 118 }
 119
 120 static const unsigned char v4prefix[16] =
 121     {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xFF, 0xFF, 0, 0, 0, 0 };
 122
 123 static const char *
 124 format_prefix(netdissect_options *ndo, const u_char *prefix, unsigned char plen)
 125 {
 126     static char buf[50];
 127     if(plen >= 96 && memcmp(prefix, v4prefix, 12) == 0)
 128         snprintf(buf, 50, "%s/%u", ipaddr_string(ndo, prefix + 12), plen - 96);
 129     else
 130         snprintf(buf, 50, "%s/%u", ip6addr_string(ndo, prefix), plen);
 131     buf[49] = '\0';
 132     return buf;
 133 }
 134
 135 static const char *
 136 format_address(netdissect_options *ndo, const u_char *prefix)
 137 {
 138     if(memcmp(prefix, v4prefix, 12) == 0)
 139         return ipaddr_string(ndo, prefix + 12);
 140     else
 141         return ip6addr_string(ndo, prefix);
 142 }
 143
 144 static const char *
 145 format_interval(const uint16_t i)
 146 {
 147     static char buf[sizeof("000.00s")];
 148
 149     if (i == 0)
 150         return "0.0s (bogus)";
 151     snprintf(buf, sizeof(buf), "%u.%02us", i / 100, i % 100);
 152     return buf;
 153 }
 154
 155 static const char *
 156 format_interval_update(const uint16_t i)
 157 {
 158     return i == 0xFFFF ? "infinity" : format_interval(i);
 159 }
 160
 161 static const char *
 162 format_timestamp(const uint32_t i)
 163 {
 164     static char buf[sizeof("0000.000000s")];
 165     snprintf(buf, sizeof(buf), "%u.%06us", i / 1000000, i % 1000000);
 166     return buf;
 167 }
 168
 169 /* Return number of octets consumed from the input buffer (not the prefix length
 170  * in bytes), or -1 for encoding error. */
 171 static int
 172 network_prefix(int ae, int plen, unsigned int omitted,
 173                const unsigned char *p, const unsigned char *dp,
 174                unsigned int len, unsigned char *p_r)
 175 {
 176     unsigned pb;
 177     unsigned char prefix[16];
 178     int consumed = 0;
 179
 180     if(plen >= 0)
 181         pb = (plen + 7) / 8;
 182     else if(ae == 1)
 183         pb = 4;
 184     else
 185         pb = 16;
 186
 187     if(pb > 16)
 188         return -1;
 189
 190     memset(prefix, 0, 16);
 191
 192     switch(ae) {
 193     case 0: break;
 194     case 1:
 195         if(omitted > 4 || pb > 4 || (pb > omitted && len < pb - omitted))
 196             return -1;
 197         memcpy(prefix, v4prefix, 12);
 198         if(omitted) {
 199             if (dp == NULL) return -1;
 200             memcpy(prefix, dp, 12 + omitted);
 201         }
 202         if(pb > omitted) {
 203             memcpy(prefix + 12 + omitted, p, pb - omitted);
 204             consumed = pb - omitted;
 205         }
 206         break;
 207     case 2:
 208         if(omitted > 16 || (pb > omitted && len < pb - omitted))
 209             return -1;
 210         if(omitted) {
 211             if (dp == NULL) return -1;
 212             memcpy(prefix, dp, omitted);
 213         }
 214         if(pb > omitted) {
 215             memcpy(prefix + omitted, p, pb - omitted);
 216             consumed = pb - omitted;
 217         }
 218         break;
 219     case 3:
 220         if(pb > 8 && len < pb - 8) return -1;
 221         prefix[0] = 0xfe;
 222         prefix[1] = 0x80;
 223         if(pb > 8) {
 224             memcpy(prefix + 8, p, pb - 8);
 225             consumed = pb - 8;
 226         }
 227         break;
 228     default:
 229         return -1;
 230     }
 231
 232     memcpy(p_r, prefix, 16);
 233     return consumed;
 234 }
 235
 236 static int
 237 network_address(int ae, const unsigned char *a, unsigned int len,
 238                 unsigned char *a_r)
 239 {
 240     return network_prefix(ae, -1, 0, a, NULL, len, a_r);
 241 }
 242
 243 /*
 244  * Sub-TLVs consume the "extra data" of Babel TLVs (see Section 4.3 of RFC6126),
 245  * their encoding is similar to the encoding of TLVs, but the type namespace is
 246  * different:
 247  *
 248  * o Type 0 stands for Pad1 sub-TLV with the same encoding as the Pad1 TLV.
 249  * o Type 1 stands for PadN sub-TLV with the same encoding as the PadN TLV.
 250  * o Type 2 stands for Diversity sub-TLV, which propagates diversity routing
 251  *   data. Its body is a variable-length sequence of 8-bit unsigned integers,
 252  *   each representing per-hop number of interferring radio channel for the
 253  *   prefix. Channel 0 is invalid and must not be used in the sub-TLV, channel
 254  *   255 interferes with any other channel.
 255  * o Type 3 stands for Timestamp sub-TLV, used to compute RTT between
 256  *   neighbours. In the case of a Hello TLV, the body stores a 32-bits
 257  *   timestamp, while in the case of a IHU TLV, two 32-bits timestamps are
 258  *   stored.
 259  *
 260  * Sub-TLV types 0 and 1 are valid for any TLV type, whether sub-TLV type 2 is
 261  * only valid for TLV type 8 (Update). Note that within an Update TLV a missing
 262  * Diversity sub-TLV is not the same as a Diversity sub-TLV with an empty body.
 263  * The former would mean a lack of any claims about the interference, and the
 264  * latter would state that interference is definitely absent.
 265  * A type 3 sub-TLV is valid both for Hello and IHU TLVs, though the exact
 266  * semantic of the sub-TLV is different in each case.
 267  */
 268 static void
 269 subtlvs_print(netdissect_options *ndo,
 270               const u_char *cp, const u_char *ep, const uint8_t tlv_type)
 271 {
 272     uint8_t subtype, sublen;
 273     const char *sep;
 274     uint32_t t1, t2;
 275
 276     while (cp < ep) {
 277         subtype = *cp++;
 278         if(subtype == MESSAGE_SUB_PAD1) {
 279             ND_PRINT((ndo, " sub-pad1"));
 280             continue;
 281         }
 282         if(cp == ep)
 283             goto invalid;
 284         sublen = *cp++;
 285         if(cp + sublen > ep)
 286             goto invalid;
 287
 288         switch(subtype) {
 289         case MESSAGE_SUB_PADN:
 290             ND_PRINT((ndo, " sub-padn"));
 291             cp += sublen;
 292             break;
 293         case MESSAGE_SUB_DIVERSITY:
 294             ND_PRINT((ndo, " sub-diversity"));
 295             if (sublen == 0) {
 296                 ND_PRINT((ndo, " empty"));
 297                 break;
 298             }
 299             sep = " ";
 300             while(sublen--) {
 301                 ND_PRINT((ndo, "%s%s", sep, tok2str(diversity_str, "%u", EXTRACT_8BITS(cp++))));
 302                 sep = "-";
 303             }
 304             if(tlv_type != MESSAGE_UPDATE &&
 305                tlv_type != MESSAGE_UPDATE_SRC_SPECIFIC)
 306                 ND_PRINT((ndo, " (bogus)"));
 307             break;
 308         case MESSAGE_SUB_TIMESTAMP:
 309             ND_PRINT((ndo, " sub-timestamp"));
 310             if(tlv_type == MESSAGE_HELLO) {
 311                 if(sublen < 4)
 312                     goto invalid;
 313                 t1 = EXTRACT_BE_32BITS(cp);
 314                 ND_PRINT((ndo, " %s", format_timestamp(t1)));
 315             } else if(tlv_type == MESSAGE_IHU) {
 316                 if(sublen < 8)
 317                     goto invalid;
 318                 t1 = EXTRACT_BE_32BITS(cp);
 319                 ND_PRINT((ndo, " %s", format_timestamp(t1)));
 320                 t2 = EXTRACT_BE_32BITS(cp + 4);
 321                 ND_PRINT((ndo, "|%s", format_timestamp(t2)));
 322             } else
 323                 ND_PRINT((ndo, " (bogus)"));
 324             cp += sublen;
 325             break;
 326         default:
 327             ND_PRINT((ndo, " sub-unknown-0x%02x", subtype));
 328             cp += sublen;
 329         } /* switch */
 330     } /* while */
 331     return;
 332
 333  invalid:
 334     ND_PRINT((ndo, "%s", istr));
 335 }
 336
 337 #define ICHECK(i, l) \
 338         if ((i) + (l) > bodylen || (i) + (l) > length) goto invalid;
 339
 340 static void
 341 babel_print_v2(netdissect_options *ndo,
 342                const u_char *cp, u_int length)
 343 {
 344     u_int i;
 345     u_short bodylen;
 346     u_char v4_prefix[16] =
 347         {0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xFF, 0xFF, 0, 0, 0, 0 };
 348     u_char v6_prefix[16] = {0};
 349
 350     ND_TCHECK2(*cp, 4);
 351     if (length < 4)
 352         goto invalid;
 353     bodylen = EXTRACT_BE_16BITS(cp + 2);
 354     ND_PRINT((ndo, " (%u)", bodylen));
 355
 356     /* Process the TLVs in the body */
 357     i = 0;
 358     while(i < bodylen) {
 359         const u_char *message;
 360         u_int type, len;
 361
 362         message = cp + 4 + i;
 363
 364         ND_TCHECK2(*message, 1);
 365         if((type = message[0]) == MESSAGE_PAD1) {
 366             ND_PRINT((ndo, ndo->ndo_vflag ? "\n\tPad 1" : " pad1"));
 367             i += 1;
 368             continue;
 369         }
 370
 371         ND_TCHECK2(*message, 2);
 372         ICHECK(i, 2);
 373         len = message[1];
 374
 375         ND_TCHECK2(*message, 2 + len);
 376         ICHECK(i, 2 + len);
 377
 378         switch(type) {
 379         case MESSAGE_PADN: {
 380             if (!ndo->ndo_vflag)
 381                 ND_PRINT((ndo, " padN"));
 382             else
 383                 ND_PRINT((ndo, "\n\tPad %d", len + 2));
 384         }
 385             break;
 386
 387         case MESSAGE_ACK_REQ: {
 388             u_short nonce, interval;
 389             if (!ndo->ndo_vflag)
 390                 ND_PRINT((ndo, " ack-req"));
 391             else {
 392                 ND_PRINT((ndo, "\n\tAcknowledgment Request "));
 393                 if(len < 6) goto invalid;
 394                 nonce = EXTRACT_BE_16BITS(message + 4);
 395                 interval = EXTRACT_BE_16BITS(message + 6);
 396                 ND_PRINT((ndo, "%04x %s", nonce, format_interval(interval)));
 397             }
 398         }
 399             break;
 400
 401         case MESSAGE_ACK: {
 402             u_short nonce;
 403             if (!ndo->ndo_vflag)
 404                 ND_PRINT((ndo, " ack"));
 405             else {
 406                 ND_PRINT((ndo, "\n\tAcknowledgment "));
 407                 if(len < 2) goto invalid;
 408                 nonce = EXTRACT_BE_16BITS(message + 2);
 409                 ND_PRINT((ndo, "%04x", nonce));
 410             }
 411         }
 412             break;
 413
 414         case MESSAGE_HELLO:  {
 415             u_short seqno, interval;
 416             if (!ndo->ndo_vflag)
 417                 ND_PRINT((ndo, " hello"));
 418             else {
 419                 ND_PRINT((ndo, "\n\tHello "));
 420                 if(len < 6) goto invalid;
 421                 seqno = EXTRACT_BE_16BITS(message + 4);
 422                 interval = EXTRACT_BE_16BITS(message + 6);
 423                 ND_PRINT((ndo, "seqno %u interval %s", seqno, format_interval(interval)));
 424                 /* Extra data. */
 425                 if(len > 6)
 426                     subtlvs_print(ndo, message + 8, message + 2 + len, type);
 427             }
 428         }
 429             break;
 430
 431         case MESSAGE_IHU: {
 432             unsigned short txcost, interval;
 433             if (!ndo->ndo_vflag)
 434                 ND_PRINT((ndo, " ihu"));
 435             else {
 436                 u_char address[16];
 437                 int rc;
 438                 ND_PRINT((ndo, "\n\tIHU "));
 439                 if(len < 6) goto invalid;
 440                 txcost = EXTRACT_BE_16BITS(message + 4);
 441                 interval = EXTRACT_BE_16BITS(message + 6);
 442                 rc = network_address(message[2], message + 8, len - 6, address);
 443                 if(rc < 0) { ND_PRINT((ndo, "%s", tstr)); break; }
 444                 ND_PRINT((ndo, "%s txcost %u interval %s",
 445                        format_address(ndo, address), txcost, format_interval(interval)));
 446                 /* Extra data. */
 447                 if((u_int)rc < len - 6)
 448                     subtlvs_print(ndo, message + 8 + rc, message + 2 + len,
 449                                   type);
 450             }
 451         }
 452             break;
 453
 454         case MESSAGE_ROUTER_ID: {
 455             if (!ndo->ndo_vflag)
 456                 ND_PRINT((ndo, " router-id"));
 457             else {
 458                 ND_PRINT((ndo, "\n\tRouter Id"));
 459                 if(len < 10) goto invalid;
 460                 ND_PRINT((ndo, " %s", format_id(message + 4)));
 461             }
 462         }
 463             break;
 464
 465         case MESSAGE_NH: {
 466             if (!ndo->ndo_vflag)
 467                 ND_PRINT((ndo, " nh"));
 468             else {
 469                 int rc;
 470                 u_char nh[16];
 471                 ND_PRINT((ndo, "\n\tNext Hop"));
 472                 if(len < 2) goto invalid;
 473                 rc = network_address(message[2], message + 4, len - 2, nh);
 474                 if(rc < 0) goto invalid;
 475                 ND_PRINT((ndo, " %s", format_address(ndo, nh)));
 476             }
 477         }
 478             break;
 479
 480         case MESSAGE_UPDATE: {
 481             if (!ndo->ndo_vflag) {
 482                 ND_PRINT((ndo, " update"));
 483                 if(len < 1)
 484                     ND_PRINT((ndo, "/truncated"));
 485                 else
 486                     ND_PRINT((ndo, "%s%s%s",
 487                            (message[3] & 0x80) ? "/prefix": "",
 488                            (message[3] & 0x40) ? "/id" : "",
 489                            (message[3] & 0x3f) ? "/unknown" : ""));
 490             } else {
 491                 u_short interval, seqno, metric;
 492                 u_char plen;
 493                 int rc;
 494                 u_char prefix[16];
 495                 ND_PRINT((ndo, "\n\tUpdate"));
 496                 if(len < 10) goto invalid;
 497                 plen = message[4] + (message[2] == 1 ? 96 : 0);
 498                 rc = network_prefix(message[2], message[4], message[5],
 499                                     message + 12,
 500                                     message[2] == 1 ? v4_prefix : v6_prefix,
 501                                     len - 10, prefix);
 502                 if(rc < 0) goto invalid;
 503                 interval = EXTRACT_BE_16BITS(message + 6);
 504                 seqno = EXTRACT_BE_16BITS(message + 8);
 505                 metric = EXTRACT_BE_16BITS(message + 10);
 506                 ND_PRINT((ndo, "%s%s%s %s metric %u seqno %u interval %s",
 507                        (message[3] & 0x80) ? "/prefix": "",
 508                        (message[3] & 0x40) ? "/id" : "",
 509                        (message[3] & 0x3f) ? "/unknown" : "",
 510                        format_prefix(ndo, prefix, plen),
 511                        metric, seqno, format_interval_update(interval)));
 512                 if(message[3] & 0x80) {
 513                     if(message[2] == 1)
 514                         memcpy(v4_prefix, prefix, 16);
 515                     else
 516                         memcpy(v6_prefix, prefix, 16);
 517                 }
 518                 /* extra data? */
 519                 if((u_int)rc < len - 10)
 520                     subtlvs_print(ndo, message + 12 + rc, message + 2 + len, type);
 521             }
 522         }
 523             break;
 524
 525         case MESSAGE_REQUEST: {
 526             if (!ndo->ndo_vflag)
 527                 ND_PRINT((ndo, " request"));
 528             else {
 529                 int rc;
 530                 u_char prefix[16], plen;
 531                 ND_PRINT((ndo, "\n\tRequest "));
 532                 if(len < 2) goto invalid;
 533                 plen = message[3] + (message[2] == 1 ? 96 : 0);
 534                 rc = network_prefix(message[2], message[3], 0,
 535                                     message + 4, NULL, len - 2, prefix);
 536                 if(rc < 0) goto invalid;
 537                 ND_PRINT((ndo, "for %s",
 538                        message[2] == 0 ? "any" : format_prefix(ndo, prefix, plen)));
 539             }
 540         }
 541             break;
 542
 543         case MESSAGE_MH_REQUEST : {
 544             if (!ndo->ndo_vflag)
 545                 ND_PRINT((ndo, " mh-request"));
 546             else {
 547                 int rc;
 548                 u_short seqno;
 549                 u_char prefix[16], plen;
 550                 ND_PRINT((ndo, "\n\tMH-Request "));
 551                 if(len < 14) goto invalid;
 552                 seqno = EXTRACT_BE_16BITS(message + 4);
 553                 rc = network_prefix(message[2], message[3], 0,
 554                                     message + 16, NULL, len - 14, prefix);
 555                 if(rc < 0) goto invalid;
 556                 plen = message[3] + (message[2] == 1 ? 96 : 0);
 557                 ND_PRINT((ndo, "(%u hops) for %s seqno %u id %s",
 558                        message[6], format_prefix(ndo, prefix, plen),
 559                        seqno, format_id(message + 8)));
 560             }
 561         }
 562             break;
 563         case MESSAGE_TSPC :
 564             if (!ndo->ndo_vflag)
 565                 ND_PRINT((ndo, " tspc"));
 566             else {
 567                 ND_PRINT((ndo, "\n\tTS/PC "));
 568                 if(len < 6) goto invalid;
 569                 ND_PRINT((ndo, "timestamp %u packetcounter %u", EXTRACT_BE_32BITS(message + 4),
 570                           EXTRACT_BE_16BITS(message + 2)));
 571             }
 572             break;
 573         case MESSAGE_HMAC : {
 574             if (!ndo->ndo_vflag)
 575                 ND_PRINT((ndo, " hmac"));
 576             else {
 577                 unsigned j;
 578                 ND_PRINT((ndo, "\n\tHMAC "));
 579                 if(len < 18) goto invalid;
 580                 ND_PRINT((ndo, "key-id %u digest-%u ", EXTRACT_BE_16BITS(message + 2), len - 2));
 581                 for (j = 0; j < len - 2; j++)
 582                     ND_PRINT((ndo, "%02X", message[4 + j]));
 583             }
 584         }
 585             break;
 586
 587         case MESSAGE_UPDATE_SRC_SPECIFIC : {
 588             if(!ndo->ndo_vflag) {
 589                 ND_PRINT((ndo, " ss-update"));
 590             } else {
 591                 u_char prefix[16], src_prefix[16];
 592                 u_short interval, seqno, metric;
 593                 u_char ae, plen, src_plen, omitted;
 594                 int rc;
 595                 int parsed_len = 10;
 596                 ND_PRINT((ndo, "\n\tSS-Update"));
 597                 if(len < 10) goto invalid;
 598                 ae = message[2];
 599                 src_plen = message[3];
 600                 plen = message[4];
 601                 omitted = message[5];
 602                 interval = EXTRACT_BE_16BITS(message + 6);
 603                 seqno = EXTRACT_BE_16BITS(message + 8);
 604                 metric = EXTRACT_BE_16BITS(message + 10);
 605                 rc = network_prefix(ae, plen, omitted, message + 2 + parsed_len,
 606                                     ae == 1 ? v4_prefix : v6_prefix,
 607                                     len - parsed_len, prefix);
 608                 if(rc < 0) goto invalid;
 609                 if(ae == 1)
 610                     plen += 96;
 611                 parsed_len += rc;
 612                 rc = network_prefix(ae, src_plen, 0, message + 2 + parsed_len,
 613                                     NULL, len - parsed_len, src_prefix);
 614                 if(rc < 0) goto invalid;
 615                 if(ae == 1)
 616                     src_plen += 96;
 617                 parsed_len += rc;
 618
 619                 ND_PRINT((ndo, " %s from", format_prefix(ndo, prefix, plen)));
 620                 ND_PRINT((ndo, " %s metric %u seqno %u interval %s",
 621                           format_prefix(ndo, src_prefix, src_plen),
 622                           metric, seqno, format_interval_update(interval)));
 623                 /* extra data? */
 624                 if((u_int)parsed_len < len)
 625                     subtlvs_print(ndo, message + 2 + parsed_len,
 626                                   message + 2 + len, type);
 627             }
 628         }
 629             break;
 630
 631         case MESSAGE_REQUEST_SRC_SPECIFIC : {
 632             if(!ndo->ndo_vflag)
 633                 ND_PRINT((ndo, " ss-request"));
 634             else {
 635                 int rc, parsed_len = 3;
 636                 u_char ae, plen, src_plen, prefix[16], src_prefix[16];
 637                 ND_PRINT((ndo, "\n\tSS-Request "));
 638                 if(len < 3) goto invalid;
 639                 ae = message[2];
 640                 plen = message[3];
 641                 src_plen = message[4];
 642                 rc = network_prefix(ae, plen, 0, message + 2 + parsed_len,
 643                                     NULL, len - parsed_len, prefix);
 644                 if(rc < 0) goto invalid;
 645                 if(ae == 1)
 646                     plen += 96;
 647                 parsed_len += rc;
 648                 rc = network_prefix(ae, src_plen, 0, message + 2 + parsed_len,
 649                                     NULL, len - parsed_len, src_prefix);
 650                 if(rc < 0) goto invalid;
 651                 if(ae == 1)
 652                     src_plen += 96;
 653                 parsed_len += rc;
 654                 if(ae == 0) {
 655                     ND_PRINT((ndo, "for any"));
 656                 } else {
 657                     ND_PRINT((ndo, "for (%s, ", format_prefix(ndo, prefix, plen)));
 658                     ND_PRINT((ndo, "%s)", format_prefix(ndo, src_prefix, src_plen)));
 659                 }
 660             }
 661         }
 662             break;
 663
 664         case MESSAGE_MH_REQUEST_SRC_SPECIFIC : {
 665             if(!ndo->ndo_vflag)
 666                 ND_PRINT((ndo, " ss-mh-request"));
 667             else {
 668                 int rc, parsed_len = 14;
 669                 u_short seqno;
 670                 u_char ae, plen, src_plen, prefix[16], src_prefix[16], hopc;
 671                 const u_char *router_id = NULL;
 672                 ND_PRINT((ndo, "\n\tSS-MH-Request "));
 673                 if(len < 14) goto invalid;
 674                 ae = message[2];
 675                 plen = message[3];
 676                 seqno = EXTRACT_BE_16BITS(message + 4);
 677                 hopc = message[6];
 678                 src_plen = message[7];
 679                 router_id = message + 8;
 680                 rc = network_prefix(ae, plen, 0, message + 2 + parsed_len,
 681                                     NULL, len - parsed_len, prefix);
 682                 if(rc < 0) goto invalid;
 683                 if(ae == 1)
 684                     plen += 96;
 685                 parsed_len += rc;
 686                 rc = network_prefix(ae, src_plen, 0, message + 2 + parsed_len,
 687                                     NULL, len - parsed_len, src_prefix);
 688                 if(rc < 0) goto invalid;
 689                 if(ae == 1)
 690                     src_plen += 96;
 691                 ND_PRINT((ndo, "(%u hops) for (%s, ",
 692                           hopc, format_prefix(ndo, prefix, plen)));
 693                 ND_PRINT((ndo, "%s) seqno %u id %s",
 694                           format_prefix(ndo, src_prefix, src_plen),
 695                           seqno, format_id(router_id)));
 696             }
 697         }
 698             break;
 699
 700         default:
 701             if (!ndo->ndo_vflag)
 702                 ND_PRINT((ndo, " unknown"));
 703             else
 704                 ND_PRINT((ndo, "\n\tUnknown message type %d", type));
 705         }
 706         i += len + 2;
 707     }
 708     return;
 709
 710  trunc:
 711     ND_PRINT((ndo, " %s", tstr));
 712     return;
 713
 714  invalid:
 715     ND_PRINT((ndo, "%s", istr));
 716     return;
 717 }