2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 2000
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
22 #define NETDISSECT_REWORKED
27 #include <tcpdump-stdinc.h>
29 #include "interface.h"
31 #include "addrtoname.h"
32 #include "ethertype.h"
35 * Structure of a header for Apple's IP-over-IEEE 1384 BPF header.
37 #define FIREWIRE_EUI64_LEN 8
38 struct firewire_header
{
39 u_char firewire_dhost
[FIREWIRE_EUI64_LEN
];
40 u_char firewire_shost
[FIREWIRE_EUI64_LEN
];
41 u_short firewire_type
;
45 * Length of that header; note that some compilers may pad
46 * "struct firewire_header" to a multiple of 4 bytes, for example, so
47 * "sizeof (struct firewire_header)" may not give the right answer.
49 #define FIREWIRE_HDRLEN 18
52 ap1394_hdr_print(netdissect_options
*ndo
, register const u_char
*bp
, u_int length
)
54 register const struct firewire_header
*fp
;
55 uint16_t firewire_type
;
57 fp
= (const struct firewire_header
*)bp
;
59 ND_PRINT((ndo
, "%s > %s",
60 linkaddr_string(ndo
, fp
->firewire_dhost
, LINKADDR_IEEE1394
, FIREWIRE_EUI64_LEN
),
61 linkaddr_string(ndo
, fp
->firewire_shost
, LINKADDR_IEEE1394
, FIREWIRE_EUI64_LEN
)));
63 firewire_type
= EXTRACT_16BITS(&fp
->firewire_type
);
64 if (!ndo
->ndo_qflag
) {
65 ND_PRINT((ndo
, ", ethertype %s (0x%04x)",
66 tok2str(ethertype_values
,"Unknown", firewire_type
),
69 ND_PRINT((ndo
, ", %s", tok2str(ethertype_values
,"Unknown Ethertype (0x%04x)", firewire_type
)));
72 ND_PRINT((ndo
, ", length %u: ", length
));
76 * This is the top level routine of the printer. 'p' points
77 * to the ether header of the packet, 'h->ts' is the timestamp,
78 * 'h->len' is the length of the packet off the wire, and 'h->caplen'
79 * is the number of bytes actually captured.
82 ap1394_if_print(netdissect_options
*ndo
, const struct pcap_pkthdr
*h
, const u_char
*p
)
84 u_int length
= h
->len
;
85 u_int caplen
= h
->caplen
;
86 struct firewire_header
*fp
;
89 if (caplen
< FIREWIRE_HDRLEN
) {
90 ND_PRINT((ndo
, "[|ap1394]"));
91 return FIREWIRE_HDRLEN
;
95 ap1394_hdr_print(ndo
, p
, length
);
97 length
-= FIREWIRE_HDRLEN
;
98 caplen
-= FIREWIRE_HDRLEN
;
99 fp
= (struct firewire_header
*)p
;
100 p
+= FIREWIRE_HDRLEN
;
102 ether_type
= EXTRACT_16BITS(&fp
->firewire_type
);
103 if (ethertype_print(ndo
, ether_type
, p
, length
, caplen
) == 0) {
104 /* ether_type not known, print raw packet */
106 ap1394_hdr_print(ndo
, (u_char
*)fp
, length
+ FIREWIRE_HDRLEN
);
108 if (!ndo
->ndo_suppress_default_print
)
109 ND_DEFAULTPRINT(p
, caplen
);
112 return FIREWIRE_HDRLEN
;