]> The Tcpdump Group git mirrors - tcpdump/blob - print-udp.c
projects / tcpdump / blob


ef0266c34609638edde80f0b2035a4b7416e6d95
[tcpdump] / print-udp.c
1 /*
2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 */
21
22 #ifndef lint
23 static const char rcsid[] =
24 "@(#) $Header: /tcpdump/master/tcpdump/print-udp.c,v 1.75 2000-07-22 23:58:01 assar Exp $ (LBL)";
25 #endif
26
27 #ifdef HAVE_CONFIG_H
28 #include "config.h"
29 #endif
30
31 #include <sys/param.h>
32 #include <sys/time.h>
33 #include <sys/socket.h>
34
35 #include <netinet/in.h>
36 #include <netinet/in_systm.h>
37 #include <netinet/ip.h>
38 #include <netinet/ip_var.h>
39 #include <netinet/udp.h>
40 #include <netinet/udp_var.h>
41
42 #ifdef SEGSIZE
43 #undef SEGSIZE
44 #endif
45 #include <arpa/tftp.h>
46
47 #include <rpc/rpc.h>
48
49 #include <stdio.h>
50
51 #ifdef INET6
52 #include <netinet/ip6.h>
53 #endif
54
55 #include "interface.h"
56 #include "addrtoname.h"
57 #include "appletalk.h"
58
59 #ifdef NOERROR
60 #undef NOERROR /* Solaris sucks */
61 #endif
62 #ifdef T_UNSPEC
63 #undef T_UNSPEC /* SINIX does too */
64 #endif
65 #include "nameser.h"
66 #include "nfs.h"
67 #include "bootp.h"
68
69 struct rtcphdr {
70 u_int16_t rh_flags; /* T:2 P:1 CNT:5 PT:8 */
71 u_int16_t rh_len; /* length of message (in words) */
72 u_int32_t rh_ssrc; /* synchronization src id */
73 };
74
75 typedef struct {
76 u_int32_t upper; /* more significant 32 bits */
77 u_int32_t lower; /* less significant 32 bits */
78 } ntp64;
79
80 /*
81 * Sender report.
82 */
83 struct rtcp_sr {
84 ntp64 sr_ntp; /* 64-bit ntp timestamp */
85 u_int32_t sr_ts; /* reference media timestamp */
86 u_int32_t sr_np; /* no. packets sent */
87 u_int32_t sr_nb; /* no. bytes sent */
88 };
89
90 /*
91 * Receiver report.
92 * Time stamps are middle 32-bits of ntp timestamp.
93 */
94 struct rtcp_rr {
95 u_int32_t rr_srcid; /* sender being reported */
96 u_int32_t rr_nl; /* no. packets lost */
97 u_int32_t rr_ls; /* extended last seq number received */
98 u_int32_t rr_dv; /* jitter (delay variance) */
99 u_int32_t rr_lsr; /* orig. ts from last rr from this src */
100 u_int32_t rr_dlsr; /* time from recpt of last rr to xmit time */
101 };
102
103 /*XXX*/
104 #define RTCP_PT_SR 200
105 #define RTCP_PT_RR 201
106 #define RTCP_PT_SDES 202
107 #define RTCP_SDES_CNAME 1
108 #define RTCP_SDES_NAME 2
109 #define RTCP_SDES_EMAIL 3
110 #define RTCP_SDES_PHONE 4
111 #define RTCP_SDES_LOC 5
112 #define RTCP_SDES_TOOL 6
113 #define RTCP_SDES_NOTE 7
114 #define RTCP_SDES_PRIV 8
115 #define RTCP_PT_BYE 203
116 #define RTCP_PT_APP 204
117
118 static void
119 vat_print(const void *hdr, u_int len, register const struct udphdr *up)
120 {
121 /* vat/vt audio */
122 u_int ts = *(u_int16_t *)hdr;
123 if ((ts & 0xf060) != 0) {
124 /* probably vt */
125 (void)printf(" udp/vt %u %d / %d",
126 (u_int32_t)(ntohs(up->uh_ulen) - sizeof(*up)),
127 ts & 0x3ff, ts >> 10);
128 } else {
129 /* probably vat */
130 u_int32_t i0 = (u_int32_t)ntohl(((u_int *)hdr)[0]);
131 u_int32_t i1 = (u_int32_t)ntohl(((u_int *)hdr)[1]);
132 printf(" udp/vat %u c%d %u%s",
133 (u_int32_t)(ntohs(up->uh_ulen) - sizeof(*up) - 8),
134 i0 & 0xffff,
135 i1, i0 & 0x800000? "*" : "");
136 /* audio format */
137 if (i0 & 0x1f0000)
138 printf(" f%d", (i0 >> 16) & 0x1f);
139 if (i0 & 0x3f000000)
140 printf(" s%d", (i0 >> 24) & 0x3f);
141 }
142 }
143
144 static void
145 rtp_print(const void *hdr, u_int len, register const struct udphdr *up)
146 {
147 /* rtp v1 or v2 */
148 u_int *ip = (u_int *)hdr;
149 u_int hasopt, hasext, contype, hasmarker;
150 u_int32_t i0 = (u_int32_t)ntohl(((u_int *)hdr)[0]);
151 u_int32_t i1 = (u_int32_t)ntohl(((u_int *)hdr)[1]);
152 u_int dlen = ntohs(up->uh_ulen) - sizeof(*up) - 8;
153 const char * ptype;
154
155 ip += 2;
156 len >>= 2;
157 len -= 2;
158 hasopt = 0;
159 hasext = 0;
160 if ((i0 >> 30) == 1) {
161 /* rtp v1 */
162 hasopt = i0 & 0x800000;
163 contype = (i0 >> 16) & 0x3f;
164 hasmarker = i0 & 0x400000;
165 ptype = "rtpv1";
166 } else {
167 /* rtp v2 */
168 hasext = i0 & 0x10000000;
169 contype = (i0 >> 16) & 0x7f;
170 hasmarker = i0 & 0x800000;
171 dlen -= 4;
172 ptype = "rtp";
173 ip += 1;
174 len -= 1;
175 }
176 printf(" udp/%s %d c%d %s%s %d %u",
177 ptype,
178 dlen,
179 contype,
180 (hasopt || hasext)? "+" : "",
181 hasmarker? "*" : "",
182 i0 & 0xffff,
183 i1);
184 if (vflag) {
185 printf(" %u", i1);
186 if (hasopt) {
187 u_int i2, optlen;
188 do {
189 i2 = ip[0];
190 optlen = (i2 >> 16) & 0xff;
191 if (optlen == 0 || optlen > len) {
192 printf(" !opt");
193 return;
194 }
195 ip += optlen;
196 len -= optlen;
197 } while ((int)i2 >= 0);
198 }
199 if (hasext) {
200 u_int i2, extlen;
201 i2 = ip[0];
202 extlen = (i2 & 0xffff) + 1;
203 if (extlen > len) {
204 printf(" !ext");
205 return;
206 }
207 ip += extlen;
208 }
209 if (contype == 0x1f) /*XXX H.261 */
210 printf(" 0x%04x", ip[0] >> 16);
211 }
212 }
213
214 static const u_char *
215 rtcp_print(const u_char *hdr, const u_char *ep)
216 {
217 /* rtp v2 control (rtcp) */
218 struct rtcp_rr *rr = 0;
219 struct rtcp_sr *sr;
220 struct rtcphdr *rh = (struct rtcphdr *)hdr;
221 u_int len;
222 u_int16_t flags;
223 int cnt;
224 double ts, dts;
225 if ((u_char *)(rh + 1) > ep) {
226 printf(" [|rtcp]");
227 return (ep);
228 }
229 len = (ntohs(rh->rh_len) + 1) * 4;
230 flags = ntohs(rh->rh_flags);
231 cnt = (flags >> 8) & 0x1f;
232 switch (flags & 0xff) {
233 case RTCP_PT_SR:
234 sr = (struct rtcp_sr *)(rh + 1);
235 printf(" sr");
236 if (len != cnt * sizeof(*rr) + sizeof(*sr) + sizeof(*rh))
237 printf(" [%d]", len);
238 if (vflag)
239 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
240 if ((u_char *)(sr + 1) > ep) {
241 printf(" [|rtcp]");
242 return (ep);
243 }
244 ts = (double)((u_int32_t)ntohl(sr->sr_ntp.upper)) +
245 ((double)((u_int32_t)ntohl(sr->sr_ntp.lower)) /
246 4294967296.0);
247 printf(" @%.2f %u %up %ub", ts, (u_int32_t)ntohl(sr->sr_ts),
248 (u_int32_t)ntohl(sr->sr_np), (u_int32_t)ntohl(sr->sr_nb));
249 rr = (struct rtcp_rr *)(sr + 1);
250 break;
251 case RTCP_PT_RR:
252 printf(" rr");
253 if (len != cnt * sizeof(*rr) + sizeof(*rh))
254 printf(" [%d]", len);
255 rr = (struct rtcp_rr *)(rh + 1);
256 if (vflag)
257 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
258 break;
259 case RTCP_PT_SDES:
260 printf(" sdes %d", len);
261 if (vflag)
262 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
263 cnt = 0;
264 break;
265 case RTCP_PT_BYE:
266 printf(" bye %d", len);
267 if (vflag)
268 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
269 cnt = 0;
270 break;
271 default:
272 printf(" type-0x%x %d", flags & 0xff, len);
273 cnt = 0;
274 break;
275 }
276 if (cnt > 1)
277 printf(" c%d", cnt);
278 while (--cnt >= 0) {
279 if ((u_char *)(rr + 1) > ep) {
280 printf(" [|rtcp]");
281 return (ep);
282 }
283 if (vflag)
284 printf(" %u", (u_int32_t)ntohl(rr->rr_srcid));
285 ts = (double)((u_int32_t)ntohl(rr->rr_lsr)) / 65536.;
286 dts = (double)((u_int32_t)ntohl(rr->rr_dlsr)) / 65536.;
287 printf(" %ul %us %uj @%.2f+%.2f",
288 (u_int32_t)ntohl(rr->rr_nl) & 0x00ffffff,
289 (u_int32_t)ntohl(rr->rr_ls),
290 (u_int32_t)ntohl(rr->rr_dv), ts, dts);
291 }
292 return (hdr + len);
293 }
294
295 /* XXX probably should use getservbyname() and cache answers */
296 #define TFTP_PORT 69 /*XXX*/
297 #define KERBEROS_PORT 88 /*XXX*/
298 #define SUNRPC_PORT 111 /*XXX*/
299 #define SNMP_PORT 161 /*XXX*/
300 #define NTP_PORT 123 /*XXX*/
301 #define SNMPTRAP_PORT 162 /*XXX*/
302 #define ISAKMP_PORT 500 /*XXX*/
303 #define RIP_PORT 520 /*XXX*/
304 #define KERBEROS_SEC_PORT 750 /*XXX*/
305 #define L2TP_PORT 1701 /*XXX*/
306 #define ISAKMP_PORT_USER1 7500 /*??? - nonstandard*/
307 #define ISAKMP_PORT_USER2 8500 /*??? - nonstandard*/
308 #define RX_PORT_LOW 7000 /*XXX*/
309 #define RX_PORT_HIGH 7009 /*XXX*/
310 #define NETBIOS_NS_PORT 137
311 #define NETBIOS_DGRAM_PORT 138
312 #define CISCO_AUTORP_PORT 496 /*XXX*/
313
314 #ifdef INET6
315 #define RIPNG_PORT 521 /*XXX*/
316 #define DHCP6_SERV_PORT 546 /*XXX*/
317 #define DHCP6_CLI_PORT 547 /*XXX*/
318 #endif
319
320 void
321 udp_print(register const u_char *bp, u_int length, register const u_char *bp2)
322 {
323 register const struct udphdr *up;
324 register const struct ip *ip;
325 register const u_char *cp;
326 register const u_char *ep = bp + length;
327 u_int16_t sport, dport, ulen;
328 #ifdef INET6
329 register const struct ip6_hdr *ip6;
330 #endif
331
332 if (ep > snapend)
333 ep = snapend;
334 up = (struct udphdr *)bp;
335 ip = (struct ip *)bp2;
336 #ifdef INET6
337 if (ip->ip_v == 6)
338 ip6 = (struct ip6_hdr *)bp2;
339 else
340 ip6 = NULL;
341 #endif /*INET6*/
342 cp = (u_char *)(up + 1);
343 if (cp > snapend) {
344 (void)printf("%s > %s: [|udp]",
345 ipaddr_string(&ip->ip_src), ipaddr_string(&ip->ip_dst));
346 return;
347 }
348 if (length < sizeof(struct udphdr)) {
349 (void)printf("%s > %s: truncated-udp %d",
350 ipaddr_string(&ip->ip_src), ipaddr_string(&ip->ip_dst),
351 length);
352 return;
353 }
354 length -= sizeof(struct udphdr);
355
356 sport = ntohs(up->uh_sport);
357 dport = ntohs(up->uh_dport);
358 ulen = ntohs(up->uh_ulen);
359 if (ulen < 8) {
360 (void)printf("%s > %s: truncated-udplength %d",
361 ipaddr_string(&ip->ip_src),
362 ipaddr_string(&ip->ip_dst),
363 ulen);
364 return;
365 }
366 if (packettype) {
367 register struct rpc_msg *rp;
368 enum msg_type direction;
369
370 switch (packettype) {
371
372 case PT_VAT:
373 (void)printf("%s.%s > %s.%s:",
374 ipaddr_string(&ip->ip_src),
375 udpport_string(sport),
376 ipaddr_string(&ip->ip_dst),
377 udpport_string(dport));
378 vat_print((void *)(up + 1), length, up);
379 break;
380
381 case PT_WB:
382 (void)printf("%s.%s > %s.%s:",
383 ipaddr_string(&ip->ip_src),
384 udpport_string(sport),
385 ipaddr_string(&ip->ip_dst),
386 udpport_string(dport));
387 wb_print((void *)(up + 1), length);
388 break;
389
390 case PT_RPC:
391 rp = (struct rpc_msg *)(up + 1);
392 direction = (enum msg_type)ntohl(rp->rm_direction);
393 if (direction == CALL)
394 sunrpcrequest_print((u_char *)rp, length,
395 (u_char *)ip);
396 else
397 nfsreply_print((u_char *)rp, length,
398 (u_char *)ip); /*XXX*/
399 break;
400
401 case PT_RTP:
402 (void)printf("%s.%s > %s.%s:",
403 ipaddr_string(&ip->ip_src),
404 udpport_string(sport),
405 ipaddr_string(&ip->ip_dst),
406 udpport_string(dport));
407 rtp_print((void *)(up + 1), length, up);
408 break;
409
410 case PT_RTCP:
411 (void)printf("%s.%s > %s.%s:",
412 ipaddr_string(&ip->ip_src),
413 udpport_string(sport),
414 ipaddr_string(&ip->ip_dst),
415 udpport_string(dport));
416 while (cp < ep)
417 cp = rtcp_print(cp, ep);
418 break;
419
420 case PT_SNMP:
421 (void)printf("%s.%s > %s.%s:",
422 ipaddr_string(&ip->ip_src),
423 udpport_string(sport),
424 ipaddr_string(&ip->ip_dst),
425 udpport_string(dport));
426 snmp_print((const u_char *)(up + 1), length);
427 break;
428
429 case PT_CNFP:
430 (void)printf("%s.%s > %s.%s:",
431 ipaddr_string(&ip->ip_src),
432 udpport_string(sport),
433 ipaddr_string(&ip->ip_dst),
434 udpport_string(dport));
435 cnfp_print(cp, length, (const u_char *)ip);
436 break;
437 }
438 return;
439 }
440
441 if (!qflag) {
442 register struct rpc_msg *rp;
443 enum msg_type direction;
444
445 rp = (struct rpc_msg *)(up + 1);
446 if (TTEST(rp->rm_direction)) {
447 direction = (enum msg_type)ntohl(rp->rm_direction);
448 if (dport == NFS_PORT && direction == CALL) {
449 nfsreq_print((u_char *)rp, length,
450 (u_char *)ip);
451 return;
452 }
453 if (sport == NFS_PORT && direction == REPLY) {
454 nfsreply_print((u_char *)rp, length,
455 (u_char *)ip);
456 return;
457 }
458 #ifdef notdef
459 if (dport == SUNRPC_PORT && direction == CALL) {
460 sunrpcrequest_print((u_char *)rp, length, (u_char *)ip);
461 return;
462 }
463 #endif
464 }
465 if (TTEST(((struct LAP *)cp)->type) &&
466 ((struct LAP *)cp)->type == lapDDP &&
467 (atalk_port(sport) || atalk_port(dport))) {
468 if (vflag)
469 fputs("kip ", stdout);
470 atalk_print(cp, length);
471 return;
472 }
473 }
474 #if 0
475 (void)printf("%s.%s > %s.%s:",
476 ipaddr_string(&ip->ip_src), udpport_string(sport),
477 ipaddr_string(&ip->ip_dst), udpport_string(dport));
478 #else
479 #ifdef INET6
480 if (ip6) {
481 if (ip6->ip6_nxt == IPPROTO_UDP) {
482 (void)printf("%s.%s > %s.%s: ",
483 ip6addr_string(&ip6->ip6_src),
484 udpport_string(sport),
485 ip6addr_string(&ip6->ip6_dst),
486 udpport_string(dport));
487 } else {
488 (void)printf("%s > %s: ",
489 udpport_string(sport), udpport_string(dport));
490 }
491 } else
492 #endif /*INET6*/
493 {
494 if (ip->ip_p == IPPROTO_UDP) {
495 (void)printf("%s.%s > %s.%s: ",
496 ipaddr_string(&ip->ip_src),
497 udpport_string(sport),
498 ipaddr_string(&ip->ip_dst),
499 udpport_string(dport));
500 } else {
501 (void)printf("%s > %s: ",
502 udpport_string(sport), udpport_string(dport));
503 }
504 }
505 #endif
506
507 if (!qflag) {
508 #define ISPORT(p) (dport == (p) || sport == (p))
509 if (ISPORT(NAMESERVER_PORT))
510 ns_print((const u_char *)(up + 1), length);
511 else if (ISPORT(TFTP_PORT))
512 tftp_print((const u_char *)(up + 1), length);
513 else if (ISPORT(IPPORT_BOOTPC) || ISPORT(IPPORT_BOOTPS))
514 bootp_print((const u_char *)(up + 1), length,
515 sport, dport);
516 else if (ISPORT(RIP_PORT))
517 rip_print((const u_char *)(up + 1), length);
518 else if (ISPORT(ISAKMP_PORT))
519 isakmp_print((const u_char *)(up + 1), length, bp2);
520 #if 1 /*???*/
521 else if (ISPORT(ISAKMP_PORT_USER1) || ISPORT(ISAKMP_PORT_USER2))
522 isakmp_print((const u_char *)(up + 1), length, bp2);
523 #endif
524 else if (ISPORT(SNMP_PORT) || ISPORT(SNMPTRAP_PORT))
525 snmp_print((const u_char *)(up + 1), length);
526 else if (ISPORT(NTP_PORT))
527 ntp_print((const u_char *)(up + 1), length);
528 else if (ISPORT(KERBEROS_PORT) || ISPORT(KERBEROS_SEC_PORT))
529 krb_print((const void *)(up + 1), length);
530 else if (ISPORT(L2TP_PORT))
531 l2tp_print((const u_char *)(up + 1), length);
532 else if (ISPORT(NETBIOS_NS_PORT)) {
533 nbt_udp137_print((const u_char *)(up + 1), length);
534 }
535 else if (ISPORT(NETBIOS_DGRAM_PORT)) {
536 nbt_udp138_print((const u_char *)(up + 1), length);
537 }
538 else if (dport == 3456)
539 vat_print((const void *)(up + 1), length, up);
540 /*
541 * Since there are 10 possible ports to check, I think
542 * a <> test would be more efficient
543 */
544 else if ((sport >= RX_PORT_LOW && sport <= RX_PORT_HIGH) ||
545 (dport >= RX_PORT_LOW && dport <= RX_PORT_HIGH))
546 rx_print((const void *)(up + 1), length, sport, dport,
547 (u_char *) ip);
548 #ifdef INET6
549 else if (ISPORT(RIPNG_PORT))
550 ripng_print((const u_char *)(up + 1), length);
551 else if (ISPORT(DHCP6_SERV_PORT) || ISPORT(DHCP6_CLI_PORT)) {
552 dhcp6_print((const u_char *)(up + 1), length,
553 sport, dport);
554 }
555 #endif /*INET6*/
556 /*
557 * Kludge in test for whiteboard packets.
558 */
559 else if (dport == 4567)
560 wb_print((const void *)(up + 1), length);
561 else if (ISPORT(CISCO_AUTORP_PORT))
562 cisco_autorp_print((const void *)(up + 1), length);
563 else
564 (void)printf(" udp %u",
565 (u_int32_t)(ulen - sizeof(*up)));
566 #undef ISPORT
567 } else
568 (void)printf(" udp %u", (u_int32_t)(ulen - sizeof(*up)));
569 }
[mirror] the TCPdump network dissector