]> The Tcpdump Group git mirrors - tcpdump/blob - print-bgp.c
projects / tcpdump / blob
summary | shortlog | log | commit | commitdiff | tree
history | raw | HEAD
Fix typo.
[tcpdump] / print-bgp.c
1 /*
2 * Copyright (C) 1999 WIDE Project.
3 * All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 * notice, this list of conditions and the following disclaimer in the
12 * documentation and/or other materials provided with the distribution.
13 * 3. Neither the name of the project nor the names of its contributors
14 * may be used to endorse or promote products derived from this software
15 * without specific prior written permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED. IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 *
29 * Extensively modified by Hannes Gredler (hannes@juniper.net) for more
30 * complete BGP support.
31 */
32
33 #ifdef HAVE_CONFIG_H
34 #include "config.h"
35 #endif
36
37 #ifndef lint
38 static const char rcsid[] _U_ =
39 "@(#) $Header: /tcpdump/master/tcpdump/print-bgp.c,v 1.118 2007-12-07 15:54:52 hannes Exp $";
40 #endif
41
42 #include <tcpdump-stdinc.h>
43
44 #include <stdio.h>
45 #include <string.h>
46
47 #include "interface.h"
48 #include "decode_prefix.h"
49 #include "addrtoname.h"
50 #include "extract.h"
51 #include "bgp.h"
52 #include "af.h"
53 #include "l2vpn.h"
54
55 struct bgp {
56 u_int8_t bgp_marker[16];
57 u_int16_t bgp_len;
58 u_int8_t bgp_type;
59 };
60 #define BGP_SIZE 19 /* unaligned */
61
62 #define BGP_OPEN 1
63 #define BGP_UPDATE 2
64 #define BGP_NOTIFICATION 3
65 #define BGP_KEEPALIVE 4
66 #define BGP_ROUTE_REFRESH 5
67
68 static struct tok bgp_msg_values[] = {
69 { BGP_OPEN, "Open"},
70 { BGP_UPDATE, "Update"},
71 { BGP_NOTIFICATION, "Notification"},
72 { BGP_KEEPALIVE, "Keepalive"},
73 { BGP_ROUTE_REFRESH, "Route Refresh"},
74 { 0, NULL}
75 };
76
77 struct bgp_open {
78 u_int8_t bgpo_marker[16];
79 u_int16_t bgpo_len;
80 u_int8_t bgpo_type;
81 u_int8_t bgpo_version;
82 u_int16_t bgpo_myas;
83 u_int16_t bgpo_holdtime;
84 u_int32_t bgpo_id;
85 u_int8_t bgpo_optlen;
86 /* options should follow */
87 };
88 #define BGP_OPEN_SIZE 29 /* unaligned */
89
90 struct bgp_opt {
91 u_int8_t bgpopt_type;
92 u_int8_t bgpopt_len;
93 /* variable length */
94 };
95 #define BGP_OPT_SIZE 2 /* some compilers may pad to 4 bytes */
96
97 #define BGP_UPDATE_MINSIZE 23
98
99 struct bgp_notification {
100 u_int8_t bgpn_marker[16];
101 u_int16_t bgpn_len;
102 u_int8_t bgpn_type;
103 u_int8_t bgpn_major;
104 u_int8_t bgpn_minor;
105 };
106 #define BGP_NOTIFICATION_SIZE 21 /* unaligned */
107
108 struct bgp_route_refresh {
109 u_int8_t bgp_marker[16];
110 u_int16_t len;
111 u_int8_t type;
112 u_int8_t afi[2]; /* the compiler messes this structure up */
113 u_int8_t res; /* when doing misaligned sequences of int8 and int16 */
114 u_int8_t safi; /* afi should be int16 - so we have to access it using */
115 }; /* EXTRACT_16BITS(&bgp_route_refresh->afi) (sigh) */
116 #define BGP_ROUTE_REFRESH_SIZE 23
117
118 struct bgp_attr {
119 u_int8_t bgpa_flags;
120 u_int8_t bgpa_type;
121 union {
122 u_int8_t len;
123 u_int16_t elen;
124 } bgpa_len;
125 #define bgp_attr_len(p) \
126 (((p)->bgpa_flags & 0x10) ? \
127 EXTRACT_16BITS(&(p)->bgpa_len.elen) : (p)->bgpa_len.len)
128 #define bgp_attr_off(p) \
129 (((p)->bgpa_flags & 0x10) ? 4 : 3)
130 };
131
132 #define BGPTYPE_ORIGIN 1
133 #define BGPTYPE_AS_PATH 2
134 #define BGPTYPE_NEXT_HOP 3
135 #define BGPTYPE_MULTI_EXIT_DISC 4
136 #define BGPTYPE_LOCAL_PREF 5
137 #define BGPTYPE_ATOMIC_AGGREGATE 6
138 #define BGPTYPE_AGGREGATOR 7
139 #define BGPTYPE_COMMUNITIES 8 /* RFC1997 */
140 #define BGPTYPE_ORIGINATOR_ID 9 /* RFC1998 */
141 #define BGPTYPE_CLUSTER_LIST 10 /* RFC1998 */
142 #define BGPTYPE_DPA 11 /* draft-ietf-idr-bgp-dpa */
143 #define BGPTYPE_ADVERTISERS 12 /* RFC1863 */
144 #define BGPTYPE_RCID_PATH 13 /* RFC1863 */
145 #define BGPTYPE_MP_REACH_NLRI 14 /* RFC2283 */
146 #define BGPTYPE_MP_UNREACH_NLRI 15 /* RFC2283 */
147 #define BGPTYPE_EXTD_COMMUNITIES 16 /* draft-ietf-idr-bgp-ext-communities */
148 #define BGPTYPE_AS4_PATH 17 /* RFC4893 */
149 #define BGPTYPE_AGGREGATOR4 18 /* RFC4893 */
150 #define BGPTYPE_PMSI_TUNNEL 22 /* draft-ietf-l3vpn-2547bis-mcast-bgp-02.txt */
151 #define BGPTYPE_ATTR_SET 128 /* draft-marques-ppvpn-ibgp */
152
153 #define BGP_MP_NLRI_MINSIZE 3 /* End of RIB Marker detection */
154
155 static struct tok bgp_attr_values[] = {
156 { BGPTYPE_ORIGIN, "Origin"},
157 { BGPTYPE_AS_PATH, "AS Path"},
158 { BGPTYPE_AS4_PATH, "AS4 Path"},
159 { BGPTYPE_NEXT_HOP, "Next Hop"},
160 { BGPTYPE_MULTI_EXIT_DISC, "Multi Exit Discriminator"},
161 { BGPTYPE_LOCAL_PREF, "Local Preference"},
162 { BGPTYPE_ATOMIC_AGGREGATE, "Atomic Aggregate"},
163 { BGPTYPE_AGGREGATOR, "Aggregator"},
164 { BGPTYPE_AGGREGATOR4, "Aggregator4"},
165 { BGPTYPE_COMMUNITIES, "Community"},
166 { BGPTYPE_ORIGINATOR_ID, "Originator ID"},
167 { BGPTYPE_CLUSTER_LIST, "Cluster List"},
168 { BGPTYPE_DPA, "DPA"},
169 { BGPTYPE_ADVERTISERS, "Advertisers"},
170 { BGPTYPE_RCID_PATH, "RCID Path / Cluster ID"},
171 { BGPTYPE_MP_REACH_NLRI, "Multi-Protocol Reach NLRI"},
172 { BGPTYPE_MP_UNREACH_NLRI, "Multi-Protocol Unreach NLRI"},
173 { BGPTYPE_EXTD_COMMUNITIES, "Extended Community"},
174 { BGPTYPE_PMSI_TUNNEL, "PMSI Tunnel"},
175 { BGPTYPE_ATTR_SET, "Attribute Set"},
176 { 255, "Reserved for development"},
177 { 0, NULL}
178 };
179
180 #define BGP_AS_SET 1
181 #define BGP_AS_SEQUENCE 2
182 #define BGP_CONFED_AS_SEQUENCE 3 /* draft-ietf-idr-rfc3065bis-01 */
183 #define BGP_CONFED_AS_SET 4 /* draft-ietf-idr-rfc3065bis-01 */
184
185 #define BGP_AS_SEG_TYPE_MIN BGP_AS_SET
186 #define BGP_AS_SEG_TYPE_MAX BGP_CONFED_AS_SET
187
188 static struct tok bgp_as_path_segment_open_values[] = {
189 { BGP_AS_SEQUENCE, ""},
190 { BGP_AS_SET, "{ "},
191 { BGP_CONFED_AS_SEQUENCE, "( "},
192 { BGP_CONFED_AS_SET, "({ "},
193 { 0, NULL}
194 };
195
196 static struct tok bgp_as_path_segment_close_values[] = {
197 { BGP_AS_SEQUENCE, ""},
198 { BGP_AS_SET, "}"},
199 { BGP_CONFED_AS_SEQUENCE, ")"},
200 { BGP_CONFED_AS_SET, "})"},
201 { 0, NULL}
202 };
203
204 #define BGP_OPT_AUTH 1
205 #define BGP_OPT_CAP 2
206
207
208 static struct tok bgp_opt_values[] = {
209 { BGP_OPT_AUTH, "Authentication Information"},
210 { BGP_OPT_CAP, "Capabilities Advertisement"},
211 { 0, NULL}
212 };
213
214 #define BGP_CAPCODE_MP 1
215 #define BGP_CAPCODE_RR 2
216 #define BGP_CAPCODE_ORF 3 /* XXX */
217 #define BGP_CAPCODE_RESTART 64 /* draft-ietf-idr-restart-05 */
218 #define BGP_CAPCODE_AS_NEW 65 /* XXX */
219 #define BGP_CAPCODE_DYN_CAP 67 /* XXX */
220 #define BGP_CAPCODE_RR_CISCO 128
221
222 static struct tok bgp_capcode_values[] = {
223 { BGP_CAPCODE_MP, "Multiprotocol Extensions"},
224 { BGP_CAPCODE_RR, "Route Refresh"},
225 { BGP_CAPCODE_ORF, "Cooperative Route Filtering"},
226 { BGP_CAPCODE_RESTART, "Graceful Restart"},
227 { BGP_CAPCODE_AS_NEW, "32-Bit AS Number"},
228 { BGP_CAPCODE_DYN_CAP, "Dynamic Capability"},
229 { BGP_CAPCODE_RR_CISCO, "Route Refresh (Cisco)"},
230 { 0, NULL}
231 };
232
233 #define BGP_NOTIFY_MAJOR_MSG 1
234 #define BGP_NOTIFY_MAJOR_OPEN 2
235 #define BGP_NOTIFY_MAJOR_UPDATE 3
236 #define BGP_NOTIFY_MAJOR_HOLDTIME 4
237 #define BGP_NOTIFY_MAJOR_FSM 5
238 #define BGP_NOTIFY_MAJOR_CEASE 6
239 #define BGP_NOTIFY_MAJOR_CAP 7
240
241 static struct tok bgp_notify_major_values[] = {
242 { BGP_NOTIFY_MAJOR_MSG, "Message Header Error"},
243 { BGP_NOTIFY_MAJOR_OPEN, "OPEN Message Error"},
244 { BGP_NOTIFY_MAJOR_UPDATE, "UPDATE Message Error"},
245 { BGP_NOTIFY_MAJOR_HOLDTIME,"Hold Timer Expired"},
246 { BGP_NOTIFY_MAJOR_FSM, "Finite State Machine Error"},
247 { BGP_NOTIFY_MAJOR_CEASE, "Cease"},
248 { BGP_NOTIFY_MAJOR_CAP, "Capability Message Error"},
249 { 0, NULL}
250 };
251
252 /* draft-ietf-idr-cease-subcode-02 */
253 #define BGP_NOTIFY_MINOR_CEASE_MAXPRFX 1
254 static struct tok bgp_notify_minor_cease_values[] = {
255 { BGP_NOTIFY_MINOR_CEASE_MAXPRFX, "Maximum Number of Prefixes Reached"},
256 { 2, "Administratively Shutdown"},
257 { 3, "Peer Unconfigured"},
258 { 4, "Administratively Reset"},
259 { 5, "Connection Rejected"},
260 { 6, "Other Configuration Change"},
261 { 7, "Connection Collision Resolution"},
262 { 0, NULL}
263 };
264
265 static struct tok bgp_notify_minor_msg_values[] = {
266 { 1, "Connection Not Synchronized"},
267 { 2, "Bad Message Length"},
268 { 3, "Bad Message Type"},
269 { 0, NULL}
270 };
271
272 static struct tok bgp_notify_minor_open_values[] = {
273 { 1, "Unsupported Version Number"},
274 { 2, "Bad Peer AS"},
275 { 3, "Bad BGP Identifier"},
276 { 4, "Unsupported Optional Parameter"},
277 { 5, "Authentication Failure"},
278 { 6, "Unacceptable Hold Time"},
279 { 7, "Capability Message Error"},
280 { 0, NULL}
281 };
282
283 static struct tok bgp_notify_minor_update_values[] = {
284 { 1, "Malformed Attribute List"},
285 { 2, "Unrecognized Well-known Attribute"},
286 { 3, "Missing Well-known Attribute"},
287 { 4, "Attribute Flags Error"},
288 { 5, "Attribute Length Error"},
289 { 6, "Invalid ORIGIN Attribute"},
290 { 7, "AS Routing Loop"},
291 { 8, "Invalid NEXT_HOP Attribute"},
292 { 9, "Optional Attribute Error"},
293 { 10, "Invalid Network Field"},
294 { 11, "Malformed AS_PATH"},
295 { 0, NULL}
296 };
297
298 static struct tok bgp_notify_minor_cap_values[] = {
299 { 1, "Invalid Action Value" },
300 { 2, "Invalid Capability Length" },
301 { 3, "Malformed Capability Value" },
302 { 4, "Unsupported Capability Code" },
303 { 0, NULL }
304 };
305
306 static struct tok bgp_origin_values[] = {
307 { 0, "IGP"},
308 { 1, "EGP"},
309 { 2, "Incomplete"},
310 { 0, NULL}
311 };
312
313 #define BGP_PMSI_TUNNEL_RSVP_P2MP 1
314 #define BGP_PMSI_TUNNEL_LDP_P2MP 2
315 #define BGP_PMSI_TUNNEL_PIM_SSM 3
316 #define BGP_PMSI_TUNNEL_PIM_SM 4
317 #define BGP_PMSI_TUNNEL_PIM_BIDIR 5
318 #define BGP_PMSI_TUNNEL_INGRESS 6
319 #define BGP_PMSI_TUNNEL_LDP_MP2MP 7
320
321 static struct tok bgp_pmsi_tunnel_values[] = {
322 { BGP_PMSI_TUNNEL_RSVP_P2MP, "RSVP-TE P2MP LSP"},
323 { BGP_PMSI_TUNNEL_LDP_P2MP, "LDP P2MP LSP"},
324 { BGP_PMSI_TUNNEL_PIM_SSM, "PIM-SSM Tree"},
325 { BGP_PMSI_TUNNEL_PIM_SM, "PIM-SM Tree"},
326 { BGP_PMSI_TUNNEL_PIM_BIDIR, "PIM-Bidir Tree"},
327 { BGP_PMSI_TUNNEL_INGRESS, "Ingress Replication"},
328 { BGP_PMSI_TUNNEL_LDP_MP2MP, "LDP MP2MP LSP"},
329 { 0, NULL}
330 };
331
332 static struct tok bgp_pmsi_flag_values[] = {
333 { 0x01, "Leaf Information required"},
334 { 0, NULL}
335 };
336
337
338 /* Subsequent address family identifier, RFC2283 section 7 */
339 #define SAFNUM_RES 0
340 #define SAFNUM_UNICAST 1
341 #define SAFNUM_MULTICAST 2
342 #define SAFNUM_UNIMULTICAST 3
343 /* labeled BGP RFC3107 */
344 #define SAFNUM_LABUNICAST 4
345 /* draft-ietf-l3vpn-2547bis-mcast-bgp-02.txt */
346 #define SAFNUM_MULTICAST_VPN 5
347 #define SAFNUM_TUNNEL 64 /* XXX */
348 #define SAFNUM_VPLS 65 /* XXX */
349 /* draft-nalawade-idr-mdt-safi-03 */
350 #define SAFNUM_MDT 66
351 /* Section 4.3.4 of draft-rosen-rfc2547bis-03.txt */
352 #define SAFNUM_VPNUNICAST 128
353 #define SAFNUM_VPNMULTICAST 129
354 #define SAFNUM_VPNUNIMULTICAST 130
355 /* draft-marques-ppvpn-rt-constrain-01.txt */
356 #define SAFNUM_RT_ROUTING_INFO 132
357
358 #define BGP_VPN_RD_LEN 8
359
360 static struct tok bgp_safi_values[] = {
361 { SAFNUM_RES, "Reserved"},
362 { SAFNUM_UNICAST, "Unicast"},
363 { SAFNUM_MULTICAST, "Multicast"},
364 { SAFNUM_UNIMULTICAST, "Unicast+Multicast"},
365 { SAFNUM_LABUNICAST, "labeled Unicast"},
366 { SAFNUM_TUNNEL, "Tunnel"},
367 { SAFNUM_VPLS, "VPLS"},
368 { SAFNUM_MDT, "MDT"},
369 { SAFNUM_VPNUNICAST, "labeled VPN Unicast"},
370 { SAFNUM_VPNMULTICAST, "labeled VPN Multicast"},
371 { SAFNUM_VPNUNIMULTICAST, "labeled VPN Unicast+Multicast"},
372 { SAFNUM_RT_ROUTING_INFO, "Route Target Routing Information"},
373 { SAFNUM_MULTICAST_VPN, "Multicast VPN"},
374 { 0, NULL }
375 };
376
377 /* well-known community */
378 #define BGP_COMMUNITY_NO_EXPORT 0xffffff01
379 #define BGP_COMMUNITY_NO_ADVERT 0xffffff02
380 #define BGP_COMMUNITY_NO_EXPORT_SUBCONFED 0xffffff03
381
382 /* Extended community type - draft-ietf-idr-bgp-ext-communities-05 */
383 #define BGP_EXT_COM_RT_0 0x0002 /* Route Target,Format AS(2bytes):AN(4bytes) */
384 #define BGP_EXT_COM_RT_1 0x0102 /* Route Target,Format IP address:AN(2bytes) */
385 #define BGP_EXT_COM_RT_2 0x0202 /* Route Target,Format AN(4bytes):local(2bytes) */
386 #define BGP_EXT_COM_RO_0 0x0003 /* Route Origin,Format AS(2bytes):AN(4bytes) */
387 #define BGP_EXT_COM_RO_1 0x0103 /* Route Origin,Format IP address:AN(2bytes) */
388 #define BGP_EXT_COM_RO_2 0x0203 /* Route Origin,Format AN(4bytes):local(2bytes) */
389 #define BGP_EXT_COM_LINKBAND 0x4004 /* Link Bandwidth,Format AS(2B):Bandwidth(4B) */
390 /* rfc2547 bgp-mpls-vpns */
391 #define BGP_EXT_COM_VPN_ORIGIN 0x0005 /* OSPF Domain ID / VPN of Origin - draft-rosen-vpns-ospf-bgp-mpls */
392 #define BGP_EXT_COM_VPN_ORIGIN2 0x0105 /* duplicate - keep for backwards compatability */
393 #define BGP_EXT_COM_VPN_ORIGIN3 0x0205 /* duplicate - keep for backwards compatability */
394 #define BGP_EXT_COM_VPN_ORIGIN4 0x8005 /* duplicate - keep for backwards compatability */
395
396 #define BGP_EXT_COM_OSPF_RTYPE 0x0306 /* OSPF Route Type,Format Area(4B):RouteType(1B):Options(1B) */
397 #define BGP_EXT_COM_OSPF_RTYPE2 0x8000 /* duplicate - keep for backwards compatability */
398
399 #define BGP_EXT_COM_OSPF_RID 0x0107 /* OSPF Router ID,Format RouterID(4B):Unused(2B) */
400 #define BGP_EXT_COM_OSPF_RID2 0x8001 /* duplicate - keep for backwards compatability */
401
402 #define BGP_EXT_COM_L2INFO 0x800a /* draft-kompella-ppvpn-l2vpn */
403
404 #define BGP_EXT_COM_SOURCE_AS 0x0009 /* draft-ietf-l3vpn-2547bis-mcast-bgp-02.txt */
405 #define BGP_EXT_COM_VRF_RT_IMP 0x010a /* draft-ietf-l3vpn-2547bis-mcast-bgp-02.txt */
406
407 /* http://www.cisco.com/en/US/tech/tk436/tk428/technologies_tech_note09186a00801eb09a.shtml */
408 #define BGP_EXT_COM_EIGRP_GEN 0x8800
409 #define BGP_EXT_COM_EIGRP_METRIC_AS_DELAY 0x8801
410 #define BGP_EXT_COM_EIGRP_METRIC_REL_NH_BW 0x8802
411 #define BGP_EXT_COM_EIGRP_METRIC_LOAD_MTU 0x8803
412 #define BGP_EXT_COM_EIGRP_EXT_REMAS_REMID 0x8804
413 #define BGP_EXT_COM_EIGRP_EXT_REMPROTO_REMMETRIC 0x8805
414
415 static struct tok bgp_extd_comm_flag_values[] = {
416 { 0x8000, "vendor-specific"},
417 { 0x4000, "non-transitive"},
418 { 0, NULL},
419 };
420
421 static struct tok bgp_extd_comm_subtype_values[] = {
422 { BGP_EXT_COM_RT_0, "target"},
423 { BGP_EXT_COM_RT_1, "target"},
424 { BGP_EXT_COM_RT_2, "target"},
425 { BGP_EXT_COM_RO_0, "origin"},
426 { BGP_EXT_COM_RO_1, "origin"},
427 { BGP_EXT_COM_RO_2, "origin"},
428 { BGP_EXT_COM_LINKBAND, "link-BW"},
429 { BGP_EXT_COM_VPN_ORIGIN, "ospf-domain"},
430 { BGP_EXT_COM_VPN_ORIGIN2, "ospf-domain"},
431 { BGP_EXT_COM_VPN_ORIGIN3, "ospf-domain"},
432 { BGP_EXT_COM_VPN_ORIGIN4, "ospf-domain"},
433 { BGP_EXT_COM_OSPF_RTYPE, "ospf-route-type"},
434 { BGP_EXT_COM_OSPF_RTYPE2, "ospf-route-type"},
435 { BGP_EXT_COM_OSPF_RID, "ospf-router-id"},
436 { BGP_EXT_COM_OSPF_RID2, "ospf-router-id"},
437 { BGP_EXT_COM_L2INFO, "layer2-info"},
438 { BGP_EXT_COM_EIGRP_GEN , "eigrp-general-route (flag, tag)" },
439 { BGP_EXT_COM_EIGRP_METRIC_AS_DELAY , "eigrp-route-metric (AS, delay)" },
440 { BGP_EXT_COM_EIGRP_METRIC_REL_NH_BW , "eigrp-route-metric (reliability, nexthop, bandwidth)" },
441 { BGP_EXT_COM_EIGRP_METRIC_LOAD_MTU , "eigrp-route-metric (load, MTU)" },
442 { BGP_EXT_COM_EIGRP_EXT_REMAS_REMID , "eigrp-external-route (remote-AS, remote-ID)" },
443 { BGP_EXT_COM_EIGRP_EXT_REMPROTO_REMMETRIC , "eigrp-external-route (remote-proto, remote-metric)" },
444 { BGP_EXT_COM_SOURCE_AS, "source-AS" },
445 { BGP_EXT_COM_VRF_RT_IMP, "vrf-route-import"},
446 { 0, NULL},
447 };
448
449 /* OSPF codes for BGP_EXT_COM_OSPF_RTYPE draft-rosen-vpns-ospf-bgp-mpls */
450 #define BGP_OSPF_RTYPE_RTR 1 /* OSPF Router LSA */
451 #define BGP_OSPF_RTYPE_NET 2 /* OSPF Network LSA */
452 #define BGP_OSPF_RTYPE_SUM 3 /* OSPF Summary LSA */
453 #define BGP_OSPF_RTYPE_EXT 5 /* OSPF External LSA, note that ASBR doesn't apply to MPLS-VPN */
454 #define BGP_OSPF_RTYPE_NSSA 7 /* OSPF NSSA External*/
455 #define BGP_OSPF_RTYPE_SHAM 129 /* OSPF-MPLS-VPN Sham link */
456 #define BGP_OSPF_RTYPE_METRIC_TYPE 0x1 /* LSB of RTYPE Options Field */
457
458 static struct tok bgp_extd_comm_ospf_rtype_values[] = {
459 { BGP_OSPF_RTYPE_RTR, "Router" },
460 { BGP_OSPF_RTYPE_NET, "Network" },
461 { BGP_OSPF_RTYPE_SUM, "Summary" },
462 { BGP_OSPF_RTYPE_EXT, "External" },
463 { BGP_OSPF_RTYPE_NSSA,"NSSA External" },
464 { BGP_OSPF_RTYPE_SHAM,"MPLS-VPN Sham" },
465 { 0, NULL },
466 };
467
468 #define TOKBUFSIZE 128
469 static char astostr[20];
470
471 /*
472 * as_printf
473 *
474 * Convert an AS number into a string and return string pointer.
475 *
476 * Bepending on bflag is set or not, AS number is converted into ASDOT notation
477 * or plain number notation.
478 *
479 */
480 static char *
481 as_printf (char *str, int size, u_int asnum)
482 {
483 if (!bflag || asnum <= 0xFFFF) {
484 snprintf(str, size, "%u", asnum);
485 } else {
486 snprintf(str, size, "%u.%u", asnum >> 16, asnum & 0xFFFF);
487 }
488 return str;
489 }
490
491 int
492 decode_prefix4(const u_char *pptr, char *buf, u_int buflen)
493 {
494 struct in_addr addr;
495 u_int plen;
496
497 TCHECK(pptr[0]);
498 plen = pptr[0];
499 if (32 < plen)
500 return -1;
501
502 memset(&addr, 0, sizeof(addr));
503 TCHECK2(pptr[1], (plen + 7) / 8);
504 memcpy(&addr, &pptr[1], (plen + 7) / 8);
505 if (plen % 8) {
506 ((u_char *)&addr)[(plen + 7) / 8 - 1] &=
507 ((0xff00 >> (plen % 8)) & 0xff);
508 }
509 snprintf(buf, buflen, "%s/%d", getname((u_char *)&addr), plen);
510 return 1 + (plen + 7) / 8;
511
512 trunc:
513 return -2;
514 }
515
516 static int
517 decode_labeled_prefix4(const u_char *pptr, char *buf, u_int buflen)
518 {
519 struct in_addr addr;
520 u_int plen;
521
522 TCHECK(pptr[0]);
523 plen = pptr[0]; /* get prefix length */
524
525 /* this is one of the weirdnesses of rfc3107
526 the label length (actually the label + COS bits)
527 is added to the prefix length;
528 we also do only read out just one label -
529 there is no real application for advertisement of
530 stacked labels in a a single BGP message
531 */
532
533 if (24 > plen)
534 return -1;
535
536 plen-=24; /* adjust prefixlen - labellength */
537
538 if (32 < plen)
539 return -1;
540
541 memset(&addr, 0, sizeof(addr));
542 TCHECK2(pptr[4], (plen + 7) / 8);
543 memcpy(&addr, &pptr[4], (plen + 7) / 8);
544 if (plen % 8) {
545 ((u_char *)&addr)[(plen + 7) / 8 - 1] &=
546 ((0xff00 >> (plen % 8)) & 0xff);
547 }
548 /* the label may get offsetted by 4 bits so lets shift it right */
549 snprintf(buf, buflen, "%s/%d, label:%u %s",
550 getname((u_char *)&addr),
551 plen,
552 EXTRACT_24BITS(pptr+1)>>4,
553 ((pptr[3]&1)==0) ? "(BOGUS: Bottom of Stack NOT set!)" : "(bottom)" );
554
555 return 4 + (plen + 7) / 8;
556
557 trunc:
558 return -2;
559 }
560
561 /*
562 * bgp_vpn_ip_print
563 *
564 * print an ipv4 or ipv6 address into a buffer dependend on address length.
565 */
566 static char *
567 bgp_vpn_ip_print (const u_char *pptr, u_int addr_length) {
568
569 /* worst case string is s fully formatted v6 address */
570 static char addr[sizeof("1234:5678:89ab:cdef:1234:5678:89ab:cdef")];
571 char *pos = addr;
572
573 switch(addr_length) {
574 case (sizeof(struct in_addr) << 3): /* 32 */
575 TCHECK2(pptr[0], sizeof(struct in_addr));
576 snprintf(pos, sizeof(addr), "%s", ipaddr_string(pptr));
577 break;
578 #ifdef INET6
579 case (sizeof(struct in6_addr) << 3): /* 128 */
580 TCHECK2(pptr[0], sizeof(struct in6_addr));
581 snprintf(pos, sizeof(addr), "%s", ip6addr_string(pptr));
582 break;
583 #endif
584 default:
585 snprintf(pos, sizeof(addr), "bogus address length %u", addr_length);
586 break;
587 }
588 pos += strlen(pos);
589
590 trunc:
591 *(pos) = '\0';
592 return (addr);
593 }
594
595 /*
596 * bgp_vpn_sg_print
597 *
598 * print an multicast s,g entry into a buffer.
599 * the s,g entry is encoded like this.
600 *
601 * +-----------------------------------+
602 * | Multicast Source Length (1 octet) |
603 * +-----------------------------------+
604 * | Multicast Source (Variable) |
605 * +-----------------------------------+
606 * | Multicast Group Length (1 octet) |
607 * +-----------------------------------+
608 * | Multicast Group (Variable) |
609 * +-----------------------------------+
610 *
611 * return the number of bytes read from the wire.
612 */
613 static int
614 bgp_vpn_sg_print (const u_char *pptr, char *buf, u_int buflen) {
615
616 u_int8_t addr_length;
617 u_int total_length, offset;
618
619 total_length = 0;
620
621 /* Source address length, encoded in bits */
622 TCHECK2(pptr[0], 1);
623 addr_length = *pptr++;
624
625 /* Source address */
626 TCHECK2(pptr[0], (addr_length >> 3));
627 total_length += (addr_length >> 3) + 1;
628 offset = strlen(buf);
629 if (addr_length) {
630 snprintf(buf + offset, buflen - offset, ", Source %s",
631 bgp_vpn_ip_print(pptr, addr_length));
632 pptr += (addr_length >> 3);
633 }
634
635 /* Group address length, encoded in bits */
636 TCHECK2(pptr[0], 1);
637 addr_length = *pptr++;
638
639 /* Group address */
640 TCHECK2(pptr[0], (addr_length >> 3));
641 total_length += (addr_length >> 3) + 1;
642 offset = strlen(buf);
643 if (addr_length) {
644 snprintf(buf + offset, buflen - offset, ", Group %s",
645 bgp_vpn_ip_print(pptr, addr_length));
646 pptr += (addr_length >> 3);
647 }
648
649 trunc:
650 return (total_length);
651 }
652
653
654 /* RDs and RTs share the same semantics
655 * we use bgp_vpn_rd_print for
656 * printing route targets inside a NLRI */
657 char *
658 bgp_vpn_rd_print (const u_char *pptr) {
659
660 /* allocate space for the largest possible string */
661 static char rd[sizeof("xxxxxxxxxx:xxxxx (xxx.xxx.xxx.xxx:xxxxx)")];
662 char *pos = rd;
663
664 /* ok lets load the RD format */
665 switch (EXTRACT_16BITS(pptr)) {
666
667 /* 2-byte-AS:number fmt*/
668 case 0:
669 snprintf(pos, sizeof(rd) - (pos - rd), "%u:%u (= %u.%u.%u.%u)",
670 EXTRACT_16BITS(pptr+2),
671 EXTRACT_32BITS(pptr+4),
672 *(pptr+4), *(pptr+5), *(pptr+6), *(pptr+7));
673 break;
674 /* IP-address:AS fmt*/
675
676 case 1:
677 snprintf(pos, sizeof(rd) - (pos - rd), "%u.%u.%u.%u:%u",
678 *(pptr+2), *(pptr+3), *(pptr+4), *(pptr+5), EXTRACT_16BITS(pptr+6));
679 break;
680
681 /* 4-byte-AS:number fmt*/
682 case 2:
683 snprintf(pos, sizeof(rd) - (pos - rd), "%s:%u (%u.%u.%u.%u:%u)",
684 as_printf(astostr, sizeof(astostr), EXTRACT_32BITS(pptr+2)),
685 EXTRACT_16BITS(pptr+6), *(pptr+2), *(pptr+3), *(pptr+4),
686 *(pptr+5), EXTRACT_16BITS(pptr+6));
687 break;
688 default:
689 snprintf(pos, sizeof(rd) - (pos - rd), "unknown RD format");
690 break;
691 }
692 pos += strlen(pos);
693 *(pos) = '\0';
694 return (rd);
695 }
696
697 static int
698 decode_rt_routing_info(const u_char *pptr, char *buf, u_int buflen)
699 {
700 u_int8_t route_target[8];
701 u_int plen;
702
703 TCHECK(pptr[0]);
704 plen = pptr[0]; /* get prefix length */
705
706 if (0 == plen)
707 return 1; /* default route target */
708
709 if (32 > plen)
710 return -1;
711
712 plen-=32; /* adjust prefix length */
713
714 if (64 < plen)
715 return -1;
716
717 memset(&route_target, 0, sizeof(route_target));
718 TCHECK2(pptr[1], (plen + 7) / 8);
719 memcpy(&route_target, &pptr[1], (plen + 7) / 8);
720 if (plen % 8) {
721 ((u_char *)&route_target)[(plen + 7) / 8 - 1] &=
722 ((0xff00 >> (plen % 8)) & 0xff);
723 }
724 snprintf(buf, buflen, "origin AS: %s, route target %s",
725 as_printf(astostr, sizeof(astostr), EXTRACT_32BITS(pptr+1)),
726 bgp_vpn_rd_print((u_char *)&route_target));
727
728 return 5 + (plen + 7) / 8;
729
730 trunc:
731 return -2;
732 }
733
734 static int
735 decode_labeled_vpn_prefix4(const u_char *pptr, char *buf, u_int buflen)
736 {
737 struct in_addr addr;
738 u_int plen;
739
740 TCHECK(pptr[0]);
741 plen = pptr[0]; /* get prefix length */
742
743 if ((24+64) > plen)
744 return -1;
745
746 plen-=(24+64); /* adjust prefixlen - labellength - RD len*/
747
748 if (32 < plen)
749 return -1;
750
751 memset(&addr, 0, sizeof(addr));
752 TCHECK2(pptr[12], (plen + 7) / 8);
753 memcpy(&addr, &pptr[12], (plen + 7) / 8);
754 if (plen % 8) {
755 ((u_char *)&addr)[(plen + 7) / 8 - 1] &=
756 ((0xff00 >> (plen % 8)) & 0xff);
757 }
758 /* the label may get offsetted by 4 bits so lets shift it right */
759 snprintf(buf, buflen, "RD: %s, %s/%d, label:%u %s",
760 bgp_vpn_rd_print(pptr+4),
761 getname((u_char *)&addr),
762 plen,
763 EXTRACT_24BITS(pptr+1)>>4,
764 ((pptr[3]&1)==0) ? "(BOGUS: Bottom of Stack NOT set!)" : "(bottom)" );
765
766 return 12 + (plen + 7) / 8;
767
768 trunc:
769 return -2;
770 }
771
772 /*
773 * +-------------------------------+
774 * | |
775 * | RD:IPv4-address (12 octets) |
776 * | |
777 * +-------------------------------+
778 * | MDT Group-address (4 octets) |
779 * +-------------------------------+
780 */
781
782 #define MDT_VPN_NLRI_LEN 16
783
784 static int
785 decode_mdt_vpn_nlri(const u_char *pptr, char *buf, u_int buflen)
786 {
787
788 const u_char *rd;
789 const u_char *vpn_ip;
790
791 TCHECK(pptr[0]);
792
793 /* if the NLRI is not predefined length, quit.*/
794 if (*pptr != MDT_VPN_NLRI_LEN * NBBY)
795 return -1;
796 pptr++;
797
798 /* RD */
799 TCHECK2(pptr[0], 8);
800 rd = pptr;
801 pptr+=8;
802
803 /* IPv4 address */
804 TCHECK2(pptr[0], sizeof(struct in_addr));
805 vpn_ip = pptr;
806 pptr+=sizeof(struct in_addr);
807
808 /* MDT Group Address */
809 TCHECK2(pptr[0], sizeof(struct in_addr));
810
811 snprintf(buf, buflen, "RD: %s, VPN IP Address: %s, MC Group Address: %s",
812 bgp_vpn_rd_print(rd), ipaddr_string(vpn_ip), ipaddr_string(pptr));
813
814 return MDT_VPN_NLRI_LEN + 1;
815
816 trunc:
817
818 return -2;
819 }
820
821 #define BGP_MULTICAST_VPN_ROUTE_TYPE_INTRA_AS_I_PMSI 1
822 #define BGP_MULTICAST_VPN_ROUTE_TYPE_INTER_AS_I_PMSI 2
823 #define BGP_MULTICAST_VPN_ROUTE_TYPE_S_PMSI 3
824 #define BGP_MULTICAST_VPN_ROUTE_TYPE_INTRA_AS_SEG_LEAF 4
825 #define BGP_MULTICAST_VPN_ROUTE_TYPE_SOURCE_ACTIVE 5
826 #define BGP_MULTICAST_VPN_ROUTE_TYPE_SHARED_TREE_JOIN 6
827 #define BGP_MULTICAST_VPN_ROUTE_TYPE_SOURCE_TREE_JOIN 7
828
829 static struct tok bgp_multicast_vpn_route_type_values[] = {
830 { BGP_MULTICAST_VPN_ROUTE_TYPE_INTRA_AS_I_PMSI, "Intra-AS I-PMSI"},
831 { BGP_MULTICAST_VPN_ROUTE_TYPE_INTER_AS_I_PMSI, "Inter-AS I-PMSI"},
832 { BGP_MULTICAST_VPN_ROUTE_TYPE_S_PMSI, "S-PMSI"},
833 { BGP_MULTICAST_VPN_ROUTE_TYPE_INTRA_AS_SEG_LEAF, "Intra-AS Segment-Leaf"},
834 { BGP_MULTICAST_VPN_ROUTE_TYPE_SOURCE_ACTIVE, "Source-Active"},
835 { BGP_MULTICAST_VPN_ROUTE_TYPE_SHARED_TREE_JOIN, "Shared Tree Join"},
836 { BGP_MULTICAST_VPN_ROUTE_TYPE_SOURCE_TREE_JOIN, "Source Tree Join"},
837 };
838
839 static int
840 decode_multicast_vpn(const u_char *pptr, char *buf, u_int buflen)
841 {
842 u_int8_t route_type, route_length, addr_length, sg_length;
843 u_int offset;
844
845 TCHECK2(pptr[0], 2);
846 route_type = *pptr++;
847 route_length = *pptr++;
848
849 snprintf(buf, buflen, "Route-Type: %s (%u), length: %u",
850 tok2str(bgp_multicast_vpn_route_type_values,
851 "Unknown", route_type),
852 route_type, route_length);
853
854 switch(route_type) {
855 case BGP_MULTICAST_VPN_ROUTE_TYPE_INTRA_AS_I_PMSI:
856 TCHECK2(pptr[0], BGP_VPN_RD_LEN);
857 offset = strlen(buf);
858 snprintf(buf + offset, buflen - offset, ", RD: %s, Originator %s",
859 bgp_vpn_rd_print(pptr),
860 bgp_vpn_ip_print(pptr + BGP_VPN_RD_LEN,
861 (route_length - BGP_VPN_RD_LEN) << 3));
862 break;
863 case BGP_MULTICAST_VPN_ROUTE_TYPE_INTER_AS_I_PMSI:
864 TCHECK2(pptr[0], BGP_VPN_RD_LEN + 4);
865 offset = strlen(buf);
866 snprintf(buf + offset, buflen - offset, ", RD: %s, Source-AS %s",
867 bgp_vpn_rd_print(pptr),
868 as_printf(astostr, sizeof(astostr),
869 EXTRACT_32BITS(pptr + BGP_VPN_RD_LEN)));
870 break;
871
872 case BGP_MULTICAST_VPN_ROUTE_TYPE_S_PMSI:
873 TCHECK2(pptr[0], BGP_VPN_RD_LEN);
874 offset = strlen(buf);
875 snprintf(buf + offset, buflen - offset, ", RD: %s",
876 bgp_vpn_rd_print(pptr));
877 pptr += BGP_VPN_RD_LEN;
878
879 sg_length = bgp_vpn_sg_print(pptr, buf, buflen);
880 addr_length = route_length - sg_length;
881
882 TCHECK2(pptr[0], addr_length);
883 offset = strlen(buf);
884 snprintf(buf + offset, buflen - offset, ", Originator %s",
885 bgp_vpn_ip_print(pptr, addr_length << 3));
886 break;
887
888 case BGP_MULTICAST_VPN_ROUTE_TYPE_SOURCE_ACTIVE:
889 TCHECK2(pptr[0], BGP_VPN_RD_LEN);
890 offset = strlen(buf);
891 snprintf(buf + offset, buflen - offset, ", RD: %s",
892 bgp_vpn_rd_print(pptr));
893 pptr += BGP_VPN_RD_LEN;
894
895 bgp_vpn_sg_print(pptr, buf, buflen);
896 break;
897
898 case BGP_MULTICAST_VPN_ROUTE_TYPE_SHARED_TREE_JOIN: /* fall through */
899 case BGP_MULTICAST_VPN_ROUTE_TYPE_SOURCE_TREE_JOIN:
900 TCHECK2(pptr[0], BGP_VPN_RD_LEN);
901 offset = strlen(buf);
902 snprintf(buf + offset, buflen - offset, ", RD: %s, Source-AS %s",
903 bgp_vpn_rd_print(pptr),
904 as_printf(astostr, sizeof(astostr),
905 EXTRACT_32BITS(pptr + BGP_VPN_RD_LEN)));
906 pptr += BGP_VPN_RD_LEN;
907
908 bgp_vpn_sg_print(pptr, buf, buflen);
909 break;
910
911 /*
912 * no per route-type printing yet.
913 */
914 case BGP_MULTICAST_VPN_ROUTE_TYPE_INTRA_AS_SEG_LEAF:
915 default:
916 break;
917 }
918
919 return route_length + 2;
920
921 trunc:
922 return -2;
923 }
924
925 /*
926 * As I remember, some versions of systems have an snprintf() that
927 * returns -1 if the buffer would have overflowed. If the return
928 * value is negative, set buflen to 0, to indicate that we've filled
929 * the buffer up.
930 *
931 * If the return value is greater than buflen, that means that
932 * the buffer would have overflowed; again, set buflen to 0 in
933 * that case.
934 */
935 #define UPDATE_BUF_BUFLEN(buf, buflen, strlen) \
936 if (strlen<0) \
937 buflen=0; \
938 else if ((u_int)strlen>buflen) \
939 buflen=0; \
940 else { \
941 buflen-=strlen; \
942 buf+=strlen; \
943 }
944
945 static int
946 decode_labeled_vpn_l2(const u_char *pptr, char *buf, u_int buflen)
947 {
948 int plen,tlen,strlen,tlv_type,tlv_len,ttlv_len;
949
950 TCHECK2(pptr[0], 2);
951 plen=EXTRACT_16BITS(pptr);
952 tlen=plen;
953 pptr+=2;
954 TCHECK2(pptr[0],15);
955 buf[0]='\0';
956 strlen=snprintf(buf, buflen, "RD: %s, CE-ID: %u, Label-Block Offset: %u, Label Base %u",
957 bgp_vpn_rd_print(pptr),
958 EXTRACT_16BITS(pptr+8),
959 EXTRACT_16BITS(pptr+10),
960 EXTRACT_24BITS(pptr+12)>>4); /* the label is offsetted by 4 bits so lets shift it right */
961 UPDATE_BUF_BUFLEN(buf, buflen, strlen);
962 pptr+=15;
963 tlen-=15;
964
965 /* ok now the variable part - lets read out TLVs*/
966 while (tlen>0) {
967 if (tlen < 3)
968 return -1;
969 TCHECK2(pptr[0], 3);
970 tlv_type=*pptr++;
971 tlv_len=EXTRACT_16BITS(pptr);
972 ttlv_len=tlv_len;
973 pptr+=2;
974
975 switch(tlv_type) {
976 case 1:
977 if (buflen!=0) {
978 strlen=snprintf(buf,buflen, "\n\t\tcircuit status vector (%u) length: %u: 0x",
979 tlv_type,
980 tlv_len);
981 UPDATE_BUF_BUFLEN(buf, buflen, strlen);
982 }
983 ttlv_len=ttlv_len/8+1; /* how many bytes do we need to read ? */
984 while (ttlv_len>0) {
985 TCHECK(pptr[0]);
986 if (buflen!=0) {
987 strlen=snprintf(buf,buflen, "%02x",*pptr++);
988 UPDATE_BUF_BUFLEN(buf, buflen, strlen);
989 }
990 ttlv_len--;
991 }
992 break;
993 default:
994 if (buflen!=0) {
995 strlen=snprintf(buf,buflen, "\n\t\tunknown TLV #%u, length: %u",
996 tlv_type,
997 tlv_len);
998 UPDATE_BUF_BUFLEN(buf, buflen, strlen);
999 }
1000 break;
1001 }
1002 tlen-=(tlv_len<<3); /* the tlv-length is expressed in bits so lets shift it right */
1003 }
1004 return plen+2;
1005
1006 trunc:
1007 return -2;
1008 }
1009
1010 #ifdef INET6
1011 int
1012 decode_prefix6(const u_char *pd, char *buf, u_int buflen)
1013 {
1014 struct in6_addr addr;
1015 u_int plen;
1016
1017 TCHECK(pd[0]);
1018 plen = pd[0];
1019 if (128 < plen)
1020 return -1;
1021
1022 memset(&addr, 0, sizeof(addr));
1023 TCHECK2(pd[1], (plen + 7) / 8);
1024 memcpy(&addr, &pd[1], (plen + 7) / 8);
1025 if (plen % 8) {
1026 addr.s6_addr[(plen + 7) / 8 - 1] &=
1027 ((0xff00 >> (plen % 8)) & 0xff);
1028 }
1029 snprintf(buf, buflen, "%s/%d", getname6((u_char *)&addr), plen);
1030 return 1 + (plen + 7) / 8;
1031
1032 trunc:
1033 return -2;
1034 }
1035
1036 static int
1037 decode_labeled_prefix6(const u_char *pptr, char *buf, u_int buflen)
1038 {
1039 struct in6_addr addr;
1040 u_int plen;
1041
1042 TCHECK(pptr[0]);
1043 plen = pptr[0]; /* get prefix length */
1044
1045 if (24 > plen)
1046 return -1;
1047
1048 plen-=24; /* adjust prefixlen - labellength */
1049
1050 if (128 < plen)
1051 return -1;
1052
1053 memset(&addr, 0, sizeof(addr));
1054 TCHECK2(pptr[4], (plen + 7) / 8);
1055 memcpy(&addr, &pptr[4], (plen + 7) / 8);
1056 if (plen % 8) {
1057 addr.s6_addr[(plen + 7) / 8 - 1] &=
1058 ((0xff00 >> (plen % 8)) & 0xff);
1059 }
1060 /* the label may get offsetted by 4 bits so lets shift it right */
1061 snprintf(buf, buflen, "%s/%d, label:%u %s",
1062 getname6((u_char *)&addr),
1063 plen,
1064 EXTRACT_24BITS(pptr+1)>>4,
1065 ((pptr[3]&1)==0) ? "(BOGUS: Bottom of Stack NOT set!)" : "(bottom)" );
1066
1067 return 4 + (plen + 7) / 8;
1068
1069 trunc:
1070 return -2;
1071 }
1072
1073 static int
1074 decode_labeled_vpn_prefix6(const u_char *pptr, char *buf, u_int buflen)
1075 {
1076 struct in6_addr addr;
1077 u_int plen;
1078
1079 TCHECK(pptr[0]);
1080 plen = pptr[0]; /* get prefix length */
1081
1082 if ((24+64) > plen)
1083 return -1;
1084
1085 plen-=(24+64); /* adjust prefixlen - labellength - RD len*/
1086
1087 if (128 < plen)
1088 return -1;
1089
1090 memset(&addr, 0, sizeof(addr));
1091 TCHECK2(pptr[12], (plen + 7) / 8);
1092 memcpy(&addr, &pptr[12], (plen + 7) / 8);
1093 if (plen % 8) {
1094 addr.s6_addr[(plen + 7) / 8 - 1] &=
1095 ((0xff00 >> (plen % 8)) & 0xff);
1096 }
1097 /* the label may get offsetted by 4 bits so lets shift it right */
1098 snprintf(buf, buflen, "RD: %s, %s/%d, label:%u %s",
1099 bgp_vpn_rd_print(pptr+4),
1100 getname6((u_char *)&addr),
1101 plen,
1102 EXTRACT_24BITS(pptr+1)>>4,
1103 ((pptr[3]&1)==0) ? "(BOGUS: Bottom of Stack NOT set!)" : "(bottom)" );
1104
1105 return 12 + (plen + 7) / 8;
1106
1107 trunc:
1108 return -2;
1109 }
1110 #endif
1111
1112 static int
1113 decode_clnp_prefix(const u_char *pptr, char *buf, u_int buflen)
1114 {
1115 u_int8_t addr[19];
1116 u_int plen;
1117
1118 TCHECK(pptr[0]);
1119 plen = pptr[0]; /* get prefix length */
1120
1121 if (152 < plen)
1122 return -1;
1123
1124 memset(&addr, 0, sizeof(addr));
1125 TCHECK2(pptr[4], (plen + 7) / 8);
1126 memcpy(&addr, &pptr[4], (plen + 7) / 8);
1127 if (plen % 8) {
1128 addr[(plen + 7) / 8 - 1] &=
1129 ((0xff00 >> (plen % 8)) & 0xff);
1130 }
1131 snprintf(buf, buflen, "%s/%d",
1132 isonsap_string(addr,(plen + 7) / 8),
1133 plen);
1134
1135 return 1 + (plen + 7) / 8;
1136
1137 trunc:
1138 return -2;
1139 }
1140
1141 static int
1142 decode_labeled_vpn_clnp_prefix(const u_char *pptr, char *buf, u_int buflen)
1143 {
1144 u_int8_t addr[19];
1145 u_int plen;
1146
1147 TCHECK(pptr[0]);
1148 plen = pptr[0]; /* get prefix length */
1149
1150 if ((24+64) > plen)
1151 return -1;
1152
1153 plen-=(24+64); /* adjust prefixlen - labellength - RD len*/
1154
1155 if (152 < plen)
1156 return -1;
1157
1158 memset(&addr, 0, sizeof(addr));
1159 TCHECK2(pptr[12], (plen + 7) / 8);
1160 memcpy(&addr, &pptr[12], (plen + 7) / 8);
1161 if (plen % 8) {
1162 addr[(plen + 7) / 8 - 1] &=
1163 ((0xff00 >> (plen % 8)) & 0xff);
1164 }
1165 /* the label may get offsetted by 4 bits so lets shift it right */
1166 snprintf(buf, buflen, "RD: %s, %s/%d, label:%u %s",
1167 bgp_vpn_rd_print(pptr+4),
1168 isonsap_string(addr,(plen + 7) / 8),
1169 plen,
1170 EXTRACT_24BITS(pptr+1)>>4,
1171 ((pptr[3]&1)==0) ? "(BOGUS: Bottom of Stack NOT set!)" : "(bottom)" );
1172
1173 return 12 + (plen + 7) / 8;
1174
1175 trunc:
1176 return -2;
1177 }
1178
1179 /*
1180 * bgp_attr_get_as_size
1181 *
1182 * Try to find the size of the ASs encoded in an as-path. It is not obvious, as
1183 * both Old speakers that do not support 4 byte AS, and the new speakers that do
1184 * support, exchange AS-Path with the same path-attribute type value 0x02.
1185 */
1186 static int
1187 bgp_attr_get_as_size (u_int8_t bgpa_type, const u_char *pptr, int len)
1188 {
1189 const u_char *tptr = pptr;
1190
1191 /*
1192 * If the path attribute is the optional AS4 path type, then we already
1193 * know, that ASs must be encoded in 4 byte format.
1194 */
1195 if (bgpa_type == BGPTYPE_AS4_PATH) {
1196 return 4;
1197 }
1198
1199 /*
1200 * Let us assume that ASs are of 2 bytes in size, and check if the AS-Path
1201 * TLV is good. If not, ask the caller to try with AS encoded as 4 bytes
1202 * each.
1203 */
1204 while (tptr < pptr + len) {
1205 TCHECK(tptr[0]);
1206
1207 /*
1208 * If we do not find a valid segment type, our guess might be wrong.
1209 */
1210 if (tptr[0] < BGP_AS_SEG_TYPE_MIN || tptr[0] > BGP_AS_SEG_TYPE_MAX) {
1211 goto trunc;
1212 }
1213 TCHECK(tptr[1]);
1214 tptr += 2 + tptr[1] * 2;
1215 }
1216
1217 /*
1218 * If we correctly reached end of the AS path attribute data content,
1219 * then most likely ASs were indeed encoded as 2 bytes.
1220 */
1221 if (tptr == pptr + len) {
1222 return 2;
1223 }
1224
1225 trunc:
1226
1227 /*
1228 * We can come here, either we did not have enough data, or if we
1229 * try to decode 4 byte ASs in 2 byte format. Either way, return 4,
1230 * so that calller can try to decode each AS as of 4 bytes. If indeed
1231 * there was not enough data, it will crib and end the parse anyways.
1232 */
1233 return 4;
1234 }
1235
1236 static int
1237 bgp_attr_print(const struct bgp_attr *attr, const u_char *pptr, int len)
1238 {
1239 int i;
1240 u_int16_t af;
1241 u_int8_t safi, snpa, nhlen;
1242 union { /* copy buffer for bandwidth values */
1243 float f;
1244 u_int32_t i;
1245 } bw;
1246 int advance;
1247 int tlen;
1248 const u_char *tptr;
1249 char buf[MAXHOSTNAMELEN + 100];
1250 char tokbuf[TOKBUFSIZE];
1251 int as_size;
1252
1253 tptr = pptr;
1254 tlen=len;
1255
1256 switch (attr->bgpa_type) {
1257 case BGPTYPE_ORIGIN:
1258 if (len != 1)
1259 printf("invalid len");
1260 else {
1261 TCHECK(*tptr);
1262 printf("%s", tok2strbuf(bgp_origin_values,
1263 "Unknown Origin Typecode",
1264 tptr[0],
1265 tokbuf, sizeof(tokbuf)));
1266 }
1267 break;
1268
1269
1270 /*
1271 * Process AS4 byte path and AS2 byte path attributes here.
1272 */
1273 case BGPTYPE_AS4_PATH:
1274 case BGPTYPE_AS_PATH:
1275 if (len % 2) {
1276 printf("invalid len");
1277 break;
1278 }
1279 if (!len) {
1280 printf("empty");
1281 break;
1282 }
1283
1284 /*
1285 * BGP updates exchanged between New speakers that support 4
1286 * byte AS, ASs are always encoded in 4 bytes. There is no
1287 * definitive way to find this, just by the packet's
1288 * contents. So, check for packet's TLV's sanity assuming
1289 * 2 bytes first, and it does not pass, assume that ASs are
1290 * encoded in 4 bytes format and move on.
1291 */
1292 as_size = bgp_attr_get_as_size(attr->bgpa_type, pptr, len);
1293
1294 while (tptr < pptr + len) {
1295 TCHECK(tptr[0]);
1296 printf("%s", tok2strbuf(bgp_as_path_segment_open_values,
1297 "?", tptr[0],
1298 tokbuf, sizeof(tokbuf)));
1299 for (i = 0; i < tptr[1] * as_size; i += as_size) {
1300 TCHECK2(tptr[2 + i], as_size);
1301 printf("%s ",
1302 as_printf(astostr, sizeof(astostr),
1303 as_size == 2 ?
1304 EXTRACT_16BITS(&tptr[2 + i]) :
1305 EXTRACT_32BITS(&tptr[2 + i])));
1306 }
1307 TCHECK(tptr[0]);
1308 printf("%s", tok2strbuf(bgp_as_path_segment_close_values,
1309 "?", tptr[0],
1310 tokbuf, sizeof(tokbuf)));
1311 TCHECK(tptr[1]);
1312 tptr += 2 + tptr[1] * as_size;
1313 }
1314 break;
1315 case BGPTYPE_NEXT_HOP:
1316 if (len != 4)
1317 printf("invalid len");
1318 else {
1319 TCHECK2(tptr[0], 4);
1320 printf("%s", getname(tptr));
1321 }
1322 break;
1323 case BGPTYPE_MULTI_EXIT_DISC:
1324 case BGPTYPE_LOCAL_PREF:
1325 if (len != 4)
1326 printf("invalid len");
1327 else {
1328 TCHECK2(tptr[0], 4);
1329 printf("%u", EXTRACT_32BITS(tptr));
1330 }
1331 break;
1332 case BGPTYPE_ATOMIC_AGGREGATE:
1333 if (len != 0)
1334 printf("invalid len");
1335 break;
1336 case BGPTYPE_AGGREGATOR:
1337
1338 /*
1339 * Depending on the AS encoded is of 2 bytes or of 4 bytes,
1340 * the length of this PA can be either 6 bytes or 8 bytes.
1341 */
1342 if (len != 6 && len != 8) {
1343 printf("invalid len");
1344 break;
1345 }
1346 TCHECK2(tptr[0], len);
1347 if (len == 6) {
1348 printf(" AS #%s, origin %s",
1349 as_printf(astostr, sizeof(astostr), EXTRACT_16BITS(tptr)),
1350 getname(tptr + 2));
1351 } else {
1352 printf(" AS #%s, origin %s",
1353 as_printf(astostr, sizeof(astostr),
1354 EXTRACT_32BITS(tptr)), getname(tptr + 4));
1355 }
1356 break;
1357 case BGPTYPE_AGGREGATOR4:
1358 if (len != 8) {
1359 printf("invalid len");
1360 break;
1361 }
1362 TCHECK2(tptr[0], 8);
1363 printf(" AS #%s, origin %s",
1364 as_printf(astostr, sizeof(astostr), EXTRACT_32BITS(tptr)),
1365 getname(tptr + 4));
1366 break;
1367 case BGPTYPE_COMMUNITIES:
1368 if (len % 4) {
1369 printf("invalid len");
1370 break;
1371 }
1372 while (tlen>0) {
1373 u_int32_t comm;
1374 TCHECK2(tptr[0], 4);
1375 comm = EXTRACT_32BITS(tptr);
1376 switch (comm) {
1377 case BGP_COMMUNITY_NO_EXPORT:
1378 printf(" NO_EXPORT");
1379 break;
1380 case BGP_COMMUNITY_NO_ADVERT:
1381 printf(" NO_ADVERTISE");
1382 break;
1383 case BGP_COMMUNITY_NO_EXPORT_SUBCONFED:
1384 printf(" NO_EXPORT_SUBCONFED");
1385 break;
1386 default:
1387 printf("%u:%u%s",
1388 (comm >> 16) & 0xffff,
1389 comm & 0xffff,
1390 (tlen>4) ? ", " : "");
1391 break;
1392 }
1393 tlen -=4;
1394 tptr +=4;
1395 }
1396 break;
1397 case BGPTYPE_ORIGINATOR_ID:
1398 if (len != 4) {
1399 printf("invalid len");
1400 break;
1401 }
1402 TCHECK2(tptr[0], 4);
1403 printf("%s",getname(tptr));
1404 break;
1405 case BGPTYPE_CLUSTER_LIST:
1406 if (len % 4) {
1407 printf("invalid len");
1408 break;
1409 }
1410 while (tlen>0) {
1411 TCHECK2(tptr[0], 4);
1412 printf("%s%s",
1413 getname(tptr),
1414 (tlen>4) ? ", " : "");
1415 tlen -=4;
1416 tptr +=4;
1417 }
1418 break;
1419 case BGPTYPE_MP_REACH_NLRI:
1420 TCHECK2(tptr[0], 3);
1421 af = EXTRACT_16BITS(tptr);
1422 safi = tptr[2];
1423
1424 printf("\n\t AFI: %s (%u), %sSAFI: %s (%u)",
1425 tok2strbuf(af_values, "Unknown AFI", af,
1426 tokbuf, sizeof(tokbuf)),
1427 af,
1428 (safi>128) ? "vendor specific " : "", /* 128 is meanwhile wellknown */
1429 tok2strbuf(bgp_safi_values, "Unknown SAFI", safi,
1430 tokbuf, sizeof(tokbuf)),
1431 safi);
1432
1433 switch(af<<8 | safi) {
1434 case (AFNUM_INET<<8 | SAFNUM_UNICAST):
1435 case (AFNUM_INET<<8 | SAFNUM_MULTICAST):
1436 case (AFNUM_INET<<8 | SAFNUM_UNIMULTICAST):
1437 case (AFNUM_INET<<8 | SAFNUM_LABUNICAST):
1438 case (AFNUM_INET<<8 | SAFNUM_RT_ROUTING_INFO):
1439 case (AFNUM_INET<<8 | SAFNUM_VPNUNICAST):
1440 case (AFNUM_INET<<8 | SAFNUM_VPNMULTICAST):
1441 case (AFNUM_INET<<8 | SAFNUM_VPNUNIMULTICAST):
1442 case (AFNUM_INET<<8 | SAFNUM_MULTICAST_VPN):
1443 case (AFNUM_INET<<8 | SAFNUM_MDT):
1444 #ifdef INET6
1445 case (AFNUM_INET6<<8 | SAFNUM_UNICAST):
1446 case (AFNUM_INET6<<8 | SAFNUM_MULTICAST):
1447 case (AFNUM_INET6<<8 | SAFNUM_UNIMULTICAST):
1448 case (AFNUM_INET6<<8 | SAFNUM_LABUNICAST):
1449 case (AFNUM_INET6<<8 | SAFNUM_VPNUNICAST):
1450 case (AFNUM_INET6<<8 | SAFNUM_VPNMULTICAST):
1451 case (AFNUM_INET6<<8 | SAFNUM_VPNUNIMULTICAST):
1452 #endif
1453 case (AFNUM_NSAP<<8 | SAFNUM_UNICAST):
1454 case (AFNUM_NSAP<<8 | SAFNUM_MULTICAST):
1455 case (AFNUM_NSAP<<8 | SAFNUM_UNIMULTICAST):
1456 case (AFNUM_NSAP<<8 | SAFNUM_VPNUNICAST):
1457 case (AFNUM_NSAP<<8 | SAFNUM_VPNMULTICAST):
1458 case (AFNUM_NSAP<<8 | SAFNUM_VPNUNIMULTICAST):
1459 case (AFNUM_L2VPN<<8 | SAFNUM_VPNUNICAST):
1460 case (AFNUM_L2VPN<<8 | SAFNUM_VPNMULTICAST):
1461 case (AFNUM_L2VPN<<8 | SAFNUM_VPNUNIMULTICAST):
1462 case (AFNUM_VPLS<<8 | SAFNUM_VPLS):
1463 break;
1464 default:
1465 TCHECK2(tptr[0], tlen);
1466 printf("\n\t no AFI %u / SAFI %u decoder",af,safi);
1467 if (vflag <= 1)
1468 print_unknown_data(tptr,"\n\t ",tlen);
1469 goto done;
1470 break;
1471 }
1472
1473 tptr +=3;
1474
1475 TCHECK(tptr[0]);
1476 nhlen = tptr[0];
1477 tlen = nhlen;
1478 tptr++;
1479
1480 if (tlen) {
1481 printf("\n\t nexthop: ");
1482 while (tlen > 0) {
1483 switch(af<<8 | safi) {
1484 case (AFNUM_INET<<8 | SAFNUM_UNICAST):
1485 case (AFNUM_INET<<8 | SAFNUM_MULTICAST):
1486 case (AFNUM_INET<<8 | SAFNUM_UNIMULTICAST):
1487 case (AFNUM_INET<<8 | SAFNUM_LABUNICAST):
1488 case (AFNUM_INET<<8 | SAFNUM_RT_ROUTING_INFO):
1489 case (AFNUM_INET<<8 | SAFNUM_MULTICAST_VPN):
1490 case (AFNUM_INET<<8 | SAFNUM_MDT):
1491 if (tlen < (int)sizeof(struct in_addr)) {
1492 printf("invalid len");
1493 tlen = 0;
1494 } else {
1495 TCHECK2(tptr[0], sizeof(struct in_addr));
1496 printf("%s",getname(tptr));
1497 tlen -= sizeof(struct in_addr);
1498 tptr += sizeof(struct in_addr);
1499 }
1500 break;
1501 case (AFNUM_INET<<8 | SAFNUM_VPNUNICAST):
1502 case (AFNUM_INET<<8 | SAFNUM_VPNMULTICAST):
1503 case (AFNUM_INET<<8 | SAFNUM_VPNUNIMULTICAST):
1504 if (tlen < (int)(sizeof(struct in_addr)+BGP_VPN_RD_LEN)) {
1505 printf("invalid len");
1506 tlen = 0;
1507 } else {
1508 TCHECK2(tptr[0], sizeof(struct in_addr)+BGP_VPN_RD_LEN);
1509 printf("RD: %s, %s",
1510 bgp_vpn_rd_print(tptr),
1511 getname(tptr+BGP_VPN_RD_LEN));
1512 tlen -= (sizeof(struct in_addr)+BGP_VPN_RD_LEN);
1513 tptr += (sizeof(struct in_addr)+BGP_VPN_RD_LEN);
1514 }
1515 break;
1516 #ifdef INET6
1517 case (AFNUM_INET6<<8 | SAFNUM_UNICAST):
1518 case (AFNUM_INET6<<8 | SAFNUM_MULTICAST):
1519 case (AFNUM_INET6<<8 | SAFNUM_UNIMULTICAST):
1520 case (AFNUM_INET6<<8 | SAFNUM_LABUNICAST):
1521 if (tlen < (int)sizeof(struct in6_addr)) {
1522 printf("invalid len");
1523 tlen = 0;
1524 } else {
1525 TCHECK2(tptr[0], sizeof(struct in6_addr));
1526 printf("%s", getname6(tptr));
1527 tlen -= sizeof(struct in6_addr);
1528 tptr += sizeof(struct in6_addr);
1529 }
1530 break;
1531 case (AFNUM_INET6<<8 | SAFNUM_VPNUNICAST):
1532 case (AFNUM_INET6<<8 | SAFNUM_VPNMULTICAST):
1533 case (AFNUM_INET6<<8 | SAFNUM_VPNUNIMULTICAST):
1534 if (tlen < (int)(sizeof(struct in6_addr)+BGP_VPN_RD_LEN)) {
1535 printf("invalid len");
1536 tlen = 0;
1537 } else {
1538 TCHECK2(tptr[0], sizeof(struct in6_addr)+BGP_VPN_RD_LEN);
1539 printf("RD: %s, %s",
1540 bgp_vpn_rd_print(tptr),
1541 getname6(tptr+BGP_VPN_RD_LEN));
1542 tlen -= (sizeof(struct in6_addr)+BGP_VPN_RD_LEN);
1543 tptr += (sizeof(struct in6_addr)+BGP_VPN_RD_LEN);
1544 }
1545 break;
1546 #endif
1547 case (AFNUM_VPLS<<8 | SAFNUM_VPLS):
1548 case (AFNUM_L2VPN<<8 | SAFNUM_VPNUNICAST):
1549 case (AFNUM_L2VPN<<8 | SAFNUM_VPNMULTICAST):
1550 case (AFNUM_L2VPN<<8 | SAFNUM_VPNUNIMULTICAST):
1551 if (tlen < (int)sizeof(struct in_addr)) {
1552 printf("invalid len");
1553 tlen = 0;
1554 } else {
1555 TCHECK2(tptr[0], sizeof(struct in_addr));
1556 printf("%s", getname(tptr));
1557 tlen -= (sizeof(struct in_addr));
1558 tptr += (sizeof(struct in_addr));
1559 }
1560 break;
1561 case (AFNUM_NSAP<<8 | SAFNUM_UNICAST):
1562 case (AFNUM_NSAP<<8 | SAFNUM_MULTICAST):
1563 case (AFNUM_NSAP<<8 | SAFNUM_UNIMULTICAST):
1564 TCHECK2(tptr[0], tlen);
1565 printf("%s",isonsap_string(tptr,tlen));
1566 tptr += tlen;
1567 tlen = 0;
1568 break;
1569
1570 case (AFNUM_NSAP<<8 | SAFNUM_VPNUNICAST):
1571 case (AFNUM_NSAP<<8 | SAFNUM_VPNMULTICAST):
1572 case (AFNUM_NSAP<<8 | SAFNUM_VPNUNIMULTICAST):
1573 if (tlen < BGP_VPN_RD_LEN+1) {
1574 printf("invalid len");
1575 tlen = 0;
1576 } else {
1577 TCHECK2(tptr[0], tlen);
1578 printf("RD: %s, %s",
1579 bgp_vpn_rd_print(tptr),
1580 isonsap_string(tptr+BGP_VPN_RD_LEN,tlen-BGP_VPN_RD_LEN));
1581 /* rfc986 mapped IPv4 address ? */
1582 if (EXTRACT_32BITS(tptr+BGP_VPN_RD_LEN) == 0x47000601)
1583 printf(" = %s", getname(tptr+BGP_VPN_RD_LEN+4));
1584 #ifdef INET6
1585 /* rfc1888 mapped IPv6 address ? */
1586 else if (EXTRACT_24BITS(tptr+BGP_VPN_RD_LEN) == 0x350000)
1587 printf(" = %s", getname6(tptr+BGP_VPN_RD_LEN+3));
1588 #endif
1589 tptr += tlen;
1590 tlen = 0;
1591 }
1592 break;
1593 default:
1594 TCHECK2(tptr[0], tlen);
1595 printf("no AFI %u/SAFI %u decoder",af,safi);
1596 if (vflag <= 1)
1597 print_unknown_data(tptr,"\n\t ",tlen);
1598 tptr += tlen;
1599 tlen = 0;
1600 goto done;
1601 break;
1602 }
1603 }
1604 }
1605 printf(", nh-length: %u", nhlen);
1606 tptr += tlen;
1607
1608 TCHECK(tptr[0]);
1609 snpa = tptr[0];
1610 tptr++;
1611
1612 if (snpa) {
1613 printf("\n\t %u SNPA", snpa);
1614 for (/*nothing*/; snpa > 0; snpa--) {
1615 TCHECK(tptr[0]);
1616 printf("\n\t %d bytes", tptr[0]);
1617 tptr += tptr[0] + 1;
1618 }
1619 } else {
1620 printf(", no SNPA");
1621 }
1622
1623 while (len - (tptr - pptr) > 0) {
1624 switch (af<<8 | safi) {
1625 case (AFNUM_INET<<8 | SAFNUM_UNICAST):
1626 case (AFNUM_INET<<8 | SAFNUM_MULTICAST):
1627 case (AFNUM_INET<<8 | SAFNUM_UNIMULTICAST):
1628 advance = decode_prefix4(tptr, buf, sizeof(buf));
1629 if (advance == -1)
1630 printf("\n\t (illegal prefix length)");
1631 else if (advance == -2)
1632 goto trunc;
1633 else
1634 printf("\n\t %s", buf);
1635 break;
1636 case (AFNUM_INET<<8 | SAFNUM_LABUNICAST):
1637 advance = decode_labeled_prefix4(tptr, buf, sizeof(buf));
1638 if (advance == -1)
1639 printf("\n\t (illegal prefix length)");
1640 else if (advance == -2)
1641 goto trunc;
1642 else
1643 printf("\n\t %s", buf);
1644 break;
1645 case (AFNUM_INET<<8 | SAFNUM_VPNUNICAST):
1646 case (AFNUM_INET<<8 | SAFNUM_VPNMULTICAST):
1647 case (AFNUM_INET<<8 | SAFNUM_VPNUNIMULTICAST):
1648 advance = decode_labeled_vpn_prefix4(tptr, buf, sizeof(buf));
1649 if (advance == -1)
1650 printf("\n\t (illegal prefix length)");
1651 else if (advance == -2)
1652 goto trunc;
1653 else
1654 printf("\n\t %s", buf);
1655 break;
1656 case (AFNUM_INET<<8 | SAFNUM_RT_ROUTING_INFO):
1657 advance = decode_rt_routing_info(tptr, buf, sizeof(buf));
1658 if (advance == -1)
1659 printf("\n\t (illegal prefix length)");
1660 else if (advance == -2)
1661 goto trunc;
1662 else
1663 printf("\n\t %s", buf);
1664 break;
1665 case (AFNUM_INET<<8 | SAFNUM_MULTICAST_VPN): /* fall through */
1666 case (AFNUM_INET6<<8 | SAFNUM_MULTICAST_VPN):
1667 advance = decode_multicast_vpn(tptr, buf, sizeof(buf));
1668 if (advance == -1)
1669 printf("\n\t (illegal prefix length)");
1670 else if (advance == -2)
1671 goto trunc;
1672 else
1673 printf("\n\t %s", buf);
1674 break;
1675
1676 case (AFNUM_INET<<8 | SAFNUM_MDT):
1677 advance = decode_mdt_vpn_nlri(tptr, buf, sizeof(buf));
1678 if (advance == -1)
1679 printf("\n\t (illegal prefix length)");
1680 else if (advance == -2)
1681 goto trunc;
1682 else
1683 printf("\n\t %s", buf);
1684 break;
1685 #ifdef INET6
1686 case (AFNUM_INET6<<8 | SAFNUM_UNICAST):
1687 case (AFNUM_INET6<<8 | SAFNUM_MULTICAST):
1688 case (AFNUM_INET6<<8 | SAFNUM_UNIMULTICAST):
1689 advance = decode_prefix6(tptr, buf, sizeof(buf));
1690 if (advance == -1)
1691 printf("\n\t (illegal prefix length)");
1692 else if (advance == -2)
1693 goto trunc;
1694 else
1695 printf("\n\t %s", buf);
1696 break;
1697 case (AFNUM_INET6<<8 | SAFNUM_LABUNICAST):
1698 advance = decode_labeled_prefix6(tptr, buf, sizeof(buf));
1699 if (advance == -1)
1700 printf("\n\t (illegal prefix length)");
1701 else if (advance == -2)
1702 goto trunc;
1703 else
1704 printf("\n\t %s", buf);
1705 break;
1706 case (AFNUM_INET6<<8 | SAFNUM_VPNUNICAST):
1707 case (AFNUM_INET6<<8 | SAFNUM_VPNMULTICAST):
1708 case (AFNUM_INET6<<8 | SAFNUM_VPNUNIMULTICAST):
1709 advance = decode_labeled_vpn_prefix6(tptr, buf, sizeof(buf));
1710 if (advance == -1)
1711 printf("\n\t (illegal prefix length)");
1712 else if (advance == -2)
1713 goto trunc;
1714 else
1715 printf("\n\t %s", buf);
1716 break;
1717 #endif
1718 case (AFNUM_VPLS<<8 | SAFNUM_VPLS):
1719 case (AFNUM_L2VPN<<8 | SAFNUM_VPNUNICAST):
1720 case (AFNUM_L2VPN<<8 | SAFNUM_VPNMULTICAST):
1721 case (AFNUM_L2VPN<<8 | SAFNUM_VPNUNIMULTICAST):
1722 advance = decode_labeled_vpn_l2(tptr, buf, sizeof(buf));
1723 if (advance == -1)
1724 printf("\n\t (illegal length)");
1725 else if (advance == -2)
1726 goto trunc;
1727 else
1728 printf("\n\t %s", buf);
1729 break;
1730 case (AFNUM_NSAP<<8 | SAFNUM_UNICAST):
1731 case (AFNUM_NSAP<<8 | SAFNUM_MULTICAST):
1732 case (AFNUM_NSAP<<8 | SAFNUM_UNIMULTICAST):
1733 advance = decode_clnp_prefix(tptr, buf, sizeof(buf));
1734 if (advance == -1)
1735 printf("\n\t (illegal prefix length)");
1736 else if (advance == -2)
1737 goto trunc;
1738 else
1739 printf("\n\t %s", buf);
1740 break;
1741 case (AFNUM_NSAP<<8 | SAFNUM_VPNUNICAST):
1742 case (AFNUM_NSAP<<8 | SAFNUM_VPNMULTICAST):
1743 case (AFNUM_NSAP<<8 | SAFNUM_VPNUNIMULTICAST):
1744 advance = decode_labeled_vpn_clnp_prefix(tptr, buf, sizeof(buf));
1745 if (advance == -1)
1746 printf("\n\t (illegal prefix length)");
1747 else if (advance == -2)
1748 goto trunc;
1749 else
1750 printf("\n\t %s", buf);
1751 break;
1752 default:
1753 TCHECK2(*tptr,tlen);
1754 printf("\n\t no AFI %u / SAFI %u decoder",af,safi);
1755 if (vflag <= 1)
1756 print_unknown_data(tptr,"\n\t ",tlen);
1757 advance = 0;
1758 tptr = pptr + len;
1759 break;
1760 }
1761 if (advance < 0)
1762 break;
1763 tptr += advance;
1764 }
1765 done:
1766 break;
1767
1768 case BGPTYPE_MP_UNREACH_NLRI:
1769 TCHECK2(tptr[0], BGP_MP_NLRI_MINSIZE);
1770 af = EXTRACT_16BITS(tptr);
1771 safi = tptr[2];
1772
1773 printf("\n\t AFI: %s (%u), %sSAFI: %s (%u)",
1774 tok2strbuf(af_values, "Unknown AFI", af,
1775 tokbuf, sizeof(tokbuf)),
1776 af,
1777 (safi>128) ? "vendor specific " : "", /* 128 is meanwhile wellknown */
1778 tok2strbuf(bgp_safi_values, "Unknown SAFI", safi,
1779 tokbuf, sizeof(tokbuf)),
1780 safi);
1781
1782 if (len == BGP_MP_NLRI_MINSIZE)
1783 printf("\n\t End-of-Rib Marker (empty NLRI)");
1784
1785 tptr += 3;
1786
1787 while (len - (tptr - pptr) > 0) {
1788 switch (af<<8 | safi) {
1789 case (AFNUM_INET<<8 | SAFNUM_UNICAST):
1790 case (AFNUM_INET<<8 | SAFNUM_MULTICAST):
1791 case (AFNUM_INET<<8 | SAFNUM_UNIMULTICAST):
1792 advance = decode_prefix4(tptr, buf, sizeof(buf));
1793 if (advance == -1)
1794 printf("\n\t (illegal prefix length)");
1795 else if (advance == -2)
1796 goto trunc;
1797 else
1798 printf("\n\t %s", buf);
1799 break;
1800 case (AFNUM_INET<<8 | SAFNUM_LABUNICAST):
1801 advance = decode_labeled_prefix4(tptr, buf, sizeof(buf));
1802 if (advance == -1)
1803 printf("\n\t (illegal prefix length)");
1804 else if (advance == -2)
1805 goto trunc;
1806 else
1807 printf("\n\t %s", buf);
1808 break;
1809 case (AFNUM_INET<<8 | SAFNUM_VPNUNICAST):
1810 case (AFNUM_INET<<8 | SAFNUM_VPNMULTICAST):
1811 case (AFNUM_INET<<8 | SAFNUM_VPNUNIMULTICAST):
1812 advance = decode_labeled_vpn_prefix4(tptr, buf, sizeof(buf));
1813 if (advance == -1)
1814 printf("\n\t (illegal prefix length)");
1815 else if (advance == -2)
1816 goto trunc;
1817 else
1818 printf("\n\t %s", buf);
1819 break;
1820 #ifdef INET6
1821 case (AFNUM_INET6<<8 | SAFNUM_UNICAST):
1822 case (AFNUM_INET6<<8 | SAFNUM_MULTICAST):
1823 case (AFNUM_INET6<<8 | SAFNUM_UNIMULTICAST):
1824 advance = decode_prefix6(tptr, buf, sizeof(buf));
1825 if (advance == -1)
1826 printf("\n\t (illegal prefix length)");
1827 else if (advance == -2)
1828 goto trunc;
1829 else
1830 printf("\n\t %s", buf);
1831 break;
1832 case (AFNUM_INET6<<8 | SAFNUM_LABUNICAST):
1833 advance = decode_labeled_prefix6(tptr, buf, sizeof(buf));
1834 if (advance == -1)
1835 printf("\n\t (illegal prefix length)");
1836 else if (advance == -2)
1837 goto trunc;
1838 else
1839 printf("\n\t %s", buf);
1840 break;
1841 case (AFNUM_INET6<<8 | SAFNUM_VPNUNICAST):
1842 case (AFNUM_INET6<<8 | SAFNUM_VPNMULTICAST):
1843 case (AFNUM_INET6<<8 | SAFNUM_VPNUNIMULTICAST):
1844 advance = decode_labeled_vpn_prefix6(tptr, buf, sizeof(buf));
1845 if (advance == -1)
1846 printf("\n\t (illegal prefix length)");
1847 else if (advance == -2)
1848 goto trunc;
1849 else
1850 printf("\n\t %s", buf);
1851 break;
1852 #endif
1853 case (AFNUM_VPLS<<8 | SAFNUM_VPLS):
1854 case (AFNUM_L2VPN<<8 | SAFNUM_VPNUNICAST):
1855 case (AFNUM_L2VPN<<8 | SAFNUM_VPNMULTICAST):
1856 case (AFNUM_L2VPN<<8 | SAFNUM_VPNUNIMULTICAST):
1857 advance = decode_labeled_vpn_l2(tptr, buf, sizeof(buf));
1858 if (advance == -1)
1859 printf("\n\t (illegal length)");
1860 else if (advance == -2)
1861 goto trunc;
1862 else
1863 printf("\n\t %s", buf);
1864 break;
1865 case (AFNUM_NSAP<<8 | SAFNUM_UNICAST):
1866 case (AFNUM_NSAP<<8 | SAFNUM_MULTICAST):
1867 case (AFNUM_NSAP<<8 | SAFNUM_UNIMULTICAST):
1868 advance = decode_clnp_prefix(tptr, buf, sizeof(buf));
1869 if (advance == -1)
1870 printf("\n\t (illegal prefix length)");
1871 else if (advance == -2)
1872 goto trunc;
1873 else
1874 printf("\n\t %s", buf);
1875 break;
1876 case (AFNUM_NSAP<<8 | SAFNUM_VPNUNICAST):
1877 case (AFNUM_NSAP<<8 | SAFNUM_VPNMULTICAST):
1878 case (AFNUM_NSAP<<8 | SAFNUM_VPNUNIMULTICAST):
1879 advance = decode_labeled_vpn_clnp_prefix(tptr, buf, sizeof(buf));
1880 if (advance == -1)
1881 printf("\n\t (illegal prefix length)");
1882 else if (advance == -2)
1883 goto trunc;
1884 else
1885 printf("\n\t %s", buf);
1886 break;
1887 case (AFNUM_INET<<8 | SAFNUM_MDT):
1888 advance = decode_mdt_vpn_nlri(tptr, buf, sizeof(buf));
1889 if (advance == -1)
1890 printf("\n\t (illegal prefix length)");
1891 else if (advance == -2)
1892 goto trunc;
1893 else
1894 printf("\n\t %s", buf);
1895 break;
1896 case (AFNUM_INET<<8 | SAFNUM_MULTICAST_VPN): /* fall through */
1897 case (AFNUM_INET6<<8 | SAFNUM_MULTICAST_VPN):
1898 advance = decode_multicast_vpn(tptr, buf, sizeof(buf));
1899 if (advance == -1)
1900 printf("\n\t (illegal prefix length)");
1901 else if (advance == -2)
1902 goto trunc;
1903 else
1904 printf("\n\t %s", buf);
1905 break;
1906 default:
1907 TCHECK2(*(tptr-3),tlen);
1908 printf("no AFI %u / SAFI %u decoder",af,safi);
1909 if (vflag <= 1)
1910 print_unknown_data(tptr-3,"\n\t ",tlen);
1911 advance = 0;
1912 tptr = pptr + len;
1913 break;
1914 }
1915 if (advance < 0)
1916 break;
1917 tptr += advance;
1918 }
1919 break;
1920 case BGPTYPE_EXTD_COMMUNITIES:
1921 if (len % 8) {
1922 printf("invalid len");
1923 break;
1924 }
1925 while (tlen>0) {
1926 u_int16_t extd_comm;
1927
1928 TCHECK2(tptr[0], 2);
1929 extd_comm=EXTRACT_16BITS(tptr);
1930
1931 printf("\n\t %s (0x%04x), Flags [%s]",
1932 tok2strbuf(bgp_extd_comm_subtype_values,
1933 "unknown extd community typecode",
1934 extd_comm, tokbuf, sizeof(tokbuf)),
1935 extd_comm,
1936 bittok2str(bgp_extd_comm_flag_values, "none", extd_comm));
1937
1938 TCHECK2(*(tptr+2), 6);
1939 switch(extd_comm) {
1940 case BGP_EXT_COM_RT_0:
1941 case BGP_EXT_COM_RO_0:
1942 printf(": %u:%u (= %s)",
1943 EXTRACT_16BITS(tptr+2),
1944 EXTRACT_32BITS(tptr+4),
1945 getname(tptr+4));
1946 break;
1947 case BGP_EXT_COM_RT_1:
1948 case BGP_EXT_COM_RO_1:
1949 case BGP_EXT_COM_VRF_RT_IMP:
1950 printf(": %s:%u",
1951 getname(tptr+2),
1952 EXTRACT_16BITS(tptr+6));
1953 break;
1954 case BGP_EXT_COM_RT_2:
1955 case BGP_EXT_COM_RO_2:
1956 printf(": %s:%u",
1957 as_printf(astostr, sizeof(astostr),
1958 EXTRACT_32BITS(tptr+2)), EXTRACT_16BITS(tptr+6));
1959 break;
1960 case BGP_EXT_COM_LINKBAND:
1961 bw.i = EXTRACT_32BITS(tptr+2);
1962 printf(": bandwidth: %.3f Mbps",
1963 bw.f*8/1000000);
1964 break;
1965 case BGP_EXT_COM_VPN_ORIGIN:
1966 case BGP_EXT_COM_VPN_ORIGIN2:
1967 case BGP_EXT_COM_VPN_ORIGIN3:
1968 case BGP_EXT_COM_VPN_ORIGIN4:
1969 case BGP_EXT_COM_OSPF_RID:
1970 case BGP_EXT_COM_OSPF_RID2:
1971 printf("%s", getname(tptr+2));
1972 break;
1973 case BGP_EXT_COM_OSPF_RTYPE:
1974 case BGP_EXT_COM_OSPF_RTYPE2:
1975 printf(": area:%s, router-type:%s, metric-type:%s%s",
1976 getname(tptr+2),
1977 tok2strbuf(bgp_extd_comm_ospf_rtype_values,
1978 "unknown (0x%02x)",
1979 *(tptr+6),
1980 tokbuf, sizeof(tokbuf)),
1981 (*(tptr+7) & BGP_OSPF_RTYPE_METRIC_TYPE) ? "E2" : "",
1982 ((*(tptr+6) == BGP_OSPF_RTYPE_EXT) || (*(tptr+6) == BGP_OSPF_RTYPE_NSSA)) ? "E1" : "");
1983 break;
1984 case BGP_EXT_COM_L2INFO:
1985 printf(": %s Control Flags [0x%02x]:MTU %u",
1986 tok2strbuf(l2vpn_encaps_values,
1987 "unknown encaps",
1988 *(tptr+2),
1989 tokbuf, sizeof(tokbuf)),
1990 *(tptr+3),
1991 EXTRACT_16BITS(tptr+4));
1992 break;
1993 case BGP_EXT_COM_SOURCE_AS:
1994 printf(": AS %u", EXTRACT_16BITS(tptr+2));
1995 break;
1996 default:
1997 TCHECK2(*tptr,8);
1998 print_unknown_data(tptr,"\n\t ",8);
1999 break;
2000 }
2001 tlen -=8;
2002 tptr +=8;
2003 }
2004 break;
2005
2006 case BGPTYPE_PMSI_TUNNEL:
2007 {
2008 u_int8_t tunnel_type, flags;
2009
2010 tunnel_type = *(tptr+1);
2011 flags = *tptr;
2012 tlen = len;
2013
2014 TCHECK2(tptr[0], 5);
2015 printf("\n\t Tunnel-type %s (%u), Flags [%s], MPLS Label %u",
2016 tok2str(bgp_pmsi_tunnel_values, "Unknown", tunnel_type),
2017 tunnel_type,
2018 bittok2str(bgp_pmsi_flag_values, "none", flags),
2019 EXTRACT_24BITS(tptr+2)>>4);
2020
2021 tptr +=5;
2022 tlen -= 5;
2023
2024 switch (tunnel_type) {
2025 case BGP_PMSI_TUNNEL_PIM_SM: /* fall through */
2026 case BGP_PMSI_TUNNEL_PIM_BIDIR:
2027 TCHECK2(tptr[0], 8);
2028 printf("\n\t Sender %s, P-Group %s",
2029 ipaddr_string(tptr),
2030 ipaddr_string(tptr+4));
2031 break;
2032
2033 case BGP_PMSI_TUNNEL_PIM_SSM:
2034 TCHECK2(tptr[0], 8);
2035 printf("\n\t Root-Node %s, P-Group %s",
2036 ipaddr_string(tptr),
2037 ipaddr_string(tptr+4));
2038 break;
2039 case BGP_PMSI_TUNNEL_INGRESS:
2040 TCHECK2(tptr[0], 4);
2041 printf("\n\t Tunnel-Endpoint %s",
2042 ipaddr_string(tptr));
2043 break;
2044 case BGP_PMSI_TUNNEL_LDP_P2MP: /* fall through */
2045 case BGP_PMSI_TUNNEL_LDP_MP2MP:
2046 TCHECK2(tptr[0], 8);
2047 printf("\n\t Root-Node %s, LSP-ID 0x%08x",
2048 ipaddr_string(tptr),
2049 EXTRACT_32BITS(tptr+4));
2050 break;
2051 case BGP_PMSI_TUNNEL_RSVP_P2MP:
2052 TCHECK2(tptr[0], 8);
2053 printf("\n\t Extended-Tunnel-ID %s, P2MP-ID 0x%08x",
2054 ipaddr_string(tptr),
2055 EXTRACT_32BITS(tptr+4));
2056 break;
2057 default:
2058 if (vflag <= 1) {
2059 print_unknown_data(tptr,"\n\t ",tlen);
2060 }
2061 }
2062 break;
2063 }
2064 case BGPTYPE_ATTR_SET:
2065 TCHECK2(tptr[0], 4);
2066 printf("\n\t Origin AS: %s",
2067 as_printf(astostr, sizeof(astostr), EXTRACT_32BITS(tptr)));
2068 tptr+=4;
2069 len -=4;
2070
2071 while (len >= 2 ) {
2072 int alen;
2073 struct bgp_attr bgpa;
2074
2075 TCHECK2(tptr[0], sizeof(bgpa));
2076 memcpy(&bgpa, tptr, sizeof(bgpa));
2077 alen = bgp_attr_len(&bgpa);
2078 tptr += bgp_attr_off(&bgpa);
2079 len -= bgp_attr_off(&bgpa);
2080
2081 printf("\n\t %s (%u), length: %u",
2082 tok2strbuf(bgp_attr_values,
2083 "Unknown Attribute", bgpa.bgpa_type,
2084 tokbuf, sizeof(tokbuf)),
2085 bgpa.bgpa_type,
2086 alen);
2087
2088 if (bgpa.bgpa_flags) {
2089 printf(", Flags [%s%s%s%s",
2090 bgpa.bgpa_flags & 0x80 ? "O" : "",
2091 bgpa.bgpa_flags & 0x40 ? "T" : "",
2092 bgpa.bgpa_flags & 0x20 ? "P" : "",
2093 bgpa.bgpa_flags & 0x10 ? "E" : "");
2094 if (bgpa.bgpa_flags & 0xf)
2095 printf("+%x", bgpa.bgpa_flags & 0xf);
2096 printf("]: ");
2097 }
2098 /* FIXME check for recursion */
2099 if (!bgp_attr_print(&bgpa, tptr, alen))
2100 return 0;
2101 tptr += alen;
2102 len -= alen;
2103 }
2104 break;
2105
2106
2107 default:
2108 TCHECK2(*pptr,len);
2109 printf("\n\t no Attribute %u decoder",attr->bgpa_type); /* we have no decoder for the attribute */
2110 if (vflag <= 1)
2111 print_unknown_data(pptr,"\n\t ",len);
2112 break;
2113 }
2114 if (vflag > 1 && len) { /* omit zero length attributes*/
2115 TCHECK2(*pptr,len);
2116 print_unknown_data(pptr,"\n\t ",len);
2117 }
2118 return 1;
2119
2120 trunc:
2121 return 0;
2122 }
2123
2124 static void
2125 bgp_open_print(const u_char *dat, int length)
2126 {
2127 struct bgp_open bgpo;
2128 struct bgp_opt bgpopt;
2129 const u_char *opt;
2130 int i,cap_type,cap_len,tcap_len,cap_offset;
2131 char tokbuf[TOKBUFSIZE];
2132 char tokbuf2[TOKBUFSIZE];
2133
2134 TCHECK2(dat[0], BGP_OPEN_SIZE);
2135 memcpy(&bgpo, dat, BGP_OPEN_SIZE);
2136
2137 printf("\n\t Version %d, ", bgpo.bgpo_version);
2138 printf("my AS %s, ",
2139 as_printf(astostr, sizeof(astostr), ntohs(bgpo.bgpo_myas)));
2140 printf("Holdtime %us, ", ntohs(bgpo.bgpo_holdtime));
2141 printf("ID %s", getname((u_char *)&bgpo.bgpo_id));
2142 printf("\n\t Optional parameters, length: %u", bgpo.bgpo_optlen);
2143
2144 /* some little sanity checking */
2145 if (length < bgpo.bgpo_optlen+BGP_OPEN_SIZE)
2146 return;
2147
2148 /* ugly! */
2149 opt = &((const struct bgp_open *)dat)->bgpo_optlen;
2150 opt++;
2151
2152 i = 0;
2153 while (i < bgpo.bgpo_optlen) {
2154 TCHECK2(opt[i], BGP_OPT_SIZE);
2155 memcpy(&bgpopt, &opt[i], BGP_OPT_SIZE);
2156 if (i + 2 + bgpopt.bgpopt_len > bgpo.bgpo_optlen) {
2157 printf("\n\t Option %d, length: %u", bgpopt.bgpopt_type, bgpopt.bgpopt_len);
2158 break;
2159 }
2160
2161 printf("\n\t Option %s (%u), length: %u",
2162 tok2strbuf(bgp_opt_values,"Unknown",
2163 bgpopt.bgpopt_type,
2164 tokbuf, sizeof(tokbuf)),
2165 bgpopt.bgpopt_type,
2166 bgpopt.bgpopt_len);
2167
2168 /* now lets decode the options we know*/
2169 switch(bgpopt.bgpopt_type) {
2170 case BGP_OPT_CAP:
2171 cap_type=opt[i+BGP_OPT_SIZE];
2172 cap_len=opt[i+BGP_OPT_SIZE+1];
2173 tcap_len=cap_len;
2174 printf("\n\t %s (%u), length: %u",
2175 tok2strbuf(bgp_capcode_values, "Unknown",
2176 cap_type, tokbuf, sizeof(tokbuf)),
2177 cap_type,
2178 cap_len);
2179 switch(cap_type) {
2180 case BGP_CAPCODE_MP:
2181 printf("\n\t\tAFI %s (%u), SAFI %s (%u)",
2182 tok2strbuf(af_values, "Unknown",
2183 EXTRACT_16BITS(opt+i+BGP_OPT_SIZE+2),
2184 tokbuf, sizeof(tokbuf)),
2185 EXTRACT_16BITS(opt+i+BGP_OPT_SIZE+2),
2186 tok2strbuf(bgp_safi_values, "Unknown",
2187 opt[i+BGP_OPT_SIZE+5],
2188 tokbuf, sizeof(tokbuf)),
2189 opt[i+BGP_OPT_SIZE+5]);
2190 break;
2191 case BGP_CAPCODE_RESTART:
2192 printf("\n\t\tRestart Flags: [%s], Restart Time %us",
2193 ((opt[i+BGP_OPT_SIZE+2])&0x80) ? "R" : "none",
2194 EXTRACT_16BITS(opt+i+BGP_OPT_SIZE+2)&0xfff);
2195 tcap_len-=2;
2196 cap_offset=4;
2197 while(tcap_len>=4) {
2198 printf("\n\t\t AFI %s (%u), SAFI %s (%u), Forwarding state preserved: %s",
2199 tok2strbuf(af_values,"Unknown",
2200 EXTRACT_16BITS(opt+i+BGP_OPT_SIZE+cap_offset),
2201 tokbuf, sizeof(tokbuf)),
2202 EXTRACT_16BITS(opt+i+BGP_OPT_SIZE+cap_offset),
2203 tok2strbuf(bgp_safi_values,"Unknown",
2204 opt[i+BGP_OPT_SIZE+cap_offset+2],
2205 tokbuf2, sizeof(tokbuf2)),
2206 opt[i+BGP_OPT_SIZE+cap_offset+2],
2207 ((opt[i+BGP_OPT_SIZE+cap_offset+3])&0x80) ? "yes" : "no" );
2208 tcap_len-=4;
2209 cap_offset+=4;
2210 }
2211 break;
2212 case BGP_CAPCODE_RR:
2213 case BGP_CAPCODE_RR_CISCO:
2214 break;
2215 case BGP_CAPCODE_AS_NEW:
2216
2217 /*
2218 * Extract the 4 byte AS number encoded.
2219 */
2220 TCHECK2(opt[i + BGP_OPT_SIZE + 2], cap_len);
2221 if (cap_len == 4) {
2222 printf("\n\t\t 4 Byte AS %s",
2223 as_printf(astostr, sizeof(astostr),
2224 EXTRACT_32BITS(opt + i + BGP_OPT_SIZE + 2)));
2225 }
2226 break;
2227 default:
2228 TCHECK2(opt[i+BGP_OPT_SIZE+2],cap_len);
2229 printf("\n\t\tno decoder for Capability %u",
2230 cap_type);
2231 if (vflag <= 1)
2232 print_unknown_data(&opt[i+BGP_OPT_SIZE+2],"\n\t\t",cap_len);
2233 break;
2234 }
2235 if (vflag > 1) {
2236 TCHECK2(opt[i+BGP_OPT_SIZE+2],cap_len);
2237 print_unknown_data(&opt[i+BGP_OPT_SIZE+2],"\n\t\t",cap_len);
2238 }
2239 break;
2240 case BGP_OPT_AUTH:
2241 default:
2242 printf("\n\t no decoder for option %u",
2243 bgpopt.bgpopt_type);
2244 break;
2245 }
2246
2247 i += BGP_OPT_SIZE + bgpopt.bgpopt_len;
2248 }
2249 return;
2250 trunc:
2251 printf("[|BGP]");
2252 }
2253
2254 static void
2255 bgp_update_print(const u_char *dat, int length)
2256 {
2257 struct bgp bgp;
2258 struct bgp_attr bgpa;
2259 const u_char *p;
2260 int len;
2261 int i;
2262 char tokbuf[TOKBUFSIZE];
2263
2264 TCHECK2(dat[0], BGP_SIZE);
2265 memcpy(&bgp, dat, BGP_SIZE);
2266 p = dat + BGP_SIZE; /*XXX*/
2267
2268 /* Unfeasible routes */
2269 len = EXTRACT_16BITS(p);
2270 if (len) {
2271 /*
2272 * Without keeping state from the original NLRI message,
2273 * it's not possible to tell if this a v4 or v6 route,
2274 * so only try to decode it if we're not v6 enabled.
2275 */
2276 #ifdef INET6
2277 printf("\n\t Withdrawn routes: %d bytes", len);
2278 #else
2279 char buf[MAXHOSTNAMELEN + 100];
2280 int wpfx;
2281
2282 TCHECK2(p[2], len);
2283 i = 2;
2284
2285 printf("\n\t Withdrawn routes:");
2286
2287 while(i < 2 + len) {
2288 wpfx = decode_prefix4(&p[i], buf, sizeof(buf));
2289 if (wpfx == -1) {
2290 printf("\n\t (illegal prefix length)");
2291 break;
2292 } else if (wpfx == -2)
2293 goto trunc;
2294 else {
2295 i += wpfx;
2296 printf("\n\t %s", buf);
2297 }
2298 }
2299 #endif
2300 }
2301 p += 2 + len;
2302
2303 TCHECK2(p[0], 2);
2304 len = EXTRACT_16BITS(p);
2305
2306 if (len == 0 && length == BGP_UPDATE_MINSIZE) {
2307 printf("\n\t End-of-Rib Marker (empty NLRI)");
2308 return;
2309 }
2310
2311 if (len) {
2312 /* do something more useful!*/
2313 i = 2;
2314 while (i < 2 + len) {
2315 int alen, aoff;
2316
2317 TCHECK2(p[i], sizeof(bgpa));
2318 memcpy(&bgpa, &p[i], sizeof(bgpa));
2319 alen = bgp_attr_len(&bgpa);
2320 aoff = bgp_attr_off(&bgpa);
2321
2322 printf("\n\t %s (%u), length: %u",
2323 tok2strbuf(bgp_attr_values, "Unknown Attribute",
2324 bgpa.bgpa_type,
2325 tokbuf, sizeof(tokbuf)),
2326 bgpa.bgpa_type,
2327 alen);
2328
2329 if (bgpa.bgpa_flags) {
2330 printf(", Flags [%s%s%s%s",
2331 bgpa.bgpa_flags & 0x80 ? "O" : "",
2332 bgpa.bgpa_flags & 0x40 ? "T" : "",
2333 bgpa.bgpa_flags & 0x20 ? "P" : "",
2334 bgpa.bgpa_flags & 0x10 ? "E" : "");
2335 if (bgpa.bgpa_flags & 0xf)
2336 printf("+%x", bgpa.bgpa_flags & 0xf);
2337 printf("]: ");
2338 }
2339 if (!bgp_attr_print(&bgpa, &p[i + aoff], alen))
2340 goto trunc;
2341 i += aoff + alen;
2342 }
2343 }
2344 p += 2 + len;
2345
2346 if (dat + length > p) {
2347 printf("\n\t Updated routes:");
2348 while (dat + length > p) {
2349 char buf[MAXHOSTNAMELEN + 100];
2350 i = decode_prefix4(p, buf, sizeof(buf));
2351 if (i == -1) {
2352 printf("\n\t (illegal prefix length)");
2353 break;
2354 } else if (i == -2)
2355 goto trunc;
2356 else {
2357 printf("\n\t %s", buf);
2358 p += i;
2359 }
2360 }
2361 }
2362 return;
2363 trunc:
2364 printf("[|BGP]");
2365 }
2366
2367 static void
2368 bgp_notification_print(const u_char *dat, int length)
2369 {
2370 struct bgp_notification bgpn;
2371 const u_char *tptr;
2372 char tokbuf[TOKBUFSIZE];
2373 char tokbuf2[TOKBUFSIZE];
2374
2375 TCHECK2(dat[0], BGP_NOTIFICATION_SIZE);
2376 memcpy(&bgpn, dat, BGP_NOTIFICATION_SIZE);
2377
2378 /* some little sanity checking */
2379 if (length<BGP_NOTIFICATION_SIZE)
2380 return;
2381
2382 printf(", %s (%u)",
2383 tok2strbuf(bgp_notify_major_values, "Unknown Error",
2384 bgpn.bgpn_major, tokbuf, sizeof(tokbuf)),
2385 bgpn.bgpn_major);
2386
2387 switch (bgpn.bgpn_major) {
2388
2389 case BGP_NOTIFY_MAJOR_MSG:
2390 printf(", subcode %s (%u)",
2391 tok2strbuf(bgp_notify_minor_msg_values, "Unknown",
2392 bgpn.bgpn_minor, tokbuf, sizeof(tokbuf)),
2393 bgpn.bgpn_minor);
2394 break;
2395 case BGP_NOTIFY_MAJOR_OPEN:
2396 printf(", subcode %s (%u)",
2397 tok2strbuf(bgp_notify_minor_open_values, "Unknown",
2398 bgpn.bgpn_minor, tokbuf, sizeof(tokbuf)),
2399 bgpn.bgpn_minor);
2400 break;
2401 case BGP_NOTIFY_MAJOR_UPDATE:
2402 printf(", subcode %s (%u)",
2403 tok2strbuf(bgp_notify_minor_update_values, "Unknown",
2404 bgpn.bgpn_minor, tokbuf, sizeof(tokbuf)),
2405 bgpn.bgpn_minor);
2406 break;
2407 case BGP_NOTIFY_MAJOR_CAP:
2408 printf(" subcode %s (%u)",
2409 tok2strbuf(bgp_notify_minor_cap_values, "Unknown",
2410 bgpn.bgpn_minor, tokbuf, sizeof(tokbuf)),
2411 bgpn.bgpn_minor);
2412 case BGP_NOTIFY_MAJOR_CEASE:
2413 printf(", subcode %s (%u)",
2414 tok2strbuf(bgp_notify_minor_cease_values, "Unknown",
2415 bgpn.bgpn_minor, tokbuf, sizeof(tokbuf)),
2416 bgpn.bgpn_minor);
2417
2418 /* draft-ietf-idr-cease-subcode-02 mentions optionally 7 bytes
2419 * for the maxprefix subtype, which may contain AFI, SAFI and MAXPREFIXES
2420 */
2421 if(bgpn.bgpn_minor == BGP_NOTIFY_MINOR_CEASE_MAXPRFX && length >= BGP_NOTIFICATION_SIZE + 7) {
2422 tptr = dat + BGP_NOTIFICATION_SIZE;
2423 TCHECK2(*tptr, 7);
2424 printf(", AFI %s (%u), SAFI %s (%u), Max Prefixes: %u",
2425 tok2strbuf(af_values, "Unknown",
2426 EXTRACT_16BITS(tptr), tokbuf, sizeof(tokbuf)),
2427 EXTRACT_16BITS(tptr),
2428 tok2strbuf(bgp_safi_values, "Unknown", *(tptr+2),
2429 tokbuf2, sizeof(tokbuf)),
2430 *(tptr+2),
2431 EXTRACT_32BITS(tptr+3));
2432 }
2433 break;
2434 default:
2435 break;
2436 }
2437
2438 return;
2439 trunc:
2440 printf("[|BGP]");
2441 }
2442
2443 static void
2444 bgp_route_refresh_print(const u_char *pptr, int len) {
2445
2446 const struct bgp_route_refresh *bgp_route_refresh_header;
2447 char tokbuf[TOKBUFSIZE];
2448 char tokbuf2[TOKBUFSIZE];
2449
2450 TCHECK2(pptr[0], BGP_ROUTE_REFRESH_SIZE);
2451
2452 /* some little sanity checking */
2453 if (len<BGP_ROUTE_REFRESH_SIZE)
2454 return;
2455
2456 bgp_route_refresh_header = (const struct bgp_route_refresh *)pptr;
2457
2458 printf("\n\t AFI %s (%u), SAFI %s (%u)",
2459 tok2strbuf(af_values,"Unknown",
2460 /* this stinks but the compiler pads the structure
2461 * weird */
2462 EXTRACT_16BITS(&bgp_route_refresh_header->afi),
2463 tokbuf, sizeof(tokbuf)),
2464 EXTRACT_16BITS(&bgp_route_refresh_header->afi),
2465 tok2strbuf(bgp_safi_values,"Unknown",
2466 bgp_route_refresh_header->safi,
2467 tokbuf2, sizeof(tokbuf2)),
2468 bgp_route_refresh_header->safi);
2469
2470 if (vflag > 1) {
2471 TCHECK2(*pptr, len);
2472 print_unknown_data(pptr,"\n\t ", len);
2473 }
2474
2475 return;
2476 trunc:
2477 printf("[|BGP]");
2478 }
2479
2480 static int
2481 bgp_header_print(const u_char *dat, int length)
2482 {
2483 struct bgp bgp;
2484 char tokbuf[TOKBUFSIZE];
2485
2486 TCHECK2(dat[0], BGP_SIZE);
2487 memcpy(&bgp, dat, BGP_SIZE);
2488 printf("\n\t%s Message (%u), length: %u",
2489 tok2strbuf(bgp_msg_values, "Unknown", bgp.bgp_type,
2490 tokbuf, sizeof(tokbuf)),
2491 bgp.bgp_type,
2492 length);
2493
2494 switch (bgp.bgp_type) {
2495 case BGP_OPEN:
2496 bgp_open_print(dat, length);
2497 break;
2498 case BGP_UPDATE:
2499 bgp_update_print(dat, length);
2500 break;
2501 case BGP_NOTIFICATION:
2502 bgp_notification_print(dat, length);
2503 break;
2504 case BGP_KEEPALIVE:
2505 break;
2506 case BGP_ROUTE_REFRESH:
2507 bgp_route_refresh_print(dat, length);
2508 break;
2509 default:
2510 /* we have no decoder for the BGP message */
2511 TCHECK2(*dat, length);
2512 printf("\n\t no Message %u decoder",bgp.bgp_type);
2513 print_unknown_data(dat,"\n\t ",length);
2514 break;
2515 }
2516 return 1;
2517 trunc:
2518 printf("[|BGP]");
2519 return 0;
2520 }
2521
2522 void
2523 bgp_print(const u_char *dat, int length)
2524 {
2525 const u_char *p;
2526 const u_char *ep;
2527 const u_char *start;
2528 const u_char marker[] = {
2529 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
2530 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff, 0xff,
2531 };
2532 struct bgp bgp;
2533 u_int16_t hlen;
2534 char tokbuf[TOKBUFSIZE];
2535
2536 ep = dat + length;
2537 if (snapend < dat + length)
2538 ep = snapend;
2539
2540 printf(": BGP, length: %u",length);
2541
2542 if (vflag < 1) /* lets be less chatty */
2543 return;
2544
2545 p = dat;
2546 start = p;
2547 while (p < ep) {
2548 if (!TTEST2(p[0], 1))
2549 break;
2550 if (p[0] != 0xff) {
2551 p++;
2552 continue;
2553 }
2554
2555 if (!TTEST2(p[0], sizeof(marker)))
2556 break;
2557 if (memcmp(p, marker, sizeof(marker)) != 0) {
2558 p++;
2559 continue;
2560 }
2561
2562 /* found BGP header */
2563 TCHECK2(p[0], BGP_SIZE); /*XXX*/
2564 memcpy(&bgp, p, BGP_SIZE);
2565
2566 if (start != p)
2567 printf(" [|BGP]");
2568
2569 hlen = ntohs(bgp.bgp_len);
2570 if (hlen < BGP_SIZE) {
2571 printf("\n[|BGP Bogus header length %u < %u]", hlen,
2572 BGP_SIZE);
2573 break;
2574 }
2575
2576 if (TTEST2(p[0], hlen)) {
2577 if (!bgp_header_print(p, hlen))
2578 return;
2579 p += hlen;
2580 start = p;
2581 } else {
2582 printf("\n[|BGP %s]",
2583 tok2strbuf(bgp_msg_values,
2584 "Unknown Message Type",
2585 bgp.bgp_type,
2586 tokbuf, sizeof(tokbuf)));
2587 break;
2588 }
2589 }
2590
2591 return;
2592
2593 trunc:
2594 printf(" [|BGP]");
2595 }
2596
2597 /*
2598 * Local Variables:
2599 * c-style: whitesmith
2600 * c-basic-offset: 4
2601 * End:
2602 */
[mirror] the TCPdump network dissector