]> The Tcpdump Group git mirrors - tcpdump/blob - print.c
projects / tcpdump / blob
summary | shortlog | log | commit | commitdiff | tree
history | raw | HEAD
Update .gitignore for other configurations
[tcpdump] / print.c
1 /*
2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 2000
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 *
21 * Support for splitting captures into multiple files with a maximum
22 * file size:
23 *
24 * Copyright (c) 2001
25 * Seth Webster <swebster@sst.ll.mit.edu>
26 */
27
28 #ifdef HAVE_CONFIG_H
29 #include <config.h>
30 #endif
31
32 #include <stdlib.h>
33 #include <string.h>
34
35 #include "netdissect-stdinc.h"
36
37 #include "netdissect.h"
38 #include "addrtoname.h"
39 #include "print.h"
40 #include "netdissect-alloc.h"
41
42 #include "pcap-missing.h"
43
44 struct printer {
45 if_printer f;
46 int type;
47 };
48
49 static const struct printer printers[] = {
50 { ether_if_print, DLT_EN10MB },
51 #ifdef DLT_IPNET
52 { ipnet_if_print, DLT_IPNET },
53 #endif
54 #ifdef DLT_IEEE802_15_4
55 { ieee802_15_4_if_print, DLT_IEEE802_15_4 },
56 #endif
57 #ifdef DLT_IEEE802_15_4_NOFCS
58 { ieee802_15_4_if_print, DLT_IEEE802_15_4_NOFCS },
59 #endif
60 #ifdef DLT_PPI
61 { ppi_if_print, DLT_PPI },
62 #endif
63 #ifdef DLT_NETANALYZER
64 { netanalyzer_if_print, DLT_NETANALYZER },
65 #endif
66 #ifdef DLT_NETANALYZER_TRANSPARENT
67 { netanalyzer_transparent_if_print, DLT_NETANALYZER_TRANSPARENT },
68 #endif
69 #ifdef DLT_NFLOG
70 { nflog_if_print, DLT_NFLOG},
71 #endif
72 #ifdef DLT_CIP
73 { cip_if_print, DLT_CIP },
74 #endif
75 #ifdef DLT_ATM_CLIP
76 { cip_if_print, DLT_ATM_CLIP },
77 #endif
78 #ifdef DLT_IP_OVER_FC
79 { ipfc_if_print, DLT_IP_OVER_FC },
80 #endif
81 { null_if_print, DLT_NULL },
82 #ifdef DLT_LOOP
83 { null_if_print, DLT_LOOP },
84 #endif
85 #ifdef DLT_APPLE_IP_OVER_IEEE1394
86 { ap1394_if_print, DLT_APPLE_IP_OVER_IEEE1394 },
87 #endif
88 #ifdef DLT_BLUETOOTH_HCI_H4_WITH_PHDR
89 { bt_if_print, DLT_BLUETOOTH_HCI_H4_WITH_PHDR},
90 #endif
91 #ifdef DLT_LANE8023
92 { lane_if_print, DLT_LANE8023 },
93 #endif
94 { arcnet_if_print, DLT_ARCNET },
95 #ifdef DLT_ARCNET_LINUX
96 { arcnet_linux_if_print, DLT_ARCNET_LINUX },
97 #endif
98 { raw_if_print, DLT_RAW },
99 #ifdef DLT_IPV4
100 { raw_if_print, DLT_IPV4 },
101 #endif
102 #ifdef DLT_IPV6
103 { raw_if_print, DLT_IPV6 },
104 #endif
105 #ifdef DLT_USB_LINUX
106 { usb_linux_48_byte_if_print, DLT_USB_LINUX},
107 #endif /* DLT_USB_LINUX */
108 #ifdef DLT_USB_LINUX_MMAPPED
109 { usb_linux_64_byte_if_print, DLT_USB_LINUX_MMAPPED},
110 #endif /* DLT_USB_LINUX_MMAPPED */
111 #ifdef DLT_SYMANTEC_FIREWALL
112 { symantec_if_print, DLT_SYMANTEC_FIREWALL },
113 #endif
114 #ifdef DLT_C_HDLC
115 { chdlc_if_print, DLT_C_HDLC },
116 #endif
117 #ifdef DLT_HDLC
118 { chdlc_if_print, DLT_HDLC },
119 #endif
120 #ifdef DLT_PPP_ETHER
121 { pppoe_if_print, DLT_PPP_ETHER },
122 #endif
123 #if defined(DLT_PFLOG) && defined(HAVE_NET_IF_PFLOG_H)
124 { pflog_if_print, DLT_PFLOG },
125 #endif
126 { token_if_print, DLT_IEEE802 },
127 { fddi_if_print, DLT_FDDI },
128 #ifdef DLT_LINUX_SLL
129 { sll_if_print, DLT_LINUX_SLL },
130 #endif
131 #ifdef DLT_LINUX_SLL2
132 { sll2_if_print, DLT_LINUX_SLL2 },
133 #endif
134 #ifdef DLT_FR
135 { fr_if_print, DLT_FR },
136 #endif
137 #ifdef DLT_FRELAY
138 { fr_if_print, DLT_FRELAY },
139 #endif
140 #ifdef DLT_MFR
141 { mfr_if_print, DLT_MFR },
142 #endif
143 { atm_if_print, DLT_ATM_RFC1483 },
144 #ifdef DLT_SUNATM
145 { sunatm_if_print, DLT_SUNATM },
146 #endif
147 #ifdef DLT_ENC
148 { enc_if_print, DLT_ENC },
149 #endif
150 { sl_if_print, DLT_SLIP },
151 #ifdef DLT_SLIP_BSDOS
152 { sl_bsdos_if_print, DLT_SLIP_BSDOS },
153 #endif
154 #ifdef DLT_LTALK
155 { ltalk_if_print, DLT_LTALK },
156 #endif
157 #ifdef DLT_JUNIPER_ATM1
158 { juniper_atm1_if_print, DLT_JUNIPER_ATM1 },
159 #endif
160 #ifdef DLT_JUNIPER_ATM2
161 { juniper_atm2_if_print, DLT_JUNIPER_ATM2 },
162 #endif
163 #ifdef DLT_JUNIPER_MFR
164 { juniper_mfr_if_print, DLT_JUNIPER_MFR },
165 #endif
166 #ifdef DLT_JUNIPER_MLFR
167 { juniper_mlfr_if_print, DLT_JUNIPER_MLFR },
168 #endif
169 #ifdef DLT_JUNIPER_MLPPP
170 { juniper_mlppp_if_print, DLT_JUNIPER_MLPPP },
171 #endif
172 #ifdef DLT_JUNIPER_PPPOE
173 { juniper_pppoe_if_print, DLT_JUNIPER_PPPOE },
174 #endif
175 #ifdef DLT_JUNIPER_PPPOE_ATM
176 { juniper_pppoe_atm_if_print, DLT_JUNIPER_PPPOE_ATM },
177 #endif
178 #ifdef DLT_JUNIPER_GGSN
179 { juniper_ggsn_if_print, DLT_JUNIPER_GGSN },
180 #endif
181 #ifdef DLT_JUNIPER_ES
182 { juniper_es_if_print, DLT_JUNIPER_ES },
183 #endif
184 #ifdef DLT_JUNIPER_MONITOR
185 { juniper_monitor_if_print, DLT_JUNIPER_MONITOR },
186 #endif
187 #ifdef DLT_JUNIPER_SERVICES
188 { juniper_services_if_print, DLT_JUNIPER_SERVICES },
189 #endif
190 #ifdef DLT_JUNIPER_ETHER
191 { juniper_ether_if_print, DLT_JUNIPER_ETHER },
192 #endif
193 #ifdef DLT_JUNIPER_PPP
194 { juniper_ppp_if_print, DLT_JUNIPER_PPP },
195 #endif
196 #ifdef DLT_JUNIPER_FRELAY
197 { juniper_frelay_if_print, DLT_JUNIPER_FRELAY },
198 #endif
199 #ifdef DLT_JUNIPER_CHDLC
200 { juniper_chdlc_if_print, DLT_JUNIPER_CHDLC },
201 #endif
202 #ifdef DLT_PKTAP
203 { pktap_if_print, DLT_PKTAP },
204 #endif
205 #ifdef DLT_IEEE802_11_RADIO
206 { ieee802_11_radio_if_print, DLT_IEEE802_11_RADIO },
207 #endif
208 #ifdef DLT_IEEE802_11
209 { ieee802_11_if_print, DLT_IEEE802_11},
210 #endif
211 #ifdef DLT_IEEE802_11_RADIO_AVS
212 { ieee802_11_radio_avs_if_print, DLT_IEEE802_11_RADIO_AVS },
213 #endif
214 #ifdef DLT_PRISM_HEADER
215 { prism_if_print, DLT_PRISM_HEADER },
216 #endif
217 { ppp_if_print, DLT_PPP },
218 #ifdef DLT_PPP_WITHDIRECTION
219 { ppp_if_print, DLT_PPP_WITHDIRECTION },
220 #endif
221 #ifdef DLT_PPP_BSDOS
222 { ppp_bsdos_if_print, DLT_PPP_BSDOS },
223 #endif
224 #ifdef DLT_PPP_SERIAL
225 { ppp_hdlc_if_print, DLT_PPP_SERIAL },
226 #endif
227 { NULL, 0 },
228 };
229
230 static void ndo_default_print(netdissect_options *ndo, const u_char *bp,
231 u_int length);
232
233 static void NORETURN ndo_error(netdissect_options *ndo,
234 status_exit_codes_t status,
235 FORMAT_STRING(const char *fmt), ...)
236 PRINTFLIKE(3, 4);
237 static void ndo_warning(netdissect_options *ndo,
238 FORMAT_STRING(const char *fmt), ...)
239 PRINTFLIKE(2, 3);
240
241 static int ndo_printf(netdissect_options *ndo,
242 FORMAT_STRING(const char *fmt), ...)
243 PRINTFLIKE(2, 3);
244
245 void
246 init_print(netdissect_options *ndo, uint32_t localnet, uint32_t mask)
247 {
248
249 init_addrtoname(ndo, localnet, mask);
250 init_checksum();
251 }
252
253 if_printer
254 lookup_printer(int type)
255 {
256 const struct printer *p;
257
258 for (p = printers; p->f; ++p)
259 if (type == p->type)
260 return p->f;
261
262 #if defined(DLT_USER2) && defined(DLT_PKTAP)
263 /*
264 * Apple incorrectly chose to use DLT_USER2 for their PKTAP
265 * header.
266 *
267 * We map DLT_PKTAP, whether it's DLT_USER2 as it is on Darwin-
268 * based OSes or the same value as LINKTYPE_PKTAP as it is on
269 * other OSes, to LINKTYPE_PKTAP, so files written with
270 * this version of libpcap for a DLT_PKTAP capture have a link-
271 * layer header type of LINKTYPE_PKTAP.
272 *
273 * However, files written on OS X Mavericks for a DLT_PKTAP
274 * capture have a link-layer header type of LINKTYPE_USER2.
275 * If we don't have a printer for DLT_USER2, and type is
276 * DLT_USER2, we look up the printer for DLT_PKTAP and use
277 * that.
278 */
279 if (type == DLT_USER2) {
280 for (p = printers; p->f; ++p)
281 if (DLT_PKTAP == p->type)
282 return p->f;
283 }
284 #endif
285
286 return NULL;
287 /* NOTREACHED */
288 }
289
290 int
291 has_printer(int type)
292 {
293 return (lookup_printer(type) != NULL);
294 }
295
296 if_printer
297 get_if_printer(netdissect_options *ndo, int type)
298 {
299 const char *dltname;
300 if_printer printer;
301
302 printer = lookup_printer(type);
303 if (printer == NULL) {
304 dltname = pcap_datalink_val_to_name(type);
305 if (dltname != NULL)
306 (*ndo->ndo_error)(ndo, S_ERR_ND_NO_PRINTER,
307 "packet printing is not supported for link type %s: use -w",
308 dltname);
309 else
310 (*ndo->ndo_error)(ndo, S_ERR_ND_NO_PRINTER,
311 "packet printing is not supported for link type %d: use -w", type);
312 }
313 return printer;
314 }
315
316 void
317 pretty_print_packet(netdissect_options *ndo, const struct pcap_pkthdr *h,
318 const u_char *sp, u_int packets_captured)
319 {
320 u_int hdrlen;
321 int invalid_header = 0;
322
323 if (ndo->ndo_packet_number)
324 ND_PRINT("%5u ", packets_captured);
325
326 /* Sanity checks on packet length / capture length */
327 if (h->caplen == 0) {
328 invalid_header = 1;
329 ND_PRINT("[Invalid header: caplen==0");
330 }
331 if (h->len == 0) {
332 if (!invalid_header) {
333 invalid_header = 1;
334 ND_PRINT("[Invalid header:");
335 } else
336 ND_PRINT(",");
337 ND_PRINT(" len==0");
338 } else if (h->len < h->caplen) {
339 if (!invalid_header) {
340 invalid_header = 1;
341 ND_PRINT("[Invalid header:");
342 } else
343 ND_PRINT(",");
344 ND_PRINT(" len(%u) < caplen(%u)", h->len, h->caplen);
345 }
346 if (h->caplen > MAXIMUM_SNAPLEN) {
347 if (!invalid_header) {
348 invalid_header = 1;
349 ND_PRINT("[Invalid header:");
350 } else
351 ND_PRINT(",");
352 ND_PRINT(" caplen(%u) > %u", h->caplen, MAXIMUM_SNAPLEN);
353 }
354 if (h->len > MAXIMUM_SNAPLEN) {
355 if (!invalid_header) {
356 invalid_header = 1;
357 ND_PRINT("[Invalid header:");
358 } else
359 ND_PRINT(",");
360 ND_PRINT(" len(%u) > %u", h->len, MAXIMUM_SNAPLEN);
361 }
362 if (invalid_header) {
363 ND_PRINT("]\n");
364 return;
365 }
366
367 /*
368 * At this point:
369 * capture length != 0,
370 * packet length != 0,
371 * capture length <= MAXIMUM_SNAPLEN,
372 * packet length <= MAXIMUM_SNAPLEN,
373 * packet length >= capture length.
374 *
375 * Currently, there is no D-Bus printer, thus no need for
376 * bigger lengths.
377 */
378
379 ts_print(ndo, &h->ts);
380
381 /*
382 * Printers must check that they're not walking off the end of
383 * the packet.
384 * Rather than pass it all the way down, we set this member
385 * of the netdissect_options structure.
386 */
387 ndo->ndo_snapend = sp + h->caplen;
388
389 hdrlen = (ndo->ndo_if_printer)(ndo, h, sp);
390
391 /*
392 * Restore the original snapend, as a printer might have
393 * changed it.
394 */
395 ndo->ndo_snapend = sp + h->caplen;
396 if (ndo->ndo_Xflag) {
397 /*
398 * Print the raw packet data in hex and ASCII.
399 */
400 if (ndo->ndo_Xflag > 1) {
401 /*
402 * Include the link-layer header.
403 */
404 hex_and_ascii_print(ndo, "\n\t", sp, h->caplen);
405 } else {
406 /*
407 * Don't include the link-layer header - and if
408 * we have nothing past the link-layer header,
409 * print nothing.
410 */
411 if (h->caplen > hdrlen)
412 hex_and_ascii_print(ndo, "\n\t", sp + hdrlen,
413 h->caplen - hdrlen);
414 }
415 } else if (ndo->ndo_xflag) {
416 /*
417 * Print the raw packet data in hex.
418 */
419 if (ndo->ndo_xflag > 1) {
420 /*
421 * Include the link-layer header.
422 */
423 hex_print(ndo, "\n\t", sp, h->caplen);
424 } else {
425 /*
426 * Don't include the link-layer header - and if
427 * we have nothing past the link-layer header,
428 * print nothing.
429 */
430 if (h->caplen > hdrlen)
431 hex_print(ndo, "\n\t", sp + hdrlen,
432 h->caplen - hdrlen);
433 }
434 } else if (ndo->ndo_Aflag) {
435 /*
436 * Print the raw packet data in ASCII.
437 */
438 if (ndo->ndo_Aflag > 1) {
439 /*
440 * Include the link-layer header.
441 */
442 ascii_print(ndo, sp, h->caplen);
443 } else {
444 /*
445 * Don't include the link-layer header - and if
446 * we have nothing past the link-layer header,
447 * print nothing.
448 */
449 if (h->caplen > hdrlen)
450 ascii_print(ndo, sp + hdrlen, h->caplen - hdrlen);
451 }
452 }
453
454 ND_PRINT("\n");
455 nd_free_all(ndo);
456 }
457
458 /*
459 * By default, print the specified data out in hex and ASCII.
460 */
461 static void
462 ndo_default_print(netdissect_options *ndo, const u_char *bp, u_int length)
463 {
464 hex_and_ascii_print(ndo, "\n\t", bp, length); /* pass on lf and indentation string */
465 }
466
467 /* VARARGS */
468 static void
469 ndo_error(netdissect_options *ndo, status_exit_codes_t status,
470 const char *fmt, ...)
471 {
472 va_list ap;
473
474 if (ndo->program_name)
475 (void)fprintf(stderr, "%s: ", ndo->program_name);
476 va_start(ap, fmt);
477 (void)vfprintf(stderr, fmt, ap);
478 va_end(ap);
479 if (*fmt) {
480 fmt += strlen(fmt);
481 if (fmt[-1] != '\n')
482 (void)fputc('\n', stderr);
483 }
484 nd_cleanup();
485 exit(status);
486 /* NOTREACHED */
487 }
488
489 /* VARARGS */
490 static void
491 ndo_warning(netdissect_options *ndo, const char *fmt, ...)
492 {
493 va_list ap;
494
495 if (ndo->program_name)
496 (void)fprintf(stderr, "%s: ", ndo->program_name);
497 (void)fprintf(stderr, "WARNING: ");
498 va_start(ap, fmt);
499 (void)vfprintf(stderr, fmt, ap);
500 va_end(ap);
501 if (*fmt) {
502 fmt += strlen(fmt);
503 if (fmt[-1] != '\n')
504 (void)fputc('\n', stderr);
505 }
506 }
507
508 static int
509 ndo_printf(netdissect_options *ndo, const char *fmt, ...)
510 {
511 va_list args;
512 int ret;
513
514 va_start(args, fmt);
515 ret = vfprintf(stdout, fmt, args);
516 va_end(args);
517
518 if (ret < 0)
519 ndo_error(ndo, S_ERR_ND_WRITE_FILE,
520 "Unable to write output: %s", pcap_strerror(errno));
521 return (ret);
522 }
523
524 void
525 ndo_set_function_pointers(netdissect_options *ndo)
526 {
527 ndo->ndo_default_print=ndo_default_print;
528 ndo->ndo_printf=ndo_printf;
529 ndo->ndo_error=ndo_error;
530 ndo->ndo_warning=ndo_warning;
531 }
[mirror] the TCPdump network dissector