/* * This module implements decoding of OpenFlow protocol version 1.0 (wire * protocol 0x01). The decoder implements terse (default), detailed (-v) and * full (-vv) output formats and, as much as each format implies, detects and * tries to work around sizing anomalies inside the messages. The decoder marks * up bogus values of selected message fields and decodes partially captured * messages up to the snapshot end. It is based on the specification below: * * [OF10] https://web.archive.org/web/20160402132157/http://archive.openflow.org/documents/openflow-spec-v1.0.0.pdf * * Most functions in this file take 3 arguments into account: * * cp -- the pointer to the first octet to decode * * len -- the length of the current structure as declared on the wire * * ep -- the pointer to the end of the captured frame * They return either the pointer to the next not-yet-decoded part of the frame * or the value of ep, which means the current frame processing is over as it * has been fully decoded or is invalid or truncated. This way it is possible * to chain and nest such functions uniformly to decode an OF1.0 message, which * consists of several layers of nested structures. * * Decoding of Ethernet frames nested in OFPT_PACKET_IN and OFPT_PACKET_OUT * messages is done only when the verbosity level set by command-line argument * is "-vvv" or higher. In that case the verbosity level is temporarily * decremented by 3 during the nested frame decoding. For example, running * tcpdump with "-vvvv" will do full decoding of OpenFlow and "-v" decoding of * the nested frames. * * Partial decoding of Big Switch Networks vendor extensions is done after the * oftest (OpenFlow Testing Framework) and Loxigen (library generator) source * code. * * * Copyright (c) 2013 The TCPDUMP project * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE * POSSIBILITY OF SUCH DAMAGE. */ /* \summary: OpenFlow protocol version 1.0 printer */ #ifdef HAVE_CONFIG_H #include #endif #include "netdissect-stdinc.h" #include "netdissect.h" #include "extract.h" #include "addrtoname.h" #include "ethertype.h" #include "ipproto.h" #include "oui.h" #include "openflow.h" #define OFPT_HELLO 0x00 #define OFPT_ERROR 0x01 #define OFPT_ECHO_REQUEST 0x02 #define OFPT_ECHO_REPLY 0x03 #define OFPT_VENDOR 0x04 #define OFPT_FEATURES_REQUEST 0x05 #define OFPT_FEATURES_REPLY 0x06 #define OFPT_GET_CONFIG_REQUEST 0x07 #define OFPT_GET_CONFIG_REPLY 0x08 #define OFPT_SET_CONFIG 0x09 #define OFPT_PACKET_IN 0x0a #define OFPT_FLOW_REMOVED 0x0b #define OFPT_PORT_STATUS 0x0c #define OFPT_PACKET_OUT 0x0d #define OFPT_FLOW_MOD 0x0e #define OFPT_PORT_MOD 0x0f #define OFPT_STATS_REQUEST 0x10 #define OFPT_STATS_REPLY 0x11 #define OFPT_BARRIER_REQUEST 0x12 #define OFPT_BARRIER_REPLY 0x13 #define OFPT_QUEUE_GET_CONFIG_REQUEST 0x14 #define OFPT_QUEUE_GET_CONFIG_REPLY 0x15 static const struct tok ofpt_str[] = { { OFPT_HELLO, "HELLO" }, { OFPT_ERROR, "ERROR" }, { OFPT_ECHO_REQUEST, "ECHO_REQUEST" }, { OFPT_ECHO_REPLY, "ECHO_REPLY" }, { OFPT_VENDOR, "VENDOR" }, { OFPT_FEATURES_REQUEST, "FEATURES_REQUEST" }, { OFPT_FEATURES_REPLY, "FEATURES_REPLY" }, { OFPT_GET_CONFIG_REQUEST, "GET_CONFIG_REQUEST" }, { OFPT_GET_CONFIG_REPLY, "GET_CONFIG_REPLY" }, { OFPT_SET_CONFIG, "SET_CONFIG" }, { OFPT_PACKET_IN, "PACKET_IN" }, { OFPT_FLOW_REMOVED, "FLOW_REMOVED" }, { OFPT_PORT_STATUS, "PORT_STATUS" }, { OFPT_PACKET_OUT, "PACKET_OUT" }, { OFPT_FLOW_MOD, "FLOW_MOD" }, { OFPT_PORT_MOD, "PORT_MOD" }, { OFPT_STATS_REQUEST, "STATS_REQUEST" }, { OFPT_STATS_REPLY, "STATS_REPLY" }, { OFPT_BARRIER_REQUEST, "BARRIER_REQUEST" }, { OFPT_BARRIER_REPLY, "BARRIER_REPLY" }, { OFPT_QUEUE_GET_CONFIG_REQUEST, "QUEUE_GET_CONFIG_REQUEST" }, { OFPT_QUEUE_GET_CONFIG_REPLY, "QUEUE_GET_CONFIG_REPLY" }, { 0, NULL } }; #define OFPPC_PORT_DOWN (1U <<0) #define OFPPC_NO_STP (1U <<1) #define OFPPC_NO_RECV (1U <<2) #define OFPPC_NO_RECV_STP (1U <<3) #define OFPPC_NO_FLOOD (1U <<4) #define OFPPC_NO_FWD (1U <<5) #define OFPPC_NO_PACKET_IN (1U <<6) static const struct tok ofppc_bm[] = { { OFPPC_PORT_DOWN, "PORT_DOWN" }, { OFPPC_NO_STP, "NO_STP" }, { OFPPC_NO_RECV, "NO_RECV" }, { OFPPC_NO_RECV_STP, "NO_RECV_STP" }, { OFPPC_NO_FLOOD, "NO_FLOOD" }, { OFPPC_NO_FWD, "NO_FWD" }, { OFPPC_NO_PACKET_IN, "NO_PACKET_IN" }, { 0, NULL } }; #define OFPPC_U (~(OFPPC_PORT_DOWN | OFPPC_NO_STP | OFPPC_NO_RECV | \ OFPPC_NO_RECV_STP | OFPPC_NO_FLOOD | OFPPC_NO_FWD | \ OFPPC_NO_PACKET_IN)) #define OFPPS_LINK_DOWN (1U << 0) #define OFPPS_STP_LISTEN (0U << 8) #define OFPPS_STP_LEARN (1U << 8) #define OFPPS_STP_FORWARD (2U << 8) #define OFPPS_STP_BLOCK (3U << 8) #define OFPPS_STP_MASK (3U << 8) static const struct tok ofpps_bm[] = { { OFPPS_LINK_DOWN, "LINK_DOWN" }, { OFPPS_STP_LISTEN, "STP_LISTEN" }, { OFPPS_STP_LEARN, "STP_LEARN" }, { OFPPS_STP_FORWARD, "STP_FORWARD" }, { OFPPS_STP_BLOCK, "STP_BLOCK" }, { 0, NULL } }; #define OFPPS_U (~(OFPPS_LINK_DOWN | OFPPS_STP_LISTEN | OFPPS_STP_LEARN | \ OFPPS_STP_FORWARD | OFPPS_STP_BLOCK)) #define OFPP_MAX 0xff00U #define OFPP_IN_PORT 0xfff8U #define OFPP_TABLE 0xfff9U #define OFPP_NORMAL 0xfffaU #define OFPP_FLOOD 0xfffbU #define OFPP_ALL 0xfffcU #define OFPP_CONTROLLER 0xfffdU #define OFPP_LOCAL 0xfffeU #define OFPP_NONE 0xffffU static const struct tok ofpp_str[] = { { OFPP_MAX, "MAX" }, { OFPP_IN_PORT, "IN_PORT" }, { OFPP_TABLE, "TABLE" }, { OFPP_NORMAL, "NORMAL" }, { OFPP_FLOOD, "FLOOD" }, { OFPP_ALL, "ALL" }, { OFPP_CONTROLLER, "CONTROLLER" }, { OFPP_LOCAL, "LOCAL" }, { OFPP_NONE, "NONE" }, { 0, NULL } }; #define OFPPF_10MB_HD (1U << 0) #define OFPPF_10MB_FD (1U << 1) #define OFPPF_100MB_HD (1U << 2) #define OFPPF_100MB_FD (1U << 3) #define OFPPF_1GB_HD (1U << 4) #define OFPPF_1GB_FD (1U << 5) #define OFPPF_10GB_FD (1U << 6) #define OFPPF_COPPER (1U << 7) #define OFPPF_FIBER (1U << 8) #define OFPPF_AUTONEG (1U << 9) #define OFPPF_PAUSE (1U <<10) #define OFPPF_PAUSE_ASYM (1U <<11) static const struct tok ofppf_bm[] = { { OFPPF_10MB_HD, "10MB_HD" }, { OFPPF_10MB_FD, "10MB_FD" }, { OFPPF_100MB_HD, "100MB_HD" }, { OFPPF_100MB_FD, "100MB_FD" }, { OFPPF_1GB_HD, "1GB_HD" }, { OFPPF_1GB_FD, "1GB_FD" }, { OFPPF_10GB_FD, "10GB_FD" }, { OFPPF_COPPER, "COPPER" }, { OFPPF_FIBER, "FIBER" }, { OFPPF_AUTONEG, "AUTONEG" }, { OFPPF_PAUSE, "PAUSE" }, { OFPPF_PAUSE_ASYM, "PAUSE_ASYM" }, { 0, NULL } }; #define OFPPF_U (~(OFPPF_10MB_HD | OFPPF_10MB_FD | OFPPF_100MB_HD | \ OFPPF_100MB_FD | OFPPF_1GB_HD | OFPPF_1GB_FD | \ OFPPF_10GB_FD | OFPPF_COPPER | OFPPF_FIBER | \ OFPPF_AUTONEG | OFPPF_PAUSE | OFPPF_PAUSE_ASYM)) #define OFPQT_NONE 0x0000 #define OFPQT_MIN_RATE 0x0001 static const struct tok ofpqt_str[] = { { OFPQT_NONE, "NONE" }, { OFPQT_MIN_RATE, "MIN_RATE" }, { 0, NULL } }; #define OFPFW_IN_PORT (1U <<0) #define OFPFW_DL_VLAN (1U <<1) #define OFPFW_DL_SRC (1U <<2) #define OFPFW_DL_DST (1U <<3) #define OFPFW_DL_TYPE (1U <<4) #define OFPFW_NW_PROTO (1U <<5) #define OFPFW_TP_SRC (1U <<6) #define OFPFW_TP_DST (1U <<7) #define OFPFW_NW_SRC_SHIFT 8 #define OFPFW_NW_SRC_BITS 6 #define OFPFW_NW_SRC_MASK (((1U < 0 && vid < 0x0fff) ? "" : " (bogus)"); return buf; } static const char * pcp_str(const uint8_t pcp) { static char buf[sizeof("255 (bogus)")]; snprintf(buf, sizeof(buf), "%u%s", pcp, pcp <= 7 ? "" : " (bogus)"); return buf; } static void of10_bitmap_print(netdissect_options *ndo, const struct tok *t, const uint32_t v, const uint32_t u) { const char *sep = " ("; if (v == 0) return; /* assigned bits */ for (; t->s != NULL; t++) if (v & t->v) { ND_PRINT("%s%s", sep, t->s); sep = ", "; } /* unassigned bits? */ ND_PRINT(v & u ? ") (bogus)" : ")"); } static const u_char * of10_data_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { if (len == 0) return cp; /* data */ ND_PRINT("\n\t data (%u octets)", len); ND_TCHECK_LEN(cp, len); if (ndo->ndo_vflag >= 2) hex_and_ascii_print(ndo, "\n\t ", cp, len); return cp + len; trunc: nd_print_trunc(ndo); return ep; } static const u_char * of10_bsn_message_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { const u_char *cp0 = cp; uint32_t subtype; if (len < 4) goto invalid; /* subtype */ subtype = GET_BE_U_4(cp); cp += 4; ND_PRINT("\n\t subtype %s", tok2str(bsn_subtype_str, "unknown (0x%08x)", subtype)); switch (subtype) { case BSN_GET_IP_MASK_REQUEST: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | index | pad | * +---------------+---------------+---------------+---------------+ * | pad | * +---------------+---------------+---------------+---------------+ * */ if (len != 12) goto invalid; /* index */ ND_PRINT(", index %u", GET_U_1(cp)); cp += 1; /* pad */ ND_TCHECK_7(cp); cp += 7; break; case BSN_SET_IP_MASK: case BSN_GET_IP_MASK_REPLY: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | index | pad | * +---------------+---------------+---------------+---------------+ * | mask | * +---------------+---------------+---------------+---------------+ * */ if (len != 12) goto invalid; /* index */ ND_PRINT(", index %u", GET_U_1(cp)); cp += 1; /* pad */ cp += 3; /* mask */ ND_PRINT(", mask %s", GET_IPADDR_STRING(cp)); cp += 4; break; case BSN_SET_MIRRORING: case BSN_GET_MIRRORING_REQUEST: case BSN_GET_MIRRORING_REPLY: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | report m. p. | pad | * +---------------+---------------+---------------+---------------+ * */ if (len != 8) goto invalid; /* report_mirror_ports */ ND_PRINT(", report_mirror_ports %s", tok2str(bsn_onoff_str, "bogus (%u)", GET_U_1(cp))); cp += 1; /* pad */ ND_TCHECK_3(cp); cp += 3; break; case BSN_GET_INTERFACES_REQUEST: case BSN_GET_L2_TABLE_REQUEST: case BSN_BW_ENABLE_GET_REQUEST: case BSN_BW_CLEAR_DATA_REQUEST: case BSN_HYBRID_GET_REQUEST: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * */ if (len != 4) goto invalid; break; case BSN_VIRTUAL_PORT_REMOVE_REQUEST: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | vport_no | * +---------------+---------------+---------------+---------------+ * */ if (len != 8) goto invalid; /* vport_no */ ND_PRINT(", vport_no %u", GET_BE_U_4(cp)); cp += 4; break; case BSN_SHELL_COMMAND: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | service | * +---------------+---------------+---------------+---------------+ * | data ... * +---------------+---------------+-------- * */ if (len < 8) goto invalid; /* service */ ND_PRINT(", service %u", GET_BE_U_4(cp)); cp += 4; /* data */ ND_PRINT(", data '"); if (nd_printn(ndo, cp, len - 8, ep)) { ND_PRINT("'"); goto trunc; } ND_PRINT("'"); cp += len - 8; break; case BSN_SHELL_OUTPUT: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | data ... * +---------------+---------------+-------- * */ /* already checked that len >= 4 */ /* data */ ND_PRINT(", data '"); if (nd_printn(ndo, cp, len - 4, ep)) { ND_PRINT("'"); goto trunc; } ND_PRINT("'"); cp += len - 4; break; case BSN_SHELL_STATUS: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | status | * +---------------+---------------+---------------+---------------+ * */ if (len != 8) goto invalid; /* status */ ND_PRINT(", status 0x%08x", GET_BE_U_4(cp)); cp += 4; break; default: ND_TCHECK_LEN(cp, len - 4); cp += len - 4; } return cp; invalid: /* skip the undersized data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len); return cp0 + len; trunc: nd_print_trunc(ndo); return ep; } static const u_char * of10_bsn_actions_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { const u_char *cp0 = cp; uint32_t subtype, vlan_tag; if (len < 4) goto invalid; /* subtype */ subtype = GET_BE_U_4(cp); cp += 4; ND_PRINT("\n\t subtype %s", tok2str(bsn_action_subtype_str, "unknown (0x%08x)", subtype)); switch (subtype) { case BSN_ACTION_MIRROR: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | dest_port | * +---------------+---------------+---------------+---------------+ * | vlan_tag | * +---------------+---------------+---------------+---------------+ * | copy_stage | pad | * +---------------+---------------+---------------+---------------+ * */ if (len != 16) goto invalid; /* dest_port */ ND_PRINT(", dest_port %u", GET_BE_U_4(cp)); cp += 4; /* vlan_tag */ vlan_tag = GET_BE_U_4(cp); cp += 4; switch (vlan_tag >> 16) { case 0: ND_PRINT(", vlan_tag none"); break; case ETHERTYPE_8021Q: ND_PRINT(", vlan_tag 802.1Q (%s)", ieee8021q_tci_string(vlan_tag & 0xffff)); break; default: ND_PRINT(", vlan_tag unknown (0x%04x)", vlan_tag >> 16); } /* copy_stage */ ND_PRINT(", copy_stage %s", tok2str(bsn_mirror_copy_stage_str, "unknown (%u)", GET_U_1(cp))); cp += 1; /* pad */ ND_TCHECK_3(cp); cp += 3; break; default: ND_TCHECK_LEN(cp, len - 4); cp += len - 4; } return cp; invalid: nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len); return cp0 + len; trunc: nd_print_trunc(ndo); return ep; } static const u_char * of10_vendor_action_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { uint32_t vendor; const u_char *(*decoder)(netdissect_options *, const u_char *, const u_char *, const u_int); if (len < 4) goto invalid; /* vendor */ vendor = GET_BE_U_4(cp); cp += 4; ND_PRINT(", vendor 0x%08x (%s)", vendor, of_vendor_name(vendor)); /* data */ decoder = vendor == OUI_BSN ? of10_bsn_actions_print : of10_data_print; return decoder(ndo, cp, ep, len - 4); invalid: /* skip the undersized data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); return cp + len; trunc: nd_print_trunc(ndo); return ep; } static const u_char * of10_vendor_message_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { uint32_t vendor; const u_char *(*decoder)(netdissect_options *, const u_char *, const u_char *, u_int); if (len < 4) goto invalid; /* vendor */ vendor = GET_BE_U_4(cp); cp += 4; ND_PRINT(", vendor 0x%08x (%s)", vendor, of_vendor_name(vendor)); /* data */ decoder = vendor == OUI_BSN ? of10_bsn_message_print : of10_data_print; return decoder(ndo, cp, ep, len - 4); invalid: /* skip the undersized data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); return cp + len; trunc: nd_print_trunc(ndo); return ep; } /* Vendor ID is mandatory, data is optional. */ static const u_char * of10_vendor_data_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { uint32_t vendor; if (len < 4) goto invalid; /* vendor */ vendor = GET_BE_U_4(cp); cp += 4; ND_PRINT(", vendor 0x%08x (%s)", vendor, of_vendor_name(vendor)); /* data */ return of10_data_print(ndo, cp, ep, len - 4); invalid: /* skip the undersized data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); return cp + len; trunc: nd_print_trunc(ndo); return ep; } static const u_char * of10_packet_data_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { if (len == 0) return cp; /* data */ ND_PRINT("\n\t data (%u octets)", len); if (ndo->ndo_vflag < 3) return cp + len; ND_TCHECK_LEN(cp, len); ndo->ndo_vflag -= 3; ND_PRINT(", frame decoding below\n"); ether_print(ndo, cp, len, ND_BYTES_AVAILABLE_AFTER(cp), NULL, NULL); ndo->ndo_vflag += 3; return cp + len; trunc: nd_print_trunc(ndo); return ep; } /* [OF10] Section 5.2.1 */ static const u_char * of10_phy_ports_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, u_int len) { const u_char *cp0 = cp; const u_int len0 = len; while (len) { if (len < OF_PHY_PORT_LEN) goto invalid; /* port_no */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* hw_addr */ ND_PRINT(", hw_addr %s", GET_ETHERADDR_STRING(cp)); cp += MAC_ADDR_LEN; /* name */ ND_PRINT(", name '"); (void)nd_print(ndo, cp, cp + OFP_MAX_PORT_NAME_LEN); ND_PRINT("'"); cp += OFP_MAX_PORT_NAME_LEN; if (ndo->ndo_vflag < 2) { ND_TCHECK_LEN(cp, 24); cp += 24; goto next_port; } /* config */ ND_PRINT("\n\t config 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofppc_bm, GET_BE_U_4(cp), OFPPC_U); cp += 4; /* state */ ND_PRINT("\n\t state 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofpps_bm, GET_BE_U_4(cp), OFPPS_U); cp += 4; /* curr */ ND_PRINT("\n\t curr 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofppf_bm, GET_BE_U_4(cp), OFPPF_U); cp += 4; /* advertised */ ND_PRINT("\n\t advertised 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofppf_bm, GET_BE_U_4(cp), OFPPF_U); cp += 4; /* supported */ ND_PRINT("\n\t supported 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofppf_bm, GET_BE_U_4(cp), OFPPF_U); cp += 4; /* peer */ ND_PRINT("\n\t peer 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofppf_bm, GET_BE_U_4(cp), OFPPF_U); cp += 4; next_port: len -= OF_PHY_PORT_LEN; } /* while */ return cp; invalid: /* skip the undersized trailing data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len0); return cp0 + len0; trunc: nd_print_trunc(ndo); return ep; } /* [OF10] Section 5.2.2 */ static const u_char * of10_queue_props_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, u_int len) { const u_char *cp0 = cp; const u_int len0 = len; uint16_t property, plen, rate; while (len) { u_char plen_bogus = 0, skip = 0; if (len < OF_QUEUE_PROP_HEADER_LEN) goto invalid; /* property */ property = GET_BE_U_2(cp); cp += 2; ND_PRINT("\n\t property %s", tok2str(ofpqt_str, "invalid (0x%04x)", property)); /* len */ plen = GET_BE_U_2(cp); cp += 2; ND_PRINT(", len %u", plen); if (plen < OF_QUEUE_PROP_HEADER_LEN || plen > len) goto invalid; /* pad */ ND_TCHECK_4(cp); cp += 4; /* property-specific constraints and decoding */ switch (property) { case OFPQT_NONE: plen_bogus = plen != OF_QUEUE_PROP_HEADER_LEN; break; case OFPQT_MIN_RATE: plen_bogus = plen != OF_QUEUE_PROP_MIN_RATE_LEN; break; default: skip = 1; } if (plen_bogus) { ND_PRINT(" (bogus)"); skip = 1; } if (skip) { ND_TCHECK_LEN(cp, plen - 4); cp += plen - 4; goto next_property; } if (property == OFPQT_MIN_RATE) { /* the only case of property decoding */ /* rate */ rate = GET_BE_U_2(cp); cp += 2; if (rate > 1000) ND_PRINT(", rate disabled"); else ND_PRINT(", rate %u.%u%%", rate / 10, rate % 10); /* pad */ ND_TCHECK_6(cp); cp += 6; } next_property: len -= plen; } /* while */ return cp; invalid: /* skip the rest of queue properties */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len0); return cp0 + len0; trunc: nd_print_trunc(ndo); return ep; } /* ibid */ static const u_char * of10_queues_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, u_int len) { const u_char *cp0 = cp; const u_int len0 = len; uint16_t desclen; while (len) { if (len < OF_PACKET_QUEUE_LEN) goto invalid; /* queue_id */ ND_PRINT("\n\t queue_id %u", GET_BE_U_4(cp)); cp += 4; /* len */ desclen = GET_BE_U_2(cp); cp += 2; ND_PRINT(", len %u", desclen); if (desclen < OF_PACKET_QUEUE_LEN || desclen > len) goto invalid; /* pad */ ND_TCHECK_2(cp); cp += 2; /* properties */ if (ndo->ndo_vflag < 2) { ND_TCHECK_LEN(cp, desclen - OF_PACKET_QUEUE_LEN); cp += desclen - OF_PACKET_QUEUE_LEN; goto next_queue; } if (ep == (cp = of10_queue_props_print(ndo, cp, ep, desclen - OF_PACKET_QUEUE_LEN))) return ep; /* end of snapshot */ next_queue: len -= desclen; } /* while */ return cp; invalid: /* skip the rest of queues */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len0); return cp0 + len0; trunc: nd_print_trunc(ndo); return ep; } /* [OF10] Section 5.2.3 */ static const u_char * of10_match_print(netdissect_options *ndo, const char *pfx, const u_char *cp, const u_char *ep) { uint32_t wildcards; uint16_t dl_type; uint8_t nw_proto; u_int nw_bits; const char *field_name; /* wildcards */ wildcards = GET_BE_U_4(cp); if (wildcards & OFPFW_U) ND_PRINT("%swildcards 0x%08x (bogus)", pfx, wildcards); cp += 4; /* in_port */ if (! (wildcards & OFPFW_IN_PORT)) ND_PRINT("%smatch in_port %s", pfx, tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* dl_src */ if (! (wildcards & OFPFW_DL_SRC)) ND_PRINT("%smatch dl_src %s", pfx, GET_ETHERADDR_STRING(cp)); cp += MAC_ADDR_LEN; /* dl_dst */ if (! (wildcards & OFPFW_DL_DST)) ND_PRINT("%smatch dl_dst %s", pfx, GET_ETHERADDR_STRING(cp)); cp += MAC_ADDR_LEN; /* dl_vlan */ if (! (wildcards & OFPFW_DL_VLAN)) ND_PRINT("%smatch dl_vlan %s", pfx, vlan_str(GET_BE_U_2(cp))); cp += 2; /* dl_vlan_pcp */ if (! (wildcards & OFPFW_DL_VLAN_PCP)) ND_PRINT("%smatch dl_vlan_pcp %s", pfx, pcp_str(GET_U_1(cp))); cp += 1; /* pad1 */ cp += 1; /* dl_type */ dl_type = GET_BE_U_2(cp); cp += 2; if (! (wildcards & OFPFW_DL_TYPE)) ND_PRINT("%smatch dl_type 0x%04x", pfx, dl_type); /* nw_tos */ if (! (wildcards & OFPFW_NW_TOS)) ND_PRINT("%smatch nw_tos 0x%02x", pfx, GET_U_1(cp)); cp += 1; /* nw_proto */ nw_proto = GET_U_1(cp); cp += 1; if (! (wildcards & OFPFW_NW_PROTO)) { field_name = ! (wildcards & OFPFW_DL_TYPE) && dl_type == ETHERTYPE_ARP ? "arp_opcode" : "nw_proto"; ND_PRINT("%smatch %s %u", pfx, field_name, nw_proto); } /* pad2 */ ND_TCHECK_2(cp); cp += 2; /* nw_src */ nw_bits = (wildcards & OFPFW_NW_SRC_MASK) >> OFPFW_NW_SRC_SHIFT; if (nw_bits < 32) ND_PRINT("%smatch nw_src %s/%u", pfx, GET_IPADDR_STRING(cp), 32 - nw_bits); cp += 4; /* nw_dst */ nw_bits = (wildcards & OFPFW_NW_DST_MASK) >> OFPFW_NW_DST_SHIFT; if (nw_bits < 32) ND_PRINT("%smatch nw_dst %s/%u", pfx, GET_IPADDR_STRING(cp), 32 - nw_bits); cp += 4; /* tp_src */ ND_TCHECK_2(cp); if (! (wildcards & OFPFW_TP_SRC)) { field_name = ! (wildcards & OFPFW_DL_TYPE) && dl_type == ETHERTYPE_IP && ! (wildcards & OFPFW_NW_PROTO) && nw_proto == IPPROTO_ICMP ? "icmp_type" : "tp_src"; ND_PRINT("%smatch %s %u", pfx, field_name, GET_BE_U_2(cp)); } cp += 2; /* tp_dst */ ND_TCHECK_2(cp); if (! (wildcards & OFPFW_TP_DST)) { field_name = ! (wildcards & OFPFW_DL_TYPE) && dl_type == ETHERTYPE_IP && ! (wildcards & OFPFW_NW_PROTO) && nw_proto == IPPROTO_ICMP ? "icmp_code" : "tp_dst"; ND_PRINT("%smatch %s %u", pfx, field_name, GET_BE_U_2(cp)); } return cp + 2; trunc: nd_print_trunc(ndo); return ep; } /* [OF10] Section 5.2.4 */ static const u_char * of10_actions_print(netdissect_options *ndo, const char *pfx, const u_char *cp, const u_char *ep, u_int len) { const u_char *cp0 = cp; const u_int len0 = len; uint16_t type, alen, output_port; while (len) { u_char alen_bogus = 0, skip = 0; if (len < OF_ACTION_HEADER_LEN) goto invalid; /* type */ type = GET_BE_U_2(cp); cp += 2; ND_PRINT("%saction type %s", pfx, tok2str(ofpat_str, "invalid (0x%04x)", type)); /* length */ alen = GET_BE_U_2(cp); cp += 2; ND_PRINT(", len %u", alen); /* On action size underrun/overrun skip the rest of the action list. */ if (alen < OF_ACTION_HEADER_LEN || alen > len) goto invalid; /* On action size inappropriate for the given type or invalid type just skip * the current action, as the basic length constraint has been met. */ switch (type) { case OFPAT_OUTPUT: case OFPAT_SET_VLAN_VID: case OFPAT_SET_VLAN_PCP: case OFPAT_STRIP_VLAN: case OFPAT_SET_NW_SRC: case OFPAT_SET_NW_DST: case OFPAT_SET_NW_TOS: case OFPAT_SET_TP_SRC: case OFPAT_SET_TP_DST: alen_bogus = alen != 8; break; case OFPAT_SET_DL_SRC: case OFPAT_SET_DL_DST: case OFPAT_ENQUEUE: alen_bogus = alen != 16; break; case OFPAT_VENDOR: alen_bogus = alen % 8 != 0; /* already >= 8 so far */ break; default: skip = 1; } if (alen_bogus) { ND_PRINT(" (bogus)"); skip = 1; } if (skip) { ND_TCHECK_LEN(cp, alen - 4); cp += alen - 4; goto next_action; } /* OK to decode the rest of the action structure */ switch (type) { case OFPAT_OUTPUT: /* port */ output_port = GET_BE_U_2(cp); cp += 2; ND_PRINT(", port %s", tok2str(ofpp_str, "%u", output_port)); /* max_len */ if (output_port == OFPP_CONTROLLER) ND_PRINT(", max_len %u", GET_BE_U_2(cp)); cp += 2; break; case OFPAT_SET_VLAN_VID: /* vlan_vid */ ND_PRINT(", vlan_vid %s", vlan_str(GET_BE_U_2(cp))); cp += 2; /* pad */ ND_TCHECK_2(cp); cp += 2; break; case OFPAT_SET_VLAN_PCP: /* vlan_pcp */ ND_PRINT(", vlan_pcp %s", pcp_str(GET_U_1(cp))); cp += 1; /* pad */ ND_TCHECK_3(cp); cp += 3; break; case OFPAT_SET_DL_SRC: case OFPAT_SET_DL_DST: /* dl_addr */ ND_PRINT(", dl_addr %s", GET_ETHERADDR_STRING(cp)); cp += MAC_ADDR_LEN; /* pad */ ND_TCHECK_6(cp); cp += 6; break; case OFPAT_SET_NW_SRC: case OFPAT_SET_NW_DST: /* nw_addr */ ND_PRINT(", nw_addr %s", GET_IPADDR_STRING(cp)); cp += 4; break; case OFPAT_SET_NW_TOS: /* nw_tos */ ND_PRINT(", nw_tos 0x%02x", GET_U_1(cp)); cp += 1; /* pad */ ND_TCHECK_3(cp); cp += 3; break; case OFPAT_SET_TP_SRC: case OFPAT_SET_TP_DST: /* nw_tos */ ND_PRINT(", tp_port %u", GET_BE_U_2(cp)); cp += 2; /* pad */ ND_TCHECK_2(cp); cp += 2; break; case OFPAT_ENQUEUE: /* port */ ND_PRINT(", port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* pad */ ND_TCHECK_6(cp); cp += 6; /* queue_id */ ND_PRINT(", queue_id %s", tok2str(ofpq_str, "%u", GET_BE_U_4(cp))); cp += 4; break; case OFPAT_VENDOR: if (ep == (cp = of10_vendor_action_print(ndo, cp, ep, alen - 4))) return ep; /* end of snapshot */ break; case OFPAT_STRIP_VLAN: /* pad */ ND_TCHECK_4(cp); cp += 4; break; } /* switch */ next_action: len -= alen; } /* while */ return cp; invalid: /* skip the rest of actions */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len0); return cp0 + len0; trunc: nd_print_trunc(ndo); return ep; } /* [OF10] Section 5.3.1 */ static const u_char * of10_features_reply_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { /* datapath_id */ ND_PRINT("\n\t dpid 0x%016" PRIx64, GET_BE_U_8(cp)); cp += 8; /* n_buffers */ ND_PRINT(", n_buffers %u", GET_BE_U_4(cp)); cp += 4; /* n_tables */ ND_PRINT(", n_tables %u", GET_U_1(cp)); cp += 1; /* pad */ cp += 3; /* capabilities */ ND_PRINT("\n\t capabilities 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofp_capabilities_bm, GET_BE_U_4(cp), OFPCAP_U); cp += 4; /* actions */ ND_PRINT("\n\t actions 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofpat_bm, GET_BE_U_4(cp), OFPAT_U); cp += 4; /* ports */ return of10_phy_ports_print(ndo, cp, ep, len - OF_SWITCH_FEATURES_LEN); } /* [OF10] Section 5.3.3 */ static const u_char * of10_flow_mod_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { uint16_t command; /* match */ if (ep == (cp = of10_match_print(ndo, "\n\t ", cp, ep))) return ep; /* end of snapshot */ /* cookie */ ND_PRINT("\n\t cookie 0x%016" PRIx64, GET_BE_U_8(cp)); cp += 8; /* command */ command = GET_BE_U_2(cp); ND_PRINT(", command %s", tok2str(ofpfc_str, "invalid (0x%04x)", command)); cp += 2; /* idle_timeout */ if (GET_BE_U_2(cp)) ND_PRINT(", idle_timeout %u", GET_BE_U_2(cp)); cp += 2; /* hard_timeout */ if (GET_BE_U_2(cp)) ND_PRINT(", hard_timeout %u", GET_BE_U_2(cp)); cp += 2; /* priority */ if (GET_BE_U_2(cp)) ND_PRINT(", priority %u", GET_BE_U_2(cp)); cp += 2; /* buffer_id */ if (command == OFPFC_ADD || command == OFPFC_MODIFY || command == OFPFC_MODIFY_STRICT) ND_PRINT(", buffer_id %s", tok2str(bufferid_str, "0x%08x", GET_BE_U_4(cp))); cp += 4; /* out_port */ if (command == OFPFC_DELETE || command == OFPFC_DELETE_STRICT) ND_PRINT(", out_port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* flags */ ND_PRINT(", flags 0x%04x", GET_BE_U_2(cp)); of10_bitmap_print(ndo, ofpff_bm, GET_BE_U_2(cp), OFPFF_U); cp += 2; /* actions */ return of10_actions_print(ndo, "\n\t ", cp, ep, len - OF_FLOW_MOD_LEN); } /* ibid */ static const u_char * of10_port_mod_print(netdissect_options *ndo, const u_char *cp, const u_char *ep) { /* port_no */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* hw_addr */ ND_PRINT(", hw_addr %s", GET_ETHERADDR_STRING(cp)); cp += MAC_ADDR_LEN; /* config */ ND_PRINT("\n\t config 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofppc_bm, GET_BE_U_4(cp), OFPPC_U); cp += 4; /* mask */ ND_PRINT("\n\t mask 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofppc_bm, GET_BE_U_4(cp), OFPPC_U); cp += 4; /* advertise */ ND_PRINT("\n\t advertise 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofppf_bm, GET_BE_U_4(cp), OFPPF_U); cp += 4; /* pad */ ND_TCHECK_4(cp); return cp + 4; trunc: nd_print_trunc(ndo); return ep; } /* [OF10] Section 5.3.5 */ static const u_char * of10_stats_request_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, u_int len) { const u_char *cp0 = cp; const u_int len0 = len; uint16_t type; /* type */ type = GET_BE_U_2(cp); cp += 2; ND_PRINT("\n\t type %s", tok2str(ofpst_str, "invalid (0x%04x)", type)); /* flags */ ND_PRINT(", flags 0x%04x", GET_BE_U_2(cp)); if (GET_BE_U_2(cp)) ND_PRINT(" (bogus)"); cp += 2; /* type-specific body of one of fixed lengths */ len -= OF_STATS_REQUEST_LEN; switch(type) { case OFPST_DESC: case OFPST_TABLE: if (len) goto invalid; return cp; case OFPST_FLOW: case OFPST_AGGREGATE: if (len != OF_FLOW_STATS_REQUEST_LEN) goto invalid; /* match */ if (ep == (cp = of10_match_print(ndo, "\n\t ", cp, ep))) return ep; /* end of snapshot */ /* table_id */ ND_PRINT("\n\t table_id %s", tok2str(tableid_str, "%u", GET_U_1(cp))); cp += 1; /* pad */ cp += 1; /* out_port */ ND_PRINT(", out_port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); return cp + 2; case OFPST_PORT: if (len != OF_PORT_STATS_REQUEST_LEN) goto invalid; /* port_no */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* pad */ ND_TCHECK_6(cp); return cp + 6; case OFPST_QUEUE: if (len != OF_QUEUE_STATS_REQUEST_LEN) goto invalid; /* port_no */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* pad */ ND_TCHECK_2(cp); cp += 2; /* queue_id */ ND_PRINT(", queue_id %s", tok2str(ofpq_str, "%u", GET_BE_U_4(cp))); return cp + 4; case OFPST_VENDOR: return of10_vendor_data_print(ndo, cp, ep, len); } return cp; invalid: /* skip the message body */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len0); return cp0 + len0; trunc: nd_print_trunc(ndo); return ep; } /* ibid */ static const u_char * of10_desc_stats_reply_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { if (len != OF_DESC_STATS_LEN) goto invalid; /* mfr_desc */ ND_PRINT("\n\t mfr_desc '"); (void)nd_print(ndo, cp, cp + DESC_STR_LEN); ND_PRINT("'"); cp += DESC_STR_LEN; /* hw_desc */ ND_PRINT("\n\t hw_desc '"); (void)nd_print(ndo, cp, cp + DESC_STR_LEN); ND_PRINT("'"); cp += DESC_STR_LEN; /* sw_desc */ ND_PRINT("\n\t sw_desc '"); (void)nd_print(ndo, cp, cp + DESC_STR_LEN); ND_PRINT("'"); cp += DESC_STR_LEN; /* serial_num */ ND_PRINT("\n\t serial_num '"); (void)nd_print(ndo, cp, cp + SERIAL_NUM_LEN); ND_PRINT("'"); cp += SERIAL_NUM_LEN; /* dp_desc */ ND_PRINT("\n\t dp_desc '"); (void)nd_print(ndo, cp, cp + DESC_STR_LEN); ND_PRINT("'"); return cp + DESC_STR_LEN; invalid: /* skip the message body */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); return cp + len; trunc: nd_print_trunc(ndo); return ep; } /* ibid */ static const u_char * of10_flow_stats_reply_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, u_int len) { const u_char *cp0 = cp; const u_int len0 = len; uint16_t entry_len; while (len) { if (len < OF_FLOW_STATS_LEN) goto invalid; /* length */ entry_len = GET_BE_U_2(cp); ND_PRINT("\n\t length %u", entry_len); if (entry_len < OF_FLOW_STATS_LEN || entry_len > len) goto invalid; cp += 2; /* table_id */ ND_PRINT(", table_id %s", tok2str(tableid_str, "%u", GET_U_1(cp))); cp += 1; /* pad */ ND_TCHECK_1(cp); cp += 1; /* match */ if (ep == (cp = of10_match_print(ndo, "\n\t ", cp, ep))) return ep; /* end of snapshot */ /* duration_sec */ ND_PRINT("\n\t duration_sec %u", GET_BE_U_4(cp)); cp += 4; /* duration_nsec */ ND_PRINT(", duration_nsec %u", GET_BE_U_4(cp)); cp += 4; /* priority */ ND_PRINT(", priority %u", GET_BE_U_2(cp)); cp += 2; /* idle_timeout */ ND_PRINT(", idle_timeout %u", GET_BE_U_2(cp)); cp += 2; /* hard_timeout */ ND_PRINT(", hard_timeout %u", GET_BE_U_2(cp)); cp += 2; /* pad2 */ cp += 6; /* cookie */ ND_PRINT(", cookie 0x%016" PRIx64, GET_BE_U_8(cp)); cp += 8; /* packet_count */ ND_PRINT(", packet_count %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* byte_count */ ND_PRINT(", byte_count %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* actions */ if (ep == (cp = of10_actions_print(ndo, "\n\t ", cp, ep, entry_len - OF_FLOW_STATS_LEN))) return ep; /* end of snapshot */ len -= entry_len; } /* while */ return cp; invalid: /* skip the rest of flow statistics entries */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len0); return cp0 + len0; trunc: nd_print_trunc(ndo); return ep; } /* ibid */ static const u_char * of10_aggregate_stats_reply_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { if (len != OF_AGGREGATE_STATS_REPLY_LEN) goto invalid; /* packet_count */ ND_PRINT("\n\t packet_count %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* byte_count */ ND_PRINT(", byte_count %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* flow_count */ ND_PRINT(", flow_count %u", GET_BE_U_4(cp)); cp += 4; /* pad */ ND_TCHECK_4(cp); return cp + 4; invalid: /* skip the message body */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); return cp + len; trunc: nd_print_trunc(ndo); return ep; } /* ibid */ static const u_char * of10_table_stats_reply_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, u_int len) { const u_char *cp0 = cp; const u_int len0 = len; while (len) { if (len < OF_TABLE_STATS_LEN) goto invalid; /* table_id */ ND_PRINT("\n\t table_id %s", tok2str(tableid_str, "%u", GET_U_1(cp))); cp += 1; /* pad */ ND_TCHECK_3(cp); cp += 3; /* name */ ND_PRINT(", name '"); (void)nd_print(ndo, cp, cp + OFP_MAX_TABLE_NAME_LEN); ND_PRINT("'"); cp += OFP_MAX_TABLE_NAME_LEN; /* wildcards */ ND_PRINT("\n\t wildcards 0x%08x", GET_BE_U_4(cp)); of10_bitmap_print(ndo, ofpfw_bm, GET_BE_U_4(cp), OFPFW_U); cp += 4; /* max_entries */ ND_PRINT("\n\t max_entries %u", GET_BE_U_4(cp)); cp += 4; /* active_count */ ND_PRINT(", active_count %u", GET_BE_U_4(cp)); cp += 4; /* lookup_count */ ND_PRINT(", lookup_count %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* matched_count */ ND_PRINT(", matched_count %" PRIu64, GET_BE_U_8(cp)); cp += 8; len -= OF_TABLE_STATS_LEN; } /* while */ return cp; invalid: /* skip the undersized trailing data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len0); return cp0 + len0; trunc: nd_print_trunc(ndo); return ep; } /* ibid */ static const u_char * of10_port_stats_reply_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, u_int len) { const u_char *cp0 = cp; const u_int len0 = len; while (len) { if (len < OF_PORT_STATS_LEN) goto invalid; /* port_no */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; if (ndo->ndo_vflag < 2) { ND_TCHECK_LEN(cp, OF_PORT_STATS_LEN - 2); cp += OF_PORT_STATS_LEN - 2; goto next_port; } /* pad */ cp += 6; /* rx_packets */ ND_PRINT(", rx_packets %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* tx_packets */ ND_PRINT(", tx_packets %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* rx_bytes */ ND_PRINT(", rx_bytes %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* tx_bytes */ ND_PRINT(", tx_bytes %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* rx_dropped */ ND_PRINT(", rx_dropped %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* tx_dropped */ ND_PRINT(", tx_dropped %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* rx_errors */ ND_PRINT(", rx_errors %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* tx_errors */ ND_PRINT(", tx_errors %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* rx_frame_err */ ND_PRINT(", rx_frame_err %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* rx_over_err */ ND_PRINT(", rx_over_err %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* rx_crc_err */ ND_PRINT(", rx_crc_err %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* collisions */ ND_PRINT(", collisions %" PRIu64, GET_BE_U_8(cp)); cp += 8; next_port: len -= OF_PORT_STATS_LEN; } /* while */ return cp; invalid: /* skip the undersized trailing data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len0); return cp0 + len0; trunc: nd_print_trunc(ndo); return ep; } /* ibid */ static const u_char * of10_queue_stats_reply_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, u_int len) { const u_char *cp0 = cp; const u_int len0 = len; while (len) { if (len < OF_QUEUE_STATS_LEN) goto invalid; /* port_no */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* pad */ cp += 2; /* queue_id */ ND_PRINT(", queue_id %u", GET_BE_U_4(cp)); cp += 4; /* tx_bytes */ ND_PRINT(", tx_bytes %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* tx_packets */ ND_PRINT(", tx_packets %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* tx_errors */ ND_PRINT(", tx_errors %" PRIu64, GET_BE_U_8(cp)); cp += 8; len -= OF_QUEUE_STATS_LEN; } /* while */ return cp; invalid: /* skip the undersized trailing data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len0); return cp0 + len0; trunc: nd_print_trunc(ndo); return ep; } /* ibid */ static const u_char * of10_stats_reply_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { const u_char *cp0 = cp; uint16_t type; /* type */ type = GET_BE_U_2(cp); ND_PRINT("\n\t type %s", tok2str(ofpst_str, "invalid (0x%04x)", type)); cp += 2; /* flags */ ND_PRINT(", flags 0x%04x", GET_BE_U_2(cp)); of10_bitmap_print(ndo, ofpsf_reply_bm, GET_BE_U_2(cp), OFPSF_REPLY_U); cp += 2; if (ndo->ndo_vflag > 0) { const u_char *(*decoder)(netdissect_options *, const u_char *, const u_char *, u_int) = type == OFPST_DESC ? of10_desc_stats_reply_print : type == OFPST_FLOW ? of10_flow_stats_reply_print : type == OFPST_AGGREGATE ? of10_aggregate_stats_reply_print : type == OFPST_TABLE ? of10_table_stats_reply_print : type == OFPST_PORT ? of10_port_stats_reply_print : type == OFPST_QUEUE ? of10_queue_stats_reply_print : type == OFPST_VENDOR ? of10_vendor_data_print : NULL; if (decoder != NULL) return decoder(ndo, cp, ep, len - OF_STATS_REPLY_LEN); } ND_TCHECK_LEN(cp0, len); return cp0 + len; trunc: nd_print_trunc(ndo); return ep; } /* [OF10] Section 5.3.6 */ static const u_char * of10_packet_out_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { const u_char *cp0 = cp; const u_int len0 = len; uint16_t actions_len; /* buffer_id */ ND_PRINT("\n\t buffer_id 0x%08x", GET_BE_U_4(cp)); cp += 4; /* in_port */ ND_PRINT(", in_port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* actions_len */ actions_len = GET_BE_U_2(cp); cp += 2; if (actions_len > len - OF_PACKET_OUT_LEN) goto invalid; /* actions */ if (ep == (cp = of10_actions_print(ndo, "\n\t ", cp, ep, actions_len))) return ep; /* end of snapshot */ /* data */ return of10_packet_data_print(ndo, cp, ep, len - OF_PACKET_OUT_LEN - actions_len); invalid: /* skip the rest of the message body */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp0, len0); return cp0 + len0; trunc: nd_print_trunc(ndo); return ep; } /* [OF10] Section 5.4.1 */ static const u_char * of10_packet_in_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { /* buffer_id */ ND_PRINT("\n\t buffer_id %s", tok2str(bufferid_str, "0x%08x", GET_BE_U_4(cp))); cp += 4; /* total_len */ ND_PRINT(", total_len %u", GET_BE_U_2(cp)); cp += 2; /* in_port */ ND_PRINT(", in_port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* reason */ ND_PRINT(", reason %s", tok2str(ofpr_str, "invalid (0x%02x)", GET_U_1(cp))); cp += 1; /* pad */ ND_TCHECK_1(cp); cp += 1; /* data */ /* 2 mock octets count in OF_PACKET_IN_LEN but not in len */ return of10_packet_data_print(ndo, cp, ep, len - (OF_PACKET_IN_LEN - 2)); trunc: nd_print_trunc(ndo); return ep; } /* [OF10] Section 5.4.2 */ static const u_char * of10_flow_removed_print(netdissect_options *ndo, const u_char *cp, const u_char *ep) { /* match */ if (ep == (cp = of10_match_print(ndo, "\n\t ", cp, ep))) return ep; /* end of snapshot */ /* cookie */ ND_PRINT("\n\t cookie 0x%016" PRIx64, GET_BE_U_8(cp)); cp += 8; /* priority */ if (GET_BE_U_2(cp)) ND_PRINT(", priority %u", GET_BE_U_2(cp)); cp += 2; /* reason */ ND_PRINT(", reason %s", tok2str(ofprr_str, "unknown (0x%02x)", GET_U_1(cp))); cp += 1; /* pad */ cp += 1; /* duration_sec */ ND_PRINT(", duration_sec %u", GET_BE_U_4(cp)); cp += 4; /* duration_nsec */ ND_PRINT(", duration_nsec %u", GET_BE_U_4(cp)); cp += 4; /* idle_timeout */ if (GET_BE_U_2(cp)) ND_PRINT(", idle_timeout %u", GET_BE_U_2(cp)); cp += 2; /* pad2 */ cp += 2; /* packet_count */ ND_PRINT(", packet_count %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* byte_count */ ND_PRINT(", byte_count %" PRIu64, GET_BE_U_8(cp)); return cp + 8; } /* [OF10] Section 5.4.4 */ static const u_char * of10_error_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const u_int len) { uint16_t type; const struct tok *code_str; /* type */ type = GET_BE_U_2(cp); cp += 2; ND_PRINT("\n\t type %s", tok2str(ofpet_str, "invalid (0x%04x)", type)); /* code */ code_str = type == OFPET_HELLO_FAILED ? ofphfc_str : type == OFPET_BAD_REQUEST ? ofpbrc_str : type == OFPET_BAD_ACTION ? ofpbac_str : type == OFPET_FLOW_MOD_FAILED ? ofpfmfc_str : type == OFPET_PORT_MOD_FAILED ? ofppmfc_str : type == OFPET_QUEUE_OP_FAILED ? ofpqofc_str : empty_str; ND_PRINT(", code %s", tok2str(code_str, "invalid (0x%04x)", GET_BE_U_2(cp))); cp += 2; /* data */ return of10_data_print(ndo, cp, ep, len - OF_ERROR_MSG_LEN); } const u_char * of10_header_body_print(netdissect_options *ndo, const u_char *cp, const u_char *ep, const uint8_t type, const uint16_t len, const uint32_t xid) { const u_char *cp0 = cp; const u_int len0 = len; /* Thus far message length is not less than the basic header size, but most * message types have additional assorted constraints on the length. Wherever * possible, check that message length meets the constraint, in remaining * cases check that the length is OK to begin decoding and leave any final * verification up to a lower-layer function. When the current message is * invalid, proceed to the next message. */ /* [OF10] Section 5.1 */ ND_PRINT("\n\tversion 1.0, type %s, length %u, xid 0x%08x", tok2str(ofpt_str, "invalid (0x%02x)", type), len, xid); switch (type) { /* OpenFlow header only. */ case OFPT_FEATURES_REQUEST: /* [OF10] Section 5.3.1 */ case OFPT_GET_CONFIG_REQUEST: /* [OF10] Section 5.3.2 */ case OFPT_BARRIER_REQUEST: /* [OF10] Section 5.3.7 */ case OFPT_BARRIER_REPLY: /* ibid */ if (len != OF_HEADER_LEN) goto invalid; break; /* OpenFlow header and fixed-size message body. */ case OFPT_SET_CONFIG: /* [OF10] Section 5.3.2 */ case OFPT_GET_CONFIG_REPLY: /* ibid */ if (len != OF_SWITCH_CONFIG_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; /* flags */ ND_PRINT("\n\t flags %s", tok2str(ofp_config_str, "invalid (0x%04x)", GET_BE_U_2(cp))); cp += 2; /* miss_send_len */ ND_PRINT(", miss_send_len %u", GET_BE_U_2(cp)); return cp + 2; case OFPT_PORT_MOD: if (len != OF_PORT_MOD_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; return of10_port_mod_print(ndo, cp, ep); case OFPT_QUEUE_GET_CONFIG_REQUEST: /* [OF10] Section 5.3.4 */ if (len != OF_QUEUE_GET_CONFIG_REQUEST_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; /* port */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* pad */ ND_TCHECK_2(cp); return cp + 2; case OFPT_FLOW_REMOVED: if (len != OF_FLOW_REMOVED_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; return of10_flow_removed_print(ndo, cp, ep); case OFPT_PORT_STATUS: /* [OF10] Section 5.4.3 */ if (len != OF_PORT_STATUS_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; /* reason */ ND_PRINT("\n\t reason %s", tok2str(ofppr_str, "invalid (0x%02x)", GET_U_1(cp))); cp += 1; /* pad */ ND_TCHECK_7(cp); cp += 7; /* desc */ return of10_phy_ports_print(ndo, cp, ep, OF_PHY_PORT_LEN); /* OpenFlow header, fixed-size message body and n * fixed-size data units. */ case OFPT_FEATURES_REPLY: if (len < OF_SWITCH_FEATURES_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; return of10_features_reply_print(ndo, cp, ep, len); /* OpenFlow header and variable-size data. */ case OFPT_HELLO: /* [OF10] Section 5.5.1 */ case OFPT_ECHO_REQUEST: /* [OF10] Section 5.5.2 */ case OFPT_ECHO_REPLY: /* [OF10] Section 5.5.3 */ if (ndo->ndo_vflag < 1) goto next_message; return of10_data_print(ndo, cp, ep, len - OF_HEADER_LEN); /* OpenFlow header, fixed-size message body and variable-size data. */ case OFPT_ERROR: if (len < OF_ERROR_MSG_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; return of10_error_print(ndo, cp, ep, len); case OFPT_VENDOR: /* [OF10] Section 5.5.4 */ if (len < OF_VENDOR_HEADER_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; return of10_vendor_message_print(ndo, cp, ep, len - OF_HEADER_LEN); case OFPT_PACKET_IN: /* 2 mock octets count in OF_PACKET_IN_LEN but not in len */ if (len < OF_PACKET_IN_LEN - 2) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; return of10_packet_in_print(ndo, cp, ep, len); /* a. OpenFlow header. */ /* b. OpenFlow header and one of the fixed-size message bodies. */ /* c. OpenFlow header, fixed-size message body and variable-size data. */ case OFPT_STATS_REQUEST: if (len < OF_STATS_REQUEST_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; return of10_stats_request_print(ndo, cp, ep, len); /* a. OpenFlow header and fixed-size message body. */ /* b. OpenFlow header and n * fixed-size data units. */ /* c. OpenFlow header and n * variable-size data units. */ /* d. OpenFlow header, fixed-size message body and variable-size data. */ case OFPT_STATS_REPLY: if (len < OF_STATS_REPLY_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; return of10_stats_reply_print(ndo, cp, ep, len); /* OpenFlow header and n * variable-size data units and variable-size data. */ case OFPT_PACKET_OUT: if (len < OF_PACKET_OUT_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; return of10_packet_out_print(ndo, cp, ep, len); /* OpenFlow header, fixed-size message body and n * variable-size data units. */ case OFPT_FLOW_MOD: if (len < OF_FLOW_MOD_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; return of10_flow_mod_print(ndo, cp, ep, len); /* OpenFlow header, fixed-size message body and n * variable-size data units. */ case OFPT_QUEUE_GET_CONFIG_REPLY: /* [OF10] Section 5.3.4 */ if (len < OF_QUEUE_GET_CONFIG_REPLY_LEN) goto invalid; if (ndo->ndo_vflag < 1) goto next_message; /* port */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* pad */ ND_TCHECK_6(cp); cp += 6; /* queues */ return of10_queues_print(ndo, cp, ep, len - OF_QUEUE_GET_CONFIG_REPLY_LEN); } /* switch (type) */ goto next_message; invalid: /* skip the message body */ nd_print_invalid(ndo); next_message: ND_TCHECK_LEN(cp0, len0 - OF_HEADER_LEN); return cp0 + len0 - OF_HEADER_LEN; trunc: nd_print_trunc(ndo); return ep; }