/* \summary: MACsec printer */
-#ifdef HAVE_CONFIG_H
#include <config.h>
-#endif
-#include <netdissect-stdinc.h>
-
-#include <string.h>
+#include "netdissect-stdinc.h"
#include "netdissect.h"
#include "addrtoname.h"
-#include "ethertype.h"
#include "extract.h"
#define MACSEC_DEFAULT_ICV_LEN 16
{ 0, NULL }
};
-static void macsec_print_header(netdissect_options *ndo,
- const struct macsec_sectag *sectag,
- u_int short_length)
+static void
+macsec_print_header(netdissect_options *ndo,
+ const struct macsec_sectag *sectag,
+ u_int short_length)
{
ND_PRINT("an %u, pn %u, flags %s",
GET_U_1(sectag->tci_an) & MACSEC_AN_MASK,
}
/* returns < 0 iff the packet can be decoded completely */
-int macsec_print(netdissect_options *ndo, const u_char **bp,
- u_int *lengthp, u_int *caplenp, u_int *hdrlenp,
- const struct lladdr_info *src, const struct lladdr_info *dst)
+int
+macsec_print(netdissect_options *ndo, const u_char **bp,
+ u_int *lengthp, u_int *caplenp, u_int *hdrlenp,
+ const struct lladdr_info *src, const struct lladdr_info *dst)
{
const char *save_protocol;
const u_char *p = *bp;
u_int short_length;
save_protocol = ndo->ndo_protocol;
- ndo->ndo_protocol = "MACsec";
+ ndo->ndo_protocol = "macsec";
/* we need the full MACsec header in the capture */
if (caplen < MACSEC_SECTAG_LEN_NOSCI) {
}
*lengthp -= MACSEC_DEFAULT_ICV_LEN;
*caplenp -= MACSEC_DEFAULT_ICV_LEN;
+ /*
+ * Update the snapend thus the ICV field is not in the payload for
+ * the caller.
+ * The ICV (Integrity Check Value) is at the end of the frame, after
+ * the secure data.
+ */
+ ndo->ndo_snapend -= MACSEC_DEFAULT_ICV_LEN;
/*
* If the SL field is non-zero, then it's the length of the