- register const struct ip *ip;
- register const u_char *cp, *nh;
- u_short nextheader;
- u_short ahlen, authlen;
- u_long spi, seqno;
-
- ip = (struct ip *)bp2;
-
- (void)printf("AH %s > %s\n\t\t",
- ipaddr_string(&ip->ip_src),
- ipaddr_string(&ip->ip_dst));
-
- if (length < 8) {
- (void)printf(" [|ah] truncated-ah %d", length);
- return;
- }
-
- nextheader = bp[0];
- ahlen = bp[1];
- spi = ntohl(*((u_long *)(bp+4)));
- seqno = ntohl(*((u_long *)(bp+8)));
- authlen = ahlen - 12;
-
- nh = bp+ahlen;
-
- if(authlen > length || authlen == 0)
- {
- authlen = length;
- }
-
- (void)printf("spi:%08x seqno:%d authlen: %d authdata: ", spi,
- seqno, authlen);
- (void)default_print_unaligned(bp+12, authlen);
-
- (void)print_ipproto(nextheader, ip, nh, length-authlen);
+ register const struct ah *ah;
+ register const u_char *ep;
+ int sumlen;
+ uint32_t spi;
+
+ ah = (const struct ah *)bp;
+ ep = ndo->ndo_snapend; /* 'ep' points to the end of available data. */
+
+ ND_TCHECK(*ah);
+
+ sumlen = ah->ah_len << 2;
+ spi = EXTRACT_32BITS(&ah->ah_spi);
+
+ ND_PRINT((ndo, "AH(spi=0x%08x", spi));
+ if (ndo->ndo_vflag)
+ ND_PRINT((ndo, ",sumlen=%d", sumlen));
+ ND_PRINT((ndo, ",seq=0x%x", EXTRACT_32BITS(ah + 1)));
+ if (bp + sizeof(struct ah) + sumlen > ep)
+ ND_PRINT((ndo, "[truncated]"));
+ ND_PRINT((ndo, "): "));
+
+ return sizeof(struct ah) + sumlen;
+ trunc:
+ ND_PRINT((ndo, "[|AH]"));
+ return -1;