ICMPv6: print RFC8335 PROBE extended echo/reply messages

[tcpdump] / print-ip.c

diff --git a/print-ip.c b/print-ip.c
index 5fb6cf1a817f1e4cc38d44a8701e88b72787ca5a..5edc62215e2751d4d5f4dfb65b517f6faaf191c0 100644 (file)
--- a/print-ip.c
+++ b/print-ip.c
@@ -19,251 +19,182 @@
  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
  */
 
  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
  */
 

-#ifndef lint
-static const char rcsid[] =
-    "@(#) $Header: /tcpdump/master/tcpdump/print-ip.c,v 1.85 2000-07-29 06:06:27 assar Exp $ (LBL)";
-#endif
-
-#ifdef HAVE_CONFIG_H
-#include "config.h"
-#endif
-
-#include <sys/param.h>
-#include <sys/time.h>
-#include <sys/socket.h>
-
-#include <netinet/in.h>
-#include <netinet/in_systm.h>
-#include <netinet/ip.h>
-#include <netinet/ip_var.h>
-#include <netinet/udp.h>
-#include <netinet/udp_var.h>
-#include <netinet/tcp.h>
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
+/* \summary: IP printer */

 
 

-#include "addrtoname.h"
-#include "interface.h"
-#include "extract.h"                   /* must come after interface.h */
-
-/* Compatibility */
-#ifndef        IPPROTO_ND
-#define        IPPROTO_ND      77
-#endif
+#include <config.h>

 
 

-#ifndef IN_CLASSD
-#define IN_CLASSD(i) (((int32_t)(i) & 0xf0000000) == 0xe0000000)
-#endif
+#include "netdissect-stdinc.h"

 
 

-/* (following from ipmulti/mrouted/prune.h) */
+#include "netdissect.h"
+#include "addrtoname.h"
+#include "extract.h"
+
+#include "ip.h"
+#include "ipproto.h"
+
+
+static const struct tok ip_option_values[] = {
+    { IPOPT_EOL, "EOL" },
+    { IPOPT_NOP, "NOP" },
+    { IPOPT_TS, "timestamp" },
+    { IPOPT_SECURITY, "security" },
+    { IPOPT_RR, "RR" },
+    { IPOPT_SSRR, "SSRR" },
+    { IPOPT_LSRR, "LSRR" },
+    { IPOPT_RA, "RA" },
+    { IPOPT_RFC1393, "traceroute" },
+    { 0, NULL }
+};

 
 /*
 
 /*

- * The packet format for a traceroute request.
+ * print the recorded route in an IP RR, LSRR or SSRR option.

  */
  */

-struct tr_query {
-       u_int  tr_src;                  /* traceroute source */
-       u_int  tr_dst;                  /* traceroute destination */
-       u_int  tr_raddr;                /* traceroute response address */
-       u_int  tr_rttlqid;              /* response ttl and qid */
-};
+static int
+ip_printroute(netdissect_options *ndo,
+              const u_char *cp, u_int length)
+{
+       u_int ptr;
+       u_int len;

 
 

-#define TR_GETTTL(x)           (int)(((x) >> 24) & 0xff)
-#define TR_GETQID(x)           ((x) & 0x00ffffff)
+       if (length < 3) {
+               ND_PRINT(" [bad length %u]", length);
+               return (0);
+       }
+       if ((length + 1) & 3)
+               ND_PRINT(" [bad length %u]", length);
+       ptr = GET_U_1(cp + 2) - 1;
+       if (ptr < 3 || ((ptr + 1) & 3) || ptr > length + 1)
+               ND_PRINT(" [bad ptr %u]", GET_U_1(cp + 2));

 
 

-/*
- * Traceroute response format.  A traceroute response has a tr_query at the
- * beginning, followed by one tr_resp for each hop taken.
- */
-struct tr_resp {
-       u_int tr_qarr;                  /* query arrival time */
-       u_int tr_inaddr;                /* incoming interface address */
-       u_int tr_outaddr;               /* outgoing interface address */
-       u_int tr_rmtaddr;               /* parent address in source tree */
-       u_int tr_vifin;                 /* input packet count on interface */
-       u_int tr_vifout;                /* output packet count on interface */
-       u_int tr_pktcnt;                /* total incoming packets for src-grp */
-       u_char  tr_rproto;              /* routing proto deployed on router */
-       u_char  tr_fttl;                /* ttl required to forward on outvif */
-       u_char  tr_smask;               /* subnet mask for src addr */
-       u_char  tr_rflags;              /* forwarding error codes */
-};
+       for (len = 3; len < length; len += 4) {
+               ND_TCHECK_4(cp + len);  /* Needed to print the IP addresses */
+               ND_PRINT(" %s", GET_IPADDR_STRING(cp + len));
+               if (ptr > len)
+                       ND_PRINT(",");
+       }
+       return (0);

 
 

-/* defs within mtrace */
-#define TR_QUERY 1
-#define TR_RESP        2
-
-/* fields for tr_rflags (forwarding error codes) */
-#define TR_NO_ERR      0
-#define TR_WRONG_IF    1
-#define TR_PRUNED      2
-#define TR_OPRUNED     3
-#define TR_SCOPED      4
-#define TR_NO_RTE      5
-#define TR_NO_FWD      7
-#define TR_NO_SPACE    0x81
-#define TR_OLD_ROUTER  0x82
-
-/* fields for tr_rproto (routing protocol) */
-#define TR_PROTO_DVMRP 1
-#define TR_PROTO_MOSPF 2
-#define TR_PROTO_PIM   3
-#define TR_PROTO_CBT   4
-
-static void print_mtrace(register const u_char *bp, register u_int len)
-{
-       register struct tr_query *tr = (struct tr_query *)(bp + 8);
-
-       printf("mtrace %lu: %s to %s reply-to %s",
-               (u_long)TR_GETQID(ntohl(tr->tr_rttlqid)),
-               ipaddr_string(&tr->tr_src), ipaddr_string(&tr->tr_dst),
-               ipaddr_string(&tr->tr_raddr));
-       if (IN_CLASSD(ntohl(tr->tr_raddr)))
-               printf(" with-ttl %d", TR_GETTTL(ntohl(tr->tr_rttlqid)));
+trunc:
+       return (-1);

 }
 
 }
 

-static void print_mresp(register const u_char *bp, register u_int len)
+/*
+ * If source-routing is present and valid, return the final destination.
+ * Otherwise, return IP destination.
+ *
+ * This is used for UDP and TCP pseudo-header in the checksum
+ * calculation.
+ */
+static uint32_t
+ip_finddst(netdissect_options *ndo,
+           const struct ip *ip)

 {
 {

-       register struct tr_query *tr = (struct tr_query *)(bp + 8);
-
-       printf("mresp %lu: %s to %s reply-to %s",
-               (u_long)TR_GETQID(ntohl(tr->tr_rttlqid)),
-               ipaddr_string(&tr->tr_src), ipaddr_string(&tr->tr_dst),
-               ipaddr_string(&tr->tr_raddr));
-       if (IN_CLASSD(ntohl(tr->tr_raddr)))
-               printf(" with-ttl %d", TR_GETTTL(ntohl(tr->tr_rttlqid)));
-}
+       u_int length;
+       u_int len;
+       const u_char *cp;

 
 

-static void
-igmp_print(register const u_char *bp, register u_int len,
-          register const u_char *bp2)
-{
-       register const struct ip *ip;
+       cp = (const u_char *)(ip + 1);
+       length = IP_HL(ip) * 4;
+       if (length < sizeof(struct ip))
+               goto trunc;
+       length -= sizeof(struct ip);

 
 

-       ip = (const struct ip *)bp2;
-        (void)printf("%s > %s: ",
-               ipaddr_string(&ip->ip_src),
-               ipaddr_string(&ip->ip_dst));
+       for (; length != 0; cp += len, length -= len) {
+               int tt;

 
 

-       if (qflag) {
-               (void)printf("igmp");
-               return;
-       }
-
-       TCHECK2(bp[0], 8);
-       switch (bp[0]) {
-       case 0x11:
-               (void)printf("igmp query");
-               if (EXTRACT_32BITS(&bp[4]))
-                       (void)printf(" [gaddr %s]", ipaddr_string(&bp[4]));
-               if (len != 8)
-                       (void)printf(" [len %d]", len);
-               break;
-       case 0x12:
-               (void)printf("igmp v1 report %s", ipaddr_string(&bp[4]));
-               if (len != 8)
-                       (void)printf(" [len %d]", len);
-               break;
-       case 0x16:
-               (void)printf("igmp v2 report %s", ipaddr_string(&bp[4]));
-               break;
-       case 0x17:
-               (void)printf("igmp leave %s", ipaddr_string(&bp[4]));
-               break;
-       case 0x13:
-               (void)printf("igmp dvmrp");
-               if (len < 8)
-                       (void)printf(" [len %d]", len);
-               else
-                       dvmrp_print(bp, len);
-               break;
-       case 0x14:
-               (void)printf("igmp pimv1");
-               pimv1_print(bp, len);
-               break;
-       case 0x1e:
-               print_mresp(bp, len);
-               break;
-       case 0x1f:
-               print_mtrace(bp, len);
-               break;
-       default:
-               (void)printf("igmp-%d", bp[0]);
-               break;
-       }
+               tt = GET_U_1(cp);
+               if (tt == IPOPT_EOL)
+                       break;
+               else if (tt == IPOPT_NOP)
+                       len = 1;
+               else {
+                       len = GET_U_1(cp + 1);
+                       if (len < 2)
+                               break;
+               }
+               if (length < len)
+                       goto trunc;
+               ND_TCHECK_LEN(cp, len);
+               switch (tt) {

 
 

-       if (vflag && TTEST2(bp[0], len)) {
-               /* Check the IGMP checksum */
-               if (in_cksum((const u_short*)bp, len, 0))
-                       printf(" bad igmp cksum %x!", EXTRACT_16BITS(&bp[2]));
+               case IPOPT_SSRR:
+               case IPOPT_LSRR:
+                       if (len < 7)
+                               break;
+                       return (GET_IPV4_TO_NETWORK_ORDER(cp + len - 4));
+               }

        }
        }

-       return;

 trunc:
 trunc:

-       fputs("[|igmp]", stdout);
+       return (GET_IPV4_TO_NETWORK_ORDER(ip->ip_dst));

 }
 
 /*
 }
 
 /*

- * print the recorded route in an IP RR, LSRR or SSRR option.
+ * Compute a V4-style checksum by building a pseudoheader.

  */
  */

-static void
-ip_printroute(const char *type, register const u_char *cp, u_int length)
+uint16_t
+nextproto4_cksum(netdissect_options *ndo,
+                 const struct ip *ip, const uint8_t *data,
+                 u_int len, u_int covlen, uint8_t next_proto)

 {
 {

-       register u_int ptr = cp[2] - 1;
-       register u_int len;
-
-       printf(" %s{", type);
-       if ((length + 1) & 3)
-               printf(" [bad length %d]", length);
-       if (ptr < 3 || ((ptr + 1) & 3) || ptr > length + 1)
-               printf(" [bad ptr %d]", cp[2]);
+       struct phdr {
+               uint32_t src;
+               uint32_t dst;
+               uint8_t mbz;
+               uint8_t proto;
+               uint16_t len;
+       } ph;
+       struct cksum_vec vec[2];
+
+       /* pseudo-header.. */
+       ph.len = htons((uint16_t)len);
+       ph.mbz = 0;
+       ph.proto = next_proto;
+       ph.src = GET_IPV4_TO_NETWORK_ORDER(ip->ip_src);
+       if (IP_HL(ip) == 5)
+               ph.dst = GET_IPV4_TO_NETWORK_ORDER(ip->ip_dst);
+       else
+               ph.dst = ip_finddst(ndo, ip);

 
 

-       type = "";
-       for (len = 3; len < length; len += 4) {
-               if (ptr == len)
-                       type = "#";
-               printf("%s%s", type, ipaddr_string(&cp[len]));
-               type = " ";
-       }
-       printf("%s}", ptr == len? "#" : "");
+       vec[0].ptr = (const uint8_t *)(void *)&ph;
+       vec[0].len = sizeof(ph);
+       vec[1].ptr = data;
+       vec[1].len = covlen;
+       return (in_cksum(vec, 2));

 }
 
 }
 

-static void
-ip_printts(register const u_char *cp, u_int length)
+static int
+ip_printts(netdissect_options *ndo,
+           const u_char *cp, u_int length)

 {
 {

-       register u_int ptr = cp[2] - 1;
-       register u_int len = 0;
-       int hoplen;
-       char *type;
+       u_int ptr;
+       u_int len;
+       u_int hoplen;
+       const char *type;

 
 

-       printf(" TS{");
-       hoplen = ((cp[3]&0xF) != IPOPT_TS_TSONLY) ? 8 : 4;
+       if (length < 4) {
+               ND_PRINT("[bad length %u]", length);
+               return (0);
+       }
+       ND_PRINT(" TS{");
+       hoplen = ((GET_U_1(cp + 3) & 0xF) != IPOPT_TS_TSONLY) ? 8 : 4;

        if ((length - 4) & (hoplen-1))
        if ((length - 4) & (hoplen-1))

-               printf("[bad length %d]", length);
+               ND_PRINT("[bad length %u]", length);
+       ptr = GET_U_1(cp + 2) - 1;
+       len = 0;

        if (ptr < 4 || ((ptr - 4) & (hoplen-1)) || ptr > length + 1)
        if (ptr < 4 || ((ptr - 4) & (hoplen-1)) || ptr > length + 1)

-               printf("[bad ptr %d]", cp[2]);
-       switch (cp[3]&0xF) {
+               ND_PRINT("[bad ptr %u]", GET_U_1(cp + 2));
+       switch (GET_U_1(cp + 3)&0xF) {

        case IPOPT_TS_TSONLY:
        case IPOPT_TS_TSONLY:

-               printf("TSONLY");
+               ND_PRINT("TSONLY");

                break;
        case IPOPT_TS_TSANDADDR:
                break;
        case IPOPT_TS_TSANDADDR:

-               printf("TS+ADDR");
-               break;
-       /*
-        * prespecified should really be 3, but some ones might send 2
-        * instead, and the IPOPT_TS_PRESPEC constant can apparently
-        * have both values, so we have to hard-code it here.
-        */
-
-       case 2:
-               printf("PRESPEC2.0");
+               ND_PRINT("TS+ADDR");

                break;
                break;

-       case 3:                 /* IPOPT_TS_PRESPEC */
-               printf("PRESPEC");
+       case IPOPT_TS_PRESPEC:
+               ND_PRINT("PRESPEC");

                break;
                break;

-       default:        
-               printf("[bad ts type %d]", cp[3]&0xF);
+       default:
+               ND_PRINT("[bad ts type %u]", GET_U_1(cp + 3)&0xF);

                goto done;
        }
 
                goto done;
        }
 


@@ -271,486 +202,327 @@ ip_printts(register const u_char *cp, u_int length)
        for (len = 4; len < length; len += hoplen) {
                if (ptr == len)
                        type = " ^ ";
        for (len = 4; len < length; len += hoplen) {
                if (ptr == len)
                        type = " ^ ";

-               printf("%s%d@%s", type, EXTRACT_32BITS(&cp[len+hoplen-4]),
-                      hoplen!=8 ? "" : ipaddr_string(&cp[len]));
+               ND_TCHECK_LEN(cp + len, hoplen);
+               ND_PRINT("%s%u@%s", type, GET_BE_U_4(cp + len + hoplen - 4),
+                         hoplen!=8 ? "" : GET_IPADDR_STRING(cp + len));

                type = " ";
        }
 
 done:
                type = " ";
        }
 
 done:

-       printf("%s", ptr == len ? " ^ " : "");
+       ND_PRINT("%s", ptr == len ? " ^ " : "");

 
 

-       if (cp[3]>>4)
-               printf(" [%d hops not recorded]} ", cp[3]>>4);
+       if (GET_U_1(cp + 3) >> 4)
+               ND_PRINT(" [%u hops not recorded]} ", GET_U_1(cp + 3)>>4);

        else
        else

-               printf("}");
+               ND_PRINT("}");
+       return (0);
+
+trunc:
+       return (-1);

 }
 
 /*
  * print IP options.
 }
 
 /*
  * print IP options.

+   If truncated return -1, else 0.

  */
  */

-static void
-ip_optprint(register const u_char *cp, u_int length)
+static int
+ip_optprint(netdissect_options *ndo,
+            const u_char *cp, u_int length)

 {
 {

-       register u_int len;
+       u_int option_len;
+       const char *sep = "";

 
 

-       for (; length > 0; cp += len, length -= len) {
-               int tt = *cp;
+       for (; length > 0; cp += option_len, length -= option_len) {
+               u_int option_code;
+
+               ND_PRINT("%s", sep);
+               sep = ",";
+
+               option_code = GET_U_1(cp);
+
+               ND_PRINT("%s",
+                         tok2str(ip_option_values,"unknown %u",option_code));
+
+               if (option_code == IPOPT_NOP ||
+                    option_code == IPOPT_EOL)
+                       option_len = 1;

 
 

-               if (tt == IPOPT_NOP || tt == IPOPT_EOL)
-                       len = 1;

                else {
                else {

-                       if (&cp[1] >= snapend) {
-                               printf("[|ip]");
-                               return;
+                       option_len = GET_U_1(cp + 1);
+                       if (option_len < 2) {
+                               ND_PRINT(" [bad length %u]", option_len);
+                               return 0;

                        }
                        }

-                       len = cp[1];
-               }
-               if (len <= 0) {
-                       printf("[|ip op len %d]", len);
-                       return;

                }
                }

-               if (&cp[1] >= snapend || cp + len > snapend) {
-                       printf("[|ip]");
-                       return;
+
+               if (option_len > length) {
+                       ND_PRINT(" [bad length %u]", option_len);
+                       return 0;

                }
                }

-               switch (tt) {

 
 

-               case IPOPT_EOL:
-                       printf(" EOL");
-                       if (length > 1)
-                               printf("-%d", length - 1);
-                       return;
+               ND_TCHECK_LEN(cp, option_len);

 
 

-               case IPOPT_NOP:
-                       printf(" NOP");
-                       break;
+               switch (option_code) {
+               case IPOPT_EOL:
+                       return 0;

 
                case IPOPT_TS:
 
                case IPOPT_TS:

-                       ip_printts(cp, len);
-                       break;
-
-#ifndef IPOPT_SECURITY
-#define IPOPT_SECURITY 130
-#endif /* IPOPT_SECURITY */
-               case IPOPT_SECURITY:
-                       printf(" SECURITY{%d}", len);
-                       break;
-
-               case IPOPT_RR:
-                       ip_printroute("RR", cp, len);
+                       if (ip_printts(ndo, cp, option_len) == -1)
+                               goto trunc;

                        break;
 
                        break;
 

+               case IPOPT_RR:       /* fall through */

                case IPOPT_SSRR:
                case IPOPT_SSRR:

-                       ip_printroute("SSRR", cp, len);
-                       break;
-

                case IPOPT_LSRR:
                case IPOPT_LSRR:

-                       ip_printroute("LSRR", cp, len);
+                       if (ip_printroute(ndo, cp, option_len) == -1)
+                               goto trunc;

                        break;
 
                        break;
 

-#ifndef IPOPT_RA
-#define IPOPT_RA 148           /* router alert */
-#endif

                case IPOPT_RA:
                case IPOPT_RA:

-                       printf(" RA");
-                       if (len != 4)
-                               printf("{%d}", len);
-                       else if (cp[2] || cp[3])
-                               printf("%d.%d", cp[2], cp[3]);
-                       break;
+                       if (option_len < 4) {
+                               ND_PRINT(" [bad length %u]", option_len);
+                               break;
+                       }
+                       ND_TCHECK_1(cp + 3);
+                       if (GET_BE_U_2(cp + 2) != 0)
+                               ND_PRINT(" value %u", GET_BE_U_2(cp + 2));
+                       break;

 
 

+               case IPOPT_NOP:       /* nothing to print - fall through */
+               case IPOPT_SECURITY:

                default:
                default:

-                       printf(" IPOPT-%d{%d}", cp[0], len);

                        break;
                }
        }
                        break;
                }
        }

+       return 0;
+
+trunc:
+       return -1;

 }
 
 }
 

-/*
- * compute an IP header checksum.
- * don't modifiy the packet.
- */
-u_short
-in_cksum(const u_short *addr, register int len, u_short csum)
-{
-       int nleft = len;
-       const u_short *w = addr;
-       u_short answer;
-       int sum = csum;
-
-       /*
-        *  Our algorithm is simple, using a 32 bit accumulator (sum),
-        *  we add sequential 16 bit words to it, and at the end, fold
-        *  back all the carry bits from the top 16 bits into the lower
-        *  16 bits.
-        */
-       while (nleft > 1)  {
-               sum += *w++;
-               nleft -= 2;
-       }
-       if (nleft == 1)
-               sum += htons(*(u_char *)w<<8);
+#define IP_RES 0x8000
+
+static const struct tok ip_frag_values[] = {
+        { IP_MF,        "+" },
+        { IP_DF,        "DF" },
+       { IP_RES,       "rsvd" }, /* The RFC3514 evil ;-) bit */
+        { 0,            NULL }
+};

 
 

-       /*
-        * add back carry outs from top 16 bits to low 16 bits
-        */
-       sum = (sum >> 16) + (sum & 0xffff);     /* add hi 16 to low 16 */
-       sum += (sum >> 16);                     /* add carry */
-       answer = ~sum;                          /* truncate to 16 bits */
-       return (answer);
-}

 
 /*
  * print an IP datagram.
  */
 void
 
 /*
  * print an IP datagram.
  */
 void

-ip_print(register const u_char *bp, register u_int length)
+ip_print(netdissect_options *ndo,
+        const u_char *bp,
+        const u_int length)

 {
 {

-       register const struct ip *ip;
-       register u_int hlen, len, len0, off;
-       register const u_char *cp;
-       u_char nh;
-       int advance;
-
+       const struct ip *ip;
+       u_int off;
+       u_int hlen;
+       u_int len;
+       struct cksum_vec vec[1];
+       uint8_t ip_tos, ip_ttl, ip_proto;
+       uint16_t sum, ip_sum;
+       const char *p_name;
+       int truncated = 0;
+       int presumed_tso = 0;
+
+       ndo->ndo_protocol = "ip";

        ip = (const struct ip *)bp;
        ip = (const struct ip *)bp;

-#ifdef LBL_ALIGN
-       /*
-        * If the IP header is not aligned, copy into abuf.
-        * This will never happen with BPF.  It does happen raw packet
-        * dumps from -r.
-        */
-       if ((long)ip & 3) {
-               static u_char *abuf = NULL;
-               static int didwarn = 0;
-
-               if (abuf == NULL) {
-                       abuf = (u_char *)malloc(snaplen);
-                       if (abuf == NULL)
-                               error("ip_print: malloc");
-               }
-               memcpy((char *)abuf, (char *)ip, min(length, snaplen));
-               snapend += abuf - (u_char *)ip;
-               packetp = abuf;
-               ip = (struct ip *)abuf;
-               /* We really want libpcap to give us aligned packets */
-               if (!didwarn) {
-                       warning("compensating for unaligned libpcap packets");
-                       ++didwarn;
-               }
-       }
-#endif
-       if ((u_char *)(ip + 1) > snapend) {
-               printf("[|ip]");
-               return;
-       }
-       if (length < sizeof (struct ip)) {
-               (void)printf("truncated-ip %d", length);
-               return;
-       }
-       hlen = ip->ip_hl * 4;
-       if (hlen < sizeof (struct ip)) {
-               (void)printf("bad-hlen %d", hlen);
-               return;
+
+       if (!ndo->ndo_eflag) {
+               nd_print_protocol_caps(ndo);
+               ND_PRINT(" ");

        }
 
        }
 

-       len = ntohs(ip->ip_len);
-       if (length < len)
-               (void)printf("truncated-ip - %d bytes missing!",
-                       len - length);
-       len -= hlen;
-       len0 = len;
+       ND_ICHECK_ZU(length, <, sizeof (struct ip));
+       ND_ICHECKMSG_U("version", IP_V(ip), !=, 4);
+
+       hlen = IP_HL(ip) * 4;
+       ND_ICHECKMSG_ZU("header length", hlen, <, sizeof (struct ip));

 
 

+       len = GET_BE_U_2(ip->ip_len);
+       if (len > length) {
+               ND_PRINT("[total length %u > length %u]", len, length);
+               nd_print_invalid(ndo);
+               ND_PRINT(" ");
+       }
+       if (len == 0) {
+               /* we guess that it is a TSO send */
+               len = length;
+               presumed_tso = 1;
+       } else
+               ND_ICHECKMSG_U("total length", len, <, hlen);
+
+       ND_TCHECK_SIZE(ip);

        /*
        /*

-        * If this is fragment zero, hand it to the next higher
-        * level protocol.
+        * Cut off the snapshot length to the end of the IP payload.

         */
         */

-       off = ntohs(ip->ip_off);
-       if ((off & 0x1fff) == 0) {
-               cp = (const u_char *)ip + hlen;
-               nh = ip->ip_p;
-
-               if (nh != IPPROTO_TCP && nh != IPPROTO_UDP) {
-                       (void)printf("%s > %s: ", ipaddr_string(&ip->ip_src),
-                               ipaddr_string(&ip->ip_dst));
-               }
-again:
-               switch (nh) {
-
-#ifndef IPPROTO_AH
-#define IPPROTO_AH     51
-#endif
-               case IPPROTO_AH:
-                       nh = *cp;
-                       advance = ah_print(cp, (const u_char *)ip);
-                       cp += advance;
-                       len -= advance;
-                       goto again;
-
-#ifndef IPPROTO_ESP
-#define IPPROTO_ESP    50
-#endif
-               case IPPROTO_ESP:
-                   {
-                       int enh;
-                       advance = esp_print(cp, (const u_char *)ip, &enh);
-                       cp += advance;
-                       len -= advance;
-                       if (enh < 0)
-                               break;
-                       nh = enh & 0xff;
-                       goto again;
-                   }
-
-#ifndef IPPROTO_IPCOMP
-#define IPPROTO_IPCOMP 108
-#endif
-               case IPPROTO_IPCOMP:
-                   {
-                       int enh;
-                       advance = ipcomp_print(cp, (const u_char *)ip, &enh);
-                       cp += advance;
-                       len -= advance;
-                       if (enh < 0)
-                               break;
-                       nh = enh & 0xff;
-                       goto again;
-                   }
-
-               case IPPROTO_TCP:
-                       tcp_print(cp, len, (const u_char *)ip);
-                       break;
-
-               case IPPROTO_UDP:
-                       udp_print(cp, len, (const u_char *)ip);
-                       break;
-
-               case IPPROTO_ICMP:
-                       icmp_print(cp, len, (const u_char *)ip);
-                       break;
-
-#ifndef IPPROTO_IGRP
-#define IPPROTO_IGRP 9
-#endif
-               case IPPROTO_IGRP:
-                       igrp_print(cp, len, (const u_char *)ip);
-                       break;
-
-               case IPPROTO_ND:
-#if 0
-                       (void)printf("%s > %s:", ipaddr_string(&ip->ip_src),
-                               ipaddr_string(&ip->ip_dst));
-#endif
-                       (void)printf(" nd %d", len);
-                       break;
-
-               case IPPROTO_EGP:
-                       egp_print(cp, len, (const u_char *)ip);
-                       break;
-
-#ifndef IPPROTO_OSPF
-#define IPPROTO_OSPF 89
-#endif
-               case IPPROTO_OSPF:
-                       ospf_print(cp, len, (const u_char *)ip);
-                       break;
-
-#ifndef IPPROTO_IGMP
-#define IPPROTO_IGMP 2
-#endif
-               case IPPROTO_IGMP:
-                       igmp_print(cp, len, (const u_char *)ip);
-                       break;
-
-               case 4:
-                       /* DVMRP multicast tunnel (ip-in-ip encapsulation) */
-#if 0
-                       if (vflag)
-                               (void)printf("%s > %s: ",
-                                            ipaddr_string(&ip->ip_src),
-                                            ipaddr_string(&ip->ip_dst));
-#endif
-                       ip_print(cp, len);
-                       if (! vflag) {
-                               printf(" (ipip)");
-                               return;
-                       }
-                       break;
-
-#ifdef INET6
-#ifndef IP6PROTO_ENCAP
-#define IP6PROTO_ENCAP 41
-#endif
-               case IP6PROTO_ENCAP:
-                       /* ip6-in-ip encapsulation */
-#if 0
-                       if (vflag)
-                               (void)printf("%s > %s: ",
-                                            ipaddr_string(&ip->ip_src),
-                                            ipaddr_string(&ip->ip_dst));
-#endif
-                       ip6_print(cp, len);
-                       if (! vflag) {
-                               printf(" (encap)");
-                               return;
-                       }
-                       break;
-#endif /*INET6*/
-
-
-#ifndef IPPROTO_GRE
-#define IPPROTO_GRE 47
-#endif
-               case IPPROTO_GRE:
-                       if (vflag)
-                               (void)printf("gre %s > %s: ",
-                                            ipaddr_string(&ip->ip_src),
-                                            ipaddr_string(&ip->ip_dst));
-                       /* do it */
-                       gre_print(cp, len);
-                       if (! vflag) {
-                               printf(" (gre encap)");
-                               return;
-                       }
-                       break;
-
-#ifndef IPPROTO_MOBILE
-#define IPPROTO_MOBILE 55
-#endif
-               case IPPROTO_MOBILE:
-                       if (vflag)
-                               (void)printf("mobile %s > %s: ",
-                                            ipaddr_string(&ip->ip_src),
-                                            ipaddr_string(&ip->ip_dst));
-                       mobile_print(cp, len);
-                       if (! vflag) {
-                               printf(" (mobile encap)");
-                               return;
-                       }
-                       break;
-
-#ifndef IPPROTO_PIM
-#define IPPROTO_PIM    103
-#endif
-               case IPPROTO_PIM:
-                       pim_print(cp, len);
-                       break;
+       if (!nd_push_snaplen(ndo, bp, len)) {
+               (*ndo->ndo_error)(ndo, S_ERR_ND_MEM_ALLOC,
+                       "%s: can't push snaplen on buffer stack", __func__);
+       }

 
 

-#ifndef IPPROTO_VRRP
-#define IPPROTO_VRRP   112
-#endif
-               case IPPROTO_VRRP:
-                       vrrp_print(cp, len, ip->ip_ttl);
-                       break;
+       len -= hlen;

 
 

-               default:
-#if 0
-                       (void)printf("%s > %s:", ipaddr_string(&ip->ip_src),
-                               ipaddr_string(&ip->ip_dst));
-#endif
-                       (void)printf(" ip-proto-%d %d", nh, len);
-                       break;
+       off = GET_BE_U_2(ip->ip_off);
+
+        ip_proto = GET_U_1(ip->ip_p);
+
+        if (ndo->ndo_vflag) {
+            ip_tos = GET_U_1(ip->ip_tos);
+            ND_PRINT("(tos 0x%x", ip_tos);
+            /* ECN bits */
+            switch (ip_tos & 0x03) {
+
+            case 0:
+                break;
+
+            case 1:
+                ND_PRINT(",ECT(1)");
+                break;
+
+            case 2:
+                ND_PRINT(",ECT(0)");
+                break;
+
+            case 3:
+                ND_PRINT(",CE");
+                break;
+            }
+
+            ip_ttl = GET_U_1(ip->ip_ttl);
+            if (ip_ttl >= 1)
+                ND_PRINT(", ttl %u", ip_ttl);
+
+           /*
+            * for the firewall guys, print id, offset.
+             * On all but the last stick a "+" in the flags portion.
+            * For unfragmented datagrams, note the don't fragment flag.
+            */
+           ND_PRINT(", id %u, offset %u, flags [%s], proto %s (%u)",
+                         GET_BE_U_2(ip->ip_id),
+                         (off & IP_OFFMASK) * 8,
+                         bittok2str(ip_frag_values, "none", off & (IP_RES|IP_DF|IP_MF)),
+                         tok2str(ipproto_values, "unknown", ip_proto),
+                         ip_proto);
+
+           if (presumed_tso)
+                ND_PRINT(", length %u [was 0, presumed TSO]", length);
+           else
+                ND_PRINT(", length %u", GET_BE_U_2(ip->ip_len));
+
+            if ((hlen - sizeof(struct ip)) > 0) {
+                ND_PRINT(", options (");
+                if (ip_optprint(ndo, (const u_char *)(ip + 1),
+                    hlen - sizeof(struct ip)) == -1) {
+                        ND_PRINT(" [truncated-option]");
+                       truncated = 1;
+                }
+                ND_PRINT(")");
+            }
+
+           if (!ndo->ndo_Kflag && (const u_char *)ip + hlen <= ndo->ndo_snapend) {
+               vec[0].ptr = (const uint8_t *)(const void *)ip;
+               vec[0].len = hlen;
+               sum = in_cksum(vec, 1);
+               if (sum != 0) {
+                   ip_sum = GET_BE_U_2(ip->ip_sum);
+                   ND_PRINT(", bad cksum %x (->%x)!", ip_sum,
+                            in_cksum_shouldbe(ip_sum, sum));

                }
                }

+           }
+
+           ND_PRINT(")\n    ");
+           if (truncated) {
+               ND_PRINT("%s > %s: ",
+                        GET_IPADDR_STRING(ip->ip_src),
+                        GET_IPADDR_STRING(ip->ip_dst));
+               nd_print_trunc(ndo);
+               nd_pop_packet_info(ndo);
+               return;
+           }

        }
 
        }
 

-       /* Ultra quiet now means that all this stuff should be suppressed */
-       /* res 3-Nov-98 */
-       if (qflag > 1) return;
-
-

        /*
        /*

-        * for fragmented datagrams, print id:size@offset.  On all
-        * but the last stick a "+".  For unfragmented datagrams, note
-        * the don't fragment flag.
+        * If this is fragment zero, hand it to the next higher
+        * level protocol.  Let them know whether there are more
+        * fragments.

         */
         */

-       len = len0;     /* get the original length */
-       if (off & 0x3fff) {
+       if ((off & IP_OFFMASK) == 0) {
+               uint8_t nh = GET_U_1(ip->ip_p);
+
+               if (nh != IPPROTO_TCP && nh != IPPROTO_UDP &&
+                   nh != IPPROTO_SCTP && nh != IPPROTO_DCCP) {
+                       ND_PRINT("%s > %s: ",
+                                    GET_IPADDR_STRING(ip->ip_src),
+                                    GET_IPADDR_STRING(ip->ip_dst));
+               }

                /*
                /*

-                * if this isn't the first frag, we're missing the
-                * next level protocol header.  print the ip addr.
+                * Do a bounds check before calling ip_demux_print().
+                * At least the header data is required.

                 */
                 */

-               if (off & 0x1fff)
-                       (void)printf("%s > %s:", ipaddr_string(&ip->ip_src),
-                                     ipaddr_string(&ip->ip_dst));
-#ifndef IP_MF
-#define IP_MF 0x2000
-#endif /* IP_MF */
-#ifndef IP_DF
-#define IP_DF 0x4000
-#endif /* IP_DF */
-               (void)printf(" (frag %d:%u@%d%s)", ntohs(ip->ip_id), len,
-                       (off & 0x1fff) * 8,
-                       (off & IP_MF)? "+" : "");
-
-       } else if (off & IP_DF)
-               (void)printf(" (DF)");
-
-       if (ip->ip_tos) {
-               (void)printf(" [tos 0x%x", (int)ip->ip_tos);
-               /* ECN bits */
-               if (ip->ip_tos&0x02) {
-                       (void)printf(",ECT");
-                       if (ip->ip_tos&0x01)
-                               (void)printf(",CE");
+               if (!ND_TTEST_LEN((const u_char *)ip, hlen)) {
+                       ND_PRINT(" [remaining caplen(%u) < header length(%u)]",
+                                ND_BYTES_AVAILABLE_AFTER((const u_char *)ip),
+                                hlen);
+                       nd_trunc_longjmp(ndo);
+               }
+               ip_demux_print(ndo, (const u_char *)ip + hlen, len, 4,
+                              off & IP_MF, GET_U_1(ip->ip_ttl), nh, bp);
+       } else {
+               /*
+                * Ultra quiet now means that all this stuff should be
+                * suppressed.
+                */
+               if (ndo->ndo_qflag > 1) {
+                       nd_pop_packet_info(ndo);
+                       return;

                }
                }

-               (void)printf("] ");
-       }

 
 

-       if (ip->ip_ttl <= 1)
-               (void)printf(" [ttl %d]", (int)ip->ip_ttl);
+               /*
+                * This isn't the first frag, so we're missing the
+                * next level protocol header.  print the ip addr
+                * and the protocol.
+                */
+               ND_PRINT("%s > %s:", GET_IPADDR_STRING(ip->ip_src),
+                         GET_IPADDR_STRING(ip->ip_dst));
+               if (!ndo->ndo_nflag && (p_name = netdb_protoname(ip_proto)) != NULL)
+                       ND_PRINT(" %s", p_name);
+               else
+                       ND_PRINT(" ip-proto-%u", ip_proto);
+       }
+       nd_pop_packet_info(ndo);
+       return;

 
 

-       if (vflag) {
-               int sum;
-               char *sep = "";
+trunc:
+       nd_print_trunc(ndo);
+       return;

 
 

-               printf(" (");
-               if (ip->ip_ttl > 1) {
-                       (void)printf("%sttl %d", sep, (int)ip->ip_ttl);
-                       sep = ", ";
-               }
-               if ((off & 0x3fff) == 0) {
-                       (void)printf("%sid %d", sep, (int)ntohs(ip->ip_id));
-                       sep = ", ";
-               }
-               (void)printf("%slen %d", sep, (int)ntohs(ip->ip_len));
-               sep = ", ";
-               if ((u_char *)ip + hlen <= snapend) {
-                       sum = in_cksum((const u_short *)ip, hlen, 0);
-                       if (sum != 0) {
-                               (void)printf("%sbad cksum %x!", sep,
-                                            ntohs(ip->ip_sum));
-                               sep = ", ";
-                       }
-               }
-               if ((hlen -= sizeof(struct ip)) > 0) {
-                       (void)printf("%soptlen=%d", sep, hlen);
-                       ip_optprint((u_char *)(ip + 1), hlen);
-               }
-               printf(")");
-       }
+invalid:
+       nd_print_invalid(ndo);

 }
 
 void
 }
 
 void

-ipN_print(register const u_char *bp, register u_int length)
+ipN_print(netdissect_options *ndo, const u_char *bp, u_int length)

 {
 {

-       struct ip *ip, hdr;
-
-       ip = (struct ip *)bp;
-       if (length < 4) {
-               (void)printf("truncated-ip %d", length);
+       ndo->ndo_protocol = "ipn";
+       if (length < 1) {
+               ND_PRINT("truncated-ip %u", length);

                return;
        }
                return;
        }

-       memcpy (&hdr, (char *)ip, 4);
-       switch (hdr.ip_v) {
-       case 4:
-           ip_print (bp, length);
-           return;
-#ifdef INET6
-       case 6:
-           ip6_print (bp, length);
-           return;
-#endif
+
+       switch (GET_U_1(bp) & 0xF0) {
+       case 0x40:
+               ip_print(ndo, bp, length);
+               break;
+       case 0x60:
+               ip6_print(ndo, bp, length);
+               break;

        default:
        default:

-           (void)printf("unknown ip %d", hdr.ip_v);
-           return;
+               ND_PRINT("unknown ip %u", (GET_U_1(bp) & 0xF0) >> 4);
+               break;

        }
 }
        }
 }