]> The Tcpdump Group git mirrors - tcpdump/blobdiff - print-ppp.c
Another length check, also found by the Clang Static Analyzer.
[tcpdump] / print-ppp.c
index c695699c14a30a5fd5ccf7e9a7e3e59e2025ab33..f19a03b100ee277709486371d437b354c0e75769 100644 (file)
  * o BAP support
  */
 
-#ifndef lint
-static const char rcsid[] =
-    "@(#) $Header: /tcpdump/master/tcpdump/print-ppp.c,v 1.53 2000-10-06 04:25:59 guy Exp $ (LBL)";
-#endif
-
 #ifdef HAVE_CONFIG_H
 #include "config.h"
 #endif
 
-#include <sys/param.h>
-#include <sys/time.h>
-#include <sys/socket.h>
-#include <sys/file.h>
-#include <sys/ioctl.h>
-
-struct mbuf;
-struct rtentry;
+#include <tcpdump-stdinc.h>
 
-#include <netinet/in.h>
-
-#include <ctype.h>
-#include <netdb.h>
-#include <pcap.h>
-#include <stdio.h>
 #ifdef __bsdi__
 #include <net/slcompress.h>
 #include <net/if_ppp.h>
 #endif
 
+#include <pcap.h>
+#include <stdio.h>
+#include <stdlib.h>
+
 #include "interface.h"
 #include "extract.h"
 #include "addrtoname.h"
 #include "ppp.h"
 #include "chdlc.h"
 #include "ethertype.h"
-
-/* XXX This goes somewhere else. */
-#define PPP_HDRLEN 4
+#include "oui.h"
 
 /*
  * The following constatns are defined by IANA. Please refer to
@@ -74,7 +58,54 @@ struct rtentry;
  * for the up-to-date information.
  */
 
-/* Control Protocols (LCP/IPCP/CCP etc.) Codes */
+/* Protocol Codes defined in ppp.h */
+
+static const struct tok ppptype2str[] = {
+        { PPP_IP,        "IP" },
+        { PPP_OSI,       "OSI" },
+        { PPP_NS,        "NS" },
+        { PPP_DECNET,    "DECNET" },
+        { PPP_APPLE,     "APPLE" },
+       { PPP_IPX,        "IPX" },
+       { PPP_VJC,        "VJC IP" },
+       { PPP_VJNC,       "VJNC IP" },
+       { PPP_BRPDU,      "BRPDU" },
+       { PPP_STII,       "STII" },
+       { PPP_VINES,      "VINES" },
+       { PPP_MPLS_UCAST, "MPLS" },
+       { PPP_MPLS_MCAST, "MPLS" },
+        { PPP_COMP,       "Compressed"},
+        { PPP_ML,         "MLPPP"},
+        { PPP_IPV6,       "IP6"},
+
+       { PPP_HELLO,      "HELLO" },
+       { PPP_LUXCOM,     "LUXCOM" },
+       { PPP_SNS,        "SNS" },
+       { PPP_IPCP,       "IPCP" },
+       { PPP_OSICP,      "OSICP" },
+       { PPP_NSCP,       "NSCP" },
+       { PPP_DECNETCP,   "DECNETCP" },
+       { PPP_APPLECP,    "APPLECP" },
+       { PPP_IPXCP,      "IPXCP" },
+       { PPP_STIICP,     "STIICP" },
+       { PPP_VINESCP,    "VINESCP" },
+        { PPP_IPV6CP,     "IP6CP" },
+       { PPP_MPLSCP,     "MPLSCP" },
+
+       { PPP_LCP,        "LCP" },
+       { PPP_PAP,        "PAP" },
+       { PPP_LQM,        "LQM" },
+       { PPP_CHAP,       "CHAP" },
+       { PPP_EAP,        "EAP" },
+       { PPP_SPAP,       "SPAP" },
+       { PPP_SPAP_OLD,   "Old-SPAP" },
+       { PPP_BACP,       "BACP" },
+       { PPP_BAP,        "BAP" },
+       { PPP_MPCP,       "MLPPP-CP" },
+       { 0,              NULL }
+};
+
+/* Control Protocols (LCP/IPCP/CCP etc.) Codes defined in RFC 1661 */
 
 #define CPCODES_VEXT           0       /* Vendor-Specific (RFC2153) */
 #define CPCODES_CONF_REQ       1       /* Configure-Request */
@@ -88,34 +119,29 @@ struct rtentry;
 #define CPCODES_ECHO_REQ       9       /* Echo-Request (LCP only) */
 #define CPCODES_ECHO_RPL       10      /* Echo-Reply (LCP only) */
 #define CPCODES_DISC_REQ       11      /* Discard-Request (LCP only) */
-#define CPCODES_ID             12      /* Identification (LCP only) */
-#define CPCODES_TIME_REM       13      /* Time-Remaining (LCP only) */
-#define CPCODES_RESET_REQ      14      /* Reset-Request (CCP only) */
+#define CPCODES_ID             12      /* Identification (LCP only) RFC1570 */
+#define CPCODES_TIME_REM       13      /* Time-Remaining (LCP only) RFC1570 */
+#define CPCODES_RESET_REQ      14      /* Reset-Request (CCP only) RFC1962 */
 #define CPCODES_RESET_REP      15      /* Reset-Reply (CCP only) */
 
-#define CPCODES_MIN    CPCODES_VEXT
-#define CPCODES_MAX    CPCODES_RESET_REP
-
-static const char *cpcodes[] = {
-       /*
-        * Control Protocol code values (RFC1661)
-        */
-       "Vend-Ext",     /* (0) RFC2153 */
-       "Conf-Req",     /* (1) */
-       "Conf-Ack",     /* (2) */
-       "Conf-Nak",     /* (3) */
-       "Conf-Rej",     /* (4) */
-       "Term-Req",     /* (5) */
-       "Term-Ack",     /* (6) */
-       "Code-Rej",     /* (7) */
-       "Prot-Rej",     /* (8) */
-       "Echo-Req",     /* (9) */
-       "Echo-Rep",     /* (10) */
-       "Disc-Req",     /* (11) */
-       "Ident",        /* (12) RFC1570 */
-       "Time-Rem",     /* (13) RFC1570 */
-       "Reset-Req",    /* (14) RFC1962 */
-       "Reset-Ack",    /* (15) RFC1962 */
+static const struct tok cpcodes[] = {
+       {CPCODES_VEXT,      "Vendor-Extension"}, /* RFC2153 */
+       {CPCODES_CONF_REQ,  "Conf-Request"},
+        {CPCODES_CONF_ACK,  "Conf-Ack"},
+       {CPCODES_CONF_NAK,  "Conf-Nack"},
+       {CPCODES_CONF_REJ,  "Conf-Reject"},
+       {CPCODES_TERM_REQ,  "Term-Request"},
+       {CPCODES_TERM_ACK,  "Term-Ack"},
+       {CPCODES_CODE_REJ,  "Code-Reject"},
+       {CPCODES_PROT_REJ,  "Prot-Reject"},
+       {CPCODES_ECHO_REQ,  "Echo-Request"},
+       {CPCODES_ECHO_RPL,  "Echo-Reply"},
+       {CPCODES_DISC_REQ,  "Disc-Req"},
+       {CPCODES_ID,        "Ident"},            /* RFC1570 */
+       {CPCODES_TIME_REM,  "Time-Rem"},         /* RFC1570 */
+       {CPCODES_RESET_REQ, "Reset-Req"},        /* RFC1962 */
+       {CPCODES_RESET_REP, "Reset-Ack"},        /* RFC1962 */
+        {0,                 NULL}
 };
 
 /* LCP Config Options */
@@ -174,7 +200,7 @@ static const char *lcpconfopts[] = {
        "deprecated(15)",       /* used to be a Compund-Frames */
        "deprecated(16)",       /* used to be a Nominal-Data-Encap */
        "MRRU",                 /* (17) */
-       "SSNHF",                /* (18) */
+       "12-Bit seq #",         /* (18) */
        "End-Disc",             /* (19) */
        "Proprietary",          /* (20) */
        "DCE-Id",               /* (21) */
@@ -189,7 +215,6 @@ static const char *lcpconfopts[] = {
        "PPP-Muxing",           /* (30) */
 };
 
-/* IPV6CP - to be supported */
 /* ECP - to be supported */
 
 /* CCP Config Options */
@@ -213,62 +238,88 @@ static const char *lcpconfopts[] = {
 /* 27-254 unassigned */
 #define CCPOPT_RESV    255     /* RFC1962 */
 
-#define CCPOPT_MIN CCPOPT_OUI
-#define CCPOPT_MAX CCPOPT_DEFLATE    /* XXX: should be CCPOPT_RESV but... */
-
-static const char *ccpconfopts[] = {
-       "OUI",                  /* (0) */
-       "Pred-1",               /* (1) */
-       "Pred-2",               /* (2) */
-       "Puddle",               /* (3) */
-       "unassigned(4)",        /* (4) */
-       "unassigned(5)",        /* (5) */
-       "unassigned(6)",        /* (6) */
-       "unassigned(7)",        /* (7) */
-       "unassigned(8)",        /* (8) */
-       "unassigned(9)",        /* (9) */
-       "unassigned(10)",       /* (10) */
-       "unassigned(11)",       /* (11) */
-       "unassigned(12)",       /* (12) */
-       "unassigned(13)",       /* (13) */
-       "unassigned(14)",       /* (14) */
-       "unassigned(15)",       /* (15) */
-       "HP-PPC",               /* (16) */
-       "Stac-LZS",             /* (17) */
-       "MPPC",                 /* (18) */
-       "Gand-FZA",             /* (19) */
-       "V.42bis",              /* (20) */
-       "BSD-Comp",             /* (21) */
-       "unassigned(22)",       /* (22) */
-       "LZS-DCP",              /* (23) */
-       "MVRCA",                /* (24) */
-       "DEC",                  /* (25) */
-       "Deflate",              /* (26) */
+static const struct tok ccpconfopts_values[] = {
+        { CCPOPT_OUI, "OUI" },
+        { CCPOPT_PRED1, "Pred-1" },
+        { CCPOPT_PRED2, "Pred-2" },
+        { CCPOPT_PJUMP, "Puddle" },
+        { CCPOPT_HPPPC, "HP-PPC" },
+        { CCPOPT_STACLZS, "Stac-LZS" },
+        { CCPOPT_MPPC, "MPPC" },
+        { CCPOPT_GFZA, "Gand-FZA" },
+        { CCPOPT_V42BIS, "V.42bis" },
+        { CCPOPT_BSDCOMP, "BSD-Comp" },
+        { CCPOPT_LZSDCP, "LZS-DCP" },
+        { CCPOPT_MVRCA, "MVRCA" },
+        { CCPOPT_DEC, "DEC" },
+        { CCPOPT_DEFLATE, "Deflate" },
+        { CCPOPT_RESV, "Reserved"},
+        {0,                 NULL}
 };
 
 /* BACP Config Options */
 
 #define BACPOPT_FPEER  1       /* RFC2125 */
 
+static const struct tok bacconfopts_values[] = {
+        { BACPOPT_FPEER, "Favored-Peer" },
+        {0,                 NULL}
+};
+
+
 /* SDCP - to be supported */
 
 /* IPCP Config Options */
-
 #define IPCPOPT_2ADDR  1       /* RFC1172, RFC1332 (deprecated) */
 #define IPCPOPT_IPCOMP 2       /* RFC1332 */
 #define IPCPOPT_ADDR   3       /* RFC1332 */
 #define IPCPOPT_MOBILE4        4       /* RFC2290 */
-
 #define IPCPOPT_PRIDNS 129     /* RFC1877 */
 #define IPCPOPT_PRINBNS        130     /* RFC1877 */
 #define IPCPOPT_SECDNS 131     /* RFC1877 */
 #define IPCPOPT_SECNBNS        132     /* RFC1877 */
 
+static const struct tok ipcpopt_values[] = {
+        { IPCPOPT_2ADDR, "IP-Addrs" },
+        { IPCPOPT_IPCOMP, "IP-Comp" },
+        { IPCPOPT_ADDR, "IP-Addr" },
+        { IPCPOPT_MOBILE4, "Home-Addr" },
+        { IPCPOPT_PRIDNS, "Pri-DNS" },
+        { IPCPOPT_PRINBNS, "Pri-NBNS" },
+        { IPCPOPT_SECDNS, "Sec-DNS" },
+        { IPCPOPT_SECNBNS, "Sec-NBNS" },
+       { 0,              NULL }
+};
+
+#define IPCPOPT_IPCOMP_HDRCOMP 0x61  /* rfc3544 */
+#define IPCPOPT_IPCOMP_MINLEN    14
+
+static const struct tok ipcpopt_compproto_values[] = {
+        { PPP_VJC, "VJ-Comp" },
+        { IPCPOPT_IPCOMP_HDRCOMP, "IP Header Compression" },
+       { 0,              NULL }
+};
+
+static const struct tok ipcpopt_compproto_subopt_values[] = {
+        { 1, "RTP-Compression" },
+        { 2, "Enhanced RTP-Compression" },
+       { 0,              NULL }
+};
+
+/* IP6CP Config Options */
+#define IP6CP_IFID      1
+
+static const struct tok ip6cpopt_values[] = {
+        { IP6CP_IFID, "Interface-ID" },
+       { 0,              NULL }
+};
+
 /* ATCP - to be supported */
 /* OSINLCP - to be supported */
 /* BVCP - to be supported */
 /* BCP - to be supported */
 /* IPXCP - to be supported */
+/* MPLSCP - to be supported */
 
 /* Auth Algorithms */
 
@@ -277,6 +328,13 @@ static const char *ccpconfopts[] = {
 #define AUTHALG_MSCHAP1        128     /* RFC2433 */
 #define AUTHALG_MSCHAP2        129     /* RFC2795 */
 
+static const struct tok authalg_values[] = {
+        { AUTHALG_CHAPMD5, "MD5" },
+        { AUTHALG_MSCHAP1, "MS-CHAPv1" },
+        { AUTHALG_MSCHAP2, "MS-CHAPv2" },
+       { 0,              NULL }
+};
+
 /* FCS Alternatives - to be supported */
 
 /* Multilink Endpoint Discriminator (RFC1717) */
@@ -295,6 +353,16 @@ static const char *ccpconfopts[] = {
 #define CALLBACK_X500  4       /* X.500 distinguished name */
 #define CALLBACK_CBCP  6       /* Location is determined during CBCP nego */
 
+static const struct tok ppp_callback_values[] = {
+        { CALLBACK_AUTH, "UserAuth" },
+        { CALLBACK_DSTR, "DialString" },
+        { CALLBACK_LID, "LocalID" },
+        { CALLBACK_E164, "E.164" },
+        { CALLBACK_X500, "X.500" },
+        { CALLBACK_CBCP, "CBCP" },
+       { 0,              NULL }
+};
+
 /* CHAP */
 
 #define CHAP_CHAL      1
@@ -302,14 +370,12 @@ static const char *ccpconfopts[] = {
 #define CHAP_SUCC      3
 #define CHAP_FAIL      4
 
-#define CHAP_CODEMIN CHAP_CHAL
-#define CHAP_CODEMAX CHAP_FAIL
-
-static const char *chapcode[] = {
-       "Chal",         /* (1) */
-       "Resp",         /* (2) */
-       "Succ",         /* (3) */
-       "Fail",         /* (4) */
+static const struct tok chapcode_values[] = {
+       { CHAP_CHAL, "Challenge" },
+       { CHAP_RESP, "Response" },
+       { CHAP_SUCC, "Success" },
+       { CHAP_FAIL, "Fail" },
+        { 0, NULL}
 };
 
 /* PAP */
@@ -318,13 +384,11 @@ static const char *chapcode[] = {
 #define PAP_AACK       2
 #define PAP_ANAK       3
 
-#define PAP_CODEMIN    PAP_AREQ
-#define PAP_CODEMAX    PAP_ANAK
-
-static const char *papcode[] = {
-       "Auth-Req",     /* (1) */
-       "Auth-Ack",     /* (2) */
-       "Auth-Nak",     /* (3) */
+static const struct tok papcode_values[] = {
+        { PAP_AREQ, "Auth-Req" },
+        { PAP_AACK, "Auth-ACK" },
+        { PAP_ANAK, "Auth-NACK" },
+        { 0, NULL }
 };
 
 /* BAP */
@@ -337,92 +401,73 @@ static const char *papcode[] = {
 #define BAP_CSIND      7
 #define BAP_CSRES      8
 
-static const char *ppp_protoname __P((u_int proto));
-static void handle_ctrl_proto __P((u_int proto,const u_char *p, int length));
-static void handle_chap __P((const u_char *p, int length));
-static void handle_pap __P((const u_char *p, int length));
-static void handle_bap __P((const u_char *p, int length));
-static int print_lcp_config_options __P((const u_char *p, int));
-static int print_ipcp_config_options __P((const u_char *p, int));
-static int print_ccp_config_options __P((const u_char *p, int));
-static int print_bacp_config_options __P((const u_char *p, int));
-static void handle_ppp __P((u_int proto, const u_char *p, int length));
-
-static const char *
-ppp_protoname(u_int proto)
-{
-       static char buf[20];
-
-       switch (proto) {
-       case PPP_IP:    return "IP";
-#ifdef PPP_XNS
-       case PPP_XNS:   return "XNS";
-#endif
-       case PPP_IPX:   return "IPX";
-       case PPP_VJC:   return "VJC";
-       case PPP_VJNC:  return "VJNC";
-#ifdef PPP_COMP
-       case PPP_COMP:  return "COMP";
-#endif
-       case PPP_IPCP:  return "IPCP";
-       case PPP_IPV6CP: return "IPV6CP";
-       case PPP_IPXCP: return "IPXCP";
-       case PPP_CCP:   return "CCP";
-       case PPP_LCP:   return "LCP";
-       case PPP_PAP:   return "PAP";
-#ifdef PPP_LQR
-       case PPP_LQR:   return "LQR";
-#endif
-       case PPP_CHAP:  return "CHAP";
-       case PPP_BACP:  return "BACP";
-       case PPP_BAP:   return "BAP";
-       default:
-               snprintf(buf, sizeof(buf), "unknown-0x%04x", proto);
-               return buf;
-       }
-}
+static void handle_ctrl_proto (u_int proto,const u_char *p, int length);
+static void handle_chap (const u_char *p, int length);
+static void handle_pap (const u_char *p, int length);
+static void handle_bap (const u_char *p, int length);
+static void handle_mlppp(const u_char *p, int length);
+static int print_lcp_config_options (const u_char *p, int);
+static int print_ipcp_config_options (const u_char *p, int);
+static int print_ip6cp_config_options (const u_char *p, int);
+static int print_ccp_config_options (const u_char *p, int);
+static int print_bacp_config_options (const u_char *p, int);
+static void handle_ppp (u_int proto, const u_char *p, int length);
+static void ppp_hdlc(const u_char *p, int length);
 
 /* generic Control Protocol (e.g. LCP, IPCP, CCP, etc.) handler */
 static void
-handle_ctrl_proto(u_int proto, const u_char *p, int length)
+handle_ctrl_proto(u_int proto, const u_char *pptr, int length)
 {
+       const char *typestr;
        u_int code, len;
        int (*pfunc)(const u_char *, int);
        int x, j;
+        const u_char *tptr;
 
-       if (length < 1) {
-               printf("[|%s]", ppp_protoname(proto));
-               return;
-       } else if (length < 4) {
-               printf("[|%s 0x%02x]", ppp_protoname(proto), *p);
-               return;
-       }
+        tptr=pptr;
 
-       code = *p;
-       if ((code >= CPCODES_MIN) && (code <= CPCODES_MAX))
-               printf("%s", cpcodes[code]);
-       else {
-               printf("0x%02x", code);
-               return;
-       }
-       p++;
+        typestr = tok2str(ppptype2str, "unknown ctrl-proto (0x%04x)", proto);
+        printf("%s, ",typestr);
 
-       printf("(%u)", *p);             /* ID */
-       p++;
+       if (length < 4) /* FIXME weak boundary checking */
+               goto trunc;
+       TCHECK2(*tptr, 2);
 
-       len = EXTRACT_16BITS(p);
-       p += 2;
+       code = *tptr++;
+
+        printf("%s (0x%02x), id %u, length %u",
+               tok2str(cpcodes, "Unknown Opcode",code),
+               code,
+               *tptr++, /* ID */
+               length+2);
+
+        if (!vflag)
+                return;
 
        if (length <= 4)
-               return;         /* there may be a NULL confreq etc. */
+               return;    /* there may be a NULL confreq etc. */
+
+       TCHECK2(*tptr, 2);
+       len = EXTRACT_16BITS(tptr);
+       tptr += 2;
+
+        printf("\n\tencoded length %u (=Option(s) length %u)",len,len-4);
+
+        if (vflag>1)
+            print_unknown_data(gndo,pptr-2,"\n\t",6);
+
 
        switch (code) {
        case CPCODES_VEXT:
                if (length < 11)
                        break;
-               printf(", Magic-Num=%08x", EXTRACT_32BITS(p));
-               p += 4;
-               printf(" OUI=%02x%02x%02x", p[0], p[1], p[2]);
+               TCHECK2(*tptr, 4);
+               printf("\n\t  Magic-Num 0x%08x", EXTRACT_32BITS(tptr));
+               tptr += 4;
+               TCHECK2(*tptr, 3);
+               printf(" Vendor: %s (%u)",
+                       tok2str(oui_values,"Unknown",EXTRACT_24BITS(tptr)),
+                       EXTRACT_24BITS(tptr));
                /* XXX: need to decode Kind and Value(s)? */
                break;
        case CPCODES_CONF_REQ:
@@ -438,6 +483,9 @@ handle_ctrl_proto(u_int proto, const u_char *p, int length)
                        case PPP_IPCP:
                                pfunc = print_ipcp_config_options;
                                break;
+                       case PPP_IPV6CP:
+                               pfunc = print_ip6cp_config_options;
+                               break;
                        case PPP_CCP:
                                pfunc = print_ccp_config_options;
                                break;
@@ -446,17 +494,20 @@ handle_ctrl_proto(u_int proto, const u_char *p, int length)
                                break;
                        default:
                                /*
-                                * This should never happen, but we set
-                                * "pfunc" to squelch uninitialized
-                                * variable warnings from compilers.
+                                * No print routine for the options for
+                                * this protocol.
                                 */
                                pfunc = NULL;
                                break;
                        }
-                       if ((j = (*pfunc)(p, len)) == 0)
+
+                       if (pfunc == NULL) /* catch the above null pointer if unknown CP */
+                               break;
+
+                       if ((j = (*pfunc)(tptr, len)) == 0)
                                break;
                        x -= j;
-                       p += j;
+                       tptr += j;
                } while (x > 0);
                break;
 
@@ -470,29 +521,62 @@ handle_ctrl_proto(u_int proto, const u_char *p, int length)
        case CPCODES_PROT_REJ:
                if (length < 6)
                        break;
-               printf(", Rejected-Protocol=%04x", EXTRACT_16BITS(p));
-               /* XXX: need to decode Rejected-Information? */
+               TCHECK2(*tptr, 2);
+               printf("\n\t  Rejected %s Protocol (0x%04x)",
+                      tok2str(ppptype2str,"unknown", EXTRACT_16BITS(tptr)),
+                      EXTRACT_16BITS(tptr));
+               /* XXX: need to decode Rejected-Information? - hexdump for now */
+                if (len > 6) {
+                        printf("\n\t  Rejected Packet");
+                        print_unknown_data(gndo,tptr+2,"\n\t    ",len-2);
+                }
                break;
        case CPCODES_ECHO_REQ:
        case CPCODES_ECHO_RPL:
        case CPCODES_DISC_REQ:
+               if (length < 8)
+                       break;
+               TCHECK2(*tptr, 4);
+               printf("\n\t  Magic-Num 0x%08x", EXTRACT_32BITS(tptr));
+               /* XXX: need to decode Data? - hexdump for now */
+                if (len > 8) {
+                        printf("\n\t  -----trailing data-----");
+                        TCHECK2(tptr[4], len-8);
+                        print_unknown_data(gndo,tptr+4,"\n\t  ",len-8);
+                }
+               break;
        case CPCODES_ID:
                if (length < 8)
                        break;
-               printf(", Magic-Num=%08x", EXTRACT_32BITS(p));
-               /* XXX: need to decode Data? */
+               TCHECK2(*tptr, 4);
+               printf("\n\t  Magic-Num 0x%08x", EXTRACT_32BITS(tptr));
+               /* RFC 1661 says this is intended to be human readable */
+                if (len > 8) {
+                        printf("\n\t  Message\n\t    ");
+                        fn_printn(tptr+4,len-4,snapend);
+                }
                break;
        case CPCODES_TIME_REM:
                if (length < 12)
                        break;
-               printf(", Magic-Num=%08x", EXTRACT_32BITS(p));
-               printf(" Seconds-Remaining=%u", EXTRACT_32BITS(p + 4));
+               TCHECK2(*tptr, 4);
+               printf("\n\t  Magic-Num 0x%08x", EXTRACT_32BITS(tptr));
+               TCHECK2(*(tptr + 4), 4);
+               printf(", Seconds-Remaining %us", EXTRACT_32BITS(tptr + 4));
                /* XXX: need to decode Message? */
                break;
        default:
-               printf(", unknown-Codes-0x%02x", code);
+            /* XXX this is dirty but we do not get the
+             * original pointer passed to the begin
+             * the PPP packet */
+                if (vflag <= 1)
+                    print_unknown_data(gndo,pptr-2,"\n\t  ",length+2);
                break;
        }
+       return;
+
+trunc:
+       printf("[|%s]", typestr);
 }
 
 /* LCP config options */
@@ -503,146 +587,143 @@ print_lcp_config_options(const u_char *p, int length)
 
        if (length < 2)
                return 0;
+       TCHECK2(*p, 2);
        len = p[1];
        opt = p[0];
        if (length < len)
                return 0;
+       if (len < 2) {
+               if ((opt >= LCPOPT_MIN) && (opt <= LCPOPT_MAX))
+                       printf("\n\t  %s Option (0x%02x), length %u (bogus, should be >= 2)", lcpconfopts[opt],opt,len);
+               else
+                       printf("\n\tunknown LCP option 0x%02x", opt);
+               return 0;
+       }
        if ((opt >= LCPOPT_MIN) && (opt <= LCPOPT_MAX))
-               printf(", %s", lcpconfopts[opt]);
+               printf("\n\t  %s Option (0x%02x), length %u: ", lcpconfopts[opt],opt,len);
        else {
-               printf(", unknwhown-%d", opt);
+               printf("\n\tunknown LCP option 0x%02x", opt);
                return len;
        }
 
        switch (opt) {
        case LCPOPT_VEXT:
                if (len >= 6) {
-                       printf(" OUI=%02x%02x%02x", p[2], p[3], p[4]);
+                       TCHECK2(*(p + 2), 3);
+                       printf("Vendor: %s (%u)",
+                               tok2str(oui_values,"Unknown",EXTRACT_24BITS(p+2)),
+                               EXTRACT_24BITS(p+2));
 #if 0
-                       printf(" kind=%02x", p[5]);
-                       printf(" val=")
+                       TCHECK(p[5]);
+                       printf(", kind: 0x%02x", p[5]);
+                       printf(", Value: 0x")
                        for (i = 0; i < len - 6; i++) {
+                               TCHECK(p[6 + i]);
                                printf("%02x", p[6 + i]);
                        }
 #endif
                }
                break;
        case LCPOPT_MRU:
-               if (len == 4)
-                       printf("=%u", EXTRACT_16BITS(p + 2));
+               if (len == 4) {
+                       TCHECK2(*(p + 2), 2);
+                       printf("%u", EXTRACT_16BITS(p + 2));
+               }
                break;
        case LCPOPT_ACCM:
-               if (len == 6)
-                       printf("=%08x", EXTRACT_32BITS(p + 2));
+               if (len == 6) {
+                       TCHECK2(*(p + 2), 4);
+                       printf("0x%08x", EXTRACT_32BITS(p + 2));
+               }
                break;
        case LCPOPT_AP:
                if (len >= 4) {
-                       if (p[2] == 0xc0 && p[3] == 0x23)
-                               printf(" PAP");
-                       else if (p[2] == 0xc2 && p[3] == 0x23) {
-                               printf(" CHAP/");
-                               switch (p[4]) {
-                               default:
-                                       printf("unknown-algorithm-%u", p[4]);
-                                       break;
-                               case AUTHALG_CHAPMD5:
-                                       printf("MD5");
-                                       break;
-                               case AUTHALG_MSCHAP1:
-                                       printf("MSCHAPv1");
-                                       break;
-                               case AUTHALG_MSCHAP2:
-                                       printf("MSCHAPv2");
-                                       break;
-                               }
-                       }
-                       else if (p[2] == 0xc2 && p[3] == 0x27)
-                               printf(" EAP");
-                       else if (p[2] == 0xc0 && p[3] == 0x27)
-                               printf(" SPAP");
-                       else if (p[2] == 0xc1 && p[3] == 0x23)
-                               printf(" Old-SPAP");
-                       else
-                               printf("unknown");
+                   TCHECK2(*(p + 2), 2);
+                    printf("%s", tok2str(ppptype2str,"Unknown Auth Proto (0x04x)",EXTRACT_16BITS(p+2)));
+
+                   switch (EXTRACT_16BITS(p+2)) {
+                   case PPP_CHAP:
+                       TCHECK(p[4]);
+                        printf(", %s",tok2str(authalg_values,"Unknown Auth Alg %u",p[4]));
+                       break;
+                   case PPP_PAP: /* fall through */
+                   case PPP_EAP:
+                   case PPP_SPAP:
+                   case PPP_SPAP_OLD:
+                        break;
+                   default:
+                        print_unknown_data(gndo,p,"\n\t",len);
+                   }
                }
                break;
        case LCPOPT_QP:
                if (len >= 4) {
-                       if (p[2] == 0xc0 && p[3] == 0x25)
+                       TCHECK2(*(p + 2), 2);
+                       if (EXTRACT_16BITS(p+2) == PPP_LQM)
                                printf(" LQR");
                        else
                                printf(" unknown");
                }
                break;
        case LCPOPT_MN:
-               if (len == 6)
-                       printf("=%08x", EXTRACT_32BITS(p + 2));
+               if (len == 6) {
+                       TCHECK2(*(p + 2), 4);
+                       printf("0x%08x", EXTRACT_32BITS(p + 2));
+               }
                break;
        case LCPOPT_PFC:
                break;
        case LCPOPT_ACFC:
                break;
        case LCPOPT_LD:
-               if (len == 4)
-                       printf("=%04x", EXTRACT_16BITS(p + 2));
+               if (len == 4) {
+                       TCHECK2(*(p + 2), 2);
+                       printf("0x%04x", EXTRACT_16BITS(p + 2));
+               }
                break;
        case LCPOPT_CBACK:
                if (len < 3)
                        break;
-               switch (p[2]) {         /* Operation */
-               case CALLBACK_AUTH:
-                       printf(" UserAuth");
-                       break;
-               case CALLBACK_DSTR:
-                       printf(" DialString");
-                       break;
-               case CALLBACK_LID:
-                       printf(" LocalID");
-                       break;
-               case CALLBACK_E164:
-                       printf(" E.164");
-                       break;
-               case CALLBACK_X500:
-                       printf(" X.500");
-                       break;
-               case CALLBACK_CBCP:
-                       printf(" CBCP");
-                       break;
-               default:
-                       printf(" unknown-operation=%u", p[2]);
-                       break;
-               }
+               TCHECK(p[2]);
+                printf("Callback Operation %s (%u)",
+                       tok2str(ppp_callback_values,"Unknown",p[2]),
+                       p[2]);
                break;
        case LCPOPT_MLMRRU:
-               if (len == 4)
-                       printf("=%u", EXTRACT_16BITS(p + 2));
+               if (len == 4) {
+                       TCHECK2(*(p + 2), 2);
+                       printf("%u", EXTRACT_16BITS(p + 2));
+               }
                break;
        case LCPOPT_MLED:
                if (len < 3)
                        break;
+               TCHECK(p[2]);
                switch (p[2]) {         /* class */
                case MEDCLASS_NULL:
-                       printf(" Null");
+                       printf("Null");
                        break;
                case MEDCLASS_LOCAL:
-                       printf(" Local"); /* XXX */
+                       printf("Local"); /* XXX */
                        break;
                case MEDCLASS_IPV4:
                        if (len != 7)
                                break;
-                       printf(" IPv4=%s", ipaddr_string(p + 3));
+                       TCHECK2(*(p + 3), 4);
+                       printf("IPv4 %s", ipaddr_string(p + 3));
                        break;
                case MEDCLASS_MAC:
                        if (len != 9)
                                break;
-                       printf(" MAC=%02x:%02x:%02x:%02x:%02x:%02x",
+                       TCHECK(p[8]);
+                       printf("MAC %02x:%02x:%02x:%02x:%02x:%02x",
                               p[3], p[4], p[5], p[6], p[7], p[8]);
                        break;
                case MEDCLASS_MNB:
-                       printf(" Magic-Num-Block"); /* XXX */
+                       printf("Magic-Num-Block"); /* XXX */
                        break;
                case MEDCLASS_PSNDN:
-                       printf(" PSNDN"); /* XXX */
+                       printf("PSNDN"); /* XXX */
                        break;
                }
                break;
@@ -657,7 +738,7 @@ print_lcp_config_options(const u_char *p, int length)
        case LCPOPT_DEP14:
        case LCPOPT_DEP15:
        case LCPOPT_DEP16:
-       case LCPOPT_MLSSNHF:
+        case LCPOPT_MLSSNHF:
        case LCPOPT_PROP:
        case LCPOPT_DCEID:
        case LCPOPT_MPP:
@@ -670,8 +751,41 @@ print_lcp_config_options(const u_char *p, int length)
        case LCPOPT_PPPMUX:
                break;
 #endif
+        default:
+                if(vflag<2)
+                        print_unknown_data(gndo,&p[2],"\n\t    ",len-2);
+                break;
        }
+
+        if (vflag>1)
+                print_unknown_data(gndo,&p[2],"\n\t    ",len-2); /* exclude TLV header */
+
        return len;
+
+trunc:
+       printf("[|lcp]");
+       return 0;
+}
+
+/* ML-PPP*/
+static const struct tok ppp_ml_flag_values[] = {
+    { 0x80, "begin" },
+    { 0x40, "end" },
+    { 0, NULL }
+};
+
+static void
+handle_mlppp(const u_char *p, int length) {
+
+    if (!eflag)
+        printf("MLPPP, ");
+
+    printf("seq 0x%03x, Flags [%s], length %u",
+           (EXTRACT_16BITS(p))&0x0fff, /* only support 12-Bit sequence space for now */
+           bittok2str(ppp_ml_flag_values, "none", *p & 0xc0),
+           length);
+
+    return;
 }
 
 /* CHAP */
@@ -688,22 +802,23 @@ handle_chap(const u_char *p, int length)
                printf("[|chap]");
                return;
        } else if (length < 4) {
+               TCHECK(*p);
                printf("[|chap 0x%02x]", *p);
                return;
        }
 
+       TCHECK(*p);
        code = *p;
-       if ((code >= CHAP_CODEMIN) && (code <= CHAP_CODEMAX))
-               printf("%s", chapcode[code - 1]);
-       else {
-               printf("0x%02x", code);
-               return;
-       }
+        printf("CHAP, %s (0x%02x)",
+               tok2str(chapcode_values,"unknown",code),
+               code);
        p++;
 
-       printf("(%u)", *p);             /* ID */
+       TCHECK(*p);
+       printf(", id %u", *p);          /* ID */
        p++;
 
+       TCHECK2(*p, 2);
        len = EXTRACT_16BITS(p);
        p += 2;
 
@@ -719,26 +834,37 @@ handle_chap(const u_char *p, int length)
        case CHAP_RESP:
                if (length - (p - p0) < 1)
                        return;
+               TCHECK(*p);
                val_size = *p;          /* value size */
                p++;
                if (length - (p - p0) < val_size)
                        return;
-               printf(", Value=");
-               for (i = 0; i < val_size; i++)
+               printf(", Value ");
+               for (i = 0; i < val_size; i++) {
+                       TCHECK(*p);
                        printf("%02x", *p++);
+               }
                name_size = len - (p - p0);
-               printf(", Name=");
-               for (i = 0; i < name_size; i++)
+               printf(", Name ");
+               for (i = 0; i < name_size; i++) {
+                       TCHECK(*p);
                        safeputchar(*p++);
+               }
                break;
        case CHAP_SUCC:
        case CHAP_FAIL:
                msg_size = len - (p - p0);
-               printf(", Msg=");
-               for (i = 0; i< msg_size; i++)
+               printf(", Msg ");
+               for (i = 0; i< msg_size; i++) {
+                       TCHECK(*p);
                        safeputchar(*p++);
+               }
                break;
        }
+       return;
+
+trunc:
+       printf("[|chap]");
 }
 
 /* PAP (see RFC 1334) */
@@ -755,66 +881,89 @@ handle_pap(const u_char *p, int length)
                printf("[|pap]");
                return;
        } else if (length < 4) {
+               TCHECK(*p);
                printf("[|pap 0x%02x]", *p);
                return;
        }
 
+       TCHECK(*p);
        code = *p;
-       if ((code >= PAP_CODEMIN) && (code <= PAP_CODEMAX))
-               printf("%s", papcode[code - 1]);
-       else {
-               printf("0x%02x", code);
-               return;
-       }
+        printf("PAP, %s (0x%02x)",
+               tok2str(papcode_values,"unknown",code),
+               code);
        p++;
 
-       printf("(%u)", *p);             /* ID */
+       TCHECK(*p);
+       printf(", id %u", *p);          /* ID */
        p++;
 
+       TCHECK2(*p, 2);
        len = EXTRACT_16BITS(p);
        p += 2;
 
+       if ((int)len > length) {
+               printf(", length %u > packet size", len);
+               return;
+       }
+       length = len;
+       if (length < (p - p0)) {
+               printf(", length %u < PAP header length", length);
+               return;
+       }
+
        switch (code) {
        case PAP_AREQ:
                if (length - (p - p0) < 1)
                        return;
+               TCHECK(*p);
                peerid_len = *p;        /* Peer-ID Length */
                p++;
                if (length - (p - p0) < peerid_len)
                        return;
-               printf(", Peer=");
-               for (i = 0; i < peerid_len; i++)
+               printf(", Peer ");
+               for (i = 0; i < peerid_len; i++) {
+                       TCHECK(*p);
                        safeputchar(*p++);
+               }
 
                if (length - (p - p0) < 1)
                        return;
+               TCHECK(*p);
                passwd_len = *p;        /* Password Length */
                p++;
                if (length - (p - p0) < passwd_len)
                        return;
-               printf(", Name=");
-               for (i = 0; i < passwd_len; i++)
+               printf(", Name ");
+               for (i = 0; i < passwd_len; i++) {
+                       TCHECK(*p);
                        safeputchar(*p++);
+               }
                break;
        case PAP_AACK:
        case PAP_ANAK:
                if (length - (p - p0) < 1)
                        return;
+               TCHECK(*p);
                msg_len = *p;           /* Msg-Length */
                p++;
                if (length - (p - p0) < msg_len)
                        return;
-               printf(", Msg=");
-               for (i = 0; i< msg_len; i++)
+               printf(", Msg ");
+               for (i = 0; i< msg_len; i++) {
+                       TCHECK(*p);
                        safeputchar(*p++);
+               }
                break;
        }
        return;
+
+trunc:
+       printf("[|pap]");
 }
 
 /* BAP */
 static void
-handle_bap(const u_char *p, int length)
+handle_bap(const u_char *p _U_, int length _U_)
 {
        /* XXX: to be supported!! */
 }
@@ -825,72 +974,185 @@ static int
 print_ipcp_config_options(const u_char *p, int length)
 {
        int len, opt;
+        u_int compproto, ipcomp_subopttotallen, ipcomp_subopt, ipcomp_suboptlen;
 
        if (length < 2)
                return 0;
+       TCHECK2(*p, 2);
        len = p[1];
        opt = p[0];
        if (length < len)
                return 0;
+       if (len < 2) {
+               printf("\n\t  %s Option (0x%02x), length %u (bogus, should be >= 2)",
+                      tok2str(ipcpopt_values,"unknown",opt),
+                      opt,
+                      len);
+               return 0;
+       }
+
+       printf("\n\t  %s Option (0x%02x), length %u: ",
+              tok2str(ipcpopt_values,"unknown",opt),
+              opt,
+               len);
+
        switch (opt) {
        case IPCPOPT_2ADDR:             /* deprecated */
                if (len != 10)
                        goto invlen;
-               printf(", IP-Addrs src=%s dst=%s",
+               TCHECK2(*(p + 6), 4);
+               printf("src %s, dst %s",
                       ipaddr_string(p + 2),
                       ipaddr_string(p + 6));
                break;
        case IPCPOPT_IPCOMP:
                if (len < 4)
                        goto invlen;
-               printf(", IP-Comp");
-               if (EXTRACT_16BITS(p + 2) == PPP_VJC) {
-                       printf(" VJ-Comp");
+               TCHECK2(*(p + 2), 2);
+                compproto = EXTRACT_16BITS(p+2);
+
+                printf("%s (0x%02x):",
+                       tok2str(ipcpopt_compproto_values,"Unknown",compproto),
+                       compproto);
+
+               switch (compproto) {
+                case PPP_VJC:
                        /* XXX: VJ-Comp parameters should be decoded */
-               } else
-                       printf(" unknown-comp-proto=%04x", EXTRACT_16BITS(p + 2));
-               break;
-       case IPCPOPT_ADDR:
-               if (len != 6)
-                       goto invlen;
-               printf(", IP-Addr=%s", ipaddr_string(p + 2));
+                        break;
+                case IPCPOPT_IPCOMP_HDRCOMP:
+                        if (len < IPCPOPT_IPCOMP_MINLEN)
+                                goto invlen;
+
+                        TCHECK2(*(p + 2), IPCPOPT_IPCOMP_MINLEN);
+                        printf("\n\t    TCP Space %u, non-TCP Space %u" \
+                               ", maxPeriod %u, maxTime %u, maxHdr %u",
+                               EXTRACT_16BITS(p+4),
+                               EXTRACT_16BITS(p+6),
+                               EXTRACT_16BITS(p+8),
+                               EXTRACT_16BITS(p+10),
+                               EXTRACT_16BITS(p+12));
+
+                        /* suboptions present ? */
+                        if (len > IPCPOPT_IPCOMP_MINLEN) {
+                                ipcomp_subopttotallen = len - IPCPOPT_IPCOMP_MINLEN;
+                                p += IPCPOPT_IPCOMP_MINLEN;
+
+                                printf("\n\t      Suboptions, length %u", ipcomp_subopttotallen);
+
+                                while (ipcomp_subopttotallen >= 2) {
+                                        TCHECK2(*p, 2);
+                                        ipcomp_subopt = *p;
+                                        ipcomp_suboptlen = *(p+1);
+
+                                        /* sanity check */
+                                        if (ipcomp_subopt == 0 ||
+                                            ipcomp_suboptlen == 0 )
+                                                break;
+
+                                        /* XXX: just display the suboptions for now */
+                                        printf("\n\t\t%s Suboption #%u, length %u",
+                                               tok2str(ipcpopt_compproto_subopt_values,
+                                                       "Unknown",
+                                                       ipcomp_subopt),
+                                               ipcomp_subopt,
+                                               ipcomp_suboptlen);
+
+                                        ipcomp_subopttotallen -= ipcomp_suboptlen;
+                                        p += ipcomp_suboptlen;
+                                }
+                        }
+                        break;
+                default:
+                        break;
+               }
                break;
+
+       case IPCPOPT_ADDR:     /* those options share the same format - fall through */
        case IPCPOPT_MOBILE4:
-               if (len != 6)
-                       goto invlen;
-               printf(", Home-Addr=%s", ipaddr_string(p + 2));
-               break;
        case IPCPOPT_PRIDNS:
-               if (len != 6)
-                       goto invlen;
-               printf(", Pri-DNS=%s", ipaddr_string(p + 2));
-               break;
        case IPCPOPT_PRINBNS:
-               if (len != 6)
-                       goto invlen;
-               printf(", Pri-NBNS=%s", ipaddr_string(p + 2));
-               break;
        case IPCPOPT_SECDNS:
+       case IPCPOPT_SECNBNS:
                if (len != 6)
                        goto invlen;
-               printf(", Sec-DNS=%s", ipaddr_string(p + 2));
+               TCHECK2(*(p + 2), 4);
+               printf("%s", ipaddr_string(p + 2));
                break;
-       case IPCPOPT_SECNBNS:
-               if (len != 6)
+       default:
+                if(vflag<2)
+                        print_unknown_data(gndo,&p[2],"\n\t    ",len-2);
+               break;
+       }
+        if (vflag>1)
+                print_unknown_data(gndo,&p[2],"\n\t    ",len-2); /* exclude TLV header */
+       return len;
+
+invlen:
+       printf(", invalid-length-%d", opt);
+       return 0;
+
+trunc:
+       printf("[|ipcp]");
+       return 0;
+}
+
+/* IP6CP config options */
+static int
+print_ip6cp_config_options(const u_char *p, int length)
+{
+       int len, opt;
+
+       if (length < 2)
+               return 0;
+       TCHECK2(*p, 2);
+       len = p[1];
+       opt = p[0];
+       if (length < len)
+               return 0;
+       if (len < 2) {
+               printf("\n\t  %s Option (0x%02x), length %u (bogus, should be >= 2)",
+                      tok2str(ip6cpopt_values,"unknown",opt),
+                      opt,
+                      len);
+               return 0;
+       }
+
+       printf("\n\t  %s Option (0x%02x), length %u: ",
+              tok2str(ip6cpopt_values,"unknown",opt),
+              opt,
+               len);
+
+       switch (opt) {
+       case IP6CP_IFID:
+               if (len != 10)
                        goto invlen;
-               printf(", Sec-NBNS=%s", ipaddr_string(p + 2));
+               TCHECK2(*(p + 2), 8);
+               printf("%04x:%04x:%04x:%04x",
+                      EXTRACT_16BITS(p + 2),
+                      EXTRACT_16BITS(p + 4),
+                      EXTRACT_16BITS(p + 6),
+                      EXTRACT_16BITS(p + 8));
                break;
        default:
-               printf(", unknown-%d", opt);
+                if(vflag<2)
+                        print_unknown_data(gndo,&p[2],"\n\t    ",len-2);
                break;
        }
+        if (vflag>1)
+                print_unknown_data(gndo,&p[2],"\n\t    ",len-2); /* exclude TLV header */
+
        return len;
 
 invlen:
        printf(", invalid-length-%d", opt);
        return 0;
+
+trunc:
+       printf("[|ip6cp]");
+       return 0;
 }
 
+
 /* CCP config options */
 static int
 print_ccp_config_options(const u_char *p, int length)
@@ -899,14 +1161,26 @@ print_ccp_config_options(const u_char *p, int length)
 
        if (length < 2)
                return 0;
+       TCHECK2(*p, 2);
        len = p[1];
        opt = p[0];
        if (length < len)
                return 0;
-       if ((opt >= CCPOPT_MIN) && (opt <= CCPOPT_MAX))
-               printf(", %s", ccpconfopts[opt]);
-#if 0  /* XXX */
+       if (len < 2) {
+               printf("\n\t  %s Option (0x%02x), length %u (bogus, should be >= 2)",
+                      tok2str(ccpconfopts_values, "Unknown", opt),
+                      opt,
+                      len);
+               return 0;
+        }
+
+        printf("\n\t  %s Option (0x%02x), length %u:",
+               tok2str(ccpconfopts_values, "Unknown", opt),
+               opt,
+               len);
+
        switch (opt) {
+                /* fall through --> default: nothing supported yet */
        case CCPOPT_OUI:
        case CCPOPT_PRED1:
        case CCPOPT_PRED2:
@@ -922,14 +1196,19 @@ print_ccp_config_options(const u_char *p, int length)
        case CCPOPT_DEC:
        case CCPOPT_DEFLATE:
        case CCPOPT_RESV:
-               break;
-
        default:
-               printf(", unknown-%d", opt);
+                if(vflag<2)
+                        print_unknown_data(gndo,&p[2],"\n\t    ",len-2);
                break;
        }
-#endif
+        if (vflag>1)
+                print_unknown_data(gndo,&p[2],"\n\t    ",len-2); /* exclude TLV header */
+
        return len;
+
+trunc:
+       printf("[|ccp]");
+       return 0;
 }
 
 /* BACP config options */
@@ -940,17 +1219,124 @@ print_bacp_config_options(const u_char *p, int length)
 
        if (length < 2)
                return 0;
+       TCHECK2(*p, 2);
        len = p[1];
        opt = p[0];
        if (length < len)
                return 0;
-       if (opt == BACPOPT_FPEER) {
-               printf(", Favored-Peer");
-               printf(" Magic-Num=%08x", EXTRACT_32BITS(p + 2));
-       } else {
-               printf(", unknown-option-%d", opt);
+       if (len < 2) {
+               printf("\n\t  %s Option (0x%02x), length %u (bogus, should be >= 2)",
+                      tok2str(bacconfopts_values, "Unknown", opt),
+                      opt,
+                      len);
+               return 0;
+        }
+
+        printf("\n\t  %s Option (0x%02x), length %u:",
+               tok2str(bacconfopts_values, "Unknown", opt),
+               opt,
+               len);
+
+       switch (opt) {
+       case BACPOPT_FPEER:
+               TCHECK2(*(p + 2), 4);
+               printf(", Magic-Num 0x%08x", EXTRACT_32BITS(p + 2));
+                break;
+       default:
+                if(vflag<2)
+                        print_unknown_data(gndo,&p[2],"\n\t    ",len-2);
+               break;
        }
+        if (vflag>1)
+                print_unknown_data(gndo,&p[2],"\n\t    ",len-2); /* exclude TLV header */
+
        return len;
+
+trunc:
+       printf("[|bacp]");
+       return 0;
+}
+
+
+static void
+ppp_hdlc(const u_char *p, int length)
+{
+       u_char *b, *s, *t, c;
+       int i, proto;
+       const void *se;
+
+        if (length <= 0)
+                return;
+
+       b = (u_int8_t *)malloc(length);
+       if (b == NULL)
+               return;
+
+       /*
+        * Unescape all the data into a temporary, private, buffer.
+        * Do this so that we dont overwrite the original packet
+        * contents.
+        */
+       for (s = (u_char *)p, t = b, i = length; i > 0; i--) {
+               c = *s++;
+               if (c == 0x7d) {
+                       if (i > 1) {
+                               i--;
+                               c = *s++ ^ 0x20;
+                       } else
+                               continue;
+               }
+               *t++ = c;
+       }
+
+       se = snapend;
+       snapend = t;
+       length = t - b;
+
+        /* now lets guess about the payload codepoint format */
+        if (length < 1)
+                goto trunc;
+        proto = *b; /* start with a one-octet codepoint guess */
+
+        switch (proto) {
+        case PPP_IP:
+               ip_print(gndo, b+1, length - 1);
+               goto cleanup;
+#ifdef INET6
+        case PPP_IPV6:
+               ip6_print(gndo, b+1, length - 1);
+               goto cleanup;
+#endif
+        default: /* no luck - try next guess */
+               break;
+        }
+
+        if (length < 2)
+                goto trunc;
+        proto = EXTRACT_16BITS(b); /* next guess - load two octets */
+
+        switch (proto) {
+        case (PPP_ADDRESS << 8 | PPP_CONTROL): /* looks like a PPP frame */
+            if (length < 4)
+                goto trunc;
+            proto = EXTRACT_16BITS(b+2); /* load the PPP proto-id */
+            handle_ppp(proto, b+4, length - 4);
+            break;
+        default: /* last guess - proto must be a PPP proto-id */
+            handle_ppp(proto, b+2, length - 2);
+            break;
+        }
+
+cleanup:
+        snapend = se;
+       free(b);
+        return;
+
+trunc:
+        snapend = se;
+       free(b);
+       printf("[|ppp]");
+       return;
 }
 
 
@@ -958,13 +1344,24 @@ print_bacp_config_options(const u_char *p, int length)
 static void
 handle_ppp(u_int proto, const u_char *p, int length)
 {
+        if ((proto & 0xff00) == 0x7e00) {/* is this an escape code ? */
+            ppp_hdlc(p-1, length);
+            return;
+        }
+
        switch (proto) {
-       case PPP_LCP:
+       case PPP_LCP: /* fall through */
        case PPP_IPCP:
+       case PPP_OSICP:
+       case PPP_MPLSCP:
+       case PPP_IPV6CP:
        case PPP_CCP:
        case PPP_BACP:
                handle_ctrl_proto(proto, p, length);
                break;
+        case PPP_ML:
+                handle_mlppp(p, length);
+                break;
        case PPP_CHAP:
                handle_chap(p, length);
                break;
@@ -975,27 +1372,44 @@ handle_ppp(u_int proto, const u_char *p, int length)
                handle_bap(p, length);
                break;
        case ETHERTYPE_IP:      /*XXX*/
+        case PPP_VJNC:
        case PPP_IP:
-               ip_print(p, length);
+               ip_print(gndo, p, length);
                break;
 #ifdef INET6
        case ETHERTYPE_IPV6:    /*XXX*/
        case PPP_IPV6:
-               ip6_print(p, length);
+               ip6_print(gndo, p, length);
                break;
 #endif
        case ETHERTYPE_IPX:     /*XXX*/
        case PPP_IPX:
                ipx_print(p, length);
                break;
+       case PPP_OSI:
+               isoclns_print(p, length, length);
+               break;
+       case PPP_MPLS_UCAST:
+       case PPP_MPLS_MCAST:
+               mpls_print(p, length);
+               break;
+       case PPP_COMP:
+               printf("compressed PPP data");
+               break;
+       default:
+               printf("%s ", tok2str(ppptype2str, "unknown PPP protocol (0x%04x)", proto));
+               print_unknown_data(gndo,p,"\n\t",length);
+               break;
        }
 }
 
 /* Standard PPP printer */
-void
+u_int
 ppp_print(register const u_char *p, u_int length)
 {
-       u_int proto;
+       u_int proto,ppp_header;
+        u_int olen = length; /* _o_riginal length */
+       u_int hdr_len = 0;
 
        /*
         * Here, we assume that p points to the Address and Control
@@ -1003,55 +1417,74 @@ ppp_print(register const u_char *p, u_int length)
         */
        if (length < 2)
                goto trunc;
-       if (*p == PPP_ADDRESS && *(p + 1) == PPP_CONTROL) {
-               p += 2;                 /* ACFC not used */
-               length -= 2;
-       }
+       TCHECK2(*p, 2);
+        ppp_header = EXTRACT_16BITS(p);
+
+        switch(ppp_header) {
+        case (PPP_WITHDIRECTION_IN  << 8 | PPP_CONTROL):
+            if (eflag) printf("In  ");
+            p += 2;
+            length -= 2;
+            hdr_len += 2;
+            break;
+        case (PPP_WITHDIRECTION_OUT << 8 | PPP_CONTROL):
+            if (eflag) printf("Out ");
+            p += 2;
+            length -= 2;
+            hdr_len += 2;
+            break;
+        case (PPP_ADDRESS << 8 | PPP_CONTROL):
+            p += 2;                    /* ACFC not used */
+            length -= 2;
+            hdr_len += 2;
+            break;
+
+        default:
+            break;
+        }
 
        if (length < 2)
                goto trunc;
+       TCHECK(*p);
        if (*p % 2) {
                proto = *p;             /* PFC is used */
                p++;
                length--;
+               hdr_len++;
        } else {
+               TCHECK2(*p, 2);
                proto = EXTRACT_16BITS(p);
                p += 2;
                length -= 2;
+               hdr_len += 2;
        }
 
-       printf("%s: ", ppp_protoname(proto));
+        if (eflag)
+            printf("%s (0x%04x), length %u: ",
+                   tok2str(ppptype2str, "unknown", proto),
+                   proto,
+                   olen);
 
        handle_ppp(proto, p, length);
-       return;
+       return (hdr_len);
 trunc:
        printf("[|ppp]");
+       return (0);
 }
 
 
 /* PPP I/F printer */
-void
-ppp_if_print(u_char *user, const struct pcap_pkthdr *h,
-            register const u_char *p)
+u_int
+ppp_if_print(const struct pcap_pkthdr *h, register const u_char *p)
 {
        register u_int length = h->len;
        register u_int caplen = h->caplen;
 
-       ts_print(&h->ts);
-
        if (caplen < PPP_HDRLEN) {
                printf("[|ppp]");
-               goto out;
+               return (caplen);
        }
 
-       /*
-        * Some printers want to get back at the link level addresses,
-        * and/or check that they're not walking off the end of the packet.
-        * Rather than pass them all the way down, we set these globals.  */
-
-       packetp = p;
-       snapend = p + caplen;
-
 #if 0
        /*
         * XXX: seems to assume that there are 2 octets prepended to an
@@ -1095,10 +1528,7 @@ ppp_if_print(u_char *user, const struct pcap_pkthdr *h,
 
        ppp_print(p, length);
 
-       if (xflag)
-               default_print(p, caplen);
-out:
-       putchar('\n');
+       return (0);
 }
 
 /*
@@ -1110,63 +1540,52 @@ out:
  *
  * This handles, for example, DLT_PPP_SERIAL in NetBSD.
  */
-void
-ppp_hdlc_if_print(u_char *user, const struct pcap_pkthdr *h,
-            register const u_char *p)
+u_int
+ppp_hdlc_if_print(const struct pcap_pkthdr *h, register const u_char *p)
 {
        register u_int length = h->len;
        register u_int caplen = h->caplen;
        u_int proto;
+       u_int hdrlen = 0;
 
        if (caplen < 2) {
                printf("[|ppp]");
-               goto out;
+               return (caplen);
        }
 
-       /*
-        * Some printers want to get back at the link level addresses,
-        * and/or check that they're not walking off the end of the packet.
-        * Rather than pass them all the way down, we set these globals.
-        */
-       packetp = p;
-       snapend = p + caplen;
-
        switch (p[0]) {
 
        case PPP_ADDRESS:
                if (caplen < 4) {
                        printf("[|ppp]");
-                       goto out;
+                       return (caplen);
                }
 
-               ts_print(&h->ts);
                if (eflag)
                        printf("%02x %02x %d ", p[0], p[1], length);
                p += 2;
                length -= 2;
+               hdrlen += 2;
 
                proto = EXTRACT_16BITS(p);
                p += 2;
                length -= 2;
-               printf("%s: ", ppp_protoname(proto));
+               hdrlen += 2;
+               printf("%s: ", tok2str(ppptype2str, "unknown PPP protocol (0x%04x)", proto));
 
                handle_ppp(proto, p, length);
                break;
 
        case CHDLC_UNICAST:
        case CHDLC_BCAST:
-               /*
-                * Have the Cisco HDLC print routine do all the work.
-                */
-               chdlc_if_print(user, h, p);
-               return;
+               return (chdlc_if_print(h, p));
 
        default:
-               ts_print(&h->ts);
                if (eflag)
                        printf("%02x %02x %d ", p[0], p[1], length);
                p += 2;
                length -= 2;
+               hdrlen += 2;
 
                /*
                 * XXX - NetBSD's "ppp_netbsd_serial_if_print()" treats
@@ -1177,78 +1596,28 @@ ppp_hdlc_if_print(u_char *user, const struct pcap_pkthdr *h,
                break;
        }
 
-       if (xflag)
-               default_print(p, caplen);
-out:
-       putchar('\n');
+       return (hdrlen);
 }
 
-
-
-struct tok ppptype2str[] = {
-       { PPP_IP,       "IP" },
-       { PPP_OSI,      "OSI" },
-       { PPP_NS,       "NS" },
-       { PPP_DECNET,   "DECNET" },
-       { PPP_APPLE,    "APPLE" },
-       { PPP_IPX,      "IPX" },
-       { PPP_VJC,      "VJC" },
-       { PPP_VJNC,     "VJNC" },
-       { PPP_BRPDU,    "BRPDU" },
-       { PPP_STII,     "STII" },
-       { PPP_VINES,    "VINES" },
-
-       { PPP_HELLO,    "HELLO" },
-       { PPP_LUXCOM,   "LUXCOM" },
-       { PPP_SNS,      "SNS" },
-       { PPP_IPCP,     "IPCP" },
-       { PPP_OSICP,    "OSICP" },
-       { PPP_NSCP,     "NSCP" },
-       { PPP_DECNETCP, "DECNETCP" },
-       { PPP_APPLECP,  "APPLECP" },
-       { PPP_IPXCP,    "IPXCP" },
-       { PPP_STIICP,   "STIICP" },
-       { PPP_VINESCP,  "VINESCP" },
-
-       { PPP_LCP,      "LCP" },
-       { PPP_PAP,      "PAP" },
-       { PPP_LQM,      "LQM" },
-       { PPP_CHAP,     "CHAP" },
-       { PPP_BACP,     "BACP" },
-       { PPP_BAP,      "BAP" },
-       { PPP_MP,       "MP" },
-       { 0,            NULL }
-};
-
 #define PPP_BSDI_HDRLEN 24
 
 /* BSD/OS specific PPP printer */
-void
-ppp_bsdos_if_print(u_char *user, const struct pcap_pkthdr *h,
-            register const u_char *p)
+u_int
+ppp_bsdos_if_print(const struct pcap_pkthdr *h _U_, register const u_char *p _U_)
 {
+       register int hdrlength;
 #ifdef __bsdi__
        register u_int length = h->len;
        register u_int caplen = h->caplen;
-       register int hdrlength;
        u_int16_t ptype;
        const u_char *q;
        int i;
 
-       ts_print(&h->ts);
-
        if (caplen < PPP_BSDI_HDRLEN) {
                printf("[|ppp]");
-               goto out;
+               return (caplen)
        }
 
-       /*
-        * Some printers want to get back at the link level addresses,
-        * and/or check that they're not walking off the end of the packet.
-        * Rather than pass them all the way down, we set these globals.
-        */
-       packetp = p;
-       snapend = p + caplen;
        hdrlength = 0;
 
 #if 0
@@ -1271,7 +1640,7 @@ ppp_bsdos_if_print(u_char *user, const struct pcap_pkthdr *h,
                hdrlength += 1;
        } else {
                /* Un-compressed protocol field */
-               ptype = ntohs(*(u_int16_t *)p);
+               ptype = EXTRACT_16BITS(p);
                if (eflag)
                        printf("%04x ", ptype);
                p += 2;
@@ -1291,7 +1660,7 @@ ppp_bsdos_if_print(u_char *user, const struct pcap_pkthdr *h,
                 && ph->phdr_ctl == PPP_CONTROL) {
                        if (eflag)
                                printf("%02x %02x ", q[0], q[1]);
-                       ptype = ntohs(ph->phdr_type);
+                       ptype = EXTRACT_16BITS(&ph->phdr_type);
                        if (eflag && (ptype == PPP_VJC || ptype == PPP_VJNC)) {
                                printf("%s ", tok2str(ppptype2str,
                                                "proto-#%d", ptype));
@@ -1304,41 +1673,49 @@ ppp_bsdos_if_print(u_char *user, const struct pcap_pkthdr *h,
                                printf("] ");
                        }
                }
-               if (eflag)
-                       printf("%d ", length);
        }
+       if (eflag)
+               printf("%d ", length);
        if (p[SLC_CHL]) {
                q = p + SLC_BPFHDRLEN + p[SLC_LLHL];
 
                switch (ptype) {
                case PPP_VJC:
-                       ptype = vjc_print(q, length - (q - p), ptype);
+                       ptype = vjc_print(q, ptype);
                        hdrlength = PPP_BSDI_HDRLEN;
                        p += hdrlength;
                        switch (ptype) {
                        case PPP_IP:
-                               ip_print(p, length);
+                               ip_print(gndo, p, length);
                                break;
 #ifdef INET6
                        case PPP_IPV6:
-                               ip6_print(p, length);
+                               ip6_print(gndo, p, length);
                                break;
 #endif
+                       case PPP_MPLS_UCAST:
+                       case PPP_MPLS_MCAST:
+                               mpls_print(p, length);
+                               break;
                        }
                        goto printx;
                case PPP_VJNC:
-                       ptype = vjc_print(q, length - (q - p), ptype);
+                       ptype = vjc_print(q, ptype);
                        hdrlength = PPP_BSDI_HDRLEN;
                        p += hdrlength;
                        switch (ptype) {
                        case PPP_IP:
-                               ip_print(p, length);
+                               ip_print(gndo, p, length);
                                break;
 #ifdef INET6
                        case PPP_IPV6:
-                               ip6_print(p, length);
+                               ip6_print(gndo, p, length);
                                break;
 #endif
+                       case PPP_MPLS_UCAST:
+                       case PPP_MPLS_MCAST:
+                               mpls_print(p, length);
+                               break;
                        }
                        goto printx;
                default:
@@ -1364,17 +1741,28 @@ ppp_bsdos_if_print(u_char *user, const struct pcap_pkthdr *h,
                break;
 #ifdef INET6
        case PPP_IPV6:
-               ip6_print(p, length);
+               ip6_print(gndo, p, length);
                break;
 #endif
+        case PPP_MPLS_UCAST:
+        case PPP_MPLS_MCAST:
+                mpls_print(gndo, p, length);
+                break;
        default:
-               printf("%s ", tok2str(ppptype2str, "proto-#%d", ptype));
+               printf("%s ", tok2str(ppptype2str, "unknown PPP protocol (0x%04x)", ptype));
        }
 
 printx:
-       if (xflag)
-               default_print((const u_char *)p, caplen - hdrlength);
-out:
-       putchar('\n');
+#else /* __bsdi */
+       hdrlength = 0;
 #endif /* __bsdi__ */
+       return (hdrlength);
 }
+
+
+/*
+ * Local Variables:
+ * c-style: whitesmith
+ * c-basic-offset: 8
+ * End:
+ */