Makefile.in: don't remove configure and config.h.in in make distclean.

[tcpdump] / print-syslog.c

diff --git a/print-syslog.c b/print-syslog.c
index ede1d6baf07009042c4f743c1ee0727d7a423453..916a2f200c82523f1ffb4fd6416eadc9a64590fc 100644 (file)
--- a/print-syslog.c
+++ b/print-syslog.c
@@ -15,6 +15,7 @@
  */
 
 /* \summary: Syslog protocol printer */
  */
 
 /* \summary: Syslog protocol printer */

+/* specification: RFC 3164 (not RFC 5424) */

 
 #ifdef HAVE_CONFIG_H
 #include <config.h>
 
 #ifdef HAVE_CONFIG_H
 #include <config.h>


@@ -90,27 +91,21 @@ syslog_print(netdissect_options *ndo,
      * severity and facility values
      */
 
      * severity and facility values
      */
 

-    ND_TCHECK_1(pptr);
-    if (GET_U_1(pptr + msg_off) == '<') {
-        msg_off++;
-        ND_TCHECK_1(pptr + msg_off);
-        while (msg_off <= SYSLOG_MAX_DIGITS &&
-               GET_U_1(pptr + msg_off) >= '0' &&
-               GET_U_1(pptr + msg_off) <= '9') {
-            pri = pri * 10 + (GET_U_1(pptr + msg_off) - '0');
-            msg_off++;
-            ND_TCHECK_1(pptr + msg_off);
-        }
-        if (GET_U_1(pptr + msg_off) != '>') {
-            nd_print_trunc(ndo);
-            return;
-        }
+    if (GET_U_1(pptr) != '<')
+        goto invalid;
+    msg_off++;
+
+    while (msg_off <= SYSLOG_MAX_DIGITS &&
+           GET_U_1(pptr + msg_off) >= '0' &&
+           GET_U_1(pptr + msg_off) <= '9') {
+        pri = pri * 10 + (GET_U_1(pptr + msg_off) - '0');

         msg_off++;
         msg_off++;

-    } else {
-        nd_print_trunc(ndo);
-        return;

     }
 
     }
 

+    if (GET_U_1(pptr + msg_off) != '>')
+        goto invalid;
+    msg_off++;
+

     facility = (pri & SYSLOG_FACILITY_MASK) >> 3;
     severity = pri & SYSLOG_SEVERITY_MASK;
 
     facility = (pri & SYSLOG_FACILITY_MASK) >> 3;
     severity = pri & SYSLOG_SEVERITY_MASK;
 


@@ -131,16 +126,25 @@ syslog_print(netdissect_options *ndo,
            severity);
 
     /* print the syslog text in verbose mode */
            severity);
 
     /* print the syslog text in verbose mode */

-    for (; msg_off < len; msg_off++) {
-        ND_TCHECK_1(pptr + msg_off);
-        fn_print_char(ndo, GET_U_1(pptr + msg_off));
-    }
+    /*
+     * RFC 3164 Section 4.1.3: "There is no ending delimiter to this part.
+     * The MSG part of the syslog packet MUST contain visible (printing)
+     * characters."
+     *
+     * RFC 5424 Section 8.2: "This document does not impose any mandatory
+     * restrictions on the MSG or PARAM-VALUE content.  As such, they MAY
+     * contain control characters, including the NUL character."
+     *
+     * Hence, to aid in protocol debugging, print the full MSG without
+     * beautification to make it clear what was transmitted on the wire.
+     */
+    if (len > msg_off)
+        nd_printjn(ndo, pptr + msg_off, len - msg_off);

 
     if (ndo->ndo_vflag > 1)
         print_unknown_data(ndo, pptr, "\n\t", len);
 
     if (ndo->ndo_vflag > 1)
         print_unknown_data(ndo, pptr, "\n\t", len);

-

     return;
 
     return;
 

-trunc:
-    nd_print_trunc(ndo);
+invalid:
+    nd_print_invalid(ndo);

 }
 }