/* \summary: Syslog protocol printer */
#ifdef HAVE_CONFIG_H
-#include "config.h"
+#include <config.h>
#endif
-#include <netdissect-stdinc.h>
+#include "netdissect-stdinc.h"
#include "netdissect.h"
#include "extract.h"
-static const char tstr[] = "[|syslog]";
/*
* tokenlists and #defines taken from Ethereal - Network traffic analyzer
#define SYSLOG_SEVERITY_MASK 0x0007 /* 0000 0000 0000 0111 */
#define SYSLOG_FACILITY_MASK 0x03f8 /* 0000 0011 1111 1000 */
-#define SYSLOG_MAX_DIGITS 3 /* The maximum number if priority digits to read in. */
+#define SYSLOG_MAX_DIGITS 3 /* The maximum number of priority digits to read in. */
static const struct tok syslog_severity_values[] = {
{ 0, "emergency" },
void
syslog_print(netdissect_options *ndo,
- register const u_char *pptr, register u_int len)
+ const u_char *pptr, u_int len)
{
uint16_t msg_off = 0;
uint16_t pri = 0;
uint16_t facility,severity;
+ ndo->ndo_protocol = "syslog";
/* extract decimal figures that are
* encapsulated within < > tags
* based on this decimal figure extract the
*/
ND_TCHECK_1(pptr);
- if (*(pptr+msg_off) == '<') {
+ if (GET_U_1(pptr + msg_off) == '<') {
msg_off++;
ND_TCHECK_1(pptr + msg_off);
while (msg_off <= SYSLOG_MAX_DIGITS &&
- EXTRACT_U_1(pptr + msg_off) >= '0' &&
- EXTRACT_U_1(pptr + msg_off) <= '9') {
- pri = pri * 10 + (*(pptr+msg_off) - '0');
+ GET_U_1(pptr + msg_off) >= '0' &&
+ GET_U_1(pptr + msg_off) <= '9') {
+ pri = pri * 10 + (GET_U_1(pptr + msg_off) - '0');
msg_off++;
ND_TCHECK_1(pptr + msg_off);
}
- if (*(pptr+msg_off) != '>') {
- ND_PRINT((ndo, "%s", tstr));
+ if (GET_U_1(pptr + msg_off) != '>') {
+ nd_print_trunc(ndo);
return;
}
msg_off++;
} else {
- ND_PRINT((ndo, "%s", tstr));
+ nd_print_trunc(ndo);
return;
}
if (ndo->ndo_vflag < 1 )
{
- ND_PRINT((ndo, "SYSLOG %s.%s, length: %u",
+ ND_PRINT("SYSLOG %s.%s, length: %u",
tok2str(syslog_facility_values, "unknown (%u)", facility),
tok2str(syslog_severity_values, "unknown (%u)", severity),
- len));
+ len);
return;
}
- ND_PRINT((ndo, "SYSLOG, length: %u\n\tFacility %s (%u), Severity %s (%u)\n\tMsg: ",
+ ND_PRINT("SYSLOG, length: %u\n\tFacility %s (%u), Severity %s (%u)\n\tMsg: ",
len,
tok2str(syslog_facility_values, "unknown (%u)", facility),
facility,
tok2str(syslog_severity_values, "unknown (%u)", severity),
- severity));
+ severity);
/* print the syslog text in verbose mode */
for (; msg_off < len; msg_off++) {
ND_TCHECK_1(pptr + msg_off);
- safeputchar(ndo, EXTRACT_U_1(pptr + msg_off));
+ fn_print_char(ndo, GET_U_1(pptr + msg_off));
}
if (ndo->ndo_vflag > 1)
return;
trunc:
- ND_PRINT((ndo, "%s", tstr));
+ nd_print_trunc(ndo);
}