]> The Tcpdump Group git mirrors - tcpdump/blobdiff - print-domain.c
Add program_name field in the netdissect_options structure
[tcpdump] / print-domain.c
index 70d06b42d37481f70cd76532c72deb94d9125d07..15974bfa45e177a8348940f4e94ad987050c5518 100644 (file)
  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
  */
 
-#ifndef lint
-static const char rcsid[] =
-    "@(#) $Header: /tcpdump/master/tcpdump/print-domain.c,v 1.66 2001-01-28 07:47:56 itojun Exp $ (LBL)";
-#endif
-
 #ifdef HAVE_CONFIG_H
 #include "config.h"
 #endif
 
-#include <sys/param.h>
-#include <sys/time.h>
+#include <tcpdump-stdinc.h>
 
-#include <netinet/in.h>
-
-#ifdef NOERROR
-#undef NOERROR                                 /* Solaris sucks */
-#endif
-#ifdef NOERROR
-#undef T_UNSPEC                                        /* SINIX does too */
-#endif
 #include "nameser.h"
 
-#include <stdio.h>
 #include <string.h>
 
-#include "interface.h"
+#include "netdissect.h"
 #include "addrtoname.h"
-#include "extract.h"                    /* must come after interface.h */
+#include "extract.h"
 
-static char *ns_ops[] = {
-       "", " inv_q", " stat", " op3", " notify", " op5", " op6", " op7",
-       " op8", " updataA", " updateD", " updateDA",
+static const char *ns_ops[] = {
+       "", " inv_q", " stat", " op3", " notify", " update", " op6", " op7",
+       " op8", " updateA", " updateD", " updateDA",
        " updateM", " updateMA", " zoneInit", " zoneRef",
 };
 
-static char *ns_resp[] = {
+static const char *ns_resp[] = {
        "", " FormErr", " ServFail", " NXDomain",
-       " NotImp", " Refused", " Resp6", " Resp7",
-       " Resp8", " Resp9", " Resp10", " Resp11",
+       " NotImp", " Refused", " YXDomain", " YXRRSet",
+       " NXRRSet", " NotAuth", " NotZone", " Resp11",
        " Resp12", " Resp13", " Resp14", " NoChange",
 };
 
 /* skip over a domain name */
 static const u_char *
-ns_nskip(register const u_char *cp, register const u_char *bp)
+ns_nskip(netdissect_options *ndo,
+         register const u_char *cp)
 {
        register u_char i;
 
-       if (((i = *cp++) & INDIR_MASK) == INDIR_MASK)
-               return (cp + 1);
-       if (cp >= snapend)
-               return(NULL);
-       while (i && cp < snapend) {
+       if (!ND_TTEST2(*cp, 1))
+               return (NULL);
+       i = *cp++;
+       while (i) {
+               if ((i & INDIR_MASK) == INDIR_MASK)
+                       return (cp + 1);
                if ((i & INDIR_MASK) == EDNS0_MASK) {
                        int bitlen, bytelen;
 
                        if ((i & ~INDIR_MASK) != EDNS0_ELT_BITLABEL)
                                return(NULL); /* unknown ELT */
+                       if (!ND_TTEST2(*cp, 1))
+                               return (NULL);
                        if ((bitlen = *cp++) == 0)
                                bitlen = 256;
                        bytelen = (bitlen + 7) / 8;
                        cp += bytelen;
                } else
                        cp += i;
-               if (cp >= snapend)
-                       return(NULL);
+               if (!ND_TTEST2(*cp, 1))
+                       return (NULL);
                i = *cp++;
        }
        return (cp);
@@ -92,55 +81,58 @@ ns_nskip(register const u_char *cp, register const u_char *bp)
 
 /* print a <domain-name> */
 static const u_char *
-blabel_print(const u_char *cp)
+blabel_print(netdissect_options *ndo,
+             const u_char *cp)
 {
        int bitlen, slen, b;
-       int truncated = 0;
        const u_char *bitp, *lim;
        char tc;
 
-       if (cp >= snapend)
+       if (!ND_TTEST2(*cp, 1))
                return(NULL);
        if ((bitlen = *cp) == 0)
                bitlen = 256;
        slen = (bitlen + 3) / 4;
-       if ((lim = cp + 1 + slen) > snapend) {
-               truncated = 1;
-               lim = snapend;
-       }
+       lim = cp + 1 + slen;
 
        /* print the bit string as a hex string */
-       printf("\\[x");
-       for (bitp = cp + 1, b = bitlen; bitp < lim && b > 7; b -= 8, bitp++)
-               printf("%02x", *bitp);
-       if (bitp == lim)
-               printf("...");
-       else if (b > 4) {
+       ND_PRINT((ndo, "\\[x"));
+       for (bitp = cp + 1, b = bitlen; bitp < lim && b > 7; b -= 8, bitp++) {
+               ND_TCHECK(*bitp);
+               ND_PRINT((ndo, "%02x", *bitp));
+       }
+       if (b > 4) {
+               ND_TCHECK(*bitp);
                tc = *bitp++;
-               printf("%02x", tc & (0xff << (8 - b)));
+               ND_PRINT((ndo, "%02x", tc & (0xff << (8 - b))));
        } else if (b > 0) {
+               ND_TCHECK(*bitp);
                tc = *bitp++;
-               printf("%1x", ((tc >> 4) & 0x0f) & (0x0f << (4 - b)));
+               ND_PRINT((ndo, "%1x", ((tc >> 4) & 0x0f) & (0x0f << (4 - b))));
        }
-       printf("/%d]", bitlen);
-
-       return(truncated ? NULL : lim);
+       ND_PRINT((ndo, "/%d]", bitlen));
+       return lim;
+trunc:
+       ND_PRINT((ndo, ".../%d]", bitlen));
+       return NULL;
 }
 
 static int
-labellen(const u_char *cp)
+labellen(netdissect_options *ndo,
+         const u_char *cp)
 {
        register u_int i;
 
-       if (cp >= snapend)
+       if (!ND_TTEST2(*cp, 1))
                return(-1);
        i = *cp;
        if ((i & INDIR_MASK) == EDNS0_MASK) {
                int bitlen, elt;
-
-               if ((elt = (i & ~INDIR_MASK)) != EDNS0_ELT_BITLABEL)
+               if ((elt = (i & ~INDIR_MASK)) != EDNS0_ELT_BITLABEL) {
+                       ND_PRINT((ndo, "<ELT %d>", elt));
                        return(-1);
-               if (cp + 1 >= snapend)
+               }
+               if (!ND_TTEST2(*(cp + 1), 1))
                        return(-1);
                if ((bitlen = *(cp + 1)) == 0)
                        bitlen = 256;
@@ -149,19 +141,20 @@ labellen(const u_char *cp)
                return(i);
 }
 
-static const u_char *
-ns_nprint(register const u_char *cp, register const u_char *bp)
+const u_char *
+ns_nprint(netdissect_options *ndo,
+          register const u_char *cp, register const u_char *bp)
 {
        register u_int i, l;
        register const u_char *rp = NULL;
        register int compress = 0;
        int chars_processed;
        int elt;
-       int data_size = snapend - bp;
+       int data_size = ndo->ndo_snapend - bp;
 
-       if ((l = labellen(cp)) < 0)
+       if ((l = labellen(ndo, cp)) == (u_int)-1)
                return(NULL);
-       if (cp >= snapend)
+       if (!ND_TTEST2(*cp, 1))
                return(NULL);
        chars_processed = 1;
        if (((i = *cp++) & INDIR_MASK) != INDIR_MASK) {
@@ -170,16 +163,18 @@ ns_nprint(register const u_char *cp, register const u_char *bp)
        }
 
        if (i != 0)
-               while (i && cp < snapend) {
+               while (i && cp < ndo->ndo_snapend) {
                        if ((i & INDIR_MASK) == INDIR_MASK) {
                                if (!compress) {
                                        rp = cp + 1;
                                        compress = 1;
                                }
+                               if (!ND_TTEST2(*cp, 1))
+                                       return(NULL);
                                cp = bp + (((i << 8) | *cp) & 0x3fff);
-                               if (cp >= snapend)
+                               if ((l = labellen(ndo, cp)) == (u_int)-1)
                                        return(NULL);
-                               if ((l = labellen(cp)) < 0)
+                               if (!ND_TTEST2(*cp, 1))
                                        return(NULL);
                                i = *cp++;
                                chars_processed++;
@@ -191,7 +186,7 @@ ns_nprint(register const u_char *cp, register const u_char *bp)
                                 * which means we're looping.
                                 */
                                if (chars_processed >= data_size) {
-                                       printf("<LOOP>");
+                                       ND_PRINT((ndo, "<LOOP>"));
                                        return (NULL);
                                }
                                continue;
@@ -200,22 +195,25 @@ ns_nprint(register const u_char *cp, register const u_char *bp)
                                elt = (i & ~INDIR_MASK);
                                switch(elt) {
                                case EDNS0_ELT_BITLABEL:
-                                       blabel_print(cp);
+                                       if (blabel_print(ndo, cp) == NULL)
+                                               return (NULL);
                                        break;
                                default:
                                        /* unknown ELT */
-                                       printf("<ELT %d>", elt);
+                                       ND_PRINT((ndo, "<ELT %d>", elt));
                                        return(NULL);
                                }
                        } else {
-                               if (fn_printn(cp, l, snapend))
-                                       break;
+                               if (fn_printn(ndo, cp, l, ndo->ndo_snapend))
+                                       return(NULL);
                        }
 
                        cp += l;
                        chars_processed += l;
-                       putchar('.');
-                       if (cp >= snapend || (l = labellen(cp)) < 0)
+                       ND_PRINT((ndo, "."));
+                       if ((l = labellen(ndo, cp)) == (u_int)-1)
+                               return(NULL);
+                       if (!ND_TTEST2(*cp, 1))
                                return(NULL);
                        i = *cp++;
                        chars_processed++;
@@ -223,77 +221,94 @@ ns_nprint(register const u_char *cp, register const u_char *bp)
                                rp += l + 1;
                }
        else
-               putchar('.');
+               ND_PRINT((ndo, "."));
        return (rp);
 }
 
 /* print a <character-string> */
 static const u_char *
-ns_cprint(register const u_char *cp, register const u_char *bp)
+ns_cprint(netdissect_options *ndo,
+          register const u_char *cp)
 {
        register u_int i;
 
-       if (cp >= snapend)
-               return NULL;
+       if (!ND_TTEST2(*cp, 1))
+               return (NULL);
        i = *cp++;
-       (void)fn_printn(cp, i, snapend);
+       if (fn_printn(ndo, cp, i, ndo->ndo_snapend))
+               return (NULL);
        return (cp + i);
 }
 
-static struct tok type2str[] = {
-       { T_A,          "A" },
-       { T_NS,         "NS" },
-       { T_MD,         "MD" },
-       { T_MF,         "MF" },
-       { T_CNAME,      "CNAME" },
-       { T_SOA,        "SOA" },
-       { T_MB,         "MB" },
-       { T_MG,         "MG" },
-       { T_MR,         "MR" },
-       { T_NULL,       "NULL" },
-       { T_WKS,        "WKS" },
-       { T_PTR,        "PTR" },
-       { T_HINFO,      "HINFO" },
-       { T_MINFO,      "MINFO" },
-       { T_MX,         "MX" },
-       { T_TXT,        "TXT" },
-       { T_RP,         "RP" },
-       { T_AFSDB,      "AFSDB" },
-       { T_X25,        "X25" },
-       { T_ISDN,       "ISDN" },
-       { T_RT,         "RT" },
-       { T_NSAP,       "NSAP" },
+/* http://www.iana.org/assignments/dns-parameters */
+const struct tok ns_type2str[] = {
+       { T_A,          "A" },                  /* RFC 1035 */
+       { T_NS,         "NS" },                 /* RFC 1035 */
+       { T_MD,         "MD" },                 /* RFC 1035 */
+       { T_MF,         "MF" },                 /* RFC 1035 */
+       { T_CNAME,      "CNAME" },              /* RFC 1035 */
+       { T_SOA,        "SOA" },                /* RFC 1035 */
+       { T_MB,         "MB" },                 /* RFC 1035 */
+       { T_MG,         "MG" },                 /* RFC 1035 */
+       { T_MR,         "MR" },                 /* RFC 1035 */
+       { T_NULL,       "NULL" },               /* RFC 1035 */
+       { T_WKS,        "WKS" },                /* RFC 1035 */
+       { T_PTR,        "PTR" },                /* RFC 1035 */
+       { T_HINFO,      "HINFO" },              /* RFC 1035 */
+       { T_MINFO,      "MINFO" },              /* RFC 1035 */
+       { T_MX,         "MX" },                 /* RFC 1035 */
+       { T_TXT,        "TXT" },                /* RFC 1035 */
+       { T_RP,         "RP" },                 /* RFC 1183 */
+       { T_AFSDB,      "AFSDB" },              /* RFC 1183 */
+       { T_X25,        "X25" },                /* RFC 1183 */
+       { T_ISDN,       "ISDN" },               /* RFC 1183 */
+       { T_RT,         "RT" },                 /* RFC 1183 */
+       { T_NSAP,       "NSAP" },               /* RFC 1706 */
        { T_NSAP_PTR,   "NSAP_PTR" },
-       { T_SIG,        "SIG" },
-       { T_KEY,        "KEY" },
-       { T_PX,         "PX" },
-       { T_GPOS,       "GPOS" },
-       { T_AAAA,       "AAAA" },
-       { T_LOC,        "LOC " },
-       { T_NXT,        "NXT " },
-       { T_EID,        "EID " },
-       { T_NIMLOC,     "NIMLOC " },
-       { T_SRV,        "SRV " },
-       { T_ATMA,       "ATMA " },
-       { T_NAPTR,      "NAPTR " },
-       { T_A6,         "A6 " },
-       { T_DNAME,      "DNAME " },
-       { T_OPT,        "OPT " },
+       { T_SIG,        "SIG" },                /* RFC 2535 */
+       { T_KEY,        "KEY" },                /* RFC 2535 */
+       { T_PX,         "PX" },                 /* RFC 2163 */
+       { T_GPOS,       "GPOS" },               /* RFC 1712 */
+       { T_AAAA,       "AAAA" },               /* RFC 1886 */
+       { T_LOC,        "LOC" },                /* RFC 1876 */
+       { T_NXT,        "NXT" },                /* RFC 2535 */
+       { T_EID,        "EID" },                /* Nimrod */
+       { T_NIMLOC,     "NIMLOC" },             /* Nimrod */
+       { T_SRV,        "SRV" },                /* RFC 2782 */
+       { T_ATMA,       "ATMA" },               /* ATM Forum */
+       { T_NAPTR,      "NAPTR" },              /* RFC 2168, RFC 2915 */
+       { T_KX,         "KX" },                 /* RFC 2230 */
+       { T_CERT,       "CERT" },               /* RFC 2538 */
+       { T_A6,         "A6" },                 /* RFC 2874 */
+       { T_DNAME,      "DNAME" },              /* RFC 2672 */
+       { T_SINK,       "SINK" },
+       { T_OPT,        "OPT" },                /* RFC 2671 */
+       { T_APL,        "APL" },                /* RFC 3123 */
+       { T_DS,         "DS" },                 /* RFC 4034 */
+       { T_SSHFP,      "SSHFP" },              /* RFC 4255 */
+       { T_IPSECKEY,   "IPSECKEY" },           /* RFC 4025 */
+       { T_RRSIG,      "RRSIG" },              /* RFC 4034 */
+       { T_NSEC,       "NSEC" },               /* RFC 4034 */
+       { T_DNSKEY,     "DNSKEY" },             /* RFC 4034 */
+       { T_SPF,        "SPF" },                /* RFC-schlitt-spf-classic-02.txt */
        { T_UINFO,      "UINFO" },
        { T_UID,        "UID" },
        { T_GID,        "GID" },
        { T_UNSPEC,     "UNSPEC" },
        { T_UNSPECA,    "UNSPECA" },
-       { T_AXFR,       "AXFR" },
-       { T_MAILB,      "MAILB" },
-       { T_MAILA,      "MAILA" },
+       { T_TKEY,       "TKEY" },               /* RFC 2930 */
+       { T_TSIG,       "TSIG" },               /* RFC 2845 */
+       { T_IXFR,       "IXFR" },               /* RFC 1995 */
+       { T_AXFR,       "AXFR" },               /* RFC 1035 */
+       { T_MAILB,      "MAILB" },              /* RFC 1035 */
+       { T_MAILA,      "MAILA" },              /* RFC 1035 */
        { T_ANY,        "ANY" },
        { 0,            NULL }
 };
 
-static struct tok class2str[] = {
+const struct tok ns_class2str[] = {
        { C_IN,         "IN" },         /* Not used */
-       { C_CHAOS,      "CHAOS)" },
+       { C_CHAOS,      "CHAOS" },
        { C_HS,         "HS" },
        { C_ANY,        "ANY" },
        { 0,            NULL }
@@ -301,73 +316,106 @@ static struct tok class2str[] = {
 
 /* print a query */
 static const u_char *
-ns_qprint(register const u_char *cp, register const u_char *bp)
+ns_qprint(netdissect_options *ndo,
+          register const u_char *cp, register const u_char *bp, int is_mdns)
 {
        register const u_char *np = cp;
-       register u_int i;
+       register u_int i, class;
 
-       cp = ns_nskip(cp, bp);
+       cp = ns_nskip(ndo, cp);
 
-       if (cp + 4 > snapend || cp == NULL)
+       if (cp == NULL || !ND_TTEST2(*cp, 4))
                return(NULL);
 
-       /* print the qtype and qclass (if it's not IN) */
-       i = *cp++ << 8;
-       i |= *cp++;
-       printf(" %s", tok2str(type2str, "Type%d", i));
-       i = *cp++ << 8;
-       i |= *cp++;
-       if (i != C_IN)
-               printf(" %s", tok2str(class2str, "(Class %d)", i));
-
-       fputs("? ", stdout);
-       cp = ns_nprint(np, bp);
+       /* print the qtype */
+       i = EXTRACT_16BITS(cp);
+       cp += 2;
+       ND_PRINT((ndo, " %s", tok2str(ns_type2str, "Type%d", i)));
+       /* print the qclass (if it's not IN) */
+       i = EXTRACT_16BITS(cp);
+       cp += 2;
+       if (is_mdns)
+               class = (i & ~C_QU);
+       else
+               class = i;
+       if (class != C_IN)
+               ND_PRINT((ndo, " %s", tok2str(ns_class2str, "(Class %d)", class)));
+       if (is_mdns) {
+               ND_PRINT((ndo, i & C_QU ? " (QU)" : " (QM)"));
+       }
+
+       ND_PRINT((ndo, "? "));
+       cp = ns_nprint(ndo, np, bp);
        return(cp ? cp + 4 : NULL);
 }
 
 /* print a reply */
 static const u_char *
-ns_rprint(register const u_char *cp, register const u_char *bp)
+ns_rprint(netdissect_options *ndo,
+          register const u_char *cp, register const u_char *bp, int is_mdns)
 {
-       register u_int class;
+       register u_int i, class, opt_flags = 0;
        register u_short typ, len;
        register const u_char *rp;
 
-       if (vflag) {
-               putchar(' ');
-               if ((cp = ns_nprint(cp, bp)) == NULL)
+       if (ndo->ndo_vflag) {
+               ND_PRINT((ndo, " "));
+               if ((cp = ns_nprint(ndo, cp, bp)) == NULL)
                        return NULL;
        } else
-               cp = ns_nskip(cp, bp);
-
-       if (cp + 10 > snapend || cp == NULL)
-               return (snapend);
-
-       /* print the type/qtype and class (if it's not IN) */
-       typ = *cp++ << 8;
-       typ |= *cp++;
-       class = *cp++ << 8;
-       class |= *cp++;
+               cp = ns_nskip(ndo, cp);
+
+       if (cp == NULL || !ND_TTEST2(*cp, 10))
+               return (ndo->ndo_snapend);
+
+       /* print the type/qtype */
+       typ = EXTRACT_16BITS(cp);
+       cp += 2;
+       /* print the class (if it's not IN and the type isn't OPT) */
+       i = EXTRACT_16BITS(cp);
+       cp += 2;
+       if (is_mdns)
+               class = (i & ~C_CACHE_FLUSH);
+       else
+               class = i;
        if (class != C_IN && typ != T_OPT)
-               printf(" %s", tok2str(class2str, "(Class %d)", class));
+               ND_PRINT((ndo, " %s", tok2str(ns_class2str, "(Class %d)", class)));
+       if (is_mdns) {
+               if (i & C_CACHE_FLUSH)
+                       ND_PRINT((ndo, " (Cache flush)"));
+       }
 
-       /* ignore ttl */
-       cp += 4;
+       if (typ == T_OPT) {
+               /* get opt flags */
+               cp += 2;
+               opt_flags = EXTRACT_16BITS(cp);
+               /* ignore rest of ttl field */
+               cp += 2;
+       } else if (ndo->ndo_vflag > 2) {
+               /* print ttl */
+               ND_PRINT((ndo, " ["));
+               relts_print(ndo, EXTRACT_32BITS(cp));
+               ND_PRINT((ndo, "]"));
+               cp += 4;
+       } else {
+               /* ignore ttl */
+               cp += 4;
+       }
 
-       len = *cp++ << 8;
-       len |= *cp++;
+       len = EXTRACT_16BITS(cp);
+       cp += 2;
 
        rp = cp + len;
 
-       printf(" %s", tok2str(type2str, "Type%d", typ));
-       if (rp > snapend)
+       ND_PRINT((ndo, " %s", tok2str(ns_type2str, "Type%d", typ)));
+       if (rp > ndo->ndo_snapend)
                return(NULL);
 
        switch (typ) {
        case T_A:
-               if (cp + sizeof(struct in_addr) > snapend)
+               if (!ND_TTEST2(*cp, sizeof(struct in_addr)))
                        return(NULL);
-               printf(" %s", ipaddr_string(cp));
+               ND_PRINT((ndo, " %s", intoa(htonl(EXTRACT_32BITS(cp)))));
                break;
 
        case T_NS:
@@ -376,72 +424,101 @@ ns_rprint(register const u_char *cp, register const u_char *bp)
 #ifdef T_DNAME
        case T_DNAME:
 #endif
-               putchar(' ');
-               if (ns_nprint(cp, bp) == NULL)
+               ND_PRINT((ndo, " "));
+               if (ns_nprint(ndo, cp, bp) == NULL)
                        return(NULL);
                break;
 
        case T_SOA:
-               if (!vflag)
+               if (!ndo->ndo_vflag)
                        break;
-               putchar(' ');
-               if ((cp = ns_nprint(cp, bp)) == NULL)
+               ND_PRINT((ndo, " "));
+               if ((cp = ns_nprint(ndo, cp, bp)) == NULL)
                        return(NULL);
-               putchar(' ');
-               if ((cp = ns_nprint(cp, bp)) == NULL)
+               ND_PRINT((ndo, " "));
+               if ((cp = ns_nprint(ndo, cp, bp)) == NULL)
                        return(NULL);
-               if (cp + 5 * 4 > snapend)
+               if (!ND_TTEST2(*cp, 5 * 4))
                        return(NULL);
-               printf(" %u", EXTRACT_32BITS(cp));
+               ND_PRINT((ndo, " %u", EXTRACT_32BITS(cp)));
                cp += 4;
-               printf(" %u", EXTRACT_32BITS(cp));
+               ND_PRINT((ndo, " %u", EXTRACT_32BITS(cp)));
                cp += 4;
-               printf(" %u", EXTRACT_32BITS(cp));
+               ND_PRINT((ndo, " %u", EXTRACT_32BITS(cp)));
                cp += 4;
-               printf(" %u", EXTRACT_32BITS(cp));
+               ND_PRINT((ndo, " %u", EXTRACT_32BITS(cp)));
                cp += 4;
-               printf(" %u", EXTRACT_32BITS(cp));
+               ND_PRINT((ndo, " %u", EXTRACT_32BITS(cp)));
                cp += 4;
                break;
        case T_MX:
-               putchar(' ');
-               if (cp + 2 > snapend)
+               ND_PRINT((ndo, " "));
+               if (!ND_TTEST2(*cp, 2))
                        return(NULL);
-               if (ns_nprint(cp + 2, bp) == NULL)
+               if (ns_nprint(ndo, cp + 2, bp) == NULL)
                        return(NULL);
-               printf(" %d", EXTRACT_16BITS(cp));
+               ND_PRINT((ndo, " %d", EXTRACT_16BITS(cp)));
                break;
 
        case T_TXT:
-               putchar(' ');
-               (void)ns_cprint(cp, bp);
+               while (cp < rp) {
+                       ND_PRINT((ndo, " \""));
+                       cp = ns_cprint(ndo, cp);
+                       if (cp == NULL)
+                               return(NULL);
+                       ND_PRINT((ndo, "\""));
+               }
+               break;
+
+       case T_SRV:
+               ND_PRINT((ndo, " "));
+               if (!ND_TTEST2(*cp, 6))
+                       return(NULL);
+               if (ns_nprint(ndo, cp + 6, bp) == NULL)
+                       return(NULL);
+               ND_PRINT((ndo, ":%d %d %d", EXTRACT_16BITS(cp + 4),
+                       EXTRACT_16BITS(cp), EXTRACT_16BITS(cp + 2)));
                break;
 
 #ifdef INET6
        case T_AAAA:
-               if (cp + sizeof(struct in6_addr) > snapend)
+           {
+               struct in6_addr addr;
+               char ntop_buf[INET6_ADDRSTRLEN];
+
+               if (!ND_TTEST2(*cp, sizeof(struct in6_addr)))
                        return(NULL);
-               printf(" %s", ip6addr_string(cp));
+               memcpy(&addr, cp, sizeof(struct in6_addr));
+               ND_PRINT((ndo, " %s",
+                   inet_ntop(AF_INET6, &addr, ntop_buf, sizeof(ntop_buf))));
+
                break;
+           }
 
        case T_A6:
            {
                struct in6_addr a;
                int pbit, pbyte;
+               char ntop_buf[INET6_ADDRSTRLEN];
 
+               if (!ND_TTEST2(*cp, 1))
+                       return(NULL);
                pbit = *cp;
                pbyte = (pbit & ~7) / 8;
                if (pbit > 128) {
-                       printf(" %u(bad plen)", pbit);
+                       ND_PRINT((ndo, " %u(bad plen)", pbit));
                        break;
                } else if (pbit < 128) {
+                       if (!ND_TTEST2(*(cp + 1), sizeof(a) - pbyte))
+                               return(NULL);
                        memset(&a, 0, sizeof(a));
                        memcpy(&a.s6_addr[pbyte], cp + 1, sizeof(a) - pbyte);
-                       printf(" %u %s", pbit, ip6addr_string(&a));
+                       ND_PRINT((ndo, " %u %s", pbit,
+                           inet_ntop(AF_INET6, &a, ntop_buf, sizeof(ntop_buf))));
                }
                if (pbit > 0) {
-                       putchar(' ');
-                       if (ns_nprint(cp + 1 + sizeof(a) - pbyte, bp) == NULL)
+                       ND_PRINT((ndo, " "));
+                       if (ns_nprint(ndo, cp + 1 + sizeof(a) - pbyte, bp) == NULL)
                                return(NULL);
                }
                break;
@@ -449,90 +526,131 @@ ns_rprint(register const u_char *cp, register const u_char *bp)
 #endif /*INET6*/
 
        case T_OPT:
-               printf(" UDPsize=%u", class);
+               ND_PRINT((ndo, " UDPsize=%u", class));
+               if (opt_flags & 0x8000)
+                       ND_PRINT((ndo, " DO"));
                break;
 
        case T_UNSPECA:         /* One long string */
-               if (cp + len > snapend)
+               if (!ND_TTEST2(*cp, len))
+                       return(NULL);
+               if (fn_printn(ndo, cp, len, ndo->ndo_snapend))
                        return(NULL);
-               fn_printn(cp, len, snapend);
                break;
+
+       case T_TSIG:
+           {
+               if (cp + len > ndo->ndo_snapend)
+                       return(NULL);
+               if (!ndo->ndo_vflag)
+                       break;
+               ND_PRINT((ndo, " "));
+               if ((cp = ns_nprint(ndo, cp, bp)) == NULL)
+                       return(NULL);
+               cp += 6;
+               if (!ND_TTEST2(*cp, 2))
+                       return(NULL);
+               ND_PRINT((ndo, " fudge=%u", EXTRACT_16BITS(cp)));
+               cp += 2;
+               if (!ND_TTEST2(*cp, 2))
+                       return(NULL);
+               ND_PRINT((ndo, " maclen=%u", EXTRACT_16BITS(cp)));
+               cp += 2 + EXTRACT_16BITS(cp);
+               if (!ND_TTEST2(*cp, 2))
+                       return(NULL);
+               ND_PRINT((ndo, " origid=%u", EXTRACT_16BITS(cp)));
+               cp += 2;
+               if (!ND_TTEST2(*cp, 2))
+                       return(NULL);
+               ND_PRINT((ndo, " error=%u", EXTRACT_16BITS(cp)));
+               cp += 2;
+               if (!ND_TTEST2(*cp, 2))
+                       return(NULL);
+               ND_PRINT((ndo, " otherlen=%u", EXTRACT_16BITS(cp)));
+               cp += 2;
+           }
        }
        return (rp);            /* XXX This isn't always right */
 }
 
 void
-ns_print(register const u_char *bp, u_int length)
+ns_print(netdissect_options *ndo,
+         register const u_char *bp, u_int length, int is_mdns)
 {
        register const HEADER *np;
        register int qdcount, ancount, nscount, arcount;
-       register const u_char *cp = NULL;
+       register const u_char *cp;
+       uint16_t b2;
 
        np = (const HEADER *)bp;
+       ND_TCHECK(*np);
        /* get the byte-order right */
-       qdcount = ntohs(np->qdcount);
-       ancount = ntohs(np->ancount);
-       nscount = ntohs(np->nscount);
-       arcount = ntohs(np->arcount);
+       qdcount = EXTRACT_16BITS(&np->qdcount);
+       ancount = EXTRACT_16BITS(&np->ancount);
+       nscount = EXTRACT_16BITS(&np->nscount);
+       arcount = EXTRACT_16BITS(&np->arcount);
 
        if (DNS_QR(np)) {
                /* this is a response */
-               printf(" %d%s%s%s%s%s%s",
-                       ntohs(np->id),
+               ND_PRINT((ndo, "%d%s%s%s%s%s%s",
+                       EXTRACT_16BITS(&np->id),
                        ns_ops[DNS_OPCODE(np)],
                        ns_resp[DNS_RCODE(np)],
                        DNS_AA(np)? "*" : "",
                        DNS_RA(np)? "" : "-",
                        DNS_TC(np)? "|" : "",
-                       DNS_CD(np)? "%" : "");
+                       DNS_AD(np)? "$" : ""));
 
                if (qdcount != 1)
-                       printf(" [%dq]", qdcount);
+                       ND_PRINT((ndo, " [%dq]", qdcount));
                /* Print QUESTION section on -vv */
-               if (vflag > 1) {
-                       fputs(" q:", stdout);
-                       if ((cp = ns_qprint((const u_char *)(np + 1), bp))
-                           == NULL)
-                               goto trunc;
-               } else {
-                       if ((cp = ns_nskip((const u_char *)(np + 1), bp))
-                           == NULL)
-                               goto trunc;
-                       cp += 4;
+               cp = (const u_char *)(np + 1);
+               while (qdcount--) {
+                       if (qdcount < EXTRACT_16BITS(&np->qdcount) - 1)
+                               ND_PRINT((ndo, ","));
+                       if (ndo->ndo_vflag > 1) {
+                               ND_PRINT((ndo, " q:"));
+                               if ((cp = ns_qprint(ndo, cp, bp, is_mdns)) == NULL)
+                                       goto trunc;
+                       } else {
+                               if ((cp = ns_nskip(ndo, cp)) == NULL)
+                                       goto trunc;
+                               cp += 4;        /* skip QTYPE and QCLASS */
+                       }
                }
-               printf(" %d/%d/%d", ancount, nscount, arcount);
+               ND_PRINT((ndo, " %d/%d/%d", ancount, nscount, arcount));
                if (ancount--) {
-                       if ((cp = ns_rprint(cp, bp)) == NULL)
+                       if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                goto trunc;
-                       while (cp < snapend && ancount--) {
-                               putchar(',');
-                               if ((cp = ns_rprint(cp, bp)) == NULL)
+                       while (cp < ndo->ndo_snapend && ancount--) {
+                               ND_PRINT((ndo, ","));
+                               if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                        goto trunc;
                        }
                }
                if (ancount > 0)
                        goto trunc;
                /* Print NS and AR sections on -vv */
-               if (vflag > 1) {
-                       if (cp < snapend && nscount--) {
-                               fputs(" ns:", stdout);
-                               if ((cp = ns_rprint(cp, bp)) == NULL)
+               if (ndo->ndo_vflag > 1) {
+                       if (cp < ndo->ndo_snapend && nscount--) {
+                               ND_PRINT((ndo, " ns:"));
+                               if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                        goto trunc;
-                               while (cp < snapend && nscount--) {
-                                       putchar(',');
-                                       if ((cp = ns_rprint(cp, bp)) == NULL)
+                               while (cp < ndo->ndo_snapend && nscount--) {
+                                       ND_PRINT((ndo, ","));
+                                       if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                                goto trunc;
                                }
                        }
                        if (nscount > 0)
                                goto trunc;
-                       if (cp < snapend && arcount--) {
-                               fputs(" ar:", stdout);
-                               if ((cp = ns_rprint(cp, bp)) == NULL)
+                       if (cp < ndo->ndo_snapend && arcount--) {
+                               ND_PRINT((ndo, " ar:"));
+                               if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                        goto trunc;
-                               while (cp < snapend && arcount--) {
-                                       putchar(',');
-                                       if ((cp = ns_rprint(cp, bp)) == NULL)
+                               while (cp < ndo->ndo_snapend && arcount--) {
+                                       ND_PRINT((ndo, ","));
+                                       if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                                goto trunc;
                                }
                        }
@@ -542,39 +660,41 @@ ns_print(register const u_char *bp, u_int length)
        }
        else {
                /* this is a request */
-               printf(" %d%s%s%s", ntohs(np->id), ns_ops[DNS_OPCODE(np)],
+               ND_PRINT((ndo, "%d%s%s%s", EXTRACT_16BITS(&np->id), ns_ops[DNS_OPCODE(np)],
                    DNS_RD(np) ? "+" : "",
-                   DNS_AD(np) ? "$" : "");
+                   DNS_CD(np) ? "%" : ""));
 
                /* any weirdness? */
-               if (*(((u_short *)np)+1) & htons(0x6cf))
-                       printf(" [b2&3=0x%x]", ntohs(*(((u_short *)np)+1)));
+               b2 = EXTRACT_16BITS(((const u_short *)np)+1);
+               if (b2 & 0x6cf)
+                       ND_PRINT((ndo, " [b2&3=0x%x]", b2));
 
                if (DNS_OPCODE(np) == IQUERY) {
                        if (qdcount)
-                               printf(" [%dq]", qdcount);
+                               ND_PRINT((ndo, " [%dq]", qdcount));
                        if (ancount != 1)
-                               printf(" [%da]", ancount);
+                               ND_PRINT((ndo, " [%da]", ancount));
                }
                else {
                        if (ancount)
-                               printf(" [%da]", ancount);
+                               ND_PRINT((ndo, " [%da]", ancount));
                        if (qdcount != 1)
-                               printf(" [%dq]", qdcount);
+                               ND_PRINT((ndo, " [%dq]", qdcount));
                }
                if (nscount)
-                       printf(" [%dn]", nscount);
+                       ND_PRINT((ndo, " [%dn]", nscount));
                if (arcount)
-                       printf(" [%dau]", arcount);
+                       ND_PRINT((ndo, " [%dau]", arcount));
 
+               cp = (const u_char *)(np + 1);
                if (qdcount--) {
-                       cp = ns_qprint((const u_char *)(np + 1),
-                                      (const u_char *)np);
+                       cp = ns_qprint(ndo, cp, (const u_char *)np, is_mdns);
                        if (!cp)
                                goto trunc;
-                       while (cp < snapend && qdcount--) {
-                               cp = ns_qprint((const u_char *)cp,
-                                              (const u_char *)np);
+                       while (cp < ndo->ndo_snapend && qdcount--) {
+                               cp = ns_qprint(ndo, (const u_char *)cp,
+                                              (const u_char *)np,
+                                              is_mdns);
                                if (!cp)
                                        goto trunc;
                        }
@@ -583,37 +703,37 @@ ns_print(register const u_char *bp, u_int length)
                        goto trunc;
 
                /* Print remaining sections on -vv */
-               if (vflag > 1) {
+               if (ndo->ndo_vflag > 1) {
                        if (ancount--) {
-                               if ((cp = ns_rprint(cp, bp)) == NULL)
+                               if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                        goto trunc;
-                               while (cp < snapend && ancount--) {
-                                       putchar(',');
-                                       if ((cp = ns_rprint(cp, bp)) == NULL)
+                               while (cp < ndo->ndo_snapend && ancount--) {
+                                       ND_PRINT((ndo, ","));
+                                       if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                                goto trunc;
                                }
                        }
                        if (ancount > 0)
                                goto trunc;
-                       if (cp < snapend && nscount--) {
-                               fputs(" ns:", stdout);
-                               if ((cp = ns_rprint(cp, bp)) == NULL)
+                       if (cp < ndo->ndo_snapend && nscount--) {
+                               ND_PRINT((ndo, " ns:"));
+                               if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                        goto trunc;
-                               while (nscount-- && cp < snapend) {
-                                       putchar(',');
-                                       if ((cp = ns_rprint(cp, bp)) == NULL)
+                               while (nscount-- && cp < ndo->ndo_snapend) {
+                                       ND_PRINT((ndo, ","));
+                                       if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                                goto trunc;
                                }
                        }
                        if (nscount > 0)
                                goto trunc;
-                       if (cp < snapend && arcount--) {
-                               fputs(" ar:", stdout);
-                               if ((cp = ns_rprint(cp, bp)) == NULL)
+                       if (cp < ndo->ndo_snapend && arcount--) {
+                               ND_PRINT((ndo, " ar:"));
+                               if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                        goto trunc;
-                               while (cp < snapend && arcount--) {
-                                       putchar(',');
-                                       if ((cp = ns_rprint(cp, bp)) == NULL)
+                               while (cp < ndo->ndo_snapend && arcount--) {
+                                       ND_PRINT((ndo, ","));
+                                       if ((cp = ns_rprint(ndo, cp, bp, is_mdns)) == NULL)
                                                goto trunc;
                                }
                        }
@@ -621,10 +741,9 @@ ns_print(register const u_char *bp, u_int length)
                                goto trunc;
                }
        }
-       printf(" (%d)", length);
+       ND_PRINT((ndo, " (%d)", length));
        return;
 
   trunc:
-       printf("[|domain]");
-       return;
+       ND_PRINT((ndo, "[|domain]"));
 }