X-Git-Url: https://git.tcpdump.org/tcpdump/blobdiff_plain/3913fd0f19d9228a0aa7df23bce2400701143eb0..refs/heads/master:/print-mobility.c diff --git a/print-mobility.c b/print-mobility.c index d5933b8c..2f905f1b 100644 --- a/print-mobility.c +++ b/print-mobility.c @@ -1,7 +1,7 @@ /* * Copyright (C) 2002 WIDE Project. * All rights reserved. - * + * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: @@ -13,7 +13,7 @@ * 3. Neither the name of the project nor the names of its contributors * may be used to endorse or promote products derived from this software * without specific prior written permission. - * + * * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE @@ -27,35 +27,30 @@ * SUCH DAMAGE. */ -#ifdef HAVE_CONFIG_H -#include "config.h" -#endif +/* \summary: IPv6 mobility printer */ +/* RFC 3775 */ -#ifndef lint -static const char rcsid[] = - "@(#) $Header: /tcpdump/master/tcpdump/print-mobility.c,v 1.4 2002-08-02 04:10:14 guy Exp $"; -#endif +#include -#ifdef INET6 -#include +#include "netdissect-stdinc.h" -#include +#include "netdissect.h" +#include "addrtoname.h" +#include "extract.h" #include "ip6.h" -#include "interface.h" -#include "addrtoname.h" -#include "extract.h" /* must come after interface.h */ /* Mobility header */ struct ip6_mobility { - u_int8_t ip6m_pproto; /* following payload protocol (for PG) */ - u_int8_t ip6m_len; /* length in units of 8 octets */ - u_int16_t ip6m_type; /* message type */ - u_int16_t ip6m_cksum; /* sum of IPv6 pseudo-header and MH */ + nd_uint8_t ip6m_pproto; /* following payload protocol (for PG) */ + nd_uint8_t ip6m_len; /* length in units of 8 octets */ + nd_uint8_t ip6m_type; /* message type */ + nd_uint8_t reserved; /* reserved */ + nd_uint16_t ip6m_cksum; /* sum of IPv6 pseudo-header and MH */ union { - u_int16_t ip6m_un_data16[1]; /* type-specific field */ - u_int8_t ip6m_un_data8[2]; /* type-specific fiedl */ + nd_uint16_t ip6m_un_data16[1]; /* type-specific field */ + nd_uint8_t ip6m_un_data8[2]; /* type-specific field */ } ip6m_dataun; }; @@ -64,124 +59,161 @@ struct ip6_mobility { #define IP6M_MINLEN 8 +/* https://www.iana.org/assignments/mobility-parameters/mobility-parameters.xhtml */ + /* message type */ -#define IP6M_BINDING_REQUEST 0x0000 /* Binding Refresh Request */ -#define IP6M_HOME_TEST_INIT 0x0001 /* Home Test Init */ -#define IP6M_CAREOF_TEST_INIT 0x0002 /* Care-of Test Init */ -#define IP6M_HOME_TEST 0x0003 /* Home Test */ -#define IP6M_CAREOF_TEST 0x0004 /* Care-of Test */ -#define IP6M_BINDING_UPDATE 0x0005 /* Binding Update */ -#define IP6M_BINDING_ACK 0x0006 /* Binding Acknowledgement */ -#define IP6M_BINDING_ERROR 0x0007 /* Binding Error */ +#define IP6M_BINDING_REQUEST 0 /* Binding Refresh Request */ +#define IP6M_HOME_TEST_INIT 1 /* Home Test Init */ +#define IP6M_CAREOF_TEST_INIT 2 /* Care-of Test Init */ +#define IP6M_HOME_TEST 3 /* Home Test */ +#define IP6M_CAREOF_TEST 4 /* Care-of Test */ +#define IP6M_BINDING_UPDATE 5 /* Binding Update */ +#define IP6M_BINDING_ACK 6 /* Binding Acknowledgement */ +#define IP6M_BINDING_ERROR 7 /* Binding Error */ +#define IP6M_MAX 7 + +static const struct tok ip6m_str[] = { + { IP6M_BINDING_REQUEST, "BRR" }, + { IP6M_HOME_TEST_INIT, "HoTI" }, + { IP6M_CAREOF_TEST_INIT, "CoTI" }, + { IP6M_HOME_TEST, "HoT" }, + { IP6M_CAREOF_TEST, "CoT" }, + { IP6M_BINDING_UPDATE, "BU" }, + { IP6M_BINDING_ACK, "BA" }, + { IP6M_BINDING_ERROR, "BE" }, + { 0, NULL } +}; + +static const unsigned ip6m_hdrlen[IP6M_MAX + 1] = { + IP6M_MINLEN, /* IP6M_BINDING_REQUEST */ + IP6M_MINLEN + 8, /* IP6M_HOME_TEST_INIT */ + IP6M_MINLEN + 8, /* IP6M_CAREOF_TEST_INIT */ + IP6M_MINLEN + 16, /* IP6M_HOME_TEST */ + IP6M_MINLEN + 16, /* IP6M_CAREOF_TEST */ + IP6M_MINLEN + 4, /* IP6M_BINDING_UPDATE */ + IP6M_MINLEN + 4, /* IP6M_BINDING_ACK */ + IP6M_MINLEN + 16, /* IP6M_BINDING_ERROR */ +}; /* Mobility Header Options */ #define IP6MOPT_MINLEN 2 -#define IP6MOPT_PAD1 0x0 -#define IP6MOPT_PADN 0x1 -#define IP6MOPT_UI 0x2 -#define IP6MOPT_UI_MINLEN 4 -#define IP6MOPT_ALTCOA 0x3 +#define IP6MOPT_PAD1 0x0 /* Pad1 */ +#define IP6MOPT_PADN 0x1 /* PadN */ +#define IP6MOPT_REFRESH 0x2 /* Binding Refresh Advice */ +#define IP6MOPT_REFRESH_MINLEN 4 +#define IP6MOPT_ALTCOA 0x3 /* Alternate Care-of Address */ #define IP6MOPT_ALTCOA_MINLEN 18 -#define IP6MOPT_NONCEID 0x4 +#define IP6MOPT_NONCEID 0x4 /* Nonce Indices */ #define IP6MOPT_NONCEID_MINLEN 6 -#define IP6MOPT_AUTH 0x5 -#define IP6MOPT_AUTH_MINLEN 2 /* 2+len */ +#define IP6MOPT_AUTH 0x5 /* Binding Authorization Data */ +#define IP6MOPT_AUTH_MINLEN 12 + +static const struct tok ip6m_binding_update_bits [] = { + { 0x08, "A" }, + { 0x04, "H" }, + { 0x02, "L" }, + { 0x01, "K" }, + { 0, NULL } +}; -static void -mobility_opt_print(const u_char *bp, int len) +static int +mobility_opt_print(netdissect_options *ndo, + const u_char *bp, const unsigned len) { - int i; - int optlen; + unsigned i, optlen; for (i = 0; i < len; i += optlen) { - if (bp[i] == IP6MOPT_PAD1) + if (GET_U_1(bp + i) == IP6MOPT_PAD1) optlen = 1; else { - if (i + 1 < len) - optlen = bp[i + 1]; - else + if (i + 1 < len) { + optlen = GET_U_1(bp + i + 1) + 2; + } else goto trunc; - if (optlen < IP6MOPT_MINLEN) - optlen = IP6MOPT_MINLEN; /* XXX */ } if (i + optlen > len) goto trunc; + ND_TCHECK_1(bp + i + optlen); - switch (bp[i]) { + switch (GET_U_1(bp + i)) { case IP6MOPT_PAD1: - printf("(pad1)"); + ND_PRINT("(pad1)"); break; case IP6MOPT_PADN: if (len - i < IP6MOPT_MINLEN) { - printf("(padn: trunc)"); + ND_PRINT("(padn: trunc)"); goto trunc; } - printf("(padn)"); + ND_PRINT("(padn)"); break; - case IP6MOPT_UI: - if (len - i < IP6MOPT_UI_MINLEN) { - printf("(ui: trunc)"); + case IP6MOPT_REFRESH: + if (len - i < IP6MOPT_REFRESH_MINLEN) { + ND_PRINT("(refresh: trunc)"); goto trunc; } - printf("(ui: 0x%04x)", EXTRACT_16BITS(&bp[i+2])); + /* units of 4 secs */ + ND_PRINT("(refresh: %u)", + GET_BE_U_2(bp + i + 2) << 2); break; case IP6MOPT_ALTCOA: if (len - i < IP6MOPT_ALTCOA_MINLEN) { - printf("(altcoa: trunc)"); + ND_PRINT("(altcoa: trunc)"); goto trunc; } - printf("(alt-CoA: %s)", ip6addr_string(&bp[i+2])); + ND_PRINT("(alt-CoA: %s)", GET_IP6ADDR_STRING(bp + i + 2)); break; case IP6MOPT_NONCEID: if (len - i < IP6MOPT_NONCEID_MINLEN) { - printf("(ni: trunc)"); + ND_PRINT("(ni: trunc)"); goto trunc; } - printf("(ni: ho=0x%04x ci=0x%04x)", - EXTRACT_16BITS(&bp[i+2]), - EXTRACT_16BITS(&bp[i+4])); + ND_PRINT("(ni: ho=0x%04x co=0x%04x)", + GET_BE_U_2(bp + i + 2), + GET_BE_U_2(bp + i + 4)); break; case IP6MOPT_AUTH: if (len - i < IP6MOPT_AUTH_MINLEN) { - printf("(auth: trunc)"); + ND_PRINT("(auth: trunc)"); goto trunc; } - printf("(auth spi: 0x%08x)", - EXTRACT_32BITS(&bp[i+2])); + ND_PRINT("(auth)"); break; default: if (len - i < IP6MOPT_MINLEN) { - printf("(sopt_type %d: trunc)", bp[i]); + ND_PRINT("(sopt_type %u: trunc)", + GET_U_1(bp + i)); goto trunc; } - printf("(type-0x%02x: len=%d)", bp[i], bp[i + 1]); + ND_PRINT("(type-0x%02x: len=%u)", GET_U_1(bp + i), + GET_U_1(bp + i + 1)); break; } } - return; + return 0; trunc: - printf("[trunc] "); + return 1; } /* * Mobility Header */ int -mobility_print(const u_char *bp, const u_char *bp2) +mobility_print(netdissect_options *ndo, + const u_char *bp, const u_char *bp2 _U_) { const struct ip6_mobility *mh; - const struct ip6_hdr *ip6; const u_char *ep; - int mhlen, hlen, type; + unsigned mhlen, hlen; + uint8_t type; - mh = (struct ip6_mobility *)bp; - ip6 = (struct ip6_hdr *)bp2; + ndo->ndo_protocol = "mobility"; + mh = (const struct ip6_mobility *)bp; /* 'ep' points to the end of available data. */ - ep = snapend; + ep = ndo->ndo_snapend; - if (!TTEST(mh->ip6m_len)) { + if (!ND_TTEST_1(mh->ip6m_len)) { /* * There's not enough captured data to include the * mobility header length. @@ -194,111 +226,105 @@ mobility_print(const u_char *bp, const u_char *bp2) * returned length, however, as it breaks out of the * header-processing loop. */ - mhlen = ep - bp; + mhlen = (unsigned)(ep - bp); goto trunc; } - mhlen = (int)(mh->ip6m_len << 3); - if (mhlen < IP6M_MINLEN) - mhlen = IP6M_MINLEN; /* XXX */ + mhlen = (GET_U_1(mh->ip6m_len) + 1) << 3; /* XXX ip6m_cksum */ - TCHECK(mh->ip6m_type); - type = ntohs(mh->ip6m_type); + type = GET_U_1(mh->ip6m_type); + if (type <= IP6M_MAX && mhlen < ip6m_hdrlen[type]) { + ND_PRINT("(header length %u is too small for type %u)", mhlen, type); + goto trunc; + } + ND_PRINT("mobility: %s", tok2str(ip6m_str, "type-#%u", type)); switch (type) { case IP6M_BINDING_REQUEST: - printf("mobility: BRR"); hlen = IP6M_MINLEN; break; case IP6M_HOME_TEST_INIT: case IP6M_CAREOF_TEST_INIT: - printf("mobility: %soTI", - type == IP6M_HOME_TEST_INIT ? "H" : "C"); hlen = IP6M_MINLEN; - TCHECK2(*mh, hlen + 4); - printf(" cookie=0x%x", EXTRACT_32BITS(&bp[hlen])); - hlen += 4; + if (ndo->ndo_vflag) { + ND_PRINT(" %s Init Cookie=%08x:%08x", + type == IP6M_HOME_TEST_INIT ? "Home" : "Care-of", + GET_BE_U_4(bp + hlen), + GET_BE_U_4(bp + hlen + 4)); + } + hlen += 8; break; case IP6M_HOME_TEST: case IP6M_CAREOF_TEST: - printf("mobility: %soT", - type == IP6M_HOME_TEST ? "H" : "C"); + ND_PRINT(" nonce id=0x%x", GET_BE_U_2(mh->ip6m_data16[0])); hlen = IP6M_MINLEN; - TCHECK2(*mh, hlen + 2); - printf(" nonce id=0x%x", EXTRACT_16BITS(&bp[hlen])); - hlen += 2; - /* Reserved (16bits) */ - hlen += 2; - TCHECK2(*mh, hlen + 4); - printf(" mobile cookie=0x%x", EXTRACT_32BITS(&bp[hlen])); - hlen += 4; - /* Home(Care-of) Cookie (128 bits) */ - hlen += 16; + if (ndo->ndo_vflag) { + ND_PRINT(" %s Init Cookie=%08x:%08x", + type == IP6M_HOME_TEST ? "Home" : "Care-of", + GET_BE_U_4(bp + hlen), + GET_BE_U_4(bp + hlen + 4)); + } + hlen += 8; + if (ndo->ndo_vflag) { + ND_PRINT(" %s Keygen Token=%08x:%08x", + type == IP6M_HOME_TEST ? "Home" : "Care-of", + GET_BE_U_4(bp + hlen), + GET_BE_U_4(bp + hlen + 4)); + } + hlen += 8; break; case IP6M_BINDING_UPDATE: - printf("mobility: BU"); - TCHECK(mh->ip6m_data8[0]); - if (mh->ip6m_data8[0] & 0xf0) - printf(" "); - if (mh->ip6m_data8[0] & 0x80) - printf("A"); - if (mh->ip6m_data8[0] & 0x40) - printf("H"); - if (mh->ip6m_data8[0] & 0x20) - printf("S"); - if (mh->ip6m_data8[0] & 0x10) - printf("D"); + { + int bits; + ND_PRINT(" seq#=%u", GET_BE_U_2(mh->ip6m_data16[0])); hlen = IP6M_MINLEN; - TCHECK2(*mh, hlen + 2); - printf(" seq#=%d", EXTRACT_16BITS(&bp[hlen])); - hlen += 2; - /* Reserved (16bits) */ + ND_TCHECK_2(bp + hlen); + bits = (GET_U_1(bp + hlen) & 0xf0) >> 4; + if (bits) { + ND_PRINT(" "); + ND_PRINT("%s", + bittok2str_nosep(ip6m_binding_update_bits, + "bits-#0x%x", bits)); + } + /* Reserved (4bits) */ + hlen += 1; + /* Reserved (8bits) */ + hlen += 1; + /* units of 4 secs */ + ND_PRINT(" lifetime=%u", GET_BE_U_2(bp + hlen) << 2); hlen += 2; - TCHECK2(*mh, hlen + 4); - printf(" lifetime=%d", EXTRACT_32BITS(&bp[hlen])); - hlen += 4; - TCHECK2(*mh, hlen + 16); - printf(" homeaddr %s", ip6addr_string(&bp[hlen])); - hlen += 16; break; + } case IP6M_BINDING_ACK: - printf("mobility: BA"); - TCHECK(mh->ip6m_data8[0]); - printf(" status=%d", mh->ip6m_data8[0]); + ND_PRINT(" status=%u", GET_U_1(mh->ip6m_data8[0])); + if (GET_U_1(mh->ip6m_data8[1]) & 0x80) + ND_PRINT(" K"); + /* Reserved (7bits) */ hlen = IP6M_MINLEN; - TCHECK2(*mh, hlen + 2); - printf(" seq#=%d", EXTRACT_16BITS(&bp[hlen])); + ND_PRINT(" seq#=%u", GET_BE_U_2(bp + hlen)); hlen += 2; - /* Reserved (16bits) */ + /* units of 4 secs */ + ND_PRINT(" lifetime=%u", GET_BE_U_2(bp + hlen) << 2); hlen += 2; - TCHECK2(*mh, hlen + 4); - printf(" lifetime=%d", EXTRACT_32BITS(&bp[hlen])); - hlen += 4; - TCHECK2(*mh, hlen + 4); - printf(" refresh=%d", ntohl(*(u_int32_t *)&bp[hlen])); - hlen += 4; break; case IP6M_BINDING_ERROR: - printf("mobility: BE"); - TCHECK(mh->ip6m_data8[0]); - printf(" status=%d", mh->ip6m_data8[0]); + ND_PRINT(" status=%u", GET_U_1(mh->ip6m_data8[0])); + /* Reserved */ hlen = IP6M_MINLEN; - TCHECK2(*mh, hlen + 16); - printf(" homeaddr %s", ip6addr_string(&bp[hlen])); + ND_PRINT(" homeaddr %s", GET_IP6ADDR_STRING(bp + hlen)); hlen += 16; break; default: - printf("mobility: type-#%d len=%d", type, mh->ip6m_len); + ND_PRINT(" len=%u", GET_U_1(mh->ip6m_len)); return(mhlen); - break; } - if (vflag) - mobility_opt_print(&bp[hlen], mhlen - hlen); + if (ndo->ndo_vflag) + if (mobility_opt_print(ndo, bp + hlen, mhlen - hlen)) + goto trunc; return(mhlen); trunc: - fputs("[|MOBILITY]", stdout); - return(mhlen); + nd_print_trunc(ndo); + return(-1); } -#endif /* INET6 */