X-Git-Url: https://git.tcpdump.org/tcpdump/blobdiff_plain/585ac3db0663f474fd3417ea91953b58022cc9d9..f085c93f59fb2332e09f3da20eef5fb2bbd04431:/print-krb.c diff --git a/print-krb.c b/print-krb.c index d2c81239..6fa25aca 100644 --- a/print-krb.c +++ b/print-krb.c @@ -21,23 +21,39 @@ * Initial contribution from John Hawkinson (jhawk@mit.edu). */ +/* \summary: Kerberos printer */ + #ifdef HAVE_CONFIG_H #include "config.h" #endif -#include - -#include +#include -#include "interface.h" -#include "addrtoname.h" +#include "netdissect.h" #include "extract.h" +/* + * Kerberos 4: + * + * Athena Technical Plan + * Section E.2.1 + * Kerberos Authentication and Authorization System + * by S. P. Miller, B. C. Neuman, J. I. Schiller, and J. H. Saltzer + * + * http://web.mit.edu/Saltzer/www/publications/athenaplan/e.2.1.pdf + * + * 7. Appendix I Design Specifications + * + * Kerberos 5: + * + * RFC 1510, RFC 2630, etc. + */ + static const char tstr[] = " [|kerberos]"; -static const u_char *c_print(register const u_char *, register const u_char *); -static const u_char *krb4_print_hdr(const u_char *); -static void krb4_print(const u_char *); +static const u_char *c_print(netdissect_options *, register const u_char *, register const u_char *); +static const u_char *krb4_print_hdr(netdissect_options *, const u_char *); +static void krb4_print(netdissect_options *, const u_char *); #define AUTH_MSG_KDC_REQUEST 1<<1 #define AUTH_MSG_KDC_REPLY 2<<1 @@ -62,8 +78,8 @@ static void krb4_print(const u_char *); #define KERB_ERR_NULL_KEY 10 struct krb { - u_int8_t pvno; /* Protocol Version */ - u_int8_t type; /* Type+B */ + uint8_t pvno; /* Protocol Version */ + uint8_t type; /* Type+B */ }; static const struct tok type2str[] = { @@ -95,28 +111,29 @@ static const struct tok kerr2str[] = { }; static const u_char * -c_print(register const u_char *s, register const u_char *ep) +c_print(netdissect_options *ndo, + register const u_char *s, register const u_char *ep) { register u_char c; register int flag; flag = 1; while (s < ep) { - c = *s++; + c = EXTRACT_U_1(s); + s++; if (c == '\0') { flag = 0; break; } - if (!isascii(c)) { - c = toascii(c); - putchar('M'); - putchar('-'); + if (!ND_ISASCII(c)) { + c = ND_TOASCII(c); + ND_PRINT((ndo, "M-")); } - if (!isprint(c)) { + if (!ND_ISPRINT(c)) { c ^= 0x40; /* DEL to ?, others to alpha */ - putchar('^'); + ND_PRINT((ndo, "^")); } - putchar(c); + ND_PRINT((ndo, "%c", c)); } if (flag) return NULL; @@ -124,112 +141,118 @@ c_print(register const u_char *s, register const u_char *ep) } static const u_char * -krb4_print_hdr(const u_char *cp) +krb4_print_hdr(netdissect_options *ndo, + const u_char *cp) { cp += 2; -#define PRINT if ((cp = c_print(cp, snapend)) == NULL) goto trunc +#define PRINT if ((cp = c_print(ndo, cp, ndo->ndo_snapend)) == NULL) goto trunc PRINT; - putchar('.'); + ND_PRINT((ndo, ".")); PRINT; - putchar('@'); + ND_PRINT((ndo, "@")); PRINT; return (cp); trunc: - fputs(tstr, stdout); + ND_PRINT((ndo, "%s", tstr)); return (NULL); #undef PRINT } static void -krb4_print(const u_char *cp) +krb4_print(netdissect_options *ndo, + const u_char *cp) { register const struct krb *kp; u_char type; u_short len; -#define PRINT if ((cp = c_print(cp, snapend)) == NULL) goto trunc +#define PRINT if ((cp = c_print(ndo, cp, ndo->ndo_snapend)) == NULL) goto trunc /* True if struct krb is little endian */ #define IS_LENDIAN(kp) (((kp)->type & 0x01) != 0) -#define KTOHSP(kp, cp) (IS_LENDIAN(kp) ? EXTRACT_LE_16BITS(cp) : EXTRACT_16BITS(cp)) +#define KTOHSP(kp, cp) (IS_LENDIAN(kp) ? EXTRACT_LE_U_2(cp) : EXTRACT_BE_U_2(cp)) - kp = (struct krb *)cp; + kp = (const struct krb *)cp; - if ((&kp->type) >= snapend) { - fputs(tstr, stdout); + if ((&kp->type) >= ndo->ndo_snapend) { + ND_PRINT((ndo, "%s", tstr)); return; } type = kp->type & (0xFF << 1); - printf(" %s %s: ", - IS_LENDIAN(kp) ? "le" : "be", tok2str(type2str, NULL, type)); + ND_PRINT((ndo, " %s %s: ", + IS_LENDIAN(kp) ? "le" : "be", tok2str(type2str, NULL, type))); switch (type) { case AUTH_MSG_KDC_REQUEST: - if ((cp = krb4_print_hdr(cp)) == NULL) + if ((cp = krb4_print_hdr(ndo, cp)) == NULL) return; cp += 4; /* ctime */ - TCHECK(*cp); - printf(" %dmin ", *cp++ * 5); + ND_TCHECK(*cp); + ND_PRINT((ndo, " %dmin ", EXTRACT_U_1(cp) * 5)); + cp++; PRINT; - putchar('.'); + ND_PRINT((ndo, ".")); PRINT; break; case AUTH_MSG_APPL_REQUEST: cp += 2; - TCHECK(*cp); - printf("v%d ", *cp++); + ND_TCHECK(*cp); + ND_PRINT((ndo, "v%d ", EXTRACT_U_1(cp))); + cp++; PRINT; - TCHECK(*cp); - printf(" (%d)", *cp++); - TCHECK(*cp); - printf(" (%d)", *cp); + ND_TCHECK(*cp); + ND_PRINT((ndo, " (%d)", EXTRACT_U_1(cp))); + cp++; + ND_TCHECK(*cp); + ND_PRINT((ndo, " (%d)", EXTRACT_U_1(cp))); break; case AUTH_MSG_KDC_REPLY: - if ((cp = krb4_print_hdr(cp)) == NULL) + if ((cp = krb4_print_hdr(ndo, cp)) == NULL) return; cp += 10; /* timestamp + n + exp + kvno */ - TCHECK2(*cp, sizeof(short)); + ND_TCHECK2(*cp, sizeof(short)); len = KTOHSP(kp, cp); - printf(" (%d)", len); + ND_PRINT((ndo, " (%d)", len)); break; case AUTH_MSG_ERR_REPLY: - if ((cp = krb4_print_hdr(cp)) == NULL) + if ((cp = krb4_print_hdr(ndo, cp)) == NULL) return; cp += 4; /* timestamp */ - TCHECK2(*cp, sizeof(short)); - printf(" %s ", tok2str(kerr2str, NULL, KTOHSP(kp, cp))); + ND_TCHECK2(*cp, sizeof(short)); + ND_PRINT((ndo, " %s ", tok2str(kerr2str, NULL, KTOHSP(kp, cp)))); cp += 4; PRINT; break; default: - fputs("(unknown)", stdout); + ND_PRINT((ndo, "(unknown)")); break; } return; trunc: - fputs(tstr, stdout); + ND_PRINT((ndo, "%s", tstr)); } void -krb_print(const u_char *dat) +krb_print(netdissect_options *ndo, + const u_char *dat) { register const struct krb *kp; - kp = (struct krb *)dat; + kp = (const struct krb *)dat; - if (dat >= snapend) { - fputs(tstr, stdout); + if (dat >= ndo->ndo_snapend) { + ND_PRINT((ndo, "%s", tstr)); return; } @@ -238,17 +261,17 @@ krb_print(const u_char *dat) case 1: case 2: case 3: - printf(" v%d", kp->pvno); + ND_PRINT((ndo, " v%d", kp->pvno)); break; case 4: - printf(" v%d", kp->pvno); - krb4_print((const u_char *)kp); + ND_PRINT((ndo, " v%d", kp->pvno)); + krb4_print(ndo, (const u_char *)kp); break; case 106: case 107: - fputs(" v5", stdout); + ND_PRINT((ndo, " v5")); /* Decode ASN.1 here "someday" */ break; }