From f131f027b47937d651804c243cde86ec0bf87e67 Mon Sep 17 00:00:00 2001 From: rgrimes Date: Sat, 12 Jun 1993 14:49:13 +0000 Subject: Initial import, 0.1 + pk 0.2.4-B1 --- usr.sbin/tcpdump/tcpdump/Makefile | 24 + usr.sbin/tcpdump/tcpdump/VERSION | 1 + usr.sbin/tcpdump/tcpdump/addrtoname.c | 478 ++++++++++++ usr.sbin/tcpdump/tcpdump/addrtoname.h | 36 + usr.sbin/tcpdump/tcpdump/appletalk.h | 156 ++++ usr.sbin/tcpdump/tcpdump/bootp.h | 103 +++ usr.sbin/tcpdump/tcpdump/bpf_dump.c | 61 ++ usr.sbin/tcpdump/tcpdump/extract.h | 49 ++ usr.sbin/tcpdump/tcpdump/interface.h | 111 +++ usr.sbin/tcpdump/tcpdump/md.h | 40 + usr.sbin/tcpdump/tcpdump/mib.h | 1256 +++++++++++++++++++++++++++++++ usr.sbin/tcpdump/tcpdump/ntp.h | 117 +++ usr.sbin/tcpdump/tcpdump/os.h | 85 +++ usr.sbin/tcpdump/tcpdump/ospf.h | 223 ++++++ usr.sbin/tcpdump/tcpdump/print-arp.c | 100 +++ usr.sbin/tcpdump/tcpdump/print-atalk.c | 478 ++++++++++++ usr.sbin/tcpdump/tcpdump/print-bootp.c | 263 +++++++ usr.sbin/tcpdump/tcpdump/print-domain.c | 287 +++++++ usr.sbin/tcpdump/tcpdump/print-egp.c | 347 +++++++++ usr.sbin/tcpdump/tcpdump/print-ether.c | 123 +++ usr.sbin/tcpdump/tcpdump/print-fddi.c | 236 ++++++ usr.sbin/tcpdump/tcpdump/print-icmp.c | 207 +++++ usr.sbin/tcpdump/tcpdump/print-ip.c | 313 ++++++++ usr.sbin/tcpdump/tcpdump/print-nfs.c | 466 ++++++++++++ usr.sbin/tcpdump/tcpdump/print-ntp.c | 277 +++++++ usr.sbin/tcpdump/tcpdump/print-null.c | 117 +++ usr.sbin/tcpdump/tcpdump/print-ospf.c | 586 ++++++++++++++ usr.sbin/tcpdump/tcpdump/print-ppp.c | 102 +++ usr.sbin/tcpdump/tcpdump/print-rip.c | 116 +++ usr.sbin/tcpdump/tcpdump/print-sl.c | 246 ++++++ usr.sbin/tcpdump/tcpdump/print-snmp.c | 1043 +++++++++++++++++++++++++ usr.sbin/tcpdump/tcpdump/print-sunrpc.c | 136 ++++ usr.sbin/tcpdump/tcpdump/print-tcp.c | 287 +++++++ usr.sbin/tcpdump/tcpdump/print-tftp.c | 149 ++++ usr.sbin/tcpdump/tcpdump/print-udp.c | 141 ++++ usr.sbin/tcpdump/tcpdump/tcpdump.c | 347 +++++++++ usr.sbin/tcpdump/tcpdump/util.c | 278 +++++++ 37 files changed, 9385 insertions(+) create mode 100644 usr.sbin/tcpdump/tcpdump/Makefile create mode 100644 usr.sbin/tcpdump/tcpdump/VERSION create mode 100644 usr.sbin/tcpdump/tcpdump/addrtoname.c create mode 100644 usr.sbin/tcpdump/tcpdump/addrtoname.h create mode 100644 usr.sbin/tcpdump/tcpdump/appletalk.h create mode 100644 usr.sbin/tcpdump/tcpdump/bootp.h create mode 100644 usr.sbin/tcpdump/tcpdump/bpf_dump.c create mode 100644 usr.sbin/tcpdump/tcpdump/extract.h create mode 100644 usr.sbin/tcpdump/tcpdump/interface.h create mode 100644 usr.sbin/tcpdump/tcpdump/md.h create mode 100644 usr.sbin/tcpdump/tcpdump/mib.h create mode 100644 usr.sbin/tcpdump/tcpdump/ntp.h create mode 100644 usr.sbin/tcpdump/tcpdump/os.h create mode 100644 usr.sbin/tcpdump/tcpdump/ospf.h create mode 100644 usr.sbin/tcpdump/tcpdump/print-arp.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-atalk.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-bootp.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-domain.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-egp.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-ether.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-fddi.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-icmp.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-ip.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-nfs.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-ntp.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-null.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-ospf.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-ppp.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-rip.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-sl.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-snmp.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-sunrpc.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-tcp.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-tftp.c create mode 100644 usr.sbin/tcpdump/tcpdump/print-udp.c create mode 100644 usr.sbin/tcpdump/tcpdump/tcpdump.c create mode 100644 usr.sbin/tcpdump/tcpdump/util.c (limited to 'usr.sbin/tcpdump') diff --git a/usr.sbin/tcpdump/tcpdump/Makefile b/usr.sbin/tcpdump/tcpdump/Makefile new file mode 100644 index 0000000..fee9554 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/Makefile @@ -0,0 +1,24 @@ +# @(#)Makefile 0.1 (RWGrimes) 3/24/93 + +PROG= tcpdump +CFLAGS+=-DCSLIP -I. +MAN1= tcpdump.0 +SRCS= version.c addrtoname.c bpf_dump.c bpf_filter.c bpf_image.c etherent.c \ + gencode.c inet.c md.c nametoaddr.c optimize.c os.c pcap.c \ + print-arp.c print-atalk.c print-bootp.c print-domain.c \ + print-egp.c print-ether.c print-fddi.c print-icmp.c print-ip.c \ + print-nfs.c print-ntp.c print-null.c print-ospf.c print-ppp.c \ + print-rip.c print-sl.c print-snmp.c print-sunrpc.c print-tcp.c \ + print-tftp.c print-udp.c savefile.c tcpdump.c tcpgram.c \ + tcplex.c util.c +.PATH: /sys/net +CLEANFILES+= tcpgram.c tcplex.c y.tab.h y.tab.c version.c version.h + +version.c version.h: VERSION + rm -f version.c ; \ + sed 's/.*/char version[] = "&";/' $(.CURDIR)/VERSION > version.c + set `sed 's/\([0-9]*\)\.\([0-9]*\).*/\1 \2/' $(.CURDIR)/VERSION` ; \ + { echo '#define VERSION_MAJOR' $$1 ; \ + echo '#define VERSION_MINOR' $$2 ; } > version.h + +.include diff --git a/usr.sbin/tcpdump/tcpdump/VERSION b/usr.sbin/tcpdump/tcpdump/VERSION new file mode 100644 index 0000000..c043eea --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/VERSION @@ -0,0 +1 @@ +2.2.1 diff --git a/usr.sbin/tcpdump/tcpdump/addrtoname.c b/usr.sbin/tcpdump/tcpdump/addrtoname.c new file mode 100644 index 0000000..5c70865 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/addrtoname.c @@ -0,0 +1,478 @@ +/* + * Copyright (c) 1988, 1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * Internet, ethernet, port, and protocol string to address + * and address to string conversion routines + */ +#ifndef lint +static char rcsid[] = + "@(#) $Header: addrtoname.c,v 1.14 92/05/25 14:29:07 mccanne Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include "interface.h" +#include "addrtoname.h" +#include "nametoaddr.h" +#include "etherent.h" + +/* + * hash tables for whatever-to-name translations + */ + +#define HASHNAMESIZE 4096 + +struct hnamemem { + u_long addr; + char *name; + struct hnamemem *nxt; +}; + +struct hnamemem hnametable[HASHNAMESIZE]; +struct hnamemem tporttable[HASHNAMESIZE]; +struct hnamemem uporttable[HASHNAMESIZE]; +struct hnamemem eprototable[HASHNAMESIZE]; + +struct enamemem { + u_short e_addr0; + u_short e_addr1; + u_short e_addr2; + char *e_name; + struct enamemem *e_nxt; +}; + +struct enamemem enametable[HASHNAMESIZE]; + + +/* + * A faster replacement for inet_ntoa(). + */ +char * +intoa(addr) + u_long addr; +{ + register char *cp; + register u_int byte; + register int n; + static char buf[sizeof(".xxx.xxx.xxx.xxx")]; + + NTOHL(addr); + cp = &buf[sizeof buf]; + *--cp = '\0'; + + n = 4; + do { + byte = addr & 0xff; + *--cp = byte % 10 + '0'; + byte /= 10; + if (byte > 0) { + *--cp = byte % 10 + '0'; + byte /= 10; + if (byte > 0) + *--cp = byte + '0'; + } + *--cp = '.'; + addr >>= 8; + } while (--n > 0); + + return cp + 1; +} + +static u_long f_netmask; +static u_long f_localnet; +static u_long netmask; + +/* + * "getname" is written in this atrocious way to make sure we don't + * wait forever while trying to get hostnames from yp. + */ +#include + +jmp_buf getname_env; + +static void +nohostname() +{ + longjmp(getname_env, 1); +} + +/* + * Return a name for the IP address pointed to by ap. This address + * is assumed to be in network byte order. + */ +char * +getname(ap) + u_char *ap; +{ + register struct hnamemem *p; + register struct hostent *hp; + register char *cp; + u_long addr; + +#ifndef TCPDUMP_ALIGN + addr = *(u_long *)ap; +#else + /* + * Deal with alignment. + */ + switch ((int)ap & 3) { + + case 0: + addr = *(u_long *)ap; + break; + + case 2: +#if BYTE_ORDER == LITTLE_ENDIAN + addr = ((u_long)*(u_short *)(ap + 2) << 16) | + (u_long)*(u_short *)ap; +#else + addr = ((u_long)*(u_short *)ap << 16) | + (u_long)*(u_short *)(ap + 2); +#endif + break; + + default: +#if BYTE_ORDER == LITTLE_ENDIAN + addr = ((u_long)ap[0] << 24) | + ((u_long)ap[1] << 16) | + ((u_long)ap[2] << 8) | + (u_long)ap[3]; +#else + addr = ((u_long)ap[3] << 24) | + ((u_long)ap[2] << 16) | + ((u_long)ap[1] << 8) | + (u_long)ap[0]; +#endif + break; + } +#endif + p = &hnametable[addr & (HASHNAMESIZE-1)]; + for (; p->nxt; p = p->nxt) { + if (p->addr == addr) + return (p->name); + } + p->addr = addr; + p->nxt = (struct hnamemem *)calloc(1, sizeof (*p)); + + /* + * Only print names when: + * (1) -n was not given. + * (2) Address is foreign and -f was given. If -f was not + * present, f_netmask and f_local are 0 and the second + * test will succeed. + * (3) The host portion is not 0 (i.e., a network address). + * (4) The host portion is not broadcast. + */ + if (!nflag && (addr & f_netmask) == f_localnet + && (addr &~ netmask) != 0 && (addr | netmask) != 0xffffffff) { + if (!setjmp(getname_env)) { + (void)signal(SIGALRM, nohostname); + (void)alarm(20); + hp = gethostbyaddr((char *)&addr, 4, AF_INET); + (void)alarm(0); + if (hp) { + char *index(); + char *dotp; + u_int len = strlen(hp->h_name) + 1; + p->name = (char *)malloc(len); + (void)strcpy(p->name, hp->h_name); + if (Nflag) { + /* Remove domain qualifications */ + dotp = index(p->name, '.'); + if (dotp) + *dotp = 0; + } + return (p->name); + } + } + } + cp = intoa(addr); + p->name = (char *)malloc((unsigned)(strlen(cp) + 1)); + (void)strcpy(p->name, cp); + return (p->name); +} + +static char hex[] = "0123456789abcdef"; + + +/* Find the hash node that corresponds the ether address 'ep'. */ + +static inline struct enamemem * +lookup_emem(ep) + u_char *ep; +{ + register u_int i, j, k; + struct enamemem *tp; + + k = (ep[0] << 8) | ep[1]; + j = (ep[2] << 8) | ep[3]; + i = (ep[4] << 8) | ep[5]; + + tp = &enametable[(i ^ j) & (HASHNAMESIZE-1)]; + while (tp->e_nxt) + if (tp->e_addr0 == i && + tp->e_addr1 == j && + tp->e_addr2 == k) + return tp; + else + tp = tp->e_nxt; + tp->e_addr0 = i; + tp->e_addr1 = j; + tp->e_addr2 = k; + tp->e_nxt = (struct enamemem *)calloc(1, sizeof(*tp)); + + return tp; +} + +char * +etheraddr_string(ep) + register u_char *ep; +{ + register u_int i, j; + register char *cp; + register struct enamemem *tp; + + tp = lookup_emem(ep); + if (tp->e_name) + return tp->e_name; + +#ifdef ETHER_SERVICE + if (!nflag) { + cp = ETHER_ntohost(ep); + if (cp) { + tp->e_name = cp; + return cp; + } + } +#endif + tp->e_name = cp = (char *)malloc(sizeof("00:00:00:00:00:00")); + + if (j = *ep >> 4) + *cp++ = hex[j]; + *cp++ = hex[*ep++ & 0xf]; + for (i = 5; (int)--i >= 0;) { + *cp++ = ':'; + if (j = *ep >> 4) + *cp++ = hex[j]; + *cp++ = hex[*ep++ & 0xf]; + } + *cp = '\0'; + return (tp->e_name); +} + +char * +etherproto_string(port) + u_short port; +{ + register char *cp; + register struct hnamemem *tp; + register u_long i = port; + + for (tp = &eprototable[i & (HASHNAMESIZE-1)]; tp->nxt; tp = tp->nxt) + if (tp->addr == i) + return (tp->name); + + tp->name = cp = (char *)malloc(sizeof("0000")); + tp->addr = i; + tp->nxt = (struct hnamemem *)calloc(1, sizeof (*tp)); + + NTOHS(port); + *cp++ = hex[port >> 12 & 0xf]; + *cp++ = hex[port >> 8 & 0xf]; + *cp++ = hex[port >> 4 & 0xf]; + *cp++ = hex[port & 0xf]; + *cp++ = '\0'; + return (tp->name); +} + +char * +tcpport_string(port) + u_short port; +{ + register struct hnamemem *tp; + register int i = port; + + for (tp = &tporttable[i & (HASHNAMESIZE-1)]; tp->nxt; tp = tp->nxt) + if (tp->addr == i) + return (tp->name); + + tp->name = (char *)malloc(sizeof("00000")); + tp->addr = i; + tp->nxt = (struct hnamemem *)calloc(1, sizeof (*tp)); + + (void)sprintf(tp->name, "%d", i); + return (tp->name); +} + +char * +udpport_string(port) + register u_short port; +{ + register struct hnamemem *tp; + register int i = port; + + for (tp = &uporttable[i & (HASHNAMESIZE-1)]; tp->nxt; tp = tp->nxt) + if (tp->addr == i) + return (tp->name); + + tp->name = (char *)malloc(sizeof("00000")); + tp->addr = i; + tp->nxt = (struct hnamemem *)calloc(1, sizeof(*tp)); + + (void)sprintf(tp->name, "%d", i); + + return (tp->name); +} + +static void +init_servarray() +{ + struct servent *sv; + register struct hnamemem *table; + register int i; + + while (sv = getservent()) { + NTOHS(sv->s_port); + i = sv->s_port & (HASHNAMESIZE-1); + if (strcmp(sv->s_proto, "tcp") == 0) + table = &tporttable[i]; + else if (strcmp(sv->s_proto, "udp") == 0) + table = &uporttable[i]; + else + continue; + + while (table->name) + table = table->nxt; + if (nflag) { + char buf[32]; + + (void)sprintf(buf, "%d", sv->s_port); + table->name = (char *)malloc((unsigned)strlen(buf)+1); + (void)strcpy(table->name, buf); + } else { + table->name = + (char *)malloc((unsigned)strlen(sv->s_name)+1); + (void)strcpy(table->name, sv->s_name); + } + table->addr = sv->s_port; + table->nxt = (struct hnamemem *)calloc(1, sizeof(*table)); + } + endservent(); +} + +#include "etherproto.h" + +/* Static data base of ether protocol types. */ +struct eproto eproto_db[] = { + { "pup", ETHERTYPE_PUP }, + { "xns", ETHERTYPE_NS }, + { "ip", ETHERTYPE_IP }, + { "arp", ETHERTYPE_ARP }, + { "rarp", ETHERTYPE_REVARP }, + { "sprite", ETHERTYPE_SPRITE }, + { "mopdl", ETHERTYPE_MOPDL }, + { "moprc", ETHERTYPE_MOPRC }, + { "decnet", ETHERTYPE_DN }, + { "lat", ETHERTYPE_LAT }, + { "lanbridge", ETHERTYPE_LANBRIDGE }, + { "vexp", ETHERTYPE_VEXP }, + { "vprod", ETHERTYPE_VPROD }, + { "atalk", ETHERTYPE_ATALK }, + { "atalkarp", ETHERTYPE_AARP }, + { "loopback", ETHERTYPE_LOOPBACK }, + { (char *)0, 0 } +}; + +static void +init_eprotoarray() +{ + register int i; + register struct hnamemem *table; + + for (i = 0; eproto_db[i].s; i++) { + int j = ntohs(eproto_db[i].p) & (HASHNAMESIZE-1); + table = &eprototable[j]; + while (table->name) + table = table->nxt; + table->name = eproto_db[i].s; + table->addr = ntohs(eproto_db[i].p); + table->nxt = (struct hnamemem *)calloc(1, sizeof(*table)); + } +} + +static void +init_etherarray() +{ +#ifndef ETHER_SERVICE + FILE *fp; + struct etherent *ep; + struct enamemem *tp; + + fp = fopen(ETHERS_FILE, "r"); + if (fp == 0) + /* No data base; will have to settle for + numeric addresses. */ + return; + + while (ep = next_etherent(fp)) { + tp = lookup_emem(ep->addr); + tp->e_name = (char *)malloc((unsigned)strlen(ep->name)+1); + strcpy(tp->e_name, ep->name); + } +#endif +} + +/* + * Initialize the address to name translation machinery. We map all + * non-local IP addresses to numeric addresses if fflag is true (i.e., + * to prevent blocking on the nameserver). localnet is the IP address + * of the local network. mask is its subnet mask. + */ +void +init_addrtoname(fflag, localnet, mask) + int fflag; + u_long localnet; + u_long mask; +{ + netmask = mask; + if (fflag) { + f_localnet = localnet; + f_netmask = mask; + } + if (nflag) + /* + * Simplest way to suppress names. + */ + return; + + init_etherarray(); + init_servarray(); + init_eprotoarray(); +} diff --git a/usr.sbin/tcpdump/tcpdump/addrtoname.h b/usr.sbin/tcpdump/tcpdump/addrtoname.h new file mode 100644 index 0000000..6dc6979 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/addrtoname.h @@ -0,0 +1,36 @@ +/* + * Copyright (c) 1988, 1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * @(#) $Header: addrtoname.h,v 1.5 92/03/17 13:41:37 mccanne Exp $ (LBL) + */ + +/* Name to address translation routines. */ + +extern char *etheraddr_string(); +extern char *etherproto_string(); +extern char *tcpport_string(); +extern char *udpport_string(); +extern char *getname(); +extern char *intoa(); + +extern void init_addrtoname(); +extern void no_foreign_names(); + +#define ipaddr_string(p) getname((u_char *)(p)) diff --git a/usr.sbin/tcpdump/tcpdump/appletalk.h b/usr.sbin/tcpdump/tcpdump/appletalk.h new file mode 100644 index 0000000..90c8c80 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/appletalk.h @@ -0,0 +1,156 @@ +/* + * Copyright (c) 1988 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * AppleTalk protocol formats (courtesy Bill Croft of Stanford/SUMEX). + * + * @(#) $Header: appletalk.h,v 1.6 90/10/03 22:14:26 leres Exp $ (LBL) + */ + +/* Datagram Delivery Protocol */ + +struct atDDP { + u_short length; + u_short checksum; + u_short dstNet; + u_short srcNet; + u_char dstNode; + u_char srcNode; + u_char dstSkt; + u_char srcSkt; + u_char type; +}; + +struct atShortDDP { + u_short length; + u_char dstSkt; + u_char srcSkt; + u_char type; +}; + +#define ddpMaxWKS 0x7F +#define ddpMaxData 586 +#define ddpLengthMask 0x3FF +#define ddpHopShift 10 +#define ddpSize 13 /* size of DDP header (avoid struct padding) */ +#define ddpSSize 5 +#define ddpWKS 128 /* boundary of DDP well known sockets */ +#define ddpRTMP 1 /* RTMP type */ +#define ddpRTMPrequest 5 /* RTMP request type */ +#define ddpNBP 2 /* NBP type */ +#define ddpATP 3 /* ATP type */ +#define ddpECHO 4 /* ECHO type */ +#define ddpIP 22 /* IP type */ +#define ddpARP 23 /* ARP type */ +#define ddpKLAP 0x4b /* Kinetics KLAP type */ + + +/* AppleTalk Transaction Protocol */ + +struct atATP { + u_char control; + u_char bitmap; + u_short transID; + long userData; +}; + +#define atpReqCode 0x40 +#define atpRspCode 0x80 +#define atpRelCode 0xC0 +#define atpXO 0x20 +#define atpEOM 0x10 +#define atpSTS 0x08 +#define atpFlagMask 0x3F +#define atpControlMask 0xF8 +#define atpMaxNum 8 +#define atpMaxData 578 + + +/* AppleTalk Echo Protocol */ + +struct atEcho { + u_char echoFunction; + u_char *echoData; +}; + +#define echoSkt 4 /* the echoer socket */ +#define echoSize 1 /* size of echo header */ +#define echoRequest 1 /* echo request */ +#define echoReply 2 /* echo request */ + + +/* Name Binding Protocol */ + +struct atNBP { + u_char control; + u_char id; +}; + +struct atNBPtuple { + u_short net; + u_char node; + u_char skt; + u_char enumerator; +}; + +#define nbpBrRq 0x10 +#define nbpLkUp 0x20 +#define nbpLkUpReply 0x30 + +#define nbpNIS 2 +#define nbpTupleMax 15 + +#define nbpHeaderSize 2 +#define nbpTupleSize 5; + + +/* Routing Table Maint. Protocol */ + +#define rtmpSkt 1 /* number of RTMP socket */ +#define rtmpSize 4 /* minimum size */ +#define rtmpTupleSize 3 + + +/* Zone Information Protocol */ + +struct zipHeader { + u_char command; + u_char netcount; +}; + +#define zipHeaderSize 2 +#define zipQuery 1 +#define zipReply 2 +#define zipTakedown 3 +#define zipBringup 4 +#define ddpZIP 6 +#define zipSkt 6 +#define GetMyZone 7 +#define GetZoneList 8 + +/* + * UDP port range used for ddp-in-udp encapsulation is 16512-16639 + * for client sockets (128-255) and 200-327 for server sockets + * (0-127). We also try to recognize the pre-April 88 server + * socket range of 768-895. + */ +#define atalk_port(p) \ + (((unsigned)((p) - 16512) < 128) || \ + ((unsigned)((p) - 200) < 128) || \ + ((unsigned)((p) - 768) < 128)) diff --git a/usr.sbin/tcpdump/tcpdump/bootp.h b/usr.sbin/tcpdump/tcpdump/bootp.h new file mode 100644 index 0000000..ab474cf --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/bootp.h @@ -0,0 +1,103 @@ +/* @(#) $Header: bootp.h,v 1.2 90/05/29 21:29:16 leres Exp $ (LBL) */ +/* + * Bootstrap Protocol (BOOTP). RFC951 and RFC1048. + * + * This file specifies the "implementation-independent" BOOTP protocol + * information which is common to both client and server. + * + * Copyright 1988 by Carnegie Mellon. + * + * Permission to use, copy, modify, and distribute this program for any + * purpose and without fee is hereby granted, provided that this copyright + * and permission notice appear on all copies and supporting documentation, + * the name of Carnegie Mellon not be used in advertising or publicity + * pertaining to distribution of the program without specific prior + * permission, and notice be given in supporting documentation that copying + * and distribution is by permission of Carnegie Mellon and Stanford + * University. Carnegie Mellon makes no representations about the + * suitability of this software for any purpose. It is provided "as is" + * without express or implied warranty. + */ + + +struct bootp { + unsigned char bp_op; /* packet opcode type */ + unsigned char bp_htype; /* hardware addr type */ + unsigned char bp_hlen; /* hardware addr length */ + unsigned char bp_hops; /* gateway hops */ + unsigned long bp_xid; /* transaction ID */ + unsigned short bp_secs; /* seconds since boot began */ + unsigned short bp_unused; + struct in_addr bp_ciaddr; /* client IP address */ + struct in_addr bp_yiaddr; /* 'your' IP address */ + struct in_addr bp_siaddr; /* server IP address */ + struct in_addr bp_giaddr; /* gateway IP address */ + unsigned char bp_chaddr[16]; /* client hardware address */ + unsigned char bp_sname[64]; /* server host name */ + unsigned char bp_file[128]; /* boot file name */ + unsigned char bp_vend[64]; /* vendor-specific area */ +}; + +/* + * UDP port numbers, server and client. + */ +#define IPPORT_BOOTPS 67 +#define IPPORT_BOOTPC 68 + +#define BOOTREPLY 2 +#define BOOTREQUEST 1 + + +/* + * Vendor magic cookie (v_magic) for CMU + */ +#define VM_CMU "CMU" + +/* + * Vendor magic cookie (v_magic) for RFC1048 + */ +#define VM_RFC1048 { 99, 130, 83, 99 } + + + +/* + * RFC1048 tag values used to specify what information is being supplied in + * the vendor field of the packet. + */ + +#define TAG_PAD ((unsigned char) 0) +#define TAG_SUBNET_MASK ((unsigned char) 1) +#define TAG_TIME_OFFSET ((unsigned char) 2) +#define TAG_GATEWAY ((unsigned char) 3) +#define TAG_TIME_SERVER ((unsigned char) 4) +#define TAG_NAME_SERVER ((unsigned char) 5) +#define TAG_DOMAIN_SERVER ((unsigned char) 6) +#define TAG_LOG_SERVER ((unsigned char) 7) +#define TAG_COOKIE_SERVER ((unsigned char) 8) +#define TAG_LPR_SERVER ((unsigned char) 9) +#define TAG_IMPRESS_SERVER ((unsigned char) 10) +#define TAG_RLP_SERVER ((unsigned char) 11) +#define TAG_HOSTNAME ((unsigned char) 12) +#define TAG_BOOTSIZE ((unsigned char) 13) +#define TAG_END ((unsigned char) 255) + + + +/* + * "vendor" data permitted for CMU bootp clients. + */ + +struct cmu_vend { + unsigned char v_magic[4]; /* magic number */ + unsigned long v_flags; /* flags/opcodes, etc. */ + struct in_addr v_smask; /* Subnet mask */ + struct in_addr v_dgate; /* Default gateway */ + struct in_addr v_dns1, v_dns2; /* Domain name servers */ + struct in_addr v_ins1, v_ins2; /* IEN-116 name servers */ + struct in_addr v_ts1, v_ts2; /* Time servers */ + unsigned char v_unused[25]; /* currently unused */ +}; + + +/* v_flags values */ +#define VF_SMASK 1 /* Subnet mask field contains valid data */ diff --git a/usr.sbin/tcpdump/tcpdump/bpf_dump.c b/usr.sbin/tcpdump/tcpdump/bpf_dump.c new file mode 100644 index 0000000..fab9596 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/bpf_dump.c @@ -0,0 +1,61 @@ +/* + * Copyright (c) 1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ +#ifndef lint +static char rcsid[] = + "@(#) $Header: bpf_dump.c,v 1.1 92/01/29 13:25:30 mccanne Exp $ (LBL)"; +#endif + +#include +#include +#include + +void +bpf_dump(p, option) + struct bpf_program *p; + int option; +{ + struct bpf_insn *insn; + int i; + int n = p->bf_len; + + insn = p->bf_insns; + if (option > 2) { + printf("%d\n", n); + for (i = 0; i < n; ++insn, ++i) { + printf("%lu %lu %lu %lu\n", insn->code, + insn->jt, insn->jf, insn->k); + } + return ; + } + if (option > 1) { + for (i = 0; i < n; ++insn, ++i) + printf("{ 0x%x, %d, %d, 0x%08x },\n", + insn->code, insn->jt, insn->jf, insn->k); + return; + } + for (i = 0; i < n; ++insn, ++i) { +#ifdef BDEBUG + extern int bids[]; + printf(bids[i] > 0 ? "[%02d]" : " -- ", bids[i] - 1); +#endif + puts(bpf_image(insn, i)); + } +} diff --git a/usr.sbin/tcpdump/tcpdump/extract.h b/usr.sbin/tcpdump/tcpdump/extract.h new file mode 100644 index 0000000..bd45c59 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/extract.h @@ -0,0 +1,49 @@ +/* + * Copyright (c) 1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * @(#) $Header: extract.h,v 1.4 92/05/25 14:28:36 mccanne Exp $ (LBL) + */ + +#ifdef TCPDUMP_ALIGN +#if BYTEORDER == LITTLE_ENDIAN +#define EXTRACT_SHORT(p)\ + ((u_short)\ + ((u_short)*((u_char *)p+1)<<8|\ + (u_short)*((u_char *)p+0)<<0)) +#define EXTRACT_LONG(p)\ + ((u_long)*((u_char *)p+3)<<24|\ + (u_long)*((u_char *)p+2)<<16|\ + (u_long)*((u_char *)p+1)<<8|\ + (u_long)*((u_char *)p+0)<<0) +#else +#define EXTRACT_SHORT(p)\ + ((u_short)\ + ((u_short)*((u_char *)p+0)<<8|\ + (u_short)*((u_char *)p+1)<<0)) +#define EXTRACT_LONG(p)\ + ((u_long)*((u_char *)p+0)<<24|\ + (u_long)*((u_char *)p+1)<<16|\ + (u_long)*((u_char *)p+2)<<8|\ + (u_long)*((u_char *)p+3)<<0) +#endif +#else +#define EXTRACT_SHORT(p) ((u_short)ntohs(*(u_short *)p)) +#define EXTRACT_LONG(p) (ntohl(*(u_long *)p)) +#endif diff --git a/usr.sbin/tcpdump/tcpdump/interface.h b/usr.sbin/tcpdump/tcpdump/interface.h new file mode 100644 index 0000000..dfccba6 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/interface.h @@ -0,0 +1,111 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * @(#) $Header: interface.h,v 1.46 92/06/02 17:57:22 mccanne Exp $ (LBL) + */ + +#ifdef __GNUC__ +#define inline __inline +#else +#define inline +#endif + +#include "os.h" /* operating system stuff */ +#include "md.h" /* machine dependent stuff */ + +#ifndef __STDC__ +extern char *malloc(); +extern char *calloc(); +#endif + +extern int dflag; /* print filter code */ +extern int eflag; /* print ethernet header */ +extern int nflag; /* leave addresses as numbers */ +extern int Nflag; /* remove domains from printed host names */ +extern int qflag; /* quick (shorter) output */ +extern int Sflag; /* print raw TCP sequence numbers */ +extern int tflag; /* print packet arrival time */ +extern int vflag; /* verbose */ +extern int xflag; /* print packet in hex */ + +extern char *program_name; /* used to generate self-identifying messages */ + +extern int snaplen; +/* global pointers to beginning and end of current packet (during printing) */ +extern unsigned char *packetp; +extern unsigned char *snapend; + +extern long thiszone; /* gmt to local correction */ + +extern void ts_print(); +extern int clock_sigfigs(); + +extern char *lookup_device(); + +extern void error(); +extern void warning(); + +extern char *read_infile(); +extern char *copy_argv(); + +extern void usage(); +extern void show_code(); +extern void init_addrtoname(); + +/* The printer routines. */ + +extern void ether_if_print(); +extern void arp_print(); +extern void ip_print(); +extern void tcp_print(); +extern void udp_print(); +extern void icmp_print(); +extern void default_print(); + +extern void ntp_print(); +extern void nfsreq_print(); +extern void nfsreply_print(); +extern void ns_print(); +extern void ddp_print(); +extern void rip_print(); +extern void tftp_print(); +extern void bootp_print(); +extern void snmp_print(); +extern void sl_if_print(); +extern void ppp_if_print(); +extern void fddi_if_print(); +extern void null_if_print(); +extern void egp_print(); + +#define min(a,b) ((a)>(b)?(b):(a)) +#define max(a,b) ((b)>(a)?(b):(a)) + +/* + * The default snapshot length. This value allows most printers to print + * useful information while keeping the amount of unwanted data down. + * In particular, it allows for an ethernet header, tcp/ip header, and + * 14 bytes of data (assuming no ip options). + */ +#define DEFAULT_SNAPLEN 68 + +#ifndef BIG_ENDIAN +#define BIG_ENDIAN 4321 +#define LITTLE_ENDIAN 1234 +#endif diff --git a/usr.sbin/tcpdump/tcpdump/md.h b/usr.sbin/tcpdump/tcpdump/md.h new file mode 100644 index 0000000..f83d81f --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/md.h @@ -0,0 +1,40 @@ +/* + * Copyright (c) 1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * @(#) $Header: md-vax.h,v 1.2 90/09/21 02:23:16 mccanne Exp $ (LBL) + */ + +#ifndef BYTE_ORDER +#define BYTE_ORDER LITTLE_ENDIAN +#endif + +/* These should be fixed to be real macros, for speed */ + +#ifndef NTOHL +#define NTOHL(x) (x) = ntohl(x) +#define NTOHS(x) (x) = ntohs(x) +#define HTONL(x) (x) = htonl(x) +#define HTONS(x) (x) = htons(x) +#endif + +#ifndef vax +/* Some Ultrix header files may need this */ +#define vax 1 +#endif vax diff --git a/usr.sbin/tcpdump/tcpdump/mib.h b/usr.sbin/tcpdump/tcpdump/mib.h new file mode 100644 index 0000000..a81897c --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/mib.h @@ -0,0 +1,1256 @@ +/* + * This file was generated by tcpdump/makemib on Wed Sep 26 12:12:31 EDT 1990 + * You probably don't want to edit this by hand! + * + * struct mib somename = { desc, oid-octet, type, child-pointer, next-pointer +}; + */ + +/* parse problem: new name "mib" for mgmt.mib(1) ignored */ +/* parse problem: no parent for 0.nullSpecific(0) */ +struct obj +_proteon_obj = { + "proteon", 1, 0, + NULL, NULL +}, +_ibm_obj = { + "ibm", 2, 0, + NULL, &_proteon_obj +}, +_cmu_obj = { + "cmu", 3, 0, + NULL, &_ibm_obj +}, +_unix_obj = { + "unix", 4, 0, + NULL, &_cmu_obj +}, +_acc_obj = { + "acc", 5, 0, + NULL, &_unix_obj +}, +_twg_obj = { + "twg", 6, 0, + NULL, &_acc_obj +}, +_cayman_obj = { + "cayman", 7, 0, + NULL, &_twg_obj +}, +_nysernet_obj = { + "nysernet", 8, 0, + NULL, &_cayman_obj +}, +_cisco_obj = { + "cisco", 9, 0, + NULL, &_nysernet_obj +}, +_nsc_obj = { + "nsc", 10, 0, + NULL, &_cisco_obj +}, +_hp_obj = { + "hp", 11, 0, + NULL, &_nsc_obj +}, +_epilogue_obj = { + "epilogue", 12, 0, + NULL, &_hp_obj +}, +_utennessee_obj = { + "utennessee", 13, 0, + NULL, &_epilogue_obj +}, +_bbn_obj = { + "bbn", 14, 0, + NULL, &_utennessee_obj +}, +_xylogics_obj = { + "xylogics", 15, 0, + NULL, &_bbn_obj +}, +_unisys_obj = { + "unisys", 16, 0, + NULL, &_xylogics_obj +}, +_canstar_obj = { + "canstar", 17, 0, + NULL, &_unisys_obj +}, +_wellfleet_obj = { + "wellfleet", 18, 0, + NULL, &_canstar_obj +}, +_trw_obj = { + "trw", 19, 0, + NULL, &_wellfleet_obj +}, +_mit_obj = { + "mit", 20, 0, + NULL, &_trw_obj +}, +_eon_obj = { + "eon", 21, 0, + NULL, &_mit_obj +}, +_spartacus_obj = { + "spartacus", 22, 0, + NULL, &_eon_obj +}, +_excelan_obj = { + "excelan", 23, 0, + NULL, &_spartacus_obj +}, +_spider_obj = { + "spider", 24, 0, + NULL, &_excelan_obj +}, +_nsfnet_obj = { + "nsfnet", 25, 0, + NULL, &_spider_obj +}, +_sytek_obj = { + "sytek", 26, 0, + NULL, &_nsfnet_obj +}, +_intergraph_obj = { + "intergraph", 27, 0, + NULL, &_sytek_obj +}, +_interlan_obj = { + "interlan", 28, 0, + NULL, &_intergraph_obj +}, +_vitalink_obj = { + "vitalink", 29, 0, + NULL, &_interlan_obj +}, +_ulana_obj = { + "ulana", 30, 0, + NULL, &_vitalink_obj +}, +_nswc_obj = { + "nswc", 31, 0, + NULL, &_ulana_obj +}, +_santacruzoperation_obj = { + "santacruzoperation", 32, 0, + NULL, &_nswc_obj +}, +_xyplex_obj = { + "xyplex", 33, 0, + NULL, &_santacruzoperation_obj +}, +_cray_obj = { + "cray", 34, 0, + NULL, &_xyplex_obj +}, +_bellnorthernresearch_obj = { + "bellnorthernresearch", 35, 0, + NULL, &_cray_obj +}, +_dec_obj = { + "dec", 36, 0, + NULL, &_bellnorthernresearch_obj +}, +_touch_obj = { + "touch", 37, 0, + NULL, &_dec_obj +}, +_networkresearchcorp_obj = { + "networkresearchcorp", 38, 0, + NULL, &_touch_obj +}, +_baylor_obj = { + "baylor", 39, 0, + NULL, &_networkresearchcorp_obj +}, +_nmfeccllnl_obj = { + "nmfeccllnl", 40, 0, + NULL, &_baylor_obj +}, +_sri_obj = { + "sri", 41, 0, + NULL, &_nmfeccllnl_obj +}, +_sun_obj = { + "sun", 42, 0, + NULL, &_sri_obj +}, +_3com_obj = { + "3com", 43, 0, + NULL, &_sun_obj +}, +_cmc_obj = { + "cmc", 44, 0, + NULL, &_3com_obj +}, +_synoptics_obj = { + "synoptics", 45, 0, + NULL, &_cmc_obj +}, +_cheyenne_obj = { + "cheyenne", 46, 0, + NULL, &_synoptics_obj +}, +_prime_obj = { + "prime", 47, 0, + NULL, &_cheyenne_obj +}, +_mcnc_obj = { + "mcnc", 48, 0, + NULL, &_prime_obj +}, +_chipcom_obj = { + "chipcom", 49, 0, + NULL, &_mcnc_obj +}, +_opticaldatasystems_obj = { + "opticaldatasystems", 50, 0, + NULL, &_chipcom_obj +}, +_gated_obj = { + "gated", 51, 0, + NULL, &_opticaldatasystems_obj +}, +_cabletron_obj = { + "cabletron", 52, 0, + NULL, &_gated_obj +}, +_apollo_obj = { + "apollo", 53, 0, + NULL, &_cabletron_obj +}, +_desktalksystems_obj = { + "desktalksystems", 54, 0, + NULL, &_apollo_obj +}, +_ssds_obj = { + "ssds", 55, 0, + NULL, &_desktalksystems_obj +}, +_castlerock_obj = { + "castlerock", 56, 0, + NULL, &_ssds_obj +}, +_mips_obj = { + "mips", 57, 0, + NULL, &_castlerock_obj +}, +_tgv_obj = { + "tgv", 58, 0, + NULL, &_mips_obj +}, +_silicongraphics_obj = { + "silicongraphics", 59, 0, + NULL, &_tgv_obj +}, +_ubc_obj = { + "ubc", 60, 0, + NULL, &_silicongraphics_obj +}, +_merit_obj = { + "merit", 61, 0, + NULL, &_ubc_obj +}, +_fibercom_obj = { + "fibercom", 62, 0, + NULL, &_merit_obj +}, +_apple_obj = { + "apple", 63, 0, + NULL, &_fibercom_obj +}, +_gandalf_obj = { + "gandalf", 64, 0, + NULL, &_apple_obj +}, +_dartmouth_obj = { + "dartmouth", 65, 0, + NULL, &_gandalf_obj +}, +_davidsystems_obj = { + "davidsystems", 66, 0, + NULL, &_dartmouth_obj +}, +_reuter_obj = { + "reuter", 67, 0, + NULL, &_davidsystems_obj +}, +_cornell_obj = { + "cornell", 68, 0, + NULL, &_reuter_obj +}, +_tmac_obj = { + "tmac", 69, 0, + NULL, &_cornell_obj +}, +_locus_obj = { + "locus", 70, 0, + NULL, &_tmac_obj +}, +_nasa_obj = { + "nasa", 71, 0, + NULL, &_locus_obj +}, +_retix_obj = { + "retix", 72, 0, + NULL, &_nasa_obj +}, +_boeing_obj = { + "boeing", 73, 0, + NULL, &_retix_obj +}, +_att_obj = { + "att", 74, 0, + NULL, &_boeing_obj +}, +_ungermannbass_obj = { + "ungermannbass", 75, 0, + NULL, &_att_obj +}, +_digitalanalysis_obj = { + "digitalanalysis", 76, 0, + NULL, &_ungermannbass_obj +}, +_hplanman_obj = { + "hplanman", 77, 0, + NULL, &_digitalanalysis_obj +}, +_netlabs_obj = { + "netlabs", 78, 0, + NULL, &_hplanman_obj +}, +_icl_obj = { + "icl", 79, 0, + NULL, &_netlabs_obj +}, +_auspex_obj = { + "auspex", 80, 0, + NULL, &_icl_obj +}, +_lannet_obj = { + "lannet", 81, 0, + NULL, &_auspex_obj +}, +_ncd_obj = { + "ncd", 82, 0, + NULL, &_lannet_obj +}, +_raycom_obj = { + "raycom", 83, 0, + NULL, &_ncd_obj +}, +_pirellifocom_obj = { + "pirellifocom", 84, 0, + NULL, &_raycom_obj +}, +_datability_obj = { + "datability", 85, 0, + NULL, &_pirellifocom_obj +}, +_networkappltech_obj = { + "networkappltech", 86, 0, + NULL, &_datability_obj +}, +_link_obj = { + "link", 87, 0, + NULL, &_networkappltech_obj +}, +_nyu_obj = { + "nyu", 88, 0, + NULL, &_link_obj +}, +_rnd_obj = { + "rnd", 89, 0, + NULL, &_nyu_obj +}, +_intercon_obj = { + "intercon", 90, 0, + NULL, &_rnd_obj +}, +_learningtree_obj = { + "learningtree", 91, 0, + NULL, &_intercon_obj +}, +_webstercomputer_obj = { + "webstercomputer", 92, 0, + NULL, &_learningtree_obj +}, +_frontier_obj = { + "frontier", 93, 0, + NULL, &_webstercomputer_obj +}, +_nokia_obj = { + "nokia", 94, 0, + NULL, &_frontier_obj +}, +_allenbradley_obj = { + "allenbradley", 95, 0, + NULL, &_nokia_obj +}, +_cern_obj = { + "cern", 96, 0, + NULL, &_allenbradley_obj +}, +_sigma_obj = { + "sigma", 97, 0, + NULL, &_cern_obj +}, +_emergingtech_obj = { + "emergingtech", 98, 0, + NULL, &_sigma_obj +}, +_snmpresearch_obj = { + "snmpresearch", 99, 0, + NULL, &_emergingtech_obj +}, +_ohiostate_obj = { + "ohiostate", 100, 0, + NULL, &_snmpresearch_obj +}, +_ultra_obj = { + "ultra", 101, 0, + NULL, &_ohiostate_obj +}, +_ccur_obj = { + "ccur", 136, 0, + NULL, &_ultra_obj +}, +_enterprises_obj = { + "enterprises", 1, 0, + &_ccur_obj, NULL +}, +_snmpInPkts_obj = { + "snmpInPkts", 1, 0, + NULL, NULL +}, +_snmpOutPkts_obj = { + "snmpOutPkts", 2, 0, + NULL, &_snmpInPkts_obj +}, +_snmpInBadVersions_obj = { + "snmpInBadVersions", 3, 0, + NULL, &_snmpOutPkts_obj +}, +_snmpInBadCommunityNames_obj = { + "snmpInBadCommunityNames", 4, 0, + NULL, &_snmpInBadVersions_obj +}, +_snmpInBadCommunityUses_obj = { + "snmpInBadCommunityUses", 5, 0, + NULL, &_snmpInBadCommunityNames_obj +}, +_snmpInASNParseErrs_obj = { + "snmpInASNParseErrs", 6, 0, + NULL, &_snmpInBadCommunityUses_obj +}, +_snmpInBadTypes_obj = { + "snmpInBadTypes", 7, 0, + NULL, &_snmpInASNParseErrs_obj +}, +_snmpInTooBigs_obj = { + "snmpInTooBigs", 8, 0, + NULL, &_snmpInBadTypes_obj +}, +_snmpInNoSuchNames_obj = { + "snmpInNoSuchNames", 9, 0, + NULL, &_snmpInTooBigs_obj +}, +_snmpInBadValues_obj = { + "snmpInBadValues", 10, 0, + NULL, &_snmpInNoSuchNames_obj +}, +_snmpInReadOnlys_obj = { + "snmpInReadOnlys", 11, 0, + NULL, &_snmpInBadValues_obj +}, +_snmpInGenErrs_obj = { + "snmpInGenErrs", 12, 0, + NULL, &_snmpInReadOnlys_obj +}, +_snmpInTotalReqVars_obj = { + "snmpInTotalReqVars", 13, 0, + NULL, &_snmpInGenErrs_obj +}, +_snmpInTotalSetVars_obj = { + "snmpInTotalSetVars", 14, 0, + NULL, &_snmpInTotalReqVars_obj +}, +_snmpInGetRequests_obj = { + "snmpInGetRequests", 15, 0, + NULL, &_snmpInTotalSetVars_obj +}, +_snmpInGetNexts_obj = { + "snmpInGetNexts", 16, 0, + NULL, &_snmpInGetRequests_obj +}, +_snmpInSetRequests_obj = { + "snmpInSetRequests", 17, 0, + NULL, &_snmpInGetNexts_obj +}, +_snmpInGetResponses_obj = { + "snmpInGetResponses", 18, 0, + NULL, &_snmpInSetRequests_obj +}, +_snmpInTraps_obj = { + "snmpInTraps", 19, 0, + NULL, &_snmpInGetResponses_obj +}, +_snmpOutTooBigs_obj = { + "snmpOutTooBigs", 20, 0, + NULL, &_snmpInTraps_obj +}, +_snmpOutNoSuchNames_obj = { + "snmpOutNoSuchNames", 21, 0, + NULL, &_snmpOutTooBigs_obj +}, +_snmpOutBadValues_obj = { + "snmpOutBadValues", 22, 0, + NULL, &_snmpOutNoSuchNames_obj +}, +_snmpOutReadOnlys_obj = { + "snmpOutReadOnlys", 23, 0, + NULL, &_snmpOutBadValues_obj +}, +_snmpOutGenErrs_obj = { + "snmpOutGenErrs", 24, 0, + NULL, &_snmpOutReadOnlys_obj +}, +_snmpOutGetRequests_obj = { + "snmpOutGetRequests", 25, 0, + NULL, &_snmpOutGenErrs_obj +}, +_snmpOutGetNexts_obj = { + "snmpOutGetNexts", 26, 0, + NULL, &_snmpOutGetRequests_obj +}, +_snmpOutSetRequests_obj = { + "snmpOutSetRequests", 27, 0, + NULL, &_snmpOutGetNexts_obj +}, +_snmpOutGetResponses_obj = { + "snmpOutGetResponses", 28, 0, + NULL, &_snmpOutSetRequests_obj +}, +_snmpOutTraps_obj = { + "snmpOutTraps", 29, 0, + NULL, &_snmpOutGetResponses_obj +}, +_snmpEnableAuthTraps_obj = { + "snmpEnableAuthTraps", 30, 0, + NULL, &_snmpOutTraps_obj +}, +_egpNeighState_obj = { + "egpNeighState", 1, 0, + NULL, NULL +}, +_egpNeighAddr_obj = { + "egpNeighAddr", 2, 0, + NULL, &_egpNeighState_obj +}, +_egpNeighAs_obj = { + "egpNeighAs", 3, 0, + NULL, &_egpNeighAddr_obj +}, +_egpNeighInMsgs_obj = { + "egpNeighInMsgs", 4, 0, + NULL, &_egpNeighAs_obj +}, +_egpNeighInErrs_obj = { + "egpNeighInErrs", 5, 0, + NULL, &_egpNeighInMsgs_obj +}, +_egpNeighOutMsgs_obj = { + "egpNeighOutMsgs", 6, 0, + NULL, &_egpNeighInErrs_obj +}, +_egpNeighOutErrs_obj = { + "egpNeighOutErrs", 7, 0, + NULL, &_egpNeighOutMsgs_obj +}, +_egpNeighInErrMsgs_obj = { + "egpNeighInErrMsgs", 8, 0, + NULL, &_egpNeighOutErrs_obj +}, +_egpNeighOutErrMsgs_obj = { + "egpNeighOutErrMsgs", 9, 0, + NULL, &_egpNeighInErrMsgs_obj +}, +_egpNeighStateUps_obj = { + "egpNeighStateUps", 10, 0, + NULL, &_egpNeighOutErrMsgs_obj +}, +_egpNeighStateDowns_obj = { + "egpNeighStateDowns", 11, 0, + NULL, &_egpNeighStateUps_obj +}, +_egpNeighIntervalHello_obj = { + "egpNeighIntervalHello", 12, 0, + NULL, &_egpNeighStateDowns_obj +}, +_egpNeighIntervalPoll_obj = { + "egpNeighIntervalPoll", 13, 0, + NULL, &_egpNeighIntervalHello_obj +}, +_egpNeighMode_obj = { + "egpNeighMode", 14, 0, + NULL, &_egpNeighIntervalPoll_obj +}, +_egpNeighEventTrigger_obj = { + "egpNeighEventTrigger", 15, 0, + NULL, &_egpNeighMode_obj +}, +_egpNeighEntry_obj = { + "egpNeighEntry", 1, 0, + &_egpNeighEventTrigger_obj, NULL +}, +_egpInMsgs_obj = { + "egpInMsgs", 1, 0, + NULL, NULL +}, +_egpInErrors_obj = { + "egpInErrors", 2, 0, + NULL, &_egpInMsgs_obj +}, +_egpOutMsgs_obj = { + "egpOutMsgs", 3, 0, + NULL, &_egpInErrors_obj +}, +_egpOutErrors_obj = { + "egpOutErrors", 4, 0, + NULL, &_egpOutMsgs_obj +}, +_egpNeighTable_obj = { + "egpNeighTable", 5, 0, + &_egpNeighEntry_obj, &_egpOutErrors_obj +}, +_egpAs_obj = { + "egpAs", 6, 0, + NULL, &_egpNeighTable_obj +}, +_udpLocalAddress_obj = { + "udpLocalAddress", 1, 0, + NULL, NULL +}, +_udpLocalPort_obj = { + "udpLocalPort", 2, 0, + NULL, &_udpLocalAddress_obj +}, +_udpEntry_obj = { + "udpEntry", 1, 0, + &_udpLocalPort_obj, NULL +}, +_udpInDatagrams_obj = { + "udpInDatagrams", 1, 0, + NULL, NULL +}, +_udpNoPorts_obj = { + "udpNoPorts", 2, 0, + NULL, &_udpInDatagrams_obj +}, +_udpInErrors_obj = { + "udpInErrors", 3, 0, + NULL, &_udpNoPorts_obj +}, +_udpOutDatagrams_obj = { + "udpOutDatagrams", 4, 0, + NULL, &_udpInErrors_obj +}, +_udpTable_obj = { + "udpTable", 5, 0, + &_udpEntry_obj, &_udpOutDatagrams_obj +}, +_tcpConnState_obj = { + "tcpConnState", 1, 0, + NULL, NULL +}, +_tcpConnLocalAddress_obj = { + "tcpConnLocalAddress", 2, 0, + NULL, &_tcpConnState_obj +}, +_tcpConnLocalPort_obj = { + "tcpConnLocalPort", 3, 0, + NULL, &_tcpConnLocalAddress_obj +}, +_tcpConnRemAddress_obj = { + "tcpConnRemAddress", 4, 0, + NULL, &_tcpConnLocalPort_obj +}, +_tcpConnRemPort_obj = { + "tcpConnRemPort", 5, 0, + NULL, &_tcpConnRemAddress_obj +}, +_tcpConnEntry_obj = { + "tcpConnEntry", 1, 0, + &_tcpConnRemPort_obj, NULL +}, +_tcpRtoAlgorithm_obj = { + "tcpRtoAlgorithm", 1, 0, + NULL, NULL +}, +_tcpRtoMin_obj = { + "tcpRtoMin", 2, 0, + NULL, &_tcpRtoAlgorithm_obj +}, +_tcpRtoMax_obj = { + "tcpRtoMax", 3, 0, + NULL, &_tcpRtoMin_obj +}, +_tcpMaxConn_obj = { + "tcpMaxConn", 4, 0, + NULL, &_tcpRtoMax_obj +}, +_tcpActiveOpens_obj = { + "tcpActiveOpens", 5, 0, + NULL, &_tcpMaxConn_obj +}, +_tcpPassiveOpens_obj = { + "tcpPassiveOpens", 6, 0, + NULL, &_tcpActiveOpens_obj +}, +_tcpAttemptFails_obj = { + "tcpAttemptFails", 7, 0, + NULL, &_tcpPassiveOpens_obj +}, +_tcpEstabResets_obj = { + "tcpEstabResets", 8, 0, + NULL, &_tcpAttemptFails_obj +}, +_tcpCurrEstab_obj = { + "tcpCurrEstab", 9, 0, + NULL, &_tcpEstabResets_obj +}, +_tcpInSegs_obj = { + "tcpInSegs", 10, 0, + NULL, &_tcpCurrEstab_obj +}, +_tcpOutSegs_obj = { + "tcpOutSegs", 11, 0, + NULL, &_tcpInSegs_obj +}, +_tcpRetransSegs_obj = { + "tcpRetransSegs", 12, 0, + NULL, &_tcpOutSegs_obj +}, +_tcpConnTable_obj = { + "tcpConnTable", 13, 0, + &_tcpConnEntry_obj, &_tcpRetransSegs_obj +}, +_tcpInErrs_obj = { + "tcpInErrs", 14, 0, + NULL, &_tcpConnTable_obj +}, +_tcpOutRsts_obj = { + "tcpOutRsts", 15, 0, + NULL, &_tcpInErrs_obj +}, +_icmpInMsgs_obj = { + "icmpInMsgs", 1, 0, + NULL, NULL +}, +_icmpInErrors_obj = { + "icmpInErrors", 2, 0, + NULL, &_icmpInMsgs_obj +}, +_icmpInDestUnreachs_obj = { + "icmpInDestUnreachs", 3, 0, + NULL, &_icmpInErrors_obj +}, +_icmpInTimeExcds_obj = { + "icmpInTimeExcds", 4, 0, + NULL, &_icmpInDestUnreachs_obj +}, +_icmpInParmProbs_obj = { + "icmpInParmProbs", 5, 0, + NULL, &_icmpInTimeExcds_obj +}, +_icmpInSrcQuenchs_obj = { + "icmpInSrcQuenchs", 6, 0, + NULL, &_icmpInParmProbs_obj +}, +_icmpInRedirects_obj = { + "icmpInRedirects", 7, 0, + NULL, &_icmpInSrcQuenchs_obj +}, +_icmpInEchos_obj = { + "icmpInEchos", 8, 0, + NULL, &_icmpInRedirects_obj +}, +_icmpInEchoReps_obj = { + "icmpInEchoReps", 9, 0, + NULL, &_icmpInEchos_obj +}, +_icmpInTimestamps_obj = { + "icmpInTimestamps", 10, 0, + NULL, &_icmpInEchoReps_obj +}, +_icmpInTimestampReps_obj = { + "icmpInTimestampReps", 11, 0, + NULL, &_icmpInTimestamps_obj +}, +_icmpInAddrMasks_obj = { + "icmpInAddrMasks", 12, 0, + NULL, &_icmpInTimestampReps_obj +}, +_icmpInAddrMaskReps_obj = { + "icmpInAddrMaskReps", 13, 0, + NULL, &_icmpInAddrMasks_obj +}, +_icmpOutMsgs_obj = { + "icmpOutMsgs", 14, 0, + NULL, &_icmpInAddrMaskReps_obj +}, +_icmpOutErrors_obj = { + "icmpOutErrors", 15, 0, + NULL, &_icmpOutMsgs_obj +}, +_icmpOutDestUnreachs_obj = { + "icmpOutDestUnreachs", 16, 0, + NULL, &_icmpOutErrors_obj +}, +_icmpOutTimeExcds_obj = { + "icmpOutTimeExcds", 17, 0, + NULL, &_icmpOutDestUnreachs_obj +}, +_icmpOutParmProbs_obj = { + "icmpOutParmProbs", 18, 0, + NULL, &_icmpOutTimeExcds_obj +}, +_icmpOutSrcQuenchs_obj = { + "icmpOutSrcQuenchs", 19, 0, + NULL, &_icmpOutParmProbs_obj +}, +_icmpOutRedirects_obj = { + "icmpOutRedirects", 20, 0, + NULL, &_icmpOutSrcQuenchs_obj +}, +_icmpOutEchos_obj = { + "icmpOutEchos", 21, 0, + NULL, &_icmpOutRedirects_obj +}, +_icmpOutEchoReps_obj = { + "icmpOutEchoReps", 22, 0, + NULL, &_icmpOutEchos_obj +}, +_icmpOutTimestamps_obj = { + "icmpOutTimestamps", 23, 0, + NULL, &_icmpOutEchoReps_obj +}, +_icmpOutTimestampReps_obj = { + "icmpOutTimestampReps", 24, 0, + NULL, &_icmpOutTimestamps_obj +}, +_icmpOutAddrMasks_obj = { + "icmpOutAddrMasks", 25, 0, + NULL, &_icmpOutTimestampReps_obj +}, +_icmpOutAddrMaskReps_obj = { + "icmpOutAddrMaskReps", 26, 0, + NULL, &_icmpOutAddrMasks_obj +}, +_ipNetToMediaIfIndex_obj = { + "ipNetToMediaIfIndex", 1, 0, + NULL, NULL +}, +_ipNetToMediaPhysAddress_obj = { + "ipNetToMediaPhysAddress", 2, 0, + NULL, &_ipNetToMediaIfIndex_obj +}, +_ipNetToMediaNetAddress_obj = { + "ipNetToMediaNetAddress", 3, 0, + NULL, &_ipNetToMediaPhysAddress_obj +}, +_ipNetToMediaType_obj = { + "ipNetToMediaType", 4, 0, + NULL, &_ipNetToMediaNetAddress_obj +}, +_ipNetToMediaEntry_obj = { + "ipNetToMediaEntry", 1, 0, + &_ipNetToMediaType_obj, NULL +}, +_ipRouteDest_obj = { + "ipRouteDest", 1, 0, + NULL, NULL +}, +_ipRouteIfIndex_obj = { + "ipRouteIfIndex", 2, 0, + NULL, &_ipRouteDest_obj +}, +_ipRouteMetric1_obj = { + "ipRouteMetric1", 3, 0, + NULL, &_ipRouteIfIndex_obj +}, +_ipRouteMetric2_obj = { + "ipRouteMetric2", 4, 0, + NULL, &_ipRouteMetric1_obj +}, +_ipRouteMetric3_obj = { + "ipRouteMetric3", 5, 0, + NULL, &_ipRouteMetric2_obj +}, +_ipRouteMetric4_obj = { + "ipRouteMetric4", 6, 0, + NULL, &_ipRouteMetric3_obj +}, +_ipRouteNextHop_obj = { + "ipRouteNextHop", 7, 0, + NULL, &_ipRouteMetric4_obj +}, +_ipRouteType_obj = { + "ipRouteType", 8, 0, + NULL, &_ipRouteNextHop_obj +}, +_ipRouteProto_obj = { + "ipRouteProto", 9, 0, + NULL, &_ipRouteType_obj +}, +_ipRouteAge_obj = { + "ipRouteAge", 10, 0, + NULL, &_ipRouteProto_obj +}, +_ipRouteMask_obj = { + "ipRouteMask", 11, 0, + NULL, &_ipRouteAge_obj +}, +_ipRouteEntry_obj = { + "ipRouteEntry", 1, 0, + &_ipRouteMask_obj, NULL +}, +_ipAdEntAddr_obj = { + "ipAdEntAddr", 1, 0, + NULL, NULL +}, +_ipAdEntIfIndex_obj = { + "ipAdEntIfIndex", 2, 0, + NULL, &_ipAdEntAddr_obj +}, +_ipAdEntNetMask_obj = { + "ipAdEntNetMask", 3, 0, + NULL, &_ipAdEntIfIndex_obj +}, +_ipAdEntBcastAddr_obj = { + "ipAdEntBcastAddr", 4, 0, + NULL, &_ipAdEntNetMask_obj +}, +_ipAdEntReasmMaxSize_obj = { + "ipAdEntReasmMaxSize", 5, 0, + NULL, &_ipAdEntBcastAddr_obj +}, +_ipAddrEntry_obj = { + "ipAddrEntry", 1, 0, + &_ipAdEntReasmMaxSize_obj, NULL +}, +_ipForwarding_obj = { + "ipForwarding", 1, 0, + NULL, NULL +}, +_ipDefaultTTL_obj = { + "ipDefaultTTL", 2, 0, + NULL, &_ipForwarding_obj +}, +_ipInReceives_obj = { + "ipInReceives", 3, 0, + NULL, &_ipDefaultTTL_obj +}, +_ipInHdrErrors_obj = { + "ipInHdrErrors", 4, 0, + NULL, &_ipInReceives_obj +}, +_ipInAddrErrors_obj = { + "ipInAddrErrors", 5, 0, + NULL, &_ipInHdrErrors_obj +}, +_ipForwDatagrams_obj = { + "ipForwDatagrams", 6, 0, + NULL, &_ipInAddrErrors_obj +}, +_ipInUnknownProtos_obj = { + "ipInUnknownProtos", 7, 0, + NULL, &_ipForwDatagrams_obj +}, +_ipInDiscards_obj = { + "ipInDiscards", 8, 0, + NULL, &_ipInUnknownProtos_obj +}, +_ipInDelivers_obj = { + "ipInDelivers", 9, 0, + NULL, &_ipInDiscards_obj +}, +_ipOutRequests_obj = { + "ipOutRequests", 10, 0, + NULL, &_ipInDelivers_obj +}, +_ipOutDiscards_obj = { + "ipOutDiscards", 11, 0, + NULL, &_ipOutRequests_obj +}, +_ipOutNoRoutes_obj = { + "ipOutNoRoutes", 12, 0, + NULL, &_ipOutDiscards_obj +}, +_ipReasmTimeout_obj = { + "ipReasmTimeout", 13, 0, + NULL, &_ipOutNoRoutes_obj +}, +_ipReasmReqds_obj = { + "ipReasmReqds", 14, 0, + NULL, &_ipReasmTimeout_obj +}, +_ipReasmOKs_obj = { + "ipReasmOKs", 15, 0, + NULL, &_ipReasmReqds_obj +}, +_ipReasmFails_obj = { + "ipReasmFails", 16, 0, + NULL, &_ipReasmOKs_obj +}, +_ipFragOKs_obj = { + "ipFragOKs", 17, 0, + NULL, &_ipReasmFails_obj +}, +_ipFragFails_obj = { + "ipFragFails", 18, 0, + NULL, &_ipFragOKs_obj +}, +_ipFragCreates_obj = { + "ipFragCreates", 19, 0, + NULL, &_ipFragFails_obj +}, +_ipAddrTable_obj = { + "ipAddrTable", 20, 0, + &_ipAddrEntry_obj, &_ipFragCreates_obj +}, +_ipRoutingTable_obj = { + "ipRoutingTable", 21, 0, + &_ipRouteEntry_obj, &_ipAddrTable_obj +}, +_ipNetToMediaTable_obj = { + "ipNetToMediaTable", 22, 0, + &_ipNetToMediaEntry_obj, &_ipRoutingTable_obj +}, +_atIfIndex_obj = { + "atIfIndex", 1, 0, + NULL, NULL +}, +_atPhysAddress_obj = { + "atPhysAddress", 2, 0, + NULL, &_atIfIndex_obj +}, +_atNetAddress_obj = { + "atNetAddress", 3, 0, + NULL, &_atPhysAddress_obj +}, +_atEntry_obj = { + "atEntry", 1, 0, + &_atNetAddress_obj, NULL +}, +_atTable_obj = { + "atTable", 1, 0, + &_atEntry_obj, NULL +}, +_ifIndex_obj = { + "ifIndex", 1, 0, + NULL, NULL +}, +_ifDescr_obj = { + "ifDescr", 2, 0, + NULL, &_ifIndex_obj +}, +_ifType_obj = { + "ifType", 3, 0, + NULL, &_ifDescr_obj +}, +_ifMtu_obj = { + "ifMtu", 4, 0, + NULL, &_ifType_obj +}, +_ifSpeed_obj = { + "ifSpeed", 5, 0, + NULL, &_ifMtu_obj +}, +_ifPhysAddress_obj = { + "ifPhysAddress", 6, 0, + NULL, &_ifSpeed_obj +}, +_ifAdminStatus_obj = { + "ifAdminStatus", 7, 0, + NULL, &_ifPhysAddress_obj +}, +_ifOperStatus_obj = { + "ifOperStatus", 8, 0, + NULL, &_ifAdminStatus_obj +}, +_ifLastChange_obj = { + "ifLastChange", 9, 0, + NULL, &_ifOperStatus_obj +}, +_ifInOctets_obj = { + "ifInOctets", 10, 0, + NULL, &_ifLastChange_obj +}, +_ifInUcastPkts_obj = { + "ifInUcastPkts", 11, 0, + NULL, &_ifInOctets_obj +}, +_ifInNUcastPkts_obj = { + "ifInNUcastPkts", 12, 0, + NULL, &_ifInUcastPkts_obj +}, +_ifInDiscards_obj = { + "ifInDiscards", 13, 0, + NULL, &_ifInNUcastPkts_obj +}, +_ifInErrors_obj = { + "ifInErrors", 14, 0, + NULL, &_ifInDiscards_obj +}, +_ifInUnknownProtos_obj = { + "ifInUnknownProtos", 15, 0, + NULL, &_ifInErrors_obj +}, +_ifOutOctets_obj = { + "ifOutOctets", 16, 0, + NULL, &_ifInUnknownProtos_obj +}, +_ifOutUcastPkts_obj = { + "ifOutUcastPkts", 17, 0, + NULL, &_ifOutOctets_obj +}, +_ifOutNUcastPkts_obj = { + "ifOutNUcastPkts", 18, 0, + NULL, &_ifOutUcastPkts_obj +}, +_ifOutDiscards_obj = { + "ifOutDiscards", 19, 0, + NULL, &_ifOutNUcastPkts_obj +}, +_ifOutErrors_obj = { + "ifOutErrors", 20, 0, + NULL, &_ifOutDiscards_obj +}, +_ifOutQLen_obj = { + "ifOutQLen", 21, 0, + NULL, &_ifOutErrors_obj +}, +_ifSpecific_obj = { + "ifSpecific", 22, 0, + NULL, &_ifOutQLen_obj +}, +_ifEntry_obj = { + "ifEntry", 1, 0, + &_ifSpecific_obj, NULL +}, +_ifNumber_obj = { + "ifNumber", 1, 0, + NULL, NULL +}, +_ifTable_obj = { + "ifTable", 2, 0, + &_ifEntry_obj, &_ifNumber_obj +}, +_sysDescr_obj = { + "sysDescr", 1, 0, + NULL, NULL +}, +_sysObjectID_obj = { + "sysObjectID", 2, 0, + NULL, &_sysDescr_obj +}, +_sysUpTime_obj = { + "sysUpTime", 3, 0, + NULL, &_sysObjectID_obj +}, +_sysContact_obj = { + "sysContact", 4, 0, + NULL, &_sysUpTime_obj +}, +_sysName_obj = { + "sysName", 5, 0, + NULL, &_sysContact_obj +}, +_sysLocation_obj = { + "sysLocation", 6, 0, + NULL, &_sysName_obj +}, +_sysServices_obj = { + "sysServices", 7, 0, + NULL, &_sysLocation_obj +}, +_system_obj = { + "system", 1, 0, + &_sysServices_obj, NULL +}, +_interfaces_obj = { + "interfaces", 2, 0, + &_ifTable_obj, &_system_obj +}, +_at_obj = { + "at", 3, 0, + &_atTable_obj, &_interfaces_obj +}, +_ip_obj = { + "ip", 4, 0, + &_ipNetToMediaTable_obj, &_at_obj +}, +_icmp_obj = { + "icmp", 5, 0, + &_icmpOutAddrMaskReps_obj, &_ip_obj +}, +_tcp_obj = { + "tcp", 6, 0, + &_tcpOutRsts_obj, &_icmp_obj +}, +_udp_obj = { + "udp", 7, 0, + &_udpTable_obj, &_tcp_obj +}, +_egp_obj = { + "egp", 8, 0, + &_egpAs_obj, &_udp_obj +}, +_transmission_obj = { + "transmission", 10, 0, + NULL, &_egp_obj +}, +_snmp_obj = { + "snmp", 11, 0, + &_snmpEnableAuthTraps_obj, &_transmission_obj +}, +_mib_obj = { + "mib", 1, 0, + &_snmp_obj, NULL +}, +_directory_obj = { + "directory", 1, 0, + NULL, NULL +}, +_mgmt_obj = { + "mgmt", 2, 0, + &_mib_obj, &_directory_obj +}, +_experimental_obj = { + "experimental", 3, 0, + NULL, &_mgmt_obj +}, +_private_obj = { + "private", 4, 0, + &_enterprises_obj, &_experimental_obj +}, +_internet_obj = { + "internet", 1, 0, + &_private_obj, NULL +}, +_dod_obj = { + "dod", 6, 0, + &_internet_obj, NULL +}, +_org_obj = { + "org", 3, 0, + &_dod_obj, NULL +}, +_iso_obj = { + "iso", 1, 0, + &_org_obj, NULL +}, +*mibroot = &_iso_obj; diff --git a/usr.sbin/tcpdump/tcpdump/ntp.h b/usr.sbin/tcpdump/tcpdump/ntp.h new file mode 100644 index 0000000..493686d --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/ntp.h @@ -0,0 +1,117 @@ +/* $Header: ntp.h,v 1.1 90/08/07 11:08:27 mogul Exp $ */ + +/* + * Based on ntp.h from the U of MD implementation + * This file is based on Version 2 of the NTP spec (RFC1119). + */ + +/* + * Definitions for the masses + */ +#define JAN_1970 2208988800 /* 1970 - 1900 in seconds */ + +/* + * Structure definitions for NTP fixed point values + * + * 0 1 2 3 + * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Integer Part | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Fraction Part | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * + * 0 1 2 3 + * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Integer Part | Fraction Part | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +*/ +struct l_fixedpt { + u_long int_part; + u_long fraction; +}; + +struct s_fixedpt { + u_short int_part; + u_short fraction; +}; + +/* ================= Table 3.3. Packet Variables ================= */ +/* + * 0 1 2 3 + * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * |LI | VN | Mode| Stratum | Poll | Precision | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Synchronizing Distance | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Synchronizing Dispersion | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Reference Clock Identifier | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | | + * | Reference Timestamp (64 bits) | + * | | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | | + * | Originate Timestamp (64 bits) | + * | | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | | + * | Receive Timestamp (64 bits) | + * | | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | | + * | Transmit Timestamp (64 bits) | + * | | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ +*/ +struct ntpdata { + u_char status; /* status of local clock and leap info */ + u_char stratum; /* Stratum level */ + u_char ppoll; /* poll value */ + int precision:8; + struct s_fixedpt distance; + struct s_fixedpt dispersion; + u_long refid; + struct l_fixedpt reftime; + struct l_fixedpt org; + struct l_fixedpt rec; + struct l_fixedpt xmt; +}; +/* + * Leap Second Codes (high order two bits) + */ +#define NO_WARNING 0x00 /* no warning */ +#define PLUS_SEC 0x40 /* add a second (61 seconds) */ +#define MINUS_SEC 0x80 /* minus a second (59 seconds) */ +#define ALARM 0xc0 /* alarm condition (clock unsynchronized) */ + +/* + * Clock Status Bits that Encode Version + */ +#define NTPVERSION_1 0x08 +#define VERSIONMASK 0x38 +#define LEAPMASK 0xc0 +#define MODEMASK 0x07 + +/* + * Code values + */ +#define MODE_UNSPEC 0 /* unspecified */ +#define MODE_SYM_ACT 1 /* symmetric active */ +#define MODE_SYM_PAS 2 /* symmetric passive */ +#define MODE_CLIENT 3 /* client */ +#define MODE_SERVER 4 /* server */ +#define MODE_BROADCAST 5 /* broadcast */ +#define MODE_RES1 6 /* reserved */ +#define MODE_RES2 7 /* reserved */ + +/* + * Stratum Definitions + */ +#define UNSPECIFIED 0 +#define PRIM_REF 1 /* radio clock */ +#define INFO_QUERY 62 /* **** THIS implementation dependent **** */ +#define INFO_REPLY 63 /* **** THIS implementation dependent **** */ diff --git a/usr.sbin/tcpdump/tcpdump/os.h b/usr.sbin/tcpdump/tcpdump/os.h new file mode 100644 index 0000000..e0d01cf --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/os.h @@ -0,0 +1,85 @@ +/* + * Copyright (c) 1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * @(#) $Header: os-bsd.h,v 1.15 91/05/05 23:59:11 mccanne Exp $ (LBL) + */ + +#include + +#ifndef BSD +#define BSD +#endif + +#define SHA(ap) ((ap)->arp_sha) +#define SPA(ap) ((ap)->arp_spa) +#define THA(ap) ((ap)->arp_tha) +#define TPA(ap) ((ap)->arp_tpa) + +#define EDST(ep) ((ep)->ether_dhost) +#define ESRC(ep) ((ep)->ether_shost) + +#ifndef ETHERTYPE_REVARP +#define ETHERTYPE_REVARP 0x8035 +#endif + +#ifndef IPPROTO_ND +/* From on a Sun somewhere. */ +#define IPPROTO_ND 77 +#endif + +#ifndef REVARP_REQUEST +#define REVARP_REQUEST 3 +#endif +#ifndef REVARP_REPLY +#define REVARP_REPLY 4 +#endif + +/* newish RIP commands */ +#ifndef RIPCMD_POLL +#define RIPCMD_POLL 5 +#endif +#ifndef RIPCMD_POLLENTRY +#define RIPCMD_POLLENTRY 6 +#endif + +/* + * Map BSD names to SunOS names. + */ +#if BSD >= 199006 +#define RFS_NULL NFSPROC_NULL +#define RFS_GETATTR NFSPROC_GETATTR +#define RFS_SETATTR NFSPROC_SETATTR +#define RFS_ROOT NFSPROC_ROOT +#define RFS_LOOKUP NFSPROC_LOOKUP +#define RFS_READLINK NFSPROC_READLINK +#define RFS_READ NFSPROC_READ +#define RFS_WRITECACHE NFSPROC_WRITECACHE +#define RFS_WRITE NFSPROC_WRITE +#define RFS_CREATE NFSPROC_CREATE +#define RFS_REMOVE NFSPROC_REMOVE +#define RFS_RENAME NFSPROC_RENAME +#define RFS_LINK NFSPROC_LINK +#define RFS_SYMLINK NFSPROC_SYMLINK +#define RFS_MKDIR NFSPROC_MKDIR +#define RFS_RMDIR NFSPROC_RMDIR +#define RFS_READDIR NFSPROC_READDIR +#define RFS_STATFS NFSPROC_STATFS +#define RFS_NPROC NFSPROC_NPROC +#endif diff --git a/usr.sbin/tcpdump/tcpdump/ospf.h b/usr.sbin/tcpdump/tcpdump/ospf.h new file mode 100644 index 0000000..e3a3a6d --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/ospf.h @@ -0,0 +1,223 @@ +/* + * Copyright (c) 1991 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * OSPF support contributed by Jeffrey Honig (jch@mitchell.cit.cornell.edu) + */ +#define OSPF_TYPE_UMD 0 /* UMd's special monitoring packets */ +#define OSPF_TYPE_HELLO 1 /* Hello */ +#define OSPF_TYPE_DB 2 /* Database Description */ +#define OSPF_TYPE_LSR 3 /* Link State Request */ +#define OSPF_TYPE_LSU 4 /* Link State Update */ +#define OSPF_TYPE_LSA 5 /* Link State Ack */ +#define OSPF_TYPE_MAX 6 + +/* Options *_options */ +#define OSPF_OPTION_T 0x01 /* T bit: TOS support */ +#define OSPF_OPTION_E 0x02 /* E bit: External routes advertised */ +#define OSPF_OPTION_MC 0x04 /* MC bit: Multicast capable */ + +/* ospf_authtype */ +#define OSPF_AUTH_NONE 0 /* No auth-data */ +#define OSPF_AUTH_SIMPLE 1 /* Simple password */ + +/* db_flags */ +#define OSPF_DB_INIT 0x04 /* */ +#define OSPF_DB_MORE 0x02 +#define OSPF_DB_MASTER 0x01 + +/* ls_type */ +#define LS_TYPE_ROUTER 1 /* router link */ +#define LS_TYPE_NETWORK 2 /* network link */ +#define LS_TYPE_SUM_IP 3 /* summary link */ +#define LS_TYPE_SUM_ABR 4 /* summary area link */ +#define LS_TYPE_ASE 5 /* ASE */ +#define LS_TYPE_GROUP 6 /* Group membership (multicast */ + /* extensions 23 July 1991) */ +#define LS_TYPE_MAX 7 + +/************************************************* + * + * is the above a bug in the documentation? + * + *************************************************/ + + +/* rla_link.link_type */ +#define RLA_TYPE_ROUTER 1 /* point-to-point to another router */ +#define RLA_TYPE_TRANSIT 2 /* connection to transit network */ +#define RLA_TYPE_STUB 3 /* connection to stub network */ +#define RLA_TYPE_VIRTUAL 4 /* virtual link */ + +/* rla_flags */ +#define RLA_FLAG_B 0x01 +#define RLA_FLAG_E 0x02 +#define RLA_FLAG_W1 0x04 +#define RLA_FLAG_W2 0x08 + +/* sla_tosmetric breakdown */ +#define SLA_MASK_TOS 0x7f000000 +#define SLA_MASK_METRIC 0x00ffffff +#define SLA_SHIFT_TOS 24 + +/* asla_tosmetric breakdown */ +#define ASLA_FLAG_EXTERNAL 0x80000000 +#define ASLA_MASK_TOS 0x7f000000 +#define ASLA_SHIFT_TOS 24 +#define ASLA_MASK_METRIC 0x00ffffff + +/* multicast vertex type */ +#define MCLA_VERTEX_ROUTER 1 +#define MCLA_VERTEX_NETWORK 2 + +/* link state advertisement header */ +struct lsa_hdr { + u_short ls_age; + u_char ls_options; + u_char ls_type; + struct in_addr ls_stateid; + struct in_addr ls_router; + u_long ls_seq; + u_short ls_chksum; + u_short ls_length; +} ; + +/* link state advertisement */ +struct lsa { + struct lsa_hdr ls_hdr; + + /* Link state types */ + union { + /* Router links advertisements */ + struct { + u_char rla_flags; + u_char rla_zero[1]; + u_short rla_count; + struct rlalink { + struct in_addr link_id; + struct in_addr link_data; + u_char link_type; + u_char link_toscount; + u_short link_tos0metric; + } rla_link[1]; /* may repeat */ + } un_rla; + + /* Network links advertisements */ + struct { + struct in_addr nla_mask; + struct in_addr nla_router[1]; /* may repeat */ + } un_nla; + + /* Summary links advertisements */ + struct { + struct in_addr sla_mask; + u_long sla_tosmetric[1]; /* may repeat */ + } un_sla; + + /* AS external links advertisements */ + struct { + struct in_addr asla_mask; + struct aslametric { + u_long asla_tosmetric; + struct in_addr asla_forward; + struct in_addr asla_tag; + } asla_metric[1]; /* may repeat */ + } un_asla; + + /* Multicast group membership */ + struct mcla { + u_long mcla_vtype; + struct in_addr mcla_vid; + } un_mcla[1]; + } lsa_un; +} ; + + +/* + * TOS metric struct (will be 0 or more in router links update) + */ +struct tos_metric { + u_char tos_type; + u_char tos_zero; + u_short tos_metric; +} ; + +#define OSPF_AUTH_SIZE 8 + +/* + * the main header + */ +struct ospfhdr { + u_char ospf_version; + u_char ospf_type; + u_short ospf_len; + struct in_addr ospf_routerid; + struct in_addr ospf_areaid; + u_short ospf_chksum; + u_short ospf_authtype; + u_char ospf_authdata[OSPF_AUTH_SIZE]; + union { + + /* Hello packet */ + struct { + struct in_addr hello_mask; + u_short hello_helloint; + u_char hello_options; + u_char hello_priority; + u_long hello_deadint; + struct in_addr hello_dr; + struct in_addr hello_bdr; + struct in_addr hello_neighbor[1]; /* may repeat */ + } un_hello; + + /* Database Description packet */ + struct { + u_char db_zero[2]; + u_char db_options; + u_char db_flags; + u_long db_seq; + struct lsa_hdr db_lshdr[1]; /* may repeat */ + } un_db; + + /* Link State Request */ + struct lsr { + u_long ls_type; + struct in_addr ls_stateid; + struct in_addr ls_router; + } un_lsr[1]; /* may repeat */ + + /* Link State Update */ + struct { + u_long lsu_count; + struct lsa lsu_lsa[1]; /* may repeat */ + } un_lsu; + + /* Link State Acknowledment */ + struct { + struct lsa_hdr lsa_lshdr[1]; /* may repeat */ + } un_lsa ; + } ospf_un ; +} ; + +#define ospf_hello ospf_un.un_hello +#define ospf_db ospf_un.un_db +#define ospf_lsr ospf_un.un_lsr +#define ospf_lsu ospf_un.un_lsu +#define ospf_lsa ospf_un.un_lsa + diff --git a/usr.sbin/tcpdump/tcpdump/print-arp.c b/usr.sbin/tcpdump/tcpdump/print-arp.c new file mode 100644 index 0000000..3f0671a --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-arp.c @@ -0,0 +1,100 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-arp.c,v 1.16 91/04/19 10:45:56 mccanne Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include + +#include "interface.h" +#include "addrtoname.h" + +void +arp_print(ap, length, caplen) + register struct ether_arp *ap; + int length; + int caplen; +{ + if ((u_char *)(ap + 1) > snapend) { + printf("[|arp]"); + return; + } + if (length < sizeof(struct ether_arp)) { + (void)printf("truncated-arp"); + default_print((u_short *)ap, length); + return; + } + + NTOHS(ap->arp_hrd); + NTOHS(ap->arp_pro); + NTOHS(ap->arp_op); + + if (ap->arp_hrd != ARPHRD_ETHER + || (ap->arp_pro != ETHERTYPE_IP + && ap->arp_pro != ETHERTYPE_TRAIL) + || ap->arp_hln != sizeof(SHA(ap)) + || ap->arp_pln != sizeof(SPA(ap))) { + (void)printf("arp-req #%d for proto #%d (%d) hardware %d (%d)", + ap->arp_op, ap->arp_pro, ap->arp_pln, + ap->arp_hrd, ap->arp_hln); + return; + } + if (ap->arp_pro == ETHERTYPE_TRAIL) + (void)printf("trailer"); + switch (ap->arp_op) { + + case ARPOP_REQUEST: + (void)printf("arp who-has %s tell %s", + ipaddr_string(TPA(ap)), + ipaddr_string(SPA(ap))); + break; + + case ARPOP_REPLY: + (void)printf("arp reply %s is-at %s", + ipaddr_string(SPA(ap)), + etheraddr_string(SHA(ap))); + break; + + case REVARP_REQUEST: + (void)printf("rarp who-is %s tell %s", + etheraddr_string(THA(ap)), + etheraddr_string(SHA(ap))); + break; + + case REVARP_REPLY: + (void)printf("rarp reply %s at %s", + etheraddr_string(THA(ap)), + ipaddr_string(TPA(ap))); + break; + + default: + (void)printf("arp-%d", ap->arp_op); + default_print((u_short *)ap, caplen); + break; + } +} diff --git a/usr.sbin/tcpdump/tcpdump/print-atalk.c b/usr.sbin/tcpdump/tcpdump/print-atalk.c new file mode 100644 index 0000000..203585e --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-atalk.c @@ -0,0 +1,478 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * Format and print AppleTalk packets. + */ +#ifndef lint +static char rcsid[] = + "@(#)$Header: print-atalk.c,v 1.22 92/03/26 14:15:34 mccanne Exp $ (LBL)"; +#endif + +#ifdef __STDC__ +#include +#endif +#include + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include "interface.h" +#include "addrtoname.h" +#include "appletalk.h" +#include +#include "extract.h" + +static char *ataddr_string(); +static struct atNBPtuple *nbp_tuple_print(); +static struct atNBPtuple *nbp_name_print(); +static void atp_print(); +static void nbp_print(); +static void atp_bitmap_print(); + +/* + * Print AppleTalk Datagram Delivery Protocol packets. + */ +void +ddp_print(dp, length) + register struct atDDP *dp; + int length; +{ + if (length < ddpSize) { + (void)printf(" truncated-ddp %d", length); + return; + } + (void)printf("%s.%d > %s.%d:", + ataddr_string(EXTRACT_SHORT(&dp->srcNet), dp->srcNode), + dp->srcSkt, + ataddr_string(EXTRACT_SHORT(&dp->dstNet), dp->dstNode), + dp->dstSkt); + + /* 'type' is the last field of 'dp' so we need the whole thing. + If we cannot determine the type, bail out. (This last byte + happens to be *one* byte past the end of tcpdump's minimum + snapshot length.) */ + if ((u_char *)(dp + 1) > snapend) { + printf(" [|atalk]"); + return; + } + + length -= ddpSize; + switch (dp->type) { + + case ddpRTMP: + (void)printf(" at-rtmp %d", length); + break; + case ddpRTMPrequest: + (void)printf(" at-rtmpReq %d", length); + break; + case ddpNBP: + nbp_print((struct atNBP *)((u_char *)dp + ddpSize), + length, dp); + break; + case ddpATP: + atp_print((struct atATP *)((u_char *)dp + ddpSize), length); + break; + case ddpECHO: + (void)printf(" at-echo %d", length); + break; + case ddpIP: + (void)printf(" at-IP %d", length); + break; + case ddpARP: + (void)printf(" at-ARP %d", length); + break; + case ddpKLAP: + (void)printf(" at-KLAP %d", length); + break; + default: + (void)printf(" at-#%d %d", length); + break; + } +} + +static void +atp_print(ap, length) + register struct atATP *ap; + int length; +{ + char c; + long data; + + if ((u_char *)(ap + 1) > snapend) { + /* Just bail if we don't have the whole chunk. */ + printf(" [|atalk]"); + return; + } + length -= sizeof(*ap); + switch (ap->control & 0xc0) { + + case atpReqCode: + (void)printf(" atp-req%s %d", + ap->control & atpXO? " " : "*", + EXTRACT_SHORT(&ap->transID)); + + atp_bitmap_print(ap->bitmap); + + if (length != 0) + (void)printf(" [len=%d]", length); + + switch (ap->control & (atpEOM|atpSTS)) { + case atpEOM: + (void)printf(" [EOM]"); + break; + case atpSTS: + (void)printf(" [STS]"); + break; + case atpEOM|atpSTS: + (void)printf(" [EOM,STS]"); + break; + } + break; + + case atpRspCode: + (void)printf(" atp-resp%s%d:%d (%d)", + ap->control & atpEOM? "*" : " ", + EXTRACT_SHORT(&ap->transID), ap->bitmap, length); + switch (ap->control & (atpXO|atpSTS)) { + case atpXO: + (void)printf(" [XO]"); + break; + case atpSTS: + (void)printf(" [STS]"); + break; + case atpXO|atpSTS: + (void)printf(" [XO,STS]"); + break; + } + break; + + case atpRelCode: + (void)printf(" atp-rel %d", EXTRACT_SHORT(&ap->transID)); + + atp_bitmap_print(ap->bitmap); + + /* length should be zero */ + if (length) + (void)printf(" [len=%d]", length); + + /* there shouldn't be any control flags */ + if (ap->control & (atpXO|atpEOM|atpSTS)) { + c = '['; + if (ap->control & atpXO) { + (void)printf("%cXO", c); + c = ','; + } + if (ap->control & atpEOM) { + (void)printf("%cEOM", c); + c = ','; + } + if (ap->control & atpSTS) { + (void)printf("%cSTS", c); + c = ','; + } + (void)printf("]"); + } + break; + + default: + (void)printf(" atp-0x%x %d (%d)", ap->control, + EXTRACT_SHORT(&ap->transID), length); + break; + } + data = EXTRACT_LONG(&ap->userData); + if (data != 0) + (void)printf(" 0x%x", data); +} + +static void +atp_bitmap_print(bm) + register u_char bm; +{ + register char c; + register int i; + + /* + * The '& 0xff' below is needed for compilers that want to sign + * extend a u_char, which is the case with the Ultrix compiler. + * (gcc is smart enough to eliminate it, at least on the Sparc). + */ + if ((bm + 1) & (bm & 0xff)) { + c = '<'; + for (i = 0; bm; ++i) { + if (bm & 1) { + (void)printf("%c%d", c, i); + c = ','; + } + bm >>= 1; + } + (void)printf(">"); + } else { + for (i = 0; bm; ++i) + bm >>= 1; + if (i > 1) + (void)printf("<0-%d>", i - 1); + else + (void)printf("<0>"); + } +} + +static void +nbp_print(np, length, dp) + register struct atNBP *np; + int length; + register struct atDDP *dp; +{ + register struct atNBPtuple *tp = + (struct atNBPtuple *)((u_char *)np + nbpHeaderSize); + int i = length; + u_char *ep; + + length -= nbpHeaderSize; + if (length < 8) { + /* must be room for at least one tuple */ + (void)printf(" truncated-nbp %d", length + nbpHeaderSize); + return; + } + /* ep points to end of available data */ + ep = snapend; + if ((u_char *)tp > ep) { + printf(" [|atalk]"); + return; + } + switch (i = np->control & 0xf0) { + + case nbpBrRq: + case nbpLkUp: + (void)printf(i == nbpLkUp? " nbp-lkup %d:":" nbp-brRq %d:", + np->id); + if ((u_char *)(tp + 1) > ep) { + printf(" [|atalk]"); + return; + } + (void)nbp_name_print(tp, ep); + /* + * look for anomalies: the spec says there can only + * be one tuple, the address must match the source + * address and the enumerator should be zero. + */ + if ((np->control & 0xf) != 1) + (void)printf(" [ntup=%d]", np->control & 0xf); + if (tp->enumerator) + (void)printf(" [enum=%d]", tp->enumerator); + if (EXTRACT_SHORT(&tp->net) != EXTRACT_SHORT(&dp->srcNet) || + tp->node != dp->srcNode || tp->skt != dp->srcSkt) + (void)printf(" [addr=%s.%d]", + ataddr_string(EXTRACT_SHORT(&tp->net), + tp->node), + tp->skt); + break; + + case nbpLkUpReply: + (void)printf(" nbp-reply %d:", np->id); + + /* print each of the tuples in the reply */ + for (i = np->control & 0xf; --i >= 0 && tp; ) + tp = nbp_tuple_print(tp, ep, dp); + break; + + default: + (void)printf(" nbp-0x%x %d (%d)", np->control, np->id, + length); + break; + } +} + +/* print a counted string */ +static char * +print_cstring(cp, ep) + register char *cp; + register u_char *ep; +{ + register int length; + + if (cp >= (char *)ep) { + (void)printf("[|atalk]"); + return (0); + } + length = *cp++; + + /* Spec says string can be at most 32 bytes long */ + if (length < 0 || length > 32) { + (void)printf("[len=%d]", length); + return (0); + } + while (--length >= 0) { + if (cp >= (char *)ep) { + (void)printf("[|atalk]"); + return (0); + } + putchar(*cp++); + } + return (cp); +} + +static struct atNBPtuple * +nbp_tuple_print(tp, ep, dp) + register struct atNBPtuple *tp; + register u_char *ep; + register struct atDDP *dp; +{ + register struct atNBPtuple *tpn; + + if ((u_char *)(tp + 1) > ep) { + printf(" [|atalk]"); + return 0; + } + tpn = nbp_name_print(tp, ep); + + /* if the enumerator isn't 1, print it */ + if (tp->enumerator != 1) + (void)printf("(%d)", tp->enumerator); + + /* if the socket doesn't match the src socket, print it */ + if (tp->skt != dp->srcSkt) + (void)printf(" %d", tp->skt); + + /* if the address doesn't match the src address, it's an anomaly */ + if (EXTRACT_SHORT(&tp->net) != EXTRACT_SHORT(&dp->srcNet) || + tp->node != dp->srcNode) + (void)printf(" [addr=%s]", + ataddr_string(EXTRACT_SHORT(&tp->net), tp->node)); + + return (tpn); +} + +static struct atNBPtuple * +nbp_name_print(tp, ep) + struct atNBPtuple *tp; + register u_char *ep; +{ + register char *cp = (char *)tp + nbpTupleSize; + + putchar(' '); + + /* Object */ + putchar('"'); + if (cp = print_cstring(cp, ep)) { + /* Type */ + putchar(':'); + if (cp = print_cstring(cp, ep)) { + /* Zone */ + putchar('@'); + if (cp = print_cstring(cp, ep)) + putchar('"'); + } + } + return ((struct atNBPtuple *)cp); +} + + +#define HASHNAMESIZE 4096 + +struct hnamemem { + int addr; + char *name; + struct hnamemem *nxt; +}; + +static struct hnamemem hnametable[HASHNAMESIZE]; + +static char * +ataddr_string(atnet, athost) + u_short atnet; + u_char athost; +{ + register struct hnamemem *tp, *tp2; + register int i = (atnet << 8) | athost; + char nambuf[256]; + static int first = 1; + FILE *fp; + + /* + * if this is the first call, see if there's an AppleTalk + * number to name map file. + */ + if (first && (first = 0, !nflag) + && (fp = fopen("/etc/atalk.names", "r"))) { + char line[256]; + int i1, i2, i3; + + while (fgets(line, sizeof(line), fp)) { + if (line[0] == '\n' || line[0] == 0 || line[0] == '#') + continue; + if (sscanf(line, "%d.%d.%d %s", &i1, &i2, &i3, + nambuf) == 4) + /* got a hostname. */ + i3 |= ((i1 << 8) | i2) << 8; + else if (sscanf(line, "%d.%d %s", &i1, &i2, + nambuf) == 3) + /* got a net name */ + i3 = (((i1 << 8) | i2) << 8) | 255; + else + continue; + + for (tp = &hnametable[i3 & (HASHNAMESIZE-1)]; + tp->nxt; tp = tp->nxt) + ; + tp->addr = i3; + tp->nxt = (struct hnamemem *)calloc(1, sizeof(*tp)); + i3 = strlen(nambuf) + 1; + tp->name = strcpy(malloc((unsigned) i3), nambuf); + } + fclose(fp); + } + + for (tp = &hnametable[i & (HASHNAMESIZE-1)]; tp->nxt; tp = tp->nxt) + if (tp->addr == i) + return (tp->name); + + /* didn't have the node name -- see if we've got the net name */ + i |= 255; + for (tp2 = &hnametable[i & (HASHNAMESIZE-1)]; tp2->nxt; tp2 = tp2->nxt) + if (tp2->addr == i) { + tp->addr = (atnet << 8) | athost; + tp->nxt = (struct hnamemem *)calloc(1, sizeof(*tp)); + (void)sprintf(nambuf, "%s.%d", tp2->name, athost); + i = strlen(nambuf) + 1; + tp->name = strcpy(malloc((unsigned) i), nambuf); + return (tp->name); + } + + tp->addr = (atnet << 8) | athost; + tp->nxt = (struct hnamemem *)calloc(1, sizeof(*tp)); + if (athost != 255) + (void)sprintf(nambuf, "%d.%d.%d", + atnet >> 8, atnet & 0xff, athost); + else + (void)sprintf(nambuf, "%d.%d", atnet >> 8, atnet & 0xff); + i = strlen(nambuf) + 1; + tp->name = strcpy(malloc((unsigned) i), nambuf); + + return (tp->name); +} diff --git a/usr.sbin/tcpdump/tcpdump/print-bootp.c b/usr.sbin/tcpdump/tcpdump/print-bootp.c new file mode 100644 index 0000000..0641d82 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-bootp.c @@ -0,0 +1,263 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * Format and print bootp packets. + */ +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-bootp.c,v 1.17 91/11/14 22:21:34 leres Exp $ (LBL)"; +#endif + +#include + +#include +#include +#include +#include +#include +#include +#include +#include + +#include "interface.h" +#include "addrtoname.h" +#include "bootp.h" + +void rfc1048_print(); +void cmu_print(); + +/* + * Print bootp requests + */ +void +bootp_print(bp, length, sport, dport) + register struct bootp *bp; + int length; + u_short sport, dport; +{ + static char tstr[] = " [|bootp]"; + static unsigned char vm_cmu[4] = VM_CMU; + static unsigned char vm_rfc1048[4] = VM_RFC1048; + u_char *ep; + +#define TCHECK(var, l) if ((u_char *)&(var) > ep - l) goto trunc + + /* Note funny sized packets */ + if (length != sizeof(struct bootp)) + (void)printf(" [len=%d]", length); + + /* 'ep' points to the end of avaible data. */ + ep = (u_char *)snapend; + + switch (bp->bp_op) { + + case BOOTREQUEST: + /* Usually, a request goes from a client to a server */ + if (sport != IPPORT_BOOTPC || dport != IPPORT_BOOTPS) + printf(" (request)"); + break; + + case BOOTREPLY: + /* Usually, a reply goes from a server to a client */ + if (sport != IPPORT_BOOTPS || dport != IPPORT_BOOTPC) + printf(" (reply)"); + break; + + default: + printf(" bootp-#%d", bp->bp_op); + } + + NTOHL(bp->bp_xid); + NTOHS(bp->bp_secs); + + /* The usual hardware address type is 1 (10Mb Ethernet) */ + if (bp->bp_htype != 1) + printf(" htype-#%d", bp->bp_htype); + + /* The usual length for 10Mb Ethernet address is 6 bytes */ + if (bp->bp_htype != 1 || bp->bp_hlen != 6) + printf(" hlen:%d", bp->bp_hlen); + + /* Only print interesting fields */ + if (bp->bp_hops) + printf(" hops:%d", bp->bp_hops); + if (bp->bp_xid) + printf(" xid:0x%x", bp->bp_xid); + if (bp->bp_secs) + printf(" secs:%d", bp->bp_secs); + + /* Client's ip address */ + TCHECK(bp->bp_ciaddr, sizeof(bp->bp_ciaddr)); + if (bp->bp_ciaddr.s_addr) + printf(" C:%s", ipaddr_string(&bp->bp_ciaddr)); + + /* 'your' ip address (bootp client) */ + TCHECK(bp->bp_yiaddr, sizeof(bp->bp_yiaddr)); + if (bp->bp_yiaddr.s_addr) + printf(" Y:%s", ipaddr_string(&bp->bp_yiaddr)); + + /* Server's ip address */ + TCHECK(bp->bp_siaddr, sizeof(bp->bp_siaddr)); + if (bp->bp_siaddr.s_addr) + printf(" S:%s", ipaddr_string(&bp->bp_siaddr)); + + /* Gateway's ip address */ + TCHECK(bp->bp_giaddr, sizeof(bp->bp_giaddr)); + if (bp->bp_giaddr.s_addr) + printf(" G:%s", ipaddr_string(&bp->bp_giaddr)); + + /* Client's Ethernet address */ + if (bp->bp_htype == 1 && bp->bp_hlen == 6) { + register struct ether_header *eh; + register char *e; + + TCHECK(bp->bp_chaddr[0], 6); + eh = (struct ether_header *)packetp; + if (bp->bp_op == BOOTREQUEST) + e = (char *)ESRC(eh); + else if (bp->bp_op == BOOTREPLY) + e = (char *)EDST(eh); + else + e = 0; + if (e == 0 || bcmp((char *)bp->bp_chaddr, e, 6) != 0) + printf(" ether %s", etheraddr_string(bp->bp_chaddr)); + } + + TCHECK(bp->bp_sname[0], sizeof(bp->bp_sname)); + if (*bp->bp_sname) { + printf(" sname "); + if (printfn(bp->bp_sname, ep)) { + fputs(tstr + 1, stdout); + return; + } + } + TCHECK(bp->bp_file[0], sizeof(bp->bp_file)); + if (*bp->bp_file) { + printf(" file "); + if (printfn(bp->bp_file, ep)) { + fputs(tstr + 1, stdout); + return; + } + } + + /* Don't try to decode the vendor buffer unless we're verbose */ + if (vflag <= 0) + return; + + TCHECK(bp->bp_vend[0], sizeof(bp->bp_vend)); + printf(" vend"); + if (bcmp(bp->bp_vend, vm_rfc1048, sizeof(u_long)) == 0) + rfc1048_print(bp->bp_vend, sizeof(bp->bp_vend)); + else if (bcmp(bp->bp_vend, vm_cmu, sizeof(u_long)) == 0) + cmu_print(bp->bp_vend, sizeof(bp->bp_vend)); + else { + u_long ul; + + bcopy((char *)bp->bp_vend, (char *)&ul, sizeof(ul)); + printf("-#0x%x", ul); + } + + return; +trunc: + fputs(tstr, stdout); +#undef TCHECK +} + +void +rfc1048_print(bp, length) + register u_char *bp; + int length; +{ + u_char tag; + u_char *ep; + register int i; + u_long ul; + + printf("-rfc1048"); + + /* Step over magic cookie */ + bp += sizeof(long); + + /* Setup end pointer */ + ep = bp + length; + + while (bp < ep) { + tag = *bp++; + i = *bp++; + switch (tag) { + + case TAG_PAD: + /* no-op */ + break; + + case TAG_SUBNET_MASK: + ul = 0; + bcopy((char *)bp, (char *)&ul, i); + printf(" SM:%s", ipaddr_string(&ul)); + break; + + case TAG_TIME_SERVER: + ul = 0; + bcopy((char *)bp, (char *)&ul, i); + printf(" TS:%s", ipaddr_string(&ul)); + break; + + case TAG_GATEWAY: + ul = 0; + bcopy((char *)bp, (char *)&ul, i); + printf(" G:%s", ipaddr_string(&ul)); + break; + + case TAG_TIME_OFFSET: + case TAG_NAME_SERVER: + case TAG_DOMAIN_SERVER: + case TAG_LOG_SERVER: + case TAG_COOKIE_SERVER: + case TAG_LPR_SERVER: + case TAG_IMPRESS_SERVER: + case TAG_RLP_SERVER: + case TAG_HOSTNAME: + case TAG_BOOTSIZE: + printf(" tag-#%d", tag); + if (i == sizeof(long)) { + bcopy((char *)bp, (char *)&ul, sizeof(long)); + printf(":0x%x", ul); + } else + printf(":?"); + break; + + case TAG_END: + return; + + default: + printf("[tag-#%d]", tag); + return; + } + } +} + +void +cmu_print(bp, length) + register u_char *bp; + int length; +{ + /* XXX not really implemented */ + printf("-cmu [...]"); +} diff --git a/usr.sbin/tcpdump/tcpdump/print-domain.c b/usr.sbin/tcpdump/tcpdump/print-domain.c new file mode 100644 index 0000000..04cf5aa --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-domain.c @@ -0,0 +1,287 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-domain.c,v 1.16 92/05/25 14:28:59 mccanne Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include "interface.h" +#include "addrtoname.h" + +static char *ns_ops[] = { + "", " inv_q", " stat", " op3", " op4", " op5", " op6", " op7", + " op8", " updataA", " updateD", " updateDA", + " updateM", " updateMA", " zoneInit", " zoneRef", +}; + +static char *ns_resp[] = { + "", " FormErr", " ServFail", " NXDomain", + " NotImp", " Refused", " Resp6", " Resp7", + " Resp8", " Resp9", " Resp10", " Resp11", + " Resp12", " Resp13", " Resp14", " NoChange", +}; + + +/* skip over a domain name */ +static u_char * +ns_nskip(cp) + register u_char *cp; +{ + register u_char i; + + if (((i = *cp++) & 0xc0) == 0xc0) + return (cp + 1); + while (i) { + cp += i; + i = *cp++; + } + return (cp); +} + +/* print a domain name */ +static void +ns_nprint(cp, bp, ep) + register u_char *cp; + register u_char *bp; + register u_char *ep; +{ + register u_int i; + + putchar(' '); + if (i = *cp++) + while (i && cp < ep) { + if ((i & 0xc0) == 0xc0) { + cp = bp + (((i << 8) | *cp) & 0x3fff); + i = *cp++; + continue; + } + do { + putchar(*cp++); + } while (--i); + putchar('.'); + i = *cp++; + } + else + putchar('.'); +} + + +/* print a query */ +static void +ns_qprint(cp, bp, ep) + register u_char *cp; + register u_char *bp; + register u_char *ep; +{ + u_char *np = cp; + register u_int i; + + cp = ns_nskip(cp); + + if (cp + 4 > ep) + return; + + /* print the qtype and qclass (if it's not IN) */ + i = *cp++ << 8; + switch (i |= *cp++) { + case T_A: printf(" A"); break; + case T_NS: printf(" NS"); break; + case T_MD: printf(" MD"); break; + case T_MF: printf(" MF"); break; + case T_CNAME: printf(" CNAME"); break; + case T_SOA: printf(" SOA"); break; + case T_MB: printf(" MB"); break; + case T_MG: printf(" MG"); break; + case T_MR: printf(" MR"); break; + case T_NULL: printf(" NULL"); break; + case T_WKS: printf(" WKS"); break; + case T_PTR: printf(" PTR"); break; + case T_HINFO: printf(" HINFO"); break; + case T_MINFO: printf(" MINFO"); break; + case T_MX: printf(" MX"); break; + case T_UINFO: printf(" UINFO"); break; + case T_UID: printf(" UID"); break; + case T_GID: printf(" GID"); break; +#ifdef T_UNSPEC + case T_UNSPEC: printf(" UNSPEC"); break; +#endif + case T_AXFR: printf(" AXFR"); break; + case T_MAILB: printf(" MAILB"); break; + case T_MAILA: printf(" MAILA"); break; + case T_ANY: printf(" ANY"); break; + default: printf(" Type%d", i); break; + } + i = *cp++ << 8; + if ((i |= *cp++) != C_IN) + if (i == C_ANY) + printf("(c_any)"); + else + printf("(Class %d)", i); + + putchar('?'); + ns_nprint(np, bp, ep); +} + + +/* print a reply */ +static void +ns_rprint(cp, bp, ep) + register u_char *cp; + register u_char *bp; + register u_char *ep; +{ + register u_int i; + u_short typ; + + cp = ns_nskip(cp); + + if (cp + 10 > ep) + return; + + /* print the type/qtype and class (if it's not IN) */ + typ = *cp++ << 8; + typ |= *cp++; + i = *cp++ << 8; + if ((i |= *cp++) != C_IN) + if (i == C_ANY) + printf("(c_any)"); + else + printf("(Class %d)", i); + + /* ignore ttl & len */ + cp += 6; + switch (typ) { + case T_A: printf(" A %s", ipaddr_string(cp)); break; + case T_NS: printf(" NS"); ns_nprint(cp, bp, ep); break; + case T_MD: printf(" MD"); break; + case T_MF: printf(" MF"); break; + case T_CNAME: printf(" CNAME"); ns_nprint(cp, bp, ep); break; + case T_SOA: printf(" SOA"); break; + case T_MB: printf(" MB"); break; + case T_MG: printf(" MG"); break; + case T_MR: printf(" MR"); break; + case T_NULL: printf(" NULL"); break; + case T_WKS: printf(" WKS"); break; + case T_PTR: printf(" PTR"); ns_nprint(cp, bp, ep); break; + case T_HINFO: printf(" HINFO"); break; + case T_MINFO: printf(" MINFO"); break; + case T_MX: printf(" MX"); ns_nprint(cp+2, bp, ep); +#ifndef TCPDUMP_ALIGN + printf(" %d", *(short *)cp); +#else + { + u_short x = *cp | cp[1] << 8; + printf(" %d", ntohs(x)); + } +#endif + break; + case T_UINFO: printf(" UINFO"); break; + case T_UID: printf(" UID"); break; + case T_GID: printf(" GID"); break; +#ifdef T_UNSPEC + case T_UNSPEC: printf(" UNSPEC"); break; +#endif + case T_AXFR: printf(" AXFR"); break; + case T_MAILB: printf(" MAILB"); break; + case T_MAILA: printf(" MAILA"); break; + case T_ANY: printf(" ANY"); break; + default: printf(" Type%d", typ); break; + } +} + +void +ns_print(np, length) + register HEADER *np; + int length; +{ + u_char *ep = (u_char *)snapend; + + /* get the byte-order right */ + NTOHS(np->id); + NTOHS(np->qdcount); + NTOHS(np->ancount); + NTOHS(np->nscount); + NTOHS(np->arcount); + + if (np->qr) { + /* this is a response */ + printf(" %d%s%s%s%s%s", + np->id, + ns_ops[np->opcode], + ns_resp[np->rcode], + np->aa? "*" : "", + np->ra? "" : "-", + np->tc? "|" : ""); + if (np->qdcount != 1) + printf(" [%dq]", np->qdcount); + printf(" %d/%d/%d", np->ancount, np->nscount, np->arcount); + if (np->ancount) + ns_rprint(ns_nskip((u_char *)(np + 1)) + 4, + (u_char *)np, ep); + } + else { + /* this is a request */ + printf(" %d%s%s", + np->id, + ns_ops[np->opcode], + np->rd? "+" : ""); + + /* any weirdness? */ + if (*(((u_short *)np)+1) & htons(0x6ff)) + printf(" [b2&3=0x%x]", ntohs(*(((u_short *)np)+1))); + + if (np->opcode == IQUERY) { + if (np->qdcount) + printf(" [%dq]", np->qdcount); + if (np->ancount != 1) + printf(" [%da]", np->ancount); + } + else { + if (np->ancount) + printf(" [%da]", np->ancount); + if (np->qdcount != 1) + printf(" [%dq]", np->qdcount); + } + if (np->nscount) + printf(" [%dn]", np->nscount); + if (np->arcount) + printf(" [%dau]", np->arcount); + + ns_qprint((u_char *)(np + 1), (u_char *)np, ep); + } + printf(" (%d)", length); +} diff --git a/usr.sbin/tcpdump/tcpdump/print-egp.c b/usr.sbin/tcpdump/tcpdump/print-egp.c new file mode 100644 index 0000000..a88a683 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-egp.c @@ -0,0 +1,347 @@ +/* + * Copyright (c) 1991 Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms are permitted + * provided that the above copyright notice and this paragraph are + * duplicated in all such forms and that any documentation, + * advertising materials, and other materials related to such + * distribution and use acknowledge that the software was developed + * by the University of California, Lawrence Berkeley Laboratory, + * Berkeley, CA. The name of the University may not be used to + * endorse or promote products derived from this software without + * specific prior written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR + * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED + * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * Initial contribution from Jeff Honig (jch@MITCHELL.CIT.CORNELL.EDU). + */ +#include +#include +#include +#include +#include +#include +#include +#include + +#include "interface.h" +#include "addrtoname.h" + +struct egp_packet { + u_char egp_version; +#define EGP_VERSION 2 + u_char egp_type; +#define EGPT_ACQUIRE 3 +#define EGPT_REACH 5 +#define EGPT_POLL 2 +#define EGPT_UPDATE 1 +#define EGPT_ERROR 8 + u_char egp_code; +#define EGPC_REQUEST 0 +#define EGPC_CONFIRM 1 +#define EGPC_REFUSE 2 +#define EGPC_CEASE 3 +#define EGPC_CEASEACK 4 +#define EGPC_HELLO 0 +#define EGPC_HEARDU 1 + u_char egp_status; +#define EGPS_UNSPEC 0 +#define EGPS_ACTIVE 1 +#define EGPS_PASSIVE 2 +#define EGPS_NORES 3 +#define EGPS_ADMIN 4 +#define EGPS_GODOWN 5 +#define EGPS_PARAM 6 +#define EGPS_PROTO 7 +#define EGPS_INDET 0 +#define EGPS_UP 1 +#define EGPS_DOWN 2 +#define EGPS_UNSOL 0x80 + u_short egp_checksum; + u_short egp_as; + u_short egp_sequence; + union { + u_short egpu_hello; + u_char egpu_gws[2]; + u_short egpu_reason; +#define EGPR_UNSPEC 0 +#define EGPR_BADHEAD 1 +#define EGPR_BADDATA 2 +#define EGPR_NOREACH 3 +#define EGPR_XSPOLL 4 +#define EGPR_NORESP 5 +#define EGPR_UVERSION 6 + } egp_handg; +#define egp_hello egp_handg.egpu_hello +#define egp_intgw egp_handg.egpu_gws[0] +#define egp_extgw egp_handg.egpu_gws[1] +#define egp_reason egp_handg.egpu_reason + union { + u_short egpu_poll; + u_long egpu_sourcenet; + } egp_pands; +#define egp_poll egp_pands.egpu_poll +#define egp_sourcenet egp_pands.egpu_sourcenet +}; + +char *egp_acquire_codes[] = { + "request", + "confirm", + "refuse", + "cease", + "cease_ack" +}; + +char *egp_acquire_status[] = { + "unspecified", + "active_mode", + "passive_mode", + "insufficient_resources", + "administratively_prohibited", + "going_down", + "parameter_violation", + "protocol_violation" +}; + +char *egp_reach_codes[] = { + "hello", + "i-h-u" +}; + +char *egp_status_updown[] = { + "indeterminate", + "up", + "down" +}; + +char *egp_reasons[] = { + "unspecified", + "bad_EGP_header_format", + "bad_EGP_data_field_format", + "reachability_info_unavailable", + "excessive_polling_rate", + "no_response", + "unsupported_version" +}; + +static void +egpnrprint(egp, length) + register struct egp_packet *egp; + register int length; +{ + register u_char *cp, *ep; +#define TCHECK(n) if (cp > ep - n) goto trunc + register u_long addr; + register u_long net; + register int netlen; + int gateways, distances, networks; + int t_gateways; + char *comma; + + addr = egp->egp_sourcenet; + if (IN_CLASSA(addr)) { + net = addr & IN_CLASSA_NET; + netlen = 1; + } else if (IN_CLASSB(addr)) { + net = addr & IN_CLASSB_NET; + netlen = 2; + } else if (IN_CLASSC(addr)) { + net = addr & IN_CLASSC_NET; + netlen = 3; + } else { + net = 0; + netlen = 0; + } + cp = (u_char *)(egp + 1); + ep = snapend; + + t_gateways = egp->egp_intgw + egp->egp_extgw; + for (gateways = 0; gateways < t_gateways; ++gateways) { + /* Pickup host part of gateway address */ + addr = 0; + TCHECK(4 - netlen); + switch (netlen) { + + case 1: + addr = *cp++; + /* fall through */ + case 2: + addr = (addr << 8) | *cp++; + /* fall through */ + case 3: + addr = (addr << 8) | *cp++; + } + addr |= net; + TCHECK(1); + distances = *cp++; + printf(" %s %s ", + gateways < egp->egp_intgw ? "int" : "ext", + intoa(addr)); + + comma = ""; + putchar('('); + while (--distances >= 0) { + TCHECK(2); + printf("%sd%d:", comma, (int)*cp++); + comma = ", "; + networks = *cp++; + while (--networks >= 0) { + /* Pickup network number */ + TCHECK(1); + addr = (u_long)*cp++ << 24; + if (IN_CLASSB(addr)) { + TCHECK(1); + addr |= (u_long)*cp++ << 16; + } else if (!IN_CLASSA(addr)) { + TCHECK(2); + addr |= (u_long)*cp++ << 16; + addr |= (u_long)*cp++ << 8; + } + printf(" %s", intoa(addr)); + } + } + putchar(')'); + } + return; +trunc: + fputs("[|]", stdout); +} + +void +egp_print(egp, length, ip) + register struct egp_packet *egp; + register int length; + register struct ip *ip; +{ + register int status; + register int code; + register int type; + + (void)printf("%s > %s: egp: ", + ipaddr_string(&ip->ip_src), + ipaddr_string(&ip->ip_dst)); + + if (egp->egp_version != EGP_VERSION) { + printf("[version %d]", egp->egp_version); + return; + } + printf("as:%d seq:%d", ntohs(egp->egp_as), ntohs(egp->egp_sequence)); + + type = egp->egp_type; + code = egp->egp_code; + status = egp->egp_status; + + switch (type) { + case EGPT_ACQUIRE: + printf(" acquire"); + switch (code) { + case EGPC_REQUEST: + case EGPC_CONFIRM: + printf(" %s", egp_acquire_codes[code]); + switch (status) { + case EGPS_UNSPEC: + case EGPS_ACTIVE: + case EGPS_PASSIVE: + printf(" %s", egp_acquire_status[status]); + break; + + default: + printf(" [status %d]", status); + break; + } + printf(" hello:%d poll:%d", + ntohs(egp->egp_hello), + ntohs(egp->egp_poll)); + break; + + case EGPC_REFUSE: + case EGPC_CEASE: + case EGPC_CEASEACK: + printf(" %s", egp_acquire_codes[code]); + switch (status ) { + case EGPS_UNSPEC: + case EGPS_NORES: + case EGPS_ADMIN: + case EGPS_GODOWN: + case EGPS_PARAM: + case EGPS_PROTO: + printf(" %s", egp_acquire_status[status]); + break; + + default: + printf("[status %d], status"); + break; + } + break; + + default: + printf("[code %d]", code); + break; + } + break; + + case EGPT_REACH: + switch (code) { + + case EGPC_HELLO: + case EGPC_HEARDU: + printf(" %s", egp_reach_codes[code]); + if (status <= EGPS_DOWN) + printf(" state:%s", egp_status_updown[status]); + else + printf(" [status %d], status"); + break; + + default: + printf("[reach code %d], code"); + break; + } + break; + + case EGPT_POLL: + printf(" poll"); + if (egp->egp_status <= EGPS_DOWN) + printf(" state:%s", egp_status_updown[status]); + else + printf(" [status %d]", status); + printf(" net:%s", intoa(egp->egp_sourcenet)); + break; + + case EGPT_UPDATE: + printf(" update"); + if (status & EGPS_UNSOL) { + status &= ~EGPS_UNSOL; + printf(" unsolicitied"); + } + if (status <= EGPS_DOWN) + printf(" state:%s", egp_status_updown[status]); + else + printf(" [status %d]", status); + printf(" %s int %d ext %d", + intoa(egp->egp_sourcenet), + egp->egp_intgw, + egp->egp_extgw); + if (vflag) + egpnrprint(egp, length); + break; + + case EGPT_ERROR: + printf(" error"); + if (status <= EGPS_DOWN) + printf(" state:%s", egp_status_updown[status]); + else + printf(" [status]", status); + + if (ntohs(egp->egp_reason) <= EGPR_UVERSION) + printf(" %s", egp_reasons[ntohs(egp->egp_reason)]); + else + printf(" [reason]", ntohs(egp->egp_reason)); + break; + + default: + printf("[type %d]", type); + break; + } +} diff --git a/usr.sbin/tcpdump/tcpdump/print-ether.c b/usr.sbin/tcpdump/tcpdump/print-ether.c new file mode 100644 index 0000000..2d01c17 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-ether.c @@ -0,0 +1,123 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-ether.c,v 1.22 91/10/07 20:18:28 leres Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include "interface.h" +#include "addrtoname.h" + +u_char *packetp; +u_char *snapend; + +static inline void +ether_print(ep, length) + register struct ether_header *ep; + int length; +{ + if (qflag) + (void)printf("%s %s %d: ", + etheraddr_string(ESRC(ep)), + etheraddr_string(EDST(ep)), + length); + else + (void)printf("%s %s %s %d: ", + etheraddr_string(ESRC(ep)), + etheraddr_string(EDST(ep)), + etherproto_string(ep->ether_type), + length); +} + +/* + * This is the top level routine of the printer. 'p' is the points + * to the ether header of the packet, 'tvp' is the timestamp, + * 'length' is the length of the packet off the wire, and 'caplen' + * is the number of bytes actually captured. + */ +void +ether_if_print(p, tvp, length, caplen) + u_char *p; + struct timeval *tvp; + int length; + int caplen; +{ + struct ether_header *ep; + register int i; + + ts_print(tvp); + + if (caplen < sizeof(struct ether_header)) { + printf("[|ether]"); + goto out; + } + + if (eflag) + ether_print((struct ether_header *)p, length); + + /* + * Some printers want to get back at the ethernet addresses, + * and/or check that they're not walking off the end of the packet. + * Rather than pass them all the way down, we set these globals. + */ + packetp = p; + snapend = p + caplen; + + length -= sizeof(struct ether_header); + ep = (struct ether_header *)p; + p += sizeof(struct ether_header); + switch (ntohs(ep->ether_type)) { + + case ETHERTYPE_IP: + ip_print((struct ip *)p, length); + break; + + case ETHERTYPE_ARP: + case ETHERTYPE_REVARP: + arp_print((struct ether_arp *)p, length, caplen - sizeof(*ep)); + break; + + default: + if (!eflag) + ether_print(ep, length); + if (!xflag && !qflag) + default_print((u_short *)p, caplen - sizeof(*ep)); + break; + } + if (xflag) + default_print((u_short *)p, caplen - sizeof(*ep)); + out: + putchar('\n'); +} diff --git a/usr.sbin/tcpdump/tcpdump/print-fddi.c b/usr.sbin/tcpdump/tcpdump/print-fddi.c new file mode 100644 index 0000000..7783112 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-fddi.c @@ -0,0 +1,236 @@ +/* + * Copyright (c) 1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#)$Header: print-fddi.c,v 1.4 92/02/03 16:04:02 van Exp $ (LBL)"; +#endif + +#ifdef FDDI +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include + +#include + +#include "interface.h" +#include "addrtoname.h" + +/* + * NOTE: This is a very preliminary hack for FDDI support. + * There are all sorts of wired in constants & nothing (yet) + * to print SMT packets as anything other than hex dumps. + * Most of the necessary changes are waiting on my redoing + * the "header" that a kernel fddi driver supplies to bpf: I + * want it to look like one byte of 'direction' (0 or 1 + * depending on whether the packet was inbound or outbound), + * two bytes of system/driver dependent data (anything an + * implementor thinks would be useful to filter on and/or + * save per-packet, then the real 21-byte FDDI header. + * Steve McCanne & I have also talked about adding the + * 'direction' byte to all bpf headers (e.g., in the two + * bytes of padding on an ethernet header). It's not clear + * we could do this in a backwards compatible way & we hate + * the idea of an incompatible bpf change. Discussions are + * proceeding. + * + * Also, to really support FDDI (and better support 802.2 + * over ethernet) we really need to re-think the rather simple + * minded assumptions about fixed length & fixed format link + * level headers made in gencode.c. One day... + * + * - vj + */ + +/* XXX This goes somewhere else. */ +#define FDDI_HDRLEN 21 + +static u_char fddi_bit_swap[] = { + 0x00, 0x80, 0x40, 0xc0, 0x20, 0xa0, 0x60, 0xe0, + 0x10, 0x90, 0x50, 0xd0, 0x30, 0xb0, 0x70, 0xf0, + 0x08, 0x88, 0x48, 0xc8, 0x28, 0xa8, 0x68, 0xe8, + 0x18, 0x98, 0x58, 0xd8, 0x38, 0xb8, 0x78, 0xf8, + 0x04, 0x84, 0x44, 0xc4, 0x24, 0xa4, 0x64, 0xe4, + 0x14, 0x94, 0x54, 0xd4, 0x34, 0xb4, 0x74, 0xf4, + 0x0c, 0x8c, 0x4c, 0xcc, 0x2c, 0xac, 0x6c, 0xec, + 0x1c, 0x9c, 0x5c, 0xdc, 0x3c, 0xbc, 0x7c, 0xfc, + 0x02, 0x82, 0x42, 0xc2, 0x22, 0xa2, 0x62, 0xe2, + 0x12, 0x92, 0x52, 0xd2, 0x32, 0xb2, 0x72, 0xf2, + 0x0a, 0x8a, 0x4a, 0xca, 0x2a, 0xaa, 0x6a, 0xea, + 0x1a, 0x9a, 0x5a, 0xda, 0x3a, 0xba, 0x7a, 0xfa, + 0x06, 0x86, 0x46, 0xc6, 0x26, 0xa6, 0x66, 0xe6, + 0x16, 0x96, 0x56, 0xd6, 0x36, 0xb6, 0x76, 0xf6, + 0x0e, 0x8e, 0x4e, 0xce, 0x2e, 0xae, 0x6e, 0xee, + 0x1e, 0x9e, 0x5e, 0xde, 0x3e, 0xbe, 0x7e, 0xfe, + 0x01, 0x81, 0x41, 0xc1, 0x21, 0xa1, 0x61, 0xe1, + 0x11, 0x91, 0x51, 0xd1, 0x31, 0xb1, 0x71, 0xf1, + 0x09, 0x89, 0x49, 0xc9, 0x29, 0xa9, 0x69, 0xe9, + 0x19, 0x99, 0x59, 0xd9, 0x39, 0xb9, 0x79, 0xf9, + 0x05, 0x85, 0x45, 0xc5, 0x25, 0xa5, 0x65, 0xe5, + 0x15, 0x95, 0x55, 0xd5, 0x35, 0xb5, 0x75, 0xf5, + 0x0d, 0x8d, 0x4d, 0xcd, 0x2d, 0xad, 0x6d, 0xed, + 0x1d, 0x9d, 0x5d, 0xdd, 0x3d, 0xbd, 0x7d, 0xfd, + 0x03, 0x83, 0x43, 0xc3, 0x23, 0xa3, 0x63, 0xe3, + 0x13, 0x93, 0x53, 0xd3, 0x33, 0xb3, 0x73, 0xf3, + 0x0b, 0x8b, 0x4b, 0xcb, 0x2b, 0xab, 0x6b, 0xeb, + 0x1b, 0x9b, 0x5b, 0xdb, 0x3b, 0xbb, 0x7b, 0xfb, + 0x07, 0x87, 0x47, 0xc7, 0x27, 0xa7, 0x67, 0xe7, + 0x17, 0x97, 0x57, 0xd7, 0x37, 0xb7, 0x77, 0xf7, + 0x0f, 0x8f, 0x4f, 0xcf, 0x2f, 0xaf, 0x6f, 0xef, + 0x1f, 0x9f, 0x5f, 0xdf, 0x3f, 0xbf, 0x7f, 0xff, +}; + +static inline void +fddi_print(p, length) + u_char *p; + int length; +{ + u_char fsrc[6], fdst[6]; + register char *srcname, *dstname; + register int i; + + /* + * bit-swap the fddi addresses (isn't the IEEE standards + * process wonderful!) then convert them to names. + */ + + for (i = 0; i < sizeof(fdst); ++i) + fdst[i] = fddi_bit_swap[p[i+1]]; + for (i = 0; i < sizeof(fsrc); ++i) + fsrc[i] = fddi_bit_swap[p[i+7]]; + dstname = etheraddr_string(fdst); + srcname = etheraddr_string(fsrc); + + if (vflag) + printf("%s %s %02x %02x %02x %02x %02x%02x%02x %s %d: ", + dstname, srcname, + p[0], + p[13], p[14], p[15], + p[16], p[17], p[18], + etherproto_string((p[19] << 8) | p[20]), + length); + else if (qflag) + printf("%s %s %d: ", dstname, srcname, length); + else + printf("%s %s %02x %s %d: ", + dstname, srcname, + p[0], + etherproto_string((p[19] << 8) | p[20]), + length); +} + +void +fddi_if_print(p, tvp, length, caplen) + u_char *p; + struct timeval *tvp; + int length; + int caplen; +{ + struct ip *ip; + u_short type; + + ts_print(tvp); + + if (caplen < FDDI_HDRLEN) { + printf("[|fddi]"); + goto out; + } + + /* + * Some printers want to get back at the link level addresses, + * and/or check that they're not walking off the end of the packet. + * Rather than pass them all the way down, we set these globals. + */ + packetp = (u_char *)p; + snapend = (u_char *)p + caplen; + + /* + * If the frame is not an LLC frame or is not an LLC/UI frame + * or doesn't have SNAP as a dest NSAP, use the default printer. + * (XXX - should interpret SMT packets here.) + */ + if ((p[0] & 0xf8) != 0x50) + /* not LLC frame -- use default printer */ + type = 0; + else if ((p[15] &~ 0x10) != 0x03) + /* not UI frame -- use default printer */ + type = 0; + else if (p[13] != 170) + /* DSAP not SNAP -- use default printer */ + type = 0; + else + type = (p[19] << 8) | p[20]; + if (eflag) + fddi_print(p, length); + + length -= FDDI_HDRLEN; + p += FDDI_HDRLEN; + + switch (ntohs(type)) { + + case ETHERTYPE_IP: + ip_print((struct ip *)p, length); + break; + + case ETHERTYPE_ARP: + case ETHERTYPE_REVARP: + arp_print((struct ether_arp *)p, length, caplen - FDDI_HDRLEN); + break; + + default: + if (!eflag) + fddi_print(p, length); + if (!xflag && !qflag) + default_print((u_short *)p, caplen - FDDI_HDRLEN); + break; + } + if (xflag) + default_print((u_short *)p, caplen - sizeof(FDDI_HDRLEN)); +out: + putchar('\n'); +} +#else +#include +void +fddi_if_print() +{ + void error(); + + error("not configured for fddi"); + /* NOTREACHED */ +} +#endif diff --git a/usr.sbin/tcpdump/tcpdump/print-icmp.c b/usr.sbin/tcpdump/tcpdump/print-icmp.c new file mode 100644 index 0000000..928d866 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-icmp.c @@ -0,0 +1,207 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-icmp.c,v 1.11 91/03/27 17:42:58 leres Exp $ (LBL)"; +#endif + +#include + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include + +#include "interface.h" +#include "addrtoname.h" + +void +icmp_print(dp, ip) + register struct icmp *dp; + register struct ip *ip; +{ + char buf[256]; + register char *str = buf; + register struct ip *oip; + register struct udphdr *ouh; + register int hlen; + u_char *ep; + +#define TCHECK(var, l) if ((u_char *)&(var) > ep - l) goto trunc + + /* 'ep' points to the end of avaible data. */ + ep = (u_char *)snapend; + + (void)printf("%s > %s: ", + ipaddr_string(&ip->ip_src), + ipaddr_string(&ip->ip_dst)); + strcpy(str, "[?]"); + + TCHECK(dp->icmp_code, sizeof(dp->icmp_code)); + switch (dp->icmp_type) { + case ICMP_ECHOREPLY: + str = "echo reply"; + break; + case ICMP_UNREACH: + TCHECK(dp->icmp_ip.ip_dst, sizeof(dp->icmp_ip.ip_dst)); + switch (dp->icmp_code) { + case ICMP_UNREACH_NET: + (void)sprintf(buf, "net %s unreachable", + ipaddr_string(&dp->icmp_ip.ip_dst)); + break; + case ICMP_UNREACH_HOST: + (void)sprintf(buf, "host %s unreachable", + ipaddr_string(&dp->icmp_ip.ip_dst)); + break; + case ICMP_UNREACH_PROTOCOL: + TCHECK(dp->icmp_ip.ip_p, sizeof(dp->icmp_ip.ip_p)); + (void)sprintf(buf, "%s protocol %d unreachable", + ipaddr_string(&dp->icmp_ip.ip_dst), + dp->icmp_ip.ip_p); + break; + case ICMP_UNREACH_PORT: + TCHECK(dp->icmp_ip.ip_p, sizeof(dp->icmp_ip.ip_p)); + oip = &dp->icmp_ip; + hlen = oip->ip_hl * 4; + ouh = (struct udphdr *)(((u_char *)oip) + hlen); + NTOHS(ouh->uh_dport); + switch (oip->ip_p) { + case IPPROTO_TCP: + (void)sprintf(buf, + "%s tcp port %s unreachable", + ipaddr_string(&oip->ip_dst), + tcpport_string(ouh->uh_dport)); + break; + case IPPROTO_UDP: + (void)sprintf(buf, + "%s udp port %s unreachable", + ipaddr_string(&oip->ip_dst), + udpport_string(ouh->uh_dport)); + break; + default: + (void)sprintf(buf, + "%s protocol %d port %d unreachable", + ipaddr_string(&oip->ip_dst), + oip->ip_p, ouh->uh_dport); + break; + } + break; + case ICMP_UNREACH_NEEDFRAG: + (void)sprintf(buf, "%s unreachable - need to frag", + ipaddr_string(&dp->icmp_ip.ip_dst)); + break; + case ICMP_UNREACH_SRCFAIL: + (void)sprintf(buf, + "%s unreachable - source route failed", + ipaddr_string(&dp->icmp_ip.ip_dst)); + break; + } + break; + case ICMP_SOURCEQUENCH: + str = "source quench"; + break; + case ICMP_REDIRECT: + TCHECK(dp->icmp_ip.ip_dst, sizeof(dp->icmp_ip.ip_dst)); + switch (dp->icmp_code) { + case ICMP_REDIRECT_NET: + (void)sprintf(buf, "redirect %s to net %s", + ipaddr_string(&dp->icmp_ip.ip_dst), + ipaddr_string(&dp->icmp_gwaddr)); + break; + case ICMP_REDIRECT_HOST: + (void)sprintf(buf, "redirect %s to host %s", + ipaddr_string(&dp->icmp_ip.ip_dst), + ipaddr_string(&dp->icmp_gwaddr)); + break; + case ICMP_REDIRECT_TOSNET: + (void)sprintf(buf, "redirect-tos %s to net %s", + ipaddr_string(&dp->icmp_ip.ip_dst), + ipaddr_string(&dp->icmp_gwaddr)); + break; + case ICMP_REDIRECT_TOSHOST: + (void)sprintf(buf, "redirect-tos %s to host %s", + ipaddr_string(&dp->icmp_ip.ip_dst), + ipaddr_string(&dp->icmp_gwaddr)); + break; + } + break; + case ICMP_ECHO: + str = "echo request"; + break; + case ICMP_TIMXCEED: + TCHECK(dp->icmp_ip.ip_dst, sizeof(dp->icmp_ip.ip_dst)); + switch (dp->icmp_code) { + case ICMP_TIMXCEED_INTRANS: + str = "time exceeded in-transit"; + break; + case ICMP_TIMXCEED_REASS: + str = "ip reassembly time exceeded"; + break; + } + break; + case ICMP_PARAMPROB: + if (dp->icmp_code) + (void)sprintf(buf, "parameter problem - code %d", + dp->icmp_code); + else { + TCHECK(dp->icmp_pptr, sizeof(dp->icmp_pptr)); + (void)sprintf(buf, "parameter problem - octet %d", + dp->icmp_pptr); + } + break; + case ICMP_TSTAMP: + str = "time stamp request"; + break; + case ICMP_TSTAMPREPLY: + str = "time stamp reply"; + break; + case ICMP_IREQ: + str = "information request"; + break; + case ICMP_IREQREPLY: + str = "information reply"; + break; + case ICMP_MASKREQ: + str = "address mask request"; + break; + case ICMP_MASKREPLY: + TCHECK(dp->icmp_mask, sizeof(dp->icmp_mask)); + (void)sprintf(buf, "address mask is 0x%08x", dp->icmp_mask); + break; + } + (void)printf("icmp: %s", str); + return; +trunc: + fputs("[|icmp]", stdout); +#undef TCHECK +} diff --git a/usr.sbin/tcpdump/tcpdump/print-ip.c b/usr.sbin/tcpdump/tcpdump/print-ip.c new file mode 100644 index 0000000..8716a01 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-ip.c @@ -0,0 +1,313 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-ip.c,v 1.28 92/05/25 14:29:02 mccanne Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include "interface.h" +#include "addrtoname.h" + +void +igmp_print(cp, len, ip) + register u_char *cp; + register int len; + register struct ip *ip; +{ + register u_char *ep = (u_char *)snapend; + + (void)printf("%s > %s: ", + ipaddr_string(&ip->ip_src), + ipaddr_string(&ip->ip_dst)); + + if (cp + 7 > ep) { + (void)printf("[|igmp]"); + return; + } + switch (cp[0] & 0xf) { + case 1: + (void)printf("igmp query"); + if (*(int *)&cp[4]) + (void)printf(" [gaddr %s]", ipaddr_string(&cp[4])); + if (len != 8) + (void)printf(" [len %d]", len); + break; + case 2: + (void)printf("igmp report %s", ipaddr_string(&cp[4])); + if (len != 8) + (void)printf(" [len %d]", len); + break; + case 3: + (void)printf("igmp dvmrp", ipaddr_string(&cp[4])); + if (len < 8) + (void)printf(" [len %d]", len); + break; + default: + (void)printf("igmp-%d", cp[0] & 0xf); + break; + } + if ((cp[0] >> 4) != 1) + (void)printf(" [v%d]", cp[0] >> 4); + if (cp[1]) + (void)printf(" [b1=0x%x]", cp[1]); +} + +/* + * print the recorded route in an IP RR, LSRR or SSRR option. + */ +static void +ip_printroute(type, cp, length) + char *type; + register u_char *cp; + int length; +{ + int ptr = cp[2] - 1; + int len; + + printf(" %s{", type); + if ((length + 1) & 3) + printf(" [bad length %d]", length); + if (ptr < 3 || ((ptr + 1) & 3) || ptr > length + 1) + printf(" [bad ptr %d]", cp[2]); + + type = ""; + for (len = 3; len < length; len += 4) { + if (ptr == len) + type = "#"; +#ifdef TCPDUMP_ALIGN + { + struct in_addr addr; + bcopy((char *)&cp[len], (char *)&addr, sizeof(addr)); + printf("%s%s", type, ipaddr_string(&addr)); + } +#else + printf("%s%s", type, ipaddr_string(&cp[len])); +#endif + type = " "; + } + printf("%s}", ptr == len? "#" : ""); +} + +/* + * print IP options. + */ +static void +ip_optprint(cp, length) + register u_char *cp; + int length; +{ + int len; + + for (; length > 0; cp += len, length -= len) { + int tt = *cp; + + len = (tt == IPOPT_NOP || tt == IPOPT_EOL) ? 1 : cp[1]; + if (&cp[1] >= snapend || cp + len > snapend) { + printf("[|ip]"); + return; + } + switch (tt) { + + case IPOPT_EOL: + printf(" EOL"); + if (length > 1) + printf("-%d", length - 1); + return; + + case IPOPT_NOP: + printf(" NOP"); + break; + + case IPOPT_TS: + printf(" TS{%d}", len); + break; + + case IPOPT_SECURITY: + printf(" SECURITY{%d}", len); + break; + + case IPOPT_RR: + printf(" RR{%d}=", len); + ip_printroute("RR", cp, len); + break; + + case IPOPT_SSRR: + ip_printroute("SSRR", cp, len); + break; + + case IPOPT_LSRR: + ip_printroute("LSRR", cp, len); + break; + + default: + printf(" IPOPT-%d{%d}", cp[0], len); + break; + } + } +} + +/* + * print an IP datagram. + */ +void +ip_print(ip, length) + register struct ip *ip; + register int length; +{ + register int hlen; + register int len; + register unsigned char *cp; + +#ifdef TCPDUMP_ALIGN + static u_char *abuf; + /* + * The IP header is not word aligned, so copy into abuf. + * This will never happen with BPF. It does happen raw packet + * dumps from -r. + */ + if ((int)ip & (sizeof(long)-1)) { + if (abuf == 0) + abuf = (u_char *)malloc(snaplen); + bcopy((char *)ip, (char *)abuf, min(length, snaplen)); + snapend += abuf - (u_char *)ip; + packetp = abuf; + ip = (struct ip *)abuf; + } +#endif + if ((u_char *)(ip + 1) > snapend) { + printf("[|ip]"); + return; + } + if (length < sizeof (struct ip)) { + (void)printf("truncated-ip %d", length); + return; + } + hlen = ip->ip_hl * 4; + + NTOHS(ip->ip_len); + NTOHS(ip->ip_off); + NTOHS(ip->ip_id); + + len = ip->ip_len - hlen; + if (length < ip->ip_len) + (void)printf("truncated-ip - %d bytes missing!", + ip->ip_len - length); + + /* + * If this is fragment zero, hand it to the next higher + * level protocol. + */ + if ((ip->ip_off & 0x1fff) == 0) { + cp = (unsigned char *)ip + hlen; + switch (ip->ip_p) { + + case IPPROTO_TCP: + tcp_print((struct tcphdr *)cp, len, ip); + break; + case IPPROTO_UDP: + udp_print((struct udphdr *)cp, len, ip); + break; + case IPPROTO_ICMP: + icmp_print((struct icmp *)cp, ip); + break; + case IPPROTO_ND: + (void)printf("%s > %s:", ipaddr_string(&ip->ip_src), + ipaddr_string(&ip->ip_dst)); + (void)printf(" nd %d", len); + break; + case IPPROTO_EGP: + egp_print((struct egp_packet *)cp, len, ip); + break; +#ifndef IPPROTO_OSPF +#define IPPROTO_OSPF 89 +#endif + case IPPROTO_OSPF: + ospf_print((struct ospfhdr *)cp, len, ip); + break; +#ifndef IPPROTO_IGMP +#define IPPROTO_IGMP 2 +#endif + case IPPROTO_IGMP: + igmp_print(cp, len, ip); + break; + default: + (void)printf("%s > %s:", ipaddr_string(&ip->ip_src), + ipaddr_string(&ip->ip_dst)); + (void)printf(" ip-proto-%d %d", ip->ip_p, len); + break; + } + } + /* + * for fragmented datagrams, print id:size@offset. On all + * but the last stick a "+". For unfragmented datagrams, note + * the don't fragment flag. + */ + if (ip->ip_off & 0x3fff) { + /* + * if this isn't the first frag, we're missing the + * next level protocol header. print the ip addr. + */ + if (ip->ip_off & 0x1fff) + (void)printf("%s > %s:", ipaddr_string(&ip->ip_src), + ipaddr_string(&ip->ip_dst)); + (void)printf(" (frag %d:%d@%d%s)", ip->ip_id, len, + (ip->ip_off & 0x1fff) * 8, + (ip->ip_off & IP_MF)? "+" : ""); + } else if (ip->ip_off & IP_DF) + (void)printf(" (DF)"); + + if (ip->ip_tos) + (void)printf(" [tos 0x%x]", (int)ip->ip_tos); + if (ip->ip_ttl <= 1) + (void)printf(" [ttl %d]", (int)ip->ip_ttl); + + if (vflag) { + char *sep = ""; + + printf(" ("); + if (ip->ip_ttl > 1) { + (void)printf("%sttl %d", sep, (int)ip->ip_ttl); + sep = ", "; + } + if ((ip->ip_off & 0x3fff) == 0) { + (void)printf("%sid %d", sep, (int)ip->ip_id); + sep = ", "; + } + if ((hlen -= sizeof(struct ip)) > 0) { + (void)printf("%soptlen=%d", sep, hlen); + ip_optprint((u_char *)(ip + 1), hlen); + } + printf(")"); + } +} diff --git a/usr.sbin/tcpdump/tcpdump/print-nfs.c b/usr.sbin/tcpdump/tcpdump/print-nfs.c new file mode 100644 index 0000000..8b31697 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-nfs.c @@ -0,0 +1,466 @@ +/* + * Copyright (c) 1990, 1991, 1992 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-nfs.c,v 1.24 92/01/31 12:27:46 mccanne Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include +#include + +#include + +#include "interface.h" +/* These must come after interface.h for BSD. */ +#if BSD >= 199006 +#include +#include +#endif +#include + +#include "addrtoname.h" +#include "extract.h" + +static void nfs_printfh(); +static void nfs_printfn(); + +#if BYTE_ORDER == LITTLE_ENDIAN +/* + * Byte swap an array of n words. + * Assume input is word-aligned. + * Check that buffer is bounded by "snapend". + */ +static void +bswap(bp, n) + register u_long *bp; + register u_int n; +{ + register int nwords = ((char *)snapend - (char *)bp) / sizeof(*bp); + + if (nwords > n) + nwords = n; + for (; --nwords >= 0; ++bp) + *bp = ntohl(*bp); +} +#endif + +void +nfsreply_print(rp, length, ip) + register struct rpc_msg *rp; + int length; + register struct ip *ip; +{ +#if BYTE_ORDER == LITTLE_ENDIAN + bswap((u_long *)rp, sizeof(*rp) / sizeof(u_long)); +#endif + if (!nflag) + (void)printf("%s.nfs > %s.%x: reply %s %d", + ipaddr_string(&ip->ip_src), + ipaddr_string(&ip->ip_dst), + rp->rm_xid, + rp->rm_reply.rp_stat == MSG_ACCEPTED? "ok":"ERR", + length); + else + (void)printf("%s.%x > %s.%x: reply %s %d", + ipaddr_string(&ip->ip_src), + NFS_PORT, + ipaddr_string(&ip->ip_dst), + rp->rm_xid, + rp->rm_reply.rp_stat == MSG_ACCEPTED? "ok":"ERR", + length); +} + +/* + * Return a pointer to the first file handle in the packet. + * If the packet was truncated, return 0. + */ +static u_long * +parsereq(rp, length) + register struct rpc_msg *rp; + register int length; +{ + register u_long *dp = (u_long *)&rp->rm_call.cb_cred; + register u_long *ep = (u_long *)snapend; + + /* + * find the start of the req data (if we captured it) + * note that dp[1] was already byte swapped by bswap() + */ + if (dp < ep && dp[1] < length) { + dp += (dp[1] + (2*sizeof(u_long) + 3)) / sizeof(u_long); + if ((dp < ep) && (dp[1] < length)) { + dp += (dp[1] + (2*sizeof(u_long) + 3)) / + sizeof(u_long); + if (dp < ep) + return (dp); + } + } + return (0); +} + +/* + * Print out an NFS file handle and return a pointer to following word. + * If packet was truncated, return 0. + */ +static u_long * +parsefh(dp) + register u_long *dp; +{ + if (dp + 8 <= (u_long *)snapend) { + nfs_printfh(dp); + return (dp + 8); + } + return (0); +} + +/* + * Print out a file name and return pointer to longword past it. + * If packet was truncated, return 0. + */ +static u_long * +parsefn(dp) + register u_long *dp; +{ + register int len; + register u_char *cp; + + /* Bail if we don't have the string length */ + if ((u_char *)dp > snapend - sizeof(*dp)) + return(0); + + /* Fetch string length; convert to host order */ + len = *dp++; + NTOHL(len); + + cp = (u_char *)dp; + /* Update long pointer (NFS filenames are padded to long) */ + dp += ((len + 3) & ~3) / sizeof(*dp); + if ((u_char *)dp > snapend) + return (0); + nfs_printfn(cp, len); + + return (dp); +} + +/* + * Print out file handle and file name. + * Return pointer to longword past file name. + * If packet was truncated (or there was some other error), return 0. + */ +static u_long * +parsefhn(dp) + register u_long *dp; +{ + dp = parsefh(dp); + if (dp == 0) + return (0); + putchar(' '); + return (parsefn(dp)); +} + +void +nfsreq_print(rp, length, ip) + register struct rpc_msg *rp; + int length; + register struct ip *ip; +{ + register u_long *dp; + register u_char *ep = snapend; +#define TCHECK(p, l) if ((u_char *)(p) > ep - l) break + +#if BYTE_ORDER == LITTLE_ENDIAN + bswap((u_long *)rp, sizeof(*rp) / sizeof(u_long)); +#endif + + if (!nflag) + (void)printf("%s.%x > %s.nfs: %d", + ipaddr_string(&ip->ip_src), + rp->rm_xid, + ipaddr_string(&ip->ip_dst), + length); + else + (void)printf("%s.%x > %s.%x: %d", + ipaddr_string(&ip->ip_src), + rp->rm_xid, + ipaddr_string(&ip->ip_dst), + NFS_PORT, + length); + + switch (rp->rm_call.cb_proc) { +#ifdef NFSPROC_NOOP + case NFSPROC_NOOP: + printf(" nop"); + return; +#else +#define NFSPROC_NOOP -1 +#endif + case RFS_NULL: + printf(" null"); + return; + + case RFS_GETATTR: + printf(" getattr"); + if ((dp = parsereq(rp, length)) != 0 && parsefh(dp) != 0) + return; + break; + + case RFS_SETATTR: + printf(" setattr"); + if ((dp = parsereq(rp, length)) != 0 && parsefh(dp) != 0) + return; + break; + +#if RFS_ROOT != NFSPROC_NOOP + case RFS_ROOT: + printf(" root"); + break; +#endif + case RFS_LOOKUP: + printf(" lookup"); + if ((dp = parsereq(rp, length)) != 0 && parsefhn(dp) != 0) + return; + break; + + case RFS_READLINK: + printf(" readlink"); + if ((dp = parsereq(rp, length)) != 0 && parsefh(dp) != 0) + return; + break; + + case RFS_READ: + printf(" read"); + if ((dp = parsereq(rp, length)) != 0 && + (dp = parsefh(dp)) != 0) { + TCHECK(dp, 3 * sizeof(*dp)); + printf(" %lu (%lu) bytes @ %lu", + ntohl(dp[1]), ntohl(dp[2]), ntohl(dp[0])); + return; + } + break; + +#if RFS_WRITECACHE != NFSPROC_NOOP + case RFS_WRITECACHE: + printf(" writecache"); + if ((dp = parsereq(rp, length)) != 0 && + (dp = parsefh(dp)) != 0) { + TCHECK(dp, 4 * sizeof(*dp)); + printf(" %lu (%lu) bytes @ %lu (%lu)", + ntohl(dp[3]), ntohl(dp[2]), + ntohl(dp[1]), ntohl(dp[0])); + return; + } + break; +#endif + case RFS_WRITE: + printf(" write"); + if ((dp = parsereq(rp, length)) != 0 && + (dp = parsefh(dp)) != 0) { + TCHECK(dp, 4 * sizeof(*dp)); + printf(" %lu (%lu) bytes @ %lu (%lu)", + ntohl(dp[3]), ntohl(dp[2]), + ntohl(dp[1]), ntohl(dp[0])); + return; + } + break; + + case RFS_CREATE: + printf(" create"); + if ((dp = parsereq(rp, length)) != 0 && parsefhn(dp) != 0) + return; + break; + + case RFS_REMOVE: + printf(" remove"); + if ((dp = parsereq(rp, length)) != 0 && parsefhn(dp) != 0) + return; + break; + + case RFS_RENAME: + printf(" rename"); + if ((dp = parsereq(rp, length)) != 0 && + (dp = parsefhn(dp)) != 0) { + fputs(" ->", stdout); + if (parsefhn(dp) != 0) + return; + } + break; + + case RFS_LINK: + printf(" link"); + if ((dp = parsereq(rp, length)) != 0 && + (dp = parsefh(dp)) != 0) { + fputs(" ->", stdout); + if (parsefhn(dp) != 0) + return; + } + break; + + case RFS_SYMLINK: + printf(" symlink"); + if ((dp = parsereq(rp, length)) != 0 && + (dp = parsefhn(dp)) != 0) { + fputs(" -> ", stdout); + if (parsefn(dp) != 0) + return; + } + break; + + case RFS_MKDIR: + printf(" mkdir"); + if ((dp = parsereq(rp, length)) != 0 && parsefhn(dp) != 0) + return; + break; + + case RFS_RMDIR: + printf(" rmdir"); + if ((dp = parsereq(rp, length)) != 0 && parsefhn(dp) != 0) + return; + break; + + case RFS_READDIR: + printf(" readdir"); + if ((dp = parsereq(rp, length)) != 0 && + (dp = parsefh(dp)) != 0) { + TCHECK(dp, 2 * sizeof(*dp)); + printf(" %lu bytes @ %lu", ntohl(dp[1]), ntohl(dp[0])); + return; + } + break; + + case RFS_STATFS: + printf(" statfs"); + if ((dp = parsereq(rp, length)) != 0 && parsefh(dp) != 0) + return; + break; + + default: + printf(" proc-%lu", rp->rm_call.cb_proc); + return; + } + fputs(" [|nfs]", stdout); +#undef TCHECK +} + +/* + * Print out an NFS file handle. + * We assume packet was not truncated before the end of the + * file handle pointed to by dp. + */ +static void +nfs_printfh(dp) + register u_long *dp; +{ + /* + * take a wild guess at the structure of file handles. + * On sun 3s, there are 2 longs of fsid, a short + * len == 8, a long of inode & a long of generation number. + * On sun 4s, the len == 10 & there are 2 bytes of + * padding immediately following it. + */ + if (dp[2] == 0xa0000) { + if (dp[1]) + (void) printf(" fh %ld.%ld.%lu", dp[0], dp[1], dp[3]); + else + (void) printf(" fh %ld.%ld", dp[0], dp[3]); + } else if ((dp[2] >> 16) == 8) + /* + * 'dp' is longword aligned, so we must use the extract + * macros below for dp+10 which cannot possibly be aligned. + */ + if (dp[1]) + (void) printf(" fh %ld.%ld.%lu", dp[0], dp[1], + EXTRACT_LONG((u_char *)dp + 10)); + else + (void) printf(" fh %ld.%ld", dp[0], + EXTRACT_LONG((u_char *)dp + 10)); + /* On Ultrix pre-4.0, three longs: fsid, fno, fgen and then zeros */ + else if (dp[3] == 0) { + (void)printf(" fh %d,%d/%ld.%ld", major(dp[0]), minor(dp[0]), + dp[1], dp[2]); + } + /* + * On Ultrix 4.0, + * five longs: fsid, fno, fgen, eno, egen and then zeros + */ + else if (dp[5] == 0) { + (void)printf(" fh %d,%d/%ld.%ld", major(dp[0]), minor(dp[0]), + dp[1], dp[2]); + if (vflag) { + /* print additional info */ + (void)printf("[%ld.%ld]", dp[3], dp[4]); + } + } + else + (void) printf(" fh %lu.%lu.%lu.%lu", + dp[0], dp[1], dp[2], dp[3]); +} + +/* + * Print out an NFS filename. + * Assumes that len bytes from cp are present in packet. + */ +static void +nfs_printfn(cp, len) + register u_char *cp; + register int len; +{ + register char c; + + /* Sanity */ + if (len >= 64) { + fputs("[\">]", stdout); + return; + } + /* Print out the filename */ + putchar('"'); + while (--len >= 0) { + c = toascii(*cp++); + if (!isascii(c)) { + c = toascii(c); + putchar('M'); + putchar('-'); + } + if (!isprint(c)) { + c ^= 0x40; /* DEL to ?, others to alpha */ + putchar('^'); + } + putchar(c); + } + putchar('"'); +} diff --git a/usr.sbin/tcpdump/tcpdump/print-ntp.c b/usr.sbin/tcpdump/tcpdump/print-ntp.c new file mode 100644 index 0000000..86f6ba7 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-ntp.c @@ -0,0 +1,277 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * Format and print ntp packets. + * By Jeffrey Mogul/DECWRL + * loosely based on print-bootp.c + */ + +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-ntp.c,v 1.7 92/01/04 01:45:16 leres Exp $ (LBL)"; +#endif + +#include + +#include +#include +#include +#include +#include +#include +#include +#include + +#include "interface.h" +#include "addrtoname.h" +#include "ntp.h" + +/* + * Print ntp requests + */ +void +ntp_print(bp, length) + register struct ntpdata *bp; + int length; +{ + u_char *ep; + int mode, version, leapind; + static char rclock[5]; + +#define TCHECK(var, l) if ((u_char *)&(var) > ep - l) goto trunc + + /* Note funny sized packets */ + if (length != sizeof(struct ntpdata)) + (void)printf(" [len=%d]", length); + + /* 'ep' points to the end of avaible data. */ + ep = (u_char *)snapend; + + TCHECK(bp->status, sizeof(bp->status)); + + version = (bp->status & VERSIONMASK) >> 3; + printf(" v%d", version); + + leapind = bp->status & LEAPMASK; + switch (leapind) { + + case NO_WARNING: + break; + + case PLUS_SEC: + fputs(" +1s", stdout); + break; + + case MINUS_SEC: + fputs(" -1s", stdout); + break; + } + + mode = bp->status & MODEMASK; + switch (mode) { + + case MODE_UNSPEC: /* unspecified */ + fputs(" unspec", stdout); + break; + + case MODE_SYM_ACT: /* symmetric active */ + fputs(" sym_act", stdout); + break; + + case MODE_SYM_PAS: /* symmetric passive */ + fputs(" sym_pas", stdout); + break; + + case MODE_CLIENT: /* client */ + fputs(" client", stdout); + break; + + case MODE_SERVER: /* server */ + fputs(" server", stdout); + break; + + case MODE_BROADCAST: /* broadcast */ + fputs(" bcast", stdout); + break; + + case MODE_RES1: /* reserved */ + fputs(" res1", stdout); + break; + + case MODE_RES2: /* reserved */ + fputs(" res2", stdout); + break; + + } + + TCHECK(bp->stratum, sizeof(bp->stratum)); + printf(" strat %d", bp->stratum); + + TCHECK(bp->ppoll, sizeof(bp->ppoll)); + printf(" poll %d", bp->ppoll); + + /* Can't TCHECK bp->precision bitfield so bp->distance + 0 instead */ + TCHECK(bp->distance, 0); + printf(" prec %d", bp->precision); + + if (!vflag) + return; + + TCHECK(bp->distance, sizeof(bp->distance)); + fputs(" dist ", stdout); + p_sfix(&bp->distance); + + TCHECK(bp->dispersion, sizeof(bp->dispersion)); + fputs(" disp ", stdout); + p_sfix(&bp->dispersion); + + TCHECK(bp->refid, sizeof(bp->refid)); + fputs(" ref ", stdout); + /* Interpretation depends on stratum */ + switch (bp->stratum) { + + case UNSPECIFIED: + case PRIM_REF: + strncpy(rclock, (char *)&(bp->refid), 4); + rclock[4] = '\0'; + fputs(rclock, stdout); + break; + + case INFO_QUERY: + printf("%s INFO_QUERY", ipaddr_string(&(bp->refid))); + /* this doesn't have more content */ + return; + + case INFO_REPLY: + printf("%s INFO_REPLY", ipaddr_string(&(bp->refid))); + /* this is too complex to be worth printing */ + return; + + default: + printf("%s", ipaddr_string(&(bp->refid))); + break; + } + + TCHECK(bp->reftime, sizeof(bp->reftime)); + putchar('@'); + p_ntp_time(&(bp->reftime)); + + TCHECK(bp->org, sizeof(bp->org)); + fputs(" orig ", stdout); + p_ntp_time(&(bp->org)); + + TCHECK(bp->rec, sizeof(bp->rec)); + fputs(" rec ", stdout); + p_ntp_delta(&(bp->org), &(bp->rec)); + + TCHECK(bp->xmt, sizeof(bp->xmt)); + fputs(" xmt ", stdout); + p_ntp_delta(&(bp->org), &(bp->xmt)); + + return; + +trunc: + fputs(" [|ntp]", stdout); +#undef TCHECK +} + +p_sfix(sfp) + register struct s_fixedpt *sfp; +{ + register int i; + register int f; + register float ff; + + i = ntohs(sfp->int_part); + f = ntohs(sfp->fraction); + ff = f / 65536.0; /* shift radix point by 16 bits */ + f = ff * 1000000.0; /* Treat fraction as parts per million */ + printf("%d.%06d", i, f); +} + +#define FMAXINT (4294967296.0) /* floating point rep. of MAXINT */ + +p_ntp_time(lfp) + register struct l_fixedpt *lfp; +{ + register long i; + register unsigned long uf; + register unsigned long f; + register float ff; + + i = ntohl(lfp->int_part); + uf = ntohl(lfp->fraction); + ff = uf; + if (ff < 0.0) /* some compilers are buggy */ + ff += FMAXINT; + ff = ff / FMAXINT; /* shift radix point by 32 bits */ + f = ff * 1000000000.0; /* treat fraction as parts per billion */ + printf("%lu.%09d", i, f); +} + +/* Prints time difference between *lfp and *olfp */ +p_ntp_delta(olfp, lfp) + register struct l_fixedpt *olfp; + register struct l_fixedpt *lfp; +{ + register long i; + register unsigned long uf; + register unsigned long ouf; + register unsigned long f; + register float ff; + int signbit; + + i = ntohl(lfp->int_part) - ntohl(olfp->int_part); + + uf = ntohl(lfp->fraction); + ouf = ntohl(olfp->fraction); + + if (i > 0) { /* new is definitely greater than old */ + signbit = 0; + f = uf - ouf; + if (ouf > uf) /* must borrow from high-order bits */ + i -= 1; + } else if (i < 0) { /* new is definitely less than old */ + signbit = 1; + f = ouf - uf; + if (uf > ouf) /* must carry into the high-order bits */ + i += 1; + i = -i; + } else { /* int_part is zero */ + if (uf > ouf) { + signbit = 0; + f = uf - ouf; + } else { + signbit = 1; + f = ouf - uf; + } + } + + ff = f; + if (ff < 0.0) /* some compilers are buggy */ + ff += FMAXINT; + ff = ff / FMAXINT; /* shift radix point by 32 bits */ + f = ff * 1000000000.0; /* treat fraction as parts per billion */ + if (signbit) + putchar('-'); + else + putchar('+'); + printf("%d.%09d", i, f); +} diff --git a/usr.sbin/tcpdump/tcpdump/print-null.c b/usr.sbin/tcpdump/tcpdump/print-null.c new file mode 100644 index 0000000..b186068 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-null.c @@ -0,0 +1,117 @@ +/* + * Copyright (c) 1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#)$Header: print-null.c,v 1.3 91/10/07 20:19:11 leres Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include + +#include "interface.h" +#include "addrtoname.h" + +#define NULL_HDRLEN 4 + +static void +null_print(p, ip, length) + u_char *p; + struct ip *ip; + int length; +{ + u_int family; + + bcopy(p, &family, sizeof(family)); + + if (nflag) { + /* XXX just dump the header */ + return; + } + switch (family) { + + case AF_INET: + printf("ip: "); + break; + + case AF_NS: + printf("ns: "); + break; + + default: + printf("AF %d: ", family); + break; + } +} + +void +null_if_print(p, tvp, length, caplen) + u_char *p; + struct timeval *tvp; + int length; + int caplen; +{ + struct ip *ip; + + ts_print(tvp); + + /* + * Some printers want to get back at the link level addresses, + * and/or check that they're not walking off the end of the packet. + * Rather than pass them all the way down, we set these globals. + */ + packetp = (u_char *)p; + snapend = (u_char *)p + caplen; + + length -= NULL_HDRLEN; + + ip = (struct ip *)(p + NULL_HDRLEN); + + if (eflag) + null_print(p, ip, length); + + ip_print(ip, length); + + if (xflag) + default_print((u_short *)ip, caplen - NULL_HDRLEN); + putchar('\n'); +} + diff --git a/usr.sbin/tcpdump/tcpdump/print-ospf.c b/usr.sbin/tcpdump/tcpdump/print-ospf.c new file mode 100644 index 0000000..90daf94 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-ospf.c @@ -0,0 +1,586 @@ +/* + * Copyright (c) 1991 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * OSPF support contributed by Jeffrey Honig (jch@mitchell.cit.cornell.edu) + */ +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-ospf.c,v 1.1 92/01/29 12:44:17 mccanne Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include + +#include +#include + +#include "ospf.h" +#include "interface.h" +#include "addrtoname.h" + +#ifndef __GNUC__ +#define inline +#endif + +#if !defined(__STDC__) && !defined(const) +#define const +#endif /* !defined(__STDC__) && !defined(const) */ + +struct bits { + u_long bit; + const char *str; +}; + +static const struct bits ospf_option_bits[] = { + OSPF_OPTION_T, "T", + OSPF_OPTION_E, "E", + OSPF_OPTION_MC, "MC", + 0, (char *) 0 +}; + +static const struct bits ospf_rla_flag_bits[] = { + RLA_FLAG_B, "B", + RLA_FLAG_E, "E", + RLA_FLAG_W1, "W1", + RLA_FLAG_W2, "W2", + 0, (char *) 0 +}; + +static const char *ospf_types[OSPF_TYPE_MAX] = { + (char *) 0, + "hello", + "dd", + "ls_req", + "ls_upd", + "ls_ack" +}; + +static inline void +ospf_print_seqage(seq, us) +register u_long seq; +register time_t us; +{ + register time_t sec = us % 60; + register time_t mins = (us / 60) % 60; + register time_t hour = us/3600; + + printf(" S %X age ", + seq); + if (hour) { + printf("%d:%02d:%02d", + hour, + mins, + sec); + } else if (mins) { + printf("%d:%02d", + mins, + sec); + } else { + printf("%d", + sec); + } +} + + +static inline void +ospf_print_bits(bp, options) +register struct bits *bp; +register u_char options; +{ + char sep = ' '; + + do { + if (options & bp->bit) { + printf("%c%s", + sep, + bp->str); + sep = '/'; + } + } while ((++bp)->bit) ; +} + + +#define LS_PRINT(lsp, type) switch (type) { \ + case LS_TYPE_ROUTER: \ + printf(" rtr %s ", ipaddr_string(&lsp->ls_router)); break; \ + case LS_TYPE_NETWORK: \ + printf(" net dr %s if %s", ipaddr_string(&lsp->ls_router), ipaddr_string(&lsp->ls_stateid)); break; \ + case LS_TYPE_SUM_IP: \ + printf(" sum %s abr %s", ipaddr_string(&lsp->ls_stateid), ipaddr_string(&lsp->ls_router)); break; \ + case LS_TYPE_SUM_ABR: \ + printf(" abr %s rtr %s", ipaddr_string(&lsp->ls_router), ipaddr_string(&lsp->ls_stateid)); break; \ + case LS_TYPE_ASE: \ + printf(" ase %s asbr %s", ipaddr_string(&lsp->ls_stateid), ipaddr_string(&lsp->ls_router)); break; \ + case LS_TYPE_GROUP: \ + printf(" group %s rtr %s", ipaddr_string(&lsp->ls_stateid), ipaddr_string(&lsp->ls_router)); break; \ + } + +static int +ospf_print_lshdr(lshp, end) +register struct lsa_hdr *lshp; +caddr_t end; +{ + if ((caddr_t) (lshp + 1) > end) { + return 1; + } + + printf(" {"); + + if (!lshp->ls_type || lshp->ls_type >= LS_TYPE_MAX) { + printf(" ??LS type %d?? }", + lshp->ls_type); + return 1; + } + + ospf_print_bits(ospf_option_bits, lshp->ls_options); + ospf_print_seqage(ntohl(lshp->ls_seq), + ntohs(lshp->ls_age)); + + LS_PRINT(lshp, lshp->ls_type); + + return 0; +} + + +/* + * Print a single link state advertisement. If truncated return 1, else 0. + */ + +static int +ospf_print_lsa(lsap, end) +register struct lsa *lsap; +caddr_t end; +{ + register caddr_t ls_end; + struct rlalink *rlp; + struct tos_metric *tosp; + struct in_addr *ap; + struct aslametric *almp; + struct mcla *mcp; + u_long *lp; + int j, k; + + if (ospf_print_lshdr(&lsap->ls_hdr, end)) { + return 1; + } + + ls_end = (caddr_t) lsap + ntohs(lsap->ls_hdr.ls_length); + + if (ls_end > end) { + printf(" }"); + return 1; + } + + switch (lsap->ls_hdr.ls_type) { + case LS_TYPE_ROUTER: + ospf_print_bits(ospf_rla_flag_bits, lsap->lsa_un.un_rla.rla_flags); + + j = ntohs(lsap->lsa_un.un_rla.rla_count); + rlp = lsap->lsa_un.un_rla.rla_link; + while (j--) { + struct rlalink *rln = (struct rlalink *) ((caddr_t) (rlp + 1) + ((rlp->link_toscount) * sizeof (struct tos_metric))); + + if ((caddr_t) rln > ls_end) { + break; + } + printf(" {"); + + switch (rlp->link_type) { + case RLA_TYPE_VIRTUAL: + printf(" virt"); + /* Fall through */ + + case RLA_TYPE_ROUTER: + printf(" nbrid %s if %s", + ipaddr_string(&rlp->link_id), + ipaddr_string(&rlp->link_data)); + break; + + case RLA_TYPE_TRANSIT: + printf(" dr %s if %s", + ipaddr_string(&rlp->link_id), + ipaddr_string(&rlp->link_data)); + break; + + case RLA_TYPE_STUB: + printf(" net %s mask %s", + ipaddr_string(&rlp->link_id), + ipaddr_string(&rlp->link_data)); + break; + + default: + printf(" ??RouterLinksType %d?? }", + rlp->link_type); + return 0; + } + printf(" tos 0 metric %d", + ntohs(rlp->link_tos0metric)); + tosp = (struct tos_metric *) ((sizeof rlp->link_tos0metric) + (caddr_t) rlp); + for (k = 0; k < rlp->link_toscount; k++, tosp++) { + printf(" tos %d metric %d", + ntohs(tosp->tos_type), + ntohs(tosp->tos_metric)); + } + printf(" }"); + rlp = rln; + } + break; + + case LS_TYPE_NETWORK: + printf(" mask %s rtrs", + ipaddr_string(&lsap->lsa_un.un_nla.nla_mask)); + for (ap = lsap->lsa_un.un_nla.nla_router; + (caddr_t) (ap + 1) <= ls_end; + ap++) { + printf(" %s", + ipaddr_string(ap)); + } + break; + + case LS_TYPE_SUM_IP: + printf(" mask %s", + ipaddr_string(&lsap->lsa_un.un_sla.sla_mask)); + /* Fall through */ + + case LS_TYPE_SUM_ABR: + + for (lp = lsap->lsa_un.un_sla.sla_tosmetric; + (caddr_t) (lp + 1) <= ls_end; + lp++) { + u_long ul = ntohl(*lp); + + printf(" tos %d metric %d", + (ul & SLA_MASK_TOS) >> SLA_SHIFT_TOS, + ul & SLA_MASK_METRIC); + } + break; + + case LS_TYPE_ASE: + printf(" mask %s", + ipaddr_string(&lsap->lsa_un.un_asla.asla_mask)); + + for (almp = lsap->lsa_un.un_asla.asla_metric; + (caddr_t) (almp + 1) <= ls_end; + almp++) { + u_long ul = ntohl(almp->asla_tosmetric); + + printf(" type %d tos %d metric %d", + (ul & ASLA_FLAG_EXTERNAL) ? 2 : 1, + (ul & ASLA_MASK_TOS) >> ASLA_SHIFT_TOS, + (ul & ASLA_MASK_METRIC)); + if (almp->asla_forward.s_addr) { + printf(" forward %s", + ipaddr_string(&almp->asla_forward)); + } + if (almp->asla_tag.s_addr) { + printf(" tag %s", + ipaddr_string(&almp->asla_tag)); + } + } + break; + + case LS_TYPE_GROUP: + /* Multicast extensions as of 23 July 1991 */ + for (mcp = lsap->lsa_un.un_mcla; + (caddr_t) (mcp + 1) <= ls_end; + mcp++) { + switch (ntohl(mcp->mcla_vtype)) { + case MCLA_VERTEX_ROUTER: + printf(" rtr rtrid %s", + ipaddr_string(&mcp->mcla_vid)); + break; + + case MCLA_VERTEX_NETWORK: + printf(" net dr %s", + ipaddr_string(&mcp->mcla_vid)); + break; + + default: + printf(" ??VertexType %d??", + ntohl(mcp->mcla_vtype)); + break; + } + } + } + + printf(" }"); + return 0; +} + + +void +ospf_print(dat, length, ip) +u_char *dat; +int length; +struct ip *ip; +{ + register struct ospfhdr *op = (struct ospfhdr *) dat; + register caddr_t end = (caddr_t)snapend; + register struct lsa *lsap; + register struct lsa_hdr *lshp; + char sep; + int i, j; + struct in_addr *ap; + struct lsr *lsrp; + + /* Print the source and destination address */ + (void) printf(" %s > %s:", + ipaddr_string(&ip->ip_src), + ipaddr_string(&ip->ip_dst)); + + if ((caddr_t) (&op->ospf_len + 1) > end) { + goto trunc_test; + } + + /* If the type is valid translate it, or just print the type */ + /* value. If it's not valid, say so and return */ + if (op->ospf_type || op->ospf_type < OSPF_TYPE_MAX) { + printf(" OSPFv%d-%s %d:", + op->ospf_version, + ospf_types[op->ospf_type], + length); + } else { + printf(" ospf-v%d-??type %d?? %d:", + op->ospf_version, + op->ospf_type, + length); + return; + } + + if (length != ntohs(op->ospf_len)) { + printf(" ??len %d??", + ntohs(op->ospf_len)); + goto trunc_test; + } + + if ((caddr_t) (&op->ospf_routerid + 1) > end) { + goto trunc_test; + } + + /* Print the routerid if it is not the same as the source */ + if (ip->ip_src.s_addr != op->ospf_routerid.s_addr) { + printf(" rtrid %s", + ipaddr_string(&op->ospf_routerid)); + } + + if ((caddr_t) (&op->ospf_areaid + 1) > end) { + goto trunc_test; + } + + if (op->ospf_areaid.s_addr) { + printf(" area %s", + ipaddr_string(&op->ospf_areaid)); + } else { + printf(" backbone"); + } + + if ((caddr_t) (op->ospf_authdata + OSPF_AUTH_SIZE) > end) { + goto trunc_test; + } + + if (vflag) { + /* Print authentication data (should we really do this?) */ + switch (ntohs(op->ospf_authtype)) { + case OSPF_AUTH_NONE: + break; + + case OSPF_AUTH_SIMPLE: + printf(" auth "); + j = 0; + for (i = 0; i < sizeof (op->ospf_authdata); i++) { + if (!isprint(op->ospf_authdata[i])) { + j = 1; + break; + } + } + if (j) { + /* Print the auth-data as a string of octets */ + printf("%s.%s", + ipaddr_string((struct in_addr *) op->ospf_authdata), + ipaddr_string((struct in_addr *) &op->ospf_authdata[sizeof (struct in_addr)])); + } else { + /* Print the auth-data as a text string */ + printf("'%.8s'", + op->ospf_authdata); + } + break; + + default: + printf(" ??authtype-%d??", + ntohs(op->ospf_authtype)); + return; + } + } + + + /* Do rest according to version. */ + switch (op->ospf_version) { + case 2: + /* ospf version 2 */ + switch (op->ospf_type) { + case OSPF_TYPE_UMD: /* Rob Coltun's special monitoring packets; do nothing */ + break; + + case OSPF_TYPE_HELLO: + if ((caddr_t) (&op->ospf_hello.hello_deadint + 1) > end) { + break; + } + if (vflag) { + ospf_print_bits(ospf_option_bits, op->ospf_hello.hello_options); + printf(" mask %s int %d pri %d dead %d", + ipaddr_string(&op->ospf_hello.hello_mask), + ntohs(op->ospf_hello.hello_helloint), + op->ospf_hello.hello_priority, + ntohl(op->ospf_hello.hello_deadint)); + } + + if ((caddr_t) (&op->ospf_hello.hello_dr + 1) > end) { + break; + } + if (op->ospf_hello.hello_dr.s_addr) { + printf(" dr %s", + ipaddr_string(&op->ospf_hello.hello_dr)); + } + + if ((caddr_t) (&op->ospf_hello.hello_bdr + 1) > end) { + break; + } + if (op->ospf_hello.hello_bdr.s_addr) { + printf(" bdr %s", + ipaddr_string(&op->ospf_hello.hello_bdr)); + } + + if (vflag) { + if ((caddr_t) (op->ospf_hello.hello_neighbor + 1) > end) { + break; + } + printf(" nbrs"); + for (ap = op->ospf_hello.hello_neighbor; + (caddr_t) (ap + 1) <= end; + ap++) { + printf(" %s", + ipaddr_string(ap)); + } + } + break; /* HELLO */ + + case OSPF_TYPE_DB: + if ((caddr_t) (&op->ospf_db.db_seq + 1) > end) { + break; + } + ospf_print_bits(ospf_option_bits, op->ospf_db.db_options); + sep = ' '; + if (op->ospf_db.db_flags & OSPF_DB_INIT) { + printf("%cI", + sep); + sep = '/'; + } + if (op->ospf_db.db_flags & OSPF_DB_MORE) { + printf("%cM", + sep); + sep = '/'; + } + if (op->ospf_db.db_flags & OSPF_DB_MASTER) { + printf("%cMS", + sep); + sep = '/'; + } + printf(" S %X", + ntohl(op->ospf_db.db_seq)); + + if (vflag) { + /* Print all the LS adv's */ + lshp = op->ospf_db.db_lshdr; + + while (!ospf_print_lshdr(lshp, end)) { + printf(" }"); + lshp++; + } + } + break; + + case OSPF_TYPE_LSR: + if (vflag) { + for (lsrp = op->ospf_lsr; (caddr_t) (lsrp+1) <= end; lsrp++) { + long type; + + if ((caddr_t) (lsrp + 1) > end) { + break; + } + + printf(" {"); + if (!(type = lsrp->ls_type) || type >= LS_TYPE_MAX) { + printf(" ??LinkStateType %d }", + type); + printf(" }"); + break; + } + + LS_PRINT(lsrp, type); + printf(" }"); + } + } + break; + + case OSPF_TYPE_LSU: + if (vflag) { + lsap = op->ospf_lsu.lsu_lsa; + i = ntohl(op->ospf_lsu.lsu_count); + + while (i-- && + !ospf_print_lsa(lsap, end)) { + lsap = (struct lsa *) ((caddr_t) lsap + ntohs(lsap->ls_hdr.ls_length)); + } + } + break; + + + case OSPF_TYPE_LSA: + if (vflag) { + lshp = op->ospf_lsa.lsa_lshdr; + + while (!ospf_print_lshdr(lshp, end)) { + printf(" }"); + lshp++; + } + break; + } + } /* end switch on v2 packet type */ + break; + + default: + printf(" ospf [version %d]", + op->ospf_version); + break; + } /* end switch on version */ + + trunc_test: + if ((snapend - dat) < length) { + printf(" [|]"); + } + + return; /* from ospf_print */ +} + + diff --git a/usr.sbin/tcpdump/tcpdump/print-ppp.c b/usr.sbin/tcpdump/tcpdump/print-ppp.c new file mode 100644 index 0000000..c83cc7d --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-ppp.c @@ -0,0 +1,102 @@ +/* + * Copyright (c) 1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#)$Header: print-ppp.c,v 1.7 91/10/07 20:18:33 leres Exp $ (LBL)"; +#endif + +#ifdef PPP +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include + +#include + +#include "interface.h" +#include "addrtoname.h" + +/* XXX This goes somewhere else. */ +#define PPP_HDRLEN 4 + +void +ppp_if_print(p, tvp, length, caplen) + u_char *p; + struct timeval *tvp; + int length; + int caplen; +{ + struct ip *ip; + + ts_print(tvp); + + if (caplen < PPP_HDRLEN) { + printf("[|ppp]"); + goto out; + } + + /* + * Some printers want to get back at the link level addresses, + * and/or check that they're not walking off the end of the packet. + * Rather than pass them all the way down, we set these globals. + */ + packetp = (u_char *)p; + snapend = (u_char *)p + caplen; + + if (eflag) + printf("%c %4d %02x %04x: ", p[0] ? 'O' : 'I', length, + p[1], ntohs(*(u_short *)&p[2])); + + length -= PPP_HDRLEN; + ip = (struct ip *)(p + PPP_HDRLEN); + ip_print(ip, length); + + if (xflag) + default_print((u_short *)ip, caplen - PPP_HDRLEN); +out: + putchar('\n'); +} +#else +#include +void +ppp_if_print() +{ + void error(); + + error("not configured for ppp"); + /* NOTREACHED */ +} +#endif diff --git a/usr.sbin/tcpdump/tcpdump/print-rip.c b/usr.sbin/tcpdump/tcpdump/print-rip.c new file mode 100644 index 0000000..d123fe9 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-rip.c @@ -0,0 +1,116 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-rip.c,v 1.12 91/04/19 10:46:46 mccanne Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include + +#include "interface.h" +#include "addrtoname.h" + +static void +rip_entry_print(ni) + register struct netinfo *ni; +{ + if (ntohs(ni->rip_dst.sa_family) != AF_INET) { + register int i; + + printf(" [family %d:", ntohs(ni->rip_dst.sa_family)); + for (i = 0; i < 14; i += 2) + printf(" %02x%02x", ni->rip_dst.sa_data[i], + ni->rip_dst.sa_data[i+1]); + printf("]"); + } else { + register struct sockaddr_in *sin = + (struct sockaddr_in *)&ni->rip_dst; + printf(" %s", ipaddr_string(&sin->sin_addr)); + if (sin->sin_port) + printf(" [port %d]", sin->sin_port); + } + printf("(%d)", ntohl(ni->rip_metric)); +} + +void +rip_print(dat, length) + u_char *dat; + int length; +{ + register struct rip *rp = (struct rip *)dat; + register struct netinfo *ni; + register int amt = (u_char *)snapend - dat; + register int i = min(length, amt) - + (sizeof(struct rip) - sizeof(struct netinfo)); + int j; + int trunc; + + if (i < 0) + return; + + switch (rp->rip_cmd) { + + case RIPCMD_REQUEST: + printf(" rip-req %d", length); + break; + case RIPCMD_RESPONSE: + j = length / sizeof(*ni); + if (j * sizeof(*ni) != length - 4) + printf(" rip-resp %d[%d]:", j, length); + else + printf(" rip-resp %d:", j); + trunc = ((i / sizeof(*ni)) * sizeof(*ni) != i); + for (ni = rp->rip_nets; (i -= sizeof(*ni)) >= 0; ++ni) + rip_entry_print(ni); + if (trunc) + printf("[|rip]"); + break; + case RIPCMD_TRACEON: + printf(" rip-traceon %d: \"%s\"", length, rp->rip_tracefile); + break; + case RIPCMD_TRACEOFF: + printf(" rip-traceoff %d", length); + break; + case RIPCMD_POLL: + printf(" rip-poll %d", length); + break; + case RIPCMD_POLLENTRY: + printf(" rip-pollentry %d", length); + break; + default: + printf(" rip-%d ?? %d", rp->rip_cmd, length); + break; + } + if (rp->rip_vers != RIPVERSION) + printf(" [vers %d]", rp->rip_vers); +} diff --git a/usr.sbin/tcpdump/tcpdump/print-sl.c b/usr.sbin/tcpdump/tcpdump/print-sl.c new file mode 100644 index 0000000..2c89b42 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-sl.c @@ -0,0 +1,246 @@ +/* + * Copyright (c) 1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#)$Header: print-sl.c,v 1.17 91/10/07 20:18:35 leres Exp $ (LBL)"; +#endif + +#ifdef CSLIP +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include + +#include "interface.h" +#include "addrtoname.h" + +static int lastlen[2][256]; +static int lastconn = 255; + +static void compressed_sl_print(); + +void +sl_if_print(p, tvp, length, caplen) + u_char *p; + struct timeval *tvp; + int length; + int caplen; +{ + struct ip *ip; + + ts_print(tvp); + + if (caplen < SLIP_HDRLEN) { + printf("[|slip]"); + goto out; + } + /* + * Some printers want to get back at the link level addresses, + * and/or check that they're not walking off the end of the packet. + * Rather than pass them all the way down, we set these globals. + */ + packetp = (u_char *)p; + snapend = (u_char *)p + caplen; + + length -= SLIP_HDRLEN; + + ip = (struct ip *)(p + SLIP_HDRLEN); + + if (eflag) + sliplink_print(p, ip, length); + + ip_print(ip, length); + + if (xflag) + default_print((u_short *)ip, caplen - SLIP_HDRLEN); + out: + putchar('\n'); +} + +sliplink_print(p, ip, length) + u_char *p; + struct ip *ip; + int length; +{ + int dir; + int hlen; + + dir = p[SLX_DIR]; + putchar(dir == SLIPDIR_IN ? 'I' : 'O'); + putchar(' '); + + if (nflag) { + /* XXX just dump the header */ + int i; + + for (i = 0; i < 15; ++i) + printf("%02x.", p[SLX_CHDR + i]); + printf("%02x: ", p[SLX_CHDR + 15]); + return; + } + switch (p[SLX_CHDR] & 0xf0) { + + case TYPE_IP: + printf("ip %d: ", length + SLIP_HDRLEN); + break; + + case TYPE_UNCOMPRESSED_TCP: + /* + * The connection id is stode in the IP protcol field. + */ + lastconn = ip->ip_p; + hlen = ip->ip_hl; + hlen += ((struct tcphdr *)&((int *)ip)[hlen])->th_off; + lastlen[dir][lastconn] = length - (hlen << 2); + printf("utcp %d: ", lastconn); + break; + + default: + if (p[SLX_CHDR] & TYPE_COMPRESSED_TCP) { + compressed_sl_print(&p[SLX_CHDR], ip, length, dir); + printf(": "); + } else + printf("slip-%d!: ", p[SLX_CHDR]); + } +} + +static u_char * +print_sl_change(str, cp) + char *str; + register u_char *cp; +{ + register u_int i; + + if ((i = *cp++) == 0) { + i = (cp[0] << 8) | cp[1]; + cp += 2; + } + printf(" %s%d", str, i); + return (cp); +} + +static u_char * +print_sl_winchange(cp) + register u_char *cp; +{ + register short i; + + if ((i = *cp++) == 0) { + i = (cp[0] << 8) | cp[1]; + cp += 2; + } + if (i >= 0) + printf(" W+%d", i); + else + printf(" W%d", i); + return (cp); +} + +static void +compressed_sl_print(chdr, ip, length, dir) + u_char *chdr; + int length; + struct ip *ip; + int dir; +{ + register u_char *cp = chdr; + register u_int flags; + int hlen; + + flags = *cp++; + if (flags & NEW_C) { + lastconn = *cp++; + printf("ctcp %d", lastconn); + } else + printf("ctcp *"); + + /* skip tcp checksum */ + cp += 2; + + switch (flags & SPECIALS_MASK) { + case SPECIAL_I: + printf(" *SA+%d", lastlen[dir][lastconn]); + break; + + case SPECIAL_D: + printf(" *S+%d", lastlen[dir][lastconn]); + break; + + default: + if (flags & NEW_U) + cp = print_sl_change("U=", cp); + if (flags & NEW_W) + cp = print_sl_winchange(cp); + if (flags & NEW_A) + cp = print_sl_change("A+", cp); + if (flags & NEW_S) + cp = print_sl_change("S+", cp); + break; + } + if (flags & NEW_I) + cp = print_sl_change("I+", cp); + + /* + * 'hlen' is the length of the uncompressed TCP/IP header (in longs). + * 'cp - chdr' is the length of the compressed header. + * 'length - hlen' is the amount of data in the packet. + */ + hlen = ip->ip_hl; + hlen += ((struct tcphdr *)&((long *)ip)[hlen])->th_off; + lastlen[dir][lastconn] = length - (hlen << 2); + printf(" %d (%d)", lastlen[dir][lastconn], cp - chdr); +} +#else +#include +void +sl_if_print() +{ + void error(); + + error("not configured for slip"); + /* NOTREACHED */ +} +#endif diff --git a/usr.sbin/tcpdump/tcpdump/print-snmp.c b/usr.sbin/tcpdump/tcpdump/print-snmp.c new file mode 100644 index 0000000..d1996c0 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-snmp.c @@ -0,0 +1,1043 @@ +/* + * Copyright (c) 1990, by John Robert LoVerso. + * All rights reserved. + * + * Redistribution and use in source and binary forms are permitted + * provided that the above copyright notice and this paragraph are + * duplicated in all such forms and that any documentation, + * advertising materials, and other materials related to such + * distribution and use acknowledge that the software was developed + * by John Robert LoVerso. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR + * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED + * WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * This implementaion has been influenced by the CMU SNMP release, + * by Steve Waldbusser. However, this shares no code with that system. + * Additional ASN.1 insight gained from Marshall T. Rose's _The_Open_Book_. + * Earlier forms of this implemention were derived and/or inspired by an + * awk script originally written by C. Philip Wood of LANL (but later + * heavily modified by John Robert LoVerso). The copyright notice for + * that work is preserved below, even though it may not rightly apply + * to this file. + * + * This started out as a very simple program, but the incremental decoding + * (into the BE structure) complicated things. + * + # Los Alamos National Laboratory + # + # Copyright, 1990. The Regents of the University of California. + # This software was produced under a U.S. Government contract + # (W-7405-ENG-36) by Los Alamos National Laboratory, which is + # operated by the University of California for the U.S. Department + # of Energy. The U.S. Government is licensed to use, reproduce, + # and distribute this software. Permission is granted to the + # public to copy and use this software without charge, provided + # that this Notice and any statement of authorship are reproduced + # on all copies. Neither the Government nor the University makes + # any warranty, express or implied, or assumes any liability or + # responsibility for the use of this software. + # @(#)snmp.awk.x 1.1 (LANL) 1/15/90 + */ +#ifndef lint +static char rcsid[] = + "@(#) $Id: print-snmp.c,v 3.10 91/01/17 01:18:13 loverso Exp Locker: loverso $ (jlv)"; +#endif + +#include +#include +#include +#include + +#include "interface.h" +#include "addrtoname.h" + +/* + * Universal ASN.1 types + * (we only care about the tag values for those allowed in the Internet SMI) + */ +char *Universal[] = { + "U-0", + "Boolean", + "Integer", +#define INTEGER 2 + "Bitstring", + "String", +#define STRING 4 + "Null", +#define ASN_NULL 5 + "ObjID", +#define OBJECTID 6 + "ObjectDes", + "U-8","U-9","U-10","U-11", /* 8-11 */ + "U-12","U-13","U-14","U-15", /* 12-15 */ + "Sequence", +#define SEQUENCE 16 + "Set" +}; + +/* + * Application-wide ASN.1 types from the Internet SMI and their tags + */ +char *Application[] = { + "IpAddress", +#define IPADDR 0 + "Counter", +#define COUNTER 1 + "Gauge", +#define GAUGE 2 + "TimeTicks", +#define TIMETICKS 3 + "Opaque" +}; + +/* + * Context-specific ASN.1 types for the SNMP PDUs and their tags + */ +char *Context[] = { + "GetRequest", +#define GETREQ 0 + "GetNextRequest", +#define GETNEXTREQ 1 + "GetResponse", +#define GETRESP 2 + "SetRequest", +#define SETREQ 3 + "Trap" +#define TRAP 4 +}; + +/* + * Private ASN.1 types + * The Internet SMI does not specify any + */ +char *Private[] = { + "P-0" +}; + +/* + * error-status values for any SNMP PDU + */ +char *ErrorStatus[] = { + "noError", + "tooBig", + "noSuchName", + "badValue", + "readOnly", + "genErr" +}; +#define DECODE_ErrorStatus(e) \ + ( e >= 0 && e <= sizeof(ErrorStatus)/sizeof(ErrorStatus[0]) \ + ? ErrorStatus[e] : (sprintf(errbuf, "err=%d", e), errbuf)) + +/* + * generic-trap values in the SNMP Trap-PDU + */ +char *GenericTrap[] = { + "coldStart", + "warmStart", + "linkDown", + "linkUp", + "authenticationFailure", + "egpNeighborLoss", + "enterpriseSpecific" +#define GT_ENTERPRISE 7 +}; +#define DECODE_GenericTrap(t) \ + ( t >= 0 && t <= sizeof(GenericTrap)/sizeof(GenericTrap[0]) \ + ? GenericTrap[t] : (sprintf(buf, "gt=%d", t), buf)) + +/* + * ASN.1 type class table + * Ties together the preceding Universal, Application, Context, and Private + * type definitions. + */ +#define defineCLASS(x) { "x", x, sizeof(x)/sizeof(x[0]) } /* not ANSI-C */ +struct { + char *name; + char **Id; + int numIDs; +} Class[] = { + defineCLASS(Universal), +#define UNIVERSAL 0 + defineCLASS(Application), +#define APPLICATION 1 + defineCLASS(Context), +#define CONTEXT 2 + defineCLASS(Private), +#define PRIVATE 3 +}; + +/* + * defined forms for ASN.1 types + */ +char *Form[] = { + "Primitive", +#define PRIMITIVE 0 + "Constructed", +#define CONSTRUCTED 1 +}; + +/* + * A structure for the OID tree for the compiled-in MIB. + * This is stored as a general-order tree. + */ +struct obj { + char *desc; /* name of object */ + u_char oid; /* sub-id following parent */ + u_char type; /* object type (unused) */ + struct obj *child, *next; /* child and next sibling pointers */ +} *objp = NULL; + +/* + * Include the compiled in SNMP MIB. "mib.h" is produced by feeding + * RFC-1156 format files into "makemib". "mib.h" MUST define at least + * a value for `mibroot'. + * + * In particluar, this is gross, as this is including initialized structures, + * and by right shouldn't be an "include" file. + */ +#include "mib.h" + +/* + * This defines a list of OIDs which will be abreviated on output. + * Currently, this includes the prefixes for the Internet MIB, the + * private enterprises tree, and the experimental tree. + */ +struct obj_abrev { + char *prefix; /* prefix for this abrev */ + struct obj *node; /* pointer into object table */ + char *oid; /* ASN.1 encoded OID */ +} obj_abrev_list[] = { +#ifndef NO_ABREV_MIB + /* .iso.org.dod.internet.mgmt.mib */ + { "", &_mib_obj, "\53\6\1\2\1" }, +#endif +#ifndef NO_ABREV_ENTER + /* .iso.org.dod.internet.private.enterprises */ + { "E:", &_enterprises_obj, "\53\6\1\4\1" }, +#endif +#ifndef NO_ABREV_EXPERI + /* .iso.org.dod.internet.experimental */ + { "X:", &_experimental_obj, "\53\6\1\3" }, +#endif + { 0,0,0 } +}; + +/* + * This is used in the OID print routine to walk down the object tree + * rooted at `mibroot'. + */ +#define OBJ_PRINT(o, suppressdot) \ +{ \ + if (objp) { \ + do { \ + if ((o) == objp->oid) \ + break; \ + } while (objp = objp->next); \ + } \ + if (objp) { \ + printf(suppressdot?"%s":".%s", objp->desc); \ + objp = objp->child; \ + } else \ + printf(suppressdot?"%u":".%u", (o)); \ +} + +/* + * This is the definition for the Any-Data-Type storage used purely for + * temporary internal representation while decoding an ASN.1 data stream. + */ +struct be { + unsigned long asnlen; + union { + caddr_t raw; + long integer; + unsigned long uns; + unsigned char *str; + } data; + unsigned char form, class, id; /* tag info */ + u_char type; +#define BE_ANY 255 +#define BE_NONE 0 +#define BE_NULL 1 +#define BE_OCTET 2 +#define BE_OID 3 +#define BE_INT 4 +#define BE_UNS 5 +#define BE_STR 6 +#define BE_SEQ 7 +#define BE_INETADDR 8 +#define BE_PDU 9 +}; + +/* + * Defaults for SNMP PDU components + */ +#define DEF_COMMUNITY "public" +#define DEF_VERSION 0 + +/* + * constants for ASN.1 decoding + */ +#define OIDMUX 40 +#define ASNLEN_INETADDR 4 +#define ASN_SHIFT7 7 +#define ASN_SHIFT8 8 +#define ASN_BIT8 0x80 +#define ASN_LONGLEN 0x80 + +#define ASN_ID_BITS 0x1f +#define ASN_FORM_BITS 0x20 +#define ASN_FORM_SHIFT 5 +#define ASN_CLASS_BITS 0xc0 +#define ASN_CLASS_SHIFT 6 + +#define ASN_ID_EXT 0x1f /* extension ID in tag field */ + +/* + * truncated==1 means the packet was complete, but we don't have all of + * it to decode. + */ +static int truncated; +#define ifNotTruncated if (truncated) fputs("[|snmp]", stdout); else + +/* + * This decodes the next ASN.1 object in the stream pointed to by "p" + * (and of real-length "len") and stores the intermediate data in the + * provided BE object. + * + * This returns -l if it fails (i.e., the ASN.1 stream is not valid). + * O/w, this returns the number of bytes parsed from "p". + */ +int +asn1_parse(p, len, elem) + register u_char *p; + int len; + struct be *elem; +{ + unsigned char form, class, id; + int indent=0, i, hdr; + char *classstr; + + elem->asnlen = 0; + elem->type = BE_ANY; + if (len < 1) { + ifNotTruncated puts("[nothing to parse], stdout"); + return -1; + } + + /* + * it would be nice to use a bit field, but you can't depend on them. + * +---+---+---+---+---+---+---+---+ + * + class |frm| id | + * +---+---+---+---+---+---+---+---+ + * 7 6 5 4 3 2 1 0 + */ + id = *p & ASN_ID_BITS; /* lower 5 bits, range 00-1f */ +#ifdef notdef + form = (*p & 0xe0) >> 5; /* move upper 3 bits to lower 3 */ + class = form >> 1; /* bits 7&6 -> bits 1&0, range 0-3 */ + form &= 0x1; /* bit 5 -> bit 0, range 0-1 */ +#else + form = (*p & ASN_FORM_BITS) >> ASN_FORM_SHIFT; + class = (*p & ASN_CLASS_BITS) >> ASN_CLASS_SHIFT; +#endif + elem->form = form; + elem->class = class; + elem->id = id; + if (vflag) + printf("|%.2x", *p); + p++; len--; hdr = 1; + /* extended tag field */ + if (id == ASN_ID_EXT) { + for (id = 0; *p & ASN_BIT8 && len > 0; len--, hdr++, p++) { + if (vflag) + printf("|%.2x", *p); + id += *p & ~ASN_BIT8; + } + if (len == 0 && *p & ASN_BIT8) { + ifNotTruncated fputs("[Xtagfield?]", stdout); + return -1; + } + } + if (len < 1) { + ifNotTruncated fputs("[no asnlen]", stdout); + return -1; + } + elem->asnlen = *p; + if (vflag) + printf("|%.2x", *p); + p++; len--; hdr++; + if (elem->asnlen & ASN_BIT8) { + int noct = elem->asnlen % ASN_BIT8; + elem->asnlen = 0; + if (len < noct) { + ifNotTruncated printf("[asnlen? %d<%d]", len, noct); + return -1; + } + for (; noct-- > 0; len--, hdr++) { + if (vflag) + printf("|%.2x", *p); + elem->asnlen = (elem->asnlen << ASN_SHIFT8) | *p++; + } + } + if (len < elem->asnlen) { + if (!truncated) { + printf("[len%dasnlen); + return -1; + } + /* maybe should check at least 4? */ + elem->asnlen = len; + } + if (form >= sizeof(Form)/sizeof(Form[0])) { + ifNotTruncated printf("[form?%d]", form); + return -1; + } + if (class >= sizeof(Class)/sizeof(Class[0])) { + ifNotTruncated printf("[class?%c/%d]", *Form[form], class); + return -1; + } + if (id >= Class[class].numIDs) { + ifNotTruncated printf("[id?%c/%s/%d]", *Form[form], + Class[class].name, id); + return -1; + } + + switch (form) { + case PRIMITIVE: + switch (class) { + case UNIVERSAL: + switch (id) { + case STRING: + elem->type = BE_STR; + elem->data.str = p; + break; + + case INTEGER: { + register long data; + elem->type = BE_INT; + data = 0; + + if (*p & ASN_BIT8) /* negative */ + data = -1; + for (i = elem->asnlen; i-- > 0; p++) + data = (data << ASN_SHIFT8) | *p; + elem->data.integer = data; + break; + } + + case OBJECTID: + elem->type = BE_OID; + elem->data.raw = (caddr_t)p; + break; + + case ASN_NULL: + elem->type = BE_NULL; + elem->data.raw = NULL; + break; + + default: + elem->type = BE_OCTET; + elem->data.raw = (caddr_t)p; + printf("[P/U/%s]", + Class[class].Id[id]); + break; + } + break; + + case APPLICATION: + switch (id) { + case IPADDR: + elem->type = BE_INETADDR; + elem->data.raw = (caddr_t)p; + break; + + case COUNTER: + case GAUGE: + case TIMETICKS: { + register unsigned long data; + elem->type = BE_UNS; + data = 0; + for (i = elem->asnlen; i-- > 0; p++) + data = (data << 8) + *p; + elem->data.uns = data; + break; + } + + default: + elem->type = BE_OCTET; + elem->data.raw = (caddr_t)p; + printf("[P/A/%s]", + Class[class].Id[id]); + break; + } + break; + + default: + elem->type = BE_OCTET; + elem->data.raw = (caddr_t)p; + printf("[P/%s/%s]", + Class[class].name, Class[class].Id[id]); + break; + } + break; + + case CONSTRUCTED: + switch (class) { + case UNIVERSAL: + switch (id) { + case SEQUENCE: + elem->type = BE_SEQ; + elem->data.raw = (caddr_t)p; + break; + + default: + elem->type = BE_OCTET; + elem->data.raw = (caddr_t)p; + printf("C/U/%s", Class[class].Id[id]); + break; + } + break; + + case CONTEXT: + elem->type = BE_PDU; + elem->data.raw = (caddr_t)p; + break; + + default: + elem->type = BE_OCTET; + elem->data.raw = (caddr_t)p; + printf("C/%s/%s", + Class[class].name, Class[class].Id[id]); + break; + } + break; + } + p += elem->asnlen; + len -= elem->asnlen; + return elem->asnlen + hdr; +} + +/* + * Display the ASN.1 object represented by the BE object. + * This used to be an integral part of asn1_parse() before the intermediate + * BE form was added. + */ +void +asn1_print(elem) + struct be *elem; +{ + u_char *p = (u_char *)elem->data.raw; + u_long asnlen = elem->asnlen; + int i; + + switch (elem->type) { + + case BE_OCTET: + for (i = asnlen; i-- > 0; p++); + printf("_%.2x", *p); + break; + + case BE_NULL: + break; + + case BE_OID: { + int o = 0, first = -1, i = asnlen; + + if (!nflag && asnlen > 2) { + struct obj_abrev *a = &obj_abrev_list[0]; + for (; a->node; a++) { + if (!memcmp(a->oid, p, strlen(a->oid))) { + objp = a->node->child; + i -= strlen(a->oid); + p += strlen(a->oid); + fputs(a->prefix, stdout); + first = 1; + break; + } + } + } + for (; i-- > 0; p++) { + o = (o << ASN_SHIFT7) + (*p & ~ASN_BIT8); + if (*p & ASN_LONGLEN) + continue; + + /* + * first subitem encodes two items with 1st*OIDMUX+2nd + */ + if (first < 0) { + if (!nflag) + objp = mibroot; + first = 0; + OBJ_PRINT(o/OIDMUX, first); + o %= OIDMUX; + } + OBJ_PRINT(o, first); + if (--first < 0) + first = 0; + o = 0; + } + break; + } + + case BE_INT: + printf("%ld", elem->data.integer); + break; + + case BE_UNS: + printf("%ld", elem->data.uns); + break; + + case BE_STR: { + register int printable = 1, first = 1; + u_char *p = elem->data.str; + for (i = asnlen; printable && i-- > 0; p++) + printable = isprint(*p) || isspace(*p); + p = elem->data.str; + if (printable) + (void)printfn(p, p+asnlen); + else + for (i = asnlen; i-- > 0; p++) { + printf(first ? "%.2x" : "_%.2x", *p); + first = 0; + } + break; + } + + case BE_SEQ: + printf("Seq(%d)", elem->asnlen); + break; + + case BE_INETADDR: { + char sep; + if (asnlen != ASNLEN_INETADDR) + printf("[inetaddr len!=%d]", ASNLEN_INETADDR); + sep='['; + for (i = asnlen; i-- > 0; p++) { + printf("%c%u", sep, *p); + sep='.'; + } + putchar(']'); + break; + } + + case BE_PDU: + printf("%s(%d)", + Class[CONTEXT].Id[elem->id], elem->asnlen); + break; + + case BE_ANY: + fputs("[BE_ANY!?]", stdout); + break; + + default: + fputs("[be!?]", stdout); + break; + } +} + +#ifdef notdef +/* + * This is a brute force ASN.1 printer: recurses to dump an entire structure. + * This will work for any ASN.1 stream, not just an SNMP PDU. + * + * By adding newlines and spaces at the correct places, this would print in + * Rose-Normal-Form. + * + * This is not currently used. + */ +void +asn1_decode(p, length) + u_char *p; + int length; +{ + struct be elem; + int i = 0; + + while (i >= 0 && length > 0) { + i = asn1_parse(p, length, &elem); + if (i >= 0) { + fputs(" ", stdout); + asn1_print(&elem); + if (elem.type == BE_SEQ || elem.type == BE_PDU) { + fputs(" {", stdout); + asn1_decode(elem.data.raw, elem.asnlen); + fputs(" }", stdout); + } + length -= i; + p += i; + } + } +} +#endif + +/* + * General SNMP header + * SEQUENCE { + * version INTEGER {version-1(0)}, + * community OCTET STRING, + * data ANY -- PDUs + * } + * PDUs for all but Trap: (see rfc1157 from page 15 on) + * SEQUENCE { + * request-id INTEGER, + * error-status INTEGER, + * error-index INTEGER, + * varbindlist SEQUENCE OF + * SEQUENCE { + * name ObjectName, + * value ObjectValue + * } + * } + * PDU for Trap: + * SEQUENCE { + * enterprise OBJECT IDENTIFIER, + * agent-addr NetworkAddress, + * generic-trap INTEGER, + * specific-trap INTEGER, + * time-stamp TimeTicks, + * varbindlist SEQUENCE OF + * SEQUENCE { + * name ObjectName, + * value ObjectValue + * } + * } + */ + +/* + * Decode SNMP varBind + */ +void +varbind_print (pduid, np, length, error) + u_char pduid, *np; + int length, error; +{ + struct be elem; + int count = 0, index; + + /* Sequence of varBind */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_SEQ) { + fputs("[!SEQ of varbind]", stdout); + asn1_print(&elem); + return; + } + if (count < length) + printf("[%d extra after SEQ of varbind]", length - count); + /* descend */ + length = elem.asnlen; + np = (u_char *)elem.data.raw; + + for (index = 1; length > 0; index++) { + u_char *vbend; + int vblength; + + if (!error || index == error) + fputs(" ", stdout); + + /* Sequence */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_SEQ) { + fputs("[!varbind]", stdout); + asn1_print(&elem); + return; + } + vbend = np + count; + vblength = length - count; + /* descend */ + length = elem.asnlen; + np = (u_char *)elem.data.raw; + + /* objName (OID) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_OID) { + fputs("[objName!=OID]", stdout); + asn1_print(&elem); + return; + } + if (!error || index == error) + asn1_print(&elem); + length -= count; + np += count; + + if (pduid != GETREQ && pduid != GETNEXTREQ && !error) + fputs("=", stdout); + + /* objVal (ANY) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (pduid == GETREQ || pduid == GETNEXTREQ) { + if (elem.type != BE_NULL) { + fputs("[objVal!=NULL]", stdout); + asn1_print(&elem); + } + } else + if (error && index == error && elem.type != BE_NULL) + fputs("[err objVal!=NULL]", stdout); + if (!error || index == error) + asn1_print(&elem); + + length = vblength; + np = vbend; + } +} + +/* + * Decode SNMP PDUs: GetRequest, GetNextRequest, GetResponse, and SetRequest + */ +void +snmppdu_print (pduid, np, length) + u_char pduid, *np; + int length; +{ + struct be elem; + int count = 0, error; + + /* reqId (Integer) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_INT) { + fputs("[reqId!=INT]", stdout); + asn1_print(&elem); + return; + } + /* ignore the reqId */ + length -= count; + np += count; + + /* errorStatus (Integer) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_INT) { + fputs("[errorStatus!=INT]", stdout); + asn1_print(&elem); + return; + } + error = 0; + if ((pduid == GETREQ || pduid == GETNEXTREQ) + && elem.data.integer != 0) { + char errbuf[10]; + printf("[errorStatus(%s)!=0]", + DECODE_ErrorStatus(elem.data.integer)); + } else if (elem.data.integer != 0) { + char errbuf[10]; + printf(" %s", DECODE_ErrorStatus(elem.data.integer)); + error = elem.data.integer; + } + length -= count; + np += count; + + /* errorIndex (Integer) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_INT) { + fputs("[errorIndex!=INT]", stdout); + asn1_print(&elem); + return; + } + if ((pduid == GETREQ || pduid == GETNEXTREQ) + && elem.data.integer != 0) + printf("[errorIndex(%d)!=0]", elem.data.integer); + else if (elem.data.integer != 0) { + if (!error) + printf("[errorIndex(%d) w/o errorStatus]", + elem.data.integer); + else { + printf("@%d", elem.data.integer); + error = elem.data.integer; + } + } else if (error) { + fputs("[errorIndex==0]", stdout); + error = 0; + } + length -= count; + np += count; + + varbind_print(pduid, np, length, error); + return; +} + +/* + * Decode SNMP Trap PDU + */ +void +trap_print (np, length) + u_char *np; + int length; +{ + struct be elem; + int count = 0, generic; + + putchar(' '); + + /* enterprise (oid) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_OID) { + fputs("[enterprise!=OID]", stdout); + asn1_print(&elem); + return; + } + asn1_print(&elem); + length -= count; + np += count; + + putchar(' '); + + /* agent-addr (inetaddr) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_INETADDR) { + fputs("[agent-addr!=INETADDR]", stdout); + asn1_print(&elem); + return; + } + asn1_print(&elem); + length -= count; + np += count; + + /* generic-trap (Integer) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_INT) { + fputs("[generic-trap!=INT]", stdout); + asn1_print(&elem); + return; + } + generic = elem.data.integer; + { + char buf[10]; + printf(" %s", DECODE_GenericTrap(generic)); + } + length -= count; + np += count; + + /* specific-trap (Integer) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_INT) { + fputs("[specific-trap!=INT]", stdout); + asn1_print(&elem); + return; + } + if (generic != GT_ENTERPRISE) { + if (elem.data.integer != 0) + printf("[specific-trap(%d)!=0]", elem.data.integer); + } else + printf(" s=%d", elem.data.integer); + length -= count; + np += count; + + putchar(' '); + + /* time-stamp (TimeTicks) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_UNS) { /* XXX */ + fputs("[time-stamp!=TIMETICKS]", stdout); + asn1_print(&elem); + return; + } + asn1_print(&elem); + length -= count; + np += count; + + varbind_print (TRAP, np, length, 0); + return; +} + +/* + * Decode SNMP header and pass on to PDU printing routines + */ +void +snmp_print (np, length) + u_char *np; + int length; +{ + struct be elem, pdu; + int count = 0; + + truncated = 0; + + /* truncated packet? */ + if (np + length > snapend) { + truncated = 1; + length = snapend - np; + } + + putchar(' '); + + /* initial Sequence */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_SEQ) { + fputs("[!init SEQ]", stdout); + asn1_print(&elem); + return; + } + if (count < length) + printf("[%d extra after iSEQ]", length - count); + /* descend */ + length = elem.asnlen; + np = (u_char *)elem.data.raw; + /* Version (Integer) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_INT) { + fputs("[version!=INT]", stdout); + asn1_print(&elem); + return; + } + /* only handle version==0 */ + if (elem.data.integer != DEF_VERSION) { + printf("[version(%d)!=0]", elem.data.integer); + return; + } + length -= count; + np += count; + + /* Community (String) */ + if ((count = asn1_parse(np, length, &elem)) < 0) + return; + if (elem.type != BE_STR) { + fputs("[comm!=STR]", stdout); + asn1_print(&elem); + return; + } + /* default community */ + if (strncmp(elem.data.str, DEF_COMMUNITY, sizeof(DEF_COMMUNITY)-1)) + /* ! "public" */ + printf("C=%.*s ", elem.asnlen, elem.data.str); + length -= count; + np += count; + + /* PDU (Context) */ + if ((count = asn1_parse(np, length, &pdu)) < 0) + return; + if (pdu.type != BE_PDU) { + fputs("[no PDU]", stdout); + return; + } + if (count < length) + printf("[%d extra after PDU]", length - count); + asn1_print(&pdu); + /* descend into PDU */ + length = pdu.asnlen; + np = (u_char *)pdu.data.raw; + + switch (pdu.id) { + case TRAP: + trap_print(np, length); + break; + case GETREQ: + case GETNEXTREQ: + case GETRESP: + case SETREQ: + snmppdu_print(pdu.id, np, length); + break; + } + return; +} diff --git a/usr.sbin/tcpdump/tcpdump/print-sunrpc.c b/usr.sbin/tcpdump/tcpdump/print-sunrpc.c new file mode 100644 index 0000000..ad28e93 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-sunrpc.c @@ -0,0 +1,136 @@ +/* + * Copyright (c) 1992 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-sunrpc.c,v 1.1 92/06/02 11:36:37 mccanne Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include +#include + +#include + +#include + +#include "interface.h" + +#include "addrtoname.h" +#include "extract.h" + +#if BYTE_ORDER == LITTLE_ENDIAN +/* + * Byte swap an array of n words. + * Assume input is word-aligned. + * Check that buffer is bounded by "snapend". + */ +static void +bswap(bp, n) + register u_long *bp; + register u_int n; +{ + register int nwords = ((char *)snapend - (char *)bp) / sizeof(*bp); + + if (nwords > n) + nwords = n; + for (; --nwords >= 0; ++bp) + *bp = ntohl(*bp); +} +#endif + +void +sunrpcrequest_print(rp, length, ip) + register struct rpc_msg *rp; + int length; + register struct ip *ip; +{ + register u_long *dp; + register u_char *ep = snapend; +#define TCHECK(p, l) if ((u_char *)(p) > ep - l) break + +#if BYTE_ORDER == LITTLE_ENDIAN + bswap((u_long *)rp, sizeof(*rp) / sizeof(u_long)); +#endif + + if (!nflag) + (void)printf("%s.%x > %s.sunrpc: %d", + ipaddr_string(&ip->ip_src), + rp->rm_xid, + ipaddr_string(&ip->ip_dst), + length); + else + (void)printf("%s.%x > %s.%x: %d", + ipaddr_string(&ip->ip_src), + rp->rm_xid, + ipaddr_string(&ip->ip_dst), + PMAPPORT, + length); + + switch (rp->rm_call.cb_proc) { + + case PMAPPROC_NULL: + printf(" null"); + break; + + case PMAPPROC_SET: + printf(" set"); + break; + + case PMAPPROC_UNSET: + printf(" unset"); + break; + + case PMAPPROC_GETPORT: + printf(" getport"); + break; + + case PMAPPROC_DUMP: + printf(" dump"); + break; + + case PMAPPROC_CALLIT: + printf(" callit"); + break; + + default: + printf(" proc #%d", rp->rm_call.cb_proc); + } + printf(" prog #%d", rp->rm_call.cb_prog); + putchar('\n'); +} + diff --git a/usr.sbin/tcpdump/tcpdump/print-tcp.c b/usr.sbin/tcpdump/tcpdump/print-tcp.c new file mode 100644 index 0000000..9974b3c --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-tcp.c @@ -0,0 +1,287 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-tcp.c,v 1.18 92/05/25 14:29:04 mccanne Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include +#include +#include + +#ifdef X10 +#include +#include +#endif + +#include "interface.h" +#include "addrtoname.h" + +#ifndef TCPOPT_WSCALE +#define TCPOPT_WSCALE 3 /* window scale factor (rfc1072) */ +#endif +#ifndef TCPOPT_SACKOK +#define TCPOPT_SACKOK 4 /* selective ack ok (rfc1072) */ +#endif +#ifndef TCPOPT_SACK +#define TCPOPT_SACK 5 /* selective ack (rfc1072) */ +#endif +#ifndef TCPOPT_ECHO +#define TCPOPT_ECHO 6 /* echo (rfc1072) */ +#endif +#ifndef TCPOPT_ECHOREPLY +#define TCPOPT_ECHOREPLY 7 /* echo (rfc1072) */ +#endif + +struct tha { + struct in_addr src; + struct in_addr dst; + u_int port; +}; + +struct tcp_seq_hash { + struct tcp_seq_hash *nxt; + struct tha addr; + tcp_seq seq; + tcp_seq ack; +}; + +#define TSEQ_HASHSIZE 919 + +static struct tcp_seq_hash tcp_seq_hash[TSEQ_HASHSIZE]; + + +void +tcp_print(tp, length, ip) + register struct tcphdr *tp; + register int length; + register struct ip *ip; +{ + register u_char flags; + register int hlen; + + if ((u_char *)(tp + 1) > snapend) { + printf("[|tcp]"); + return; + } + if (length < sizeof(struct tcphdr)) { + (void)printf("truncated-tcp %d", length); + return; + } + + NTOHS(tp->th_sport); + NTOHS(tp->th_dport); + NTOHL(tp->th_seq); + NTOHL(tp->th_ack); + NTOHS(tp->th_win); + NTOHS(tp->th_urp); + + (void)printf("%s.%s > %s.%s: ", + ipaddr_string(&ip->ip_src), tcpport_string(tp->th_sport), + ipaddr_string(&ip->ip_dst), tcpport_string(tp->th_dport)); + + if (!qflag) { +#ifdef X10 + register int be; + + if ((be = (tp->th_sport == X_TCP_BI_PORT || + tp->th_dport == X_TCP_BI_PORT)) || + tp->th_sport == X_TCP_LI_PORT || + tp->th_dport == X_TCP_LI_PORT) { + register XReq *xp = (XReq *)(tp + 1); + + x10_print(xp, length - sizeof(struct tcphdr), be); + return; + } +#endif + } + + if (qflag) { + (void)printf("tcp %d", length - tp->th_off * 4); + return; + } + if ((flags = tp->th_flags) & (TH_SYN|TH_FIN|TH_RST|TH_PUSH)) { + if (flags & TH_SYN) + putchar('S'); + if (flags & TH_FIN) + putchar('F'); + if (flags & TH_RST) + putchar('R'); + if (flags & TH_PUSH) + putchar('P'); + } else + putchar('.'); + + if (!Sflag && (flags & TH_ACK)) { + register struct tcp_seq_hash *th; + register int rev; + struct tha tha; + /* + * Find (or record) the initial sequence numbers for + * this conversation. (we pick an arbitrary + * collating order so there's only one entry for + * both directions). + */ + if (tp->th_sport < tp->th_dport || + (tp->th_sport == tp->th_dport && + ip->ip_src.s_addr < ip->ip_dst.s_addr)) { + tha.src = ip->ip_src, tha.dst = ip->ip_dst; + tha.port = tp->th_sport << 16 | tp->th_dport; + rev = 0; + } else { + tha.src = ip->ip_dst, tha.dst = ip->ip_src; + tha.port = tp->th_dport << 16 | tp->th_sport; + rev = 1; + } + + for (th = &tcp_seq_hash[tha.port % TSEQ_HASHSIZE]; + th->nxt; th = th->nxt) + if (!bcmp((char *)&tha, (char *)&th->addr, + sizeof(th->addr))) + break; + + if (!th->nxt || flags & TH_SYN) { + /* didn't find it or new conversation */ + if (!th->nxt) + th->nxt = (struct tcp_seq_hash *) + calloc(1, sizeof (*th)); + th->addr = tha; + if (rev) + th->ack = tp->th_seq, th->seq = tp->th_ack - 1; + else + th->seq = tp->th_seq, th->ack = tp->th_ack - 1; + } else { + if (rev) + tp->th_seq -= th->ack, tp->th_ack -= th->seq; + else + tp->th_seq -= th->seq, tp->th_ack -= th->ack; + } + } + hlen = tp->th_off * 4; + length -= hlen; + if (length > 0 || flags & (TH_SYN | TH_FIN | TH_RST)) + (void)printf(" %lu:%lu(%d)", tp->th_seq, tp->th_seq + length, + length); + if (flags & TH_ACK) + (void)printf(" ack %lu", tp->th_ack); + + (void)printf(" win %d", tp->th_win); + + if (flags & TH_URG) + (void)printf(" urg %d", tp->th_urp); + /* + * Handle any options. + */ + if ((hlen -= sizeof(struct tcphdr)) > 0) { + register u_char *cp = (u_char *)tp + sizeof(struct tcphdr); + int i; + char ch = '<'; + + putchar(' '); + while (--hlen >= 0) { + putchar(ch); + switch (*cp++) { + case TCPOPT_MAXSEG: + { + u_short mss; +#ifdef TCPDUMP_ALIGN + bcopy((char *)cp + 1, (char *)&mss, + sizeof(mss)); +#else + mss = *(u_short *)(cp + 1); +#endif + (void)printf("mss %d", ntohs(mss)); + if (*cp != 4) + (void)printf("[len %d]", *cp); + cp += 3; + hlen -= 3; + break; + } + case TCPOPT_EOL: + (void)printf("eol"); + break; + case TCPOPT_NOP: + (void)printf("nop"); + break; + case TCPOPT_WSCALE: + (void)printf("wscale %d", cp[1]); + if (*cp != 3) + (void)printf("[len %d]", *cp); + cp += 2; + hlen -= 2; + break; + case TCPOPT_SACKOK: + (void)printf("sackOK"); + if (*cp != 2) + (void)printf("[len %d]", *cp); + cp += 1; + hlen -= 1; + break; + case TCPOPT_ECHO: + { + u_long v; +#ifdef TCPDUMP_ALIGN + bcopy((char *)cp + 1, (char *)&v, + sizeof(v)); +#else + v = *(u_long *)(cp + 1); +#endif + (void)printf("echo %lu", v); + if (*cp != 6) + (void)printf("[len %d]", *cp); + cp += 5; + hlen -= 5; + break; + } + case TCPOPT_ECHOREPLY: + { + u_long v; +#ifdef TCPDUMP_ALIGN + bcopy((char *)cp + 1, (char *)&v, + sizeof(v)); +#else + v = *(u_long *)(cp + 1); +#endif + (void)printf("echoreply %lu", v); + if (*cp != 6) + (void)printf("[len %d]", *cp); + cp += 5; + hlen -= 5; + break; + } + default: + (void)printf("opt-%d:", cp[-1]); + for (i = *cp++ - 2, hlen -= i + 1; i > 0; --i) + (void)printf("%02x", *cp++); + break; + } + ch = ','; + } + putchar('>'); + } +} + diff --git a/usr.sbin/tcpdump/tcpdump/print-tftp.c b/usr.sbin/tcpdump/tcpdump/print-tftp.c new file mode 100644 index 0000000..3f8f079 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-tftp.c @@ -0,0 +1,149 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + * + * Format and print trivial file transfer protocol packets. + */ +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-tftp.c,v 1.13 91/04/19 10:46:57 mccanne Exp $ (LBL)"; +#endif + +#include +#include +#include +#include + +#include "interface.h" +#include +#include + +struct int2str { + int code; + char *str; +}; + +/* op code to string mapping */ +static struct int2str op2str[] = { + RRQ, "RRQ", /* read request */ + WRQ, "WRQ", /* write request */ + DATA, "DATA", /* data packet */ + ACK, "ACK", /* acknowledgement */ + ERROR, "ERROR", /* error code */ + 0, 0 +}; + +/* error code to string mapping */ +static struct int2str err2str[] = { + EUNDEF, "EUNDEF", /* not defined */ + ENOTFOUND, "ENOTFOUND", /* file not found */ + EACCESS, "EACCESS", /* access violation */ + ENOSPACE, "ENOSPACE", /* disk full or allocation exceeded *? + EBADOP, "EBADOP", /* illegal TFTP operation */ + EBADID, "EBADID", /* unknown transfer ID */ + EEXISTS, "EEXISTS", /* file already exists */ + ENOUSER, "ENOUSER", /* no such user */ + 0, 0 +}; + +/* + * Print trivial file transfer program requests + */ +void +tftp_print(tp, length) + register struct tftphdr *tp; + int length; +{ + register struct int2str *ts; + register u_char *ep; +#define TCHECK(var, l) if ((u_char *)&(var) > ep - l) goto trunc + static char tstr[] = " [|tftp]"; + + /* 'ep' points to the end of avaible data. */ + ep = (u_char *)snapend; + + /* Print length */ + printf(" %d", length); + + /* Print tftp request type */ + TCHECK(tp->th_opcode, sizeof(tp->th_opcode)); + NTOHS(tp->th_opcode); + putchar(' '); + for (ts = op2str; ts->str; ++ts) + if (ts->code == tp->th_opcode) { + fputs(ts->str, stdout); + break; + } + if (ts->str == 0) { + /* Bail if bogus opcode */ + printf("tftp-#%d", tp->th_opcode); + return; + } + + switch (tp->th_opcode) { + + case RRQ: + case WRQ: + putchar(' '); + if (printfn((u_char *)tp->th_stuff, ep)) { + fputs(&tstr[1], stdout); + return; + } + break; + + case DATA: + TCHECK(tp->th_block, sizeof(tp->th_block)); + NTOHS(tp->th_block); + printf(" block %d", tp->th_block); + break; + + case ACK: + break; + + case ERROR: + /* Print error code string */ + TCHECK(tp->th_code, sizeof(tp->th_code)); + NTOHS(tp->th_code); + putchar(' '); + for (ts = err2str; ts->str; ++ts) + if (ts->code == tp->th_code) { + fputs(ts->str, stdout); + break; + } + if (ts->str == 0) + printf("tftp-err-#%d", tp->th_code); + + /* Print error message string */ + putchar(' '); + if (printfn((u_char *)tp->th_data, ep)) { + fputs(&tstr[1], stdout); + return; + } + break; + + default: + /* We shouldn't get here */ + printf("(unknown #%d)", tp->th_opcode); + break; + } + return; +trunc: + fputs(tstr, stdout); +#undef TCHECK +} diff --git a/usr.sbin/tcpdump/tcpdump/print-udp.c b/usr.sbin/tcpdump/tcpdump/print-udp.c new file mode 100644 index 0000000..cd51808 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/print-udp.c @@ -0,0 +1,141 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#) $Header: print-udp.c,v 1.26 92/05/22 19:43:17 leres Exp $ (LBL)"; +#endif + +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include +#include +#include +#include +#include +#include +#include +#include +#include +#include + +#include "interface.h" +/* These must come after interface.h for BSD. */ +#if BSD >= 199006 +#include +#include +#endif +#include + +#include "addrtoname.h" +#include "appletalk.h" + +#include "bootp.h" + +/* XXX probably should use getservbyname() and cache answers */ +#define TFTP_PORT 69 /*XXX*/ +#define SUNRPC_PORT 111 /*XXX*/ +#define SNMP_PORT 161 /*XXX*/ +#define NTP_PORT 123 /*XXX*/ +#define SNMPTRAP_PORT 162 /*XXX*/ +#define RIP_PORT 520 /*XXX*/ + +void +udp_print(up, length, ip) + register struct udphdr *up; + int length; + register struct ip *ip; +{ + register u_char *cp = (u_char *)(up + 1); + + if (cp > snapend) { + printf("[|udp]"); + return; + } + if (length < sizeof(struct udphdr)) { + (void)printf(" truncated-udp %d", length); + return; + } + length -= sizeof(struct udphdr); + + NTOHS(up->uh_sport); + NTOHS(up->uh_dport); + NTOHS(up->uh_ulen); + + if (! qflag) { + register struct rpc_msg *rp; + enum msg_type direction; + + rp = (struct rpc_msg *)(up + 1); + direction = (enum msg_type)ntohl(rp->rm_direction); + if (up->uh_dport == NFS_PORT && direction == CALL) { + nfsreq_print(rp, length, ip); + return; + } + else if (up->uh_sport == NFS_PORT && direction == REPLY) { + nfsreply_print(rp, length, ip); + return; + } +#ifdef notdef + else if (up->uh_dport == SUNRPC_PORT && direction == CALL) { + sunrpcrequest_print(rp, length, ip); + return; + } +#endif + else if (cp[2] == 2 && (atalk_port(up->uh_sport) || + atalk_port(up->uh_dport))) { + ddp_print((struct atDDP *)(&cp[3]), length - 3); + return; + } + } + (void)printf("%s.%s > %s.%s:", + ipaddr_string(&ip->ip_src), udpport_string(up->uh_sport), + ipaddr_string(&ip->ip_dst), udpport_string(up->uh_dport)); + + if (!qflag) { +#define ISPORT(p) (up->uh_dport == (p) || up->uh_sport == (p)) + if (ISPORT(NAMESERVER_PORT)) + ns_print((HEADER *)(up + 1), length); + else if (ISPORT(TFTP_PORT)) + tftp_print((struct tftphdr *)(up + 1), length); + else if (ISPORT(IPPORT_BOOTPC) || ISPORT(IPPORT_BOOTPS)) + bootp_print((struct bootp *)(up + 1), length, + up->uh_sport, up->uh_dport); + else if (up->uh_dport == RIP_PORT) + rip_print((u_char *)(up + 1), length); + else if (ISPORT(SNMP_PORT) || ISPORT(SNMPTRAP_PORT)) + snmp_print((u_char *)(up + 1), length); + else if (ISPORT(NTP_PORT)) + ntp_print((struct ntpdata *)(up + 1), length); + else + (void)printf(" udp %d", up->uh_ulen - sizeof(*up)); +#undef ISPORT + } else + (void)printf(" udp %d", up->uh_ulen - sizeof(*up)); +} diff --git a/usr.sbin/tcpdump/tcpdump/tcpdump.c b/usr.sbin/tcpdump/tcpdump/tcpdump.c new file mode 100644 index 0000000..9a0ccc4 --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/tcpdump.c @@ -0,0 +1,347 @@ +/* + * Copyright (c) 1987-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ +#ifndef lint +char copyright[] = + "@(#) Copyright (c) 1987-1990 The Regents of the University of California.\nAll rights reserved.\n"; +static char rcsid[] = + "@(#)$Header: tcpdump.c,v 1.68 92/06/02 17:57:41 mccanne Exp $ (LBL)"; +#endif + +/* + * tcpdump - monitor tcp/ip traffic on an ethernet. + * + * First written in 1987 by Van Jacobson, Lawrence Berkeley Laboratory. + * Mercilessly hacked and occasionally improved since then via the + * combined efforts of Van, Steve McCanne and Craig Leres of LBL. + */ + +#include +#include +#include +#include +#include +#include + +#include + +#include "interface.h" +#include "savefile.h" +#include "addrtoname.h" + +int fflag; /* don't translate "foreign" IP address */ +int nflag; /* leave addresses as numbers */ +int Nflag; /* remove domains from printed host names */ +int pflag; /* don't go promiscuous */ +int qflag; /* quick (shorter) output */ +int tflag = 1; /* print packet arrival time */ +int eflag; /* print ethernet header */ +int vflag; /* verbose */ +int xflag; /* print packet in hex */ +int Oflag = 1; /* run filter code optimizer */ +int Sflag; /* print raw TCP sequence numbers */ + +int dflag; /* print filter code */ + +char *program_name; + +long thiszone; /* gmt to local correction */ + +static void cleanup(); + +/* Length of saved portion of packet. */ +int snaplen = DEFAULT_SNAPLEN; + +static int if_fd = -1; + +struct printer { + void (*f)(); + int type; +}; + +static struct printer printers[] = { + { ether_if_print, DLT_EN10MB }, + { sl_if_print, DLT_SLIP }, + { ppp_if_print, DLT_PPP }, + { fddi_if_print, DLT_FDDI }, + { null_if_print, DLT_NULL }, + { 0, 0 }, +}; + +void +(*lookup_printer(type))() + int type; +{ + struct printer *p; + + for (p = printers; p->f; ++p) + if (type == p->type) + return p->f; + + error("unknown data link type 0x%x", type); + /* NOTREACHED */ +} + +void +main(argc, argv) + int argc; + char **argv; +{ + struct bpf_program *parse(); + void bpf_dump(); + + int cnt = -1, i; + struct timeb zt; + struct bpf_program *fcode; + int op; + void (*printit)(); + char *infile = 0; + char *cmdbuf; + int linktype; + int err; + u_long localnet; + u_long netmask; + + char *RFileName = 0; /* -r argument */ + char *WFileName = 0; /* -w argument */ + + char *device = 0; + + int precision = clock_sigfigs(); + + extern char *optarg; + extern int optind, opterr; + + program_name = argv[0]; + + opterr = 0; + while ((op = getopt(argc, argv, "c:defF:i:lnNOpqr:s:Stvw:xY")) != EOF) + switch (op) { + case 'c': + cnt = atoi(optarg); + break; + + case 'd': + ++dflag; + break; + + case 'e': + ++eflag; + break; + + case 'f': + ++fflag; + break; + + case 'F': + infile = optarg; + break; + + case 'i': + device = optarg; + break; + + case 'l': + setlinebuf(stdout); + break; + + case 'n': + ++nflag; + break; + + case 'N': + ++Nflag; + break; + + case 'O': + Oflag = 0; + break; + + case 'p': + ++pflag; + break; + + case 'q': + ++qflag; + break; + + case 'r': + RFileName = optarg; + break; + + case 's': + snaplen = atoi(optarg); + break; + + case 'S': + ++Sflag; + break; + + case 't': + --tflag; + break; + + case 'v': + ++vflag; + break; + + case 'w': + WFileName = optarg; + break; +#ifdef YYDEBUG + case 'Y': + { + extern int yydebug; + yydebug = 1; + } + break; +#endif + case 'x': + ++xflag; + break; + + default: + usage(); + /* NOTREACHED */ + } + + if (tflag > 0) { + struct timeval now; + struct timezone tz; + + if (gettimeofday(&now, &tz) < 0) { + perror("tcpdump: gettimeofday"); + exit(1); + } + thiszone = tz.tz_minuteswest * -60; + if (localtime((time_t *)&now.tv_sec)->tm_isdst) + thiszone += 3600; + } + + if (RFileName) { + /* + * We don't need network access, so set it back to the user id. + * Also, this prevents the user from reading anyone's + * trace file. + */ + setuid(getuid()); + + err = sf_read_init(RFileName, &linktype, &thiszone, &snaplen, + &precision); + if (err) + sf_err(err); + localnet = 0; + netmask = 0; + if (fflag != 0) + error("-f and -r options are incompatible"); + } else { + if (device == 0) { + device = lookup_device(); + if (device == 0) + error("can't find any interfaces"); + } + if_fd = initdevice(device, pflag, &linktype); + lookup_net(device, &localnet, &netmask); + /* + * Let user own process after socket has been opened. + */ + setuid(getuid()); + } + + if (infile) + cmdbuf = read_infile(infile); + else + cmdbuf = copy_argv(&argv[optind]); + + fcode = parse(cmdbuf, Oflag, linktype, netmask); + if (dflag) { + bpf_dump(fcode, dflag); + exit(0); + } + init_addrtoname(fflag, localnet, netmask); + + (void)signal(SIGTERM, cleanup); + (void)signal(SIGINT, cleanup); + (void)signal(SIGHUP, cleanup); + + printit = lookup_printer(linktype); + + if (WFileName) { + sf_write_init(WFileName, linktype, thiszone, snaplen, + precision); + printit = sf_write; + } + if (RFileName) { + err = sf_read(fcode, cnt, snaplen, printit); + if (err) + sf_err(err); + } else { + fprintf(stderr, "%s: listening on %s\n", program_name, device); + fflush(stderr); + readloop(cnt, if_fd, fcode, printit); + } + exit(0); +} + +/* make a clean exit on interrupts */ +static void +cleanup() +{ + if (if_fd >= 0) { + putc('\n', stderr); + wrapup(if_fd); + } + exit(0); +} + +void +default_print(sp, length) + register u_short *sp; + register int length; +{ + register u_int i; + register int nshorts; + + nshorts = (unsigned) length / sizeof(u_short); + i = 0; + while (--nshorts >= 0) { + if ((i++ % 8) == 0) + (void)printf("\n\t\t\t"); + (void)printf(" %04x", ntohs(*sp++)); + } + if (length & 1) { + if ((i % 8) == 0) + (void)printf("\n\t\t\t"); + (void)printf(" %02x", *(u_char *)sp); + } +} + +void +usage() +{ + extern char version[]; + + (void)fprintf(stderr, "Version %s\n", version); + (void)fprintf(stderr, +"Usage: tcpdump [-deflnOpqtvx] [-c count] [-i interface]\n"); + (void)fprintf(stderr, +"\t\t[-r filename] [-w filename] [expr]\n"); + exit(-1); +} diff --git a/usr.sbin/tcpdump/tcpdump/util.c b/usr.sbin/tcpdump/tcpdump/util.c new file mode 100644 index 0000000..ec58c3f --- /dev/null +++ b/usr.sbin/tcpdump/tcpdump/util.c @@ -0,0 +1,278 @@ +/* + * Copyright (c) 1988-1990 The Regents of the University of California. + * All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +#ifndef lint +static char rcsid[] = + "@(#) $Header: util.c,v 1.12 91/10/28 22:09:31 mccanne Exp $ (LBL)"; +#endif + +#include +#ifdef __STDC__ +#include +#endif +#include +#include +#include +#include +#include +#include + +#include "interface.h" + +/* Hex digit to integer. */ +static inline int +xdtoi(c) +{ + if (isdigit(c)) + return c - '0'; + else if (islower(c)) + return c - 'a' + 10; + else + return c - 'A' + 10; +} + +/* + * Convert string to integer. Just like atoi(), but checks for + * preceding 0x or 0 and uses hex or octal instead of decimal. + */ +int +stoi(s) + char *s; +{ + int base = 10; + int n = 0; + + if (*s == '0') { + if (s[1] == 'x' || s[1] == 'X') { + s += 2; + base = 16; + } + else { + base = 8; + s += 1; + } + } + while (*s) + n = n * base + xdtoi(*s++); + + return n; +} + +/* + * Print out a filename (or other ascii string). + * Return true if truncated. + */ +int +printfn(s, ep) + register u_char *s, *ep; +{ + register u_char c; + + putchar('"'); + while (c = *s++) { + if (s > ep) { + putchar('"'); + return(1); + } + if (!isascii(c)) { + c = toascii(c); + putchar('M'); + putchar('-'); + } + if (!isprint(c)) { + c ^= 0x40; /* DEL to ?, others to alpha */ + putchar('^'); + } + putchar(c); + } + putchar('"'); + return(0); +} + +/* + * Print the timestamp + */ +void +ts_print(tvp) + register struct timeval *tvp; +{ + register int i; + + if (tflag > 0) { + /* Default */ + i = (tvp->tv_sec + thiszone) % 86400; + (void)printf("%02d:%02d:%02d.%06d ", + i / 3600, (i % 3600) / 60, i % 60, tvp->tv_usec); + } else if (tflag < 0) { + /* Unix timeval style */ + (void)printf("%d.%06d ", tvp->tv_sec, tvp->tv_usec); + } +} + +#ifdef NOVFPRINTF +/* + * Stock 4.3 doesn't have vfprintf. + * This routine is due to Chris Torek. + */ +vfprintf(f, fmt, args) + FILE *f; + char *fmt; + va_list args; +{ + int ret; + + if ((f->_flag & _IOWRT) == 0) { + if (f->_flag & _IORW) + f->_flag |= _IOWRT; + else + return EOF; + } + ret = _doprnt(fmt, args, f); + return ferror(f) ? EOF : ret; +} +#endif + +static char * +stripdir(s) + register char *s; +{ + register char *cp; + char *rindex(); + + cp = rindex(s, '/'); + return (cp != 0) ? cp + 1 : s; +} + +/* VARARGS */ +void +error(va_alist) + va_dcl +{ + register char *cp; + va_list ap; + + (void)fprintf(stderr, "%s: ", stripdir(program_name)); + + va_start(ap); + cp = va_arg(ap, char *); + (void)vfprintf(stderr, cp, ap); + va_end(ap); + if (*cp) { + cp += strlen(cp); + if (cp[-1] != '\n') + (void)fputc('\n', stderr); + } + exit(1); + /* NOTREACHED */ +} + +/* VARARGS */ +void +warning(va_alist) + va_dcl +{ + register char *cp; + va_list ap; + + (void)fprintf(stderr, "%s: warning: ", stripdir(program_name)); + + va_start(ap); + cp = va_arg(ap, char *); + (void)vfprintf(stderr, cp, ap); + va_end(ap); + if (*cp) { + cp += strlen(cp); + if (cp[-1] != '\n') + (void)fputc('\n', stderr); + } +} + + +/* + * Copy arg vector into a new buffer, concatenating arguments with spaces. + */ +char * +copy_argv(argv) + register char **argv; +{ + register char **p; + register int len = 0; + char *buf; + char *src, *dst; + + p = argv; + if (*p == 0) + return 0; + + while (*p) + len += strlen(*p++) + 1; + + buf = malloc(len); + + p = argv; + dst = buf; + while (src = *p++) { + while (*dst++ = *src++) + ; + dst[-1] = ' '; + } + dst[-1] = '\0'; + + return buf; +} + +char * +read_infile(fname) + char *fname; +{ + struct stat buf; + int fd; + char *p; + + fd = open(fname, O_RDONLY); + if (fd < 0) + error("can't open '%s'", fname); + + if (fstat(fd, &buf) < 0) + error("can't state '%s'", fname); + + p = malloc((unsigned)buf.st_size); + if (read(fd, p, (int)buf.st_size) != buf.st_size) + error("problem reading '%s'", fname); + + return p; +} + +/* + * Left justify 'addr' and return its resulting network mask. + */ +u_long +net_mask(addr) + u_long *addr; +{ + register u_long m = 0xffffffff; + + if (*addr) + while ((*addr & 0xff000000) == 0) + *addr <<= 8, m <<= 8; + + return m; +} -- cgit v1.1