File Manager

003 File Manager

Current Path: /usr/src/contrib/tcpdump

📁 ..
📄 CHANGES(57.87 KB)
📄 CONTRIBUTING(5.93 KB)
📄 CREDITS(14.57 KB)
📄 INSTALL.txt(5.25 KB)
📄 LICENSE(873 B)
📄 Makefile-devel-adds(614 B)
📄 Makefile.in(9.96 KB)
📄 PLATFORMS(567 B)
📄 README(9.04 KB)
📄 README.md(9.04 KB)
📄 VERSION(6 B)
📄 addrtoname.c(33.19 KB)
📄 addrtoname.h(2.78 KB)
📄 addrtostr.c(5.64 KB)
📄 addrtostr.h(2.03 KB)
📄 af.c(1.96 KB)
📄 af.h(1.81 KB)
📄 ah.h(2.34 KB)
📄 appletalk.h(4.06 KB)
📄 ascii_strcasecmp.c(3.5 KB)
📄 ascii_strcasecmp.h(1.49 KB)
📄 atime.awk(529 B)
📄 atm.h(1.14 KB)
📄 bpf_dump.c(1.9 KB)
📄 chdlc.h(1.31 KB)
📄 checksum.c(5.25 KB)
📄 config.guess(43.17 KB)
📄 config.h.in(11.19 KB)
📄 config.sub(34.93 KB)
📄 configure(255.88 KB)
📄 configure.ac(25.05 KB)
📄 configure.in(25.66 KB)
📄 cpack.c(3.92 KB)
📄 cpack.h(2.37 KB)
📄 ether.h(2.34 KB)
📄 ethertype.h(5.58 KB)
📄 extract.h(11.48 KB)
📄 funcattrs.h(4.42 KB)
📄 getopt_long.h(2.52 KB)
📄 gmpls.c(5.82 KB)
📄 gmpls.h(1.38 KB)
📄 gmt2local.c(2.01 KB)
📄 gmt2local.h(1.21 KB)
📄 in_cksum.c(6.44 KB)
📄 install-sh(5.45 KB)
📄 interface.h(2.29 KB)
📄 ip.h(5.75 KB)
📄 ip6.h(7.6 KB)
📄 ipproto.c(16.49 KB)
📄 ipproto.h(4.72 KB)
📄 l2vpn.c(3.36 KB)
📄 l2vpn.h(781 B)
📁 lbl
📄 llc.h(3.72 KB)
📄 machdep.c(2.58 KB)
📄 machdep.h(1.24 KB)
📄 makemib(6.41 KB)
📄 mib.h(26.33 KB)
📁 missing
📄 mkdep(2.43 KB)
📄 mpls.h(1.93 KB)
📄 nameser.h(10.8 KB)
📄 netdissect-stdinc.h(9.93 KB)
📄 netdissect.c(3.38 KB)
📄 netdissect.h(30.13 KB)
📄 nfs.h(13.37 KB)
📄 nfsfh.h(2.57 KB)
📄 nlpid.c(1.27 KB)
📄 nlpid.h(1.3 KB)
📄 openflow.h(2.14 KB)
📄 ospf.h(10.21 KB)
📄 oui.c(3.83 KB)
📄 oui.h(4.06 KB)
📄 packetdat.awk(1.39 KB)
📄 parsenfsfh.c(12.87 KB)
📄 pcap-missing.h(1.8 KB)
📄 pcap_dump_ftell.c(1.29 KB)
📄 ppp.h(3.07 KB)
📄 print-802_11.c(91.47 KB)
📄 print-802_15_4.c(5.5 KB)
📄 print-ah.c(2.02 KB)
📄 print-ahcp.c(10.73 KB)
📄 print-aodv.c(15.98 KB)
📄 print-aoe.c(11.13 KB)
📄 print-ap1394.c(4 KB)
📄 print-arcnet.c(8.83 KB)
📄 print-arp.c(14.57 KB)
📄 print-ascii.c(6.23 KB)
📄 print-atalk.c(16.76 KB)
📄 print-atm.c(16.81 KB)
📄 print-babel.c(23.79 KB)
📄 print-beep.c(1.71 KB)
📄 print-bfd.c(16.5 KB)
📄 print-bgp.c(99.77 KB)
📄 print-bootp.c(30.07 KB)
📄 print-bt.c(2.21 KB)
📄 print-calm-fast.c(1.81 KB)
📄 print-carp.c(2.43 KB)
📄 print-cdp.c(11.16 KB)
📄 print-cfm.c(24.19 KB)
📄 print-chdlc.c(5.88 KB)
📄 print-cip.c(2.5 KB)
📄 print-cnfp.c(13.69 KB)
📄 print-dccp.c(17.75 KB)
📄 print-decnet.c(37.63 KB)
📄 print-dhcp6.c(23.22 KB)
📄 print-domain.c(18.44 KB)
📄 print-dtp.c(3.03 KB)
📄 print-dvmrp.c(8.98 KB)
📄 print-eap.c(9.26 KB)
📄 print-egp.c(8.69 KB)
📄 print-eigrp.c(19.49 KB)
📄 print-enc.c(4.2 KB)
📄 print-esp.c(21.46 KB)
📄 print-ether.c(12.91 KB)
📄 print-fddi.c(10.51 KB)
📄 print-forces.c(45.01 KB)
📄 print-fr.c(31.99 KB)
📄 print-frag6.c(2.36 KB)
📄 print-ftp.c(973 B)
📄 print-geneve.c(6.13 KB)
📄 print-geonet.c(6.72 KB)
📄 print-gre.c(9.72 KB)
📄 print-hncp.c(26.39 KB)
📄 print-hsrp.c(4.57 KB)
📄 print-http.c(1.51 KB)
📄 print-icmp.c(22.7 KB)
📄 print-icmp6.c(59.81 KB)
📄 print-igmp.c(10.05 KB)
📄 print-igrp.c(4.64 KB)
📄 print-ip.c(17.04 KB)
📄 print-ip6.c(10.57 KB)
📄 print-ip6opts.c(5.53 KB)
📄 print-ipcomp.c(2.32 KB)
📄 print-ipfc.c(4.41 KB)
📄 print-ipnet.c(2.78 KB)
📄 print-ipx.c(6.42 KB)
📄 print-isakmp.c(81.72 KB)
📄 print-isoclns.c(107.61 KB)
📄 print-juniper.c(48.42 KB)
📄 print-krb.c(6.26 KB)
📄 print-l2tp.c(23.94 KB)
📄 print-lane.c(3.04 KB)
📄 print-ldp.c(24.35 KB)
📄 print-lisp.c(15.23 KB)
📄 print-llc.c(16.68 KB)
📄 print-lldp.c(57.26 KB)
📄 print-lmp.c(38.11 KB)
📄 print-loopback.c(3.63 KB)
📄 print-lspping.c(51.64 KB)
📄 print-lwapp.c(13.01 KB)
📄 print-lwres.c(14.08 KB)
📄 print-m3ua.c(10.92 KB)
📄 print-medsa.c(5.57 KB)
📄 print-mobile.c(3.28 KB)
📄 print-mobility.c(9.74 KB)
📄 print-mpcp.c(7.87 KB)
📄 print-mpls.c(5.31 KB)
📄 print-mptcp.c(13.68 KB)
📄 print-msdp.c(2.69 KB)
📄 print-msnlb.c(2.39 KB)
📄 print-nflog.c(4.4 KB)
📄 print-nfs.c(42.84 KB)
📄 print-nsh.c(5.39 KB)
📄 print-ntp.c(13.34 KB)
📄 print-null.c(4.01 KB)
📄 print-olsr.c(23.42 KB)
📄 print-openflow-1.0.c(76.63 KB)
📄 print-openflow.c(4.77 KB)
📄 print-ospf.c(39.49 KB)
📄 print-ospf6.c(29.86 KB)
📄 print-otv.c(2.1 KB)
📄 print-pflog.c(4.86 KB)
📄 print-pfsync.c(12.53 KB)
📄 print-pgm.c(22.17 KB)
📄 print-pim.c(32.59 KB)
📄 print-pktap.c(5.18 KB)
📄 print-ppi.c(2.68 KB)
📄 print-ppp.c(46.16 KB)
📄 print-pppoe.c(5.65 KB)
📄 print-pptp.c(25.9 KB)
📄 print-radius.c(35.1 KB)
📄 print-raw.c(1.52 KB)
📄 print-resp.c(16.5 KB)
📄 print-rip.c(9.19 KB)
📄 print-ripng.c(6 KB)
📄 print-rpki-rtr.c(10.83 KB)
📄 print-rrcp.c(4.56 KB)
📄 print-rsvp.c(78.61 KB)
📄 print-rt6.c(2.66 KB)
📄 print-rtsp.c(1.16 KB)
📄 print-rx.c(66.92 KB)
📄 print-sctp.c(23.13 KB)
📄 print-sflow.c(31.91 KB)
📄 print-sip.c(1.29 KB)
📄 print-sl.c(6.95 KB)
📄 print-sll.c(9.2 KB)
📄 print-slow.c(25.17 KB)
📄 print-smb.c(43.19 KB)
📄 print-smtp.c(983 B)
📄 print-snmp.c(43.17 KB)
📄 print-stp.c(17.18 KB)
📄 print-sunatm.c(3.27 KB)
📄 print-sunrpc.c(7.85 KB)
📄 print-symantec.c(3.78 KB)
📄 print-syslog.c(3.96 KB)
📄 print-tcp.c(35.84 KB)
📄 print-telnet.c(15.02 KB)
📄 print-tftp.c(5.2 KB)
📄 print-timed.c(4.74 KB)
📄 print-tipc.c(11.53 KB)
📄 print-token.c(7.96 KB)
📄 print-udld.c(5.47 KB)
📄 print-udp.c(21.28 KB)
📄 print-usb.c(4.18 KB)
📄 print-vjc.c(4.45 KB)
📄 print-vqp.c(6.8 KB)
📄 print-vrrp.c(6.37 KB)
📄 print-vtp.c(13.56 KB)
📄 print-vxlan-gpe.c(3.46 KB)
📄 print-vxlan.c(2.21 KB)
📄 print-wb.c(10.93 KB)
📄 print-zephyr.c(8.03 KB)
📄 print-zeromq.c(7.5 KB)
📄 print.c(11.54 KB)
📄 print.h(1.78 KB)
📄 rpc_auth.h(2.77 KB)
📄 rpc_msg.h(3.19 KB)
📄 rpl.h(4.88 KB)
📄 send-ack.awk(1.56 KB)
📄 setsignal.c(3.27 KB)
📄 setsignal.h(1.24 KB)
📄 signature.c(5.58 KB)
📄 signature.h(1.12 KB)
📄 slcompress.h(3.55 KB)
📄 smb.h(5.38 KB)
📄 smbutil.c(63.88 KB)
📄 stime.awk(567 B)
📄 strtoaddr.c(5.34 KB)
📄 strtoaddr.h(992 B)
📄 tcp.h(5.02 KB)
📄 tcpdump.1.in(60.82 KB)
📄 tcpdump.c(69.76 KB)
📄 timeval-operations.h(3.19 KB)
📄 udp.h(8.25 KB)
📄 util-print.c(23.75 KB)
📄 vfprintf.c(1.62 KB)

Editing: print-ip.c

/*
 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
 *	The Regents of the University of California.  All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that: (1) source code distributions
 * retain the above copyright notice and this paragraph in its entirety, (2)
 * distributions including binary code include the above copyright notice and
 * this paragraph in its entirety in the documentation or other materials
 * provided with the distribution, and (3) all advertising materials mentioning
 * features or use of this software display the following acknowledgement:
 * ``This product includes software developed by the University of California,
 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
 * the University nor the names of its contributors may be used to endorse
 * or promote products derived from this software without specific prior
 * written permission.
 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
 */

/* \summary: IP printer */

#ifdef HAVE_CONFIG_H
#include "config.h"
#endif

#include <netdissect-stdinc.h>

#include <string.h>

#include "netdissect.h"
#include "addrtoname.h"
#include "extract.h"

#include "ip.h"
#include "ipproto.h"

static const char tstr[] = "[|ip]";

static const struct tok ip_option_values[] = {
    { IPOPT_EOL, "EOL" },
    { IPOPT_NOP, "NOP" },
    { IPOPT_TS, "timestamp" },
    { IPOPT_SECURITY, "security" },
    { IPOPT_RR, "RR" },
    { IPOPT_SSRR, "SSRR" },
    { IPOPT_LSRR, "LSRR" },
    { IPOPT_RA, "RA" },
    { IPOPT_RFC1393, "traceroute" },
    { 0, NULL }
};

/*
 * print the recorded route in an IP RR, LSRR or SSRR option.
 */
static int
ip_printroute(netdissect_options *ndo,
              register const u_char *cp, u_int length)
{
	register u_int ptr;
	register u_int len;

if (length < 3) {
		ND_PRINT((ndo, " [bad length %u]", length));
		return (0);
	}
	if ((length + 1) & 3)
		ND_PRINT((ndo, " [bad length %u]", length));
	ND_TCHECK(cp[2]);
	ptr = cp[2] - 1;
	if (ptr < 3 || ((ptr + 1) & 3) || ptr > length + 1)
		ND_PRINT((ndo, " [bad ptr %u]", cp[2]));

for (len = 3; len < length; len += 4) {
		ND_TCHECK2(cp[len], 4);
		ND_PRINT((ndo, " %s", ipaddr_string(ndo, &cp[len])));
		if (ptr > len)
			ND_PRINT((ndo, ","));
	}
	return (0);

trunc:
	return (-1);
}

/*
 * If source-routing is present and valid, return the final destination.
 * Otherwise, return IP destination.
 *
 * This is used for UDP and TCP pseudo-header in the checksum
 * calculation.
 */
static uint32_t
ip_finddst(netdissect_options *ndo,
           const struct ip *ip)
{
	int length;
	int len;
	const u_char *cp;
	uint32_t retval;

cp = (const u_char *)(ip + 1);
	length = (IP_HL(ip) << 2) - sizeof(struct ip);

for (; length > 0; cp += len, length -= len) {
		int tt;

ND_TCHECK(*cp);
		tt = *cp;
		if (tt == IPOPT_EOL)
			break;
		else if (tt == IPOPT_NOP)
			len = 1;
		else {
			ND_TCHECK(cp[1]);
			len = cp[1];
			if (len < 2)
				break;
		}
		ND_TCHECK2(*cp, len);
		switch (tt) {

case IPOPT_SSRR:
		case IPOPT_LSRR:
			if (len < 7)
				break;
			UNALIGNED_MEMCPY(&retval, cp + len - 4, 4);
			return retval;
		}
	}
trunc:
	UNALIGNED_MEMCPY(&retval, &ip->ip_dst, sizeof(uint32_t));
	return retval;
}

/*
 * Compute a V4-style checksum by building a pseudoheader.
 */
int
nextproto4_cksum(netdissect_options *ndo,
                 const struct ip *ip, const uint8_t *data,
                 u_int len, u_int covlen, u_int next_proto)
{
	struct phdr {
		uint32_t src;
		uint32_t dst;
		u_char mbz;
		u_char proto;
		uint16_t len;
	} ph;
	struct cksum_vec vec[2];

/* pseudo-header.. */
	ph.len = htons((uint16_t)len);
	ph.mbz = 0;
	ph.proto = next_proto;
	UNALIGNED_MEMCPY(&ph.src, &ip->ip_src, sizeof(uint32_t));
	if (IP_HL(ip) == 5)
		UNALIGNED_MEMCPY(&ph.dst, &ip->ip_dst, sizeof(uint32_t));
	else
		ph.dst = ip_finddst(ndo, ip);

vec[0].ptr = (const uint8_t *)(void *)&ph;
	vec[0].len = sizeof(ph);
	vec[1].ptr = data;
	vec[1].len = covlen;
	return (in_cksum(vec, 2));
}

static int
ip_printts(netdissect_options *ndo,
           register const u_char *cp, u_int length)
{
	register u_int ptr;
	register u_int len;
	int hoplen;
	const char *type;

if (length < 4) {
		ND_PRINT((ndo, "[bad length %u]", length));
		return (0);
	}
	ND_PRINT((ndo, " TS{"));
	hoplen = ((cp[3]&0xF) != IPOPT_TS_TSONLY) ? 8 : 4;
	if ((length - 4) & (hoplen-1))
		ND_PRINT((ndo, "[bad length %u]", length));
	ND_TCHECK(cp[2]);
	ptr = cp[2] - 1;
	len = 0;
	if (ptr < 4 || ((ptr - 4) & (hoplen-1)) || ptr > length + 1)
		ND_PRINT((ndo, "[bad ptr %u]", cp[2]));
	ND_TCHECK(cp[3]);
	switch (cp[3]&0xF) {
	case IPOPT_TS_TSONLY:
		ND_PRINT((ndo, "TSONLY"));
		break;
	case IPOPT_TS_TSANDADDR:
		ND_PRINT((ndo, "TS+ADDR"));
		break;
	/*
	 * prespecified should really be 3, but some ones might send 2
	 * instead, and the IPOPT_TS_PRESPEC constant can apparently
	 * have both values, so we have to hard-code it here.
	 */

case 2:
		ND_PRINT((ndo, "PRESPEC2.0"));
		break;
	case 3:			/* IPOPT_TS_PRESPEC */
		ND_PRINT((ndo, "PRESPEC"));
		break;
	default:
		ND_PRINT((ndo, "[bad ts type %d]", cp[3]&0xF));
		goto done;
	}

type = " ";
	for (len = 4; len < length; len += hoplen) {
		if (ptr == len)
			type = " ^ ";
		ND_TCHECK2(cp[len], hoplen);
		ND_PRINT((ndo, "%s%d@%s", type, EXTRACT_32BITS(&cp[len+hoplen-4]),
		       hoplen!=8 ? "" : ipaddr_string(ndo, &cp[len])));
		type = " ";
	}

done:
	ND_PRINT((ndo, "%s", ptr == len ? " ^ " : ""));

if (cp[3]>>4)
		ND_PRINT((ndo, " [%d hops not recorded]} ", cp[3]>>4));
	else
		ND_PRINT((ndo, "}"));
	return (0);

trunc:
	return (-1);
}

/*
 * print IP options.
 */
static void
ip_optprint(netdissect_options *ndo,
            register const u_char *cp, u_int length)
{
	register u_int option_len;
	const char *sep = "";

for (; length > 0; cp += option_len, length -= option_len) {
		u_int option_code;

ND_PRINT((ndo, "%s", sep));
		sep = ",";

ND_TCHECK(*cp);
		option_code = *cp;

ND_PRINT((ndo, "%s",
		          tok2str(ip_option_values,"unknown %u",option_code)));

if (option_code == IPOPT_NOP ||
                    option_code == IPOPT_EOL)
			option_len = 1;

else {
			ND_TCHECK(cp[1]);
			option_len = cp[1];
			if (option_len < 2) {
				ND_PRINT((ndo, " [bad length %u]", option_len));
				return;
			}
		}

if (option_len > length) {
			ND_PRINT((ndo, " [bad length %u]", option_len));
			return;
		}

ND_TCHECK2(*cp, option_len);

switch (option_code) {
		case IPOPT_EOL:
			return;

case IPOPT_TS:
			if (ip_printts(ndo, cp, option_len) == -1)
				goto trunc;
			break;

case IPOPT_RR:       /* fall through */
		case IPOPT_SSRR:
		case IPOPT_LSRR:
			if (ip_printroute(ndo, cp, option_len) == -1)
				goto trunc;
			break;

case IPOPT_RA:
			if (option_len < 4) {
				ND_PRINT((ndo, " [bad length %u]", option_len));
				break;
			}
			ND_TCHECK(cp[3]);
			if (EXTRACT_16BITS(&cp[2]) != 0)
				ND_PRINT((ndo, " value %u", EXTRACT_16BITS(&cp[2])));
			break;

case IPOPT_NOP:       /* nothing to print - fall through */
		case IPOPT_SECURITY:
		default:
			break;
		}
	}
	return;

trunc:
	ND_PRINT((ndo, "%s", tstr));
}

#define IP_RES 0x8000

static const struct tok ip_frag_values[] = {
        { IP_MF,        "+" },
        { IP_DF,        "DF" },
	{ IP_RES,       "rsvd" }, /* The RFC3514 evil ;-) bit */
        { 0,            NULL }
};

struct ip_print_demux_state {
	const struct ip *ip;
	const u_char *cp;
	u_int   len, off;
	u_char  nh;
	int     advance;
};

static void
ip_print_demux(netdissect_options *ndo,
	       struct ip_print_demux_state *ipds)
{
	const char *p_name;

again:
	switch (ipds->nh) {

case IPPROTO_AH:
		if (!ND_TTEST(*ipds->cp)) {
			ND_PRINT((ndo, "[|AH]"));
			break;
		}
		ipds->nh = *ipds->cp;
		ipds->advance = ah_print(ndo, ipds->cp);
		if (ipds->advance <= 0)
			break;
		ipds->cp += ipds->advance;
		ipds->len -= ipds->advance;
		goto again;

case IPPROTO_ESP:
	{
		int enh, padlen;
		ipds->advance = esp_print(ndo, ipds->cp, ipds->len,
				    (const u_char *)ipds->ip,
				    &enh, &padlen);
		if (ipds->advance <= 0)
			break;
		ipds->cp += ipds->advance;
		ipds->len -= ipds->advance + padlen;
		ipds->nh = enh & 0xff;
		goto again;
	}

case IPPROTO_IPCOMP:
	{
		ipcomp_print(ndo, ipds->cp);
		/*
		 * Either this has decompressed the payload and
		 * printed it, in which case there's nothing more
		 * to do, or it hasn't, in which case there's
		 * nothing more to do.
		 */
		break;
	}

case IPPROTO_SCTP:
		sctp_print(ndo, ipds->cp, (const u_char *)ipds->ip, ipds->len);
		break;

case IPPROTO_DCCP:
		dccp_print(ndo, ipds->cp, (const u_char *)ipds->ip, ipds->len);
		break;

case IPPROTO_TCP:
		/* pass on the MF bit plus the offset to detect fragments */
		tcp_print(ndo, ipds->cp, ipds->len, (const u_char *)ipds->ip,
			  ipds->off & (IP_MF|IP_OFFMASK));
		break;

case IPPROTO_UDP:
		/* pass on the MF bit plus the offset to detect fragments */
		udp_print(ndo, ipds->cp, ipds->len, (const u_char *)ipds->ip,
			  ipds->off & (IP_MF|IP_OFFMASK));
		break;

case IPPROTO_ICMP:
		/* pass on the MF bit plus the offset to detect fragments */
		icmp_print(ndo, ipds->cp, ipds->len, (const u_char *)ipds->ip,
			   ipds->off & (IP_MF|IP_OFFMASK));
		break;

case IPPROTO_PIGP:
		/*
		 * XXX - the current IANA protocol number assignments
		 * page lists 9 as "any private interior gateway
		 * (used by Cisco for their IGRP)" and 88 as
		 * "EIGRP" from Cisco.
		 *
		 * Recent BSD <netinet/in.h> headers define
		 * IP_PROTO_PIGP as 9 and IP_PROTO_IGRP as 88.
		 * We define IP_PROTO_PIGP as 9 and
		 * IP_PROTO_EIGRP as 88; those names better
		 * match was the current protocol number
		 * assignments say.
		 */
		igrp_print(ndo, ipds->cp, ipds->len);
		break;

case IPPROTO_EIGRP:
		eigrp_print(ndo, ipds->cp, ipds->len);
		break;

case IPPROTO_ND:
		ND_PRINT((ndo, " nd %d", ipds->len));
		break;

case IPPROTO_EGP:
		egp_print(ndo, ipds->cp, ipds->len);
		break;

case IPPROTO_OSPF:
		ospf_print(ndo, ipds->cp, ipds->len, (const u_char *)ipds->ip);
		break;

case IPPROTO_IGMP:
		igmp_print(ndo, ipds->cp, ipds->len);
		break;

case IPPROTO_IPV4:
		/* DVMRP multicast tunnel (ip-in-ip encapsulation) */
		ip_print(ndo, ipds->cp, ipds->len);
		if (! ndo->ndo_vflag) {
			ND_PRINT((ndo, " (ipip-proto-4)"));
			return;
		}
		break;

case IPPROTO_IPV6:
		/* ip6-in-ip encapsulation */
		ip6_print(ndo, ipds->cp, ipds->len);
		break;

case IPPROTO_RSVP:
		rsvp_print(ndo, ipds->cp, ipds->len);
		break;

case IPPROTO_GRE:
		/* do it */
		gre_print(ndo, ipds->cp, ipds->len);
		break;

case IPPROTO_MOBILE:
		mobile_print(ndo, ipds->cp, ipds->len);
		break;

case IPPROTO_PIM:
		pim_print(ndo, ipds->cp, ipds->len, (const u_char *)ipds->ip);
		break;

case IPPROTO_VRRP:
		if (ndo->ndo_packettype == PT_CARP) {
			if (ndo->ndo_vflag)
				ND_PRINT((ndo, "carp %s > %s: ",
					     ipaddr_string(ndo, &ipds->ip->ip_src),
					     ipaddr_string(ndo, &ipds->ip->ip_dst)));
			carp_print(ndo, ipds->cp, ipds->len, ipds->ip->ip_ttl);
		} else {
			if (ndo->ndo_vflag)
				ND_PRINT((ndo, "vrrp %s > %s: ",
					     ipaddr_string(ndo, &ipds->ip->ip_src),
					     ipaddr_string(ndo, &ipds->ip->ip_dst)));
			vrrp_print(ndo, ipds->cp, ipds->len,
				(const u_char *)ipds->ip, ipds->ip->ip_ttl);
		}
		break;

case IPPROTO_PGM:
		pgm_print(ndo, ipds->cp, ipds->len, (const u_char *)ipds->ip);
		break;

#if defined(HAVE_NET_PFVAR_H)
	case IPPROTO_PFSYNC:
		pfsync_ip_print(ndo, ipds->cp, ipds->len);
		break;
#endif

default:
		if (ndo->ndo_nflag==0 && (p_name = netdb_protoname(ipds->nh)) != NULL)
			ND_PRINT((ndo, " %s", p_name));
		else
			ND_PRINT((ndo, " ip-proto-%d", ipds->nh));
		ND_PRINT((ndo, " %d", ipds->len));
		break;
	}
}

void
ip_print_inner(netdissect_options *ndo,
	       const u_char *bp,
	       u_int length, u_int nh,
	       const u_char *bp2)
{
	struct ip_print_demux_state  ipd;

ipd.ip = (const struct ip *)bp2;
	ipd.cp = bp;
	ipd.len  = length;
	ipd.off  = 0;
	ipd.nh   = nh;
	ipd.advance = 0;

ip_print_demux(ndo, &ipd);
}

/*
 * print an IP datagram.
 */
void
ip_print(netdissect_options *ndo,
	 const u_char *bp,
	 u_int length)
{
	struct ip_print_demux_state  ipd;
	struct ip_print_demux_state *ipds=&ipd;
	const u_char *ipend;
	u_int hlen;
	struct cksum_vec vec[1];
	uint16_t sum, ip_sum;
	const char *p_name;

ipds->ip = (const struct ip *)bp;
	ND_TCHECK(ipds->ip->ip_vhl);
	if (IP_V(ipds->ip) != 4) { /* print version and fail if != 4 */
	    if (IP_V(ipds->ip) == 6)
	      ND_PRINT((ndo, "IP6, wrong link-layer encapsulation "));
	    else
	      ND_PRINT((ndo, "IP%u ", IP_V(ipds->ip)));
	    return;
	}
	if (!ndo->ndo_eflag)
		ND_PRINT((ndo, "IP "));

ND_TCHECK(*ipds->ip);
	if (length < sizeof (struct ip)) {
		ND_PRINT((ndo, "truncated-ip %u", length));
		return;
	}
	hlen = IP_HL(ipds->ip) * 4;
	if (hlen < sizeof (struct ip)) {
		ND_PRINT((ndo, "bad-hlen %u", hlen));
		return;
	}

ipds->len = EXTRACT_16BITS(&ipds->ip->ip_len);
	if (length < ipds->len)
		ND_PRINT((ndo, "truncated-ip - %u bytes missing! ",
			ipds->len - length));
	if (ipds->len < hlen) {
#ifdef GUESS_TSO
            if (ipds->len) {
                ND_PRINT((ndo, "bad-len %u", ipds->len));
                return;
            }
            else {
                /* we guess that it is a TSO send */
                ipds->len = length;
            }
#else
            ND_PRINT((ndo, "bad-len %u", ipds->len));
            return;
#endif /* GUESS_TSO */
	}

/*
	 * Cut off the snapshot length to the end of the IP payload.
	 */
	ipend = bp + ipds->len;
	if (ipend < ndo->ndo_snapend)
		ndo->ndo_snapend = ipend;

ipds->len -= hlen;

ipds->off = EXTRACT_16BITS(&ipds->ip->ip_off);

if (ndo->ndo_vflag) {
            ND_PRINT((ndo, "(tos 0x%x", (int)ipds->ip->ip_tos));
            /* ECN bits */
            switch (ipds->ip->ip_tos & 0x03) {

case 0:
                break;

case 1:
                ND_PRINT((ndo, ",ECT(1)"));
                break;

case 2:
                ND_PRINT((ndo, ",ECT(0)"));
                break;

case 3:
                ND_PRINT((ndo, ",CE"));
                break;
            }

if (ipds->ip->ip_ttl >= 1)
                ND_PRINT((ndo, ", ttl %u", ipds->ip->ip_ttl));

/*
	     * for the firewall guys, print id, offset.
             * On all but the last stick a "+" in the flags portion.
	     * For unfragmented datagrams, note the don't fragment flag.
	     */

ND_PRINT((ndo, ", id %u, offset %u, flags [%s], proto %s (%u)",
                         EXTRACT_16BITS(&ipds->ip->ip_id),
                         (ipds->off & 0x1fff) * 8,
                         bittok2str(ip_frag_values, "none", ipds->off&0xe000),
                         tok2str(ipproto_values,"unknown",ipds->ip->ip_p),
                         ipds->ip->ip_p));

ND_PRINT((ndo, ", length %u", EXTRACT_16BITS(&ipds->ip->ip_len)));

if ((hlen - sizeof(struct ip)) > 0) {
                ND_PRINT((ndo, ", options ("));
                ip_optprint(ndo, (const u_char *)(ipds->ip + 1), hlen - sizeof(struct ip));
                ND_PRINT((ndo, ")"));
            }

if (!ndo->ndo_Kflag && (const u_char *)ipds->ip + hlen <= ndo->ndo_snapend) {
	        vec[0].ptr = (const uint8_t *)(const void *)ipds->ip;
	        vec[0].len = hlen;
	        sum = in_cksum(vec, 1);
		if (sum != 0) {
		    ip_sum = EXTRACT_16BITS(&ipds->ip->ip_sum);
		    ND_PRINT((ndo, ", bad cksum %x (->%x)!", ip_sum,
			     in_cksum_shouldbe(ip_sum, sum)));
		}
	    }

ND_PRINT((ndo, ")\n    "));
	}

/*
	 * If this is fragment zero, hand it to the next higher
	 * level protocol.
	 */
	if ((ipds->off & 0x1fff) == 0) {
		ipds->cp = (const u_char *)ipds->ip + hlen;
		ipds->nh = ipds->ip->ip_p;

if (ipds->nh != IPPROTO_TCP && ipds->nh != IPPROTO_UDP &&
		    ipds->nh != IPPROTO_SCTP && ipds->nh != IPPROTO_DCCP) {
			ND_PRINT((ndo, "%s > %s: ",
				     ipaddr_string(ndo, &ipds->ip->ip_src),
				     ipaddr_string(ndo, &ipds->ip->ip_dst)));
		}
		ip_print_demux(ndo, ipds);
	} else {
		/*
		 * Ultra quiet now means that all this stuff should be
		 * suppressed.
		 */
		if (ndo->ndo_qflag > 1)
			return;

/*
		 * This isn't the first frag, so we're missing the
		 * next level protocol header.  print the ip addr
		 * and the protocol.
		 */
		ND_PRINT((ndo, "%s > %s:", ipaddr_string(ndo, &ipds->ip->ip_src),
		          ipaddr_string(ndo, &ipds->ip->ip_dst)));
		if (!ndo->ndo_nflag && (p_name = netdb_protoname(ipds->ip->ip_p)) != NULL)
			ND_PRINT((ndo, " %s", p_name));
		else
			ND_PRINT((ndo, " ip-proto-%d", ipds->ip->ip_p));
	}
	return;

trunc:
	ND_PRINT((ndo, "%s", tstr));
	return;
}

void
ipN_print(netdissect_options *ndo, register const u_char *bp, register u_int length)
{
	if (length < 1) {
		ND_PRINT((ndo, "truncated-ip %d", length));
		return;
	}

ND_TCHECK(*bp);
	switch (*bp & 0xF0) {
	case 0x40:
		ip_print (ndo, bp, length);
		break;
	case 0x60:
		ip6_print (ndo, bp, length);
		break;
	default:
		ND_PRINT((ndo, "unknown ip %d", (*bp & 0xF0) >> 4));
		break;
	}
	return;

trunc:
	ND_PRINT((ndo, "%s", tstr));
	return;
}

/*
 * Local Variables:
 * c-style: whitesmith
 * c-basic-offset: 8
 * End:
 */

003 File Manager

Editing: print-ip.c

Upload File

Create Folder