File Manager

003 File Manager

Current Path: /usr/src/contrib/tcpdump

📁 ..
📄 CHANGES(57.87 KB)
📄 CONTRIBUTING(5.93 KB)
📄 CREDITS(14.57 KB)
📄 INSTALL.txt(5.25 KB)
📄 LICENSE(873 B)
📄 Makefile-devel-adds(614 B)
📄 Makefile.in(9.96 KB)
📄 PLATFORMS(567 B)
📄 README(9.04 KB)
📄 README.md(9.04 KB)
📄 VERSION(6 B)
📄 addrtoname.c(33.19 KB)
📄 addrtoname.h(2.78 KB)
📄 addrtostr.c(5.64 KB)
📄 addrtostr.h(2.03 KB)
📄 af.c(1.96 KB)
📄 af.h(1.81 KB)
📄 ah.h(2.34 KB)
📄 appletalk.h(4.06 KB)
📄 ascii_strcasecmp.c(3.5 KB)
📄 ascii_strcasecmp.h(1.49 KB)
📄 atime.awk(529 B)
📄 atm.h(1.14 KB)
📄 bpf_dump.c(1.9 KB)
📄 chdlc.h(1.31 KB)
📄 checksum.c(5.25 KB)
📄 config.guess(43.17 KB)
📄 config.h.in(11.19 KB)
📄 config.sub(34.93 KB)
📄 configure(255.88 KB)
📄 configure.ac(25.05 KB)
📄 configure.in(25.66 KB)
📄 cpack.c(3.92 KB)
📄 cpack.h(2.37 KB)
📄 ether.h(2.34 KB)
📄 ethertype.h(5.58 KB)
📄 extract.h(11.48 KB)
📄 funcattrs.h(4.42 KB)
📄 getopt_long.h(2.52 KB)
📄 gmpls.c(5.82 KB)
📄 gmpls.h(1.38 KB)
📄 gmt2local.c(2.01 KB)
📄 gmt2local.h(1.21 KB)
📄 in_cksum.c(6.44 KB)
📄 install-sh(5.45 KB)
📄 interface.h(2.29 KB)
📄 ip.h(5.75 KB)
📄 ip6.h(7.6 KB)
📄 ipproto.c(16.49 KB)
📄 ipproto.h(4.72 KB)
📄 l2vpn.c(3.36 KB)
📄 l2vpn.h(781 B)
📁 lbl
📄 llc.h(3.72 KB)
📄 machdep.c(2.58 KB)
📄 machdep.h(1.24 KB)
📄 makemib(6.41 KB)
📄 mib.h(26.33 KB)
📁 missing
📄 mkdep(2.43 KB)
📄 mpls.h(1.93 KB)
📄 nameser.h(10.8 KB)
📄 netdissect-stdinc.h(9.93 KB)
📄 netdissect.c(3.38 KB)
📄 netdissect.h(30.13 KB)
📄 nfs.h(13.37 KB)
📄 nfsfh.h(2.57 KB)
📄 nlpid.c(1.27 KB)
📄 nlpid.h(1.3 KB)
📄 openflow.h(2.14 KB)
📄 ospf.h(10.21 KB)
📄 oui.c(3.83 KB)
📄 oui.h(4.06 KB)
📄 packetdat.awk(1.39 KB)
📄 parsenfsfh.c(12.87 KB)
📄 pcap-missing.h(1.8 KB)
📄 pcap_dump_ftell.c(1.29 KB)
📄 ppp.h(3.07 KB)
📄 print-802_11.c(91.47 KB)
📄 print-802_15_4.c(5.5 KB)
📄 print-ah.c(2.02 KB)
📄 print-ahcp.c(10.73 KB)
📄 print-aodv.c(15.98 KB)
📄 print-aoe.c(11.13 KB)
📄 print-ap1394.c(4 KB)
📄 print-arcnet.c(8.83 KB)
📄 print-arp.c(14.57 KB)
📄 print-ascii.c(6.23 KB)
📄 print-atalk.c(16.76 KB)
📄 print-atm.c(16.81 KB)
📄 print-babel.c(23.79 KB)
📄 print-beep.c(1.71 KB)
📄 print-bfd.c(16.5 KB)
📄 print-bgp.c(99.77 KB)
📄 print-bootp.c(30.07 KB)
📄 print-bt.c(2.21 KB)
📄 print-calm-fast.c(1.81 KB)
📄 print-carp.c(2.43 KB)
📄 print-cdp.c(11.16 KB)
📄 print-cfm.c(24.19 KB)
📄 print-chdlc.c(5.88 KB)
📄 print-cip.c(2.5 KB)
📄 print-cnfp.c(13.69 KB)
📄 print-dccp.c(17.75 KB)
📄 print-decnet.c(37.63 KB)
📄 print-dhcp6.c(23.22 KB)
📄 print-domain.c(18.44 KB)
📄 print-dtp.c(3.03 KB)
📄 print-dvmrp.c(8.98 KB)
📄 print-eap.c(9.26 KB)
📄 print-egp.c(8.69 KB)
📄 print-eigrp.c(19.49 KB)
📄 print-enc.c(4.2 KB)
📄 print-esp.c(21.46 KB)
📄 print-ether.c(12.91 KB)
📄 print-fddi.c(10.51 KB)
📄 print-forces.c(45.01 KB)
📄 print-fr.c(31.99 KB)
📄 print-frag6.c(2.36 KB)
📄 print-ftp.c(973 B)
📄 print-geneve.c(6.13 KB)
📄 print-geonet.c(6.72 KB)
📄 print-gre.c(9.72 KB)
📄 print-hncp.c(26.39 KB)
📄 print-hsrp.c(4.57 KB)
📄 print-http.c(1.51 KB)
📄 print-icmp.c(22.7 KB)
📄 print-icmp6.c(59.81 KB)
📄 print-igmp.c(10.05 KB)
📄 print-igrp.c(4.64 KB)
📄 print-ip.c(17.04 KB)
📄 print-ip6.c(10.57 KB)
📄 print-ip6opts.c(5.53 KB)
📄 print-ipcomp.c(2.32 KB)
📄 print-ipfc.c(4.41 KB)
📄 print-ipnet.c(2.78 KB)
📄 print-ipx.c(6.42 KB)
📄 print-isakmp.c(81.72 KB)
📄 print-isoclns.c(107.61 KB)
📄 print-juniper.c(48.42 KB)
📄 print-krb.c(6.26 KB)
📄 print-l2tp.c(23.94 KB)
📄 print-lane.c(3.04 KB)
📄 print-ldp.c(24.35 KB)
📄 print-lisp.c(15.23 KB)
📄 print-llc.c(16.68 KB)
📄 print-lldp.c(57.26 KB)
📄 print-lmp.c(38.11 KB)
📄 print-loopback.c(3.63 KB)
📄 print-lspping.c(51.64 KB)
📄 print-lwapp.c(13.01 KB)
📄 print-lwres.c(14.08 KB)
📄 print-m3ua.c(10.92 KB)
📄 print-medsa.c(5.57 KB)
📄 print-mobile.c(3.28 KB)
📄 print-mobility.c(9.74 KB)
📄 print-mpcp.c(7.87 KB)
📄 print-mpls.c(5.31 KB)
📄 print-mptcp.c(13.68 KB)
📄 print-msdp.c(2.69 KB)
📄 print-msnlb.c(2.39 KB)
📄 print-nflog.c(4.4 KB)
📄 print-nfs.c(42.84 KB)
📄 print-nsh.c(5.39 KB)
📄 print-ntp.c(13.34 KB)
📄 print-null.c(4.01 KB)
📄 print-olsr.c(23.42 KB)
📄 print-openflow-1.0.c(76.63 KB)
📄 print-openflow.c(4.77 KB)
📄 print-ospf.c(39.49 KB)
📄 print-ospf6.c(29.86 KB)
📄 print-otv.c(2.1 KB)
📄 print-pflog.c(4.86 KB)
📄 print-pfsync.c(12.53 KB)
📄 print-pgm.c(22.17 KB)
📄 print-pim.c(32.59 KB)
📄 print-pktap.c(5.18 KB)
📄 print-ppi.c(2.68 KB)
📄 print-ppp.c(46.16 KB)
📄 print-pppoe.c(5.65 KB)
📄 print-pptp.c(25.9 KB)
📄 print-radius.c(35.1 KB)
📄 print-raw.c(1.52 KB)
📄 print-resp.c(16.5 KB)
📄 print-rip.c(9.19 KB)
📄 print-ripng.c(6 KB)
📄 print-rpki-rtr.c(10.83 KB)
📄 print-rrcp.c(4.56 KB)
📄 print-rsvp.c(78.61 KB)
📄 print-rt6.c(2.66 KB)
📄 print-rtsp.c(1.16 KB)
📄 print-rx.c(66.92 KB)
📄 print-sctp.c(23.13 KB)
📄 print-sflow.c(31.91 KB)
📄 print-sip.c(1.29 KB)
📄 print-sl.c(6.95 KB)
📄 print-sll.c(9.2 KB)
📄 print-slow.c(25.17 KB)
📄 print-smb.c(43.19 KB)
📄 print-smtp.c(983 B)
📄 print-snmp.c(43.17 KB)
📄 print-stp.c(17.18 KB)
📄 print-sunatm.c(3.27 KB)
📄 print-sunrpc.c(7.85 KB)
📄 print-symantec.c(3.78 KB)
📄 print-syslog.c(3.96 KB)
📄 print-tcp.c(35.84 KB)
📄 print-telnet.c(15.02 KB)
📄 print-tftp.c(5.2 KB)
📄 print-timed.c(4.74 KB)
📄 print-tipc.c(11.53 KB)
📄 print-token.c(7.96 KB)
📄 print-udld.c(5.47 KB)
📄 print-udp.c(21.28 KB)
📄 print-usb.c(4.18 KB)
📄 print-vjc.c(4.45 KB)
📄 print-vqp.c(6.8 KB)
📄 print-vrrp.c(6.37 KB)
📄 print-vtp.c(13.56 KB)
📄 print-vxlan-gpe.c(3.46 KB)
📄 print-vxlan.c(2.21 KB)
📄 print-wb.c(10.93 KB)
📄 print-zephyr.c(8.03 KB)
📄 print-zeromq.c(7.5 KB)
📄 print.c(11.54 KB)
📄 print.h(1.78 KB)
📄 rpc_auth.h(2.77 KB)
📄 rpc_msg.h(3.19 KB)
📄 rpl.h(4.88 KB)
📄 send-ack.awk(1.56 KB)
📄 setsignal.c(3.27 KB)
📄 setsignal.h(1.24 KB)
📄 signature.c(5.58 KB)
📄 signature.h(1.12 KB)
📄 slcompress.h(3.55 KB)
📄 smb.h(5.38 KB)
📄 smbutil.c(63.88 KB)
📄 stime.awk(567 B)
📄 strtoaddr.c(5.34 KB)
📄 strtoaddr.h(992 B)
📄 tcp.h(5.02 KB)
📄 tcpdump.1.in(60.82 KB)
📄 tcpdump.c(69.76 KB)
📄 timeval-operations.h(3.19 KB)
📄 udp.h(8.25 KB)
📄 util-print.c(23.75 KB)
📄 vfprintf.c(1.62 KB)

Editing: print-zeromq.c

/*
 * Copyright (c) 2013 The TCPDUMP project
 * All rights reserved.
 *
 * Redistribution and use in source and binary forms, with or without
 * modification, are permitted provided that the following conditions
 * are met:
 * 1. Redistributions of source code must retain the above copyright
 *    notice, this list of conditions and the following disclaimer.
 * 2. Redistributions in binary form must reproduce the above copyright
 *    notice, this list of conditions and the following disclaimer in the
 *    documentation and/or other materials provided with the distribution.
 *
 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
 * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
 * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
 * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE
 * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT,
 * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
 * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
 * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
 * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN
 * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
 * POSSIBILITY OF SUCH DAMAGE.
 */

/* \summary: ZeroMQ Message Transport Protocol (ZMTP) printer */

#ifdef HAVE_CONFIG_H
#include "config.h"
#endif

#include <netdissect-stdinc.h>

#include "netdissect.h"
#include "extract.h"

static const char tstr[] = " [|zmtp1]";

/* Maximum number of ZMTP/1.0 frame body bytes (without the flags) to dump in
 * hex and ASCII under a single "-v" flag.
 */
#define VBYTES 128

/*
 * Below is an excerpt from the "13/ZMTP" specification:
 *
 * A ZMTP message consists of 1 or more frames.
 *
 * A ZMTP frame consists of a length, followed by a flags field and a frame
 * body of (length - 1) octets. Note: the length includes the flags field, so
 * an empty frame has a length of 1.
 *
 * For frames with a length of 1 to 254 octets, the length SHOULD BE encoded
 * as a single octet. The minimum valid length of a frame is 1 octet, thus a
 * length of 0 is invalid and such frames SHOULD be discarded silently.
 *
 * For frames with lengths of 255 and greater, the length SHALL BE encoded as
 * a single octet with the value 255, followed by the length encoded as a
 * 64-bit unsigned integer in network byte order. For frames with lengths of
 * 1 to 254 octets this encoding MAY be also used.
 *
 * The flags field consists of a single octet containing various control
 * flags. Bit 0 is the least significant bit.
 *
 * - Bit 0 (MORE): More frames to follow. A value of 0 indicates that there
 *   are no more frames to follow. A value of 1 indicates that more frames
 *   will follow. On messages consisting of a single frame the MORE flag MUST
 *   be 0.
 *
 * - Bits 1-7: Reserved. Bits 1-7 are reserved for future use and SHOULD be
 *   zero.
 */

static const u_char *
zmtp1_print_frame(netdissect_options *ndo, const u_char *cp, const u_char *ep)
{
	uint64_t body_len_declared, body_len_captured, header_len;
	uint8_t flags;

ND_PRINT((ndo, "\n\t"));
	ND_TCHECK2(*cp, 1); /* length/0xFF */

if (cp[0] != 0xFF) {
		header_len = 1; /* length */
		body_len_declared = cp[0];
		ND_PRINT((ndo, " frame flags+body  (8-bit) length %" PRIu64, body_len_declared));
	} else {
		header_len = 1 + 8; /* 0xFF, length */
		ND_PRINT((ndo, " frame flags+body (64-bit) length"));
		ND_TCHECK2(*cp, header_len); /* 0xFF, length */
		body_len_declared = EXTRACT_64BITS(cp + 1);
		ND_PRINT((ndo, " %" PRIu64, body_len_declared));
	}
	if (body_len_declared == 0)
		return cp + header_len; /* skip to the next frame */
	ND_TCHECK2(*cp, header_len + 1); /* ..., flags */
	flags = cp[header_len];

body_len_captured = ep - cp - header_len;
	if (body_len_declared > body_len_captured)
		ND_PRINT((ndo, " (%" PRIu64 " captured)", body_len_captured));
	ND_PRINT((ndo, ", flags 0x%02x", flags));

if (ndo->ndo_vflag) {
		uint64_t body_len_printed = min(body_len_captured, body_len_declared);

ND_PRINT((ndo, " (%s|%s|%s|%s|%s|%s|%s|%s)",
			flags & 0x80 ? "MBZ" : "-",
			flags & 0x40 ? "MBZ" : "-",
			flags & 0x20 ? "MBZ" : "-",
			flags & 0x10 ? "MBZ" : "-",
			flags & 0x08 ? "MBZ" : "-",
			flags & 0x04 ? "MBZ" : "-",
			flags & 0x02 ? "MBZ" : "-",
			flags & 0x01 ? "MORE" : "-"));

if (ndo->ndo_vflag == 1)
			body_len_printed = min(VBYTES + 1, body_len_printed);
		if (body_len_printed > 1) {
			ND_PRINT((ndo, ", first %" PRIu64 " byte(s) of body:", body_len_printed - 1));
			hex_and_ascii_print(ndo, "\n\t ", cp + header_len + 1, body_len_printed - 1);
			ND_PRINT((ndo, "\n"));
		}
	}

/*
	 * Do not advance cp by the sum of header_len and body_len_declared
	 * before each offset has successfully passed ND_TCHECK2() as the
	 * sum can roll over (9 + 0xfffffffffffffff7 = 0) and cause an
	 * infinite loop.
	 */
	cp += header_len;
	ND_TCHECK2(*cp, body_len_declared); /* Next frame within the buffer ? */
	return cp + body_len_declared;

trunc:
	ND_PRINT((ndo, "%s", tstr));
	return ep;
}

void
zmtp1_print(netdissect_options *ndo, const u_char *cp, u_int len)
{
	const u_char *ep = min(ndo->ndo_snapend, cp + len);

ND_PRINT((ndo, ": ZMTP/1.0"));
	while (cp < ep)
		cp = zmtp1_print_frame(ndo, cp, ep);
}

/* The functions below decode a ZeroMQ datagram, supposedly stored in the "Data"
 * field of an ODATA/RDATA [E]PGM packet. An excerpt from zmq_pgm(7) man page
 * follows.
 *
 * In order for late joining consumers to be able to identify message
 * boundaries, each PGM datagram payload starts with a 16-bit unsigned integer
 * in network byte order specifying either the offset of the first message frame
 * in the datagram or containing the value 0xFFFF if the datagram contains
 * solely an intermediate part of a larger message.
 *
 * Note that offset specifies where the first message begins rather than the
 * first message part. Thus, if there are trailing message parts at the
 * beginning of the packet the offset ignores them and points to first initial
 * message part in the packet.
 */

static const u_char *
zmtp1_print_intermediate_part(netdissect_options *ndo, const u_char *cp, const u_int len)
{
	u_int frame_offset;
	uint64_t remaining_len;

ND_TCHECK2(*cp, 2);
	frame_offset = EXTRACT_16BITS(cp);
	ND_PRINT((ndo, "\n\t frame offset 0x%04x", frame_offset));
	cp += 2;
	remaining_len = ndo->ndo_snapend - cp; /* without the frame length */

if (frame_offset == 0xFFFF)
		frame_offset = len - 2; /* always within the declared length */
	else if (2 + frame_offset > len) {
		ND_PRINT((ndo, " (exceeds datagram declared length)"));
		goto trunc;
	}

/* offset within declared length of the datagram */
	if (frame_offset) {
		ND_PRINT((ndo, "\n\t frame intermediate part, %u bytes", frame_offset));
		if (frame_offset > remaining_len)
			ND_PRINT((ndo, " (%"PRIu64" captured)", remaining_len));
		if (ndo->ndo_vflag) {
			uint64_t len_printed = min(frame_offset, remaining_len);

if (ndo->ndo_vflag == 1)
				len_printed = min(VBYTES, len_printed);
			if (len_printed > 1) {
				ND_PRINT((ndo, ", first %"PRIu64" byte(s):", len_printed));
				hex_and_ascii_print(ndo, "\n\t ", cp, len_printed);
				ND_PRINT((ndo, "\n"));
			}
		}
	}
	return cp + frame_offset;

trunc:
	ND_PRINT((ndo, "%s", tstr));
	return cp + len;
}

void
zmtp1_print_datagram(netdissect_options *ndo, const u_char *cp, const u_int len)
{
	const u_char *ep = min(ndo->ndo_snapend, cp + len);

cp = zmtp1_print_intermediate_part(ndo, cp, len);
	while (cp < ep)
		cp = zmtp1_print_frame(ndo, cp, ep);
}

003 File Manager

Editing: print-zeromq.c

Upload File

Create Folder