/*

* Copyright (c) 1988-1997

* The Regents of the University of California. All rights reserved.

*

* Copyright (c) 1998-2004 Michael Richardson <mcr@tcpdump.org>

* The TCPDUMP project

*

* Redistribution and use in source and binary forms, with or without

* modification, are permitted provided that: (1) source code distributions

* retain the above copyright notice and this paragraph in its entirety, (2)

* distributions including binary code include the above copyright notice and

* this paragraph in its entirety in the documentation or other materials

* provided with the distribution, and (3) all advertising materials mentioning

* features or use of this software display the following acknowledgement:

* ``This product includes software developed by the University of California,

* Lawrence Berkeley Laboratory and its contributors.'' Neither the name of

* the University nor the names of its contributors may be used to endorse

* or promote products derived from this software without specific prior

* written permission.

* THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED

* WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF

* MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.

*

* @(#) $Header: /tcpdump/master/tcpdump/netdissect.h,v 1.27 2008-08-16 11:36:20 hannes Exp $ (LBL)

*/

#ifndef netdissect_h

#define netdissect_h

#ifdef HAVE_OS_PROTO_H

#include "os-proto.h"

#endif

#include <sys/types.h>

#ifndef HAVE___ATTRIBUTE__

#define __attribute__(x)

#endif

/* snprintf et al */

#include <stdarg.h>

#if !defined(HAVE_SNPRINTF)

int snprintf (char *str, size_t sz, const char *format, ...)

__attribute__ ((format (printf, 3, 4)));

#endif

#if !defined(HAVE_VSNPRINTF)

int vsnprintf (char *str, size_t sz, const char *format, va_list ap)

__attribute__((format (printf, 3, 0)));

#endif

#ifndef HAVE_STRLCAT

extern size_t strlcat (char *, const char *, size_t);

#endif

#ifndef HAVE_STRLCPY

extern size_t strlcpy (char *, const char *, size_t);

#endif

#ifndef HAVE_STRDUP

extern char *strdup (const char *str);

#endif

#ifndef HAVE_STRSEP

extern char *strsep(char **, const char *);

#endif

struct tok {

int v; /* value */

const char *s; /* string */

};

#define TOKBUFSIZE 128

extern const char *tok2strbuf(const struct tok *, const char *, int,

char *buf, size_t bufsize);

/* tok2str is deprecated */

extern const char *tok2str(const struct tok *, const char *, int);

extern char *bittok2str(const struct tok *, const char *, int);

extern char *bittok2str_nosep(const struct tok *, const char *, int);

typedef struct netdissect_options netdissect_options;

struct netdissect_options {

int ndo_aflag; /* translate network and broadcast addresses */

int ndo_bflag; /* print 4 byte ASes in ASDOT notation */

int ndo_eflag; /* print ethernet header */

int ndo_fflag; /* don't translate "foreign" IP address */

int ndo_Kflag; /* don't check TCP checksums */

int ndo_nflag; /* leave addresses as numbers */

int ndo_Nflag; /* remove domains from printed host names */

int ndo_qflag; /* quick (shorter) output */

int ndo_Rflag; /* print sequence # field in AH/ESP*/

int ndo_sflag; /* use the libsmi to translate OIDs */

int ndo_Sflag; /* print raw TCP sequence numbers */

int ndo_tflag; /* print packet arrival time */

int ndo_Uflag; /* "unbuffered" output of dump files */

int ndo_uflag; /* Print undecoded NFS handles */

int ndo_vflag; /* verbose */

int ndo_xflag; /* print packet in hex */

int ndo_Xflag; /* print packet in hex/ascii */

int ndo_Aflag; /* print packet only in ascii observing TAB,

* LF, CR and SPACE as graphical chars

*/

int ndo_Bflag; /* buffer size */

int ndo_Iflag; /* rfmon (monitor) mode */

int ndo_Oflag; /* run filter code optimizer */

int ndo_dlt; /* if != -1, ask libpcap for the DLT it names*/

int ndo_jflag; /* packet time stamp source */

int ndo_pflag; /* don't go promiscuous */

int ndo_Cflag; /* rotate dump files after this many bytes */

int ndo_Cflag_count; /* Keep track of which file number we're writing */

int ndo_Gflag; /* rotate dump files after this many seconds */

int ndo_Gflag_count; /* number of files created with Gflag rotation */

time_t ndo_Gflag_time; /* The last time_t the dump file was rotated. */

int ndo_Wflag; /* recycle output files after this number of files */

int ndo_WflagChars;

int ndo_Hflag; /* dissect 802.11s draft mesh standard */

int ndo_suppress_default_print; /* don't use default_print() for unknown packet types */

const char *ndo_dltname;

char *ndo_espsecret;

struct sa_list *ndo_sa_list_head; /* used by print-esp.c */

struct sa_list *ndo_sa_default;

char *ndo_sigsecret; /* Signature verification secret key */

struct esp_algorithm *ndo_espsecret_xform; /* cache of decoded */

char *ndo_espsecret_key;

int ndo_packettype; /* as specified by -T */

char *ndo_program_name; /*used to generate self-identifying messages */

int32_t ndo_thiszone; /* seconds offset from gmt to local time */

int ndo_snaplen;

/*global pointers to beginning and end of current packet (during printing) */

const u_char *ndo_packetp;

const u_char *ndo_snapend;

/* bookkeeping for ^T output */

int ndo_infodelay;

/* pointer to void function to output stuff */

void (*ndo_default_print)(netdissect_options *,

register const u_char *bp, register u_int length);

void (*ndo_info)(netdissect_options *, int verbose);

int (*ndo_printf)(netdissect_options *,

const char *fmt, ...)

#ifdef __ATTRIBUTE___FORMAT_OK_FOR_FUNCTION_POINTERS

__attribute__ ((format (printf, 2, 3)))

#endif

;

void (*ndo_error)(netdissect_options *,

const char *fmt, ...)

#ifdef __ATTRIBUTE___FORMAT_OK_FOR_FUNCTION_POINTERS

__attribute__ ((noreturn, format (printf, 2, 3)))

#endif

;

void (*ndo_warning)(netdissect_options *,

const char *fmt, ...)

#ifdef __ATTRIBUTE___FORMAT_OK_FOR_FUNCTION_POINTERS

__attribute__ ((format (printf, 2, 3)))

#endif

;

};

#define PT_VAT 1 /* Visual Audio Tool */

#define PT_WB 2 /* distributed White Board */

#define PT_RPC 3 /* Remote Procedure Call */

#define PT_RTP 4 /* Real-Time Applications protocol */

#define PT_RTCP 5 /* Real-Time Applications control protocol */

#define PT_SNMP 6 /* Simple Network Management Protocol */

#define PT_CNFP 7 /* Cisco NetFlow protocol */

#ifndef min

#define min(a,b) ((a)>(b)?(b):(a))

#endif

#ifndef max

#define max(a,b) ((b)>(a)?(b):(a))

#endif

/*

* Maximum snapshot length. This should be enough to capture the full

* packet on most network interfaces.

*

* XXX - could it be larger? If so, should it? Some applications might

* use the snapshot length in a savefile header to control the size of

* the buffer they allocate, so a size of, say, 2^31-1 might not work

* well.

*/

#define MAXIMUM_SNAPLEN 65535

/*

* The default snapshot length is the maximum.

*/

#define DEFAULT_SNAPLEN MAXIMUM_SNAPLEN

#define ESRC(ep) ((ep)->ether_shost)

#define EDST(ep) ((ep)->ether_dhost)

#ifndef NTOHL

#define NTOHL(x) (x) = ntohl(x)

#define NTOHS(x) (x) = ntohs(x)

#define HTONL(x) (x) = htonl(x)

#define HTONS(x) (x) = htons(x)

#endif

/*

* True if "l" bytes of "var" were captured.

*

* The "ndo->ndo_snapend - (l) <= ndo->ndo_snapend" checks to make sure

* "l" isn't so large that "ndo->ndo_snapend - (l)" underflows.

*

* The check is for <= rather than < because "l" might be 0.

*/

#define ND_TTEST2(var, l) (ndo->ndo_snapend - (l) <= ndo->ndo_snapend && \

(const u_char *)&(var) <= ndo->ndo_snapend - (l))

/* True if "var" was captured */

#define ND_TTEST(var) ND_TTEST2(var, sizeof(var))

/* Bail if "l" bytes of "var" were not captured */

#define ND_TCHECK2(var, l) if (!ND_TTEST2(var, l)) goto trunc

/* Bail if "var" was not captured */

#define ND_TCHECK(var) ND_TCHECK2(var, sizeof(var))

#define ND_PRINT(STUFF) (*ndo->ndo_printf)STUFF

#define ND_DEFAULTPRINT(ap, length) (*ndo->ndo_default_print)(ndo, ap, length)

#if 0

extern void ts_print(netdissect_options *ipdo,

const struct timeval *);

extern void relts_print(int);

#endif

extern int fn_print(const u_char *, const u_char *);

extern int fn_printn(const u_char *, u_int, const u_char *);

extern const char *tok2str(const struct tok *, const char *, int);

extern void wrapup(int);

#if 0

extern char *read_infile(netdissect_options *, char *);

extern char *copy_argv(netdissect_options *, char **);

#endif

extern void safeputchar(int);

extern void safeputs(const char *, int);

#define PLURAL_SUFFIX(n) \

(((n) != 1) ? "s" : "")

#if 0

extern const char *isonsap_string(netdissect_options *, const u_char *);

extern const char *protoid_string(netdissect_options *, const u_char *);

extern const char *dnname_string(netdissect_options *, u_short);

extern const char *dnnum_string(netdissect_options *, u_short);

#endif

/* The printer routines. */

#include <pcap.h>

typedef u_int (*if_ndo_printer)(struct netdissect_options *ndo,

const struct pcap_pkthdr *, const u_char *);

typedef u_int (*if_printer)(const struct pcap_pkthdr *, const u_char *);

extern if_ndo_printer lookup_ndo_printer(int);

extern if_printer lookup_printer(int);

extern void eap_print(netdissect_options *,const u_char *, u_int);

extern int esp_print(netdissect_options *,

register const u_char *bp, int len, register const u_char *bp2,

int *nhdr, int *padlen);

extern void arp_print(netdissect_options *,const u_char *, u_int, u_int);

extern void icmp6_print(netdissect_options *ndo, const u_char *,

u_int, const u_char *, int);

extern void isakmp_print(netdissect_options *,const u_char *,

u_int, const u_char *);

extern void isakmp_rfc3948_print(netdissect_options *,const u_char *,

u_int, const u_char *);

extern void ip_print(netdissect_options *,const u_char *, u_int);

extern void ip_print_inner(netdissect_options *ndo,

const u_char *bp, u_int length, u_int nh,

const u_char *bp2);

extern void rrcp_print(netdissect_options *,const u_char *, u_int);

extern void ether_print(netdissect_options *,

const u_char *, u_int, u_int,

void (*)(netdissect_options *, const u_char *),

const u_char *);

extern u_int ether_if_print(netdissect_options *,

const struct pcap_pkthdr *,const u_char *);

extern int ethertype_print(netdissect_options *,u_short, const u_char *,

u_int, u_int);

/* stuff that has not yet been rototiled */

#if 0

extern void ascii_print(netdissect_options *,u_int);

extern void hex_and_ascii_print_with_offset(netdissect_options *,const char *,

u_int, u_int);

extern void hex_and_ascii_print(netdissect_options *,const char *, u_int);

extern void hex_print_with_offset(netdissect_options *,const char *,

u_int, u_int);

extern void hex_print(netdissect_options *,const char *, u_int);

extern void telnet_print(netdissect_options *,const u_char *, u_int);

extern int llc_print(netdissect_options *,

const u_char *, u_int, u_int, const u_char *,

const u_char *, u_short *);

extern void aarp_print(netdissect_options *,const u_char *, u_int);

extern void atalk_print(netdissect_options *,const u_char *, u_int);

extern void atm_if_print(u_char *,const struct pcap_pkthdr *, const u_char *);

extern void bootp_print(netdissect_options *,const u_char *,

u_int, u_short, u_short);

extern void bgp_print(netdissect_options *,const u_char *, int);

extern void bxxp_print(netdissect_options *,const u_char *, u_int);

extern void chdlc_if_print(u_char *user, const struct pcap_pkthdr *h,

register const u_char *p);

extern void chdlc_print(netdissect_options *ndo,

register const u_char *p, u_int length, u_int caplen);

extern void cisco_autorp_print(netdissect_options *,

const u_char *, u_int);

extern void cnfp_print(netdissect_options *,const u_char *cp,

u_int len, const u_char *bp);

extern void decnet_print(netdissect_options *,const u_char *,

u_int, u_int);

extern void default_print(netdissect_options *,const u_char *, u_int);

extern void dvmrp_print(netdissect_options *,const u_char *, u_int);

extern void egp_print(netdissect_options *,const u_char *, u_int,

const u_char *);

extern void arcnet_if_print(u_char*,const struct pcap_pkthdr *,const u_char *);

extern void token_if_print(u_char *,const struct pcap_pkthdr *,const u_char *);

extern void fddi_if_print(u_char *,const struct pcap_pkthdr *, const u_char *);

extern void gre_print(netdissect_options *,const u_char *, u_int);

extern void icmp_print(netdissect_options *,const u_char *, u_int,

const u_char *);

extern void hsrp_print(netdissect_options *ndo,

register const u_char *bp, register u_int len);

extern void ieee802_11_if_print(u_char *,const struct pcap_pkthdr *, const u_char *);

extern void igmp_print(netdissect_options *,

register const u_char *, u_int);

extern void igrp_print(netdissect_options *,const u_char *, u_int,

const u_char *);

extern int nextproto4_cksum(const struct ip *, const u_int8_t *, u_int, u_int);

extern void ipN_print(netdissect_options *,const u_char *, u_int);

extern void ipx_print(netdissect_options *,const u_char *, u_int);

extern void isoclns_print(netdissect_options *,const u_char *,

u_int, u_int, const u_char *, const u_char *);

extern void krb_print(netdissect_options *,const u_char *, u_int);

extern void llap_print(netdissect_options *,const u_char *, u_int);

extern const char *linkaddr_string(netdissect_options *ndo,

const u_char *ep, const unsigned int len);

extern void ltalk_if_print(netdissect_options *ndo,

u_char *user, const struct pcap_pkthdr *h,

const u_char *p);

extern void mpls_print(netdissect_options *ndo,

const u_char *bp, u_int length);

extern void msdp_print(netdissect_options *ndo,

const unsigned char *sp, u_int length);

extern void nfsreply_print(netdissect_options *,const u_char *,

u_int, const u_char *);

extern void nfsreq_print(netdissect_options *,const u_char *,

u_int, const u_char *);

extern void ns_print(netdissect_options *,const u_char *, u_int);

extern void ntp_print(netdissect_options *,const u_char *, u_int);

extern void null_if_print(u_char *,const struct pcap_pkthdr *, const u_char *);

extern void ospf_print(netdissect_options *,const u_char *,

u_int, const u_char *);

extern void pimv1_print(netdissect_options *,const u_char *, u_int);

extern void mobile_print(netdissect_options *,const u_char *, u_int);

extern void pim_print(netdissect_options *,const u_char *, u_int, u_int);

extern void pppoe_if_print(u_char *,const struct pcap_pkthdr *, const u_char *);

extern void pppoe_print(netdissect_options *,const u_char *, u_int);

extern void ppp_print(netdissect_options *,

register const u_char *, u_int);

extern void ppp_if_print(u_char *,const struct pcap_pkthdr *, const u_char *);

extern void ppp_hdlc_if_print(u_char *,

const struct pcap_pkthdr *, const u_char *);

extern void ppp_bsdos_if_print(u_char *,

const struct pcap_pkthdr *, const u_char *);

extern int vjc_print(netdissect_options *,register const char *,

register u_int, u_short);

extern void raw_if_print(u_char *,

const struct pcap_pkthdr *, const u_char *);

extern void rip_print(netdissect_options *,const u_char *, u_int);

extern void rpki_rtr_print(netdissect_options *,const u_char *, u_int);

extern void sctp_print(netdissect_options *ndo,

const u_char *bp, const u_char *bp2,

u_int sctpPacketLength);

extern void sl_if_print(u_char *,const struct pcap_pkthdr *, const u_char *);

extern void lane_if_print(u_char *,const struct pcap_pkthdr *,const u_char *);

extern void cip_if_print(u_char *,const struct pcap_pkthdr *,const u_char *);

extern void sl_bsdos_if_print(u_char *,

const struct pcap_pkthdr *, const u_char *);

extern void sll_if_print(u_char *,

const struct pcap_pkthdr *, const u_char *);

extern void snmp_print(netdissect_options *,const u_char *, u_int);

extern void sunrpcrequest_print(netdissect_options *,const u_char *,

u_int, const u_char *);

extern void tcp_print(netdissect_options *,const u_char *, u_int,

const u_char *, int);

extern void tftp_print(netdissect_options *,const u_char *, u_int);

extern void timed_print(netdissect_options *,const u_char *, u_int);

extern void udp_print(netdissect_options *,const u_char *, u_int,

const u_char *, int);

extern void wb_print(netdissect_options *,const void *, u_int);

extern int ah_print(netdissect_options *,register const u_char *,

register const u_char *);

extern void esp_print_decodesecret(netdissect_options *ndo);

extern int ipcomp_print(netdissect_options *,register const u_char *,

register const u_char *, int *);

extern void rx_print(netdissect_options *,register const u_char *,

int, int, int, u_char *);

extern void netbeui_print(netdissect_options *,u_short,

const u_char *, int);

extern void ipx_netbios_print(netdissect_options *,const u_char *, u_int);

extern void nbt_tcp_print(netdissect_options *,const u_char *, int);

extern void nbt_udp137_print(netdissect_options *,

const u_char *data, int);

extern void nbt_udp138_print(netdissect_options *,

const u_char *data, int);

extern char *smb_errstr(netdissect_options *,int, int);

extern const char *nt_errstr(netdissect_options *, u_int32_t);

extern void print_data(netdissect_options *,const unsigned char *, int);

extern void l2tp_print(netdissect_options *,const u_char *, u_int);

extern void lcp_print(netdissect_options *,const u_char *, u_int);

extern void vrrp_print(netdissect_options *,const u_char *bp,

u_int len, int ttl);

extern void cdp_print(netdissect_options *,const u_char *,

u_int, u_int, const u_char *, const u_char *);

extern void stp_print(netdissect_options *,const u_char *p, u_int length);

extern void radius_print(netdissect_options *,const u_char *, u_int);

extern void lwres_print(netdissect_options *,const u_char *, u_int);

extern void pptp_print(netdissect_options *,const u_char *, u_int);

#endif

extern u_int ipnet_if_print(netdissect_options *,const struct pcap_pkthdr *, const u_char *);

extern u_int ppi_if_print(netdissect_options *,const struct pcap_pkthdr *, const u_char *);

extern u_int ieee802_15_4_if_print(netdissect_options *,const struct pcap_pkthdr *, const u_char *);

#ifdef INET6

extern void ip6_print(netdissect_options *,const u_char *, u_int);

#if 0

extern void ip6_opt_print(netdissect_options *,const u_char *, int);

extern int nextproto6_cksum(const struct ip6_hdr *, const u_int8_t *, u_int, u_int);

extern int hbhopt_print(netdissect_options *,const u_char *);

extern int dstopt_print(netdissect_options *,const u_char *);

extern int frag6_print(netdissect_options *,const u_char *,

const u_char *);

extern void icmp6_print(netdissect_options *,const u_char *,

const u_char *);

extern void ripng_print(netdissect_options *,const u_char *, int);

extern int rt6_print(netdissect_options *,const u_char *, const u_char *);

extern void ospf6_print(netdissect_options *,const u_char *, u_int);

extern void dhcp6_print(netdissect_options *,const u_char *,

u_int, u_int16_t, u_int16_t);

extern void zephyr_print(netdissect_options * ndo,

const u_char *cp, int length);

#endif /* 0 */

#endif /*INET6*/

#if 0

struct cksum_vec {

const u_int8_t *ptr;

int len;

};

extern u_int16_t in_cksum(const struct cksum_vec *, int);

extern u_int16_t in_cksum_shouldbe(u_int16_t, u_int16_t);

#endif

extern void esp_print_decodesecret(netdissect_options *ndo);

extern int esp_print_decrypt_buffer_by_ikev2(netdissect_options *ndo,

int initiator,

u_char spii[8], u_char spir[8],

u_char *buf, u_char *end);

#endif /* netdissect_h */