1/*
2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 *
21 * $FreeBSD: head/contrib/tcpdump/print-udp.c 56896 2000-01-30 01:05:24Z fenner $
22 */
23
24#ifndef lint
25static const char rcsid[] =
26 "@(#) $Header: /tcpdump/master/tcpdump/print-udp.c,v 1.70 1999/12/22 06:27:23 itojun Exp $ (LBL)";
27#endif
28
29#ifdef HAVE_CONFIG_H
30#include "config.h"
31#endif
32
33#include <sys/param.h>
34#include <sys/time.h>
35#include <sys/socket.h>
36
37#include <netinet/in.h>
38#include <netinet/in_systm.h>
39#include <netinet/ip.h>
40#include <netinet/ip_var.h>
41#include <netinet/udp.h>
42#include <netinet/udp_var.h>
43
44#ifdef NOERROR
45#undef NOERROR /* Solaris sucks */
46#endif
47#ifdef T_UNSPEC
48#undef T_UNSPEC /* SINIX does too */
49#endif
50#include <arpa/nameser.h>
51#ifdef SEGSIZE
52#undef SEGSIZE
53#endif
54#include <arpa/tftp.h>
55
56#include <rpc/rpc.h>
57
58#include <stdio.h>
59
60#ifdef INET6
61#include <netinet/ip6.h>
62#endif
63
64#include "interface.h"
65#include "addrtoname.h"
66#include "appletalk.h"
67
68#include "nfs.h"
69#include "bootp.h"
70
71struct rtcphdr {
72 u_short rh_flags; /* T:2 P:1 CNT:5 PT:8 */
73 u_short rh_len; /* length of message (in words) */
74 u_int rh_ssrc; /* synchronization src id */
75};
76
77typedef struct {
78 u_int upper; /* more significant 32 bits */
79 u_int lower; /* less significant 32 bits */
80} ntp64;
81
82/*
83 * Sender report.
84 */
85struct rtcp_sr {
86 ntp64 sr_ntp; /* 64-bit ntp timestamp */
87 u_int sr_ts; /* reference media timestamp */
88 u_int sr_np; /* no. packets sent */
89 u_int sr_nb; /* no. bytes sent */
90};
91
92/*
93 * Receiver report.
94 * Time stamps are middle 32-bits of ntp timestamp.
95 */
96struct rtcp_rr {
97 u_int rr_srcid; /* sender being reported */
98 u_int rr_nl; /* no. packets lost */
99 u_int rr_ls; /* extended last seq number received */
100 u_int rr_dv; /* jitter (delay variance) */
101 u_int rr_lsr; /* orig. ts from last rr from this src */
102 u_int rr_dlsr; /* time from recpt of last rr to xmit time */
103};
104
105/*XXX*/
106#define RTCP_PT_SR 200
107#define RTCP_PT_RR 201
108#define RTCP_PT_SDES 202
109#define RTCP_SDES_CNAME 1
110#define RTCP_SDES_NAME 2
111#define RTCP_SDES_EMAIL 3
112#define RTCP_SDES_PHONE 4
113#define RTCP_SDES_LOC 5
114#define RTCP_SDES_TOOL 6
115#define RTCP_SDES_NOTE 7
116#define RTCP_SDES_PRIV 8
117#define RTCP_PT_BYE 203
118#define RTCP_PT_APP 204
119
120static void
121vat_print(const void *hdr, u_int len, register const struct udphdr *up)
122{
123 /* vat/vt audio */
124 u_int ts = *(u_short *)hdr;
125 if ((ts & 0xf060) != 0) {
126 /* probably vt */
127 (void)printf(" udp/vt %u %d / %d",
128 (u_int32_t)(ntohs(up->uh_ulen) - sizeof(*up)),
129 ts & 0x3ff, ts >> 10);
130 } else {
131 /* probably vat */
132 u_int i0 = ntohl(((u_int *)hdr)[0]);
133 u_int i1 = ntohl(((u_int *)hdr)[1]);
134 printf(" udp/vat %u c%d %u%s",
135 (u_int32_t)(ntohs(up->uh_ulen) - sizeof(*up) - 8),
136 i0 & 0xffff,
137 i1, i0 & 0x800000? "*" : "");
138 /* audio format */
139 if (i0 & 0x1f0000)
140 printf(" f%d", (i0 >> 16) & 0x1f);
141 if (i0 & 0x3f000000)
142 printf(" s%d", (i0 >> 24) & 0x3f);
143 }
144}
145
146static void
147rtp_print(const void *hdr, u_int len, register const struct udphdr *up)
148{
149 /* rtp v1 or v2 */
150 u_int *ip = (u_int *)hdr;
151 u_int hasopt, hasext, contype, hasmarker;
152 u_int i0 = ntohl(((u_int *)hdr)[0]);
153 u_int i1 = ntohl(((u_int *)hdr)[1]);
154 u_int dlen = ntohs(up->uh_ulen) - sizeof(*up) - 8;
155 const char * ptype;
156
157 ip += 2;
158 len >>= 2;
159 len -= 2;
160 hasopt = 0;
161 hasext = 0;
162 if ((i0 >> 30) == 1) {
163 /* rtp v1 */
164 hasopt = i0 & 0x800000;
165 contype = (i0 >> 16) & 0x3f;
166 hasmarker = i0 & 0x400000;
167 ptype = "rtpv1";
168 } else {
169 /* rtp v2 */
170 hasext = i0 & 0x10000000;
171 contype = (i0 >> 16) & 0x7f;
172 hasmarker = i0 & 0x800000;
173 dlen -= 4;
174 ptype = "rtp";
175 ip += 1;
176 len -= 1;
177 }
178 printf(" udp/%s %d c%d %s%s %d %u",
179 ptype,
180 dlen,
181 contype,
182 (hasopt || hasext)? "+" : "",
183 hasmarker? "*" : "",
184 i0 & 0xffff,
185 i1);
186 if (vflag) {
187 printf(" %u", i1);
188 if (hasopt) {
189 u_int i2, optlen;
190 do {
191 i2 = ip[0];
192 optlen = (i2 >> 16) & 0xff;
193 if (optlen == 0 || optlen > len) {
194 printf(" !opt");
195 return;
196 }
197 ip += optlen;
198 len -= optlen;
199 } while ((int)i2 >= 0);
200 }
201 if (hasext) {
202 u_int i2, extlen;
203 i2 = ip[0];
204 extlen = (i2 & 0xffff) + 1;
205 if (extlen > len) {
206 printf(" !ext");
207 return;
208 }
209 ip += extlen;
210 }
211 if (contype == 0x1f) /*XXX H.261 */
212 printf(" 0x%04x", ip[0] >> 16);
213 }
214}
215
216static const u_char *
217rtcp_print(const u_char *hdr, const u_char *ep)
218{
219 /* rtp v2 control (rtcp) */
220 struct rtcp_rr *rr = 0;
221 struct rtcp_sr *sr;
222 struct rtcphdr *rh = (struct rtcphdr *)hdr;
223 u_int len;
224 u_short flags;
225 int cnt;
226 double ts, dts;
227 if ((u_char *)(rh + 1) > ep) {
228 printf(" [|rtcp]");
229 return (ep);
230 }
231 len = (ntohs(rh->rh_len) + 1) * 4;
232 flags = ntohs(rh->rh_flags);
233 cnt = (flags >> 8) & 0x1f;
234 switch (flags & 0xff) {
235 case RTCP_PT_SR:
236 sr = (struct rtcp_sr *)(rh + 1);
237 printf(" sr");
238 if (len != cnt * sizeof(*rr) + sizeof(*sr) + sizeof(*rh))
239 printf(" [%d]", len);
240 if (vflag)
241 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
242 if ((u_char *)(sr + 1) > ep) {
243 printf(" [|rtcp]");
244 return (ep);
245 }
246 ts = (double)((u_int32_t)ntohl(sr->sr_ntp.upper)) +
247 ((double)((u_int32_t)ntohl(sr->sr_ntp.lower)) /
248 4294967296.0);
249 printf(" @%.2f %u %up %ub", ts, (u_int32_t)ntohl(sr->sr_ts),
250 (u_int32_t)ntohl(sr->sr_np), (u_int32_t)ntohl(sr->sr_nb));
251 rr = (struct rtcp_rr *)(sr + 1);
252 break;
253 case RTCP_PT_RR:
254 printf(" rr");
255 if (len != cnt * sizeof(*rr) + sizeof(*rh))
256 printf(" [%d]", len);
257 rr = (struct rtcp_rr *)(rh + 1);
258 if (vflag)
259 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
260 break;
261 case RTCP_PT_SDES:
262 printf(" sdes %d", len);
263 if (vflag)
264 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
265 cnt = 0;
266 break;
267 case RTCP_PT_BYE:
268 printf(" bye %d", len);
269 if (vflag)
270 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
271 cnt = 0;
272 break;
273 default:
274 printf(" type-0x%x %d", flags & 0xff, len);
275 cnt = 0;
276 break;
277 }
278 if (cnt > 1)
279 printf(" c%d", cnt);
280 while (--cnt >= 0) {
281 if ((u_char *)(rr + 1) > ep) {
282 printf(" [|rtcp]");
283 return (ep);
284 }
285 if (vflag)
286 printf(" %u", (u_int32_t)ntohl(rr->rr_srcid));
287 ts = (double)((u_int32_t)ntohl(rr->rr_lsr)) / 65536.;
288 dts = (double)((u_int32_t)ntohl(rr->rr_dlsr)) / 65536.;
289 printf(" %ul %us %uj @%.2f+%.2f",
290 (u_int32_t)ntohl(rr->rr_nl) & 0x00ffffff,
291 (u_int32_t)ntohl(rr->rr_ls),
292 (u_int32_t)ntohl(rr->rr_dv), ts, dts);
293 }
294 return (hdr + len);
295}
296
297/* XXX probably should use getservbyname() and cache answers */
298#define TFTP_PORT 69 /*XXX*/
299#define KERBEROS_PORT 88 /*XXX*/
300#define SUNRPC_PORT 111 /*XXX*/
301#define SNMP_PORT 161 /*XXX*/
302#define NTP_PORT 123 /*XXX*/
303#define SNMPTRAP_PORT 162 /*XXX*/
304#define ISAKMP_PORT 500 /*XXX*/
305#define RIP_PORT 520 /*XXX*/
306#define KERBEROS_SEC_PORT 750 /*XXX*/
307#define L2TP_PORT 1701 /*XXX*/
308#define ISAKMP_PORT_USER1 7500 /*??? - nonstandard*/
309#define ISAKMP_PORT_USER2 8500 /*??? - nonstandard*/
310#define RX_PORT_LOW 7000 /*XXX*/
311#define RX_PORT_HIGH 7009 /*XXX*/
312#define NETBIOS_NS_PORT 137
313#define NETBIOS_DGRAM_PORT 138
314#define CISCO_AUTORP_PORT 496 /*XXX*/
315
316#ifdef INET6
317#define RIPNG_PORT 521 /*XXX*/
318#define DHCP6_SERV_PORT 546 /*XXX*/
319#define DHCP6_CLI_PORT 547 /*XXX*/
320#endif
321
322void
323udp_print(register const u_char *bp, u_int length, register const u_char *bp2)
324{
325 register const struct udphdr *up;
326 register const struct ip *ip;
327 register const u_char *cp;
328 register const u_char *ep = bp + length;
329 u_short sport, dport, ulen;
330#ifdef INET6
331 register const struct ip6_hdr *ip6;
332#endif
333
334 if (ep > snapend)
335 ep = snapend;
336 up = (struct udphdr *)bp;
337 ip = (struct ip *)bp2;
338#ifdef INET6
339 if (ip->ip_v == 6)
340 ip6 = (struct ip6_hdr *)bp2;
341 else
342 ip6 = NULL;
343#endif /*INET6*/
344 cp = (u_char *)(up + 1);
345 if (cp > snapend) {
346 (void)printf("%s > %s: [|udp]",
347 ipaddr_string(&ip->ip_src), ipaddr_string(&ip->ip_dst));
348 return;
349 }
350 if (length < sizeof(struct udphdr)) {
351 (void)printf("%s > %s: truncated-udp %d",
352 ipaddr_string(&ip->ip_src), ipaddr_string(&ip->ip_dst),
353 length);
354 return;
355 }
356 length -= sizeof(struct udphdr);
357
358 sport = ntohs(up->uh_sport);
359 dport = ntohs(up->uh_dport);
360 ulen = ntohs(up->uh_ulen);
361 if (packettype) {
362 register struct rpc_msg *rp;
363 enum msg_type direction;
364
365 switch (packettype) {
366
367 case PT_VAT:
368 (void)printf("%s.%s > %s.%s:",
369 ipaddr_string(&ip->ip_src),
370 udpport_string(sport),
371 ipaddr_string(&ip->ip_dst),
372 udpport_string(dport));
373 vat_print((void *)(up + 1), length, up);
374 break;
375
376 case PT_WB:
377 (void)printf("%s.%s > %s.%s:",
378 ipaddr_string(&ip->ip_src),
379 udpport_string(sport),
380 ipaddr_string(&ip->ip_dst),
381 udpport_string(dport));
382 wb_print((void *)(up + 1), length);
383 break;
384
385 case PT_RPC:
386 rp = (struct rpc_msg *)(up + 1);
387 direction = (enum msg_type)ntohl(rp->rm_direction);
388 if (direction == CALL)
389 sunrpcrequest_print((u_char *)rp, length,
390 (u_char *)ip);
391 else
392 nfsreply_print((u_char *)rp, length,
393 (u_char *)ip); /*XXX*/
394 break;
395
396 case PT_RTP:
397 (void)printf("%s.%s > %s.%s:",
398 ipaddr_string(&ip->ip_src),
399 udpport_string(sport),
400 ipaddr_string(&ip->ip_dst),
401 udpport_string(dport));
402 rtp_print((void *)(up + 1), length, up);
403 break;
404
405 case PT_RTCP:
406 (void)printf("%s.%s > %s.%s:",
407 ipaddr_string(&ip->ip_src),
408 udpport_string(sport),
409 ipaddr_string(&ip->ip_dst),
410 udpport_string(dport));
411 while (cp < ep)
412 cp = rtcp_print(cp, ep);
413 break;
414
415 case PT_SNMP:
416 (void)printf("%s.%s > %s.%s:",
417 ipaddr_string(&ip->ip_src),
418 udpport_string(sport),
419 ipaddr_string(&ip->ip_dst),
420 udpport_string(dport));
421 snmp_print((const u_char *)(up + 1), length);
422 break;
423 }
424 return;
425 }
426
427 if (!qflag) {
428 register struct rpc_msg *rp;
429 enum msg_type direction;
430
431 rp = (struct rpc_msg *)(up + 1);
432 if (TTEST(rp->rm_direction)) {
433 direction = (enum msg_type)ntohl(rp->rm_direction);
434 if (dport == NFS_PORT && direction == CALL) {
435 nfsreq_print((u_char *)rp, length,
436 (u_char *)ip);
437 return;
438 }
439 if (sport == NFS_PORT && direction == REPLY) {
440 nfsreply_print((u_char *)rp, length,
441 (u_char *)ip);
442 return;
443 }
444#ifdef notdef
445 if (dport == SUNRPC_PORT && direction == CALL) {
446 sunrpcrequest_print((u_char *)rp, length, (u_char *)ip);
447 return;
448 }
449#endif
450 }
451 if (TTEST(((struct LAP *)cp)->type) &&
452 ((struct LAP *)cp)->type == lapDDP &&
453 (atalk_port(sport) || atalk_port(dport))) {
454 if (vflag)
455 fputs("kip ", stdout);
456 atalk_print(cp, length);
457 return;
458 }
459 }
460#if 0
461 (void)printf("%s.%s > %s.%s:",
462 ipaddr_string(&ip->ip_src), udpport_string(sport),
463 ipaddr_string(&ip->ip_dst), udpport_string(dport));
464#else
465#ifdef INET6
466 if (ip6) {
467 if (ip6->ip6_nxt == IPPROTO_UDP) {
468 (void)printf("%s.%s > %s.%s: ",
469 ip6addr_string(&ip6->ip6_src),
470 udpport_string(sport),
471 ip6addr_string(&ip6->ip6_dst),
472 udpport_string(dport));
473 } else {
474 (void)printf("%s > %s: ",
475 udpport_string(sport), udpport_string(dport));
476 }
477 } else
478#endif /*INET6*/
479 {
480 if (ip->ip_p == IPPROTO_UDP) {
481 (void)printf("%s.%s > %s.%s: ",
482 ipaddr_string(&ip->ip_src),
483 udpport_string(sport),
484 ipaddr_string(&ip->ip_dst),
485 udpport_string(dport));
486 } else {
487 (void)printf("%s > %s: ",
488 udpport_string(sport), udpport_string(dport));
489 }
490 }
491#endif
492
493 if (!qflag) {
494#define ISPORT(p) (dport == (p) || sport == (p))
495 if (ISPORT(NAMESERVER_PORT))
496 ns_print((const u_char *)(up + 1), length);
497 else if (ISPORT(TFTP_PORT))
498 tftp_print((const u_char *)(up + 1), length);
499 else if (ISPORT(IPPORT_BOOTPC) || ISPORT(IPPORT_BOOTPS))
500 bootp_print((const u_char *)(up + 1), length,
501 sport, dport);
502 else if (ISPORT(RIP_PORT))
503 rip_print((const u_char *)(up + 1), length);
504 else if (ISPORT(ISAKMP_PORT))
505 isakmp_print((const u_char *)(up + 1), length, bp2);
506#if 1 /*???*/
507 else if (ISPORT(ISAKMP_PORT_USER1) || ISPORT(ISAKMP_PORT_USER2))
508 isakmp_print((const u_char *)(up + 1), length, bp2);
509#endif
510 else if (ISPORT(SNMP_PORT) || ISPORT(SNMPTRAP_PORT))
511 snmp_print((const u_char *)(up + 1), length);
512 else if (ISPORT(NTP_PORT))
513 ntp_print((const u_char *)(up + 1), length);
514 else if (ISPORT(KERBEROS_PORT) || ISPORT(KERBEROS_SEC_PORT))
515 krb_print((const void *)(up + 1), length);
516 else if (ISPORT(L2TP_PORT))
517 l2tp_print((const u_char *)(up + 1), length);
518 else if (ISPORT(NETBIOS_NS_PORT)) {
519 nbt_udp137_print((const u_char *)(up + 1), length);
520 }
521 else if (ISPORT(NETBIOS_DGRAM_PORT)) {
522 nbt_udp138_print((const u_char *)(up + 1), length);
523 }
524 else if (dport == 3456)
525 vat_print((const void *)(up + 1), length, up);
526 /*
527 * Since there are 10 possible ports to check, I think
528 * a <> test would be more efficient
529 */
530 else if ((sport >= RX_PORT_LOW && sport <= RX_PORT_HIGH) ||
531 (dport >= RX_PORT_LOW && dport <= RX_PORT_HIGH))
532 rx_print((const void *)(up + 1), length, sport, dport,
533 (u_char *) ip);
534#ifdef INET6
535 else if (ISPORT(RIPNG_PORT))
536 ripng_print((const u_char *)(up + 1), length);
537 else if (ISPORT(DHCP6_SERV_PORT) || ISPORT(DHCP6_CLI_PORT)) {
538 dhcp6_print((const u_char *)(up + 1), length,
539 sport, dport);
540 }
541#endif /*INET6*/
542 /*
543 * Kludge in test for whiteboard packets.
544 */
545 else if (dport == 4567)
546 wb_print((const void *)(up + 1), length);
547 else if (ISPORT(CISCO_AUTORP_PORT))
548 cisco_autorp_print((const void *)(up + 1), length);
549 else
550 (void)printf(" udp %u",
551 (u_int32_t)(ulen - sizeof(*up)));
552#undef ISPORT
553 } else
554 (void)printf(" udp %u", (u_int32_t)(ulen - sizeof(*up)));
555}
2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 *
21 * $FreeBSD: head/contrib/tcpdump/print-udp.c 56896 2000-01-30 01:05:24Z fenner $
22 */
23
24#ifndef lint
25static const char rcsid[] =
26 "@(#) $Header: /tcpdump/master/tcpdump/print-udp.c,v 1.70 1999/12/22 06:27:23 itojun Exp $ (LBL)";
27#endif
28
29#ifdef HAVE_CONFIG_H
30#include "config.h"
31#endif
32
33#include <sys/param.h>
34#include <sys/time.h>
35#include <sys/socket.h>
36
37#include <netinet/in.h>
38#include <netinet/in_systm.h>
39#include <netinet/ip.h>
40#include <netinet/ip_var.h>
41#include <netinet/udp.h>
42#include <netinet/udp_var.h>
43
44#ifdef NOERROR
45#undef NOERROR /* Solaris sucks */
46#endif
47#ifdef T_UNSPEC
48#undef T_UNSPEC /* SINIX does too */
49#endif
50#include <arpa/nameser.h>
51#ifdef SEGSIZE
52#undef SEGSIZE
53#endif
54#include <arpa/tftp.h>
55
56#include <rpc/rpc.h>
57
58#include <stdio.h>
59
60#ifdef INET6
61#include <netinet/ip6.h>
62#endif
63
64#include "interface.h"
65#include "addrtoname.h"
66#include "appletalk.h"
67
68#include "nfs.h"
69#include "bootp.h"
70
71struct rtcphdr {
72 u_short rh_flags; /* T:2 P:1 CNT:5 PT:8 */
73 u_short rh_len; /* length of message (in words) */
74 u_int rh_ssrc; /* synchronization src id */
75};
76
77typedef struct {
78 u_int upper; /* more significant 32 bits */
79 u_int lower; /* less significant 32 bits */
80} ntp64;
81
82/*
83 * Sender report.
84 */
85struct rtcp_sr {
86 ntp64 sr_ntp; /* 64-bit ntp timestamp */
87 u_int sr_ts; /* reference media timestamp */
88 u_int sr_np; /* no. packets sent */
89 u_int sr_nb; /* no. bytes sent */
90};
91
92/*
93 * Receiver report.
94 * Time stamps are middle 32-bits of ntp timestamp.
95 */
96struct rtcp_rr {
97 u_int rr_srcid; /* sender being reported */
98 u_int rr_nl; /* no. packets lost */
99 u_int rr_ls; /* extended last seq number received */
100 u_int rr_dv; /* jitter (delay variance) */
101 u_int rr_lsr; /* orig. ts from last rr from this src */
102 u_int rr_dlsr; /* time from recpt of last rr to xmit time */
103};
104
105/*XXX*/
106#define RTCP_PT_SR 200
107#define RTCP_PT_RR 201
108#define RTCP_PT_SDES 202
109#define RTCP_SDES_CNAME 1
110#define RTCP_SDES_NAME 2
111#define RTCP_SDES_EMAIL 3
112#define RTCP_SDES_PHONE 4
113#define RTCP_SDES_LOC 5
114#define RTCP_SDES_TOOL 6
115#define RTCP_SDES_NOTE 7
116#define RTCP_SDES_PRIV 8
117#define RTCP_PT_BYE 203
118#define RTCP_PT_APP 204
119
120static void
121vat_print(const void *hdr, u_int len, register const struct udphdr *up)
122{
123 /* vat/vt audio */
124 u_int ts = *(u_short *)hdr;
125 if ((ts & 0xf060) != 0) {
126 /* probably vt */
127 (void)printf(" udp/vt %u %d / %d",
128 (u_int32_t)(ntohs(up->uh_ulen) - sizeof(*up)),
129 ts & 0x3ff, ts >> 10);
130 } else {
131 /* probably vat */
132 u_int i0 = ntohl(((u_int *)hdr)[0]);
133 u_int i1 = ntohl(((u_int *)hdr)[1]);
134 printf(" udp/vat %u c%d %u%s",
135 (u_int32_t)(ntohs(up->uh_ulen) - sizeof(*up) - 8),
136 i0 & 0xffff,
137 i1, i0 & 0x800000? "*" : "");
138 /* audio format */
139 if (i0 & 0x1f0000)
140 printf(" f%d", (i0 >> 16) & 0x1f);
141 if (i0 & 0x3f000000)
142 printf(" s%d", (i0 >> 24) & 0x3f);
143 }
144}
145
146static void
147rtp_print(const void *hdr, u_int len, register const struct udphdr *up)
148{
149 /* rtp v1 or v2 */
150 u_int *ip = (u_int *)hdr;
151 u_int hasopt, hasext, contype, hasmarker;
152 u_int i0 = ntohl(((u_int *)hdr)[0]);
153 u_int i1 = ntohl(((u_int *)hdr)[1]);
154 u_int dlen = ntohs(up->uh_ulen) - sizeof(*up) - 8;
155 const char * ptype;
156
157 ip += 2;
158 len >>= 2;
159 len -= 2;
160 hasopt = 0;
161 hasext = 0;
162 if ((i0 >> 30) == 1) {
163 /* rtp v1 */
164 hasopt = i0 & 0x800000;
165 contype = (i0 >> 16) & 0x3f;
166 hasmarker = i0 & 0x400000;
167 ptype = "rtpv1";
168 } else {
169 /* rtp v2 */
170 hasext = i0 & 0x10000000;
171 contype = (i0 >> 16) & 0x7f;
172 hasmarker = i0 & 0x800000;
173 dlen -= 4;
174 ptype = "rtp";
175 ip += 1;
176 len -= 1;
177 }
178 printf(" udp/%s %d c%d %s%s %d %u",
179 ptype,
180 dlen,
181 contype,
182 (hasopt || hasext)? "+" : "",
183 hasmarker? "*" : "",
184 i0 & 0xffff,
185 i1);
186 if (vflag) {
187 printf(" %u", i1);
188 if (hasopt) {
189 u_int i2, optlen;
190 do {
191 i2 = ip[0];
192 optlen = (i2 >> 16) & 0xff;
193 if (optlen == 0 || optlen > len) {
194 printf(" !opt");
195 return;
196 }
197 ip += optlen;
198 len -= optlen;
199 } while ((int)i2 >= 0);
200 }
201 if (hasext) {
202 u_int i2, extlen;
203 i2 = ip[0];
204 extlen = (i2 & 0xffff) + 1;
205 if (extlen > len) {
206 printf(" !ext");
207 return;
208 }
209 ip += extlen;
210 }
211 if (contype == 0x1f) /*XXX H.261 */
212 printf(" 0x%04x", ip[0] >> 16);
213 }
214}
215
216static const u_char *
217rtcp_print(const u_char *hdr, const u_char *ep)
218{
219 /* rtp v2 control (rtcp) */
220 struct rtcp_rr *rr = 0;
221 struct rtcp_sr *sr;
222 struct rtcphdr *rh = (struct rtcphdr *)hdr;
223 u_int len;
224 u_short flags;
225 int cnt;
226 double ts, dts;
227 if ((u_char *)(rh + 1) > ep) {
228 printf(" [|rtcp]");
229 return (ep);
230 }
231 len = (ntohs(rh->rh_len) + 1) * 4;
232 flags = ntohs(rh->rh_flags);
233 cnt = (flags >> 8) & 0x1f;
234 switch (flags & 0xff) {
235 case RTCP_PT_SR:
236 sr = (struct rtcp_sr *)(rh + 1);
237 printf(" sr");
238 if (len != cnt * sizeof(*rr) + sizeof(*sr) + sizeof(*rh))
239 printf(" [%d]", len);
240 if (vflag)
241 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
242 if ((u_char *)(sr + 1) > ep) {
243 printf(" [|rtcp]");
244 return (ep);
245 }
246 ts = (double)((u_int32_t)ntohl(sr->sr_ntp.upper)) +
247 ((double)((u_int32_t)ntohl(sr->sr_ntp.lower)) /
248 4294967296.0);
249 printf(" @%.2f %u %up %ub", ts, (u_int32_t)ntohl(sr->sr_ts),
250 (u_int32_t)ntohl(sr->sr_np), (u_int32_t)ntohl(sr->sr_nb));
251 rr = (struct rtcp_rr *)(sr + 1);
252 break;
253 case RTCP_PT_RR:
254 printf(" rr");
255 if (len != cnt * sizeof(*rr) + sizeof(*rh))
256 printf(" [%d]", len);
257 rr = (struct rtcp_rr *)(rh + 1);
258 if (vflag)
259 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
260 break;
261 case RTCP_PT_SDES:
262 printf(" sdes %d", len);
263 if (vflag)
264 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
265 cnt = 0;
266 break;
267 case RTCP_PT_BYE:
268 printf(" bye %d", len);
269 if (vflag)
270 printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
271 cnt = 0;
272 break;
273 default:
274 printf(" type-0x%x %d", flags & 0xff, len);
275 cnt = 0;
276 break;
277 }
278 if (cnt > 1)
279 printf(" c%d", cnt);
280 while (--cnt >= 0) {
281 if ((u_char *)(rr + 1) > ep) {
282 printf(" [|rtcp]");
283 return (ep);
284 }
285 if (vflag)
286 printf(" %u", (u_int32_t)ntohl(rr->rr_srcid));
287 ts = (double)((u_int32_t)ntohl(rr->rr_lsr)) / 65536.;
288 dts = (double)((u_int32_t)ntohl(rr->rr_dlsr)) / 65536.;
289 printf(" %ul %us %uj @%.2f+%.2f",
290 (u_int32_t)ntohl(rr->rr_nl) & 0x00ffffff,
291 (u_int32_t)ntohl(rr->rr_ls),
292 (u_int32_t)ntohl(rr->rr_dv), ts, dts);
293 }
294 return (hdr + len);
295}
296
297/* XXX probably should use getservbyname() and cache answers */
298#define TFTP_PORT 69 /*XXX*/
299#define KERBEROS_PORT 88 /*XXX*/
300#define SUNRPC_PORT 111 /*XXX*/
301#define SNMP_PORT 161 /*XXX*/
302#define NTP_PORT 123 /*XXX*/
303#define SNMPTRAP_PORT 162 /*XXX*/
304#define ISAKMP_PORT 500 /*XXX*/
305#define RIP_PORT 520 /*XXX*/
306#define KERBEROS_SEC_PORT 750 /*XXX*/
307#define L2TP_PORT 1701 /*XXX*/
308#define ISAKMP_PORT_USER1 7500 /*??? - nonstandard*/
309#define ISAKMP_PORT_USER2 8500 /*??? - nonstandard*/
310#define RX_PORT_LOW 7000 /*XXX*/
311#define RX_PORT_HIGH 7009 /*XXX*/
312#define NETBIOS_NS_PORT 137
313#define NETBIOS_DGRAM_PORT 138
314#define CISCO_AUTORP_PORT 496 /*XXX*/
315
316#ifdef INET6
317#define RIPNG_PORT 521 /*XXX*/
318#define DHCP6_SERV_PORT 546 /*XXX*/
319#define DHCP6_CLI_PORT 547 /*XXX*/
320#endif
321
322void
323udp_print(register const u_char *bp, u_int length, register const u_char *bp2)
324{
325 register const struct udphdr *up;
326 register const struct ip *ip;
327 register const u_char *cp;
328 register const u_char *ep = bp + length;
329 u_short sport, dport, ulen;
330#ifdef INET6
331 register const struct ip6_hdr *ip6;
332#endif
333
334 if (ep > snapend)
335 ep = snapend;
336 up = (struct udphdr *)bp;
337 ip = (struct ip *)bp2;
338#ifdef INET6
339 if (ip->ip_v == 6)
340 ip6 = (struct ip6_hdr *)bp2;
341 else
342 ip6 = NULL;
343#endif /*INET6*/
344 cp = (u_char *)(up + 1);
345 if (cp > snapend) {
346 (void)printf("%s > %s: [|udp]",
347 ipaddr_string(&ip->ip_src), ipaddr_string(&ip->ip_dst));
348 return;
349 }
350 if (length < sizeof(struct udphdr)) {
351 (void)printf("%s > %s: truncated-udp %d",
352 ipaddr_string(&ip->ip_src), ipaddr_string(&ip->ip_dst),
353 length);
354 return;
355 }
356 length -= sizeof(struct udphdr);
357
358 sport = ntohs(up->uh_sport);
359 dport = ntohs(up->uh_dport);
360 ulen = ntohs(up->uh_ulen);
361 if (packettype) {
362 register struct rpc_msg *rp;
363 enum msg_type direction;
364
365 switch (packettype) {
366
367 case PT_VAT:
368 (void)printf("%s.%s > %s.%s:",
369 ipaddr_string(&ip->ip_src),
370 udpport_string(sport),
371 ipaddr_string(&ip->ip_dst),
372 udpport_string(dport));
373 vat_print((void *)(up + 1), length, up);
374 break;
375
376 case PT_WB:
377 (void)printf("%s.%s > %s.%s:",
378 ipaddr_string(&ip->ip_src),
379 udpport_string(sport),
380 ipaddr_string(&ip->ip_dst),
381 udpport_string(dport));
382 wb_print((void *)(up + 1), length);
383 break;
384
385 case PT_RPC:
386 rp = (struct rpc_msg *)(up + 1);
387 direction = (enum msg_type)ntohl(rp->rm_direction);
388 if (direction == CALL)
389 sunrpcrequest_print((u_char *)rp, length,
390 (u_char *)ip);
391 else
392 nfsreply_print((u_char *)rp, length,
393 (u_char *)ip); /*XXX*/
394 break;
395
396 case PT_RTP:
397 (void)printf("%s.%s > %s.%s:",
398 ipaddr_string(&ip->ip_src),
399 udpport_string(sport),
400 ipaddr_string(&ip->ip_dst),
401 udpport_string(dport));
402 rtp_print((void *)(up + 1), length, up);
403 break;
404
405 case PT_RTCP:
406 (void)printf("%s.%s > %s.%s:",
407 ipaddr_string(&ip->ip_src),
408 udpport_string(sport),
409 ipaddr_string(&ip->ip_dst),
410 udpport_string(dport));
411 while (cp < ep)
412 cp = rtcp_print(cp, ep);
413 break;
414
415 case PT_SNMP:
416 (void)printf("%s.%s > %s.%s:",
417 ipaddr_string(&ip->ip_src),
418 udpport_string(sport),
419 ipaddr_string(&ip->ip_dst),
420 udpport_string(dport));
421 snmp_print((const u_char *)(up + 1), length);
422 break;
423 }
424 return;
425 }
426
427 if (!qflag) {
428 register struct rpc_msg *rp;
429 enum msg_type direction;
430
431 rp = (struct rpc_msg *)(up + 1);
432 if (TTEST(rp->rm_direction)) {
433 direction = (enum msg_type)ntohl(rp->rm_direction);
434 if (dport == NFS_PORT && direction == CALL) {
435 nfsreq_print((u_char *)rp, length,
436 (u_char *)ip);
437 return;
438 }
439 if (sport == NFS_PORT && direction == REPLY) {
440 nfsreply_print((u_char *)rp, length,
441 (u_char *)ip);
442 return;
443 }
444#ifdef notdef
445 if (dport == SUNRPC_PORT && direction == CALL) {
446 sunrpcrequest_print((u_char *)rp, length, (u_char *)ip);
447 return;
448 }
449#endif
450 }
451 if (TTEST(((struct LAP *)cp)->type) &&
452 ((struct LAP *)cp)->type == lapDDP &&
453 (atalk_port(sport) || atalk_port(dport))) {
454 if (vflag)
455 fputs("kip ", stdout);
456 atalk_print(cp, length);
457 return;
458 }
459 }
460#if 0
461 (void)printf("%s.%s > %s.%s:",
462 ipaddr_string(&ip->ip_src), udpport_string(sport),
463 ipaddr_string(&ip->ip_dst), udpport_string(dport));
464#else
465#ifdef INET6
466 if (ip6) {
467 if (ip6->ip6_nxt == IPPROTO_UDP) {
468 (void)printf("%s.%s > %s.%s: ",
469 ip6addr_string(&ip6->ip6_src),
470 udpport_string(sport),
471 ip6addr_string(&ip6->ip6_dst),
472 udpport_string(dport));
473 } else {
474 (void)printf("%s > %s: ",
475 udpport_string(sport), udpport_string(dport));
476 }
477 } else
478#endif /*INET6*/
479 {
480 if (ip->ip_p == IPPROTO_UDP) {
481 (void)printf("%s.%s > %s.%s: ",
482 ipaddr_string(&ip->ip_src),
483 udpport_string(sport),
484 ipaddr_string(&ip->ip_dst),
485 udpport_string(dport));
486 } else {
487 (void)printf("%s > %s: ",
488 udpport_string(sport), udpport_string(dport));
489 }
490 }
491#endif
492
493 if (!qflag) {
494#define ISPORT(p) (dport == (p) || sport == (p))
495 if (ISPORT(NAMESERVER_PORT))
496 ns_print((const u_char *)(up + 1), length);
497 else if (ISPORT(TFTP_PORT))
498 tftp_print((const u_char *)(up + 1), length);
499 else if (ISPORT(IPPORT_BOOTPC) || ISPORT(IPPORT_BOOTPS))
500 bootp_print((const u_char *)(up + 1), length,
501 sport, dport);
502 else if (ISPORT(RIP_PORT))
503 rip_print((const u_char *)(up + 1), length);
504 else if (ISPORT(ISAKMP_PORT))
505 isakmp_print((const u_char *)(up + 1), length, bp2);
506#if 1 /*???*/
507 else if (ISPORT(ISAKMP_PORT_USER1) || ISPORT(ISAKMP_PORT_USER2))
508 isakmp_print((const u_char *)(up + 1), length, bp2);
509#endif
510 else if (ISPORT(SNMP_PORT) || ISPORT(SNMPTRAP_PORT))
511 snmp_print((const u_char *)(up + 1), length);
512 else if (ISPORT(NTP_PORT))
513 ntp_print((const u_char *)(up + 1), length);
514 else if (ISPORT(KERBEROS_PORT) || ISPORT(KERBEROS_SEC_PORT))
515 krb_print((const void *)(up + 1), length);
516 else if (ISPORT(L2TP_PORT))
517 l2tp_print((const u_char *)(up + 1), length);
518 else if (ISPORT(NETBIOS_NS_PORT)) {
519 nbt_udp137_print((const u_char *)(up + 1), length);
520 }
521 else if (ISPORT(NETBIOS_DGRAM_PORT)) {
522 nbt_udp138_print((const u_char *)(up + 1), length);
523 }
524 else if (dport == 3456)
525 vat_print((const void *)(up + 1), length, up);
526 /*
527 * Since there are 10 possible ports to check, I think
528 * a <> test would be more efficient
529 */
530 else if ((sport >= RX_PORT_LOW && sport <= RX_PORT_HIGH) ||
531 (dport >= RX_PORT_LOW && dport <= RX_PORT_HIGH))
532 rx_print((const void *)(up + 1), length, sport, dport,
533 (u_char *) ip);
534#ifdef INET6
535 else if (ISPORT(RIPNG_PORT))
536 ripng_print((const u_char *)(up + 1), length);
537 else if (ISPORT(DHCP6_SERV_PORT) || ISPORT(DHCP6_CLI_PORT)) {
538 dhcp6_print((const u_char *)(up + 1), length,
539 sport, dport);
540 }
541#endif /*INET6*/
542 /*
543 * Kludge in test for whiteboard packets.
544 */
545 else if (dport == 4567)
546 wb_print((const void *)(up + 1), length);
547 else if (ISPORT(CISCO_AUTORP_PORT))
548 cisco_autorp_print((const void *)(up + 1), length);
549 else
550 (void)printf(" udp %u",
551 (u_int32_t)(ulen - sizeof(*up)));
552#undef ISPORT
553 } else
554 (void)printf(" udp %u", (u_int32_t)(ulen - sizeof(*up)));
555}