175115Sfenner/* 275115Sfenner * Copyright (c) 1988, 1989, 1990, 1991, 1993, 1994, 1995, 1996 375115Sfenner * The Regents of the University of California. All rights reserved. 475115Sfenner * 575115Sfenner * Redistribution and use in source and binary forms, with or without 675115Sfenner * modification, are permitted provided that: (1) source code distributions 775115Sfenner * retain the above copyright notice and this paragraph in its entirety, (2) 875115Sfenner * distributions including binary code include the above copyright notice and 975115Sfenner * this paragraph in its entirety in the documentation or other materials 1075115Sfenner * provided with the distribution, and (3) all advertising materials mentioning 1175115Sfenner * features or use of this software display the following acknowledgement: 1275115Sfenner * ``This product includes software developed by the University of California, 1375115Sfenner * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of 1475115Sfenner * the University nor the names of its contributors may be used to endorse 1575115Sfenner * or promote products derived from this software without specific prior 1675115Sfenner * written permission. 1775115Sfenner * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED 1875115Sfenner * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF 1975115Sfenner * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. 2075115Sfenner */ 2175115Sfenner 22276788Sdelphij#define NETDISSECT_REWORKED 2375115Sfenner#ifdef HAVE_CONFIG_H 2475115Sfenner#include "config.h" 2575115Sfenner#endif 2675115Sfenner 27127668Sbms#include <tcpdump-stdinc.h> 2875115Sfenner 2975115Sfenner#include "interface.h" 3075115Sfenner#include "addrtoname.h" 3175115Sfenner#include "extract.h" /* must come after interface.h */ 3275115Sfenner 3375115Sfenner#ifndef IN_CLASSD 3475115Sfenner#define IN_CLASSD(i) (((int32_t)(i) & 0xf0000000) == 0xe0000000) 3575115Sfenner#endif 3675115Sfenner 37276788Sdelphijstatic const char tstr[] = "[|igmp]"; 38276788Sdelphij 3975115Sfenner/* (following from ipmulti/mrouted/prune.h) */ 4075115Sfenner 4175115Sfenner/* 4275115Sfenner * The packet format for a traceroute request. 4375115Sfenner */ 4475115Sfennerstruct tr_query { 45276788Sdelphij uint32_t tr_src; /* traceroute source */ 46276788Sdelphij uint32_t tr_dst; /* traceroute destination */ 47276788Sdelphij uint32_t tr_raddr; /* traceroute response address */ 48276788Sdelphij uint32_t tr_rttlqid; /* response ttl and qid */ 4975115Sfenner}; 5075115Sfenner 5175115Sfenner#define TR_GETTTL(x) (int)(((x) >> 24) & 0xff) 5275115Sfenner#define TR_GETQID(x) ((x) & 0x00ffffff) 5375115Sfenner 5475115Sfenner/* 5575115Sfenner * Traceroute response format. A traceroute response has a tr_query at the 5675115Sfenner * beginning, followed by one tr_resp for each hop taken. 5775115Sfenner */ 5875115Sfennerstruct tr_resp { 59276788Sdelphij uint32_t tr_qarr; /* query arrival time */ 60276788Sdelphij uint32_t tr_inaddr; /* incoming interface address */ 61276788Sdelphij uint32_t tr_outaddr; /* outgoing interface address */ 62276788Sdelphij uint32_t tr_rmtaddr; /* parent address in source tree */ 63276788Sdelphij uint32_t tr_vifin; /* input packet count on interface */ 64276788Sdelphij uint32_t tr_vifout; /* output packet count on interface */ 65276788Sdelphij uint32_t tr_pktcnt; /* total incoming packets for src-grp */ 66276788Sdelphij uint8_t tr_rproto; /* routing proto deployed on router */ 67276788Sdelphij uint8_t tr_fttl; /* ttl required to forward on outvif */ 68276788Sdelphij uint8_t tr_smask; /* subnet mask for src addr */ 69276788Sdelphij uint8_t tr_rflags; /* forwarding error codes */ 7075115Sfenner}; 7175115Sfenner 7275115Sfenner/* defs within mtrace */ 7375115Sfenner#define TR_QUERY 1 7475115Sfenner#define TR_RESP 2 7575115Sfenner 7675115Sfenner/* fields for tr_rflags (forwarding error codes) */ 7775115Sfenner#define TR_NO_ERR 0 7875115Sfenner#define TR_WRONG_IF 1 7975115Sfenner#define TR_PRUNED 2 8075115Sfenner#define TR_OPRUNED 3 8175115Sfenner#define TR_SCOPED 4 8275115Sfenner#define TR_NO_RTE 5 8375115Sfenner#define TR_NO_FWD 7 8475115Sfenner#define TR_NO_SPACE 0x81 8575115Sfenner#define TR_OLD_ROUTER 0x82 8675115Sfenner 8775115Sfenner/* fields for tr_rproto (routing protocol) */ 8875115Sfenner#define TR_PROTO_DVMRP 1 8975115Sfenner#define TR_PROTO_MOSPF 2 9075115Sfenner#define TR_PROTO_PIM 3 9175115Sfenner#define TR_PROTO_CBT 4 9275115Sfenner 9375115Sfenner/* igmpv3 report types */ 94276788Sdelphijstatic const struct tok igmpv3report2str[] = { 9575115Sfenner { 1, "is_in" }, 9675115Sfenner { 2, "is_ex" }, 9775115Sfenner { 3, "to_in" }, 9875115Sfenner { 4, "to_ex" }, 9975115Sfenner { 5, "allow" }, 10075115Sfenner { 6, "block" }, 10175115Sfenner { 0, NULL } 10275115Sfenner}; 10375115Sfenner 104127668Sbmsstatic void 105276788Sdelphijprint_mtrace(netdissect_options *ndo, 106276788Sdelphij register const u_char *bp, register u_int len) 10775115Sfenner{ 10898524Sfenner register const struct tr_query *tr = (const struct tr_query *)(bp + 8); 10975115Sfenner 110276788Sdelphij ND_TCHECK(*tr); 111127668Sbms if (len < 8 + sizeof (struct tr_query)) { 112276788Sdelphij ND_PRINT((ndo, " [invalid len %d]", len)); 113127668Sbms return; 114127668Sbms } 115276788Sdelphij ND_PRINT((ndo, "mtrace %u: %s to %s reply-to %s", 116127668Sbms TR_GETQID(EXTRACT_32BITS(&tr->tr_rttlqid)), 117276788Sdelphij ipaddr_string(ndo, &tr->tr_src), ipaddr_string(ndo, &tr->tr_dst), 118276788Sdelphij ipaddr_string(ndo, &tr->tr_raddr))); 119127668Sbms if (IN_CLASSD(EXTRACT_32BITS(&tr->tr_raddr))) 120276788Sdelphij ND_PRINT((ndo, " with-ttl %d", TR_GETTTL(EXTRACT_32BITS(&tr->tr_rttlqid)))); 121127668Sbms return; 122127668Sbmstrunc: 123276788Sdelphij ND_PRINT((ndo, "%s", tstr)); 12475115Sfenner} 12575115Sfenner 126127668Sbmsstatic void 127276788Sdelphijprint_mresp(netdissect_options *ndo, 128276788Sdelphij register const u_char *bp, register u_int len) 12975115Sfenner{ 13098524Sfenner register const struct tr_query *tr = (const struct tr_query *)(bp + 8); 13175115Sfenner 132276788Sdelphij ND_TCHECK(*tr); 133127668Sbms if (len < 8 + sizeof (struct tr_query)) { 134276788Sdelphij ND_PRINT((ndo, " [invalid len %d]", len)); 135127668Sbms return; 136127668Sbms } 137276788Sdelphij ND_PRINT((ndo, "mresp %lu: %s to %s reply-to %s", 138127668Sbms (u_long)TR_GETQID(EXTRACT_32BITS(&tr->tr_rttlqid)), 139276788Sdelphij ipaddr_string(ndo, &tr->tr_src), ipaddr_string(ndo, &tr->tr_dst), 140276788Sdelphij ipaddr_string(ndo, &tr->tr_raddr))); 141127668Sbms if (IN_CLASSD(EXTRACT_32BITS(&tr->tr_raddr))) 142276788Sdelphij ND_PRINT((ndo, " with-ttl %d", TR_GETTTL(EXTRACT_32BITS(&tr->tr_rttlqid)))); 143127668Sbms return; 144127668Sbmstrunc: 145276788Sdelphij ND_PRINT((ndo, "%s", tstr)); 14675115Sfenner} 14775115Sfenner 148127668Sbmsstatic void 149276788Sdelphijprint_igmpv3_report(netdissect_options *ndo, 150276788Sdelphij register const u_char *bp, register u_int len) 15175115Sfenner{ 15298524Sfenner u_int group, nsrcs, ngroups; 15398524Sfenner register u_int i, j; 15475115Sfenner 15575115Sfenner /* Minimum len is 16, and should be a multiple of 4 */ 15675115Sfenner if (len < 16 || len & 0x03) { 157276788Sdelphij ND_PRINT((ndo, " [invalid len %d]", len)); 158127668Sbms return; 15975115Sfenner } 160276788Sdelphij ND_TCHECK2(bp[6], 2); 16175115Sfenner ngroups = EXTRACT_16BITS(&bp[6]); 162276788Sdelphij ND_PRINT((ndo, ", %d group record(s)", ngroups)); 163276788Sdelphij if (ndo->ndo_vflag > 0) { 16475115Sfenner /* Print the group records */ 165127668Sbms group = 8; 16675115Sfenner for (i=0; i<ngroups; i++) { 16775115Sfenner if (len < group+8) { 168276788Sdelphij ND_PRINT((ndo, " [invalid number of groups]")); 16975115Sfenner return; 17075115Sfenner } 171276788Sdelphij ND_TCHECK2(bp[group+4], 4); 172276788Sdelphij ND_PRINT((ndo, " [gaddr %s", ipaddr_string(ndo, &bp[group+4]))); 173276788Sdelphij ND_PRINT((ndo, " %s", tok2str(igmpv3report2str, " [v3-report-#%d]", 174276788Sdelphij bp[group]))); 17575115Sfenner nsrcs = EXTRACT_16BITS(&bp[group+2]); 17675115Sfenner /* Check the number of sources and print them */ 17775115Sfenner if (len < group+8+(nsrcs<<2)) { 178276788Sdelphij ND_PRINT((ndo, " [invalid number of sources %d]", nsrcs)); 17975115Sfenner return; 18075115Sfenner } 181276788Sdelphij if (ndo->ndo_vflag == 1) 182276788Sdelphij ND_PRINT((ndo, ", %d source(s)", nsrcs)); 18375115Sfenner else { 18475115Sfenner /* Print the sources */ 185276788Sdelphij ND_PRINT((ndo, " {")); 18675115Sfenner for (j=0; j<nsrcs; j++) { 187276788Sdelphij ND_TCHECK2(bp[group+8+(j<<2)], 4); 188276788Sdelphij ND_PRINT((ndo, " %s", ipaddr_string(ndo, &bp[group+8+(j<<2)]))); 18975115Sfenner } 190276788Sdelphij ND_PRINT((ndo, " }")); 19175115Sfenner } 19275115Sfenner /* Next group record */ 19375115Sfenner group += 8 + (nsrcs << 2); 194276788Sdelphij ND_PRINT((ndo, "]")); 19575115Sfenner } 19675115Sfenner } 19775115Sfenner return; 19875115Sfennertrunc: 199276788Sdelphij ND_PRINT((ndo, "%s", tstr)); 20075115Sfenner} 20175115Sfenner 20275115Sfennerstatic void 203276788Sdelphijprint_igmpv3_query(netdissect_options *ndo, 204276788Sdelphij register const u_char *bp, register u_int len) 20575115Sfenner{ 20698524Sfenner u_int mrc; 20798524Sfenner int mrt; 20898524Sfenner u_int nsrcs; 20998524Sfenner register u_int i; 21075115Sfenner 211276788Sdelphij ND_PRINT((ndo, " v3")); 21275115Sfenner /* Minimum len is 12, and should be a multiple of 4 */ 21375115Sfenner if (len < 12 || len & 0x03) { 214276788Sdelphij ND_PRINT((ndo, " [invalid len %d]", len)); 215127668Sbms return; 21675115Sfenner } 217276788Sdelphij ND_TCHECK(bp[1]); 21898524Sfenner mrc = bp[1]; 21998524Sfenner if (mrc < 128) { 22098524Sfenner mrt = mrc; 22198524Sfenner } else { 22298524Sfenner mrt = ((mrc & 0x0f) | 0x10) << (((mrc & 0x70) >> 4) + 3); 22398524Sfenner } 22498524Sfenner if (mrc != 100) { 225276788Sdelphij ND_PRINT((ndo, " [max resp time ")); 226241235Sdelphij if (mrt < 600) { 227276788Sdelphij ND_PRINT((ndo, "%.1fs", mrt * 0.1)); 228241235Sdelphij } else { 229276788Sdelphij relts_print(ndo, mrt / 10); 230241235Sdelphij } 231276788Sdelphij ND_PRINT((ndo, "]")); 23298524Sfenner } 233276788Sdelphij ND_TCHECK2(bp[4], 4); 23475115Sfenner if (EXTRACT_32BITS(&bp[4]) == 0) 23575115Sfenner return; 236276788Sdelphij ND_PRINT((ndo, " [gaddr %s", ipaddr_string(ndo, &bp[4]))); 237276788Sdelphij ND_TCHECK2(bp[10], 2); 23875115Sfenner nsrcs = EXTRACT_16BITS(&bp[10]); 23975115Sfenner if (nsrcs > 0) { 24075115Sfenner if (len < 12 + (nsrcs << 2)) 241276788Sdelphij ND_PRINT((ndo, " [invalid number of sources]")); 242276788Sdelphij else if (ndo->ndo_vflag > 1) { 243276788Sdelphij ND_PRINT((ndo, " {")); 24475115Sfenner for (i=0; i<nsrcs; i++) { 245276788Sdelphij ND_TCHECK2(bp[12+(i<<2)], 4); 246276788Sdelphij ND_PRINT((ndo, " %s", ipaddr_string(ndo, &bp[12+(i<<2)]))); 24775115Sfenner } 248276788Sdelphij ND_PRINT((ndo, " }")); 24975115Sfenner } else 250276788Sdelphij ND_PRINT((ndo, ", %d source(s)", nsrcs)); 25175115Sfenner } 252276788Sdelphij ND_PRINT((ndo, "]")); 25375115Sfenner return; 25475115Sfennertrunc: 255276788Sdelphij ND_PRINT((ndo, "%s", tstr)); 25675115Sfenner} 25775115Sfenner 25875115Sfennervoid 259276788Sdelphijigmp_print(netdissect_options *ndo, 260276788Sdelphij register const u_char *bp, register u_int len) 26175115Sfenner{ 262235530Sdelphij struct cksum_vec vec[1]; 263235530Sdelphij 264276788Sdelphij if (ndo->ndo_qflag) { 265276788Sdelphij ND_PRINT((ndo, "igmp")); 26675115Sfenner return; 26775115Sfenner } 26875115Sfenner 269276788Sdelphij ND_TCHECK(bp[0]); 27075115Sfenner switch (bp[0]) { 27175115Sfenner case 0x11: 272276788Sdelphij ND_PRINT((ndo, "igmp query")); 27375115Sfenner if (len >= 12) 274276788Sdelphij print_igmpv3_query(ndo, bp, len); 27575115Sfenner else { 276276788Sdelphij ND_TCHECK(bp[1]); 27775115Sfenner if (bp[1]) { 278276788Sdelphij ND_PRINT((ndo, " v2")); 27975115Sfenner if (bp[1] != 100) 280276788Sdelphij ND_PRINT((ndo, " [max resp time %d]", bp[1])); 28175115Sfenner } else 282276788Sdelphij ND_PRINT((ndo, " v1")); 283276788Sdelphij ND_TCHECK2(bp[4], 4); 284127668Sbms if (EXTRACT_32BITS(&bp[4])) 285276788Sdelphij ND_PRINT((ndo, " [gaddr %s]", ipaddr_string(ndo, &bp[4]))); 28675115Sfenner if (len != 8) 287276788Sdelphij ND_PRINT((ndo, " [len %d]", len)); 28875115Sfenner } 28975115Sfenner break; 29075115Sfenner case 0x12: 291276788Sdelphij ND_TCHECK2(bp[4], 4); 292276788Sdelphij ND_PRINT((ndo, "igmp v1 report %s", ipaddr_string(ndo, &bp[4]))); 29375115Sfenner if (len != 8) 294276788Sdelphij ND_PRINT((ndo, " [len %d]", len)); 29575115Sfenner break; 29675115Sfenner case 0x16: 297276788Sdelphij ND_TCHECK2(bp[4], 4); 298276788Sdelphij ND_PRINT((ndo, "igmp v2 report %s", ipaddr_string(ndo, &bp[4]))); 29975115Sfenner break; 30075115Sfenner case 0x22: 301276788Sdelphij ND_PRINT((ndo, "igmp v3 report")); 302276788Sdelphij print_igmpv3_report(ndo, bp, len); 30375115Sfenner break; 30475115Sfenner case 0x17: 305276788Sdelphij ND_TCHECK2(bp[4], 4); 306276788Sdelphij ND_PRINT((ndo, "igmp leave %s", ipaddr_string(ndo, &bp[4]))); 30775115Sfenner break; 30875115Sfenner case 0x13: 309276788Sdelphij ND_PRINT((ndo, "igmp dvmrp")); 31075115Sfenner if (len < 8) 311276788Sdelphij ND_PRINT((ndo, " [len %d]", len)); 31275115Sfenner else 313276788Sdelphij dvmrp_print(ndo, bp, len); 31475115Sfenner break; 31575115Sfenner case 0x14: 316276788Sdelphij ND_PRINT((ndo, "igmp pimv1")); 317276788Sdelphij pimv1_print(ndo, bp, len); 31875115Sfenner break; 31975115Sfenner case 0x1e: 320276788Sdelphij print_mresp(ndo, bp, len); 32175115Sfenner break; 32275115Sfenner case 0x1f: 323276788Sdelphij print_mtrace(ndo, bp, len); 32475115Sfenner break; 32575115Sfenner default: 326276788Sdelphij ND_PRINT((ndo, "igmp-%d", bp[0])); 32775115Sfenner break; 32875115Sfenner } 32975115Sfenner 330276788Sdelphij if (ndo->ndo_vflag && ND_TTEST2(bp[0], len)) { 33175115Sfenner /* Check the IGMP checksum */ 332235530Sdelphij vec[0].ptr = bp; 333235530Sdelphij vec[0].len = len; 334235530Sdelphij if (in_cksum(vec, 1)) 335276788Sdelphij ND_PRINT((ndo, " bad igmp cksum %x!", EXTRACT_16BITS(&bp[2]))); 33675115Sfenner } 33775115Sfenner return; 33875115Sfennertrunc: 339276788Sdelphij ND_PRINT((ndo, "%s", tstr)); 34075115Sfenner} 341