175115Sfenner/*
275115Sfenner * Copyright (c) 1988, 1989, 1990, 1991, 1993, 1994, 1995, 1996
375115Sfenner *  The Regents of the University of California.  All rights reserved.
475115Sfenner *
575115Sfenner * Redistribution and use in source and binary forms, with or without
675115Sfenner * modification, are permitted provided that: (1) source code distributions
775115Sfenner * retain the above copyright notice and this paragraph in its entirety, (2)
875115Sfenner * distributions including binary code include the above copyright notice and
975115Sfenner * this paragraph in its entirety in the documentation or other materials
1075115Sfenner * provided with the distribution, and (3) all advertising materials mentioning
1175115Sfenner * features or use of this software display the following acknowledgement:
1275115Sfenner * ``This product includes software developed by the University of California,
1375115Sfenner * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
1475115Sfenner * the University nor the names of its contributors may be used to endorse
1575115Sfenner * or promote products derived from this software without specific prior
1675115Sfenner * written permission.
1775115Sfenner * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
1875115Sfenner * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
1975115Sfenner * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
2075115Sfenner */
2175115Sfenner
22276788Sdelphij#define NETDISSECT_REWORKED
2375115Sfenner#ifdef HAVE_CONFIG_H
2475115Sfenner#include "config.h"
2575115Sfenner#endif
2675115Sfenner
27127668Sbms#include <tcpdump-stdinc.h>
2875115Sfenner
2975115Sfenner#include "interface.h"
3075115Sfenner#include "addrtoname.h"
3175115Sfenner#include "extract.h"            /* must come after interface.h */
3275115Sfenner
3375115Sfenner#ifndef IN_CLASSD
3475115Sfenner#define IN_CLASSD(i) (((int32_t)(i) & 0xf0000000) == 0xe0000000)
3575115Sfenner#endif
3675115Sfenner
37276788Sdelphijstatic const char tstr[] = "[|igmp]";
38276788Sdelphij
3975115Sfenner/* (following from ipmulti/mrouted/prune.h) */
4075115Sfenner
4175115Sfenner/*
4275115Sfenner * The packet format for a traceroute request.
4375115Sfenner */
4475115Sfennerstruct tr_query {
45276788Sdelphij    uint32_t  tr_src;          /* traceroute source */
46276788Sdelphij    uint32_t  tr_dst;          /* traceroute destination */
47276788Sdelphij    uint32_t  tr_raddr;        /* traceroute response address */
48276788Sdelphij    uint32_t  tr_rttlqid;      /* response ttl and qid */
4975115Sfenner};
5075115Sfenner
5175115Sfenner#define TR_GETTTL(x)        (int)(((x) >> 24) & 0xff)
5275115Sfenner#define TR_GETQID(x)        ((x) & 0x00ffffff)
5375115Sfenner
5475115Sfenner/*
5575115Sfenner * Traceroute response format.  A traceroute response has a tr_query at the
5675115Sfenner * beginning, followed by one tr_resp for each hop taken.
5775115Sfenner */
5875115Sfennerstruct tr_resp {
59276788Sdelphij    uint32_t tr_qarr;          /* query arrival time */
60276788Sdelphij    uint32_t tr_inaddr;        /* incoming interface address */
61276788Sdelphij    uint32_t tr_outaddr;       /* outgoing interface address */
62276788Sdelphij    uint32_t tr_rmtaddr;       /* parent address in source tree */
63276788Sdelphij    uint32_t tr_vifin;         /* input packet count on interface */
64276788Sdelphij    uint32_t tr_vifout;        /* output packet count on interface */
65276788Sdelphij    uint32_t tr_pktcnt;        /* total incoming packets for src-grp */
66276788Sdelphij    uint8_t  tr_rproto;      /* routing proto deployed on router */
67276788Sdelphij    uint8_t  tr_fttl;        /* ttl required to forward on outvif */
68276788Sdelphij    uint8_t  tr_smask;       /* subnet mask for src addr */
69276788Sdelphij    uint8_t  tr_rflags;      /* forwarding error codes */
7075115Sfenner};
7175115Sfenner
7275115Sfenner/* defs within mtrace */
7375115Sfenner#define TR_QUERY 1
7475115Sfenner#define TR_RESP 2
7575115Sfenner
7675115Sfenner/* fields for tr_rflags (forwarding error codes) */
7775115Sfenner#define TR_NO_ERR   0
7875115Sfenner#define TR_WRONG_IF 1
7975115Sfenner#define TR_PRUNED   2
8075115Sfenner#define TR_OPRUNED  3
8175115Sfenner#define TR_SCOPED   4
8275115Sfenner#define TR_NO_RTE   5
8375115Sfenner#define TR_NO_FWD   7
8475115Sfenner#define TR_NO_SPACE 0x81
8575115Sfenner#define TR_OLD_ROUTER   0x82
8675115Sfenner
8775115Sfenner/* fields for tr_rproto (routing protocol) */
8875115Sfenner#define TR_PROTO_DVMRP  1
8975115Sfenner#define TR_PROTO_MOSPF  2
9075115Sfenner#define TR_PROTO_PIM    3
9175115Sfenner#define TR_PROTO_CBT    4
9275115Sfenner
9375115Sfenner/* igmpv3 report types */
94276788Sdelphijstatic const struct tok igmpv3report2str[] = {
9575115Sfenner	{ 1,	"is_in" },
9675115Sfenner	{ 2,	"is_ex" },
9775115Sfenner	{ 3,	"to_in" },
9875115Sfenner	{ 4,	"to_ex" },
9975115Sfenner	{ 5,	"allow" },
10075115Sfenner	{ 6,	"block" },
10175115Sfenner	{ 0,	NULL }
10275115Sfenner};
10375115Sfenner
104127668Sbmsstatic void
105276788Sdelphijprint_mtrace(netdissect_options *ndo,
106276788Sdelphij             register const u_char *bp, register u_int len)
10775115Sfenner{
10898524Sfenner    register const struct tr_query *tr = (const struct tr_query *)(bp + 8);
10975115Sfenner
110276788Sdelphij    ND_TCHECK(*tr);
111127668Sbms    if (len < 8 + sizeof (struct tr_query)) {
112276788Sdelphij	ND_PRINT((ndo, " [invalid len %d]", len));
113127668Sbms	return;
114127668Sbms    }
115276788Sdelphij    ND_PRINT((ndo, "mtrace %u: %s to %s reply-to %s",
116127668Sbms        TR_GETQID(EXTRACT_32BITS(&tr->tr_rttlqid)),
117276788Sdelphij        ipaddr_string(ndo, &tr->tr_src), ipaddr_string(ndo, &tr->tr_dst),
118276788Sdelphij        ipaddr_string(ndo, &tr->tr_raddr)));
119127668Sbms    if (IN_CLASSD(EXTRACT_32BITS(&tr->tr_raddr)))
120276788Sdelphij        ND_PRINT((ndo, " with-ttl %d", TR_GETTTL(EXTRACT_32BITS(&tr->tr_rttlqid))));
121127668Sbms    return;
122127668Sbmstrunc:
123276788Sdelphij    ND_PRINT((ndo, "%s", tstr));
12475115Sfenner}
12575115Sfenner
126127668Sbmsstatic void
127276788Sdelphijprint_mresp(netdissect_options *ndo,
128276788Sdelphij            register const u_char *bp, register u_int len)
12975115Sfenner{
13098524Sfenner    register const struct tr_query *tr = (const struct tr_query *)(bp + 8);
13175115Sfenner
132276788Sdelphij    ND_TCHECK(*tr);
133127668Sbms    if (len < 8 + sizeof (struct tr_query)) {
134276788Sdelphij	ND_PRINT((ndo, " [invalid len %d]", len));
135127668Sbms	return;
136127668Sbms    }
137276788Sdelphij    ND_PRINT((ndo, "mresp %lu: %s to %s reply-to %s",
138127668Sbms        (u_long)TR_GETQID(EXTRACT_32BITS(&tr->tr_rttlqid)),
139276788Sdelphij        ipaddr_string(ndo, &tr->tr_src), ipaddr_string(ndo, &tr->tr_dst),
140276788Sdelphij        ipaddr_string(ndo, &tr->tr_raddr)));
141127668Sbms    if (IN_CLASSD(EXTRACT_32BITS(&tr->tr_raddr)))
142276788Sdelphij        ND_PRINT((ndo, " with-ttl %d", TR_GETTTL(EXTRACT_32BITS(&tr->tr_rttlqid))));
143127668Sbms    return;
144127668Sbmstrunc:
145276788Sdelphij    ND_PRINT((ndo, "%s", tstr));
14675115Sfenner}
14775115Sfenner
148127668Sbmsstatic void
149276788Sdelphijprint_igmpv3_report(netdissect_options *ndo,
150276788Sdelphij                    register const u_char *bp, register u_int len)
15175115Sfenner{
15298524Sfenner    u_int group, nsrcs, ngroups;
15398524Sfenner    register u_int i, j;
15475115Sfenner
15575115Sfenner    /* Minimum len is 16, and should be a multiple of 4 */
15675115Sfenner    if (len < 16 || len & 0x03) {
157276788Sdelphij	ND_PRINT((ndo, " [invalid len %d]", len));
158127668Sbms	return;
15975115Sfenner    }
160276788Sdelphij    ND_TCHECK2(bp[6], 2);
16175115Sfenner    ngroups = EXTRACT_16BITS(&bp[6]);
162276788Sdelphij    ND_PRINT((ndo, ", %d group record(s)", ngroups));
163276788Sdelphij    if (ndo->ndo_vflag > 0) {
16475115Sfenner	/* Print the group records */
165127668Sbms	group = 8;
16675115Sfenner        for (i=0; i<ngroups; i++) {
16775115Sfenner	    if (len < group+8) {
168276788Sdelphij		ND_PRINT((ndo, " [invalid number of groups]"));
16975115Sfenner		return;
17075115Sfenner	    }
171276788Sdelphij	    ND_TCHECK2(bp[group+4], 4);
172276788Sdelphij            ND_PRINT((ndo, " [gaddr %s", ipaddr_string(ndo, &bp[group+4])));
173276788Sdelphij	    ND_PRINT((ndo, " %s", tok2str(igmpv3report2str, " [v3-report-#%d]",
174276788Sdelphij								bp[group])));
17575115Sfenner            nsrcs = EXTRACT_16BITS(&bp[group+2]);
17675115Sfenner	    /* Check the number of sources and print them */
17775115Sfenner	    if (len < group+8+(nsrcs<<2)) {
178276788Sdelphij		ND_PRINT((ndo, " [invalid number of sources %d]", nsrcs));
17975115Sfenner		return;
18075115Sfenner	    }
181276788Sdelphij            if (ndo->ndo_vflag == 1)
182276788Sdelphij                ND_PRINT((ndo, ", %d source(s)", nsrcs));
18375115Sfenner            else {
18475115Sfenner		/* Print the sources */
185276788Sdelphij                ND_PRINT((ndo, " {"));
18675115Sfenner                for (j=0; j<nsrcs; j++) {
187276788Sdelphij		    ND_TCHECK2(bp[group+8+(j<<2)], 4);
188276788Sdelphij		    ND_PRINT((ndo, " %s", ipaddr_string(ndo, &bp[group+8+(j<<2)])));
18975115Sfenner		}
190276788Sdelphij                ND_PRINT((ndo, " }"));
19175115Sfenner            }
19275115Sfenner	    /* Next group record */
19375115Sfenner            group += 8 + (nsrcs << 2);
194276788Sdelphij	    ND_PRINT((ndo, "]"));
19575115Sfenner        }
19675115Sfenner    }
19775115Sfenner    return;
19875115Sfennertrunc:
199276788Sdelphij    ND_PRINT((ndo, "%s", tstr));
20075115Sfenner}
20175115Sfenner
20275115Sfennerstatic void
203276788Sdelphijprint_igmpv3_query(netdissect_options *ndo,
204276788Sdelphij                   register const u_char *bp, register u_int len)
20575115Sfenner{
20698524Sfenner    u_int mrc;
20798524Sfenner    int mrt;
20898524Sfenner    u_int nsrcs;
20998524Sfenner    register u_int i;
21075115Sfenner
211276788Sdelphij    ND_PRINT((ndo, " v3"));
21275115Sfenner    /* Minimum len is 12, and should be a multiple of 4 */
21375115Sfenner    if (len < 12 || len & 0x03) {
214276788Sdelphij	ND_PRINT((ndo, " [invalid len %d]", len));
215127668Sbms	return;
21675115Sfenner    }
217276788Sdelphij    ND_TCHECK(bp[1]);
21898524Sfenner    mrc = bp[1];
21998524Sfenner    if (mrc < 128) {
22098524Sfenner	mrt = mrc;
22198524Sfenner    } else {
22298524Sfenner        mrt = ((mrc & 0x0f) | 0x10) << (((mrc & 0x70) >> 4) + 3);
22398524Sfenner    }
22498524Sfenner    if (mrc != 100) {
225276788Sdelphij	ND_PRINT((ndo, " [max resp time "));
226241235Sdelphij        if (mrt < 600) {
227276788Sdelphij            ND_PRINT((ndo, "%.1fs", mrt * 0.1));
228241235Sdelphij        } else {
229276788Sdelphij            relts_print(ndo, mrt / 10);
230241235Sdelphij        }
231276788Sdelphij	ND_PRINT((ndo, "]"));
23298524Sfenner    }
233276788Sdelphij    ND_TCHECK2(bp[4], 4);
23475115Sfenner    if (EXTRACT_32BITS(&bp[4]) == 0)
23575115Sfenner	return;
236276788Sdelphij    ND_PRINT((ndo, " [gaddr %s", ipaddr_string(ndo, &bp[4])));
237276788Sdelphij    ND_TCHECK2(bp[10], 2);
23875115Sfenner    nsrcs = EXTRACT_16BITS(&bp[10]);
23975115Sfenner    if (nsrcs > 0) {
24075115Sfenner	if (len < 12 + (nsrcs << 2))
241276788Sdelphij	    ND_PRINT((ndo, " [invalid number of sources]"));
242276788Sdelphij	else if (ndo->ndo_vflag > 1) {
243276788Sdelphij	    ND_PRINT((ndo, " {"));
24475115Sfenner	    for (i=0; i<nsrcs; i++) {
245276788Sdelphij		ND_TCHECK2(bp[12+(i<<2)], 4);
246276788Sdelphij		ND_PRINT((ndo, " %s", ipaddr_string(ndo, &bp[12+(i<<2)])));
24775115Sfenner	    }
248276788Sdelphij	    ND_PRINT((ndo, " }"));
24975115Sfenner	} else
250276788Sdelphij	    ND_PRINT((ndo, ", %d source(s)", nsrcs));
25175115Sfenner    }
252276788Sdelphij    ND_PRINT((ndo, "]"));
25375115Sfenner    return;
25475115Sfennertrunc:
255276788Sdelphij    ND_PRINT((ndo, "%s", tstr));
25675115Sfenner}
25775115Sfenner
25875115Sfennervoid
259276788Sdelphijigmp_print(netdissect_options *ndo,
260276788Sdelphij           register const u_char *bp, register u_int len)
26175115Sfenner{
262235530Sdelphij    struct cksum_vec vec[1];
263235530Sdelphij
264276788Sdelphij    if (ndo->ndo_qflag) {
265276788Sdelphij        ND_PRINT((ndo, "igmp"));
26675115Sfenner        return;
26775115Sfenner    }
26875115Sfenner
269276788Sdelphij    ND_TCHECK(bp[0]);
27075115Sfenner    switch (bp[0]) {
27175115Sfenner    case 0x11:
272276788Sdelphij        ND_PRINT((ndo, "igmp query"));
27375115Sfenner	if (len >= 12)
274276788Sdelphij	    print_igmpv3_query(ndo, bp, len);
27575115Sfenner	else {
276276788Sdelphij            ND_TCHECK(bp[1]);
27775115Sfenner	    if (bp[1]) {
278276788Sdelphij		ND_PRINT((ndo, " v2"));
27975115Sfenner		if (bp[1] != 100)
280276788Sdelphij		    ND_PRINT((ndo, " [max resp time %d]", bp[1]));
28175115Sfenner	    } else
282276788Sdelphij		ND_PRINT((ndo, " v1"));
283276788Sdelphij            ND_TCHECK2(bp[4], 4);
284127668Sbms	    if (EXTRACT_32BITS(&bp[4]))
285276788Sdelphij                ND_PRINT((ndo, " [gaddr %s]", ipaddr_string(ndo, &bp[4])));
28675115Sfenner            if (len != 8)
287276788Sdelphij                ND_PRINT((ndo, " [len %d]", len));
28875115Sfenner	}
28975115Sfenner        break;
29075115Sfenner    case 0x12:
291276788Sdelphij        ND_TCHECK2(bp[4], 4);
292276788Sdelphij        ND_PRINT((ndo, "igmp v1 report %s", ipaddr_string(ndo, &bp[4])));
29375115Sfenner        if (len != 8)
294276788Sdelphij            ND_PRINT((ndo, " [len %d]", len));
29575115Sfenner        break;
29675115Sfenner    case 0x16:
297276788Sdelphij        ND_TCHECK2(bp[4], 4);
298276788Sdelphij        ND_PRINT((ndo, "igmp v2 report %s", ipaddr_string(ndo, &bp[4])));
29975115Sfenner        break;
30075115Sfenner    case 0x22:
301276788Sdelphij        ND_PRINT((ndo, "igmp v3 report"));
302276788Sdelphij	print_igmpv3_report(ndo, bp, len);
30375115Sfenner        break;
30475115Sfenner    case 0x17:
305276788Sdelphij        ND_TCHECK2(bp[4], 4);
306276788Sdelphij        ND_PRINT((ndo, "igmp leave %s", ipaddr_string(ndo, &bp[4])));
30775115Sfenner        break;
30875115Sfenner    case 0x13:
309276788Sdelphij        ND_PRINT((ndo, "igmp dvmrp"));
31075115Sfenner        if (len < 8)
311276788Sdelphij            ND_PRINT((ndo, " [len %d]", len));
31275115Sfenner        else
313276788Sdelphij            dvmrp_print(ndo, bp, len);
31475115Sfenner        break;
31575115Sfenner    case 0x14:
316276788Sdelphij        ND_PRINT((ndo, "igmp pimv1"));
317276788Sdelphij        pimv1_print(ndo, bp, len);
31875115Sfenner        break;
31975115Sfenner    case 0x1e:
320276788Sdelphij        print_mresp(ndo, bp, len);
32175115Sfenner        break;
32275115Sfenner    case 0x1f:
323276788Sdelphij        print_mtrace(ndo, bp, len);
32475115Sfenner        break;
32575115Sfenner    default:
326276788Sdelphij        ND_PRINT((ndo, "igmp-%d", bp[0]));
32775115Sfenner        break;
32875115Sfenner    }
32975115Sfenner
330276788Sdelphij    if (ndo->ndo_vflag && ND_TTEST2(bp[0], len)) {
33175115Sfenner        /* Check the IGMP checksum */
332235530Sdelphij        vec[0].ptr = bp;
333235530Sdelphij        vec[0].len = len;
334235530Sdelphij        if (in_cksum(vec, 1))
335276788Sdelphij            ND_PRINT((ndo, " bad igmp cksum %x!", EXTRACT_16BITS(&bp[2])));
33675115Sfenner    }
33775115Sfenner    return;
33875115Sfennertrunc:
339276788Sdelphij    ND_PRINT((ndo, "%s", tstr));
34075115Sfenner}
341