1/*
2 * Copyright (c) 1994, 1995, 1996
3 *	The Regents of the University of California.  All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 *
21 * Format and print Novell IPX packets.
22 * Contributed by Brad Parker (brad@fcr.com).
23 *
24 * $FreeBSD: releng/11.0/contrib/tcpdump/print-ipx.c 276788 2015-01-07 19:55:18Z delphij $
25 */
26
27#define NETDISSECT_REWORKED
28#ifdef HAVE_CONFIG_H
29#include "config.h"
30#endif
31
32#include <tcpdump-stdinc.h>
33
34#include <stdio.h>
35
36#include "interface.h"
37#include "addrtoname.h"
38#include "extract.h"
39
40/* well-known sockets */
41#define	IPX_SKT_NCP		0x0451
42#define	IPX_SKT_SAP		0x0452
43#define	IPX_SKT_RIP		0x0453
44#define	IPX_SKT_NETBIOS		0x0455
45#define	IPX_SKT_DIAGNOSTICS	0x0456
46#define	IPX_SKT_NWLINK_DGM	0x0553	/* NWLink datagram, may contain SMB */
47#define	IPX_SKT_EIGRP		0x85be	/* Cisco EIGRP over IPX */
48
49/* IPX transport header */
50struct ipxHdr {
51    uint16_t	cksum;		/* Checksum */
52    uint16_t	length;		/* Length, in bytes, including header */
53    uint8_t	tCtl;		/* Transport Control (i.e. hop count) */
54    uint8_t	pType;		/* Packet Type (i.e. level 2 protocol) */
55    uint16_t	dstNet[2];	/* destination net */
56    uint8_t	dstNode[6];	/* destination node */
57    uint16_t	dstSkt;		/* destination socket */
58    uint16_t	srcNet[2];	/* source net */
59    uint8_t	srcNode[6];	/* source node */
60    uint16_t	srcSkt;		/* source socket */
61};
62
63#define ipxSize	30
64
65static const char *ipxaddr_string(uint32_t, const u_char *);
66static void ipx_decode(netdissect_options *, const struct ipxHdr *, const u_char *, u_int);
67static void ipx_sap_print(netdissect_options *, const u_short *, u_int);
68static void ipx_rip_print(netdissect_options *, const u_short *, u_int);
69
70/*
71 * Print IPX datagram packets.
72 */
73void
74ipx_print(netdissect_options *ndo, const u_char *p, u_int length)
75{
76	const struct ipxHdr *ipx = (const struct ipxHdr *)p;
77
78	if (!ndo->ndo_eflag)
79		ND_PRINT((ndo, "IPX "));
80
81	ND_TCHECK(ipx->srcSkt);
82	ND_PRINT((ndo, "%s.%04x > ",
83		     ipxaddr_string(EXTRACT_32BITS(ipx->srcNet), ipx->srcNode),
84		     EXTRACT_16BITS(&ipx->srcSkt)));
85
86	ND_PRINT((ndo, "%s.%04x: ",
87		     ipxaddr_string(EXTRACT_32BITS(ipx->dstNet), ipx->dstNode),
88		     EXTRACT_16BITS(&ipx->dstSkt)));
89
90	/* take length from ipx header */
91	ND_TCHECK(ipx->length);
92	length = EXTRACT_16BITS(&ipx->length);
93
94	ipx_decode(ndo, ipx, (u_char *)ipx + ipxSize, length - ipxSize);
95	return;
96trunc:
97	ND_PRINT((ndo, "[|ipx %d]", length));
98}
99
100static const char *
101ipxaddr_string(uint32_t net, const u_char *node)
102{
103    static char line[256];
104
105    snprintf(line, sizeof(line), "%08x.%02x:%02x:%02x:%02x:%02x:%02x",
106	    net, node[0], node[1], node[2], node[3], node[4], node[5]);
107
108    return line;
109}
110
111static void
112ipx_decode(netdissect_options *ndo, const struct ipxHdr *ipx, const u_char *datap, u_int length)
113{
114    register u_short dstSkt;
115
116    dstSkt = EXTRACT_16BITS(&ipx->dstSkt);
117    switch (dstSkt) {
118      case IPX_SKT_NCP:
119	ND_PRINT((ndo, "ipx-ncp %d", length));
120	break;
121      case IPX_SKT_SAP:
122	ipx_sap_print(ndo, (u_short *)datap, length);
123	break;
124      case IPX_SKT_RIP:
125	ipx_rip_print(ndo, (u_short *)datap, length);
126	break;
127      case IPX_SKT_NETBIOS:
128	ND_PRINT((ndo, "ipx-netbios %d", length));
129#ifdef TCPDUMP_DO_SMB
130	ipx_netbios_print(ndo, datap, length);
131#endif
132	break;
133      case IPX_SKT_DIAGNOSTICS:
134	ND_PRINT((ndo, "ipx-diags %d", length));
135	break;
136      case IPX_SKT_NWLINK_DGM:
137	ND_PRINT((ndo, "ipx-nwlink-dgm %d", length));
138#ifdef TCPDUMP_DO_SMB
139	ipx_netbios_print(ndo, datap, length);
140#endif
141	break;
142      case IPX_SKT_EIGRP:
143	eigrp_print(ndo, datap, length);
144	break;
145      default:
146	ND_PRINT((ndo, "ipx-#%x %d", dstSkt, length));
147	break;
148    }
149}
150
151static void
152ipx_sap_print(netdissect_options *ndo, const u_short *ipx, u_int length)
153{
154    int command, i;
155
156    ND_TCHECK(ipx[0]);
157    command = EXTRACT_16BITS(ipx);
158    ipx++;
159    length -= 2;
160
161    switch (command) {
162      case 1:
163      case 3:
164	if (command == 1)
165	    ND_PRINT((ndo, "ipx-sap-req"));
166	else
167	    ND_PRINT((ndo, "ipx-sap-nearest-req"));
168
169	ND_TCHECK(ipx[0]);
170	ND_PRINT((ndo, " %s", ipxsap_string(htons(EXTRACT_16BITS(&ipx[0])))));
171	break;
172
173      case 2:
174      case 4:
175	if (command == 2)
176	    ND_PRINT((ndo, "ipx-sap-resp"));
177	else
178	    ND_PRINT((ndo, "ipx-sap-nearest-resp"));
179
180	for (i = 0; i < 8 && length > 0; i++) {
181	    ND_TCHECK(ipx[0]);
182	    ND_PRINT((ndo, " %s '", ipxsap_string(htons(EXTRACT_16BITS(&ipx[0])))));
183	    if (fn_printzp(ndo, (u_char *)&ipx[1], 48, ndo->ndo_snapend)) {
184		ND_PRINT((ndo, "'"));
185		goto trunc;
186	    }
187	    ND_TCHECK2(ipx[25], 10);
188	    ND_PRINT((ndo, "' addr %s",
189		ipxaddr_string(EXTRACT_32BITS(&ipx[25]), (u_char *)&ipx[27])));
190	    ipx += 32;
191	    length -= 64;
192	}
193	break;
194      default:
195	ND_PRINT((ndo, "ipx-sap-?%x", command));
196	break;
197    }
198    return;
199trunc:
200    ND_PRINT((ndo, "[|ipx %d]", length));
201}
202
203static void
204ipx_rip_print(netdissect_options *ndo, const u_short *ipx, u_int length)
205{
206    int command, i;
207
208    ND_TCHECK(ipx[0]);
209    command = EXTRACT_16BITS(ipx);
210    ipx++;
211    length -= 2;
212
213    switch (command) {
214      case 1:
215	ND_PRINT((ndo, "ipx-rip-req"));
216	if (length > 0) {
217	    ND_TCHECK(ipx[3]);
218	    ND_PRINT((ndo, " %08x/%d.%d", EXTRACT_32BITS(&ipx[0]),
219			 EXTRACT_16BITS(&ipx[2]), EXTRACT_16BITS(&ipx[3])));
220	}
221	break;
222      case 2:
223	ND_PRINT((ndo, "ipx-rip-resp"));
224	for (i = 0; i < 50 && length > 0; i++) {
225	    ND_TCHECK(ipx[3]);
226	    ND_PRINT((ndo, " %08x/%d.%d", EXTRACT_32BITS(&ipx[0]),
227			 EXTRACT_16BITS(&ipx[2]), EXTRACT_16BITS(&ipx[3])));
228
229	    ipx += 4;
230	    length -= 8;
231	}
232	break;
233      default:
234	ND_PRINT((ndo, "ipx-rip-?%x", command));
235	break;
236    }
237    return;
238trunc:
239    ND_PRINT((ndo, "[|ipx %d]", length));
240}
241