sll.h revision 225736
1219019Sgabor/*- 2219019Sgabor * Copyright (c) 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997 3219019Sgabor * The Regents of the University of California. All rights reserved. 4219019Sgabor * 5219019Sgabor * This code is derived from the Stanford/CMU enet packet filter, 6219019Sgabor * (net/enet.c) distributed as part of 4.3BSD, and code contributed 7219019Sgabor * to Berkeley by Steven McCanne and Van Jacobson both of Lawrence 8219019Sgabor * Berkeley Laboratory. 9219019Sgabor * 10219019Sgabor * Redistribution and use in source and binary forms, with or without 11219019Sgabor * modification, are permitted provided that the following conditions 12219019Sgabor * are met: 13219019Sgabor * 1. Redistributions of source code must retain the above copyright 14219019Sgabor * notice, this list of conditions and the following disclaimer. 15219019Sgabor * 2. Redistributions in binary form must reproduce the above copyright 16219019Sgabor * notice, this list of conditions and the following disclaimer in the 17219019Sgabor * documentation and/or other materials provided with the distribution. 18219019Sgabor * 3. All advertising materials mentioning features or use of this software 19219019Sgabor * must display the following acknowledgement: 20219019Sgabor * This product includes software developed by the University of 21219019Sgabor * California, Berkeley and its contributors. 22219019Sgabor * 4. Neither the name of the University nor the names of its contributors 23219019Sgabor * may be used to endorse or promote products derived from this software 24219019Sgabor * without specific prior written permission. 25219019Sgabor * 26219019Sgabor * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 27219019Sgabor * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 28219019Sgabor * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 29219019Sgabor * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 30219019Sgabor * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 31219019Sgabor * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 32219019Sgabor * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 33219019Sgabor * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 34219019Sgabor * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 35219019Sgabor * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 36219019Sgabor * SUCH DAMAGE. 37219019Sgabor * 38219019Sgabor * @(#) $Header: /tcpdump/master/tcpdump/sll.h,v 1.8 2008-05-30 01:37:41 guy Exp $ (LBL) 39219019Sgabor */ 40219019Sgabor 41219019Sgabor/* 42219019Sgabor * For captures on Linux cooked sockets, we construct a fake header 43219019Sgabor * that includes: 44219019Sgabor * 45219019Sgabor * a 2-byte "packet type" which is one of: 46219019Sgabor * 47219019Sgabor * LINUX_SLL_HOST packet was sent to us 48219019Sgabor * LINUX_SLL_BROADCAST packet was broadcast 49219019Sgabor * LINUX_SLL_MULTICAST packet was multicast 50219019Sgabor * LINUX_SLL_OTHERHOST packet was sent to somebody else 51219019Sgabor * LINUX_SLL_OUTGOING packet was sent *by* us; 52219019Sgabor * 53219019Sgabor * a 2-byte Ethernet protocol field; 54219019Sgabor * 55219019Sgabor * a 2-byte link-layer type; 56219019Sgabor * 57219019Sgabor * a 2-byte link-layer address length; 58219019Sgabor * 59219019Sgabor * an 8-byte source link-layer address, whose actual length is 60219019Sgabor * specified by the previous value. 61219019Sgabor * 62219019Sgabor * All fields except for the link-layer address are in network byte order. 63219019Sgabor * 64219019Sgabor * DO NOT change the layout of this structure, or change any of the 65219019Sgabor * LINUX_SLL_ values below. If you must change the link-layer header 66219019Sgabor * for a "cooked" Linux capture, introduce a new DLT_ type (ask 67219019Sgabor * "tcpdump-workers@lists.tcpdump.org" for one, so that you don't give it 68219019Sgabor * a value that collides with a value already being used), and use the 69219019Sgabor * new header in captures of that type, so that programs that can 70219019Sgabor * handle DLT_LINUX_SLL captures will continue to handle them correctly 71219019Sgabor * without any change, and so that capture files with different headers 72219019Sgabor * can be told apart and programs that read them can dissect the 73219019Sgabor * packets in them. 74219019Sgabor * 75219019Sgabor * This structure, and the #defines below, must be the same in the 76219019Sgabor * libpcap and tcpdump versions of "sll.h". 77219019Sgabor */ 78219019Sgabor 79219019Sgabor/* 80219019Sgabor * A DLT_LINUX_SLL fake link-layer header. 81219019Sgabor */ 82219019Sgabor#define SLL_HDR_LEN 16 /* total header length */ 83219019Sgabor#define SLL_ADDRLEN 8 /* length of address field */ 84219019Sgabor 85219019Sgaborstruct sll_header { 86219019Sgabor u_int16_t sll_pkttype; /* packet type */ 87219019Sgabor u_int16_t sll_hatype; /* link-layer address type */ 88219019Sgabor u_int16_t sll_halen; /* link-layer address length */ 89219019Sgabor u_int8_t sll_addr[SLL_ADDRLEN]; /* link-layer address */ 90219019Sgabor u_int16_t sll_protocol; /* protocol */ 91219019Sgabor}; 92219019Sgabor 93219019Sgabor/* 94219019Sgabor * The LINUX_SLL_ values for "sll_pkttype"; these correspond to the 95219019Sgabor * PACKET_ values on Linux, but are defined here so that they're 96219019Sgabor * available even on systems other than Linux, and so that they 97219019Sgabor * don't change even if the PACKET_ values change. 98219019Sgabor */ 99219019Sgabor#define LINUX_SLL_HOST 0 100219019Sgabor#define LINUX_SLL_BROADCAST 1 101219019Sgabor#define LINUX_SLL_MULTICAST 2 102219019Sgabor#define LINUX_SLL_OTHERHOST 3 103219019Sgabor#define LINUX_SLL_OUTGOING 4 104219019Sgabor 105219019Sgabor/* 106219019Sgabor * The LINUX_SLL_ values for "sll_protocol"; these correspond to the 107219019Sgabor * ETH_P_ values on Linux, but are defined here so that they're 108219019Sgabor * available even on systems other than Linux. We assume, for now, 109219019Sgabor * that the ETH_P_ values won't change in Linux; if they do, then: 110219019Sgabor * 111219019Sgabor * if we don't translate them in "pcap-linux.c", capture files 112219019Sgabor * won't necessarily be readable if captured on a system that 113219019Sgabor * defines ETH_P_ values that don't match these values; 114 * 115 * if we do translate them in "pcap-linux.c", that makes life 116 * unpleasant for the BPF code generator, as the values you test 117 * for in the kernel aren't the values that you test for when 118 * reading a capture file, so the fixup code run on BPF programs 119 * handed to the kernel ends up having to do more work. 120 * 121 * Add other values here as necessary, for handling packet types that 122 * might show up on non-Ethernet, non-802.x networks. (Not all the ones 123 * in the Linux "if_ether.h" will, I suspect, actually show up in 124 * captures.) 125 */ 126#define LINUX_SLL_P_802_3 0x0001 /* Novell 802.3 frames without 802.2 LLC header */ 127#define LINUX_SLL_P_802_2 0x0004 /* 802.2 frames (not D/I/X Ethernet) */ 128