xref: /freebsd/contrib/tcpdump/print-icmp6.c (revision 3416500aef140042c64bc149cb1ec6620483bc44)
1 /*
2  * Copyright (c) 1988, 1989, 1990, 1991, 1993, 1994
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that: (1) source code distributions
7  * retain the above copyright notice and this paragraph in its entirety, (2)
8  * distributions including binary code include the above copyright notice and
9  * this paragraph in its entirety in the documentation or other materials
10  * provided with the distribution, and (3) all advertising materials mentioning
11  * features or use of this software display the following acknowledgement:
12  * ``This product includes software developed by the University of California,
13  * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14  * the University nor the names of its contributors may be used to endorse
15  * or promote products derived from this software without specific prior
16  * written permission.
17  * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18  * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20  */
21 
22 /* \summary: IPv6 Internet Control Message Protocol (ICMPv6) printer */
23 
24 #ifdef HAVE_CONFIG_H
25 #include "config.h"
26 #endif
27 
28 #include <netdissect-stdinc.h>
29 
30 #include <stdio.h>
31 #include <string.h>
32 
33 #include "netdissect.h"
34 #include "addrtoname.h"
35 #include "addrtostr.h"
36 #include "extract.h"
37 
38 #include "ip6.h"
39 #include "ipproto.h"
40 
41 #include "udp.h"
42 #include "ah.h"
43 
44 /*	NetBSD: icmp6.h,v 1.13 2000/08/03 16:30:37 itojun Exp 	*/
45 /*	$KAME: icmp6.h,v 1.22 2000/08/03 15:25:16 jinmei Exp $	*/
46 
47 /*
48  * Copyright (C) 1995, 1996, 1997, and 1998 WIDE Project.
49  * All rights reserved.
50  *
51  * Redistribution and use in source and binary forms, with or without
52  * modification, are permitted provided that the following conditions
53  * are met:
54  * 1. Redistributions of source code must retain the above copyright
55  *    notice, this list of conditions and the following disclaimer.
56  * 2. Redistributions in binary form must reproduce the above copyright
57  *    notice, this list of conditions and the following disclaimer in the
58  *    documentation and/or other materials provided with the distribution.
59  * 3. Neither the name of the project nor the names of its contributors
60  *    may be used to endorse or promote products derived from this software
61  *    without specific prior written permission.
62  *
63  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
64  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
65  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
66  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
67  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
68  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
69  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
70  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
71  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
72  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
73  * SUCH DAMAGE.
74  */
75 
76 struct icmp6_hdr {
77 	uint8_t		icmp6_type;	/* type field */
78 	uint8_t		icmp6_code;	/* code field */
79 	uint16_t	icmp6_cksum;	/* checksum field */
80 	union {
81 		uint32_t	icmp6_un_data32[1]; /* type-specific field */
82 		uint16_t	icmp6_un_data16[2]; /* type-specific field */
83 		uint8_t		icmp6_un_data8[4];  /* type-specific field */
84 	} icmp6_dataun;
85 };
86 
87 #define icmp6_data32	icmp6_dataun.icmp6_un_data32
88 #define icmp6_data16	icmp6_dataun.icmp6_un_data16
89 #define icmp6_data8	icmp6_dataun.icmp6_un_data8
90 #define icmp6_pptr	icmp6_data32[0]		/* parameter prob */
91 #define icmp6_mtu	icmp6_data32[0]		/* packet too big */
92 #define icmp6_id	icmp6_data16[0]		/* echo request/reply */
93 #define icmp6_seq	icmp6_data16[1]		/* echo request/reply */
94 #define icmp6_maxdelay	icmp6_data16[0]		/* mcast group membership */
95 
96 #define ICMP6_DST_UNREACH		1	/* dest unreachable, codes: */
97 #define ICMP6_PACKET_TOO_BIG		2	/* packet too big */
98 #define ICMP6_TIME_EXCEEDED		3	/* time exceeded, code: */
99 #define ICMP6_PARAM_PROB		4	/* ip6 header bad */
100 
101 #define ICMP6_ECHO_REQUEST		128	/* echo service */
102 #define ICMP6_ECHO_REPLY		129	/* echo reply */
103 #define ICMP6_MEMBERSHIP_QUERY		130	/* group membership query */
104 #define MLD6_LISTENER_QUERY		130 	/* multicast listener query */
105 #define ICMP6_MEMBERSHIP_REPORT		131	/* group membership report */
106 #define MLD6_LISTENER_REPORT		131	/* multicast listener report */
107 #define ICMP6_MEMBERSHIP_REDUCTION	132	/* group membership termination */
108 #define MLD6_LISTENER_DONE		132	/* multicast listener done */
109 
110 #define ND_ROUTER_SOLICIT		133	/* router solicitation */
111 #define ND_ROUTER_ADVERT		134	/* router advertisement */
112 #define ND_NEIGHBOR_SOLICIT		135	/* neighbor solicitation */
113 #define ND_NEIGHBOR_ADVERT		136	/* neighbor advertisement */
114 #define ND_REDIRECT			137	/* redirect */
115 
116 #define ICMP6_ROUTER_RENUMBERING	138	/* router renumbering */
117 
118 #define ICMP6_WRUREQUEST		139	/* who are you request */
119 #define ICMP6_WRUREPLY			140	/* who are you reply */
120 #define ICMP6_FQDN_QUERY		139	/* FQDN query */
121 #define ICMP6_FQDN_REPLY		140	/* FQDN reply */
122 #define ICMP6_NI_QUERY			139	/* node information request */
123 #define ICMP6_NI_REPLY			140	/* node information reply */
124 #define IND_SOLICIT			141	/* inverse neighbor solicitation */
125 #define IND_ADVERT			142	/* inverse neighbor advertisement */
126 
127 #define ICMP6_V2_MEMBERSHIP_REPORT	143	/* v2 membership report */
128 #define MLDV2_LISTENER_REPORT		143	/* v2 multicast listener report */
129 #define ICMP6_HADISCOV_REQUEST		144
130 #define ICMP6_HADISCOV_REPLY		145
131 #define ICMP6_MOBILEPREFIX_SOLICIT	146
132 #define ICMP6_MOBILEPREFIX_ADVERT	147
133 
134 #define MLD6_MTRACE_RESP		200	/* mtrace response(to sender) */
135 #define MLD6_MTRACE			201	/* mtrace messages */
136 
137 #define ICMP6_MAXTYPE			201
138 
139 #define ICMP6_DST_UNREACH_NOROUTE	0	/* no route to destination */
140 #define ICMP6_DST_UNREACH_ADMIN	 	1	/* administratively prohibited */
141 #define ICMP6_DST_UNREACH_NOTNEIGHBOR	2	/* not a neighbor(obsolete) */
142 #define ICMP6_DST_UNREACH_BEYONDSCOPE	2	/* beyond scope of source address */
143 #define ICMP6_DST_UNREACH_ADDR		3	/* address unreachable */
144 #define ICMP6_DST_UNREACH_NOPORT	4	/* port unreachable */
145 
146 #define ICMP6_TIME_EXCEED_TRANSIT 	0	/* ttl==0 in transit */
147 #define ICMP6_TIME_EXCEED_REASSEMBLY	1	/* ttl==0 in reass */
148 
149 #define ICMP6_PARAMPROB_HEADER 	 	0	/* erroneous header field */
150 #define ICMP6_PARAMPROB_NEXTHEADER	1	/* unrecognized next header */
151 #define ICMP6_PARAMPROB_OPTION		2	/* unrecognized option */
152 
153 #define ICMP6_INFOMSG_MASK		0x80	/* all informational messages */
154 
155 #define ICMP6_NI_SUBJ_IPV6	0	/* Query Subject is an IPv6 address */
156 #define ICMP6_NI_SUBJ_FQDN	1	/* Query Subject is a Domain name */
157 #define ICMP6_NI_SUBJ_IPV4	2	/* Query Subject is an IPv4 address */
158 
159 #define ICMP6_NI_SUCCESS	0	/* node information successful reply */
160 #define ICMP6_NI_REFUSED	1	/* node information request is refused */
161 #define ICMP6_NI_UNKNOWN	2	/* unknown Qtype */
162 
163 #define ICMP6_ROUTER_RENUMBERING_COMMAND  0	/* rr command */
164 #define ICMP6_ROUTER_RENUMBERING_RESULT   1	/* rr result */
165 #define ICMP6_ROUTER_RENUMBERING_SEQNUM_RESET   255	/* rr seq num reset */
166 
167 /* Used in kernel only */
168 #define ND_REDIRECT_ONLINK	0	/* redirect to an on-link node */
169 #define ND_REDIRECT_ROUTER	1	/* redirect to a better router */
170 
171 /*
172  * Multicast Listener Discovery
173  */
174 struct mld6_hdr {
175 	struct icmp6_hdr	mld6_hdr;
176 	struct in6_addr		mld6_addr; /* multicast address */
177 };
178 
179 #define mld6_type	mld6_hdr.icmp6_type
180 #define mld6_code	mld6_hdr.icmp6_code
181 #define mld6_cksum	mld6_hdr.icmp6_cksum
182 #define mld6_maxdelay	mld6_hdr.icmp6_data16[0]
183 #define mld6_reserved	mld6_hdr.icmp6_data16[1]
184 
185 #define MLD_MINLEN	24
186 #define MLDV2_MINLEN	28
187 
188 /*
189  * Neighbor Discovery
190  */
191 
192 struct nd_router_solicit {	/* router solicitation */
193 	struct icmp6_hdr 	nd_rs_hdr;
194 	/* could be followed by options */
195 };
196 
197 #define nd_rs_type	nd_rs_hdr.icmp6_type
198 #define nd_rs_code	nd_rs_hdr.icmp6_code
199 #define nd_rs_cksum	nd_rs_hdr.icmp6_cksum
200 #define nd_rs_reserved	nd_rs_hdr.icmp6_data32[0]
201 
202 struct nd_router_advert {	/* router advertisement */
203 	struct icmp6_hdr	nd_ra_hdr;
204 	uint32_t		nd_ra_reachable;	/* reachable time */
205 	uint32_t		nd_ra_retransmit;	/* retransmit timer */
206 	/* could be followed by options */
207 };
208 
209 #define nd_ra_type		nd_ra_hdr.icmp6_type
210 #define nd_ra_code		nd_ra_hdr.icmp6_code
211 #define nd_ra_cksum		nd_ra_hdr.icmp6_cksum
212 #define nd_ra_curhoplimit	nd_ra_hdr.icmp6_data8[0]
213 #define nd_ra_flags_reserved	nd_ra_hdr.icmp6_data8[1]
214 #define ND_RA_FLAG_MANAGED	0x80
215 #define ND_RA_FLAG_OTHER	0x40
216 #define ND_RA_FLAG_HOME_AGENT	0x20
217 
218 /*
219  * Router preference values based on draft-draves-ipngwg-router-selection-01.
220  * These are non-standard definitions.
221  */
222 #define ND_RA_FLAG_RTPREF_MASK	0x18 /* 00011000 */
223 
224 #define ND_RA_FLAG_RTPREF_HIGH	0x08 /* 00001000 */
225 #define ND_RA_FLAG_RTPREF_MEDIUM	0x00 /* 00000000 */
226 #define ND_RA_FLAG_RTPREF_LOW	0x18 /* 00011000 */
227 #define ND_RA_FLAG_RTPREF_RSV	0x10 /* 00010000 */
228 
229 #define nd_ra_router_lifetime	nd_ra_hdr.icmp6_data16[1]
230 
231 struct nd_neighbor_solicit {	/* neighbor solicitation */
232 	struct icmp6_hdr	nd_ns_hdr;
233 	struct in6_addr		nd_ns_target;	/*target address */
234 	/* could be followed by options */
235 };
236 
237 #define nd_ns_type		nd_ns_hdr.icmp6_type
238 #define nd_ns_code		nd_ns_hdr.icmp6_code
239 #define nd_ns_cksum		nd_ns_hdr.icmp6_cksum
240 #define nd_ns_reserved		nd_ns_hdr.icmp6_data32[0]
241 
242 struct nd_neighbor_advert {	/* neighbor advertisement */
243 	struct icmp6_hdr	nd_na_hdr;
244 	struct in6_addr		nd_na_target;	/* target address */
245 	/* could be followed by options */
246 };
247 
248 #define nd_na_type		nd_na_hdr.icmp6_type
249 #define nd_na_code		nd_na_hdr.icmp6_code
250 #define nd_na_cksum		nd_na_hdr.icmp6_cksum
251 #define nd_na_flags_reserved	nd_na_hdr.icmp6_data32[0]
252 
253 #define ND_NA_FLAG_ROUTER		0x80000000
254 #define ND_NA_FLAG_SOLICITED		0x40000000
255 #define ND_NA_FLAG_OVERRIDE		0x20000000
256 
257 struct nd_redirect {		/* redirect */
258 	struct icmp6_hdr	nd_rd_hdr;
259 	struct in6_addr		nd_rd_target;	/* target address */
260 	struct in6_addr		nd_rd_dst;	/* destination address */
261 	/* could be followed by options */
262 };
263 
264 #define nd_rd_type		nd_rd_hdr.icmp6_type
265 #define nd_rd_code		nd_rd_hdr.icmp6_code
266 #define nd_rd_cksum		nd_rd_hdr.icmp6_cksum
267 #define nd_rd_reserved		nd_rd_hdr.icmp6_data32[0]
268 
269 struct nd_opt_hdr {		/* Neighbor discovery option header */
270 	uint8_t		nd_opt_type;
271 	uint8_t		nd_opt_len;
272 	/* followed by option specific data*/
273 };
274 
275 #define ND_OPT_SOURCE_LINKADDR		1
276 #define ND_OPT_TARGET_LINKADDR		2
277 #define ND_OPT_PREFIX_INFORMATION	3
278 #define ND_OPT_REDIRECTED_HEADER	4
279 #define ND_OPT_MTU			5
280 #define ND_OPT_ADVINTERVAL		7
281 #define ND_OPT_HOMEAGENT_INFO		8
282 #define ND_OPT_ROUTE_INFO		24	/* RFC4191 */
283 #define ND_OPT_RDNSS			25
284 #define ND_OPT_DNSSL			31
285 
286 struct nd_opt_prefix_info {	/* prefix information */
287 	nd_uint8_t		nd_opt_pi_type;
288 	nd_uint8_t		nd_opt_pi_len;
289 	nd_uint8_t		nd_opt_pi_prefix_len;
290 	nd_uint8_t		nd_opt_pi_flags_reserved;
291 	nd_uint32_t		nd_opt_pi_valid_time;
292 	nd_uint32_t		nd_opt_pi_preferred_time;
293 	nd_uint32_t		nd_opt_pi_reserved2;
294 	struct in6_addr	nd_opt_pi_prefix;
295 };
296 
297 #define ND_OPT_PI_FLAG_ONLINK		0x80
298 #define ND_OPT_PI_FLAG_AUTO		0x40
299 #define ND_OPT_PI_FLAG_ROUTER		0x20	/*2292bis*/
300 
301 struct nd_opt_rd_hdr {         /* redirected header */
302 	uint8_t		nd_opt_rh_type;
303 	uint8_t		nd_opt_rh_len;
304 	uint16_t	nd_opt_rh_reserved1;
305 	uint32_t	nd_opt_rh_reserved2;
306 	/* followed by IP header and data */
307 };
308 
309 struct nd_opt_mtu {		/* MTU option */
310 	uint8_t		nd_opt_mtu_type;
311 	uint8_t		nd_opt_mtu_len;
312 	uint16_t	nd_opt_mtu_reserved;
313 	uint32_t	nd_opt_mtu_mtu;
314 };
315 
316 struct nd_opt_rdnss {		/* RDNSS RFC 6106 5.1 */
317 	uint8_t		nd_opt_rdnss_type;
318 	uint8_t		nd_opt_rdnss_len;
319 	uint16_t	nd_opt_rdnss_reserved;
320 	uint32_t	nd_opt_rdnss_lifetime;
321 	struct in6_addr nd_opt_rdnss_addr[1];	/* variable-length */
322 };
323 
324 struct nd_opt_dnssl {		/* DNSSL RFC 6106 5.2 */
325 	uint8_t  nd_opt_dnssl_type;
326 	uint8_t  nd_opt_dnssl_len;
327 	uint16_t nd_opt_dnssl_reserved;
328 	uint32_t nd_opt_dnssl_lifetime;
329 	/* followed by list of DNS search domains, variable-length */
330 };
331 
332 struct nd_opt_advinterval {	/* Advertisement interval option */
333 	uint8_t		nd_opt_adv_type;
334 	uint8_t		nd_opt_adv_len;
335 	uint16_t	nd_opt_adv_reserved;
336 	uint32_t	nd_opt_adv_interval;
337 };
338 
339 struct nd_opt_homeagent_info {	/* Home Agent info */
340 	uint8_t		nd_opt_hai_type;
341 	uint8_t		nd_opt_hai_len;
342 	uint16_t	nd_opt_hai_reserved;
343 	int16_t		nd_opt_hai_preference;
344 	uint16_t	nd_opt_hai_lifetime;
345 };
346 
347 struct nd_opt_route_info {	/* route info */
348 	uint8_t		nd_opt_rti_type;
349 	uint8_t		nd_opt_rti_len;
350 	uint8_t		nd_opt_rti_prefixlen;
351 	uint8_t		nd_opt_rti_flags;
352 	uint32_t	nd_opt_rti_lifetime;
353 	/* prefix follows */
354 };
355 
356 /*
357  * icmp6 namelookup
358  */
359 
360 struct icmp6_namelookup {
361 	struct icmp6_hdr 	icmp6_nl_hdr;
362 	uint8_t		icmp6_nl_nonce[8];
363 	int32_t		icmp6_nl_ttl;
364 #if 0
365 	uint8_t		icmp6_nl_len;
366 	uint8_t		icmp6_nl_name[3];
367 #endif
368 	/* could be followed by options */
369 };
370 
371 /*
372  * icmp6 node information
373  */
374 struct icmp6_nodeinfo {
375 	struct icmp6_hdr icmp6_ni_hdr;
376 	uint8_t icmp6_ni_nonce[8];
377 	/* could be followed by reply data */
378 };
379 
380 #define ni_type		icmp6_ni_hdr.icmp6_type
381 #define ni_code		icmp6_ni_hdr.icmp6_code
382 #define ni_cksum	icmp6_ni_hdr.icmp6_cksum
383 #define ni_qtype	icmp6_ni_hdr.icmp6_data16[0]
384 #define ni_flags	icmp6_ni_hdr.icmp6_data16[1]
385 
386 #define NI_QTYPE_NOOP		0 /* NOOP  */
387 #define NI_QTYPE_SUPTYPES	1 /* Supported Qtypes */
388 #define NI_QTYPE_FQDN		2 /* FQDN (draft 04) */
389 #define NI_QTYPE_DNSNAME	2 /* DNS Name */
390 #define NI_QTYPE_NODEADDR	3 /* Node Addresses */
391 #define NI_QTYPE_IPV4ADDR	4 /* IPv4 Addresses */
392 
393 /* network endian */
394 #define NI_SUPTYPE_FLAG_COMPRESS	((uint16_t)htons(0x1))
395 #define NI_FQDN_FLAG_VALIDTTL		((uint16_t)htons(0x1))
396 
397 /* network endian */
398 #define NI_NODEADDR_FLAG_TRUNCATE	((uint16_t)htons(0x1))
399 #define NI_NODEADDR_FLAG_ALL		((uint16_t)htons(0x2))
400 #define NI_NODEADDR_FLAG_COMPAT		((uint16_t)htons(0x4))
401 #define NI_NODEADDR_FLAG_LINKLOCAL	((uint16_t)htons(0x8))
402 #define NI_NODEADDR_FLAG_SITELOCAL	((uint16_t)htons(0x10))
403 #define NI_NODEADDR_FLAG_GLOBAL		((uint16_t)htons(0x20))
404 #define NI_NODEADDR_FLAG_ANYCAST	((uint16_t)htons(0x40)) /* just experimental. not in spec */
405 
406 struct ni_reply_fqdn {
407 	uint32_t ni_fqdn_ttl;	/* TTL */
408 	uint8_t ni_fqdn_namelen; /* length in octets of the FQDN */
409 	uint8_t ni_fqdn_name[3]; /* XXX: alignment */
410 };
411 
412 /*
413  * Router Renumbering. as router-renum-08.txt
414  */
415 struct icmp6_router_renum {	/* router renumbering header */
416 	struct icmp6_hdr	rr_hdr;
417 	uint8_t		rr_segnum;
418 	uint8_t		rr_flags;
419 	uint16_t	rr_maxdelay;
420 	uint32_t	rr_reserved;
421 };
422 #define ICMP6_RR_FLAGS_TEST		0x80
423 #define ICMP6_RR_FLAGS_REQRESULT	0x40
424 #define ICMP6_RR_FLAGS_FORCEAPPLY	0x20
425 #define ICMP6_RR_FLAGS_SPECSITE		0x10
426 #define ICMP6_RR_FLAGS_PREVDONE		0x08
427 
428 #define rr_type		rr_hdr.icmp6_type
429 #define rr_code		rr_hdr.icmp6_code
430 #define rr_cksum	rr_hdr.icmp6_cksum
431 #define rr_seqnum 	rr_hdr.icmp6_data32[0]
432 
433 struct rr_pco_match {		/* match prefix part */
434 	uint8_t		rpm_code;
435 	uint8_t		rpm_len;
436 	uint8_t		rpm_ordinal;
437 	uint8_t		rpm_matchlen;
438 	uint8_t		rpm_minlen;
439 	uint8_t		rpm_maxlen;
440 	uint16_t	rpm_reserved;
441 	struct	in6_addr	rpm_prefix;
442 };
443 
444 #define RPM_PCO_ADD		1
445 #define RPM_PCO_CHANGE		2
446 #define RPM_PCO_SETGLOBAL	3
447 #define RPM_PCO_MAX		4
448 
449 struct rr_pco_use {		/* use prefix part */
450 	uint8_t		rpu_uselen;
451 	uint8_t		rpu_keeplen;
452 	uint8_t		rpu_ramask;
453 	uint8_t		rpu_raflags;
454 	uint32_t	rpu_vltime;
455 	uint32_t	rpu_pltime;
456 	uint32_t	rpu_flags;
457 	struct	in6_addr rpu_prefix;
458 };
459 #define ICMP6_RR_PCOUSE_RAFLAGS_ONLINK	0x80
460 #define ICMP6_RR_PCOUSE_RAFLAGS_AUTO	0x40
461 
462 /* network endian */
463 #define ICMP6_RR_PCOUSE_FLAGS_DECRVLTIME     ((uint32_t)htonl(0x80000000))
464 #define ICMP6_RR_PCOUSE_FLAGS_DECRPLTIME     ((uint32_t)htonl(0x40000000))
465 
466 struct rr_result {		/* router renumbering result message */
467 	uint16_t	rrr_flags;
468 	uint8_t		rrr_ordinal;
469 	uint8_t		rrr_matchedlen;
470 	uint32_t	rrr_ifid;
471 	struct	in6_addr rrr_prefix;
472 };
473 /* network endian */
474 #define ICMP6_RR_RESULT_FLAGS_OOB		((uint16_t)htons(0x0002))
475 #define ICMP6_RR_RESULT_FLAGS_FORBIDDEN		((uint16_t)htons(0x0001))
476 
477 static const char *get_rtpref(u_int);
478 static const char *get_lifetime(uint32_t);
479 static void print_lladdr(netdissect_options *ndo, const u_char *, size_t);
480 static void icmp6_opt_print(netdissect_options *ndo, const u_char *, int);
481 static void mld6_print(netdissect_options *ndo, const u_char *);
482 static void mldv2_report_print(netdissect_options *ndo, const u_char *, u_int);
483 static void mldv2_query_print(netdissect_options *ndo, const u_char *, u_int);
484 static const struct udphdr *get_upperlayer(netdissect_options *ndo, const u_char *, u_int *);
485 static void dnsname_print(netdissect_options *ndo, const u_char *, const u_char *);
486 static void icmp6_nodeinfo_print(netdissect_options *ndo, u_int, const u_char *, const u_char *);
487 static void icmp6_rrenum_print(netdissect_options *ndo, const u_char *, const u_char *);
488 
489 #ifndef abs
490 #define abs(a)	((0 < (a)) ? (a) : -(a))
491 #endif
492 
493 #include "rpl.h"
494 
495 static const struct tok icmp6_type_values[] = {
496     { ICMP6_DST_UNREACH, "destination unreachable"},
497     { ICMP6_PACKET_TOO_BIG, "packet too big"},
498     { ICMP6_TIME_EXCEEDED, "time exceeded in-transit"},
499     { ICMP6_PARAM_PROB, "parameter problem"},
500     { ICMP6_ECHO_REQUEST, "echo request"},
501     { ICMP6_ECHO_REPLY, "echo reply"},
502     { MLD6_LISTENER_QUERY, "multicast listener query"},
503     { MLD6_LISTENER_REPORT, "multicast listener report"},
504     { MLD6_LISTENER_DONE, "multicast listener done"},
505     { ND_ROUTER_SOLICIT, "router solicitation"},
506     { ND_ROUTER_ADVERT, "router advertisement"},
507     { ND_NEIGHBOR_SOLICIT, "neighbor solicitation"},
508     { ND_NEIGHBOR_ADVERT, "neighbor advertisement"},
509     { ND_REDIRECT, "redirect"},
510     { ICMP6_ROUTER_RENUMBERING, "router renumbering"},
511     { IND_SOLICIT, "inverse neighbor solicitation"},
512     { IND_ADVERT, "inverse neighbor advertisement"},
513     { MLDV2_LISTENER_REPORT, "multicast listener report v2"},
514     { ICMP6_HADISCOV_REQUEST, "ha discovery request"},
515     { ICMP6_HADISCOV_REPLY, "ha discovery reply"},
516     { ICMP6_MOBILEPREFIX_SOLICIT, "mobile router solicitation"},
517     { ICMP6_MOBILEPREFIX_ADVERT, "mobile router advertisement"},
518     { ICMP6_WRUREQUEST, "who-are-you request"},
519     { ICMP6_WRUREPLY, "who-are-you reply"},
520     { ICMP6_NI_QUERY, "node information query"},
521     { ICMP6_NI_REPLY, "node information reply"},
522     { MLD6_MTRACE, "mtrace message"},
523     { MLD6_MTRACE_RESP, "mtrace response"},
524     { ND_RPL_MESSAGE,   "RPL"},
525     { 0,	NULL }
526 };
527 
528 static const struct tok icmp6_dst_unreach_code_values[] = {
529     { ICMP6_DST_UNREACH_NOROUTE, "unreachable route" },
530     { ICMP6_DST_UNREACH_ADMIN, " unreachable prohibited"},
531     { ICMP6_DST_UNREACH_BEYONDSCOPE, "beyond scope"},
532     { ICMP6_DST_UNREACH_ADDR, "unreachable address"},
533     { ICMP6_DST_UNREACH_NOPORT, "unreachable port"},
534     { 0,	NULL }
535 };
536 
537 static const struct tok icmp6_opt_pi_flag_values[] = {
538     { ND_OPT_PI_FLAG_ONLINK, "onlink" },
539     { ND_OPT_PI_FLAG_AUTO, "auto" },
540     { ND_OPT_PI_FLAG_ROUTER, "router" },
541     { 0,	NULL }
542 };
543 
544 static const struct tok icmp6_opt_ra_flag_values[] = {
545     { ND_RA_FLAG_MANAGED, "managed" },
546     { ND_RA_FLAG_OTHER, "other stateful"},
547     { ND_RA_FLAG_HOME_AGENT, "home agent"},
548     { 0,	NULL }
549 };
550 
551 static const struct tok icmp6_nd_na_flag_values[] = {
552     { ND_NA_FLAG_ROUTER, "router" },
553     { ND_NA_FLAG_SOLICITED, "solicited" },
554     { ND_NA_FLAG_OVERRIDE, "override" },
555     { 0,	NULL }
556 };
557 
558 
559 static const struct tok icmp6_opt_values[] = {
560    { ND_OPT_SOURCE_LINKADDR, "source link-address"},
561    { ND_OPT_TARGET_LINKADDR, "destination link-address"},
562    { ND_OPT_PREFIX_INFORMATION, "prefix info"},
563    { ND_OPT_REDIRECTED_HEADER, "redirected header"},
564    { ND_OPT_MTU, "mtu"},
565    { ND_OPT_RDNSS, "rdnss"},
566    { ND_OPT_DNSSL, "dnssl"},
567    { ND_OPT_ADVINTERVAL, "advertisement interval"},
568    { ND_OPT_HOMEAGENT_INFO, "homeagent information"},
569    { ND_OPT_ROUTE_INFO, "route info"},
570    { 0,	NULL }
571 };
572 
573 /* mldv2 report types */
574 static const struct tok mldv2report2str[] = {
575 	{ 1,	"is_in" },
576 	{ 2,	"is_ex" },
577 	{ 3,	"to_in" },
578 	{ 4,	"to_ex" },
579 	{ 5,	"allow" },
580 	{ 6,	"block" },
581 	{ 0,	NULL }
582 };
583 
584 static const char *
585 get_rtpref(u_int v)
586 {
587 	static const char *rtpref_str[] = {
588 		"medium",		/* 00 */
589 		"high",			/* 01 */
590 		"rsv",			/* 10 */
591 		"low"			/* 11 */
592 	};
593 
594 	return rtpref_str[((v & ND_RA_FLAG_RTPREF_MASK) >> 3) & 0xff];
595 }
596 
597 static const char *
598 get_lifetime(uint32_t v)
599 {
600 	static char buf[20];
601 
602 	if (v == (uint32_t)~0UL)
603 		return "infinity";
604 	else {
605 		snprintf(buf, sizeof(buf), "%us", v);
606 		return buf;
607 	}
608 }
609 
610 static void
611 print_lladdr(netdissect_options *ndo, const uint8_t *p, size_t l)
612 {
613 	const uint8_t *ep, *q;
614 
615 	q = p;
616 	ep = p + l;
617 	while (l > 0 && q < ep) {
618 		if (q > p)
619                         ND_PRINT((ndo,":"));
620 		ND_PRINT((ndo,"%02x", *q++));
621 		l--;
622 	}
623 }
624 
625 static int icmp6_cksum(netdissect_options *ndo, const struct ip6_hdr *ip6,
626 	const struct icmp6_hdr *icp, u_int len)
627 {
628 	return nextproto6_cksum(ndo, ip6, (const uint8_t *)(const void *)icp, len, len,
629 				IPPROTO_ICMPV6);
630 }
631 
632 static const struct tok rpl_mop_values[] = {
633         { RPL_DIO_NONSTORING,         "nonstoring"},
634         { RPL_DIO_STORING,            "storing"},
635         { RPL_DIO_NONSTORING_MULTICAST, "nonstoring-multicast"},
636         { RPL_DIO_STORING_MULTICAST,  "storing-multicast"},
637         { 0, NULL},
638 };
639 
640 static const struct tok rpl_subopt_values[] = {
641         { RPL_OPT_PAD0, "pad0"},
642         { RPL_OPT_PADN, "padN"},
643         { RPL_DIO_METRICS, "metrics"},
644         { RPL_DIO_ROUTINGINFO, "routinginfo"},
645         { RPL_DIO_CONFIG,    "config"},
646         { RPL_DAO_RPLTARGET, "rpltarget"},
647         { RPL_DAO_TRANSITINFO, "transitinfo"},
648         { RPL_DIO_DESTPREFIX, "destprefix"},
649         { RPL_DAO_RPLTARGET_DESC, "rpltargetdesc"},
650         { 0, NULL},
651 };
652 
653 static void
654 rpl_dio_printopt(netdissect_options *ndo,
655                  const struct rpl_dio_genoption *opt,
656                  u_int length)
657 {
658         if(length < RPL_DIO_GENOPTION_LEN) return;
659         length -= RPL_DIO_GENOPTION_LEN;
660 
661         ND_TCHECK(opt->rpl_dio_len);
662 
663         while((opt->rpl_dio_type == RPL_OPT_PAD0 &&
664                (const u_char *)opt < ndo->ndo_snapend) ||
665               ND_TTEST2(*opt,(opt->rpl_dio_len+2))) {
666 
667                 unsigned int optlen = opt->rpl_dio_len+2;
668                 if(opt->rpl_dio_type == RPL_OPT_PAD0) {
669                         optlen = 1;
670                         ND_PRINT((ndo, " opt:pad0"));
671                 } else {
672                         ND_PRINT((ndo, " opt:%s len:%u ",
673                                   tok2str(rpl_subopt_values, "subopt:%u", opt->rpl_dio_type),
674                                   optlen));
675                         if(ndo->ndo_vflag > 2) {
676                                 unsigned int paylen = opt->rpl_dio_len;
677                                 if(paylen > length) paylen = length;
678                                 hex_print(ndo,
679                                           " ",
680                                           ((const uint8_t *)opt) + RPL_DIO_GENOPTION_LEN,  /* content of DIO option */
681                                           paylen);
682                         }
683                 }
684                 opt = (const struct rpl_dio_genoption *)(((const char *)opt) + optlen);
685                 length -= optlen;
686         }
687         return;
688 trunc:
689 	ND_PRINT((ndo," [|truncated]"));
690 	return;
691 }
692 
693 static void
694 rpl_dio_print(netdissect_options *ndo,
695               const u_char *bp, u_int length)
696 {
697         const struct nd_rpl_dio *dio = (const struct nd_rpl_dio *)bp;
698         const char *dagid_str;
699 
700         ND_TCHECK(*dio);
701         dagid_str = ip6addr_string (ndo, dio->rpl_dagid);
702 
703         ND_PRINT((ndo, " [dagid:%s,seq:%u,instance:%u,rank:%u,%smop:%s,prf:%u]",
704                   dagid_str,
705                   dio->rpl_dtsn,
706                   dio->rpl_instanceid,
707                   EXTRACT_16BITS(&dio->rpl_dagrank),
708                   RPL_DIO_GROUNDED(dio->rpl_mopprf) ? "grounded,":"",
709                   tok2str(rpl_mop_values, "mop%u", RPL_DIO_MOP(dio->rpl_mopprf)),
710                   RPL_DIO_PRF(dio->rpl_mopprf)));
711 
712         if(ndo->ndo_vflag > 1) {
713                 const struct rpl_dio_genoption *opt = (const struct rpl_dio_genoption *)&dio[1];
714                 rpl_dio_printopt(ndo, opt, length);
715         }
716 	return;
717 trunc:
718 	ND_PRINT((ndo," [|truncated]"));
719 	return;
720 }
721 
722 static void
723 rpl_dao_print(netdissect_options *ndo,
724               const u_char *bp, u_int length)
725 {
726         const struct nd_rpl_dao *dao = (const struct nd_rpl_dao *)bp;
727         const char *dagid_str = "<elided>";
728 
729         ND_TCHECK(*dao);
730         if (length < ND_RPL_DAO_MIN_LEN)
731         	goto tooshort;
732 
733         bp += ND_RPL_DAO_MIN_LEN;
734         length -= ND_RPL_DAO_MIN_LEN;
735         if(RPL_DAO_D(dao->rpl_flags)) {
736                 ND_TCHECK2(dao->rpl_dagid, DAGID_LEN);
737                 if (length < DAGID_LEN)
738                 	goto tooshort;
739                 dagid_str = ip6addr_string (ndo, dao->rpl_dagid);
740                 bp += DAGID_LEN;
741                 length -= DAGID_LEN;
742         }
743 
744         ND_PRINT((ndo, " [dagid:%s,seq:%u,instance:%u%s%s,%02x]",
745                   dagid_str,
746                   dao->rpl_daoseq,
747                   dao->rpl_instanceid,
748                   RPL_DAO_K(dao->rpl_flags) ? ",acK":"",
749                   RPL_DAO_D(dao->rpl_flags) ? ",Dagid":"",
750                   dao->rpl_flags));
751 
752         if(ndo->ndo_vflag > 1) {
753                 const struct rpl_dio_genoption *opt = (const struct rpl_dio_genoption *)bp;
754                 rpl_dio_printopt(ndo, opt, length);
755         }
756 	return;
757 
758 trunc:
759 	ND_PRINT((ndo," [|truncated]"));
760 	return;
761 
762 tooshort:
763 	ND_PRINT((ndo," [|length too short]"));
764 	return;
765 }
766 
767 static void
768 rpl_daoack_print(netdissect_options *ndo,
769                  const u_char *bp, u_int length)
770 {
771         const struct nd_rpl_daoack *daoack = (const struct nd_rpl_daoack *)bp;
772         const char *dagid_str = "<elided>";
773 
774         ND_TCHECK2(*daoack, ND_RPL_DAOACK_MIN_LEN);
775         if (length < ND_RPL_DAOACK_MIN_LEN)
776         	goto tooshort;
777 
778         bp += ND_RPL_DAOACK_MIN_LEN;
779         length -= ND_RPL_DAOACK_MIN_LEN;
780         if(RPL_DAOACK_D(daoack->rpl_flags)) {
781                 ND_TCHECK2(daoack->rpl_dagid, DAGID_LEN);
782                 if (length < DAGID_LEN)
783                 	goto tooshort;
784                 dagid_str = ip6addr_string (ndo, daoack->rpl_dagid);
785                 bp += DAGID_LEN;
786                 length -= DAGID_LEN;
787         }
788 
789         ND_PRINT((ndo, " [dagid:%s,seq:%u,instance:%u,status:%u]",
790                   dagid_str,
791                   daoack->rpl_daoseq,
792                   daoack->rpl_instanceid,
793                   daoack->rpl_status));
794 
795         /* no officially defined options for DAOACK, but print any we find */
796         if(ndo->ndo_vflag > 1) {
797                 const struct rpl_dio_genoption *opt = (const struct rpl_dio_genoption *)bp;
798                 rpl_dio_printopt(ndo, opt, length);
799         }
800 	return;
801 
802 trunc:
803 	ND_PRINT((ndo," [|dao-truncated]"));
804 	return;
805 
806 tooshort:
807 	ND_PRINT((ndo," [|dao-length too short]"));
808 	return;
809 }
810 
811 static void
812 rpl_print(netdissect_options *ndo,
813           const struct icmp6_hdr *hdr,
814           const u_char *bp, u_int length)
815 {
816         int secured = hdr->icmp6_code & 0x80;
817         int basecode= hdr->icmp6_code & 0x7f;
818 
819         if(secured) {
820                 ND_PRINT((ndo, ", (SEC) [worktodo]"));
821                 /* XXX
822                  * the next header pointer needs to move forward to
823                  * skip the secure part.
824                  */
825                 return;
826         } else {
827                 ND_PRINT((ndo, ", (CLR)"));
828         }
829 
830         switch(basecode) {
831         case ND_RPL_DAG_IS:
832                 ND_PRINT((ndo, "DODAG Information Solicitation"));
833                 if(ndo->ndo_vflag) {
834                 }
835                 break;
836         case ND_RPL_DAG_IO:
837                 ND_PRINT((ndo, "DODAG Information Object"));
838                 if(ndo->ndo_vflag) {
839                         rpl_dio_print(ndo, bp, length);
840                 }
841                 break;
842         case ND_RPL_DAO:
843                 ND_PRINT((ndo, "Destination Advertisement Object"));
844                 if(ndo->ndo_vflag) {
845                         rpl_dao_print(ndo, bp, length);
846                 }
847                 break;
848         case ND_RPL_DAO_ACK:
849                 ND_PRINT((ndo, "Destination Advertisement Object Ack"));
850                 if(ndo->ndo_vflag) {
851                         rpl_daoack_print(ndo, bp, length);
852                 }
853                 break;
854         default:
855                 ND_PRINT((ndo, "RPL message, unknown code %u",hdr->icmp6_code));
856                 break;
857         }
858 	return;
859 
860 #if 0
861 trunc:
862 	ND_PRINT((ndo," [|truncated]"));
863 	return;
864 #endif
865 
866 }
867 
868 
869 void
870 icmp6_print(netdissect_options *ndo,
871             const u_char *bp, u_int length, const u_char *bp2, int fragmented)
872 {
873 	const struct icmp6_hdr *dp;
874 	const struct ip6_hdr *ip;
875 	const struct ip6_hdr *oip;
876 	const struct udphdr *ouh;
877 	int dport;
878 	const u_char *ep;
879 	u_int prot;
880 
881 	dp = (const struct icmp6_hdr *)bp;
882 	ip = (const struct ip6_hdr *)bp2;
883 	oip = (const struct ip6_hdr *)(dp + 1);
884 	/* 'ep' points to the end of available data. */
885 	ep = ndo->ndo_snapend;
886 
887 	ND_TCHECK(dp->icmp6_cksum);
888 
889 	if (ndo->ndo_vflag && !fragmented) {
890 		uint16_t sum, udp_sum;
891 
892 		if (ND_TTEST2(bp[0], length)) {
893 			udp_sum = EXTRACT_16BITS(&dp->icmp6_cksum);
894 			sum = icmp6_cksum(ndo, ip, dp, length);
895 			if (sum != 0)
896 				ND_PRINT((ndo,"[bad icmp6 cksum 0x%04x -> 0x%04x!] ",
897                                                 udp_sum,
898                                                 in_cksum_shouldbe(udp_sum, sum)));
899 			else
900 				ND_PRINT((ndo,"[icmp6 sum ok] "));
901 		}
902 	}
903 
904         ND_PRINT((ndo,"ICMP6, %s", tok2str(icmp6_type_values,"unknown icmp6 type (%u)",dp->icmp6_type)));
905 
906         /* display cosmetics: print the packet length for printer that use the vflag now */
907         if (ndo->ndo_vflag && (dp->icmp6_type == ND_ROUTER_SOLICIT ||
908                       dp->icmp6_type == ND_ROUTER_ADVERT ||
909                       dp->icmp6_type == ND_NEIGHBOR_ADVERT ||
910                       dp->icmp6_type == ND_NEIGHBOR_SOLICIT ||
911                       dp->icmp6_type == ND_REDIRECT ||
912                       dp->icmp6_type == ICMP6_HADISCOV_REPLY ||
913                       dp->icmp6_type == ICMP6_MOBILEPREFIX_ADVERT ))
914                 ND_PRINT((ndo,", length %u", length));
915 
916 	switch (dp->icmp6_type) {
917 	case ICMP6_DST_UNREACH:
918 		ND_TCHECK(oip->ip6_dst);
919                 ND_PRINT((ndo,", %s", tok2str(icmp6_dst_unreach_code_values,"unknown unreach code (%u)",dp->icmp6_code)));
920 		switch (dp->icmp6_code) {
921 
922 		case ICMP6_DST_UNREACH_NOROUTE: /* fall through */
923 		case ICMP6_DST_UNREACH_ADMIN:
924 		case ICMP6_DST_UNREACH_ADDR:
925                         ND_PRINT((ndo," %s",ip6addr_string(ndo, &oip->ip6_dst)));
926                         break;
927 		case ICMP6_DST_UNREACH_BEYONDSCOPE:
928 			ND_PRINT((ndo," %s, source address %s",
929 			       ip6addr_string(ndo, &oip->ip6_dst),
930                                   ip6addr_string(ndo, &oip->ip6_src)));
931 			break;
932 		case ICMP6_DST_UNREACH_NOPORT:
933 			if ((ouh = get_upperlayer(ndo, (const u_char *)oip, &prot))
934 			    == NULL)
935 				goto trunc;
936 
937 			dport = EXTRACT_16BITS(&ouh->uh_dport);
938 			switch (prot) {
939 			case IPPROTO_TCP:
940 				ND_PRINT((ndo,", %s tcp port %s",
941 					ip6addr_string(ndo, &oip->ip6_dst),
942                                           tcpport_string(ndo, dport)));
943 				break;
944 			case IPPROTO_UDP:
945 				ND_PRINT((ndo,", %s udp port %s",
946 					ip6addr_string(ndo, &oip->ip6_dst),
947                                           udpport_string(ndo, dport)));
948 				break;
949 			default:
950 				ND_PRINT((ndo,", %s protocol %d port %d unreachable",
951 					ip6addr_string(ndo, &oip->ip6_dst),
952                                           oip->ip6_nxt, dport));
953 				break;
954 			}
955 			break;
956 		default:
957                   if (ndo->ndo_vflag <= 1) {
958                     print_unknown_data(ndo, bp,"\n\t",length);
959                     return;
960                   }
961                     break;
962 		}
963 		break;
964 	case ICMP6_PACKET_TOO_BIG:
965 		ND_TCHECK(dp->icmp6_mtu);
966 		ND_PRINT((ndo,", mtu %u", EXTRACT_32BITS(&dp->icmp6_mtu)));
967 		break;
968 	case ICMP6_TIME_EXCEEDED:
969 		ND_TCHECK(oip->ip6_dst);
970 		switch (dp->icmp6_code) {
971 		case ICMP6_TIME_EXCEED_TRANSIT:
972 			ND_PRINT((ndo," for %s",
973                                   ip6addr_string(ndo, &oip->ip6_dst)));
974 			break;
975 		case ICMP6_TIME_EXCEED_REASSEMBLY:
976 			ND_PRINT((ndo," (reassembly)"));
977 			break;
978 		default:
979                         ND_PRINT((ndo,", unknown code (%u)", dp->icmp6_code));
980 			break;
981 		}
982 		break;
983 	case ICMP6_PARAM_PROB:
984 		ND_TCHECK(oip->ip6_dst);
985 		switch (dp->icmp6_code) {
986 		case ICMP6_PARAMPROB_HEADER:
987                         ND_PRINT((ndo,", erroneous - octet %u", EXTRACT_32BITS(&dp->icmp6_pptr)));
988                         break;
989 		case ICMP6_PARAMPROB_NEXTHEADER:
990                         ND_PRINT((ndo,", next header - octet %u", EXTRACT_32BITS(&dp->icmp6_pptr)));
991                         break;
992 		case ICMP6_PARAMPROB_OPTION:
993                         ND_PRINT((ndo,", option - octet %u", EXTRACT_32BITS(&dp->icmp6_pptr)));
994                         break;
995 		default:
996                         ND_PRINT((ndo,", code-#%d",
997                                   dp->icmp6_code));
998                         break;
999 		}
1000 		break;
1001 	case ICMP6_ECHO_REQUEST:
1002 	case ICMP6_ECHO_REPLY:
1003                 ND_TCHECK(dp->icmp6_seq);
1004                 ND_PRINT((ndo,", seq %u", EXTRACT_16BITS(&dp->icmp6_seq)));
1005 		break;
1006 	case ICMP6_MEMBERSHIP_QUERY:
1007 		if (length == MLD_MINLEN) {
1008 			mld6_print(ndo, (const u_char *)dp);
1009 		} else if (length >= MLDV2_MINLEN) {
1010 			ND_PRINT((ndo," v2"));
1011 			mldv2_query_print(ndo, (const u_char *)dp, length);
1012 		} else {
1013                         ND_PRINT((ndo," unknown-version (len %u) ", length));
1014 		}
1015 		break;
1016 	case ICMP6_MEMBERSHIP_REPORT:
1017 		mld6_print(ndo, (const u_char *)dp);
1018 		break;
1019 	case ICMP6_MEMBERSHIP_REDUCTION:
1020 		mld6_print(ndo, (const u_char *)dp);
1021 		break;
1022 	case ND_ROUTER_SOLICIT:
1023 #define RTSOLLEN 8
1024 		if (ndo->ndo_vflag) {
1025 			icmp6_opt_print(ndo, (const u_char *)dp + RTSOLLEN,
1026 					length - RTSOLLEN);
1027 		}
1028 		break;
1029 	case ND_ROUTER_ADVERT:
1030 #define RTADVLEN 16
1031 		if (ndo->ndo_vflag) {
1032 			const struct nd_router_advert *p;
1033 
1034 			p = (const struct nd_router_advert *)dp;
1035 			ND_TCHECK(p->nd_ra_retransmit);
1036 			ND_PRINT((ndo,"\n\thop limit %u, Flags [%s]" \
1037                                   ", pref %s, router lifetime %us, reachable time %us, retrans time %us",
1038                                   (u_int)p->nd_ra_curhoplimit,
1039                                   bittok2str(icmp6_opt_ra_flag_values,"none",(p->nd_ra_flags_reserved)),
1040                                   get_rtpref(p->nd_ra_flags_reserved),
1041                                   EXTRACT_16BITS(&p->nd_ra_router_lifetime),
1042                                   EXTRACT_32BITS(&p->nd_ra_reachable),
1043                                   EXTRACT_32BITS(&p->nd_ra_retransmit)));
1044 
1045 			icmp6_opt_print(ndo, (const u_char *)dp + RTADVLEN,
1046 					length - RTADVLEN);
1047 		}
1048 		break;
1049 	case ND_NEIGHBOR_SOLICIT:
1050 	    {
1051 		const struct nd_neighbor_solicit *p;
1052 		p = (const struct nd_neighbor_solicit *)dp;
1053 		ND_TCHECK(p->nd_ns_target);
1054 		ND_PRINT((ndo,", who has %s", ip6addr_string(ndo, &p->nd_ns_target)));
1055 		if (ndo->ndo_vflag) {
1056 #define NDSOLLEN 24
1057 			icmp6_opt_print(ndo, (const u_char *)dp + NDSOLLEN,
1058 					length - NDSOLLEN);
1059 		}
1060 	    }
1061 		break;
1062 	case ND_NEIGHBOR_ADVERT:
1063 	    {
1064 		const struct nd_neighbor_advert *p;
1065 
1066 		p = (const struct nd_neighbor_advert *)dp;
1067 		ND_TCHECK(p->nd_na_target);
1068 		ND_PRINT((ndo,", tgt is %s",
1069                           ip6addr_string(ndo, &p->nd_na_target)));
1070 		if (ndo->ndo_vflag) {
1071                         ND_PRINT((ndo,", Flags [%s]",
1072                                   bittok2str(icmp6_nd_na_flag_values,
1073                                              "none",
1074                                              EXTRACT_32BITS(&p->nd_na_flags_reserved))));
1075 #define NDADVLEN 24
1076 			icmp6_opt_print(ndo, (const u_char *)dp + NDADVLEN,
1077 					length - NDADVLEN);
1078 #undef NDADVLEN
1079 		}
1080 	    }
1081 		break;
1082 	case ND_REDIRECT:
1083 #define RDR(i) ((const struct nd_redirect *)(i))
1084                          ND_TCHECK(RDR(dp)->nd_rd_dst);
1085                          ND_PRINT((ndo,", %s", ip6addr_string(ndo, &RDR(dp)->nd_rd_dst)));
1086 		ND_TCHECK(RDR(dp)->nd_rd_target);
1087 		ND_PRINT((ndo," to %s",
1088                           ip6addr_string(ndo, &RDR(dp)->nd_rd_target)));
1089 #define REDIRECTLEN 40
1090 		if (ndo->ndo_vflag) {
1091 			icmp6_opt_print(ndo, (const u_char *)dp + REDIRECTLEN,
1092 					length - REDIRECTLEN);
1093 		}
1094 		break;
1095 #undef REDIRECTLEN
1096 #undef RDR
1097 	case ICMP6_ROUTER_RENUMBERING:
1098 		icmp6_rrenum_print(ndo, bp, ep);
1099 		break;
1100 	case ICMP6_NI_QUERY:
1101 	case ICMP6_NI_REPLY:
1102 		icmp6_nodeinfo_print(ndo, length, bp, ep);
1103 		break;
1104 	case IND_SOLICIT:
1105 	case IND_ADVERT:
1106 		break;
1107 	case ICMP6_V2_MEMBERSHIP_REPORT:
1108 		mldv2_report_print(ndo, (const u_char *) dp, length);
1109 		break;
1110 	case ICMP6_MOBILEPREFIX_SOLICIT: /* fall through */
1111 	case ICMP6_HADISCOV_REQUEST:
1112                 ND_TCHECK(dp->icmp6_data16[0]);
1113                 ND_PRINT((ndo,", id 0x%04x", EXTRACT_16BITS(&dp->icmp6_data16[0])));
1114                 break;
1115 	case ICMP6_HADISCOV_REPLY:
1116 		if (ndo->ndo_vflag) {
1117 			const struct in6_addr *in6;
1118 			const u_char *cp;
1119 
1120 			ND_TCHECK(dp->icmp6_data16[0]);
1121 			ND_PRINT((ndo,", id 0x%04x", EXTRACT_16BITS(&dp->icmp6_data16[0])));
1122 			cp = (const u_char *)dp + length;
1123 			in6 = (const struct in6_addr *)(dp + 1);
1124 			for (; (const u_char *)in6 < cp; in6++) {
1125 				ND_TCHECK(*in6);
1126 				ND_PRINT((ndo,", %s", ip6addr_string(ndo, in6)));
1127 			}
1128 		}
1129 		break;
1130 	case ICMP6_MOBILEPREFIX_ADVERT:
1131 		if (ndo->ndo_vflag) {
1132 			ND_TCHECK(dp->icmp6_data16[0]);
1133 			ND_PRINT((ndo,", id 0x%04x", EXTRACT_16BITS(&dp->icmp6_data16[0])));
1134 			if (dp->icmp6_data16[1] & 0xc0)
1135 				ND_PRINT((ndo," "));
1136 			if (dp->icmp6_data16[1] & 0x80)
1137 				ND_PRINT((ndo,"M"));
1138 			if (dp->icmp6_data16[1] & 0x40)
1139 				ND_PRINT((ndo,"O"));
1140 #define MPADVLEN 8
1141 			icmp6_opt_print(ndo, (const u_char *)dp + MPADVLEN,
1142 					length - MPADVLEN);
1143 		}
1144 		break;
1145         case ND_RPL_MESSAGE:
1146                 /* plus 4, because struct icmp6_hdr contains 4 bytes of icmp payload */
1147                 rpl_print(ndo, dp, &dp->icmp6_data8[0], length-sizeof(struct icmp6_hdr)+4);
1148                 break;
1149 	default:
1150                 ND_PRINT((ndo,", length %u", length));
1151                 if (ndo->ndo_vflag <= 1)
1152                         print_unknown_data(ndo, bp,"\n\t", length);
1153                 return;
1154         }
1155         if (!ndo->ndo_vflag)
1156                 ND_PRINT((ndo,", length %u", length));
1157 	return;
1158 trunc:
1159 	ND_PRINT((ndo, "[|icmp6]"));
1160 }
1161 
1162 static const struct udphdr *
1163 get_upperlayer(netdissect_options *ndo, const u_char *bp, u_int *prot)
1164 {
1165 	const u_char *ep;
1166 	const struct ip6_hdr *ip6 = (const struct ip6_hdr *)bp;
1167 	const struct udphdr *uh;
1168 	const struct ip6_hbh *hbh;
1169 	const struct ip6_frag *fragh;
1170 	const struct ah *ah;
1171 	u_int nh;
1172 	int hlen;
1173 
1174 	/* 'ep' points to the end of available data. */
1175 	ep = ndo->ndo_snapend;
1176 
1177 	if (!ND_TTEST(ip6->ip6_nxt))
1178 		return NULL;
1179 
1180 	nh = ip6->ip6_nxt;
1181 	hlen = sizeof(struct ip6_hdr);
1182 
1183 	while (bp < ep) {
1184 		bp += hlen;
1185 
1186 		switch(nh) {
1187 		case IPPROTO_UDP:
1188 		case IPPROTO_TCP:
1189 			uh = (const struct udphdr *)bp;
1190 			if (ND_TTEST(uh->uh_dport)) {
1191 				*prot = nh;
1192 				return(uh);
1193 			}
1194 			else
1195 				return(NULL);
1196 			/* NOTREACHED */
1197 
1198 		case IPPROTO_HOPOPTS:
1199 		case IPPROTO_DSTOPTS:
1200 		case IPPROTO_ROUTING:
1201 			hbh = (const struct ip6_hbh *)bp;
1202 			if (!ND_TTEST(hbh->ip6h_len))
1203 				return(NULL);
1204 			nh = hbh->ip6h_nxt;
1205 			hlen = (hbh->ip6h_len + 1) << 3;
1206 			break;
1207 
1208 		case IPPROTO_FRAGMENT: /* this should be odd, but try anyway */
1209 			fragh = (const struct ip6_frag *)bp;
1210 			if (!ND_TTEST(fragh->ip6f_offlg))
1211 				return(NULL);
1212 			/* fragments with non-zero offset are meaningless */
1213 			if ((EXTRACT_16BITS(&fragh->ip6f_offlg) & IP6F_OFF_MASK) != 0)
1214 				return(NULL);
1215 			nh = fragh->ip6f_nxt;
1216 			hlen = sizeof(struct ip6_frag);
1217 			break;
1218 
1219 		case IPPROTO_AH:
1220 			ah = (const struct ah *)bp;
1221 			if (!ND_TTEST(ah->ah_len))
1222 				return(NULL);
1223 			nh = ah->ah_nxt;
1224 			hlen = (ah->ah_len + 2) << 2;
1225 			break;
1226 
1227 		default:	/* unknown or undecodable header */
1228 			*prot = nh; /* meaningless, but set here anyway */
1229 			return(NULL);
1230 		}
1231 	}
1232 
1233 	return(NULL);		/* should be notreached, though */
1234 }
1235 
1236 static void
1237 icmp6_opt_print(netdissect_options *ndo, const u_char *bp, int resid)
1238 {
1239 	const struct nd_opt_hdr *op;
1240 	const struct nd_opt_prefix_info *opp;
1241 	const struct nd_opt_mtu *opm;
1242 	const struct nd_opt_rdnss *oprd;
1243 	const struct nd_opt_dnssl *opds;
1244 	const struct nd_opt_advinterval *opa;
1245 	const struct nd_opt_homeagent_info *oph;
1246 	const struct nd_opt_route_info *opri;
1247 	const u_char *cp, *ep, *domp;
1248 	struct in6_addr in6;
1249 	const struct in6_addr *in6p;
1250 	size_t l;
1251 	u_int i;
1252 
1253 #define ECHECK(var) if ((const u_char *)&(var) > ep - sizeof(var)) return
1254 
1255 	cp = bp;
1256 	/* 'ep' points to the end of available data. */
1257 	ep = ndo->ndo_snapend;
1258 
1259 	while (cp < ep) {
1260 		op = (const struct nd_opt_hdr *)cp;
1261 
1262 		ECHECK(op->nd_opt_len);
1263 		if (resid <= 0)
1264 			return;
1265 		if (op->nd_opt_len == 0)
1266 			goto trunc;
1267 		if (cp + (op->nd_opt_len << 3) > ep)
1268 			goto trunc;
1269 
1270                 ND_PRINT((ndo,"\n\t  %s option (%u), length %u (%u): ",
1271                           tok2str(icmp6_opt_values, "unknown", op->nd_opt_type),
1272                           op->nd_opt_type,
1273                           op->nd_opt_len << 3,
1274                           op->nd_opt_len));
1275 
1276 		switch (op->nd_opt_type) {
1277 		case ND_OPT_SOURCE_LINKADDR:
1278 			l = (op->nd_opt_len << 3) - 2;
1279 			print_lladdr(ndo, cp + 2, l);
1280 			break;
1281 		case ND_OPT_TARGET_LINKADDR:
1282 			l = (op->nd_opt_len << 3) - 2;
1283 			print_lladdr(ndo, cp + 2, l);
1284 			break;
1285 		case ND_OPT_PREFIX_INFORMATION:
1286 			opp = (const struct nd_opt_prefix_info *)op;
1287 			ND_TCHECK(opp->nd_opt_pi_prefix);
1288                         ND_PRINT((ndo,"%s/%u%s, Flags [%s], valid time %s",
1289                                   ip6addr_string(ndo, &opp->nd_opt_pi_prefix),
1290                                   opp->nd_opt_pi_prefix_len,
1291                                   (op->nd_opt_len != 4) ? "badlen" : "",
1292                                   bittok2str(icmp6_opt_pi_flag_values, "none", opp->nd_opt_pi_flags_reserved),
1293                                   get_lifetime(EXTRACT_32BITS(&opp->nd_opt_pi_valid_time))));
1294                         ND_PRINT((ndo,", pref. time %s", get_lifetime(EXTRACT_32BITS(&opp->nd_opt_pi_preferred_time))));
1295 			break;
1296 		case ND_OPT_REDIRECTED_HEADER:
1297                         print_unknown_data(ndo, bp,"\n\t    ",op->nd_opt_len<<3);
1298 			/* xxx */
1299 			break;
1300 		case ND_OPT_MTU:
1301 			opm = (const struct nd_opt_mtu *)op;
1302 			ND_TCHECK(opm->nd_opt_mtu_mtu);
1303 			ND_PRINT((ndo," %u%s",
1304                                EXTRACT_32BITS(&opm->nd_opt_mtu_mtu),
1305                                   (op->nd_opt_len != 1) ? "bad option length" : "" ));
1306                         break;
1307 		case ND_OPT_RDNSS:
1308 			oprd = (const struct nd_opt_rdnss *)op;
1309 			l = (op->nd_opt_len - 1) / 2;
1310 			ND_PRINT((ndo," lifetime %us,",
1311                                   EXTRACT_32BITS(&oprd->nd_opt_rdnss_lifetime)));
1312 			for (i = 0; i < l; i++) {
1313 				ND_TCHECK(oprd->nd_opt_rdnss_addr[i]);
1314 				ND_PRINT((ndo," addr: %s",
1315                                           ip6addr_string(ndo, &oprd->nd_opt_rdnss_addr[i])));
1316 			}
1317 			break;
1318 		case ND_OPT_DNSSL:
1319 			opds = (const struct nd_opt_dnssl *)op;
1320 			ND_PRINT((ndo," lifetime %us, domain(s):",
1321                                   EXTRACT_32BITS(&opds->nd_opt_dnssl_lifetime)));
1322 			domp = cp + 8; /* domain names, variable-sized, RFC1035-encoded */
1323 			while (domp < cp + (op->nd_opt_len << 3) && *domp != '\0')
1324 			{
1325 				ND_PRINT((ndo, " "));
1326 				if ((domp = ns_nprint (ndo, domp, bp)) == NULL)
1327 					goto trunc;
1328 			}
1329 			break;
1330 		case ND_OPT_ADVINTERVAL:
1331 			opa = (const struct nd_opt_advinterval *)op;
1332 			ND_TCHECK(opa->nd_opt_adv_interval);
1333 			ND_PRINT((ndo," %ums", EXTRACT_32BITS(&opa->nd_opt_adv_interval)));
1334 			break;
1335                 case ND_OPT_HOMEAGENT_INFO:
1336 			oph = (const struct nd_opt_homeagent_info *)op;
1337 			ND_TCHECK(oph->nd_opt_hai_lifetime);
1338 			ND_PRINT((ndo," preference %u, lifetime %u",
1339                                   EXTRACT_16BITS(&oph->nd_opt_hai_preference),
1340                                   EXTRACT_16BITS(&oph->nd_opt_hai_lifetime)));
1341 			break;
1342 		case ND_OPT_ROUTE_INFO:
1343 			opri = (const struct nd_opt_route_info *)op;
1344 			ND_TCHECK(opri->nd_opt_rti_lifetime);
1345 			memset(&in6, 0, sizeof(in6));
1346 			in6p = (const struct in6_addr *)(opri + 1);
1347 			switch (op->nd_opt_len) {
1348 			case 1:
1349 				break;
1350 			case 2:
1351 				ND_TCHECK2(*in6p, 8);
1352 				memcpy(&in6, opri + 1, 8);
1353 				break;
1354 			case 3:
1355 				ND_TCHECK(*in6p);
1356 				memcpy(&in6, opri + 1, sizeof(in6));
1357 				break;
1358 			default:
1359 				goto trunc;
1360 			}
1361 			ND_PRINT((ndo," %s/%u", ip6addr_string(ndo, &in6),
1362                                   opri->nd_opt_rti_prefixlen));
1363 			ND_PRINT((ndo,", pref=%s", get_rtpref(opri->nd_opt_rti_flags)));
1364 			ND_PRINT((ndo,", lifetime=%s",
1365                                   get_lifetime(EXTRACT_32BITS(&opri->nd_opt_rti_lifetime))));
1366 			break;
1367 		default:
1368                         if (ndo->ndo_vflag <= 1) {
1369                                 print_unknown_data(ndo,cp+2,"\n\t  ", (op->nd_opt_len << 3) - 2); /* skip option header */
1370                             return;
1371                         }
1372                         break;
1373 		}
1374                 /* do we want to see an additional hexdump ? */
1375                 if (ndo->ndo_vflag> 1)
1376                         print_unknown_data(ndo, cp+2,"\n\t    ", (op->nd_opt_len << 3) - 2); /* skip option header */
1377 
1378 		cp += op->nd_opt_len << 3;
1379 		resid -= op->nd_opt_len << 3;
1380 	}
1381 	return;
1382 
1383  trunc:
1384 	ND_PRINT((ndo, "[ndp opt]"));
1385 	return;
1386 #undef ECHECK
1387 }
1388 
1389 static void
1390 mld6_print(netdissect_options *ndo, const u_char *bp)
1391 {
1392 	const struct mld6_hdr *mp = (const struct mld6_hdr *)bp;
1393 	const u_char *ep;
1394 
1395 	/* 'ep' points to the end of available data. */
1396 	ep = ndo->ndo_snapend;
1397 
1398 	if ((const u_char *)mp + sizeof(*mp) > ep)
1399 		return;
1400 
1401 	ND_PRINT((ndo,"max resp delay: %d ", EXTRACT_16BITS(&mp->mld6_maxdelay)));
1402 	ND_PRINT((ndo,"addr: %s", ip6addr_string(ndo, &mp->mld6_addr)));
1403 }
1404 
1405 static void
1406 mldv2_report_print(netdissect_options *ndo, const u_char *bp, u_int len)
1407 {
1408     const struct icmp6_hdr *icp = (const struct icmp6_hdr *) bp;
1409     u_int group, nsrcs, ngroups;
1410     u_int i, j;
1411 
1412     /* Minimum len is 8 */
1413     if (len < 8) {
1414             ND_PRINT((ndo," [invalid len %d]", len));
1415             return;
1416     }
1417 
1418     ND_TCHECK(icp->icmp6_data16[1]);
1419     ngroups = EXTRACT_16BITS(&icp->icmp6_data16[1]);
1420     ND_PRINT((ndo,", %d group record(s)", ngroups));
1421     if (ndo->ndo_vflag > 0) {
1422 	/* Print the group records */
1423 	group = 8;
1424         for (i = 0; i < ngroups; i++) {
1425 	    /* type(1) + auxlen(1) + numsrc(2) + grp(16) */
1426 	    if (len < group + 20) {
1427                     ND_PRINT((ndo," [invalid number of groups]"));
1428                     return;
1429 	    }
1430             ND_TCHECK2(bp[group + 4], sizeof(struct in6_addr));
1431             ND_PRINT((ndo," [gaddr %s", ip6addr_string(ndo, &bp[group + 4])));
1432 	    ND_PRINT((ndo," %s", tok2str(mldv2report2str, " [v2-report-#%d]",
1433                                          bp[group])));
1434             nsrcs = (bp[group + 2] << 8) + bp[group + 3];
1435 	    /* Check the number of sources and print them */
1436 	    if (len < group + 20 + (nsrcs * sizeof(struct in6_addr))) {
1437                     ND_PRINT((ndo," [invalid number of sources %d]", nsrcs));
1438                     return;
1439 	    }
1440             if (ndo->ndo_vflag == 1)
1441                     ND_PRINT((ndo,", %d source(s)", nsrcs));
1442             else {
1443 		/* Print the sources */
1444                     ND_PRINT((ndo," {"));
1445                 for (j = 0; j < nsrcs; j++) {
1446                     ND_TCHECK2(bp[group + 20 + j * sizeof(struct in6_addr)],
1447                             sizeof(struct in6_addr));
1448 		    ND_PRINT((ndo," %s", ip6addr_string(ndo, &bp[group + 20 + j * sizeof(struct in6_addr)])));
1449 		}
1450                 ND_PRINT((ndo," }"));
1451             }
1452 	    /* Next group record */
1453             group += 20 + nsrcs * sizeof(struct in6_addr);
1454 	    ND_PRINT((ndo,"]"));
1455         }
1456     }
1457     return;
1458 trunc:
1459     ND_PRINT((ndo,"[|icmp6]"));
1460     return;
1461 }
1462 
1463 static void
1464 mldv2_query_print(netdissect_options *ndo, const u_char *bp, u_int len)
1465 {
1466     const struct icmp6_hdr *icp = (const struct icmp6_hdr *) bp;
1467     u_int mrc;
1468     int mrt, qqi;
1469     u_int nsrcs;
1470     register u_int i;
1471 
1472     /* Minimum len is 28 */
1473     if (len < 28) {
1474             ND_PRINT((ndo," [invalid len %d]", len));
1475 	return;
1476     }
1477     ND_TCHECK(icp->icmp6_data16[0]);
1478     mrc = EXTRACT_16BITS(&icp->icmp6_data16[0]);
1479     if (mrc < 32768) {
1480 	mrt = mrc;
1481     } else {
1482         mrt = ((mrc & 0x0fff) | 0x1000) << (((mrc & 0x7000) >> 12) + 3);
1483     }
1484     if (ndo->ndo_vflag) {
1485             ND_PRINT((ndo," [max resp delay=%d]", mrt));
1486     }
1487     ND_TCHECK2(bp[8], sizeof(struct in6_addr));
1488     ND_PRINT((ndo," [gaddr %s", ip6addr_string(ndo, &bp[8])));
1489 
1490     if (ndo->ndo_vflag) {
1491         ND_TCHECK(bp[25]);
1492 	if (bp[24] & 0x08) {
1493 		ND_PRINT((ndo," sflag"));
1494 	}
1495 	if (bp[24] & 0x07) {
1496 		ND_PRINT((ndo," robustness=%d", bp[24] & 0x07));
1497 	}
1498 	if (bp[25] < 128) {
1499 		qqi = bp[25];
1500 	} else {
1501 		qqi = ((bp[25] & 0x0f) | 0x10) << (((bp[25] & 0x70) >> 4) + 3);
1502 	}
1503 	ND_PRINT((ndo," qqi=%d", qqi));
1504     }
1505 
1506     ND_TCHECK2(bp[26], 2);
1507     nsrcs = EXTRACT_16BITS(&bp[26]);
1508     if (nsrcs > 0) {
1509 	if (len < 28 + nsrcs * sizeof(struct in6_addr))
1510 	    ND_PRINT((ndo," [invalid number of sources]"));
1511 	else if (ndo->ndo_vflag > 1) {
1512 	    ND_PRINT((ndo," {"));
1513 	    for (i = 0; i < nsrcs; i++) {
1514 		ND_TCHECK2(bp[28 + i * sizeof(struct in6_addr)],
1515                         sizeof(struct in6_addr));
1516 		ND_PRINT((ndo," %s", ip6addr_string(ndo, &bp[28 + i * sizeof(struct in6_addr)])));
1517 	    }
1518 	    ND_PRINT((ndo," }"));
1519 	} else
1520                 ND_PRINT((ndo,", %d source(s)", nsrcs));
1521     }
1522     ND_PRINT((ndo,"]"));
1523     return;
1524 trunc:
1525     ND_PRINT((ndo,"[|icmp6]"));
1526     return;
1527 }
1528 
1529 static void
1530 dnsname_print(netdissect_options *ndo, const u_char *cp, const u_char *ep)
1531 {
1532 	int i;
1533 
1534 	/* DNS name decoding - no decompression */
1535 	ND_PRINT((ndo,", \""));
1536 	while (cp < ep) {
1537 		i = *cp++;
1538 		if (i) {
1539 			if (i > ep - cp) {
1540 				ND_PRINT((ndo,"???"));
1541 				break;
1542 			}
1543 			while (i-- && cp < ep) {
1544 				safeputchar(ndo, *cp);
1545 				cp++;
1546 			}
1547 			if (cp + 1 < ep && *cp)
1548 				ND_PRINT((ndo,"."));
1549 		} else {
1550 			if (cp == ep) {
1551 				/* FQDN */
1552 				ND_PRINT((ndo,"."));
1553 			} else if (cp + 1 == ep && *cp == '\0') {
1554 				/* truncated */
1555 			} else {
1556 				/* invalid */
1557 				ND_PRINT((ndo,"???"));
1558 			}
1559 			break;
1560 		}
1561 	}
1562 	ND_PRINT((ndo,"\""));
1563 }
1564 
1565 static void
1566 icmp6_nodeinfo_print(netdissect_options *ndo, u_int icmp6len, const u_char *bp, const u_char *ep)
1567 {
1568 	const struct icmp6_nodeinfo *ni6;
1569 	const struct icmp6_hdr *dp;
1570 	const u_char *cp;
1571 	size_t siz, i;
1572 	int needcomma;
1573 
1574 	if (ep < bp)
1575 		return;
1576 	dp = (const struct icmp6_hdr *)bp;
1577 	ni6 = (const struct icmp6_nodeinfo *)bp;
1578 	siz = ep - bp;
1579 
1580 	switch (ni6->ni_type) {
1581 	case ICMP6_NI_QUERY:
1582 		if (siz == sizeof(*dp) + 4) {
1583 			/* KAME who-are-you */
1584 			ND_PRINT((ndo," who-are-you request"));
1585 			break;
1586 		}
1587 		ND_PRINT((ndo," node information query"));
1588 
1589 		ND_TCHECK2(*dp, sizeof(*ni6));
1590 		ni6 = (const struct icmp6_nodeinfo *)dp;
1591 		ND_PRINT((ndo," ("));	/*)*/
1592 		switch (EXTRACT_16BITS(&ni6->ni_qtype)) {
1593 		case NI_QTYPE_NOOP:
1594 			ND_PRINT((ndo,"noop"));
1595 			break;
1596 		case NI_QTYPE_SUPTYPES:
1597 			ND_PRINT((ndo,"supported qtypes"));
1598 			i = EXTRACT_16BITS(&ni6->ni_flags);
1599 			if (i)
1600 				ND_PRINT((ndo," [%s]", (i & 0x01) ? "C" : ""));
1601 			break;
1602 		case NI_QTYPE_FQDN:
1603 			ND_PRINT((ndo,"DNS name"));
1604 			break;
1605 		case NI_QTYPE_NODEADDR:
1606 			ND_PRINT((ndo,"node addresses"));
1607 			i = ni6->ni_flags;
1608 			if (!i)
1609 				break;
1610 			/* NI_NODEADDR_FLAG_TRUNCATE undefined for query */
1611 			ND_PRINT((ndo," [%s%s%s%s%s%s]",
1612 			    (i & NI_NODEADDR_FLAG_ANYCAST) ? "a" : "",
1613 			    (i & NI_NODEADDR_FLAG_GLOBAL) ? "G" : "",
1614 			    (i & NI_NODEADDR_FLAG_SITELOCAL) ? "S" : "",
1615 			    (i & NI_NODEADDR_FLAG_LINKLOCAL) ? "L" : "",
1616 			    (i & NI_NODEADDR_FLAG_COMPAT) ? "C" : "",
1617 			    (i & NI_NODEADDR_FLAG_ALL) ? "A" : ""));
1618 			break;
1619 		default:
1620 			ND_PRINT((ndo,"unknown"));
1621 			break;
1622 		}
1623 
1624 		if (ni6->ni_qtype == NI_QTYPE_NOOP ||
1625 		    ni6->ni_qtype == NI_QTYPE_SUPTYPES) {
1626 			if (siz != sizeof(*ni6))
1627 				if (ndo->ndo_vflag)
1628 					ND_PRINT((ndo,", invalid len"));
1629 			/*(*/
1630 			ND_PRINT((ndo,")"));
1631 			break;
1632 		}
1633 
1634 
1635 		/* XXX backward compat, icmp-name-lookup-03 */
1636 		if (siz == sizeof(*ni6)) {
1637 			ND_PRINT((ndo,", 03 draft"));
1638 			/*(*/
1639 			ND_PRINT((ndo,")"));
1640 			break;
1641 		}
1642 
1643 		switch (ni6->ni_code) {
1644 		case ICMP6_NI_SUBJ_IPV6:
1645 			if (!ND_TTEST2(*dp,
1646 			    sizeof(*ni6) + sizeof(struct in6_addr)))
1647 				break;
1648 			if (siz != sizeof(*ni6) + sizeof(struct in6_addr)) {
1649 				if (ndo->ndo_vflag)
1650 					ND_PRINT((ndo,", invalid subject len"));
1651 				break;
1652 			}
1653 			ND_PRINT((ndo,", subject=%s",
1654                                   ip6addr_string(ndo, ni6 + 1)));
1655 			break;
1656 		case ICMP6_NI_SUBJ_FQDN:
1657 			ND_PRINT((ndo,", subject=DNS name"));
1658 			cp = (const u_char *)(ni6 + 1);
1659 			if (cp[0] == ep - cp - 1) {
1660 				/* icmp-name-lookup-03, pascal string */
1661 				if (ndo->ndo_vflag)
1662 					ND_PRINT((ndo,", 03 draft"));
1663 				cp++;
1664 				ND_PRINT((ndo,", \""));
1665 				while (cp < ep) {
1666 					safeputchar(ndo, *cp);
1667 					cp++;
1668 				}
1669 				ND_PRINT((ndo,"\""));
1670 			} else
1671 				dnsname_print(ndo, cp, ep);
1672 			break;
1673 		case ICMP6_NI_SUBJ_IPV4:
1674 			if (!ND_TTEST2(*dp, sizeof(*ni6) + sizeof(struct in_addr)))
1675 				break;
1676 			if (siz != sizeof(*ni6) + sizeof(struct in_addr)) {
1677 				if (ndo->ndo_vflag)
1678 					ND_PRINT((ndo,", invalid subject len"));
1679 				break;
1680 			}
1681 			ND_PRINT((ndo,", subject=%s",
1682                                   ipaddr_string(ndo, ni6 + 1)));
1683 			break;
1684 		default:
1685 			ND_PRINT((ndo,", unknown subject"));
1686 			break;
1687 		}
1688 
1689 		/*(*/
1690 		ND_PRINT((ndo,")"));
1691 		break;
1692 
1693 	case ICMP6_NI_REPLY:
1694 		if (icmp6len > siz) {
1695 			ND_PRINT((ndo,"[|icmp6: node information reply]"));
1696 			break;
1697 		}
1698 
1699 		needcomma = 0;
1700 
1701 		ni6 = (const struct icmp6_nodeinfo *)dp;
1702 		ND_PRINT((ndo," node information reply"));
1703 		ND_PRINT((ndo," ("));	/*)*/
1704 		switch (ni6->ni_code) {
1705 		case ICMP6_NI_SUCCESS:
1706 			if (ndo->ndo_vflag) {
1707 				ND_PRINT((ndo,"success"));
1708 				needcomma++;
1709 			}
1710 			break;
1711 		case ICMP6_NI_REFUSED:
1712 			ND_PRINT((ndo,"refused"));
1713 			needcomma++;
1714 			if (siz != sizeof(*ni6))
1715 				if (ndo->ndo_vflag)
1716 					ND_PRINT((ndo,", invalid length"));
1717 			break;
1718 		case ICMP6_NI_UNKNOWN:
1719 			ND_PRINT((ndo,"unknown"));
1720 			needcomma++;
1721 			if (siz != sizeof(*ni6))
1722 				if (ndo->ndo_vflag)
1723 					ND_PRINT((ndo,", invalid length"));
1724 			break;
1725 		}
1726 
1727 		if (ni6->ni_code != ICMP6_NI_SUCCESS) {
1728 			/*(*/
1729 			ND_PRINT((ndo,")"));
1730 			break;
1731 		}
1732 
1733 		switch (EXTRACT_16BITS(&ni6->ni_qtype)) {
1734 		case NI_QTYPE_NOOP:
1735 			if (needcomma)
1736 				ND_PRINT((ndo,", "));
1737 			ND_PRINT((ndo,"noop"));
1738 			if (siz != sizeof(*ni6))
1739 				if (ndo->ndo_vflag)
1740 					ND_PRINT((ndo,", invalid length"));
1741 			break;
1742 		case NI_QTYPE_SUPTYPES:
1743 			if (needcomma)
1744 				ND_PRINT((ndo,", "));
1745 			ND_PRINT((ndo,"supported qtypes"));
1746 			i = EXTRACT_16BITS(&ni6->ni_flags);
1747 			if (i)
1748 				ND_PRINT((ndo," [%s]", (i & 0x01) ? "C" : ""));
1749 			break;
1750 		case NI_QTYPE_FQDN:
1751 			if (needcomma)
1752 				ND_PRINT((ndo,", "));
1753 			ND_PRINT((ndo,"DNS name"));
1754 			cp = (const u_char *)(ni6 + 1) + 4;
1755 			if (cp[0] == ep - cp - 1) {
1756 				/* icmp-name-lookup-03, pascal string */
1757 				if (ndo->ndo_vflag)
1758 					ND_PRINT((ndo,", 03 draft"));
1759 				cp++;
1760 				ND_PRINT((ndo,", \""));
1761 				while (cp < ep) {
1762 					safeputchar(ndo, *cp);
1763 					cp++;
1764 				}
1765 				ND_PRINT((ndo,"\""));
1766 			} else
1767 				dnsname_print(ndo, cp, ep);
1768 			if ((EXTRACT_16BITS(&ni6->ni_flags) & 0x01) != 0)
1769 				ND_PRINT((ndo," [TTL=%u]", EXTRACT_32BITS(ni6 + 1)));
1770 			break;
1771 		case NI_QTYPE_NODEADDR:
1772 			if (needcomma)
1773 				ND_PRINT((ndo,", "));
1774 			ND_PRINT((ndo,"node addresses"));
1775 			i = sizeof(*ni6);
1776 			while (i < siz) {
1777 				if (i + sizeof(struct in6_addr) + sizeof(int32_t) > siz)
1778 					break;
1779 				ND_PRINT((ndo," %s", ip6addr_string(ndo, bp + i)));
1780 				i += sizeof(struct in6_addr);
1781 				ND_PRINT((ndo,"(%d)", (int32_t)EXTRACT_32BITS(bp + i)));
1782 				i += sizeof(int32_t);
1783 			}
1784 			i = ni6->ni_flags;
1785 			if (!i)
1786 				break;
1787 			ND_PRINT((ndo," [%s%s%s%s%s%s%s]",
1788                                   (i & NI_NODEADDR_FLAG_ANYCAST) ? "a" : "",
1789                                   (i & NI_NODEADDR_FLAG_GLOBAL) ? "G" : "",
1790                                   (i & NI_NODEADDR_FLAG_SITELOCAL) ? "S" : "",
1791                                   (i & NI_NODEADDR_FLAG_LINKLOCAL) ? "L" : "",
1792                                   (i & NI_NODEADDR_FLAG_COMPAT) ? "C" : "",
1793                                   (i & NI_NODEADDR_FLAG_ALL) ? "A" : "",
1794                                   (i & NI_NODEADDR_FLAG_TRUNCATE) ? "T" : ""));
1795 			break;
1796 		default:
1797 			if (needcomma)
1798 				ND_PRINT((ndo,", "));
1799 			ND_PRINT((ndo,"unknown"));
1800 			break;
1801 		}
1802 
1803 		/*(*/
1804 		ND_PRINT((ndo,")"));
1805 		break;
1806 	}
1807 	return;
1808 
1809 trunc:
1810 	ND_PRINT((ndo, "[|icmp6]"));
1811 }
1812 
1813 static void
1814 icmp6_rrenum_print(netdissect_options *ndo, const u_char *bp, const u_char *ep)
1815 {
1816 	const struct icmp6_router_renum *rr6;
1817 	const char *cp;
1818 	const struct rr_pco_match *match;
1819 	const struct rr_pco_use *use;
1820 	char hbuf[NI_MAXHOST];
1821 	int n;
1822 
1823 	if (ep < bp)
1824 		return;
1825 	rr6 = (const struct icmp6_router_renum *)bp;
1826 	cp = (const char *)(rr6 + 1);
1827 
1828 	ND_TCHECK(rr6->rr_reserved);
1829 	switch (rr6->rr_code) {
1830 	case ICMP6_ROUTER_RENUMBERING_COMMAND:
1831 		ND_PRINT((ndo,"router renum: command"));
1832 		break;
1833 	case ICMP6_ROUTER_RENUMBERING_RESULT:
1834 		ND_PRINT((ndo,"router renum: result"));
1835 		break;
1836 	case ICMP6_ROUTER_RENUMBERING_SEQNUM_RESET:
1837 		ND_PRINT((ndo,"router renum: sequence number reset"));
1838 		break;
1839 	default:
1840 		ND_PRINT((ndo,"router renum: code-#%d", rr6->rr_code));
1841 		break;
1842 	}
1843 
1844         ND_PRINT((ndo,", seq=%u", EXTRACT_32BITS(&rr6->rr_seqnum)));
1845 
1846 	if (ndo->ndo_vflag) {
1847 #define F(x, y)	((rr6->rr_flags) & (x) ? (y) : "")
1848 		ND_PRINT((ndo,"["));	/*]*/
1849 		if (rr6->rr_flags) {
1850 			ND_PRINT((ndo,"%s%s%s%s%s,", F(ICMP6_RR_FLAGS_TEST, "T"),
1851                                   F(ICMP6_RR_FLAGS_REQRESULT, "R"),
1852                                   F(ICMP6_RR_FLAGS_FORCEAPPLY, "A"),
1853                                   F(ICMP6_RR_FLAGS_SPECSITE, "S"),
1854                                   F(ICMP6_RR_FLAGS_PREVDONE, "P")));
1855 		}
1856                 ND_PRINT((ndo,"seg=%u,", rr6->rr_segnum));
1857                 ND_PRINT((ndo,"maxdelay=%u", EXTRACT_16BITS(&rr6->rr_maxdelay)));
1858 		if (rr6->rr_reserved)
1859 			ND_PRINT((ndo,"rsvd=0x%x", EXTRACT_32BITS(&rr6->rr_reserved)));
1860 		/*[*/
1861 		ND_PRINT((ndo,"]"));
1862 #undef F
1863 	}
1864 
1865 	if (rr6->rr_code == ICMP6_ROUTER_RENUMBERING_COMMAND) {
1866 		match = (const struct rr_pco_match *)cp;
1867 		cp = (const char *)(match + 1);
1868 
1869 		ND_TCHECK(match->rpm_prefix);
1870 
1871 		if (ndo->ndo_vflag > 1)
1872 			ND_PRINT((ndo,"\n\t"));
1873 		else
1874 			ND_PRINT((ndo," "));
1875 		ND_PRINT((ndo,"match("));	/*)*/
1876 		switch (match->rpm_code) {
1877 		case RPM_PCO_ADD:	ND_PRINT((ndo,"add")); break;
1878 		case RPM_PCO_CHANGE:	ND_PRINT((ndo,"change")); break;
1879 		case RPM_PCO_SETGLOBAL:	ND_PRINT((ndo,"setglobal")); break;
1880 		default:		ND_PRINT((ndo,"#%u", match->rpm_code)); break;
1881 		}
1882 
1883 		if (ndo->ndo_vflag) {
1884 			ND_PRINT((ndo,",ord=%u", match->rpm_ordinal));
1885 			ND_PRINT((ndo,",min=%u", match->rpm_minlen));
1886 			ND_PRINT((ndo,",max=%u", match->rpm_maxlen));
1887 		}
1888 		if (addrtostr6(&match->rpm_prefix, hbuf, sizeof(hbuf)))
1889 			ND_PRINT((ndo,",%s/%u", hbuf, match->rpm_matchlen));
1890 		else
1891 			ND_PRINT((ndo,",?/%u", match->rpm_matchlen));
1892 		/*(*/
1893 		ND_PRINT((ndo,")"));
1894 
1895 		n = match->rpm_len - 3;
1896 		if (n % 4)
1897 			goto trunc;
1898 		n /= 4;
1899 		while (n-- > 0) {
1900 			use = (const struct rr_pco_use *)cp;
1901 			cp = (const char *)(use + 1);
1902 
1903 			ND_TCHECK(use->rpu_prefix);
1904 
1905 			if (ndo->ndo_vflag > 1)
1906 				ND_PRINT((ndo,"\n\t"));
1907 			else
1908 				ND_PRINT((ndo," "));
1909 			ND_PRINT((ndo,"use("));	/*)*/
1910 			if (use->rpu_flags) {
1911 #define F(x, y)	((use->rpu_flags) & (x) ? (y) : "")
1912 				ND_PRINT((ndo,"%s%s,",
1913                                           F(ICMP6_RR_PCOUSE_FLAGS_DECRVLTIME, "V"),
1914                                           F(ICMP6_RR_PCOUSE_FLAGS_DECRPLTIME, "P")));
1915 #undef F
1916 			}
1917 			if (ndo->ndo_vflag) {
1918 				ND_PRINT((ndo,"mask=0x%x,", use->rpu_ramask));
1919 				ND_PRINT((ndo,"raflags=0x%x,", use->rpu_raflags));
1920 				if (~use->rpu_vltime == 0)
1921 					ND_PRINT((ndo,"vltime=infty,"));
1922 				else
1923 					ND_PRINT((ndo,"vltime=%u,",
1924                                                   EXTRACT_32BITS(&use->rpu_vltime)));
1925 				if (~use->rpu_pltime == 0)
1926 					ND_PRINT((ndo,"pltime=infty,"));
1927 				else
1928 					ND_PRINT((ndo,"pltime=%u,",
1929                                                   EXTRACT_32BITS(&use->rpu_pltime)));
1930 			}
1931 			if (addrtostr6(&use->rpu_prefix, hbuf, sizeof(hbuf)))
1932 				ND_PRINT((ndo,"%s/%u/%u", hbuf, use->rpu_uselen,
1933                                           use->rpu_keeplen));
1934 			else
1935 				ND_PRINT((ndo,"?/%u/%u", use->rpu_uselen,
1936                                           use->rpu_keeplen));
1937 			/*(*/
1938                         ND_PRINT((ndo,")"));
1939 		}
1940 	}
1941 
1942 	return;
1943 
1944 trunc:
1945 	ND_PRINT((ndo,"[|icmp6]"));
1946 }
1947 
1948 /*
1949  * Local Variables:
1950  * c-style: whitesmith
1951  * c-basic-offset: 8
1952  * End:
1953  */
1954