1 /* 2 * Copyright (c) 1994, 1995, 1996 3 * The Regents of the University of California. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that: (1) source code distributions 7 * retain the above copyright notice and this paragraph in its entirety, (2) 8 * distributions including binary code include the above copyright notice and 9 * this paragraph in its entirety in the documentation or other materials 10 * provided with the distribution, and (3) all advertising materials mentioning 11 * features or use of this software display the following acknowledgement: 12 * ``This product includes software developed by the University of California, 13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of 14 * the University nor the names of its contributors may be used to endorse 15 * or promote products derived from this software without specific prior 16 * written permission. 17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED 18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF 19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. 20 * 21 * Format and print Novell IPX packets. 22 * Contributed by Brad Parker (brad@fcr.com). 23 * 24 * $FreeBSD$ 25 */ 26 27 #define NETDISSECT_REWORKED 28 #ifdef HAVE_CONFIG_H 29 #include "config.h" 30 #endif 31 32 #include <tcpdump-stdinc.h> 33 34 #include <stdio.h> 35 36 #include "interface.h" 37 #include "addrtoname.h" 38 #include "extract.h" 39 40 /* well-known sockets */ 41 #define IPX_SKT_NCP 0x0451 42 #define IPX_SKT_SAP 0x0452 43 #define IPX_SKT_RIP 0x0453 44 #define IPX_SKT_NETBIOS 0x0455 45 #define IPX_SKT_DIAGNOSTICS 0x0456 46 #define IPX_SKT_NWLINK_DGM 0x0553 /* NWLink datagram, may contain SMB */ 47 #define IPX_SKT_EIGRP 0x85be /* Cisco EIGRP over IPX */ 48 49 /* IPX transport header */ 50 struct ipxHdr { 51 uint16_t cksum; /* Checksum */ 52 uint16_t length; /* Length, in bytes, including header */ 53 uint8_t tCtl; /* Transport Control (i.e. hop count) */ 54 uint8_t pType; /* Packet Type (i.e. level 2 protocol) */ 55 uint16_t dstNet[2]; /* destination net */ 56 uint8_t dstNode[6]; /* destination node */ 57 uint16_t dstSkt; /* destination socket */ 58 uint16_t srcNet[2]; /* source net */ 59 uint8_t srcNode[6]; /* source node */ 60 uint16_t srcSkt; /* source socket */ 61 }; 62 63 #define ipxSize 30 64 65 static const char *ipxaddr_string(uint32_t, const u_char *); 66 static void ipx_decode(netdissect_options *, const struct ipxHdr *, const u_char *, u_int); 67 static void ipx_sap_print(netdissect_options *, const u_short *, u_int); 68 static void ipx_rip_print(netdissect_options *, const u_short *, u_int); 69 70 /* 71 * Print IPX datagram packets. 72 */ 73 void 74 ipx_print(netdissect_options *ndo, const u_char *p, u_int length) 75 { 76 const struct ipxHdr *ipx = (const struct ipxHdr *)p; 77 78 if (!ndo->ndo_eflag) 79 ND_PRINT((ndo, "IPX ")); 80 81 ND_TCHECK(ipx->srcSkt); 82 ND_PRINT((ndo, "%s.%04x > ", 83 ipxaddr_string(EXTRACT_32BITS(ipx->srcNet), ipx->srcNode), 84 EXTRACT_16BITS(&ipx->srcSkt))); 85 86 ND_PRINT((ndo, "%s.%04x: ", 87 ipxaddr_string(EXTRACT_32BITS(ipx->dstNet), ipx->dstNode), 88 EXTRACT_16BITS(&ipx->dstSkt))); 89 90 /* take length from ipx header */ 91 ND_TCHECK(ipx->length); 92 length = EXTRACT_16BITS(&ipx->length); 93 94 ipx_decode(ndo, ipx, (u_char *)ipx + ipxSize, length - ipxSize); 95 return; 96 trunc: 97 ND_PRINT((ndo, "[|ipx %d]", length)); 98 } 99 100 static const char * 101 ipxaddr_string(uint32_t net, const u_char *node) 102 { 103 static char line[256]; 104 105 snprintf(line, sizeof(line), "%08x.%02x:%02x:%02x:%02x:%02x:%02x", 106 net, node[0], node[1], node[2], node[3], node[4], node[5]); 107 108 return line; 109 } 110 111 static void 112 ipx_decode(netdissect_options *ndo, const struct ipxHdr *ipx, const u_char *datap, u_int length) 113 { 114 register u_short dstSkt; 115 116 dstSkt = EXTRACT_16BITS(&ipx->dstSkt); 117 switch (dstSkt) { 118 case IPX_SKT_NCP: 119 ND_PRINT((ndo, "ipx-ncp %d", length)); 120 break; 121 case IPX_SKT_SAP: 122 ipx_sap_print(ndo, (u_short *)datap, length); 123 break; 124 case IPX_SKT_RIP: 125 ipx_rip_print(ndo, (u_short *)datap, length); 126 break; 127 case IPX_SKT_NETBIOS: 128 ND_PRINT((ndo, "ipx-netbios %d", length)); 129 #ifdef TCPDUMP_DO_SMB 130 ipx_netbios_print(ndo, datap, length); 131 #endif 132 break; 133 case IPX_SKT_DIAGNOSTICS: 134 ND_PRINT((ndo, "ipx-diags %d", length)); 135 break; 136 case IPX_SKT_NWLINK_DGM: 137 ND_PRINT((ndo, "ipx-nwlink-dgm %d", length)); 138 #ifdef TCPDUMP_DO_SMB 139 ipx_netbios_print(ndo, datap, length); 140 #endif 141 break; 142 case IPX_SKT_EIGRP: 143 eigrp_print(ndo, datap, length); 144 break; 145 default: 146 ND_PRINT((ndo, "ipx-#%x %d", dstSkt, length)); 147 break; 148 } 149 } 150 151 static void 152 ipx_sap_print(netdissect_options *ndo, const u_short *ipx, u_int length) 153 { 154 int command, i; 155 156 ND_TCHECK(ipx[0]); 157 command = EXTRACT_16BITS(ipx); 158 ipx++; 159 length -= 2; 160 161 switch (command) { 162 case 1: 163 case 3: 164 if (command == 1) 165 ND_PRINT((ndo, "ipx-sap-req")); 166 else 167 ND_PRINT((ndo, "ipx-sap-nearest-req")); 168 169 ND_TCHECK(ipx[0]); 170 ND_PRINT((ndo, " %s", ipxsap_string(htons(EXTRACT_16BITS(&ipx[0]))))); 171 break; 172 173 case 2: 174 case 4: 175 if (command == 2) 176 ND_PRINT((ndo, "ipx-sap-resp")); 177 else 178 ND_PRINT((ndo, "ipx-sap-nearest-resp")); 179 180 for (i = 0; i < 8 && length > 0; i++) { 181 ND_TCHECK(ipx[0]); 182 ND_PRINT((ndo, " %s '", ipxsap_string(htons(EXTRACT_16BITS(&ipx[0]))))); 183 if (fn_printzp(ndo, (u_char *)&ipx[1], 48, ndo->ndo_snapend)) { 184 ND_PRINT((ndo, "'")); 185 goto trunc; 186 } 187 ND_TCHECK2(ipx[25], 10); 188 ND_PRINT((ndo, "' addr %s", 189 ipxaddr_string(EXTRACT_32BITS(&ipx[25]), (u_char *)&ipx[27]))); 190 ipx += 32; 191 length -= 64; 192 } 193 break; 194 default: 195 ND_PRINT((ndo, "ipx-sap-?%x", command)); 196 break; 197 } 198 return; 199 trunc: 200 ND_PRINT((ndo, "[|ipx %d]", length)); 201 } 202 203 static void 204 ipx_rip_print(netdissect_options *ndo, const u_short *ipx, u_int length) 205 { 206 int command, i; 207 208 ND_TCHECK(ipx[0]); 209 command = EXTRACT_16BITS(ipx); 210 ipx++; 211 length -= 2; 212 213 switch (command) { 214 case 1: 215 ND_PRINT((ndo, "ipx-rip-req")); 216 if (length > 0) { 217 ND_TCHECK(ipx[3]); 218 ND_PRINT((ndo, " %08x/%d.%d", EXTRACT_32BITS(&ipx[0]), 219 EXTRACT_16BITS(&ipx[2]), EXTRACT_16BITS(&ipx[3]))); 220 } 221 break; 222 case 2: 223 ND_PRINT((ndo, "ipx-rip-resp")); 224 for (i = 0; i < 50 && length > 0; i++) { 225 ND_TCHECK(ipx[3]); 226 ND_PRINT((ndo, " %08x/%d.%d", EXTRACT_32BITS(&ipx[0]), 227 EXTRACT_16BITS(&ipx[2]), EXTRACT_16BITS(&ipx[3]))); 228 229 ipx += 4; 230 length -= 8; 231 } 232 break; 233 default: 234 ND_PRINT((ndo, "ipx-rip-?%x", command)); 235 break; 236 } 237 return; 238 trunc: 239 ND_PRINT((ndo, "[|ipx %d]", length)); 240 } 241