xref: /freebsd/contrib/tcpdump/print-udp.c (revision 4cf49a43559ed9fdad601bdcccd2c55963008675)
1 /*
2  * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that: (1) source code distributions
7  * retain the above copyright notice and this paragraph in its entirety, (2)
8  * distributions including binary code include the above copyright notice and
9  * this paragraph in its entirety in the documentation or other materials
10  * provided with the distribution, and (3) all advertising materials mentioning
11  * features or use of this software display the following acknowledgement:
12  * ``This product includes software developed by the University of California,
13  * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14  * the University nor the names of its contributors may be used to endorse
15  * or promote products derived from this software without specific prior
16  * written permission.
17  * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18  * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20  */
21 
22 #ifndef lint
23 static const char rcsid[] =
24     "@(#) $Header: print-udp.c,v 1.60 97/07/27 21:58:48 leres Exp $ (LBL)";
25 #endif
26 
27 #include <sys/param.h>
28 #include <sys/time.h>
29 #include <sys/socket.h>
30 
31 #include <netinet/in.h>
32 #include <netinet/in_systm.h>
33 #include <netinet/ip.h>
34 #include <netinet/ip_var.h>
35 #include <netinet/udp.h>
36 #include <netinet/udp_var.h>
37 
38 #ifdef NOERROR
39 #undef NOERROR					/* Solaris sucks */
40 #endif
41 #ifdef T_UNSPEC
42 #undef T_UNSPEC					/* SINIX does too */
43 #endif
44 #include <arpa/nameser.h>
45 #ifdef SEGSIZE
46 #undef SEGSIZE
47 #endif
48 #include <arpa/tftp.h>
49 
50 #include <rpc/rpc.h>
51 
52 #include <stdio.h>
53 
54 #include "interface.h"
55 #include "addrtoname.h"
56 #include "appletalk.h"
57 
58 #include "nfs.h"
59 #include "bootp.h"
60 
61 struct rtcphdr {
62 	u_short rh_flags;	/* T:2 P:1 CNT:5 PT:8 */
63 	u_short rh_len;		/* length of message (in words) */
64 	u_int rh_ssrc;		/* synchronization src id */
65 };
66 
67 typedef struct {
68 	u_int upper;		/* more significant 32 bits */
69 	u_int lower;		/* less significant 32 bits */
70 } ntp64;
71 
72 /*
73  * Sender report.
74  */
75 struct rtcp_sr {
76 	ntp64 sr_ntp;		/* 64-bit ntp timestamp */
77 	u_int sr_ts;		/* reference media timestamp */
78 	u_int sr_np;		/* no. packets sent */
79 	u_int sr_nb;		/* no. bytes sent */
80 };
81 
82 /*
83  * Receiver report.
84  * Time stamps are middle 32-bits of ntp timestamp.
85  */
86 struct rtcp_rr {
87 	u_int rr_srcid;		/* sender being reported */
88 	u_int rr_nl;		/* no. packets lost */
89 	u_int rr_ls;		/* extended last seq number received */
90 	u_int rr_dv;		/* jitter (delay variance) */
91 	u_int rr_lsr;		/* orig. ts from last rr from this src  */
92 	u_int rr_dlsr;		/* time from recpt of last rr to xmit time */
93 };
94 
95 /*XXX*/
96 #define RTCP_PT_SR	200
97 #define RTCP_PT_RR	201
98 #define RTCP_PT_SDES	202
99 #define 	RTCP_SDES_CNAME	1
100 #define 	RTCP_SDES_NAME	2
101 #define 	RTCP_SDES_EMAIL	3
102 #define 	RTCP_SDES_PHONE	4
103 #define 	RTCP_SDES_LOC	5
104 #define 	RTCP_SDES_TOOL	6
105 #define 	RTCP_SDES_NOTE	7
106 #define 	RTCP_SDES_PRIV	8
107 #define RTCP_PT_BYE	203
108 #define RTCP_PT_APP	204
109 
110 static void
111 vat_print(const void *hdr, u_int len, register const struct udphdr *up)
112 {
113 	/* vat/vt audio */
114 	u_int ts = *(u_short *)hdr;
115 	if ((ts & 0xf060) != 0) {
116 		/* probably vt */
117 		(void)printf(" udp/vt %u %d / %d",
118 			     (u_int32_t)(ntohs(up->uh_ulen) - sizeof(*up)),
119 			     ts & 0x3ff, ts >> 10);
120 	} else {
121 		/* probably vat */
122 		u_int i0 = ntohl(((u_int *)hdr)[0]);
123 		u_int i1 = ntohl(((u_int *)hdr)[1]);
124 		printf(" udp/vat %u c%d %u%s",
125 			(u_int32_t)(ntohs(up->uh_ulen) - sizeof(*up) - 8),
126 			i0 & 0xffff,
127 			i1, i0 & 0x800000? "*" : "");
128 		/* audio format */
129 		if (i0 & 0x1f0000)
130 			printf(" f%d", (i0 >> 16) & 0x1f);
131 		if (i0 & 0x3f000000)
132 			printf(" s%d", (i0 >> 24) & 0x3f);
133 	}
134 }
135 
136 static void
137 rtp_print(const void *hdr, u_int len, register const struct udphdr *up)
138 {
139 	/* rtp v1 or v2 */
140 	u_int *ip = (u_int *)hdr;
141 	u_int hasopt, hasext, contype, hasmarker;
142 	u_int i0 = ntohl(((u_int *)hdr)[0]);
143 	u_int i1 = ntohl(((u_int *)hdr)[1]);
144 	u_int dlen = ntohs(up->uh_ulen) - sizeof(*up) - 8;
145 	const char * ptype;
146 
147 	ip += 2;
148 	len >>= 2;
149 	len -= 2;
150 	hasopt = 0;
151 	hasext = 0;
152 	if ((i0 >> 30) == 1) {
153 		/* rtp v1 */
154 		hasopt = i0 & 0x800000;
155 		contype = (i0 >> 16) & 0x3f;
156 		hasmarker = i0 & 0x400000;
157 		ptype = "rtpv1";
158 	} else {
159 		/* rtp v2 */
160 		hasext = i0 & 0x10000000;
161 		contype = (i0 >> 16) & 0x7f;
162 		hasmarker = i0 & 0x800000;
163 		dlen -= 4;
164 		ptype = "rtp";
165 		ip += 1;
166 		len -= 1;
167 	}
168 	printf(" udp/%s %d c%d %s%s %d %u",
169 		ptype,
170 		dlen,
171 		contype,
172 		(hasopt || hasext)? "+" : "",
173 		hasmarker? "*" : "",
174 		i0 & 0xffff,
175 		i1);
176 	if (vflag) {
177 		printf(" %u", i1);
178 		if (hasopt) {
179 			u_int i2, optlen;
180 			do {
181 				i2 = ip[0];
182 				optlen = (i2 >> 16) & 0xff;
183 				if (optlen == 0 || optlen > len) {
184 					printf(" !opt");
185 					return;
186 				}
187 				ip += optlen;
188 				len -= optlen;
189 			} while ((int)i2 >= 0);
190 		}
191 		if (hasext) {
192 			u_int i2, extlen;
193 			i2 = ip[0];
194 			extlen = (i2 & 0xffff) + 1;
195 			if (extlen > len) {
196 				printf(" !ext");
197 				return;
198 			}
199 			ip += extlen;
200 		}
201 		if (contype == 0x1f) /*XXX H.261 */
202 			printf(" 0x%04x", ip[0] >> 16);
203 	}
204 }
205 
206 static const u_char *
207 rtcp_print(const u_char *hdr, const u_char *ep)
208 {
209 	/* rtp v2 control (rtcp) */
210 	struct rtcp_rr *rr = 0;
211 	struct rtcp_sr *sr;
212 	struct rtcphdr *rh = (struct rtcphdr *)hdr;
213 	u_int len;
214 	u_short flags;
215 	int cnt;
216 	double ts, dts;
217 	if ((u_char *)(rh + 1) > ep) {
218 		printf(" [|rtcp]");
219 		return (ep);
220 	}
221 	len = (ntohs(rh->rh_len) + 1) * 4;
222 	flags = ntohs(rh->rh_flags);
223 	cnt = (flags >> 8) & 0x1f;
224 	switch (flags & 0xff) {
225 	case RTCP_PT_SR:
226 		sr = (struct rtcp_sr *)(rh + 1);
227 		printf(" sr");
228 		if (len != cnt * sizeof(*rr) + sizeof(*sr) + sizeof(*rh))
229 			printf(" [%d]", len);
230 		if (vflag)
231 		  printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
232 		if ((u_char *)(sr + 1) > ep) {
233 			printf(" [|rtcp]");
234 			return (ep);
235 		}
236 		ts = (double)((u_int32_t)ntohl(sr->sr_ntp.upper)) +
237 		    ((double)((u_int32_t)ntohl(sr->sr_ntp.lower)) /
238 		    4294967296.0);
239 		printf(" @%.2f %u %up %ub", ts, (u_int32_t)ntohl(sr->sr_ts),
240 		    (u_int32_t)ntohl(sr->sr_np), (u_int32_t)ntohl(sr->sr_nb));
241 		rr = (struct rtcp_rr *)(sr + 1);
242 		break;
243 	case RTCP_PT_RR:
244 		printf(" rr");
245 		if (len != cnt * sizeof(*rr) + sizeof(*rh))
246 			printf(" [%d]", len);
247 		rr = (struct rtcp_rr *)(rh + 1);
248 		if (vflag)
249 		  printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
250 		break;
251 	case RTCP_PT_SDES:
252 		printf(" sdes %d", len);
253 		if (vflag)
254 		  printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
255 		cnt = 0;
256 		break;
257 	case RTCP_PT_BYE:
258 		printf(" bye %d", len);
259 		if (vflag)
260 		  printf(" %u", (u_int32_t)ntohl(rh->rh_ssrc));
261 		cnt = 0;
262 		break;
263 	default:
264 		printf(" type-0x%x %d", flags & 0xff, len);
265 		cnt = 0;
266 		break;
267 	}
268 	if (cnt > 1)
269 		printf(" c%d", cnt);
270 	while (--cnt >= 0) {
271 		if ((u_char *)(rr + 1) > ep) {
272 			printf(" [|rtcp]");
273 			return (ep);
274 		}
275 		if (vflag)
276 			printf(" %u", (u_int32_t)ntohl(rr->rr_srcid));
277 		ts = (double)((u_int32_t)ntohl(rr->rr_lsr)) / 65536.;
278 		dts = (double)((u_int32_t)ntohl(rr->rr_dlsr)) / 65536.;
279 		printf(" %ul %us %uj @%.2f+%.2f",
280 		    (u_int32_t)ntohl(rr->rr_nl) & 0x00ffffff,
281 		    (u_int32_t)ntohl(rr->rr_ls),
282 		    (u_int32_t)ntohl(rr->rr_dv), ts, dts);
283 	}
284 	return (hdr + len);
285 }
286 
287 /* XXX probably should use getservbyname() and cache answers */
288 #define TFTP_PORT 69		/*XXX*/
289 #define KERBEROS_PORT 88	/*XXX*/
290 #define SUNRPC_PORT 111		/*XXX*/
291 #define SNMP_PORT 161		/*XXX*/
292 #define NTP_PORT 123		/*XXX*/
293 #define SNMPTRAP_PORT 162	/*XXX*/
294 #define RIP_PORT 520		/*XXX*/
295 #define KERBEROS_SEC_PORT 750	/*XXX*/
296 
297 void
298 udp_print(register const u_char *bp, u_int length, register const u_char *bp2)
299 {
300 	register const struct udphdr *up;
301 	register const struct ip *ip;
302 	register const u_char *cp;
303 	register const u_char *ep = bp + length;
304 	u_short sport, dport, ulen;
305 
306 	if (ep > snapend)
307 		ep = snapend;
308 	up = (struct udphdr *)bp;
309 	ip = (struct ip *)bp2;
310 	cp = (u_char *)(up + 1);
311 	if (cp > snapend) {
312 		printf("[|udp]");
313 		return;
314 	}
315 	if (length < sizeof(struct udphdr)) {
316 		(void)printf(" truncated-udp %d", length);
317 		return;
318 	}
319 	length -= sizeof(struct udphdr);
320 
321 	sport = ntohs(up->uh_sport);
322 	dport = ntohs(up->uh_dport);
323 	ulen = ntohs(up->uh_ulen);
324 	if (packettype) {
325 		register struct rpc_msg *rp;
326 		enum msg_type direction;
327 
328 		switch (packettype) {
329 
330 		case PT_VAT:
331 			(void)printf("%s.%s > %s.%s:",
332 				ipaddr_string(&ip->ip_src),
333 				udpport_string(sport),
334 				ipaddr_string(&ip->ip_dst),
335 				udpport_string(dport));
336 			vat_print((void *)(up + 1), length, up);
337 			break;
338 
339 		case PT_WB:
340 			(void)printf("%s.%s > %s.%s:",
341 				ipaddr_string(&ip->ip_src),
342 				udpport_string(sport),
343 				ipaddr_string(&ip->ip_dst),
344 				udpport_string(dport));
345 			wb_print((void *)(up + 1), length);
346 			break;
347 
348 		case PT_RPC:
349 			rp = (struct rpc_msg *)(up + 1);
350 			direction = (enum msg_type)ntohl(rp->rm_direction);
351 			if (direction == CALL)
352 				sunrpcrequest_print((u_char *)rp, length,
353 				    (u_char *)ip);
354 			else
355 				nfsreply_print((u_char *)rp, length,
356 				    (u_char *)ip);			/*XXX*/
357 			break;
358 
359 		case PT_RTP:
360 			(void)printf("%s.%s > %s.%s:",
361 				ipaddr_string(&ip->ip_src),
362 				udpport_string(sport),
363 				ipaddr_string(&ip->ip_dst),
364 				udpport_string(dport));
365 			rtp_print((void *)(up + 1), length, up);
366 			break;
367 
368 		case PT_RTCP:
369 			(void)printf("%s.%s > %s.%s:",
370 				ipaddr_string(&ip->ip_src),
371 				udpport_string(sport),
372 				ipaddr_string(&ip->ip_dst),
373 				udpport_string(dport));
374 			while (cp < ep)
375 				cp = rtcp_print(cp, ep);
376 			break;
377 		}
378 		return;
379 	}
380 
381 	if (!qflag) {
382 		register struct rpc_msg *rp;
383 		enum msg_type direction;
384 
385 		rp = (struct rpc_msg *)(up + 1);
386 		if (TTEST(rp->rm_direction)) {
387 			direction = (enum msg_type)ntohl(rp->rm_direction);
388 			if (dport == NFS_PORT && direction == CALL) {
389 				nfsreq_print((u_char *)rp, length,
390 				    (u_char *)ip);
391 				return;
392 			}
393 			if (sport == NFS_PORT && direction == REPLY) {
394 				nfsreply_print((u_char *)rp, length,
395 				    (u_char *)ip);
396 				return;
397 			}
398 #ifdef notdef
399 			if (dport == SUNRPC_PORT && direction == CALL) {
400 				sunrpcrequest_print((u_char *)rp, length, (u_char *)ip);
401 				return;
402 			}
403 #endif
404 		}
405 		if (TTEST(((struct LAP *)cp)->type) &&
406 		    ((struct LAP *)cp)->type == lapDDP &&
407 		    (atalk_port(sport) || atalk_port(dport))) {
408 			if (vflag)
409 				fputs("kip ", stdout);
410 			atalk_print(cp, length);
411 			return;
412 		}
413 	}
414 	(void)printf("%s.%s > %s.%s:",
415 		ipaddr_string(&ip->ip_src), udpport_string(sport),
416 		ipaddr_string(&ip->ip_dst), udpport_string(dport));
417 
418 	if (!qflag) {
419 #define ISPORT(p) (dport == (p) || sport == (p))
420 		if (ISPORT(NAMESERVER_PORT))
421 			ns_print((const u_char *)(up + 1), length);
422 		else if (ISPORT(TFTP_PORT))
423 			tftp_print((const u_char *)(up + 1), length);
424 		else if (ISPORT(IPPORT_BOOTPC) || ISPORT(IPPORT_BOOTPS))
425 			bootp_print((const u_char *)(up + 1), length,
426 			    sport, dport);
427 		else if (ISPORT(RIP_PORT))
428 			rip_print((const u_char *)(up + 1), length);
429 		else if (ISPORT(SNMP_PORT) || ISPORT(SNMPTRAP_PORT))
430 			snmp_print((const u_char *)(up + 1), length);
431 		else if (ISPORT(NTP_PORT))
432 			ntp_print((const u_char *)(up + 1), length);
433 		else if (ISPORT(KERBEROS_PORT) || ISPORT(KERBEROS_SEC_PORT))
434 			krb_print((const void *)(up + 1), length);
435 		else if (dport == 3456)
436 			vat_print((const void *)(up + 1), length, up);
437 		/*
438 		 * Kludge in test for whiteboard packets.
439 		 */
440 		else if (dport == 4567)
441 			wb_print((const void *)(up + 1), length);
442 		else
443 			(void)printf(" udp %u",
444 			    (u_int32_t)(ulen - sizeof(*up)));
445 #undef ISPORT
446 	} else
447 		(void)printf(" udp %u", (u_int32_t)(ulen - sizeof(*up)));
448 }
449