diff options
author | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-15 17:13:01 +0000 |
---|---|---|
committer | Daniel Baumann <daniel.baumann@progress-linux.org> | 2024-04-15 17:13:01 +0000 |
commit | 7adcb5b605cc1328a3084c334f4697ec9771936c (patch) | |
tree | 03e681bfda053978ba896745828e09cb056ad156 /print-pim.c | |
parent | Initial commit. (diff) | |
download | tcpdump-7adcb5b605cc1328a3084c334f4697ec9771936c.tar.xz tcpdump-7adcb5b605cc1328a3084c334f4697ec9771936c.zip |
Adding upstream version 4.99.4.upstream/4.99.4
Signed-off-by: Daniel Baumann <daniel.baumann@progress-linux.org>
Diffstat (limited to 'print-pim.c')
-rw-r--r-- | print-pim.c | 1234 |
1 files changed, 1234 insertions, 0 deletions
diff --git a/print-pim.c b/print-pim.c new file mode 100644 index 0000000..f2db8c7 --- /dev/null +++ b/print-pim.c @@ -0,0 +1,1234 @@ +/* + * Copyright (c) 1995, 1996 + * The Regents of the University of California. All rights reserved. + * + * Redistribution and use in source and binary forms, with or without + * modification, are permitted provided that: (1) source code distributions + * retain the above copyright notice and this paragraph in its entirety, (2) + * distributions including binary code include the above copyright notice and + * this paragraph in its entirety in the documentation or other materials + * provided with the distribution, and (3) all advertising materials mentioning + * features or use of this software display the following acknowledgement: + * ``This product includes software developed by the University of California, + * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of + * the University nor the names of its contributors may be used to endorse + * or promote products derived from this software without specific prior + * written permission. + * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED + * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF + * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. + */ + +/* \summary: Protocol Independent Multicast (PIM) printer */ + +#ifdef HAVE_CONFIG_H +#include <config.h> +#endif + +#include "netdissect-stdinc.h" + +#include "netdissect.h" +#include "addrtoname.h" +#include "extract.h" + +#include "ip.h" +#include "ip6.h" +#include "ipproto.h" + +#define PIMV1_TYPE_QUERY 0 +#define PIMV1_TYPE_REGISTER 1 +#define PIMV1_TYPE_REGISTER_STOP 2 +#define PIMV1_TYPE_JOIN_PRUNE 3 +#define PIMV1_TYPE_RP_REACHABILITY 4 +#define PIMV1_TYPE_ASSERT 5 +#define PIMV1_TYPE_GRAFT 6 +#define PIMV1_TYPE_GRAFT_ACK 7 + +static const struct tok pimv1_type_str[] = { + { PIMV1_TYPE_QUERY, "Query" }, + { PIMV1_TYPE_REGISTER, "Register" }, + { PIMV1_TYPE_REGISTER_STOP, "Register-Stop" }, + { PIMV1_TYPE_JOIN_PRUNE, "Join/Prune" }, + { PIMV1_TYPE_RP_REACHABILITY, "RP-reachable" }, + { PIMV1_TYPE_ASSERT, "Assert" }, + { PIMV1_TYPE_GRAFT, "Graft" }, + { PIMV1_TYPE_GRAFT_ACK, "Graft-ACK" }, + { 0, NULL } +}; + +#define PIMV2_TYPE_HELLO 0 +#define PIMV2_TYPE_REGISTER 1 +#define PIMV2_TYPE_REGISTER_STOP 2 +#define PIMV2_TYPE_JOIN_PRUNE 3 +#define PIMV2_TYPE_BOOTSTRAP 4 +#define PIMV2_TYPE_ASSERT 5 +#define PIMV2_TYPE_GRAFT 6 +#define PIMV2_TYPE_GRAFT_ACK 7 +#define PIMV2_TYPE_CANDIDATE_RP 8 +#define PIMV2_TYPE_PRUNE_REFRESH 9 +#define PIMV2_TYPE_DF_ELECTION 10 +#define PIMV2_TYPE_ECMP_REDIRECT 11 + +static const struct tok pimv2_type_values[] = { + { PIMV2_TYPE_HELLO, "Hello" }, + { PIMV2_TYPE_REGISTER, "Register" }, + { PIMV2_TYPE_REGISTER_STOP, "Register Stop" }, + { PIMV2_TYPE_JOIN_PRUNE, "Join / Prune" }, + { PIMV2_TYPE_BOOTSTRAP, "Bootstrap" }, + { PIMV2_TYPE_ASSERT, "Assert" }, + { PIMV2_TYPE_GRAFT, "Graft" }, + { PIMV2_TYPE_GRAFT_ACK, "Graft Acknowledgement" }, + { PIMV2_TYPE_CANDIDATE_RP, "Candidate RP Advertisement" }, + { PIMV2_TYPE_PRUNE_REFRESH, "Prune Refresh" }, + { PIMV2_TYPE_DF_ELECTION, "DF Election" }, + { PIMV2_TYPE_ECMP_REDIRECT, "ECMP Redirect" }, + { 0, NULL} +}; + +#define PIMV2_HELLO_OPTION_HOLDTIME 1 +#define PIMV2_HELLO_OPTION_LANPRUNEDELAY 2 +#define PIMV2_HELLO_OPTION_DR_PRIORITY_OLD 18 +#define PIMV2_HELLO_OPTION_DR_PRIORITY 19 +#define PIMV2_HELLO_OPTION_GENID 20 +#define PIMV2_HELLO_OPTION_REFRESH_CAP 21 +#define PIMV2_HELLO_OPTION_BIDIR_CAP 22 +#define PIMV2_HELLO_OPTION_ADDRESS_LIST 24 +#define PIMV2_HELLO_OPTION_ADDRESS_LIST_OLD 65001 + +static const struct tok pimv2_hello_option_values[] = { + { PIMV2_HELLO_OPTION_HOLDTIME, "Hold Time" }, + { PIMV2_HELLO_OPTION_LANPRUNEDELAY, "LAN Prune Delay" }, + { PIMV2_HELLO_OPTION_DR_PRIORITY_OLD, "DR Priority (Old)" }, + { PIMV2_HELLO_OPTION_DR_PRIORITY, "DR Priority" }, + { PIMV2_HELLO_OPTION_GENID, "Generation ID" }, + { PIMV2_HELLO_OPTION_REFRESH_CAP, "State Refresh Capability" }, + { PIMV2_HELLO_OPTION_BIDIR_CAP, "Bi-Directional Capability" }, + { PIMV2_HELLO_OPTION_ADDRESS_LIST, "Address List" }, + { PIMV2_HELLO_OPTION_ADDRESS_LIST_OLD, "Address List (Old)" }, + { 0, NULL} +}; + +#define PIMV2_REGISTER_FLAG_LEN 4 +#define PIMV2_REGISTER_FLAG_BORDER 0x80000000 +#define PIMV2_REGISTER_FLAG_NULL 0x40000000 + +static const struct tok pimv2_register_flag_values[] = { + { PIMV2_REGISTER_FLAG_BORDER, "Border" }, + { PIMV2_REGISTER_FLAG_NULL, "Null" }, + { 0, NULL} +}; + +#define PIMV2_DF_ELECTION_OFFER 1 +#define PIMV2_DF_ELECTION_WINNER 2 +#define PIMV2_DF_ELECTION_BACKOFF 3 +#define PIMV2_DF_ELECTION_PASS 4 + +static const struct tok pimv2_df_election_flag_values[] = { + { PIMV2_DF_ELECTION_OFFER, "Offer" }, + { PIMV2_DF_ELECTION_WINNER, "Winner" }, + { PIMV2_DF_ELECTION_BACKOFF, "Backoff" }, + { PIMV2_DF_ELECTION_PASS, "Pass" }, + { 0, NULL} +}; + +#define PIMV2_DF_ELECTION_PASS_BACKOFF_STR(x) ( \ + x == PIMV2_DF_ELECTION_BACKOFF ? "offer" : "new winner" ) + + +/* + * XXX: We consider a case where IPv6 is not ready yet for portability, + * but PIM dependent definitions should be independent of IPv6... + */ + +struct pim { + nd_uint8_t pim_typever; + /* upper 4bit: PIM version number; 2 for PIMv2 */ + /* lower 4bit: the PIM message type, currently they are: + * Hello, Register, Register-Stop, Join/Prune, + * Bootstrap, Assert, Graft (PIM-DM only), + * Graft-Ack (PIM-DM only), C-RP-Adv + */ +#define PIM_VER(x) (((x) & 0xf0) >> 4) +#define PIM_TYPE(x) ((x) & 0x0f) + nd_uint8_t pim_rsv; /* Reserved in v1, subtype+address length in v2 */ +#define PIM_SUBTYPE(x) (((x) & 0xf0) >> 4) + nd_uint16_t pim_cksum; /* IP style check sum */ +}; + +static void pimv2_print(netdissect_options *, const u_char *bp, u_int len, const u_char *); + +static void +pimv1_join_prune_print(netdissect_options *ndo, + const u_char *bp, u_int len) +{ + u_int ngroups, njoin, nprune; + u_int njp; + + /* If it's a single group and a single source, use 1-line output. */ + if (ND_TTEST_LEN(bp, 30) && GET_U_1(bp + 11) == 1 && + ((njoin = GET_BE_U_2(bp + 20)) + GET_BE_U_2(bp + 22)) == 1) { + u_int hold; + + ND_PRINT(" RPF %s ", GET_IPADDR_STRING(bp)); + hold = GET_BE_U_2(bp + 6); + if (hold != 180) { + ND_PRINT("Hold "); + unsigned_relts_print(ndo, hold); + } + ND_PRINT("%s (%s/%u, %s", njoin ? "Join" : "Prune", + GET_IPADDR_STRING(bp + 26), GET_U_1(bp + 25) & 0x3f, + GET_IPADDR_STRING(bp + 12)); + if (GET_BE_U_4(bp + 16) != 0xffffffff) + ND_PRINT("/%s", GET_IPADDR_STRING(bp + 16)); + ND_PRINT(") %s%s %s", + (GET_U_1(bp + 24) & 0x01) ? "Sparse" : "Dense", + (GET_U_1(bp + 25) & 0x80) ? " WC" : "", + (GET_U_1(bp + 25) & 0x40) ? "RP" : "SPT"); + return; + } + + if (len < sizeof(nd_ipv4)) + goto trunc; + if (ndo->ndo_vflag > 1) + ND_PRINT("\n"); + ND_PRINT(" Upstream Nbr: %s", GET_IPADDR_STRING(bp)); + bp += 4; + len -= 4; + if (len < 4) + goto trunc; + if (ndo->ndo_vflag > 1) + ND_PRINT("\n"); + ND_PRINT(" Hold time: "); + unsigned_relts_print(ndo, GET_BE_U_2(bp + 2)); + if (ndo->ndo_vflag < 2) + return; + bp += 4; + len -= 4; + + if (len < 4) + goto trunc; + ngroups = GET_U_1(bp + 3); + bp += 4; + len -= 4; + while (ngroups != 0) { + /* + * XXX - does the address have length "addrlen" and the + * mask length "maddrlen"? + */ + if (len < 4) + goto trunc; + ND_PRINT("\n\tGroup: %s", GET_IPADDR_STRING(bp)); + bp += 4; + len -= 4; + if (len < 4) + goto trunc; + if (GET_BE_U_4(bp) != 0xffffffff) + ND_PRINT("/%s", GET_IPADDR_STRING(bp)); + bp += 4; + len -= 4; + if (len < 4) + goto trunc; + njoin = GET_BE_U_2(bp); + nprune = GET_BE_U_2(bp + 2); + ND_PRINT(" joined: %u pruned: %u", njoin, nprune); + bp += 4; + len -= 4; + for (njp = 0; njp < (njoin + nprune); njp++) { + const char *type; + + if (njp < njoin) + type = "Join "; + else + type = "Prune"; + if (len < 6) + goto trunc; + ND_PRINT("\n\t%s %s%s%s%s/%u", type, + (GET_U_1(bp) & 0x01) ? "Sparse " : "Dense ", + (GET_U_1(bp + 1) & 0x80) ? "WC " : "", + (GET_U_1(bp + 1) & 0x40) ? "RP " : "SPT ", + GET_IPADDR_STRING(bp + 2), + GET_U_1(bp + 1) & 0x3f); + bp += 6; + len -= 6; + } + ngroups--; + } + return; +trunc: + nd_print_trunc(ndo); +} + +void +pimv1_print(netdissect_options *ndo, + const u_char *bp, u_int len) +{ + u_char type; + + ndo->ndo_protocol = "pimv1"; + type = GET_U_1(bp + 1); + + ND_PRINT(" %s", tok2str(pimv1_type_str, "[type %u]", type)); + switch (type) { + case PIMV1_TYPE_QUERY: + if (ND_TTEST_1(bp + 8)) { + switch (GET_U_1(bp + 8) >> 4) { + case 0: + ND_PRINT(" Dense-mode"); + break; + case 1: + ND_PRINT(" Sparse-mode"); + break; + case 2: + ND_PRINT(" Sparse-Dense-mode"); + break; + default: + ND_PRINT(" mode-%u", GET_U_1(bp + 8) >> 4); + break; + } + } + if (ndo->ndo_vflag) { + ND_PRINT(" (Hold-time "); + unsigned_relts_print(ndo, GET_BE_U_2(bp + 10)); + ND_PRINT(")"); + } + break; + + case PIMV1_TYPE_REGISTER: + ND_TCHECK_LEN(bp + 8, 20); /* ip header */ + ND_PRINT(" for %s > %s", GET_IPADDR_STRING(bp + 20), + GET_IPADDR_STRING(bp + 24)); + break; + case PIMV1_TYPE_REGISTER_STOP: + ND_PRINT(" for %s > %s", GET_IPADDR_STRING(bp + 8), + GET_IPADDR_STRING(bp + 12)); + break; + case PIMV1_TYPE_RP_REACHABILITY: + if (ndo->ndo_vflag) { + ND_PRINT(" group %s", GET_IPADDR_STRING(bp + 8)); + if (GET_BE_U_4(bp + 12) != 0xffffffff) + ND_PRINT("/%s", GET_IPADDR_STRING(bp + 12)); + ND_PRINT(" RP %s hold ", GET_IPADDR_STRING(bp + 16)); + unsigned_relts_print(ndo, GET_BE_U_2(bp + 22)); + } + break; + case PIMV1_TYPE_ASSERT: + ND_PRINT(" for %s > %s", GET_IPADDR_STRING(bp + 16), + GET_IPADDR_STRING(bp + 8)); + if (GET_BE_U_4(bp + 12) != 0xffffffff) + ND_PRINT("/%s", GET_IPADDR_STRING(bp + 12)); + ND_PRINT(" %s pref %u metric %u", + (GET_U_1(bp + 20) & 0x80) ? "RP-tree" : "SPT", + GET_BE_U_4(bp + 20) & 0x7fffffff, + GET_BE_U_4(bp + 24)); + break; + case PIMV1_TYPE_JOIN_PRUNE: + case PIMV1_TYPE_GRAFT: + case PIMV1_TYPE_GRAFT_ACK: + if (ndo->ndo_vflag) { + if (len < 8) + goto trunc; + pimv1_join_prune_print(ndo, bp + 8, len - 8); + } + break; + } + if ((GET_U_1(bp + 4) >> 4) != 1) + ND_PRINT(" [v%u]", GET_U_1(bp + 4) >> 4); + return; + +trunc: + nd_print_trunc(ndo); +} + +/* + * auto-RP is a cisco protocol, documented at + * ftp://ftpeng.cisco.com/ipmulticast/specs/pim-autorp-spec01.txt + * + * This implements version 1+, dated Sept 9, 1998. + */ +void +cisco_autorp_print(netdissect_options *ndo, + const u_char *bp, u_int len) +{ + u_int type; + u_int numrps; + u_int hold; + + ndo->ndo_protocol = "cisco_autorp"; + if (len < 8) + goto trunc; + ND_PRINT(" auto-rp "); + type = GET_U_1(bp); + switch (type) { + case 0x11: + ND_PRINT("candidate-advert"); + break; + case 0x12: + ND_PRINT("mapping"); + break; + default: + ND_PRINT("type-0x%02x", type); + break; + } + + numrps = GET_U_1(bp + 1); + + ND_PRINT(" Hold "); + hold = GET_BE_U_2(bp + 2); + if (hold) + unsigned_relts_print(ndo, GET_BE_U_2(bp + 2)); + else + ND_PRINT("FOREVER"); + + /* Next 4 bytes are reserved. */ + + bp += 8; len -= 8; + + /*XXX skip unless -v? */ + + /* + * Rest of packet: + * numrps entries of the form: + * 32 bits: RP + * 6 bits: reserved + * 2 bits: PIM version supported, bit 0 is "supports v1", 1 is "v2". + * 8 bits: # of entries for this RP + * each entry: 7 bits: reserved, 1 bit: negative, + * 8 bits: mask 32 bits: source + * lather, rinse, repeat. + */ + while (numrps != 0) { + u_int nentries; + char s; + + if (len < 4) + goto trunc; + ND_PRINT(" RP %s", GET_IPADDR_STRING(bp)); + bp += 4; + len -= 4; + if (len < 1) + goto trunc; + switch (GET_U_1(bp) & 0x3) { + case 0: ND_PRINT(" PIMv?"); + break; + case 1: ND_PRINT(" PIMv1"); + break; + case 2: ND_PRINT(" PIMv2"); + break; + case 3: ND_PRINT(" PIMv1+2"); + break; + } + if (GET_U_1(bp) & 0xfc) + ND_PRINT(" [rsvd=0x%02x]", GET_U_1(bp) & 0xfc); + bp += 1; + len -= 1; + if (len < 1) + goto trunc; + nentries = GET_U_1(bp); + bp += 1; + len -= 1; + s = ' '; + while (nentries != 0) { + if (len < 6) + goto trunc; + ND_PRINT("%c%s%s/%u", s, GET_U_1(bp) & 1 ? "!" : "", + GET_IPADDR_STRING(bp + 2), GET_U_1(bp + 1)); + if (GET_U_1(bp) & 0x02) { + ND_PRINT(" bidir"); + } + if (GET_U_1(bp) & 0xfc) { + ND_PRINT("[rsvd=0x%02x]", GET_U_1(bp) & 0xfc); + } + s = ','; + bp += 6; len -= 6; + nentries--; + } + numrps--; + } + return; + +trunc: + nd_print_trunc(ndo); +} + +void +pim_print(netdissect_options *ndo, + const u_char *bp, u_int len, const u_char *bp2) +{ + const struct pim *pim = (const struct pim *)bp; + uint8_t pim_typever; + + ndo->ndo_protocol = "pim"; + + pim_typever = GET_U_1(pim->pim_typever); + switch (PIM_VER(pim_typever)) { + case 2: + if (!ndo->ndo_vflag) { + ND_PRINT("PIMv%u, %s, length %u", + PIM_VER(pim_typever), + tok2str(pimv2_type_values,"Unknown Type",PIM_TYPE(pim_typever)), + len); + return; + } else { + ND_PRINT("PIMv%u, length %u\n\t%s", + PIM_VER(pim_typever), + len, + tok2str(pimv2_type_values,"Unknown Type",PIM_TYPE(pim_typever))); + pimv2_print(ndo, bp, len, bp2); + } + break; + default: + ND_PRINT("PIMv%u, length %u", + PIM_VER(pim_typever), + len); + break; + } +} + +/* + * PIMv2 uses encoded address representations. + * + * The last PIM-SM I-D before RFC2117 was published specified the + * following representation for unicast addresses. However, RFC2117 + * specified no encoding for unicast addresses with the unicast + * address length specified in the header. Therefore, we have to + * guess which encoding is being used (Cisco's PIMv2 implementation + * uses the non-RFC encoding). RFC2117 turns a previously "Reserved" + * field into a 'unicast-address-length-in-bytes' field. We guess + * that it's the draft encoding if this reserved field is zero. + * + * RFC2362 goes back to the encoded format, and calls the addr length + * field "reserved" again. + * + * The first byte is the address family, from: + * + * 0 Reserved + * 1 IP (IP version 4) + * 2 IP6 (IP version 6) + * 3 NSAP + * 4 HDLC (8-bit multidrop) + * 5 BBN 1822 + * 6 802 (includes all 802 media plus Ethernet "canonical format") + * 7 E.163 + * 8 E.164 (SMDS, Frame Relay, ATM) + * 9 F.69 (Telex) + * 10 X.121 (X.25, Frame Relay) + * 11 IPX + * 12 Appletalk + * 13 Decnet IV + * 14 Banyan Vines + * 15 E.164 with NSAP format subaddress + * + * In addition, the second byte is an "Encoding". 0 is the default + * encoding for the address family, and no other encodings are currently + * specified. + * + */ + +enum pimv2_addrtype { + pimv2_unicast, pimv2_group, pimv2_source +}; + +/* 0 1 2 3 + * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Addr Family | Encoding Type | Unicast Address | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+++++++ + * 0 1 2 3 + * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Addr Family | Encoding Type | Reserved | Mask Len | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Group multicast Address | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * 0 1 2 3 + * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Addr Family | Encoding Type | Rsrvd |S|W|R| Mask Len | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Source Address | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + */ +static int +pimv2_addr_print(netdissect_options *ndo, + const u_char *bp, u_int len, enum pimv2_addrtype at, + u_int addr_len, int silent) +{ + u_int af; + int hdrlen; + + if (addr_len == 0) { + if (len < 2) + goto trunc; + switch (GET_U_1(bp)) { + case 1: + af = AF_INET; + addr_len = (u_int)sizeof(nd_ipv4); + break; + case 2: + af = AF_INET6; + addr_len = (u_int)sizeof(nd_ipv6); + break; + default: + return -1; + } + if (GET_U_1(bp + 1) != 0) + return -1; + hdrlen = 2; + } else { + switch (addr_len) { + case sizeof(nd_ipv4): + af = AF_INET; + break; + case sizeof(nd_ipv6): + af = AF_INET6; + break; + default: + return -1; + break; + } + hdrlen = 0; + } + + bp += hdrlen; + len -= hdrlen; + switch (at) { + case pimv2_unicast: + if (len < addr_len) + goto trunc; + ND_TCHECK_LEN(bp, addr_len); + if (af == AF_INET) { + if (!silent) + ND_PRINT("%s", GET_IPADDR_STRING(bp)); + } + else if (af == AF_INET6) { + if (!silent) + ND_PRINT("%s", GET_IP6ADDR_STRING(bp)); + } + return hdrlen + addr_len; + case pimv2_group: + case pimv2_source: + if (len < addr_len + 2) + goto trunc; + ND_TCHECK_LEN(bp, addr_len + 2); + if (af == AF_INET) { + if (!silent) { + ND_PRINT("%s", GET_IPADDR_STRING(bp + 2)); + if (GET_U_1(bp + 1) != 32) + ND_PRINT("/%u", GET_U_1(bp + 1)); + } + } + else if (af == AF_INET6) { + if (!silent) { + ND_PRINT("%s", GET_IP6ADDR_STRING(bp + 2)); + if (GET_U_1(bp + 1) != 128) + ND_PRINT("/%u", GET_U_1(bp + 1)); + } + } + if (GET_U_1(bp) && !silent) { + if (at == pimv2_group) { + ND_PRINT("(0x%02x)", GET_U_1(bp)); + } else { + ND_PRINT("(%s%s%s", + GET_U_1(bp) & 0x04 ? "S" : "", + GET_U_1(bp) & 0x02 ? "W" : "", + GET_U_1(bp) & 0x01 ? "R" : ""); + if (GET_U_1(bp) & 0xf8) { + ND_PRINT("+0x%02x", + GET_U_1(bp) & 0xf8); + } + ND_PRINT(")"); + } + } + return hdrlen + 2 + addr_len; + default: + return -1; + } +trunc: + return -1; +} + +enum checksum_status { + CORRECT, + INCORRECT, + UNVERIFIED +}; + +static enum checksum_status +pimv2_check_checksum(netdissect_options *ndo, const u_char *bp, + const u_char *bp2, u_int len) +{ + const struct ip *ip; + u_int cksum; + + if (!ND_TTEST_LEN(bp, len)) { + /* We don't have all the data. */ + return (UNVERIFIED); + } + ip = (const struct ip *)bp2; + if (IP_V(ip) == 4) { + struct cksum_vec vec[1]; + + vec[0].ptr = bp; + vec[0].len = len; + cksum = in_cksum(vec, 1); + return (cksum ? INCORRECT : CORRECT); + } else if (IP_V(ip) == 6) { + const struct ip6_hdr *ip6; + + ip6 = (const struct ip6_hdr *)bp2; + cksum = nextproto6_cksum(ndo, ip6, bp, len, len, IPPROTO_PIM); + return (cksum ? INCORRECT : CORRECT); + } else { + return (UNVERIFIED); + } +} + +static void +pimv2_print(netdissect_options *ndo, + const u_char *bp, u_int len, const u_char *bp2) +{ + const struct pim *pim = (const struct pim *)bp; + int advance; + int subtype; + enum checksum_status cksum_status; + u_int pim_typever; + u_int pimv2_addr_len; + + ndo->ndo_protocol = "pimv2"; + if (len < 2) { + ND_PRINT("[length %u < 2]", len); + nd_print_invalid(ndo); + return; + } + pim_typever = GET_U_1(pim->pim_typever); + /* RFC5015 allocates the high 4 bits of pim_rsv for "subtype". */ + pimv2_addr_len = GET_U_1(pim->pim_rsv) & 0x0f; + if (pimv2_addr_len != 0) + ND_PRINT(", RFC2117-encoding"); + + if (len < 4) { + ND_PRINT("[length %u < 4]", len); + nd_print_invalid(ndo); + return; + } + ND_PRINT(", cksum 0x%04x ", GET_BE_U_2(pim->pim_cksum)); + if (GET_BE_U_2(pim->pim_cksum) == 0) { + ND_PRINT("(unverified)"); + } else { + if (PIM_TYPE(pim_typever) == PIMV2_TYPE_REGISTER) { + /* + * The checksum only covers the packet header, + * not the encapsulated packet. + */ + cksum_status = pimv2_check_checksum(ndo, bp, bp2, 8); + if (cksum_status == INCORRECT) { + /* + * To quote RFC 4601, "For interoperability + * reasons, a message carrying a checksum + * calculated over the entire PIM Register + * message should also be accepted." + */ + cksum_status = pimv2_check_checksum(ndo, bp, bp2, len); + } + } else { + /* + * The checksum covers the entire packet. + */ + cksum_status = pimv2_check_checksum(ndo, bp, bp2, len); + } + switch (cksum_status) { + + case CORRECT: + ND_PRINT("(correct)"); + break; + + case INCORRECT: + ND_PRINT("(incorrect)"); + break; + + case UNVERIFIED: + ND_PRINT("(unverified)"); + break; + } + } + bp += 4; + len -= 4; + + switch (PIM_TYPE(pim_typever)) { + case PIMV2_TYPE_HELLO: + { + uint16_t otype, olen; + while (len > 0) { + if (len < 4) + goto trunc; + otype = GET_BE_U_2(bp); + olen = GET_BE_U_2(bp + 2); + ND_PRINT("\n\t %s Option (%u), length %u, Value: ", + tok2str(pimv2_hello_option_values, "Unknown", otype), + otype, + olen); + bp += 4; + len -= 4; + + if (len < olen) + goto trunc; + ND_TCHECK_LEN(bp, olen); + switch (otype) { + case PIMV2_HELLO_OPTION_HOLDTIME: + if (olen != 2) { + ND_PRINT("[option length %u != 2]", olen); + nd_print_invalid(ndo); + return; + } else { + unsigned_relts_print(ndo, + GET_BE_U_2(bp)); + } + break; + + case PIMV2_HELLO_OPTION_LANPRUNEDELAY: + if (olen != 4) { + ND_PRINT("[option length %u != 4]", olen); + nd_print_invalid(ndo); + return; + } else { + char t_bit; + uint16_t lan_delay, override_interval; + lan_delay = GET_BE_U_2(bp); + override_interval = GET_BE_U_2(bp + 2); + t_bit = (lan_delay & 0x8000)? 1 : 0; + lan_delay &= ~0x8000; + ND_PRINT("\n\t T-bit=%u, LAN delay %ums, Override interval %ums", + t_bit, lan_delay, override_interval); + } + break; + + case PIMV2_HELLO_OPTION_DR_PRIORITY_OLD: + case PIMV2_HELLO_OPTION_DR_PRIORITY: + switch (olen) { + case 0: + ND_PRINT("Bi-Directional Capability (Old)"); + break; + case 4: + ND_PRINT("%u", GET_BE_U_4(bp)); + break; + default: + ND_PRINT("[option length %u != 4]", olen); + nd_print_invalid(ndo); + return; + break; + } + break; + + case PIMV2_HELLO_OPTION_GENID: + if (olen != 4) { + ND_PRINT("[option length %u != 4]", olen); + nd_print_invalid(ndo); + return; + } else { + ND_PRINT("0x%08x", GET_BE_U_4(bp)); + } + break; + + case PIMV2_HELLO_OPTION_REFRESH_CAP: + if (olen != 4) { + ND_PRINT("[option length %u != 4]", olen); + nd_print_invalid(ndo); + return; + } else { + ND_PRINT("v%u", GET_U_1(bp)); + if (GET_U_1(bp + 1) != 0) { + ND_PRINT(", interval "); + unsigned_relts_print(ndo, + GET_U_1(bp + 1)); + } + if (GET_BE_U_2(bp + 2) != 0) { + ND_PRINT(" ?0x%04x?", + GET_BE_U_2(bp + 2)); + } + } + break; + + case PIMV2_HELLO_OPTION_BIDIR_CAP: + break; + + case PIMV2_HELLO_OPTION_ADDRESS_LIST_OLD: + case PIMV2_HELLO_OPTION_ADDRESS_LIST: + if (ndo->ndo_vflag > 1) { + const u_char *ptr = bp; + u_int plen = len; + while (ptr < (bp+olen)) { + ND_PRINT("\n\t "); + advance = pimv2_addr_print(ndo, ptr, plen, pimv2_unicast, pimv2_addr_len, 0); + if (advance < 0) + goto trunc; + ptr += advance; + plen -= advance; + } + } + break; + default: + if (ndo->ndo_vflag <= 1) + print_unknown_data(ndo, bp, "\n\t ", olen); + break; + } + /* do we want to see an additionally hexdump ? */ + if (ndo->ndo_vflag> 1) + print_unknown_data(ndo, bp, "\n\t ", olen); + bp += olen; + len -= olen; + } + break; + } + + case PIMV2_TYPE_REGISTER: + { + const struct ip *ip; + + if (len < 4) + goto trunc; + ND_TCHECK_LEN(bp, PIMV2_REGISTER_FLAG_LEN); + + ND_PRINT(", Flags [ %s ]\n\t", + tok2str(pimv2_register_flag_values, + "none", + GET_BE_U_4(bp))); + + bp += 4; len -= 4; + /* encapsulated multicast packet */ + if (len == 0) + goto trunc; + ip = (const struct ip *)bp; + switch (IP_V(ip)) { + case 0: /* Null header */ + ND_PRINT("IP-Null-header %s > %s", + GET_IPADDR_STRING(ip->ip_src), + GET_IPADDR_STRING(ip->ip_dst)); + break; + + case 4: /* IPv4 */ + ip_print(ndo, bp, len); + break; + + case 6: /* IPv6 */ + ip6_print(ndo, bp, len); + break; + + default: + ND_PRINT("IP ver %u", IP_V(ip)); + break; + } + break; + } + + case PIMV2_TYPE_REGISTER_STOP: + ND_PRINT(" group="); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_group, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; len -= advance; + ND_PRINT(" source="); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_unicast, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; len -= advance; + break; + + case PIMV2_TYPE_JOIN_PRUNE: + case PIMV2_TYPE_GRAFT: + case PIMV2_TYPE_GRAFT_ACK: + + + /* + * 0 1 2 3 + * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * |PIM Ver| Type | Addr length | Checksum | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Unicast-Upstream Neighbor Address | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Reserved | Num groups | Holdtime | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Encoded-Multicast Group Address-1 | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Number of Joined Sources | Number of Pruned Sources | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Encoded-Joined Source Address-1 | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | . | + * | . | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Encoded-Joined Source Address-n | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Encoded-Pruned Source Address-1 | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | . | + * | . | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Encoded-Pruned Source Address-n | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | . | + * | . | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + * | Encoded-Multicast Group Address-n | + * +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ + */ + + { + uint8_t ngroup; + uint16_t holdtime; + uint16_t njoin; + uint16_t nprune; + u_int i, j; + + if (PIM_TYPE(pim_typever) != 7) { /*not for Graft-ACK*/ + ND_PRINT(", upstream-neighbor: "); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_unicast, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; len -= advance; + } + if (len < 4) + goto trunc; + ND_TCHECK_4(bp); + ngroup = GET_U_1(bp + 1); + holdtime = GET_BE_U_2(bp + 2); + ND_PRINT("\n\t %u group(s)", ngroup); + if (PIM_TYPE(pim_typever) != 7) { /*not for Graft-ACK*/ + ND_PRINT(", holdtime: "); + if (holdtime == 0xffff) + ND_PRINT("infinite"); + else + unsigned_relts_print(ndo, holdtime); + } + bp += 4; len -= 4; + for (i = 0; i < ngroup; i++) { + ND_PRINT("\n\t group #%u: ", i+1); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_group, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; len -= advance; + if (len < 4) + goto trunc; + ND_TCHECK_4(bp); + njoin = GET_BE_U_2(bp); + nprune = GET_BE_U_2(bp + 2); + ND_PRINT(", joined sources: %u, pruned sources: %u", njoin, nprune); + bp += 4; len -= 4; + for (j = 0; j < njoin; j++) { + ND_PRINT("\n\t joined source #%u: ", j+1); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_source, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; len -= advance; + } + for (j = 0; j < nprune; j++) { + ND_PRINT("\n\t pruned source #%u: ", j+1); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_source, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; len -= advance; + } + } + break; + } + + case PIMV2_TYPE_BOOTSTRAP: + { + u_int i, j, frpcnt; + + /* Fragment Tag, Hash Mask len, and BSR-priority */ + if (len < 2) + goto trunc; + ND_PRINT(" tag=%x", GET_BE_U_2(bp)); + bp += 2; + len -= 2; + if (len < 1) + goto trunc; + ND_PRINT(" hashmlen=%u", GET_U_1(bp)); + if (len < 2) + goto trunc; + ND_TCHECK_1(bp + 2); + ND_PRINT(" BSRprio=%u", GET_U_1(bp + 1)); + bp += 2; + len -= 2; + + /* Encoded-Unicast-BSR-Address */ + ND_PRINT(" BSR="); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_unicast, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; + len -= advance; + + for (i = 0; len > 0; i++) { + /* Encoded-Group Address */ + ND_PRINT(" (group%u: ", i); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_group, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; + len -= advance; + + /* RP-Count, Frag RP-Cnt, and rsvd */ + if (len < 1) + goto trunc; + ND_PRINT(" RPcnt=%u", GET_U_1(bp)); + if (len < 2) + goto trunc; + frpcnt = GET_U_1(bp + 1); + ND_PRINT(" FRPcnt=%u", frpcnt); + if (len < 4) + goto trunc; + bp += 4; + len -= 4; + + for (j = 0; j < frpcnt && len > 0; j++) { + /* each RP info */ + ND_PRINT(" RP%u=", j); + if ((advance = pimv2_addr_print(ndo, bp, len, + pimv2_unicast, + pimv2_addr_len, + 0)) < 0) + goto trunc; + bp += advance; + len -= advance; + + if (len < 2) + goto trunc; + ND_PRINT(",holdtime="); + unsigned_relts_print(ndo, + GET_BE_U_2(bp)); + if (len < 3) + goto trunc; + ND_PRINT(",prio=%u", GET_U_1(bp + 2)); + if (len < 4) + goto trunc; + bp += 4; + len -= 4; + } + ND_PRINT(")"); + } + break; + } + case PIMV2_TYPE_ASSERT: + ND_PRINT(" group="); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_group, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; len -= advance; + ND_PRINT(" src="); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_unicast, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; len -= advance; + if (len < 8) + goto trunc; + ND_TCHECK_8(bp); + if (GET_U_1(bp) & 0x80) + ND_PRINT(" RPT"); + ND_PRINT(" pref=%u", GET_BE_U_4(bp) & 0x7fffffff); + ND_PRINT(" metric=%u", GET_BE_U_4(bp + 4)); + break; + + case PIMV2_TYPE_CANDIDATE_RP: + { + u_int i, pfxcnt; + + /* Prefix-Cnt, Priority, and Holdtime */ + if (len < 1) + goto trunc; + ND_PRINT(" prefix-cnt=%u", GET_U_1(bp)); + pfxcnt = GET_U_1(bp); + if (len < 2) + goto trunc; + ND_PRINT(" prio=%u", GET_U_1(bp + 1)); + if (len < 4) + goto trunc; + ND_PRINT(" holdtime="); + unsigned_relts_print(ndo, GET_BE_U_2(bp + 2)); + bp += 4; + len -= 4; + + /* Encoded-Unicast-RP-Address */ + ND_PRINT(" RP="); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_unicast, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; + len -= advance; + + /* Encoded-Group Addresses */ + for (i = 0; i < pfxcnt && len > 0; i++) { + ND_PRINT(" Group%u=", i); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_group, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; + len -= advance; + } + break; + } + + case PIMV2_TYPE_PRUNE_REFRESH: + ND_PRINT(" src="); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_unicast, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; + len -= advance; + ND_PRINT(" grp="); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_group, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; + len -= advance; + ND_PRINT(" forwarder="); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_unicast, pimv2_addr_len, 0)) < 0) + goto trunc; + bp += advance; + len -= advance; + if (len < 2) + goto trunc; + ND_PRINT(" TUNR "); + unsigned_relts_print(ndo, GET_BE_U_2(bp)); + break; + + case PIMV2_TYPE_DF_ELECTION: + subtype = PIM_SUBTYPE(GET_U_1(pim->pim_rsv)); + ND_PRINT("\n\t %s,", tok2str( pimv2_df_election_flag_values, + "Unknown", subtype) ); + + ND_PRINT(" rpa="); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_unicast, pimv2_addr_len, 0)) < 0) { + goto trunc; + } + bp += advance; + len -= advance; + ND_PRINT(" sender pref=%u", GET_BE_U_4(bp) ); + ND_PRINT(" sender metric=%u", GET_BE_U_4(bp + 4)); + + bp += 8; + len -= 8; + + switch (subtype) { + case PIMV2_DF_ELECTION_BACKOFF: + case PIMV2_DF_ELECTION_PASS: + ND_PRINT("\n\t %s addr=", PIMV2_DF_ELECTION_PASS_BACKOFF_STR(subtype)); + if ((advance = pimv2_addr_print(ndo, bp, len, pimv2_unicast, pimv2_addr_len, 0)) < 0) { + goto trunc; + } + bp += advance; + len -= advance; + + ND_PRINT(" %s pref=%u", PIMV2_DF_ELECTION_PASS_BACKOFF_STR(subtype), GET_BE_U_4(bp) ); + ND_PRINT(" %s metric=%u", PIMV2_DF_ELECTION_PASS_BACKOFF_STR(subtype), GET_BE_U_4(bp + 4)); + + bp += 8; + len -= 8; + + if (subtype == PIMV2_DF_ELECTION_BACKOFF) { + ND_PRINT(" interval %dms", GET_BE_U_2(bp)); + } + + break; + default: + break; + } + break; + + default: + ND_PRINT(" [type %u]", PIM_TYPE(pim_typever)); + break; + } + + return; + +trunc: + nd_print_trunc(ndo); +} |