Home | History | Annotate | Download | only in tcpdump
      1 /*
      2  * Copyright (c) 1992, 1993, 1994, 1995, 1996, 1997
      3  *	The Regents of the University of California.  All rights reserved.
      4  *
      5  * Redistribution and use in source and binary forms, with or without
      6  * modification, are permitted provided that: (1) source code distributions
      7  * retain the above copyright notice and this paragraph in its entirety, (2)
      8  * distributions including binary code include the above copyright notice and
      9  * this paragraph in its entirety in the documentation or other materials
     10  * provided with the distribution, and (3) all advertising materials mentioning
     11  * features or use of this software display the following acknowledgement:
     12  * ``This product includes software developed by the University of California,
     13  * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
     14  * the University nor the names of its contributors may be used to endorse
     15  * or promote products derived from this software without specific prior
     16  * written permission.
     17  * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
     18  * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
     19  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
     20  *
     21  * Code by Gert Doering, SpaceNet GmbH, gert (at) space.net
     22  *
     23  * Reference documentation:
     24  *    http://www.cisco.com/univercd/cc/td/doc/product/lan/trsrb/frames.htm
     25  */
     26 
     27 #define NETDISSECT_REWORKED
     28 #ifdef HAVE_CONFIG_H
     29 #include "config.h"
     30 #endif
     31 
     32 #include <tcpdump-stdinc.h>
     33 
     34 #include <string.h>
     35 
     36 #include "interface.h"
     37 #include "addrtoname.h"
     38 #include "extract.h"			/* must come after interface.h */
     39 #include "nlpid.h"
     40 
     41 static const char tstr[] = "[|cdp]";
     42 
     43 #define CDP_HEADER_LEN             4
     44 #define CDP_HEADER_VERSION_OFFSET  0
     45 #define CDP_HEADER_TTL_OFFSET      1
     46 #define CDP_HEADER_CHECKSUM_OFFSET 2
     47 
     48 #define CDP_TLV_HEADER_LEN  4
     49 #define CDP_TLV_TYPE_OFFSET 0
     50 #define CDP_TLV_LEN_OFFSET  2
     51 
     52 static const struct tok cdp_tlv_values[] = {
     53     { 0x01,             "Device-ID"},
     54     { 0x02,             "Address"},
     55     { 0x03,             "Port-ID"},
     56     { 0x04,             "Capability"},
     57     { 0x05,             "Version String"},
     58     { 0x06,             "Platform"},
     59     { 0x07,             "Prefixes"},
     60     { 0x08,             "Protocol-Hello option"},
     61     { 0x09,             "VTP Management Domain"},
     62     { 0x0a,             "Native VLAN ID"},
     63     { 0x0b,             "Duplex"},
     64     { 0x0e,             "ATA-186 VoIP VLAN request"},
     65     { 0x0f,             "ATA-186 VoIP VLAN assignment"},
     66     { 0x10,             "power consumption"},
     67     { 0x11,             "MTU"},
     68     { 0x12,             "AVVID trust bitmap"},
     69     { 0x13,             "AVVID untrusted ports CoS"},
     70     { 0x14,             "System Name"},
     71     { 0x15,             "System Object ID (not decoded)"},
     72     { 0x16,             "Management Addresses"},
     73     { 0x17,             "Physical Location"},
     74     { 0, NULL}
     75 };
     76 
     77 static const struct tok cdp_capability_values[] = {
     78     { 0x01,             "Router" },
     79     { 0x02,             "Transparent Bridge" },
     80     { 0x04,             "Source Route Bridge" },
     81     { 0x08,             "L2 Switch" },
     82     { 0x10,             "L3 capable" },
     83     { 0x20,             "IGMP snooping" },
     84     { 0x40,             "L1 capable" },
     85     { 0, NULL }
     86 };
     87 
     88 static int cdp_print_addr(netdissect_options *, const u_char *, int);
     89 static int cdp_print_prefixes(netdissect_options *, const u_char *, int);
     90 static unsigned long cdp_get_number(const u_char *, int);
     91 
     92 void
     93 cdp_print(netdissect_options *ndo,
     94           const u_char *pptr, u_int length, u_int caplen)
     95 {
     96 	int type, len, i, j;
     97 	const u_char *tptr;
     98 
     99 	if (caplen < CDP_HEADER_LEN) {
    100 		ND_PRINT((ndo, "%s", tstr));
    101 		return;
    102 	}
    103 
    104 	tptr = pptr; /* temporary pointer */
    105 
    106 	ND_TCHECK2(*tptr, CDP_HEADER_LEN);
    107 	ND_PRINT((ndo, "CDPv%u, ttl: %us", *(tptr + CDP_HEADER_VERSION_OFFSET),
    108 					   *(tptr + CDP_HEADER_TTL_OFFSET)));
    109 	if (ndo->ndo_vflag)
    110 		ND_PRINT((ndo, ", checksum: 0x%04x (unverified), length %u", EXTRACT_16BITS(tptr+CDP_HEADER_CHECKSUM_OFFSET), length));
    111 	tptr += CDP_HEADER_LEN;
    112 
    113 	while (tptr < (pptr+length)) {
    114 		ND_TCHECK2(*tptr, CDP_TLV_HEADER_LEN); /* read out Type and Length */
    115 		type = EXTRACT_16BITS(tptr+CDP_TLV_TYPE_OFFSET);
    116 		len  = EXTRACT_16BITS(tptr+CDP_TLV_LEN_OFFSET); /* object length includes the 4 bytes header length */
    117 		if (len < CDP_TLV_HEADER_LEN) {
    118 		    if (ndo->ndo_vflag)
    119 			ND_PRINT((ndo, "\n\t%s (0x%02x), TLV length: %u byte%s (too short)",
    120 			       tok2str(cdp_tlv_values,"unknown field type", type),
    121 			       type,
    122 			       len,
    123 			       PLURAL_SUFFIX(len))); /* plural */
    124 		    else
    125 			ND_PRINT((ndo, ", %s TLV length %u too short",
    126 			       tok2str(cdp_tlv_values,"unknown field type", type),
    127 			       len));
    128 		    break;
    129 		}
    130 		tptr += CDP_TLV_HEADER_LEN;
    131 		len -= CDP_TLV_HEADER_LEN;
    132 
    133 		ND_TCHECK2(*tptr, len);
    134 
    135 		if (ndo->ndo_vflag || type == 1) { /* in non-verbose mode just print Device-ID */
    136 
    137 		    if (ndo->ndo_vflag)
    138 			ND_PRINT((ndo, "\n\t%s (0x%02x), value length: %u byte%s: ",
    139 			       tok2str(cdp_tlv_values,"unknown field type", type),
    140 			       type,
    141 			       len,
    142 			       PLURAL_SUFFIX(len))); /* plural */
    143 
    144 		    switch (type) {
    145 
    146 		    case 0x01: /* Device-ID */
    147 			if (!ndo->ndo_vflag)
    148 			    ND_PRINT((ndo, ", Device-ID "));
    149 			ND_PRINT((ndo, "'"));
    150 			(void)fn_printn(ndo, tptr, len, NULL);
    151 			ND_PRINT((ndo, "'"));
    152 			break;
    153 		    case 0x02: /* Address */
    154 			if (cdp_print_addr(ndo, tptr, len) < 0)
    155 			    goto trunc;
    156 			break;
    157 		    case 0x03: /* Port-ID */
    158 			ND_PRINT((ndo, "'"));
    159 			(void)fn_printn(ndo, tptr, len, NULL);
    160 			ND_PRINT((ndo, "'"));
    161 			break;
    162 		    case 0x04: /* Capabilities */
    163 			if (len < 4)
    164 			    goto trunc;
    165 			ND_PRINT((ndo, "(0x%08x): %s",
    166 			       EXTRACT_32BITS(tptr),
    167 			       bittok2str(cdp_capability_values, "none", EXTRACT_32BITS(tptr))));
    168 			break;
    169 		    case 0x05: /* Version */
    170 			ND_PRINT((ndo, "\n\t  "));
    171 			for (i=0;i<len;i++) {
    172 			    j = *(tptr+i);
    173 			    ND_PRINT((ndo, "%c", j));
    174 			    if (j == 0x0a) /* lets rework the version string to get a nice indentation */
    175 				ND_PRINT((ndo, "\t  "));
    176 			}
    177 			break;
    178 		    case 0x06: /* Platform */
    179 			ND_PRINT((ndo, "'"));
    180 			(void)fn_printn(ndo, tptr, len, NULL);
    181 			ND_PRINT((ndo, "'"));
    182 			break;
    183 		    case 0x07: /* Prefixes */
    184 			if (cdp_print_prefixes(ndo, tptr, len) < 0)
    185 			    goto trunc;
    186 			break;
    187 		    case 0x08: /* Protocol Hello Option - not documented */
    188 			break;
    189 		    case 0x09: /* VTP Mgmt Domain  - CDPv2 */
    190 			ND_PRINT((ndo, "'"));
    191 			(void)fn_printn(ndo, tptr, len, NULL);
    192 			ND_PRINT((ndo, "'"));
    193 			break;
    194 		    case 0x0a: /* Native VLAN ID - CDPv2 */
    195 			if (len < 2)
    196 			    goto trunc;
    197 			ND_PRINT((ndo, "%d", EXTRACT_16BITS(tptr)));
    198 			break;
    199 		    case 0x0b: /* Duplex - CDPv2 */
    200 			if (len < 1)
    201 			    goto trunc;
    202 			ND_PRINT((ndo, "%s", *(tptr) ? "full": "half"));
    203 			break;
    204 
    205 		    /* http://www.cisco.com/c/en/us/td/docs/voice_ip_comm/cata/186/2_12_m/english/release/notes/186rn21m.html
    206 		     * plus more details from other sources
    207 		     */
    208 		    case 0x0e: /* ATA-186 VoIP VLAN request - incomplete doc. */
    209 			if (len < 3)
    210 			    goto trunc;
    211 			ND_PRINT((ndo, "app %d, vlan %d", *(tptr), EXTRACT_16BITS(tptr + 1)));
    212 			break;
    213 		    case 0x10: /* ATA-186 VoIP VLAN assignment - incomplete doc. */
    214 			ND_PRINT((ndo, "%1.2fW", cdp_get_number(tptr, len) / 1000.0));
    215 			break;
    216 		    case 0x11: /* MTU - not documented */
    217 			if (len < 4)
    218 			    goto trunc;
    219 			ND_PRINT((ndo, "%u bytes", EXTRACT_32BITS(tptr)));
    220 			break;
    221 		    case 0x12: /* AVVID trust bitmap - not documented */
    222 			if (len < 1)
    223 			    goto trunc;
    224 			ND_PRINT((ndo, "0x%02x", *(tptr)));
    225 			break;
    226 		    case 0x13: /* AVVID untrusted port CoS - not documented */
    227 			if (len < 1)
    228 			    goto trunc;
    229 			ND_PRINT((ndo, "0x%02x", *(tptr)));
    230 			break;
    231 		    case 0x14: /* System Name - not documented */
    232 			ND_PRINT((ndo, "'"));
    233 			(void)fn_printn(ndo, tptr, len, NULL);
    234 			ND_PRINT((ndo, "'"));
    235 			break;
    236 		    case 0x16: /* System Object ID - not documented */
    237 			if (cdp_print_addr(ndo, tptr, len) < 0)
    238 				goto trunc;
    239 			break;
    240 		    case 0x17: /* Physical Location - not documented */
    241 			if (len < 1)
    242 			    goto trunc;
    243 			ND_PRINT((ndo, "0x%02x", *(tptr)));
    244 			if (len > 1) {
    245 				ND_PRINT((ndo, "/"));
    246 				(void)fn_printn(ndo, tptr + 1, len - 1, NULL);
    247 			}
    248 			break;
    249 		    default:
    250 			print_unknown_data(ndo, tptr, "\n\t  ", len);
    251 			break;
    252 		    }
    253 		}
    254 		tptr = tptr+len;
    255 	}
    256 	if (ndo->ndo_vflag < 1)
    257 	    ND_PRINT((ndo, ", length %u", caplen));
    258 
    259 	return;
    260 trunc:
    261 	ND_PRINT((ndo, "%s", tstr));
    262 }
    263 
    264 /*
    265  * Protocol type values.
    266  *
    267  * PT_NLPID means that the protocol type field contains an OSI NLPID.
    268  *
    269  * PT_IEEE_802_2 means that the protocol type field contains an IEEE 802.2
    270  * LLC header that specifies that the payload is for that protocol.
    271  */
    272 #define PT_NLPID		1	/* OSI NLPID */
    273 #define PT_IEEE_802_2		2	/* IEEE 802.2 LLC header */
    274 
    275 static int
    276 cdp_print_addr(netdissect_options *ndo,
    277 	       const u_char * p, int l)
    278 {
    279 	int pt, pl, al, num;
    280 	const u_char *endp = p + l;
    281 #ifdef INET6
    282 	static const u_char prot_ipv6[] = {
    283 		0xaa, 0xaa, 0x03, 0x00, 0x00, 0x00, 0x86, 0xdd
    284 	};
    285 #endif
    286 
    287 	ND_TCHECK2(*p, 4);
    288 	if (p + 4 > endp)
    289 		goto trunc;
    290 	num = EXTRACT_32BITS(p);
    291 	p += 4;
    292 
    293 	while (p < endp && num >= 0) {
    294 		ND_TCHECK2(*p, 2);
    295 		if (p + 2 > endp)
    296 			goto trunc;
    297 		pt = p[0];		/* type of "protocol" field */
    298 		pl = p[1];		/* length of "protocol" field */
    299 		p += 2;
    300 
    301 		ND_TCHECK2(p[pl], 2);
    302 		if (p + pl + 2 > endp)
    303 			goto trunc;
    304 		al = EXTRACT_16BITS(&p[pl]);	/* address length */
    305 
    306 		if (pt == PT_NLPID && pl == 1 && *p == NLPID_IP && al == 4) {
    307 			/*
    308 			 * IPv4: protocol type = NLPID, protocol length = 1
    309 			 * (1-byte NLPID), protocol = 0xcc (NLPID for IPv4),
    310 			 * address length = 4
    311 			 */
    312 			p += 3;
    313 
    314 			ND_TCHECK2(*p, 4);
    315 			if (p + 4 > endp)
    316 				goto trunc;
    317 			ND_PRINT((ndo, "IPv4 (%u) %s", num, ipaddr_string(ndo, p)));
    318 			p += 4;
    319 		}
    320 #ifdef INET6
    321 		else if (pt == PT_IEEE_802_2 && pl == 8 &&
    322 		    memcmp(p, prot_ipv6, 8) == 0 && al == 16) {
    323 			/*
    324 			 * IPv6: protocol type = IEEE 802.2 header,
    325 			 * protocol length = 8 (size of LLC+SNAP header),
    326 			 * protocol = LLC+SNAP header with the IPv6
    327 			 * Ethertype, address length = 16
    328 			 */
    329 			p += 10;
    330 			ND_TCHECK2(*p, al);
    331 			if (p + al > endp)
    332 				goto trunc;
    333 
    334 			ND_PRINT((ndo, "IPv6 (%u) %s", num, ip6addr_string(ndo, p)));
    335 			p += al;
    336 		}
    337 #endif
    338 		else {
    339 			/*
    340 			 * Generic case: just print raw data
    341 			 */
    342 			ND_TCHECK2(*p, pl);
    343 			if (p + pl > endp)
    344 				goto trunc;
    345 			ND_PRINT((ndo, "pt=0x%02x, pl=%d, pb=", *(p - 2), pl));
    346 			while (pl-- > 0)
    347 				ND_PRINT((ndo, " %02x", *p++));
    348 			ND_TCHECK2(*p, 2);
    349 			if (p + 2 > endp)
    350 				goto trunc;
    351 			al = (*p << 8) + *(p + 1);
    352 			ND_PRINT((ndo, ", al=%d, a=", al));
    353 			p += 2;
    354 			ND_TCHECK2(*p, al);
    355 			if (p + al > endp)
    356 				goto trunc;
    357 			while (al-- > 0)
    358 				ND_PRINT((ndo, " %02x", *p++));
    359 		}
    360 		num--;
    361 		if (num)
    362 			ND_PRINT((ndo, " "));
    363 	}
    364 
    365 	return 0;
    366 
    367 trunc:
    368 	return -1;
    369 }
    370 
    371 
    372 static int
    373 cdp_print_prefixes(netdissect_options *ndo,
    374 		   const u_char * p, int l)
    375 {
    376 	if (l % 5)
    377 		goto trunc;
    378 
    379 	ND_PRINT((ndo, " IPv4 Prefixes (%d):", l / 5));
    380 
    381 	while (l > 0) {
    382 		ND_PRINT((ndo, " %u.%u.%u.%u/%u", p[0], p[1], p[2], p[3], p[4]));
    383 		l -= 5;
    384 		p += 5;
    385 	}
    386 
    387 	return 0;
    388 
    389 trunc:
    390 	return -1;
    391 }
    392 
    393 /* read in a <n>-byte number, MSB first
    394  * (of course this can handle max sizeof(long))
    395  */
    396 static unsigned long cdp_get_number(const u_char * p, int l)
    397 {
    398     unsigned long res=0;
    399     while( l>0 )
    400     {
    401 	res = (res<<8) + *p;
    402 	p++; l--;
    403     }
    404     return res;
    405 }
    406