1 /* 2 * Copyright (c) 1993, 1994 Jeffrey C. Mogul, Digital Equipment Corporation, 3 * Western Research Laboratory. All rights reserved. 4 * Copyright (c) 2001 Compaq Computer Corporation. All rights reserved. 5 * 6 * Permission to use, copy, and modify this software and its 7 * documentation is hereby granted only under the following terms and 8 * conditions. Both the above copyright notice and this permission 9 * notice must appear in all copies of the software, derivative works 10 * or modified versions, and any portions thereof, and both notices 11 * must appear in supporting documentation. 12 * 13 * Redistribution and use in source and binary forms, with or without 14 * modification, are permitted provided that the following conditions 15 * are met: 16 * 1. Redistributions of source code must retain the above copyright 17 * notice, this list of conditions and the following disclaimer. 18 * 2. Redistributions in binary form must reproduce the above copyright 19 * notice, this list of conditions and the following disclaimer in 20 * the documentation and/or other materials provided with the 21 * distribution. 22 * 23 * THE SOFTWARE IS PROVIDED "AS IS" AND COMPAQ COMPUTER CORPORATION 24 * DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING 25 * ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS. IN NO 26 * EVENT SHALL COMPAQ COMPUTER CORPORATION BE LIABLE FOR ANY 27 * SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES 28 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN 29 * AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING 30 * OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS 31 * SOFTWARE. 32 */ 33 34 /* 35 * parsenfsfh.c - portable parser for NFS file handles 36 * uses all sorts of heuristics 37 * 38 * Jeffrey C. Mogul 39 * Digital Equipment Corporation 40 * Western Research Laboratory 41 */ 42 43 #define NETDISSECT_REWORKED 44 #ifdef HAVE_CONFIG_H 45 #include "config.h" 46 #endif 47 48 #include <tcpdump-stdinc.h> 49 50 #include <stdio.h> 51 #include <string.h> 52 53 #include "interface.h" 54 #include "nfsfh.h" 55 56 /* 57 * This routine attempts to parse a file handle (in network byte order), 58 * using heuristics to guess what kind of format it is in. See the 59 * file "fhandle_layouts" for a detailed description of the various 60 * patterns we know about. 61 * 62 * The file handle is parsed into our internal representation of a 63 * file-system id, and an internal representation of an inode-number. 64 */ 65 66 #define FHT_UNKNOWN 0 67 #define FHT_AUSPEX 1 68 #define FHT_DECOSF 2 69 #define FHT_IRIX4 3 70 #define FHT_IRIX5 4 71 #define FHT_SUNOS3 5 72 #define FHT_SUNOS4 6 73 #define FHT_ULTRIX 7 74 #define FHT_VMSUCX 8 75 #define FHT_SUNOS5 9 76 #define FHT_AIX32 10 77 #define FHT_HPUX9 11 78 #define FHT_BSD44 12 79 80 #ifdef ultrix 81 /* Nasty hack to keep the Ultrix C compiler from emitting bogus warnings */ 82 #define XFF(x) ((uint32_t)(x)) 83 #else 84 #define XFF(x) (x) 85 #endif 86 87 #define make_uint32(msb,b,c,lsb)\ 88 (XFF(lsb) + (XFF(c)<<8) + (XFF(b)<<16) + (XFF(msb)<<24)) 89 90 #define make_uint24(msb,b, lsb)\ 91 (XFF(lsb) + (XFF(b)<<8) + (XFF(msb)<<16)) 92 93 #define make_uint16(msb,lsb)\ 94 (XFF(lsb) + (XFF(msb)<<8)) 95 96 #ifdef __alpha 97 /* or other 64-bit systems */ 98 #define make_uint48(msb,b,c,d,e,lsb)\ 99 ((lsb) + ((e)<<8) + ((d)<<16) + ((c)<<24) + ((b)<<32) + ((msb)<<40)) 100 #else 101 /* on 32-bit systems ignore high-order bits */ 102 #define make_uint48(msb,b,c,d,e,lsb)\ 103 ((lsb) + ((e)<<8) + ((d)<<16) + ((c)<<24)) 104 #endif 105 106 static int is_UCX(const unsigned char *); 107 108 void 109 Parse_fh(register const unsigned char *fh, int len _U_, my_fsid *fsidp, 110 uint32_t *inop, 111 const char **osnamep, /* if non-NULL, return OS name here */ 112 const char **fsnamep, /* if non-NULL, return server fs name here (for VMS) */ 113 int ourself) /* true if file handle was generated on this host */ 114 { 115 register const unsigned char *fhp = fh; 116 uint32_t temp; 117 int fhtype = FHT_UNKNOWN; 118 int i; 119 120 if (ourself) { 121 /* File handle generated on this host, no need for guessing */ 122 #if defined(IRIX40) 123 fhtype = FHT_IRIX4; 124 #endif 125 #if defined(IRIX50) 126 fhtype = FHT_IRIX5; 127 #endif 128 #if defined(IRIX51) 129 fhtype = FHT_IRIX5; 130 #endif 131 #if defined(SUNOS4) 132 fhtype = FHT_SUNOS4; 133 #endif 134 #if defined(SUNOS5) 135 fhtype = FHT_SUNOS5; 136 #endif 137 #if defined(ultrix) 138 fhtype = FHT_ULTRIX; 139 #endif 140 #if defined(__osf__) 141 fhtype = FHT_DECOSF; 142 #endif 143 #if defined(__NetBSD__) || defined(__FreeBSD__) || defined(__DragonFly__) \ 144 || defined(__OpenBSD__) 145 fhtype = FHT_BSD44; 146 #endif 147 } 148 /* 149 * This is basically a big decision tree 150 */ 151 else if ((fhp[0] == 0) && (fhp[1] == 0)) { 152 /* bytes[0,1] == (0,0); rules out Ultrix, IRIX5, SUNOS5 */ 153 /* probably rules out HP-UX, AIX unless they allow major=0 */ 154 if ((fhp[2] == 0) && (fhp[3] == 0)) { 155 /* bytes[2,3] == (0,0); must be Auspex */ 156 /* XXX or could be Ultrix+MASSBUS "hp" disk? */ 157 fhtype = FHT_AUSPEX; 158 } 159 else { 160 /* 161 * bytes[2,3] != (0,0); rules out Auspex, could be 162 * DECOSF, SUNOS4, or IRIX4 163 */ 164 if ((fhp[4] != 0) && (fhp[5] == 0) && 165 (fhp[8] == 12) && (fhp[9] == 0)) { 166 /* seems to be DECOSF, with minor == 0 */ 167 fhtype = FHT_DECOSF; 168 } 169 else { 170 /* could be SUNOS4 or IRIX4 */ 171 /* XXX the test of fhp[5] == 8 could be wrong */ 172 if ((fhp[4] == 0) && (fhp[5] == 8) && (fhp[6] == 0) && 173 (fhp[7] == 0)) { 174 /* looks like a length, not a file system typecode */ 175 fhtype = FHT_IRIX4; 176 } 177 else { 178 /* by elimination */ 179 fhtype = FHT_SUNOS4; 180 } 181 } 182 } 183 } 184 else { 185 /* 186 * bytes[0,1] != (0,0); rules out Auspex, IRIX4, SUNOS4 187 * could be IRIX5, DECOSF, UCX, Ultrix, SUNOS5 188 * could be AIX, HP-UX 189 */ 190 if ((fhp[2] == 0) && (fhp[3] == 0)) { 191 /* 192 * bytes[2,3] == (0,0); rules out OSF, probably not UCX 193 * (unless the exported device name is just one letter!), 194 * could be Ultrix, IRIX5, AIX, or SUNOS5 195 * might be HP-UX (depends on their values for minor devs) 196 */ 197 if ((fhp[6] == 0) && (fhp[7] == 0)) { 198 fhtype = FHT_BSD44; 199 } 200 /*XXX we probably only need to test of these two bytes */ 201 else if ((fhp[21] == 0) && (fhp[23] == 0)) { 202 fhtype = FHT_ULTRIX; 203 } 204 else { 205 /* Could be SUNOS5/IRIX5, maybe AIX */ 206 /* XXX no obvious difference between SUNOS5 and IRIX5 */ 207 if (fhp[9] == 10) 208 fhtype = FHT_SUNOS5; 209 /* XXX what about AIX? */ 210 } 211 } 212 else { 213 /* 214 * bytes[2,3] != (0,0); rules out Ultrix, could be 215 * DECOSF, SUNOS5, IRIX5, AIX, HP-UX, or UCX 216 */ 217 if ((fhp[8] == 12) && (fhp[9] == 0)) { 218 fhtype = FHT_DECOSF; 219 } 220 else if ((fhp[8] == 0) && (fhp[9] == 10)) { 221 /* could be SUNOS5/IRIX5, AIX, HP-UX */ 222 if ((fhp[7] == 0) && (fhp[6] == 0) && 223 (fhp[5] == 0) && (fhp[4] == 0)) { 224 /* XXX is this always true of HP-UX? */ 225 fhtype = FHT_HPUX9; 226 } 227 else if (fhp[7] == 2) { 228 /* This would be MNT_NFS on AIX, which is impossible */ 229 fhtype = FHT_SUNOS5; /* or maybe IRIX5 */ 230 } 231 else { 232 /* 233 * XXX Could be SUNOS5/IRIX5 or AIX. I don't 234 * XXX see any way to disambiguate these, so 235 * XXX I'm going with the more likely guess. 236 * XXX Sorry, Big Blue. 237 */ 238 fhtype = FHT_SUNOS5; /* or maybe IRIX5 */ 239 } 240 } 241 else { 242 if (is_UCX(fhp)) { 243 fhtype = FHT_VMSUCX; 244 } 245 else { 246 fhtype = FHT_UNKNOWN; 247 } 248 } 249 } 250 } 251 252 /* XXX still needs to handle SUNOS3 */ 253 254 switch (fhtype) { 255 case FHT_AUSPEX: 256 fsidp->Fsid_dev.Minor = fhp[7]; 257 fsidp->Fsid_dev.Major = fhp[6]; 258 fsidp->fsid_code = 0; 259 260 *inop = make_uint32(fhp[12], fhp[13], fhp[14], fhp[15]); 261 262 if (osnamep) 263 *osnamep = "Auspex"; 264 break; 265 266 case FHT_BSD44: 267 fsidp->Fsid_dev.Minor = fhp[0]; 268 fsidp->Fsid_dev.Major = fhp[1]; 269 fsidp->fsid_code = 0; 270 271 *inop = make_uint32(fhp[15], fhp[14], fhp[13], fhp[12]); 272 273 if (osnamep) 274 *osnamep = "BSD 4.4"; 275 break; 276 277 case FHT_DECOSF: 278 fsidp->fsid_code = make_uint32(fhp[7], fhp[6], fhp[5], fhp[4]); 279 /* XXX could ignore 3 high-order bytes */ 280 281 temp = make_uint32(fhp[3], fhp[2], fhp[1], fhp[0]); 282 fsidp->Fsid_dev.Minor = temp & 0xFFFFF; 283 fsidp->Fsid_dev.Major = (temp>>20) & 0xFFF; 284 285 *inop = make_uint32(fhp[15], fhp[14], fhp[13], fhp[12]); 286 if (osnamep) 287 *osnamep = "OSF"; 288 break; 289 290 case FHT_IRIX4: 291 fsidp->Fsid_dev.Minor = fhp[3]; 292 fsidp->Fsid_dev.Major = fhp[2]; 293 fsidp->fsid_code = 0; 294 295 *inop = make_uint32(fhp[8], fhp[9], fhp[10], fhp[11]); 296 297 if (osnamep) 298 *osnamep = "IRIX4"; 299 break; 300 301 case FHT_IRIX5: 302 fsidp->Fsid_dev.Minor = make_uint16(fhp[2], fhp[3]); 303 fsidp->Fsid_dev.Major = make_uint16(fhp[0], fhp[1]); 304 fsidp->fsid_code = make_uint32(fhp[4], fhp[5], fhp[6], fhp[7]); 305 306 *inop = make_uint32(fhp[12], fhp[13], fhp[14], fhp[15]); 307 308 if (osnamep) 309 *osnamep = "IRIX5"; 310 break; 311 312 #ifdef notdef 313 case FHT_SUNOS3: 314 /* 315 * XXX - none of the heuristics above return this. 316 * Are there any SunOS 3.x systems around to care about? 317 */ 318 if (osnamep) 319 *osnamep = "SUNOS3"; 320 break; 321 #endif 322 323 case FHT_SUNOS4: 324 fsidp->Fsid_dev.Minor = fhp[3]; 325 fsidp->Fsid_dev.Major = fhp[2]; 326 fsidp->fsid_code = make_uint32(fhp[4], fhp[5], fhp[6], fhp[7]); 327 328 *inop = make_uint32(fhp[12], fhp[13], fhp[14], fhp[15]); 329 330 if (osnamep) 331 *osnamep = "SUNOS4"; 332 break; 333 334 case FHT_SUNOS5: 335 temp = make_uint16(fhp[0], fhp[1]); 336 fsidp->Fsid_dev.Major = (temp>>2) & 0x3FFF; 337 temp = make_uint24(fhp[1], fhp[2], fhp[3]); 338 fsidp->Fsid_dev.Minor = temp & 0x3FFFF; 339 fsidp->fsid_code = make_uint32(fhp[4], fhp[5], fhp[6], fhp[7]); 340 341 *inop = make_uint32(fhp[12], fhp[13], fhp[14], fhp[15]); 342 343 if (osnamep) 344 *osnamep = "SUNOS5"; 345 break; 346 347 case FHT_ULTRIX: 348 fsidp->fsid_code = 0; 349 fsidp->Fsid_dev.Minor = fhp[0]; 350 fsidp->Fsid_dev.Major = fhp[1]; 351 352 temp = make_uint32(fhp[7], fhp[6], fhp[5], fhp[4]); 353 *inop = temp; 354 if (osnamep) 355 *osnamep = "Ultrix"; 356 break; 357 358 case FHT_VMSUCX: 359 /* No numeric file system ID, so hash on the device-name */ 360 if (sizeof(*fsidp) >= 14) { 361 if (sizeof(*fsidp) > 14) 362 memset((char *)fsidp, 0, sizeof(*fsidp)); 363 /* just use the whole thing */ 364 memcpy((char *)fsidp, (char *)fh, 14); 365 } 366 else { 367 uint32_t tempa[4]; /* at least 16 bytes, maybe more */ 368 369 memset((char *)tempa, 0, sizeof(tempa)); 370 memcpy((char *)tempa, (char *)fh, 14); /* ensure alignment */ 371 fsidp->Fsid_dev.Minor = tempa[0] + (tempa[1]<<1); 372 fsidp->Fsid_dev.Major = tempa[2] + (tempa[3]<<1); 373 fsidp->fsid_code = 0; 374 } 375 376 /* VMS file ID is: (RVN, FidHi, FidLo) */ 377 *inop = make_uint32(fhp[26], fhp[27], fhp[23], fhp[22]); 378 379 /* Caller must save (and null-terminate?) this value */ 380 if (fsnamep) 381 *fsnamep = (char *)&(fhp[1]); 382 383 if (osnamep) 384 *osnamep = "VMS"; 385 break; 386 387 case FHT_AIX32: 388 fsidp->Fsid_dev.Minor = make_uint16(fhp[2], fhp[3]); 389 fsidp->Fsid_dev.Major = make_uint16(fhp[0], fhp[1]); 390 fsidp->fsid_code = make_uint32(fhp[4], fhp[5], fhp[6], fhp[7]); 391 392 *inop = make_uint32(fhp[12], fhp[13], fhp[14], fhp[15]); 393 394 if (osnamep) 395 *osnamep = "AIX32"; 396 break; 397 398 case FHT_HPUX9: 399 fsidp->Fsid_dev.Major = fhp[0]; 400 temp = make_uint24(fhp[1], fhp[2], fhp[3]); 401 fsidp->Fsid_dev.Minor = temp; 402 fsidp->fsid_code = make_uint32(fhp[4], fhp[5], fhp[6], fhp[7]); 403 404 *inop = make_uint32(fhp[12], fhp[13], fhp[14], fhp[15]); 405 406 if (osnamep) 407 *osnamep = "HPUX9"; 408 break; 409 410 case FHT_UNKNOWN: 411 #ifdef DEBUG 412 /* XXX debugging */ 413 for (i = 0; i < 32; i++) 414 (void)fprintf(stderr, "%x.", fhp[i]); 415 (void)fprintf(stderr, "\n"); 416 #endif 417 /* Save the actual handle, so it can be display with -u */ 418 for (i = 0; i < 32; i++) 419 (void)snprintf(&(fsidp->Opaque_Handle[i*2]), 3, "%.2X", fhp[i]); 420 421 /* XXX for now, give "bogus" values to aid debugging */ 422 fsidp->fsid_code = 0; 423 fsidp->Fsid_dev.Minor = 257; 424 fsidp->Fsid_dev.Major = 257; 425 *inop = 1; 426 427 /* display will show this string instead of (257,257) */ 428 if (fsnamep) 429 *fsnamep = "Unknown"; 430 431 if (osnamep) 432 *osnamep = "Unknown"; 433 break; 434 435 } 436 } 437 438 /* 439 * Is this a VMS UCX file handle? 440 * Check for: 441 * (1) leading code byte [XXX not yet] 442 * (2) followed by string of printing chars & spaces 443 * (3) followed by string of nulls 444 */ 445 static int 446 is_UCX(const unsigned char *fhp) 447 { 448 register int i; 449 int seen_null = 0; 450 451 for (i = 1; i < 14; i++) { 452 if (ND_ISPRINT(fhp[i])) { 453 if (seen_null) 454 return(0); 455 else 456 continue; 457 } 458 else if (fhp[i] == 0) { 459 seen_null = 1; 460 continue; 461 } 462 else 463 return(0); 464 } 465 466 return(1); 467 } 468
