Home | History | Annotate | Download | only in tcpdump
      1 /*
      2  * Copyright (C) 1998 and 1999 WIDE Project.
      3  * All rights reserved.
      4  *
      5  * Redistribution and use in source and binary forms, with or without
      6  * modification, are permitted provided that the following conditions
      7  * are met:
      8  * 1. Redistributions of source code must retain the above copyright
      9  *    notice, this list of conditions and the following disclaimer.
     10  * 2. Redistributions in binary form must reproduce the above copyright
     11  *    notice, this list of conditions and the following disclaimer in the
     12  *    documentation and/or other materials provided with the distribution.
     13  * 3. Neither the name of the project nor the names of its contributors
     14  *    may be used to endorse or promote products derived from this software
     15  *    without specific prior written permission.
     16  *
     17  * THIS SOFTWARE IS PROVIDED BY THE PROJECT AND CONTRIBUTORS ``AS IS'' AND
     18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
     19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
     20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE PROJECT OR CONTRIBUTORS BE LIABLE
     21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
     22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
     23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
     24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
     25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     27  * SUCH DAMAGE.
     28  */
     29 /*
     30  * RFC3315: DHCPv6
     31  * supported DHCPv6 options:
     32  *  RFC3319: Session Initiation Protocol (SIP) Servers options,
     33  *  RFC3633: IPv6 Prefix options,
     34  *  RFC3646: DNS Configuration options,
     35  *  RFC3898: Network Information Service (NIS) Configuration options,
     36  *  RFC4075: Simple Network Time Protocol (SNTP) Configuration option,
     37  *  RFC4242: Information Refresh Time option,
     38  *  RFC4280: Broadcast and Multicast Control Servers options,
     39  *  RFC5908: Network Time Protocol (NTP) Server Option for DHCPv6
     40  *  RFC6334: Dual-Stack Lite option,
     41  */
     42 
     43 #define NETDISSECT_REWORKED
     44 #ifdef HAVE_CONFIG_H
     45 #include "config.h"
     46 #endif
     47 
     48 #include <tcpdump-stdinc.h>
     49 
     50 #include <stdio.h>
     51 #include <string.h>
     52 
     53 #include "interface.h"
     54 #include "addrtoname.h"
     55 #include "extract.h"
     56 
     57 /* lease duration */
     58 #define DHCP6_DURATION_INFINITE 0xffffffff
     59 
     60 /* Error Values */
     61 #define DH6ERR_FAILURE		16
     62 #define DH6ERR_AUTHFAIL		17
     63 #define DH6ERR_POORLYFORMED	18
     64 #define DH6ERR_UNAVAIL		19
     65 #define DH6ERR_OPTUNAVAIL	20
     66 
     67 /* Message type */
     68 #define DH6_SOLICIT	1
     69 #define DH6_ADVERTISE	2
     70 #define DH6_REQUEST	3
     71 #define DH6_CONFIRM	4
     72 #define DH6_RENEW	5
     73 #define DH6_REBIND	6
     74 #define DH6_REPLY	7
     75 #define DH6_RELEASE	8
     76 #define DH6_DECLINE	9
     77 #define DH6_RECONFIGURE	10
     78 #define DH6_INFORM_REQ	11
     79 #define DH6_RELAY_FORW	12
     80 #define DH6_RELAY_REPLY	13
     81 #define DH6_LEASEQUERY	14
     82 #define DH6_LQ_REPLY	15
     83 
     84 static const struct tok dh6_msgtype_str[] = {
     85 	{ DH6_SOLICIT,     "solicit"          },
     86 	{ DH6_ADVERTISE,   "advertise"        },
     87 	{ DH6_REQUEST,     "request"          },
     88 	{ DH6_CONFIRM,     "confirm"          },
     89 	{ DH6_RENEW,       "renew"            },
     90 	{ DH6_REBIND,      "rebind"           },
     91 	{ DH6_REPLY,       "reply"            },
     92 	{ DH6_RELEASE,     "release"          },
     93 	{ DH6_DECLINE,     "decline"          },
     94 	{ DH6_RECONFIGURE, "reconfigure"      },
     95 	{ DH6_INFORM_REQ,  "inf-req"          },
     96 	{ DH6_RELAY_FORW,  "relay-fwd"        },
     97 	{ DH6_RELAY_REPLY, "relay-reply"      },
     98 	{ DH6_LEASEQUERY,  "leasequery"       },
     99 	{ DH6_LQ_REPLY,    "leasequery-reply" },
    100 	{ 0, NULL }
    101 };
    102 
    103 /* DHCP6 base packet format */
    104 struct dhcp6 {
    105 	union {
    106 		uint8_t m;
    107 		uint32_t x;
    108 	} dh6_msgtypexid;
    109 	/* options follow */
    110 };
    111 #define dh6_msgtype	dh6_msgtypexid.m
    112 #define dh6_xid		dh6_msgtypexid.x
    113 #define DH6_XIDMASK	0x00ffffff
    114 
    115 /* DHCPv6 relay messages */
    116 struct dhcp6_relay {
    117 	uint8_t dh6relay_msgtype;
    118 	uint8_t dh6relay_hcnt;
    119 	uint8_t dh6relay_linkaddr[16];	/* XXX: badly aligned */
    120 	uint8_t dh6relay_peeraddr[16];
    121 	/* options follow */
    122 };
    123 
    124 /* options */
    125 #define DH6OPT_CLIENTID	1
    126 #define DH6OPT_SERVERID	2
    127 #define DH6OPT_IA_NA 3
    128 #define DH6OPT_IA_TA 4
    129 #define DH6OPT_IA_ADDR 5
    130 #define DH6OPT_ORO 6
    131 #define DH6OPT_PREFERENCE 7
    132 #  define DH6OPT_PREF_MAX 255
    133 #define DH6OPT_ELAPSED_TIME 8
    134 #define DH6OPT_RELAY_MSG 9
    135 /*#define DH6OPT_SERVER_MSG 10 deprecated */
    136 #define DH6OPT_AUTH 11
    137 #  define DH6OPT_AUTHPROTO_DELAYED 2
    138 #  define DH6OPT_AUTHPROTO_RECONFIG 3
    139 #  define DH6OPT_AUTHALG_HMACMD5 1
    140 #  define DH6OPT_AUTHRDM_MONOCOUNTER 0
    141 #  define DH6OPT_AUTHRECONFIG_KEY 1
    142 #  define DH6OPT_AUTHRECONFIG_HMACMD5 2
    143 #define DH6OPT_UNICAST 12
    144 #define DH6OPT_STATUS_CODE 13
    145 #  define DH6OPT_STCODE_SUCCESS 0
    146 #  define DH6OPT_STCODE_UNSPECFAIL 1
    147 #  define DH6OPT_STCODE_NOADDRAVAIL 2
    148 #  define DH6OPT_STCODE_NOBINDING 3
    149 #  define DH6OPT_STCODE_NOTONLINK 4
    150 #  define DH6OPT_STCODE_USEMULTICAST 5
    151 #  define DH6OPT_STCODE_NOPREFIXAVAIL 6
    152 #  define DH6OPT_STCODE_UNKNOWNQUERYTYPE 7
    153 #  define DH6OPT_STCODE_MALFORMEDQUERY 8
    154 #  define DH6OPT_STCODE_NOTCONFIGURED 9
    155 #  define DH6OPT_STCODE_NOTALLOWED 10
    156 #define DH6OPT_RAPID_COMMIT 14
    157 #define DH6OPT_USER_CLASS 15
    158 #define DH6OPT_VENDOR_CLASS 16
    159 #define DH6OPT_VENDOR_OPTS 17
    160 #define DH6OPT_INTERFACE_ID 18
    161 #define DH6OPT_RECONF_MSG 19
    162 #define DH6OPT_RECONF_ACCEPT 20
    163 #define DH6OPT_SIP_SERVER_D 21
    164 #define DH6OPT_SIP_SERVER_A 22
    165 #define DH6OPT_DNS_SERVERS 23
    166 #define DH6OPT_DOMAIN_LIST 24
    167 #define DH6OPT_IA_PD 25
    168 #define DH6OPT_IA_PD_PREFIX 26
    169 #define DH6OPT_NIS_SERVERS 27
    170 #define DH6OPT_NISP_SERVERS 28
    171 #define DH6OPT_NIS_NAME 29
    172 #define DH6OPT_NISP_NAME 30
    173 #define DH6OPT_SNTP_SERVERS 31
    174 #define DH6OPT_LIFETIME 32
    175 #define DH6OPT_BCMCS_SERVER_D 33
    176 #define DH6OPT_BCMCS_SERVER_A 34
    177 #define DH6OPT_GEOCONF_CIVIC 36
    178 #define DH6OPT_REMOTE_ID 37
    179 #define DH6OPT_SUBSCRIBER_ID 38
    180 #define DH6OPT_CLIENT_FQDN 39
    181 #define DH6OPT_PANA_AGENT 40
    182 #define DH6OPT_NEW_POSIX_TIMEZONE 41
    183 #define DH6OPT_NEW_TZDB_TIMEZONE 42
    184 #define DH6OPT_ERO 43
    185 #define DH6OPT_LQ_QUERY 44
    186 #define DH6OPT_CLIENT_DATA 45
    187 #define DH6OPT_CLT_TIME 46
    188 #define DH6OPT_LQ_RELAY_DATA 47
    189 #define DH6OPT_LQ_CLIENT_LINK 48
    190 #define DH6OPT_NTP_SERVER 56
    191 #  define DH6OPT_NTP_SUBOPTION_SRV_ADDR 1
    192 #  define DH6OPT_NTP_SUBOPTION_MC_ADDR 2
    193 #  define DH6OPT_NTP_SUBOPTION_SRV_FQDN 3
    194 #define DH6OPT_AFTR_NAME 64
    195 
    196 static const struct tok dh6opt_str[] = {
    197 	{ DH6OPT_CLIENTID,           "client-ID"            },
    198 	{ DH6OPT_SERVERID,           "server-ID"            },
    199 	{ DH6OPT_IA_NA,              "IA_NA"                },
    200 	{ DH6OPT_IA_TA,              "IA_TA"                },
    201 	{ DH6OPT_IA_ADDR,            "IA_ADDR"              },
    202 	{ DH6OPT_ORO,                "option-request"       },
    203 	{ DH6OPT_PREFERENCE,         "preference"           },
    204 	{ DH6OPT_ELAPSED_TIME,       "elapsed-time"         },
    205 	{ DH6OPT_RELAY_MSG,          "relay-message"        },
    206 	{ DH6OPT_AUTH,               "authentication"       },
    207 	{ DH6OPT_UNICAST,            "server-unicast"       },
    208 	{ DH6OPT_STATUS_CODE,        "status-code"          },
    209 	{ DH6OPT_RAPID_COMMIT,       "rapid-commit"         },
    210 	{ DH6OPT_USER_CLASS,         "user-class"           },
    211 	{ DH6OPT_VENDOR_CLASS,       "vendor-class"         },
    212 	{ DH6OPT_VENDOR_OPTS,        "vendor-specific-info" },
    213 	{ DH6OPT_INTERFACE_ID,       "interface-ID"         },
    214 	{ DH6OPT_RECONF_MSG,         "reconfigure-message"  },
    215 	{ DH6OPT_RECONF_ACCEPT,      "reconfigure-accept"   },
    216 	{ DH6OPT_SIP_SERVER_D,       "SIP-servers-domain"   },
    217 	{ DH6OPT_SIP_SERVER_A,       "SIP-servers-address"  },
    218 	{ DH6OPT_DNS_SERVERS,        "DNS-server"           },
    219 	{ DH6OPT_DOMAIN_LIST,        "DNS-search-list"      },
    220 	{ DH6OPT_IA_PD,              "IA_PD"                },
    221 	{ DH6OPT_IA_PD_PREFIX,       "IA_PD-prefix"         },
    222 	{ DH6OPT_SNTP_SERVERS,       "SNTP-servers"         },
    223 	{ DH6OPT_LIFETIME,           "lifetime"             },
    224 	{ DH6OPT_NIS_SERVERS,        "NIS-server"           },
    225 	{ DH6OPT_NISP_SERVERS,       "NIS+-server"          },
    226 	{ DH6OPT_NIS_NAME,           "NIS-domain-name"      },
    227 	{ DH6OPT_NISP_NAME,          "NIS+-domain-name"     },
    228 	{ DH6OPT_BCMCS_SERVER_D,     "BCMCS-domain-name"    },
    229 	{ DH6OPT_BCMCS_SERVER_A,     "BCMCS-server"         },
    230 	{ DH6OPT_GEOCONF_CIVIC,      "Geoconf-Civic"        },
    231 	{ DH6OPT_REMOTE_ID,          "Remote-ID"            },
    232 	{ DH6OPT_SUBSCRIBER_ID,      "Subscriber-ID"        },
    233 	{ DH6OPT_CLIENT_FQDN,        "Client-FQDN"          },
    234 	{ DH6OPT_PANA_AGENT,         "PANA-agent"           },
    235 	{ DH6OPT_NEW_POSIX_TIMEZONE, "POSIX-timezone"       },
    236 	{ DH6OPT_NEW_TZDB_TIMEZONE,  "POSIX-tz-database"    },
    237 	{ DH6OPT_ERO,                "Echo-request-option"  },
    238 	{ DH6OPT_LQ_QUERY,           "Lease-query"          },
    239 	{ DH6OPT_CLIENT_DATA,        "LQ-client-data"       },
    240 	{ DH6OPT_CLT_TIME,           "Clt-time"             },
    241 	{ DH6OPT_LQ_RELAY_DATA,      "LQ-relay-data"        },
    242 	{ DH6OPT_LQ_CLIENT_LINK,     "LQ-client-link"       },
    243 	{ DH6OPT_NTP_SERVER,         "NTP-server"           },
    244 	{ DH6OPT_AFTR_NAME,          "AFTR-Name"            },
    245 	{ 0, NULL }
    246 };
    247 
    248 static const struct tok dh6opt_stcode_str[] = {
    249 	{ DH6OPT_STCODE_SUCCESS,          "success"            },
    250 	{ DH6OPT_STCODE_UNSPECFAIL,       "unspec failure"     },
    251 	{ DH6OPT_STCODE_NOADDRAVAIL,      "no addresses"       },
    252 	{ DH6OPT_STCODE_NOBINDING,        "no binding"         },
    253 	{ DH6OPT_STCODE_NOTONLINK,        "not on-link"        },
    254 	{ DH6OPT_STCODE_USEMULTICAST,     "use multicast"      },
    255 	{ DH6OPT_STCODE_NOPREFIXAVAIL,    "no prefixes"        },
    256 	{ DH6OPT_STCODE_UNKNOWNQUERYTYPE, "unknown query type" },
    257 	{ DH6OPT_STCODE_MALFORMEDQUERY,   "malformed query"    },
    258 	{ DH6OPT_STCODE_NOTCONFIGURED,    "not configured"     },
    259 	{ DH6OPT_STCODE_NOTALLOWED,       "not allowed"        },
    260 	{ 0, NULL }
    261 };
    262 
    263 struct dhcp6opt {
    264 	uint16_t dh6opt_type;
    265 	uint16_t dh6opt_len;
    266 	/* type-dependent data follows */
    267 };
    268 
    269 static const char *
    270 dhcp6stcode(const uint16_t code)
    271 {
    272 	return code > 255 ? "INVALID code" : tok2str(dh6opt_stcode_str, "code%u", code);
    273 }
    274 
    275 static void
    276 dhcp6opt_print(netdissect_options *ndo,
    277                const u_char *cp, const u_char *ep)
    278 {
    279 	const struct dhcp6opt *dh6o;
    280 	const u_char *tp;
    281 	size_t i;
    282 	uint16_t opttype;
    283 	size_t optlen;
    284 	uint8_t auth_proto;
    285 	u_int authinfolen, authrealmlen;
    286 	int remain_len;  /* Length of remaining options */
    287 	int label_len;   /* Label length */
    288 	uint16_t subopt_code;
    289 	uint16_t subopt_len;
    290 
    291 	if (cp == ep)
    292 		return;
    293 	while (cp < ep) {
    294 		if (ep < cp + sizeof(*dh6o))
    295 			goto trunc;
    296 		dh6o = (struct dhcp6opt *)cp;
    297 		ND_TCHECK(*dh6o);
    298 		optlen = EXTRACT_16BITS(&dh6o->dh6opt_len);
    299 		if (ep < cp + sizeof(*dh6o) + optlen)
    300 			goto trunc;
    301 		opttype = EXTRACT_16BITS(&dh6o->dh6opt_type);
    302 		ND_PRINT((ndo, " (%s", tok2str(dh6opt_str, "opt_%u", opttype)));
    303 		switch (opttype) {
    304 		case DH6OPT_CLIENTID:
    305 		case DH6OPT_SERVERID:
    306 			if (optlen < 2) {
    307 				/*(*/
    308 				ND_PRINT((ndo, " ?)"));
    309 				break;
    310 			}
    311 			tp = (u_char *)(dh6o + 1);
    312 			switch (EXTRACT_16BITS(tp)) {
    313 			case 1:
    314 				if (optlen >= 2 + 6) {
    315 					ND_PRINT((ndo, " hwaddr/time type %u time %u ",
    316 					    EXTRACT_16BITS(&tp[2]),
    317 					    EXTRACT_32BITS(&tp[4])));
    318 					for (i = 8; i < optlen; i++)
    319 						ND_PRINT((ndo, "%02x", tp[i]));
    320 					/*(*/
    321 					ND_PRINT((ndo, ")"));
    322 				} else {
    323 					/*(*/
    324 					ND_PRINT((ndo, " ?)"));
    325 				}
    326 				break;
    327 			case 2:
    328 				if (optlen >= 2 + 8) {
    329 					ND_PRINT((ndo, " vid "));
    330 					for (i = 2; i < 2 + 8; i++)
    331 						ND_PRINT((ndo, "%02x", tp[i]));
    332 					/*(*/
    333 					ND_PRINT((ndo, ")"));
    334 				} else {
    335 					/*(*/
    336 					ND_PRINT((ndo, " ?)"));
    337 				}
    338 				break;
    339 			case 3:
    340 				if (optlen >= 2 + 2) {
    341 					ND_PRINT((ndo, " hwaddr type %u ",
    342 					    EXTRACT_16BITS(&tp[2])));
    343 					for (i = 4; i < optlen; i++)
    344 						ND_PRINT((ndo, "%02x", tp[i]));
    345 					/*(*/
    346 					ND_PRINT((ndo, ")"));
    347 				} else {
    348 					/*(*/
    349 					ND_PRINT((ndo, " ?)"));
    350 				}
    351 				break;
    352 			default:
    353 				ND_PRINT((ndo, " type %d)", EXTRACT_16BITS(tp)));
    354 				break;
    355 			}
    356 			break;
    357 		case DH6OPT_IA_ADDR:
    358 			if (optlen < 24) {
    359 				/*(*/
    360 				ND_PRINT((ndo, " ?)"));
    361 				break;
    362 			}
    363 			tp = (u_char *)(dh6o + 1);
    364 			ND_PRINT((ndo, " %s", ip6addr_string(ndo, &tp[0])));
    365 			ND_PRINT((ndo, " pltime:%u vltime:%u",
    366 			    EXTRACT_32BITS(&tp[16]),
    367 			    EXTRACT_32BITS(&tp[20])));
    368 			if (optlen > 24) {
    369 				/* there are sub-options */
    370 				dhcp6opt_print(ndo, tp + 24, tp + optlen);
    371 			}
    372 			ND_PRINT((ndo, ")"));
    373 			break;
    374 		case DH6OPT_ORO:
    375 		case DH6OPT_ERO:
    376 			if (optlen % 2) {
    377 				ND_PRINT((ndo, " ?)"));
    378 				break;
    379 			}
    380 			tp = (u_char *)(dh6o + 1);
    381 			for (i = 0; i < optlen; i += 2) {
    382 				ND_PRINT((ndo, " %s",
    383 				    tok2str(dh6opt_str, "opt_%u", EXTRACT_16BITS(&tp[i]))));
    384 			}
    385 			ND_PRINT((ndo, ")"));
    386 			break;
    387 		case DH6OPT_PREFERENCE:
    388 			if (optlen != 1) {
    389 				ND_PRINT((ndo, " ?)"));
    390 				break;
    391 			}
    392 			tp = (u_char *)(dh6o + 1);
    393 			ND_PRINT((ndo, " %d)", *tp));
    394 			break;
    395 		case DH6OPT_ELAPSED_TIME:
    396 			if (optlen != 2) {
    397 				ND_PRINT((ndo, " ?)"));
    398 				break;
    399 			}
    400 			tp = (u_char *)(dh6o + 1);
    401 			ND_PRINT((ndo, " %d)", EXTRACT_16BITS(tp)));
    402 			break;
    403 		case DH6OPT_RELAY_MSG:
    404 			ND_PRINT((ndo, " ("));
    405 			tp = (u_char *)(dh6o + 1);
    406 			dhcp6_print(ndo, tp, optlen);
    407 			ND_PRINT((ndo, ")"));
    408 			break;
    409 		case DH6OPT_AUTH:
    410 			if (optlen < 11) {
    411 				ND_PRINT((ndo, " ?)"));
    412 				break;
    413 			}
    414 			tp = (u_char *)(dh6o + 1);
    415 			auth_proto = *tp;
    416 			switch (auth_proto) {
    417 			case DH6OPT_AUTHPROTO_DELAYED:
    418 				ND_PRINT((ndo, " proto: delayed"));
    419 				break;
    420 			case DH6OPT_AUTHPROTO_RECONFIG:
    421 				ND_PRINT((ndo, " proto: reconfigure"));
    422 				break;
    423 			default:
    424 				ND_PRINT((ndo, " proto: %d", auth_proto));
    425 				break;
    426 			}
    427 			tp++;
    428 			switch (*tp) {
    429 			case DH6OPT_AUTHALG_HMACMD5:
    430 				/* XXX: may depend on the protocol */
    431 				ND_PRINT((ndo, ", alg: HMAC-MD5"));
    432 				break;
    433 			default:
    434 				ND_PRINT((ndo, ", alg: %d", *tp));
    435 				break;
    436 			}
    437 			tp++;
    438 			switch (*tp) {
    439 			case DH6OPT_AUTHRDM_MONOCOUNTER:
    440 				ND_PRINT((ndo, ", RDM: mono"));
    441 				break;
    442 			default:
    443 				ND_PRINT((ndo, ", RDM: %d", *tp));
    444 				break;
    445 			}
    446 			tp++;
    447 			ND_PRINT((ndo, ", RD:"));
    448 			for (i = 0; i < 4; i++, tp += 2)
    449 				ND_PRINT((ndo, " %04x", EXTRACT_16BITS(tp)));
    450 
    451 			/* protocol dependent part */
    452 			authinfolen = optlen - 11;
    453 			switch (auth_proto) {
    454 			case DH6OPT_AUTHPROTO_DELAYED:
    455 				if (authinfolen == 0)
    456 					break;
    457 				if (authinfolen < 20) {
    458 					ND_PRINT((ndo, " ??"));
    459 					break;
    460 				}
    461 				authrealmlen = authinfolen - 20;
    462 				if (authrealmlen > 0) {
    463 					ND_PRINT((ndo, ", realm: "));
    464 				}
    465 				for (i = 0; i < authrealmlen; i++, tp++)
    466 					ND_PRINT((ndo, "%02x", *tp));
    467 				ND_PRINT((ndo, ", key ID: %08x", EXTRACT_32BITS(tp)));
    468 				tp += 4;
    469 				ND_PRINT((ndo, ", HMAC-MD5:"));
    470 				for (i = 0; i < 4; i++, tp+= 4)
    471 					ND_PRINT((ndo, " %08x", EXTRACT_32BITS(tp)));
    472 				break;
    473 			case DH6OPT_AUTHPROTO_RECONFIG:
    474 				if (authinfolen != 17) {
    475 					ND_PRINT((ndo, " ??"));
    476 					break;
    477 				}
    478 				switch (*tp++) {
    479 				case DH6OPT_AUTHRECONFIG_KEY:
    480 					ND_PRINT((ndo, " reconfig-key"));
    481 					break;
    482 				case DH6OPT_AUTHRECONFIG_HMACMD5:
    483 					ND_PRINT((ndo, " type: HMAC-MD5"));
    484 					break;
    485 				default:
    486 					ND_PRINT((ndo, " type: ??"));
    487 					break;
    488 				}
    489 				ND_PRINT((ndo, " value:"));
    490 				for (i = 0; i < 4; i++, tp+= 4)
    491 					ND_PRINT((ndo, " %08x", EXTRACT_32BITS(tp)));
    492 				break;
    493 			default:
    494 				ND_PRINT((ndo, " ??"));
    495 				break;
    496 			}
    497 
    498 			ND_PRINT((ndo, ")"));
    499 			break;
    500 		case DH6OPT_RAPID_COMMIT: /* nothing todo */
    501 			ND_PRINT((ndo, ")"));
    502 			break;
    503 		case DH6OPT_INTERFACE_ID:
    504 		case DH6OPT_SUBSCRIBER_ID:
    505 			/*
    506 			 * Since we cannot predict the encoding, print hex dump
    507 			 * at most 10 characters.
    508 			 */
    509 			tp = (u_char *)(dh6o + 1);
    510 			ND_PRINT((ndo, " "));
    511 			for (i = 0; i < optlen && i < 10; i++)
    512 				ND_PRINT((ndo, "%02x", tp[i]));
    513 			ND_PRINT((ndo, "...)"));
    514 			break;
    515 		case DH6OPT_RECONF_MSG:
    516 			tp = (u_char *)(dh6o + 1);
    517 			switch (*tp) {
    518 			case DH6_RENEW:
    519 				ND_PRINT((ndo, " for renew)"));
    520 				break;
    521 			case DH6_INFORM_REQ:
    522 				ND_PRINT((ndo, " for inf-req)"));
    523 				break;
    524 			default:
    525 				ND_PRINT((ndo, " for ?\?\?(%02x))", *tp));
    526 				break;
    527 			}
    528 			break;
    529 		case DH6OPT_RECONF_ACCEPT: /* nothing todo */
    530 			ND_PRINT((ndo, ")"));
    531 			break;
    532 		case DH6OPT_SIP_SERVER_A:
    533 		case DH6OPT_DNS_SERVERS:
    534 		case DH6OPT_SNTP_SERVERS:
    535 		case DH6OPT_NIS_SERVERS:
    536 		case DH6OPT_NISP_SERVERS:
    537 		case DH6OPT_BCMCS_SERVER_A:
    538 		case DH6OPT_PANA_AGENT:
    539 		case DH6OPT_LQ_CLIENT_LINK:
    540 			if (optlen % 16) {
    541 				ND_PRINT((ndo, " ?)"));
    542 				break;
    543 			}
    544 			tp = (u_char *)(dh6o + 1);
    545 			for (i = 0; i < optlen; i += 16)
    546 				ND_PRINT((ndo, " %s", ip6addr_string(ndo, &tp[i])));
    547 			ND_PRINT((ndo, ")"));
    548 			break;
    549 		case DH6OPT_SIP_SERVER_D:
    550 		case DH6OPT_DOMAIN_LIST:
    551 			tp = (u_char *)(dh6o + 1);
    552 			while (tp < cp + sizeof(*dh6o) + optlen) {
    553 				ND_PRINT((ndo, " "));
    554 				if ((tp = ns_nprint(ndo, tp, cp + sizeof(*dh6o) + optlen)) == NULL)
    555 					goto trunc;
    556 			}
    557 			ND_PRINT((ndo, ")"));
    558 			break;
    559 		case DH6OPT_STATUS_CODE:
    560 			if (optlen < 2) {
    561 				ND_PRINT((ndo, " ?)"));
    562 				break;
    563 			}
    564 			tp = (u_char *)(dh6o + 1);
    565 			ND_PRINT((ndo, " %s)", dhcp6stcode(EXTRACT_16BITS(&tp[0]))));
    566 			break;
    567 		case DH6OPT_IA_NA:
    568 		case DH6OPT_IA_PD:
    569 			if (optlen < 12) {
    570 				ND_PRINT((ndo, " ?)"));
    571 				break;
    572 			}
    573 			tp = (u_char *)(dh6o + 1);
    574 			ND_PRINT((ndo, " IAID:%u T1:%u T2:%u",
    575 			    EXTRACT_32BITS(&tp[0]),
    576 			    EXTRACT_32BITS(&tp[4]),
    577 			    EXTRACT_32BITS(&tp[8])));
    578 			if (optlen > 12) {
    579 				/* there are sub-options */
    580 				dhcp6opt_print(ndo, tp + 12, tp + optlen);
    581 			}
    582 			ND_PRINT((ndo, ")"));
    583 			break;
    584 		case DH6OPT_IA_TA:
    585 			if (optlen < 4) {
    586 				ND_PRINT((ndo, " ?)"));
    587 				break;
    588 			}
    589 			tp = (u_char *)(dh6o + 1);
    590 			ND_PRINT((ndo, " IAID:%u", EXTRACT_32BITS(tp)));
    591 			if (optlen > 4) {
    592 				/* there are sub-options */
    593 				dhcp6opt_print(ndo, tp + 4, tp + optlen);
    594 			}
    595 			ND_PRINT((ndo, ")"));
    596 			break;
    597 		case DH6OPT_IA_PD_PREFIX:
    598 			if (optlen < 25) {
    599 				ND_PRINT((ndo, " ?)"));
    600 				break;
    601 			}
    602 			tp = (u_char *)(dh6o + 1);
    603 			ND_PRINT((ndo, " %s/%d", ip6addr_string(ndo, &tp[9]), tp[8]));
    604 			ND_PRINT((ndo, " pltime:%u vltime:%u",
    605 			    EXTRACT_32BITS(&tp[0]),
    606 			    EXTRACT_32BITS(&tp[4])));
    607 			if (optlen > 25) {
    608 				/* there are sub-options */
    609 				dhcp6opt_print(ndo, tp + 25, tp + optlen);
    610 			}
    611 			ND_PRINT((ndo, ")"));
    612 			break;
    613 		case DH6OPT_LIFETIME:
    614 		case DH6OPT_CLT_TIME:
    615 			if (optlen != 4) {
    616 				ND_PRINT((ndo, " ?)"));
    617 				break;
    618 			}
    619 			tp = (u_char *)(dh6o + 1);
    620 			ND_PRINT((ndo, " %d)", EXTRACT_32BITS(tp)));
    621 			break;
    622 		case DH6OPT_REMOTE_ID:
    623 			if (optlen < 4) {
    624 				ND_PRINT((ndo, " ?)"));
    625 				break;
    626 			}
    627 			tp = (u_char *)(dh6o + 1);
    628 			ND_PRINT((ndo, " %d ", EXTRACT_32BITS(tp)));
    629 			/*
    630 			 * Print hex dump first 10 characters.
    631 			 */
    632 			for (i = 4; i < optlen && i < 14; i++)
    633 				ND_PRINT((ndo, "%02x", tp[i]));
    634 			ND_PRINT((ndo, "...)"));
    635 			break;
    636 		case DH6OPT_LQ_QUERY:
    637 			if (optlen < 17) {
    638 				ND_PRINT((ndo, " ?)"));
    639 				break;
    640 			}
    641 			tp = (u_char *)(dh6o + 1);
    642 			switch (*tp) {
    643 			case 1:
    644 				ND_PRINT((ndo, " by-address"));
    645 				break;
    646 			case 2:
    647 				ND_PRINT((ndo, " by-clientID"));
    648 				break;
    649 			default:
    650 				ND_PRINT((ndo, " type_%d", (int)*tp));
    651 				break;
    652 			}
    653 			ND_PRINT((ndo, " %s", ip6addr_string(ndo, &tp[1])));
    654 			if (optlen > 17) {
    655 				/* there are query-options */
    656 				dhcp6opt_print(ndo, tp + 17, tp + optlen);
    657 			}
    658 			ND_PRINT((ndo, ")"));
    659 			break;
    660 		case DH6OPT_CLIENT_DATA:
    661 			tp = (u_char *)(dh6o + 1);
    662 			if (optlen > 0) {
    663 				/* there are encapsulated options */
    664 				dhcp6opt_print(ndo, tp, tp + optlen);
    665 			}
    666 			ND_PRINT((ndo, ")"));
    667 			break;
    668 		case DH6OPT_LQ_RELAY_DATA:
    669 			if (optlen < 16) {
    670 				ND_PRINT((ndo, " ?)"));
    671 				break;
    672 			}
    673 			tp = (u_char *)(dh6o + 1);
    674 			ND_PRINT((ndo, " %s ", ip6addr_string(ndo, &tp[0])));
    675 			/*
    676 			 * Print hex dump first 10 characters.
    677 			 */
    678 			for (i = 16; i < optlen && i < 26; i++)
    679 				ND_PRINT((ndo, "%02x", tp[i]));
    680 			ND_PRINT((ndo, "...)"));
    681 			break;
    682 		case DH6OPT_NTP_SERVER:
    683 			if (optlen < 4) {
    684 				ND_PRINT((ndo, " ?)"));
    685 				break;
    686 			}
    687 			tp = (u_char *)(dh6o + 1);
    688 			while (tp < cp + sizeof(*dh6o) + optlen - 4) {
    689 				subopt_code = EXTRACT_16BITS(tp);
    690 				tp += 2;
    691 				subopt_len = EXTRACT_16BITS(tp);
    692 				tp += 2;
    693 				if (tp + subopt_len > cp + sizeof(*dh6o) + optlen)
    694 					goto trunc;
    695 				ND_PRINT((ndo, " subopt:%d", subopt_code));
    696 				switch (subopt_code) {
    697 				case DH6OPT_NTP_SUBOPTION_SRV_ADDR:
    698 				case DH6OPT_NTP_SUBOPTION_MC_ADDR:
    699 					if (subopt_len != 16) {
    700 						ND_PRINT((ndo, " ?"));
    701 						break;
    702 					}
    703 					ND_PRINT((ndo, " %s", ip6addr_string(ndo, &tp[0])));
    704 					break;
    705 				case DH6OPT_NTP_SUBOPTION_SRV_FQDN:
    706 					ND_PRINT((ndo, " "));
    707 					if (ns_nprint(ndo, tp, tp + subopt_len) == NULL)
    708 						goto trunc;
    709 					break;
    710 				default:
    711 					ND_PRINT((ndo, " ?"));
    712 					break;
    713 				}
    714 				tp += subopt_len;
    715 			}
    716 			ND_PRINT((ndo, ")"));
    717 			break;
    718 		case DH6OPT_AFTR_NAME:
    719 			if (optlen < 3) {
    720 				ND_PRINT((ndo, " ?)"));
    721 				break;
    722 			}
    723 			tp = (u_char *)(dh6o + 1);
    724 			remain_len = optlen;
    725 			ND_PRINT((ndo, " "));
    726 			/* Encoding is described in section 3.1 of RFC 1035 */
    727 			while (remain_len && *tp) {
    728 				label_len =  *tp++;
    729 				if (label_len < remain_len - 1) {
    730 					ND_PRINT((ndo, "%.*s", label_len, tp));
    731 					tp += label_len;
    732 					remain_len -= (label_len + 1);
    733 					if(*tp) ND_PRINT((ndo, "."));
    734 				} else {
    735 					ND_PRINT((ndo, " ?"));
    736 					break;
    737 				}
    738 			}
    739 			ND_PRINT((ndo, ")"));
    740 			break;
    741 		default:
    742 			ND_PRINT((ndo, ")"));
    743 			break;
    744 		}
    745 
    746 		cp += sizeof(*dh6o) + optlen;
    747 	}
    748 	return;
    749 
    750 trunc:
    751 	ND_PRINT((ndo, "[|dhcp6ext]"));
    752 }
    753 
    754 /*
    755  * Print dhcp6 packets
    756  */
    757 void
    758 dhcp6_print(netdissect_options *ndo,
    759             const u_char *cp, u_int length)
    760 {
    761 	struct dhcp6 *dh6;
    762 	struct dhcp6_relay *dh6relay;
    763 	const u_char *ep;
    764 	u_char *extp;
    765 	const char *name;
    766 
    767 	ND_PRINT((ndo, "dhcp6"));
    768 
    769 	ep = (u_char *)ndo->ndo_snapend;
    770 	if (cp + length < ep)
    771 		ep = cp + length;
    772 
    773 	dh6 = (struct dhcp6 *)cp;
    774 	dh6relay = (struct dhcp6_relay *)cp;
    775 	ND_TCHECK(dh6->dh6_xid);
    776 	name = tok2str(dh6_msgtype_str, "msgtype-%u", dh6->dh6_msgtype);
    777 
    778 	if (!ndo->ndo_vflag) {
    779 		ND_PRINT((ndo, " %s", name));
    780 		return;
    781 	}
    782 
    783 	/* XXX relay agent messages have to be handled differently */
    784 
    785 	ND_PRINT((ndo, " %s (", name));	/*)*/
    786 	if (dh6->dh6_msgtype != DH6_RELAY_FORW &&
    787 	    dh6->dh6_msgtype != DH6_RELAY_REPLY) {
    788 		ND_PRINT((ndo, "xid=%x", EXTRACT_32BITS(&dh6->dh6_xid) & DH6_XIDMASK));
    789 		extp = (u_char *)(dh6 + 1);
    790 		dhcp6opt_print(ndo, extp, ep);
    791 	} else {		/* relay messages */
    792 		struct in6_addr addr6;
    793 
    794 		ND_TCHECK(dh6relay->dh6relay_peeraddr);
    795 
    796 		memcpy(&addr6, dh6relay->dh6relay_linkaddr, sizeof (addr6));
    797 		ND_PRINT((ndo, "linkaddr=%s", ip6addr_string(ndo, &addr6)));
    798 
    799 		memcpy(&addr6, dh6relay->dh6relay_peeraddr, sizeof (addr6));
    800 		ND_PRINT((ndo, " peeraddr=%s", ip6addr_string(ndo, &addr6)));
    801 
    802 		dhcp6opt_print(ndo, (u_char *)(dh6relay + 1), ep);
    803 	}
    804 	/*(*/
    805 	ND_PRINT((ndo, ")"));
    806 	return;
    807 
    808 trunc:
    809 	ND_PRINT((ndo, "[|dhcp6]"));
    810 }
    811