1 /* 2 * Copyright (c) 1994, 1995, 1996 3 * The Regents of the University of California. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that: (1) source code distributions 7 * retain the above copyright notice and this paragraph in its entirety, (2) 8 * distributions including binary code include the above copyright notice and 9 * this paragraph in its entirety in the documentation or other materials 10 * provided with the distribution, and (3) all advertising materials mentioning 11 * features or use of this software display the following acknowledgement: 12 * ``This product includes software developed by the University of California, 13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of 14 * the University nor the names of its contributors may be used to endorse 15 * or promote products derived from this software without specific prior 16 * written permission. 17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED 18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF 19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. 20 * 21 * Format and print Novell IPX packets. 22 * Contributed by Brad Parker (brad (at) fcr.com). 23 */ 24 25 #define NETDISSECT_REWORKED 26 #ifdef HAVE_CONFIG_H 27 #include "config.h" 28 #endif 29 30 #include <tcpdump-stdinc.h> 31 32 #include <stdio.h> 33 34 #include "interface.h" 35 #include "addrtoname.h" 36 #include "extract.h" 37 38 /* well-known sockets */ 39 #define IPX_SKT_NCP 0x0451 40 #define IPX_SKT_SAP 0x0452 41 #define IPX_SKT_RIP 0x0453 42 #define IPX_SKT_NETBIOS 0x0455 43 #define IPX_SKT_DIAGNOSTICS 0x0456 44 #define IPX_SKT_NWLINK_DGM 0x0553 /* NWLink datagram, may contain SMB */ 45 #define IPX_SKT_EIGRP 0x85be /* Cisco EIGRP over IPX */ 46 47 /* IPX transport header */ 48 struct ipxHdr { 49 uint16_t cksum; /* Checksum */ 50 uint16_t length; /* Length, in bytes, including header */ 51 uint8_t tCtl; /* Transport Control (i.e. hop count) */ 52 uint8_t pType; /* Packet Type (i.e. level 2 protocol) */ 53 uint16_t dstNet[2]; /* destination net */ 54 uint8_t dstNode[6]; /* destination node */ 55 uint16_t dstSkt; /* destination socket */ 56 uint16_t srcNet[2]; /* source net */ 57 uint8_t srcNode[6]; /* source node */ 58 uint16_t srcSkt; /* source socket */ 59 }; 60 61 #define ipxSize 30 62 63 static const char *ipxaddr_string(uint32_t, const u_char *); 64 static void ipx_decode(netdissect_options *, const struct ipxHdr *, const u_char *, u_int); 65 static void ipx_sap_print(netdissect_options *, const u_short *, u_int); 66 static void ipx_rip_print(netdissect_options *, const u_short *, u_int); 67 68 /* 69 * Print IPX datagram packets. 70 */ 71 void 72 ipx_print(netdissect_options *ndo, const u_char *p, u_int length) 73 { 74 const struct ipxHdr *ipx = (const struct ipxHdr *)p; 75 76 if (!ndo->ndo_eflag) 77 ND_PRINT((ndo, "IPX ")); 78 79 ND_TCHECK(ipx->srcSkt); 80 ND_PRINT((ndo, "%s.%04x > ", 81 ipxaddr_string(EXTRACT_32BITS(ipx->srcNet), ipx->srcNode), 82 EXTRACT_16BITS(&ipx->srcSkt))); 83 84 ND_PRINT((ndo, "%s.%04x: ", 85 ipxaddr_string(EXTRACT_32BITS(ipx->dstNet), ipx->dstNode), 86 EXTRACT_16BITS(&ipx->dstSkt))); 87 88 /* take length from ipx header */ 89 ND_TCHECK(ipx->length); 90 length = EXTRACT_16BITS(&ipx->length); 91 92 ipx_decode(ndo, ipx, (u_char *)ipx + ipxSize, length - ipxSize); 93 return; 94 trunc: 95 ND_PRINT((ndo, "[|ipx %d]", length)); 96 } 97 98 static const char * 99 ipxaddr_string(uint32_t net, const u_char *node) 100 { 101 static char line[256]; 102 103 snprintf(line, sizeof(line), "%08x.%02x:%02x:%02x:%02x:%02x:%02x", 104 net, node[0], node[1], node[2], node[3], node[4], node[5]); 105 106 return line; 107 } 108 109 static void 110 ipx_decode(netdissect_options *ndo, const struct ipxHdr *ipx, const u_char *datap, u_int length) 111 { 112 register u_short dstSkt; 113 114 dstSkt = EXTRACT_16BITS(&ipx->dstSkt); 115 switch (dstSkt) { 116 case IPX_SKT_NCP: 117 ND_PRINT((ndo, "ipx-ncp %d", length)); 118 break; 119 case IPX_SKT_SAP: 120 ipx_sap_print(ndo, (u_short *)datap, length); 121 break; 122 case IPX_SKT_RIP: 123 ipx_rip_print(ndo, (u_short *)datap, length); 124 break; 125 case IPX_SKT_NETBIOS: 126 ND_PRINT((ndo, "ipx-netbios %d", length)); 127 #ifdef TCPDUMP_DO_SMB 128 ipx_netbios_print(ndo, datap, length); 129 #endif 130 break; 131 case IPX_SKT_DIAGNOSTICS: 132 ND_PRINT((ndo, "ipx-diags %d", length)); 133 break; 134 case IPX_SKT_NWLINK_DGM: 135 ND_PRINT((ndo, "ipx-nwlink-dgm %d", length)); 136 #ifdef TCPDUMP_DO_SMB 137 ipx_netbios_print(ndo, datap, length); 138 #endif 139 break; 140 case IPX_SKT_EIGRP: 141 eigrp_print(ndo, datap, length); 142 break; 143 default: 144 ND_PRINT((ndo, "ipx-#%x %d", dstSkt, length)); 145 break; 146 } 147 } 148 149 static void 150 ipx_sap_print(netdissect_options *ndo, const u_short *ipx, u_int length) 151 { 152 int command, i; 153 154 ND_TCHECK(ipx[0]); 155 command = EXTRACT_16BITS(ipx); 156 ipx++; 157 length -= 2; 158 159 switch (command) { 160 case 1: 161 case 3: 162 if (command == 1) 163 ND_PRINT((ndo, "ipx-sap-req")); 164 else 165 ND_PRINT((ndo, "ipx-sap-nearest-req")); 166 167 ND_TCHECK(ipx[0]); 168 ND_PRINT((ndo, " %s", ipxsap_string(htons(EXTRACT_16BITS(&ipx[0]))))); 169 break; 170 171 case 2: 172 case 4: 173 if (command == 2) 174 ND_PRINT((ndo, "ipx-sap-resp")); 175 else 176 ND_PRINT((ndo, "ipx-sap-nearest-resp")); 177 178 for (i = 0; i < 8 && length > 0; i++) { 179 ND_TCHECK(ipx[0]); 180 ND_PRINT((ndo, " %s '", ipxsap_string(htons(EXTRACT_16BITS(&ipx[0]))))); 181 if (fn_printzp(ndo, (u_char *)&ipx[1], 48, ndo->ndo_snapend)) { 182 ND_PRINT((ndo, "'")); 183 goto trunc; 184 } 185 ND_TCHECK2(ipx[25], 10); 186 ND_PRINT((ndo, "' addr %s", 187 ipxaddr_string(EXTRACT_32BITS(&ipx[25]), (u_char *)&ipx[27]))); 188 ipx += 32; 189 length -= 64; 190 } 191 break; 192 default: 193 ND_PRINT((ndo, "ipx-sap-?%x", command)); 194 break; 195 } 196 return; 197 trunc: 198 ND_PRINT((ndo, "[|ipx %d]", length)); 199 } 200 201 static void 202 ipx_rip_print(netdissect_options *ndo, const u_short *ipx, u_int length) 203 { 204 int command, i; 205 206 ND_TCHECK(ipx[0]); 207 command = EXTRACT_16BITS(ipx); 208 ipx++; 209 length -= 2; 210 211 switch (command) { 212 case 1: 213 ND_PRINT((ndo, "ipx-rip-req")); 214 if (length > 0) { 215 ND_TCHECK(ipx[3]); 216 ND_PRINT((ndo, " %08x/%d.%d", EXTRACT_32BITS(&ipx[0]), 217 EXTRACT_16BITS(&ipx[2]), EXTRACT_16BITS(&ipx[3]))); 218 } 219 break; 220 case 2: 221 ND_PRINT((ndo, "ipx-rip-resp")); 222 for (i = 0; i < 50 && length > 0; i++) { 223 ND_TCHECK(ipx[3]); 224 ND_PRINT((ndo, " %08x/%d.%d", EXTRACT_32BITS(&ipx[0]), 225 EXTRACT_16BITS(&ipx[2]), EXTRACT_16BITS(&ipx[3]))); 226 227 ipx += 4; 228 length -= 8; 229 } 230 break; 231 default: 232 ND_PRINT((ndo, "ipx-rip-?%x", command)); 233 break; 234 } 235 return; 236 trunc: 237 ND_PRINT((ndo, "[|ipx %d]", length)); 238 } 239
