1 /*
2 * Copyright (c) 1994, 1995, 1996
3 * The Regents of the University of California. All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 *
21 * Format and print Novell IPX packets.
22 * Contributed by Brad Parker (brad@fcr.com).
23 */
24
25 #define NETDISSECT_REWORKED
26 #ifdef HAVE_CONFIG_H
27 #include "config.h"
28 #endif
29
30 #include <tcpdump-stdinc.h>
31
32 #include <stdio.h>
33
34 #include "interface.h"
35 #include "addrtoname.h"
36 #include "extract.h"
37
38 /* well-known sockets */
39 #define IPX_SKT_NCP 0x0451
40 #define IPX_SKT_SAP 0x0452
41 #define IPX_SKT_RIP 0x0453
42 #define IPX_SKT_NETBIOS 0x0455
43 #define IPX_SKT_DIAGNOSTICS 0x0456
44 #define IPX_SKT_NWLINK_DGM 0x0553 /* NWLink datagram, may contain SMB */
45 #define IPX_SKT_EIGRP 0x85be /* Cisco EIGRP over IPX */
46
47 /* IPX transport header */
48 struct ipxHdr {
49 uint16_t cksum; /* Checksum */
50 uint16_t length; /* Length, in bytes, including header */
51 uint8_t tCtl; /* Transport Control (i.e. hop count) */
52 uint8_t pType; /* Packet Type (i.e. level 2 protocol) */
53 uint16_t dstNet[2]; /* destination net */
54 uint8_t dstNode[6]; /* destination node */
55 uint16_t dstSkt; /* destination socket */
56 uint16_t srcNet[2]; /* source net */
57 uint8_t srcNode[6]; /* source node */
58 uint16_t srcSkt; /* source socket */
59 };
60
61 #define ipxSize 30
62
63 static const char *ipxaddr_string(uint32_t, const u_char *);
64 static void ipx_decode(netdissect_options *, const struct ipxHdr *, const u_char *, u_int);
65 static void ipx_sap_print(netdissect_options *, const u_short *, u_int);
66 static void ipx_rip_print(netdissect_options *, const u_short *, u_int);
67
68 /*
69 * Print IPX datagram packets.
70 */
71 void
ipx_print(netdissect_options * ndo,const u_char * p,u_int length)72 ipx_print(netdissect_options *ndo, const u_char *p, u_int length)
73 {
74 const struct ipxHdr *ipx = (const struct ipxHdr *)p;
75
76 if (!ndo->ndo_eflag)
77 ND_PRINT((ndo, "IPX "));
78
79 ND_TCHECK(ipx->srcSkt);
80 ND_PRINT((ndo, "%s.%04x > ",
81 ipxaddr_string(EXTRACT_32BITS(ipx->srcNet), ipx->srcNode),
82 EXTRACT_16BITS(&ipx->srcSkt)));
83
84 ND_PRINT((ndo, "%s.%04x: ",
85 ipxaddr_string(EXTRACT_32BITS(ipx->dstNet), ipx->dstNode),
86 EXTRACT_16BITS(&ipx->dstSkt)));
87
88 /* take length from ipx header */
89 ND_TCHECK(ipx->length);
90 length = EXTRACT_16BITS(&ipx->length);
91
92 ipx_decode(ndo, ipx, (u_char *)ipx + ipxSize, length - ipxSize);
93 return;
94 trunc:
95 ND_PRINT((ndo, "[|ipx %d]", length));
96 }
97
98 static const char *
ipxaddr_string(uint32_t net,const u_char * node)99 ipxaddr_string(uint32_t net, const u_char *node)
100 {
101 static char line[256];
102
103 snprintf(line, sizeof(line), "%08x.%02x:%02x:%02x:%02x:%02x:%02x",
104 net, node[0], node[1], node[2], node[3], node[4], node[5]);
105
106 return line;
107 }
108
109 static void
ipx_decode(netdissect_options * ndo,const struct ipxHdr * ipx,const u_char * datap,u_int length)110 ipx_decode(netdissect_options *ndo, const struct ipxHdr *ipx, const u_char *datap, u_int length)
111 {
112 register u_short dstSkt;
113
114 dstSkt = EXTRACT_16BITS(&ipx->dstSkt);
115 switch (dstSkt) {
116 case IPX_SKT_NCP:
117 ND_PRINT((ndo, "ipx-ncp %d", length));
118 break;
119 case IPX_SKT_SAP:
120 ipx_sap_print(ndo, (u_short *)datap, length);
121 break;
122 case IPX_SKT_RIP:
123 ipx_rip_print(ndo, (u_short *)datap, length);
124 break;
125 case IPX_SKT_NETBIOS:
126 ND_PRINT((ndo, "ipx-netbios %d", length));
127 #ifdef TCPDUMP_DO_SMB
128 ipx_netbios_print(ndo, datap, length);
129 #endif
130 break;
131 case IPX_SKT_DIAGNOSTICS:
132 ND_PRINT((ndo, "ipx-diags %d", length));
133 break;
134 case IPX_SKT_NWLINK_DGM:
135 ND_PRINT((ndo, "ipx-nwlink-dgm %d", length));
136 #ifdef TCPDUMP_DO_SMB
137 ipx_netbios_print(ndo, datap, length);
138 #endif
139 break;
140 case IPX_SKT_EIGRP:
141 eigrp_print(ndo, datap, length);
142 break;
143 default:
144 ND_PRINT((ndo, "ipx-#%x %d", dstSkt, length));
145 break;
146 }
147 }
148
149 static void
ipx_sap_print(netdissect_options * ndo,const u_short * ipx,u_int length)150 ipx_sap_print(netdissect_options *ndo, const u_short *ipx, u_int length)
151 {
152 int command, i;
153
154 ND_TCHECK(ipx[0]);
155 command = EXTRACT_16BITS(ipx);
156 ipx++;
157 length -= 2;
158
159 switch (command) {
160 case 1:
161 case 3:
162 if (command == 1)
163 ND_PRINT((ndo, "ipx-sap-req"));
164 else
165 ND_PRINT((ndo, "ipx-sap-nearest-req"));
166
167 ND_TCHECK(ipx[0]);
168 ND_PRINT((ndo, " %s", ipxsap_string(htons(EXTRACT_16BITS(&ipx[0])))));
169 break;
170
171 case 2:
172 case 4:
173 if (command == 2)
174 ND_PRINT((ndo, "ipx-sap-resp"));
175 else
176 ND_PRINT((ndo, "ipx-sap-nearest-resp"));
177
178 for (i = 0; i < 8 && length > 0; i++) {
179 ND_TCHECK(ipx[0]);
180 ND_PRINT((ndo, " %s '", ipxsap_string(htons(EXTRACT_16BITS(&ipx[0])))));
181 if (fn_printzp(ndo, (u_char *)&ipx[1], 48, ndo->ndo_snapend)) {
182 ND_PRINT((ndo, "'"));
183 goto trunc;
184 }
185 ND_TCHECK2(ipx[25], 10);
186 ND_PRINT((ndo, "' addr %s",
187 ipxaddr_string(EXTRACT_32BITS(&ipx[25]), (u_char *)&ipx[27])));
188 ipx += 32;
189 length -= 64;
190 }
191 break;
192 default:
193 ND_PRINT((ndo, "ipx-sap-?%x", command));
194 break;
195 }
196 return;
197 trunc:
198 ND_PRINT((ndo, "[|ipx %d]", length));
199 }
200
201 static void
ipx_rip_print(netdissect_options * ndo,const u_short * ipx,u_int length)202 ipx_rip_print(netdissect_options *ndo, const u_short *ipx, u_int length)
203 {
204 int command, i;
205
206 ND_TCHECK(ipx[0]);
207 command = EXTRACT_16BITS(ipx);
208 ipx++;
209 length -= 2;
210
211 switch (command) {
212 case 1:
213 ND_PRINT((ndo, "ipx-rip-req"));
214 if (length > 0) {
215 ND_TCHECK(ipx[3]);
216 ND_PRINT((ndo, " %08x/%d.%d", EXTRACT_32BITS(&ipx[0]),
217 EXTRACT_16BITS(&ipx[2]), EXTRACT_16BITS(&ipx[3])));
218 }
219 break;
220 case 2:
221 ND_PRINT((ndo, "ipx-rip-resp"));
222 for (i = 0; i < 50 && length > 0; i++) {
223 ND_TCHECK(ipx[3]);
224 ND_PRINT((ndo, " %08x/%d.%d", EXTRACT_32BITS(&ipx[0]),
225 EXTRACT_16BITS(&ipx[2]), EXTRACT_16BITS(&ipx[3])));
226
227 ipx += 4;
228 length -= 8;
229 }
230 break;
231 default:
232 ND_PRINT((ndo, "ipx-rip-?%x", command));
233 break;
234 }
235 return;
236 trunc:
237 ND_PRINT((ndo, "[|ipx %d]", length));
238 }
239