1 /* 2 * Copyright (c) 1988-1990 The Regents of the University of California. 3 * All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that: (1) source code distributions 7 * retain the above copyright notice and this paragraph in its entirety, (2) 8 * distributions including binary code include the above copyright notice and 9 * this paragraph in its entirety in the documentation or other materials 10 * provided with the distribution, and (3) all advertising materials mentioning 11 * features or use of this software display the following acknowledgement: 12 * ``This product includes software developed by the University of California, 13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of 14 * the University nor the names of its contributors may be used to endorse 15 * or promote products derived from this software without specific prior 16 * written permission. 17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED 18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF 19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. 20 * 21 * Format and print bootp packets. 22 * 23 * This file was copied from tcpdump-2.1.1 and modified. 24 * There is an e-mail list for tcpdump: <tcpdump (at) ee.lbl.gov> 25 */ 26 27 #include <sys/cdefs.h> 28 #ifndef lint 29 __RCSID("$NetBSD: print-bootp.c,v 1.14 2025/01/07 17:12:20 andvar Exp $"); 30 /* 93/10/10 <gwr (at) mc.com> New data-driven option print routine. */ 31 #endif 32 33 #include <stdio.h> 34 35 #include <sys/param.h> 36 #include <sys/types.h> 37 #include <sys/socket.h> 38 #include <net/if.h> 39 #include <netinet/in.h> 40 #include <string.h> 41 #include <strings.h> 42 #include <ctype.h> 43 44 #include "bootp.h" 45 #include "bootptest.h" 46 47 /* These decode the vendor data. */ 48 static void cmu_print(u_char *, int); 49 static void dump_hex(u_char *, int); 50 static void other_print(u_char *, int); 51 static void rfc1048_print(u_char *, int); 52 53 /* 54 * Print bootp requests 55 */ 56 void 57 bootp_print(struct bootp *bp, int length, u_short sport, u_short dport) 58 { 59 static char tstr[] = " [|bootp]"; 60 static unsigned char vm_cmu[4] = VM_CMU; 61 static unsigned char vm_rfc1048[4] = VM_RFC1048; 62 u_char *ep; 63 int vdlen; 64 65 #define TCHECK(var, l) if ((u_char *)&(var) > ep - l) goto trunc 66 67 /* Note funny sized packets */ 68 if (length != sizeof(struct bootp)) 69 (void) printf(" [len=%d]", length); 70 71 /* 'ep' points to the end of available data. */ 72 ep = (u_char *) snapend; 73 74 switch (bp->bp_op) { 75 76 case BOOTREQUEST: 77 /* Usually, a request goes from a client to a server */ 78 if (sport != IPPORT_BOOTPC || dport != IPPORT_BOOTPS) 79 printf(" (request)"); 80 break; 81 82 case BOOTREPLY: 83 /* Usually, a reply goes from a server to a client */ 84 if (sport != IPPORT_BOOTPS || dport != IPPORT_BOOTPC) 85 printf(" (reply)"); 86 break; 87 88 default: 89 printf(" bootp-#%d", bp->bp_op); 90 } 91 92 /* The usual hardware address type is 1 (10Mb Ethernet) */ 93 if (bp->bp_htype != 1) 94 printf(" htype:%d", bp->bp_htype); 95 96 /* The usual length for 10Mb Ethernet address is 6 bytes */ 97 if (bp->bp_hlen != 6) 98 printf(" hlen:%d", bp->bp_hlen); 99 100 /* Client's Hardware address */ 101 if (bp->bp_hlen) { 102 struct ether_header *eh; 103 char *e; 104 105 TCHECK(bp->bp_chaddr[0], 6); 106 eh = (struct ether_header *) packetp; 107 if (bp->bp_op == BOOTREQUEST) 108 e = (char *) ESRC(eh); 109 else if (bp->bp_op == BOOTREPLY) 110 e = (char *) EDST(eh); 111 else 112 e = 0; 113 if (e == 0 || bcmp((char *) bp->bp_chaddr, e, 6)) 114 dump_hex(bp->bp_chaddr, bp->bp_hlen); 115 } 116 /* Only print interesting fields */ 117 if (bp->bp_hops) 118 printf(" hops:%d", bp->bp_hops); 119 120 if (bp->bp_xid) 121 printf(" xid:%d", ntohl(bp->bp_xid)); 122 123 if (bp->bp_secs) 124 printf(" secs:%d", ntohs(bp->bp_secs)); 125 126 /* Client's ip address */ 127 TCHECK(bp->bp_ciaddr, sizeof(bp->bp_ciaddr)); 128 if (bp->bp_ciaddr.s_addr) 129 printf(" C:%s", ipaddr_string(&bp->bp_ciaddr)); 130 131 /* 'your' ip address (bootp client) */ 132 TCHECK(bp->bp_yiaddr, sizeof(bp->bp_yiaddr)); 133 if (bp->bp_yiaddr.s_addr) 134 printf(" Y:%s", ipaddr_string(&bp->bp_yiaddr)); 135 136 /* Server's ip address */ 137 TCHECK(bp->bp_siaddr, sizeof(bp->bp_siaddr)); 138 if (bp->bp_siaddr.s_addr) 139 printf(" S:%s", ipaddr_string(&bp->bp_siaddr)); 140 141 /* Gateway's ip address */ 142 TCHECK(bp->bp_giaddr, sizeof(bp->bp_giaddr)); 143 if (bp->bp_giaddr.s_addr) 144 printf(" G:%s", ipaddr_string(&bp->bp_giaddr)); 145 146 TCHECK(bp->bp_sname[0], sizeof(bp->bp_sname)); 147 if (*bp->bp_sname) { 148 printf(" sname:"); 149 if (printfn(bp->bp_sname, ep)) { 150 fputs(tstr + 1, stdout); 151 return; 152 } 153 } 154 TCHECK(bp->bp_file[0], sizeof(bp->bp_file)); 155 if (*bp->bp_file) { 156 printf(" file:"); 157 if (printfn(bp->bp_file, ep)) { 158 fputs(tstr + 1, stdout); 159 return; 160 } 161 } 162 /* Don't try to decode the vendor buffer unless we're verbose */ 163 if (vflag <= 0) 164 return; 165 166 vdlen = sizeof(bp->bp_vend); 167 /* Vendor data can extend to the end of the packet. */ 168 if (vdlen < (ep - bp->bp_vend)) 169 vdlen = (ep - bp->bp_vend); 170 171 TCHECK(bp->bp_vend[0], vdlen); 172 printf(" vend"); 173 if (!bcmp(bp->bp_vend, vm_rfc1048, sizeof(u_int32))) 174 rfc1048_print(bp->bp_vend, vdlen); 175 else if (!bcmp(bp->bp_vend, vm_cmu, sizeof(u_int32))) 176 cmu_print(bp->bp_vend, vdlen); 177 else 178 other_print(bp->bp_vend, vdlen); 179 180 return; 181 trunc: 182 fputs(tstr, stdout); 183 #undef TCHECK 184 } 185 186 /* 188 * Option description data follows. 189 * These are described in: RFC-1048, RFC-1395, RFC-1497, RFC-1533 190 * 191 * The first char of each option string encodes the data format: 192 * ?: unknown 193 * a: ASCII 194 * b: byte (8-bit) 195 * i: inet address 196 * l: int32 197 * s: short (16-bit) 198 */ 199 const char * 200 rfc1048_opts[] = { 201 /* Originally from RFC-1048: */ 202 "?PAD", /* 0: Padding - special, no data. */ 203 "iSM", /* 1: subnet mask (RFC950)*/ 204 "lTZ", /* 2: time offset, seconds from UTC */ 205 "iGW", /* 3: gateways (or routers) */ 206 "iTS", /* 4: time servers (RFC868) */ 207 "iINS", /* 5: IEN name servers (IEN116) */ 208 "iDNS", /* 6: domain name servers (RFC1035)(1034?) */ 209 "iLOG", /* 7: MIT log servers */ 210 "iCS", /* 8: cookie servers (RFC865) */ 211 "iLPR", /* 9: lpr server (RFC1179) */ 212 "iIPS", /* 10: impress servers (Imagen) */ 213 "iRLP", /* 11: resource location servers (RFC887) */ 214 "aHN", /* 12: host name (ASCII) */ 215 "sBFS", /* 13: boot file size (in 512 byte blocks) */ 216 217 /* Added by RFC-1395: */ 218 "aDUMP", /* 14: Merit Dump File */ 219 "aDNAM", /* 15: Domain Name (for DNS) */ 220 "iSWAP", /* 16: Swap Server */ 221 "aROOT", /* 17: Root Path */ 222 223 /* Added by RFC-1497: */ 224 "aEXTF", /* 18: Extensions Path (more options) */ 225 226 /* Added by RFC-1533: (many, many options...) */ 227 #if 1 /* These might not be worth recognizing by name. */ 228 229 /* IP Layer Parameters, per-host (RFC-1533, sect. 4) */ 230 "bIP-forward", /* 19: IP Forwarding flag */ 231 "bIP-srcroute", /* 20: IP Source Routing Enable flag */ 232 "iIP-filters", /* 21: IP Policy Filter (addr pairs) */ 233 "sIP-maxudp", /* 22: IP Max-UDP reassembly size */ 234 "bIP-ttlive", /* 23: IP Time to Live */ 235 "lIP-pmtuage", /* 24: IP Path MTU aging timeout */ 236 "sIP-pmtutab", /* 25: IP Path MTU plateau table */ 237 238 /* IP parameters, per-interface (RFC-1533, sect. 5) */ 239 "sIP-mtu-sz", /* 26: IP MTU size */ 240 "bIP-mtu-sl", /* 27: IP MTU all subnets local */ 241 "bIP-bcast1", /* 28: IP Broadcast Addr ones flag */ 242 "bIP-mask-d", /* 29: IP do mask discovery */ 243 "bIP-mask-s", /* 30: IP do mask supplier */ 244 "bIP-rt-dsc", /* 31: IP do router discovery */ 245 "iIP-rt-sa", /* 32: IP router solicitation addr */ 246 "iIP-routes", /* 33: IP static routes (dst,router) */ 247 248 /* Link Layer parameters, per-interface (RFC-1533, sect. 6) */ 249 "bLL-trailer", /* 34: do trailer encapsulation */ 250 "lLL-arp-tmo", /* 35: ARP cache timeout */ 251 "bLL-ether2", /* 36: Ethernet version 2 (IEEE 802.3) */ 252 253 /* TCP parameters (RFC-1533, sect. 7) */ 254 "bTCP-def-ttl", /* 37: default time to live */ 255 "lTCP-KA-tmo", /* 38: keepalive time interval */ 256 "bTCP-KA-junk", /* 39: keepalive sends extra junk */ 257 258 /* Application and Service Parameters (RFC-1533, sect. 8) */ 259 "aNISDOM", /* 40: NIS Domain (Sun YP) */ 260 "iNISSRV", /* 41: NIS Servers */ 261 "iNTPSRV", /* 42: NTP (time) Servers (RFC 1129) */ 262 "?VSINFO", /* 43: Vendor Specific Info (encapsulated) */ 263 "iNBiosNS", /* 44: NetBIOS Name Server (RFC-1001,1..2) */ 264 "iNBiosDD", /* 45: NetBIOS Datagram Dist. Server. */ 265 "bNBiosNT", /* 46: NetBIOS Note Type */ 266 "?NBiosS", /* 47: NetBIOS Scope */ 267 "iXW-FS", /* 48: X Window System Font Servers */ 268 "iXW-DM", /* 49: X Window System Display Managers */ 269 270 /* DHCP extensions (RFC-1533, sect. 9) */ 271 #endif 272 }; 273 #define KNOWN_OPTIONS (sizeof(rfc1048_opts) / sizeof(rfc1048_opts[0])) 274 275 static void 276 rfc1048_print(u_char *bp, int length) 277 { 278 u_char tag; 279 u_char *ep; 280 int len; 281 u_int32 ul; 282 u_short us; 283 struct in_addr ia; 284 const char *optstr; 285 286 printf("-rfc1395"); 287 288 /* Step over magic cookie */ 289 bp += sizeof(int32); 290 /* Setup end pointer */ 291 ep = bp + length; 292 while (bp < ep) { 293 tag = *bp++; 294 /* Check for tags with no data first. */ 295 if (tag == TAG_PAD) 296 continue; 297 if (tag == TAG_END) 298 return; 299 if (tag < KNOWN_OPTIONS) { 300 optstr = rfc1048_opts[tag]; 301 printf(" %s:", optstr + 1); 302 } else { 303 printf(" T%d:", tag); 304 optstr = "?"; 305 } 306 /* Now scan the length byte. */ 307 len = *bp++; 308 if (bp + len > ep) { 309 /* truncated option */ 310 printf(" |(%d>%ld)", len, (long)(ep - bp)); 311 return; 312 } 313 /* Print the option value(s). */ 314 switch (optstr[0]) { 315 316 case 'a': /* ASCII string */ 317 printfn(bp, bp + len); 318 bp += len; 319 len = 0; 320 break; 321 322 case 's': /* Word formats */ 323 while (len >= 2) { 324 bcopy((char *) bp, (char *) &us, 2); 325 printf("%d", ntohs(us)); 326 bp += 2; 327 len -= 2; 328 if (len) printf(","); 329 } 330 if (len) printf("(junk=%d)", len); 331 break; 332 333 case 'l': /* Long words */ 334 while (len >= 4) { 335 bcopy((char *) bp, (char *) &ul, 4); 336 printf("%d", ntohl(ul)); 337 bp += 4; 338 len -= 4; 339 if (len) printf(","); 340 } 341 if (len) printf("(junk=%d)", len); 342 break; 343 344 case 'i': /* INET addresses */ 345 while (len >= 4) { 346 bcopy((char *) bp, (char *) &ia, 4); 347 printf("%s", ipaddr_string(&ia)); 348 bp += 4; 349 len -= 4; 350 if (len) printf(","); 351 } 352 if (len) printf("(junk=%d)", len); 353 break; 354 355 case 'b': 356 default: 357 break; 358 359 } /* switch */ 360 361 /* Print as characters, if appropriate. */ 362 if (len) { 363 dump_hex(bp, len); 364 if (isascii(*bp) && isprint(*bp)) { 365 printf("("); 366 printfn(bp, bp + len); 367 printf(")"); 368 } 369 bp += len; 370 len = 0; 371 } 372 } /* while bp < ep */ 373 } 374 375 static void 376 cmu_print(u_char *bp, int length) 377 { 378 struct cmu_vend *v; 379 380 printf("-cmu"); 381 382 v = (struct cmu_vend *) bp; 383 if (length < (int)sizeof(*v)) { 384 printf(" |L=%d", length); 385 return; 386 } 387 388 /* Subnet mask */ 389 if (v->v_flags & VF_SMASK) { 390 printf(" SM:%s", ipaddr_string(&v->v_smask)); 391 } 392 /* Default gateway */ 393 if (v->v_dgate.s_addr) 394 printf(" GW:%s", ipaddr_string(&v->v_dgate)); 395 396 /* Domain name servers */ 397 if (v->v_dns1.s_addr) 398 printf(" DNS1:%s", ipaddr_string(&v->v_dns1)); 399 if (v->v_dns2.s_addr) 400 printf(" DNS2:%s", ipaddr_string(&v->v_dns2)); 401 402 /* IEN-116 name servers */ 403 if (v->v_ins1.s_addr) 404 printf(" INS1:%s", ipaddr_string(&v->v_ins1)); 405 if (v->v_ins2.s_addr) 406 printf(" INS2:%s", ipaddr_string(&v->v_ins2)); 407 408 /* Time servers */ 409 if (v->v_ts1.s_addr) 410 printf(" TS1:%s", ipaddr_string(&v->v_ts1)); 411 if (v->v_ts2.s_addr) 412 printf(" TS2:%s", ipaddr_string(&v->v_ts2)); 413 414 } 415 416 417 /* 418 * Print out arbitrary, unknown vendor data. 419 */ 420 421 static void 422 other_print(u_char *bp, int length) 423 { 424 u_char *ep; /* end pointer */ 425 u_char *zp; /* points one past last non-zero byte */ 426 427 /* Setup end pointer */ 428 ep = bp + length; 429 430 /* Find the last non-zero byte. */ 431 for (zp = ep; zp > bp; zp--) { 432 if (zp[-1] != 0) 433 break; 434 } 435 436 /* Print the all-zero case in a compact representation. */ 437 if (zp == bp) { 438 printf("-all-zero"); 439 return; 440 } 441 printf("-unknown"); 442 443 /* Are there enough trailing zeros to make "00..." worthwhile? */ 444 if (zp + 2 > ep) 445 zp = ep; /* print them all normally */ 446 447 /* Now just print all the non-zero data. */ 448 while (bp < zp) { 449 printf(".%02X", *bp); 450 bp++; 451 } 452 453 if (zp < ep) 454 printf(".00..."); 455 456 return; 457 } 458 459 static void 460 dump_hex(u_char *bp, int len) 461 { 462 while (len > 0) { 463 printf("%02X", *bp); 464 bp++; 465 len--; 466 if (len) printf("."); 467 } 468 } 469 470 /* 471 * Local Variables: 472 * tab-width: 4 473 * c-indent-level: 4 474 * c-argdecl-indent: 4 475 * c-continued-statement-offset: 4 476 * c-continued-brace-offset: -4 477 * c-label-offset: -4 478 * c-brace-offset: 0 479 * End: 480 */ 481