Home | History | Annotate | Line # | Download | only in dist
      1 /*
      2  * Copyright (c) 1988-1997
      3  *	The Regents of the University of California.  All rights reserved.
      4  *
      5  * Copyright (c) 1998-2012  Michael Richardson <mcr (at) tcpdump.org>
      6  *      The TCPDUMP project
      7  *
      8  * Redistribution and use in source and binary forms, with or without
      9  * modification, are permitted provided that: (1) source code distributions
     10  * retain the above copyright notice and this paragraph in its entirety, (2)
     11  * distributions including binary code include the above copyright notice and
     12  * this paragraph in its entirety in the documentation or other materials
     13  * provided with the distribution, and (3) all advertising materials mentioning
     14  * features or use of this software display the following acknowledgement:
     15  * ``This product includes software developed by the University of California,
     16  * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
     17  * the University nor the names of its contributors may be used to endorse
     18  * or promote products derived from this software without specific prior
     19  * written permission.
     20  * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
     21  * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
     22  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
     23  */
     24 
     25 #ifndef netdissect_h
     26 #define netdissect_h
     27 
     28 #ifdef HAVE_OS_PROTO_H
     29 #include "os-proto.h"
     30 #endif
     31 #include <sys/types.h>
     32 #include <setjmp.h>
     33 #include <time.h>
     34 #include "status-exit-codes.h"
     35 #include "funcattrs.h" /* for PRINTFLIKE_FUNCPTR() */
     36 #include "diag-control.h" /* for ND_UNREACHABLE */
     37 
     38 /*
     39  * Data types corresponding to multi-byte integral values within data
     40  * structures.  These are defined as arrays of octets, so that they're
     41  * not aligned on their "natural" boundaries, and so that you *must*
     42  * use the EXTRACT_ macros to extract them (which you should be doing
     43  * *anyway*, so as not to assume a particular byte order or alignment
     44  * in your code).
     45  *
     46  * We even want EXTRACT_U_1 used for 8-bit integral values, so we
     47  * define nd_uint8_t and nd_int8_t as arrays as well.
     48  */
     49 typedef unsigned char nd_uint8_t[1];
     50 typedef unsigned char nd_uint16_t[2];
     51 typedef unsigned char nd_uint24_t[3];
     52 typedef unsigned char nd_uint32_t[4];
     53 typedef unsigned char nd_uint40_t[5];
     54 typedef unsigned char nd_uint48_t[6];
     55 typedef unsigned char nd_uint56_t[7];
     56 typedef unsigned char nd_uint64_t[8];
     57 
     58 typedef signed char nd_int8_t[1];
     59 
     60 /*
     61  * "unsigned char" so that sign extension isn't done on the
     62  * individual bytes while they're being assembled.  Use
     63  * GET_S_BE_n() and GET_S_LE_n() macros to extract the value
     64  * as a signed integer.
     65  */
     66 typedef unsigned char nd_int16_t[2];
     67 typedef unsigned char nd_int24_t[3];
     68 typedef unsigned char nd_int32_t[4];
     69 typedef unsigned char nd_int40_t[5];
     70 typedef unsigned char nd_int48_t[6];
     71 typedef unsigned char nd_int56_t[7];
     72 typedef unsigned char nd_int64_t[8];
     73 
     74 #define	FMAXINT	(4294967296.0)	/* floating point rep. of MAXINT */
     75 
     76 /*
     77  * Use this for IPv4 addresses and netmasks.
     78  *
     79  * It's defined as an array of octets, so that it's not guaranteed to
     80  * be aligned on its "natural" boundary (in some packet formats, it
     81  * *isn't* so aligned).  We have separate EXTRACT_ calls for them;
     82  * sometimes you want the host-byte-order value, other times you want
     83  * the network-byte-order value.
     84  *
     85  * Don't use EXTRACT_BE_U_4() on them, use EXTRACT_IPV4_TO_HOST_ORDER()
     86  * if you want them in host byte order and EXTRACT_IPV4_TO_NETWORK_ORDER()
     87  * if you want them in network byte order (which you want with system APIs
     88  * that expect network-order IPv4 addresses, such as inet_ntop()).
     89  *
     90  * If, on your little-endian machine (e.g., an "IBM-compatible PC", no matter
     91  * what the OS, or an Intel Mac, no matter what the OS), you get the wrong
     92  * answer, and you've used EXTRACT_BE_U_4(), do *N*O*T* "fix" this by using
     93  * EXTRACT_LE_U_4(), fix it by using EXTRACT_IPV4_TO_NETWORK_ORDER(),
     94  * otherwise you're breaking the result on big-endian machines (e.g.,
     95  * most PowerPC/Power ISA machines, System/390 and z/Architecture, SPARC,
     96  * etc.).
     97  *
     98  * Yes, people do this; that's why Wireshark has tvb_get_ipv4(), to extract
     99  * an IPv4 address from a packet data buffer; it was introduced in reaction
    100  * to somebody who *had* done that.
    101  */
    102 typedef unsigned char nd_ipv4[4];
    103 
    104 /*
    105  * Use this for IPv6 addresses and netmasks.
    106  */
    107 typedef unsigned char nd_ipv6[16];
    108 
    109 /*
    110  * Use this for MAC addresses.
    111  */
    112 #define MAC_ADDR_LEN	6U		/* length of MAC addresses */
    113 typedef unsigned char nd_mac_addr[MAC_ADDR_LEN];
    114 
    115 /*
    116  * Use this for blobs of bytes; make them arrays of nd_byte.
    117  */
    118 typedef unsigned char nd_byte;
    119 
    120 /*
    121  * Round up x to a multiple of y; y must be a power of 2.
    122  */
    123 #ifndef roundup2
    124 #define	roundup2(x, y)	(((x)+((u_int)((y)-1)))&(~((u_int)((y)-1))))
    125 #endif
    126 
    127 #include <stdarg.h>
    128 #include <pcap.h>
    129 
    130 #include "ip.h" /* struct ip for nextproto4_cksum() */
    131 #include "ip6.h" /* struct ip6 for nextproto6_cksum() */
    132 
    133 #ifndef HAVE_STRLCAT
    134 extern size_t strlcat (char *, const char *, size_t);
    135 #endif
    136 #ifndef HAVE_STRLCPY
    137 extern size_t strlcpy (char *, const char *, size_t);
    138 #endif
    139 
    140 #ifndef HAVE_STRDUP
    141 extern char *strdup (const char *str);
    142 #endif
    143 
    144 #ifndef HAVE_STRSEP
    145 extern char *strsep(char **, const char *);
    146 #endif
    147 
    148 struct tok {
    149 	u_int v;		/* value */
    150 	const char *s;		/* string */
    151 };
    152 
    153 /* tok2str is deprecated */
    154 extern const char *tok2str(const struct tok *, const char *, u_int);
    155 extern char *bittok2str(const struct tok *, const char *, u_int);
    156 extern char *bittok2str_nosep(const struct tok *, const char *, u_int);
    157 
    158 /* Initialize netdissect. */
    159 extern int nd_init(char *, size_t);
    160 /* Clean up netdissect. */
    161 extern void nd_cleanup(void);
    162 
    163 /* Do we have libsmi support? */
    164 extern int nd_have_smi_support(void);
    165 /* Load an SMI module. */
    166 extern int nd_load_smi_module(const char *, char *, size_t);
    167 /* Flag indicating whether an SMI module has been loaded. */
    168 extern int nd_smi_module_loaded;
    169 /* Version number of the SMI library, or NULL if we don't have libsmi support. */
    170 extern const char *nd_smi_version_string(void);
    171 
    172 typedef struct netdissect_options netdissect_options;
    173 
    174 #define IF_PRINTER_ARGS (netdissect_options *, const struct pcap_pkthdr *, const u_char *)
    175 
    176 typedef void (*if_printer) IF_PRINTER_ARGS;
    177 
    178 /*
    179  * In case the data in a buffer needs to be processed by being decrypted,
    180  * decompressed, etc. before it's dissected, we can't process it in place,
    181  * we have to allocate a new buffer for the processed data.
    182  *
    183  * We keep a stack of those buffers; when we allocate a new buffer, we
    184  * push the current one onto a stack, and when we're done with the new
    185  * buffer, we free the current buffer and pop the previous one off the
    186  * stack.
    187  *
    188  * A buffer has a beginning and end pointer, and a link to the previous
    189  * buffer on the stack.
    190  *
    191  * In other cases, we temporarily adjust the snapshot end to reflect a
    192  * packet-length field in the packet data and, when finished dissecting
    193  * that part of the packet, restore the old snapshot end.  We keep that
    194  * on the stack with null buffer pointer, meaning there's nothing to
    195  * free.
    196  */
    197 struct netdissect_saved_packet_info {
    198   u_char *ndspi_buffer;					/* pointer to allocated buffer data */
    199   const u_char *ndspi_packetp;				/* saved beginning of data */
    200   const u_char *ndspi_snapend;				/* saved end of data */
    201   struct netdissect_saved_packet_info *ndspi_prev;	/* previous buffer on the stack */
    202 };
    203 
    204 /* 'val' value(s) for longjmp */
    205 #define ND_TRUNCATED 1
    206 
    207 struct netdissect_options {
    208   int ndo_bflag;		/* print 4 byte ASes in ASDOT notation */
    209   int ndo_eflag;		/* print ethernet header */
    210   int ndo_fflag;		/* don't translate "foreign" IP address */
    211   int ndo_Kflag;		/* don't check IP, TCP or UDP checksums */
    212   int ndo_nflag;		/* leave addresses as numbers */
    213   int ndo_Nflag;		/* remove domains from printed host names */
    214   int ndo_qflag;		/* quick (shorter) output */
    215   int ndo_Sflag;		/* print raw TCP sequence numbers */
    216   int ndo_tflag;		/* print packet arrival time */
    217   int ndo_uflag;		/* Print undecoded NFS handles */
    218   int ndo_vflag;		/* verbosity level */
    219   int ndo_xflag;		/* print packet in hex */
    220   int ndo_Xflag;		/* print packet in hex/ASCII */
    221   int ndo_Aflag;		/* print packet only in ASCII observing TAB,
    222 				 * LF, CR and SPACE as graphical chars
    223 				 */
    224   int ndo_Hflag;		/* dissect 802.11s draft mesh standard */
    225   const char *ndo_protocol;	/* protocol */
    226   jmp_buf ndo_early_end;	/* jmp_buf for setjmp()/longjmp() */
    227   void *ndo_last_mem_p;		/* pointer to the last allocated memory chunk */
    228   int ndo_packet_number;	/* print a packet number in the beginning of line */
    229   int ndo_suppress_default_print; /* don't use default_print() for unknown packet types */
    230   int ndo_tstamp_precision;	/* requested time stamp precision */
    231   const char *program_name;	/* Name of the program using the library */
    232 
    233   char *ndo_espsecret;
    234   struct sa_list *ndo_sa_list_head;  /* used by print-esp.c */
    235   struct sa_list *ndo_sa_default;
    236 
    237   char *ndo_sigsecret;		/* Signature verification secret key */
    238 
    239   int   ndo_packettype;	/* as specified by -T */
    240 
    241   int   ndo_snaplen;
    242   int   ndo_ll_hdr_len;	/* link-layer header length */
    243 
    244   /*global pointers to beginning and end of current packet (during printing) */
    245   const u_char *ndo_packetp;
    246   const u_char *ndo_snapend;
    247 
    248   /* stack of saved packet boundary and buffer information */
    249   struct netdissect_saved_packet_info *ndo_packet_info_stack;
    250 
    251   /* pointer to the if_printer function */
    252   if_printer ndo_if_printer;
    253 
    254   /* pointer to void function to output stuff */
    255   void (*ndo_default_print)(netdissect_options *,
    256 			    const u_char *bp, u_int length);
    257 
    258   /* pointer to function to do regular output */
    259   int  (*ndo_printf)(netdissect_options *,
    260 		     const char *fmt, ...)
    261 		     PRINTFLIKE_FUNCPTR(2, 3);
    262   /* pointer to function to output errors */
    263   void NORETURN_FUNCPTR (*ndo_error)(netdissect_options *,
    264 				     status_exit_codes_t status,
    265 				     const char *fmt, ...)
    266 				     PRINTFLIKE_FUNCPTR(3, 4);
    267   /* pointer to function to output warnings */
    268   void (*ndo_warning)(netdissect_options *,
    269 		      const char *fmt, ...)
    270 		      PRINTFLIKE_FUNCPTR(2, 3);
    271 };
    272 
    273 extern WARN_UNUSED_RESULT int nd_push_buffer(netdissect_options *, u_char *, const u_char *, const u_int);
    274 extern WARN_UNUSED_RESULT int nd_push_snaplen(netdissect_options *, const u_char *, const u_int);
    275 extern void nd_change_snaplen(netdissect_options *, const u_char *, const u_int);
    276 extern void nd_pop_packet_info(netdissect_options *);
    277 extern void nd_pop_all_packet_info(netdissect_options *);
    278 
    279 /*
    280  * Report a packet truncation with a longjmp().
    281  */
    282 NORETURN void nd_trunc_longjmp(netdissect_options *ndo);
    283 
    284 #define PT_VAT		1	/* Visual Audio Tool */
    285 #define PT_WB		2	/* distributed White Board */
    286 #define PT_RPC		3	/* Remote Procedure Call */
    287 #define PT_RTP		4	/* Real-Time Applications protocol */
    288 #define PT_RTCP		5	/* Real-Time Applications control protocol */
    289 #define PT_SNMP		6	/* Simple Network Management Protocol */
    290 #define PT_CNFP		7	/* Cisco NetFlow protocol */
    291 #define PT_TFTP		8	/* trivial file transfer protocol */
    292 #define PT_AODV		9	/* Ad-hoc On-demand Distance Vector Protocol */
    293 #define PT_CARP		10	/* Common Address Redundancy Protocol */
    294 #define PT_RADIUS	11	/* RADIUS authentication Protocol */
    295 #define PT_ZMTP1	12	/* ZeroMQ Message Transport Protocol 1.0 */
    296 #define PT_VXLAN	13	/* Virtual eXtensible Local Area Network */
    297 #define PT_PGM		14	/* [UDP-encapsulated] Pragmatic General Multicast */
    298 #define PT_PGM_ZMTP1	15	/* ZMTP/1.0 inside PGM (native or UDP-encapsulated) */
    299 #define PT_LMP		16	/* Link Management Protocol */
    300 #define PT_RESP		17	/* RESP */
    301 #define PT_PTP		18	/* PTP */
    302 #define PT_SOMEIP	19	/* Autosar SOME/IP Protocol */
    303 #define PT_DOMAIN	20	/* Domain Name System (DNS) */
    304 
    305 #define ND_MIN(a,b) ((a)>(b)?(b):(a))
    306 #define ND_MAX(a,b) ((b)>(a)?(b):(a))
    307 
    308 /* For source or destination ports tests (UDP, TCP, ...) */
    309 #define IS_SRC_OR_DST_PORT(p) (sport == (p) || dport == (p))
    310 
    311 /*
    312  * Maximum snapshot length.  This should be enough to capture the full
    313  * packet on most network interfaces.
    314  *
    315  *
    316  * Somewhat arbitrary, but chosen to be:
    317  *
    318  *    1) big enough for maximum-size Linux loopback packets (65549)
    319  *       and some USB packets captured with USBPcap:
    320  *
    321  *           https://desowin.org/usbpcap/
    322  *
    323  *       (> 131072, < 262144)
    324  *
    325  * and
    326  *
    327  *    2) small enough not to cause attempts to allocate huge amounts of
    328  *       memory; some applications might use the snapshot length in a
    329  *       savefile header to control the size of the buffer they allocate,
    330  *       so a size of, say, 2^31-1 might not work well.
    331  *
    332  * XXX - does it need to be bigger still?  Note that, for versions of
    333  * libpcap with pcap_create()/pcap_activate(), if no -s flag is specified
    334  * or -s 0 is specified, we won't set the snapshot length at all, and will
    335  * let libpcap choose a snapshot length; newer versions may choose a bigger
    336  * value than 262144 for D-Bus, for example.
    337  */
    338 #define MAXIMUM_SNAPLEN	262144
    339 
    340 /*
    341  * True if "l" bytes from "p" were captured.
    342  *
    343  * The "ndo->ndo_snapend - (l) <= ndo->ndo_snapend" checks to make sure
    344  * "l" isn't so large that "ndo->ndo_snapend - (l)" underflows.
    345  *
    346  * The check is for <= rather than < because "l" might be 0.
    347  *
    348  * We cast the pointers to uintptr_t to make sure that the compiler
    349  * doesn't optimize away any of these tests (which it is allowed to
    350  * do, as adding an integer to, or subtracting an integer from, a
    351  * pointer assumes that the pointer is a pointer to an element of an
    352  * array and that the result of the addition or subtraction yields a
    353  * pointer to another member of the array, so that, for example, if
    354  * you subtract a positive integer from a pointer, the result is
    355  * guaranteed to be less than the original pointer value). See
    356  *
    357  *	https://www.kb.cert.org/vuls/id/162289
    358  */
    359 
    360 /*
    361  * Test in two parts to avoid these warnings:
    362  * comparison of unsigned expression >= 0 is always true [-Wtype-limits],
    363  * comparison is always true due to limited range of data type [-Wtype-limits].
    364  */
    365 #define IS_NOT_NEGATIVE(x) (((x) > 0) || ((x) == 0))
    366 
    367 #define ND_TTEST_LEN(p, l) \
    368   (IS_NOT_NEGATIVE(l) && \
    369 	((uintptr_t)ndo->ndo_snapend - (l) <= (uintptr_t)ndo->ndo_snapend && \
    370          (uintptr_t)(p) <= (uintptr_t)ndo->ndo_snapend - (l)))
    371 
    372 /* True if "*(p)" was captured */
    373 #define ND_TTEST_SIZE(p) ND_TTEST_LEN(p, sizeof(*(p)))
    374 
    375 /* Bail out if "l" bytes from "p" were not captured */
    376 #ifdef ND_LONGJMP_FROM_TCHECK
    377 #define ND_TCHECK_LEN(p, l) if (!ND_TTEST_LEN(p, l)) nd_trunc_longjmp(ndo)
    378 #else
    379 #define ND_TCHECK_LEN(p, l) if (!ND_TTEST_LEN(p, l)) goto trunc
    380 #endif
    381 
    382 /* Bail out if "*(p)" was not captured */
    383 #define ND_TCHECK_SIZE(p) ND_TCHECK_LEN(p, sizeof(*(p)))
    384 
    385 /*
    386  * Number of bytes between two pointers.
    387  */
    388 #define ND_BYTES_BETWEEN(p1, p2) ((const u_char *)(p1) >= (const u_char *)(p2) ? 0 : ((u_int)(((const u_char *)(p2)) - (const u_char *)(p1))))
    389 
    390 /*
    391  * Number of bytes remaining in the captured data, starting at the
    392  * byte pointed to by the argument.
    393  */
    394 #define ND_BYTES_AVAILABLE_AFTER(p) ((const u_char *)(p) < ndo->ndo_packetp ? 0 : ND_BYTES_BETWEEN((p), ndo->ndo_snapend))
    395 
    396 /*
    397  * Check (expression_1 operator expression_2) for invalid packet with
    398  * a custom message, format %u
    399  */
    400 #define ND_ICHECKMSG_U(message, expression_1, operator, expression_2) \
    401 if ((expression_1) operator (expression_2)) { \
    402 ND_PRINT(" [%s %u %s %u]", (message), (expression_1), (#operator), (expression_2)); \
    403 goto invalid; \
    404 }
    405 
    406 /*
    407  * Check (expression_1 operator expression_2) for invalid packet with
    408  * "expression_1" message, format %u
    409  */
    410 #define ND_ICHECK_U(expression_1, operator, expression_2) \
    411 ND_ICHECKMSG_U((#expression_1), (expression_1), operator, (expression_2))
    412 
    413 /*
    414  * Check (expression_1 operator expression_2) for invalid packet with
    415  * a custom message, format %zu
    416  */
    417 #define ND_ICHECKMSG_ZU(message, expression_1, operator, expression_2) \
    418 if ((expression_1) operator (expression_2)) { \
    419 ND_PRINT(" [%s %u %s %zu]", (message), (expression_1), (#operator), (expression_2)); \
    420 goto invalid; \
    421 }
    422 
    423 /*
    424  * Check (expression_1 operator expression_2) for invalid packet with
    425  * "expression_1" message, format %zu
    426  */
    427 #define ND_ICHECK_ZU(expression_1, operator, expression_2) \
    428 ND_ICHECKMSG_ZU((#expression_1), (expression_1), operator, (expression_2))
    429 
    430 #define ND_PRINT(...) (ndo->ndo_printf)(ndo, __VA_ARGS__)
    431 #define ND_DEFAULTPRINT(ap, length) (*ndo->ndo_default_print)(ndo, ap, length)
    432 
    433 extern void ts_print(netdissect_options *, const struct timeval *);
    434 extern void signed_relts_print(netdissect_options *, int32_t);
    435 extern void unsigned_relts_print(netdissect_options *, uint32_t);
    436 
    437 extern const char *nd_format_time(char *buf, size_t bufsize,
    438     const char *format, const struct tm *timeptr);
    439 
    440 extern void fn_print_char(netdissect_options *, u_char);
    441 extern void fn_print_str(netdissect_options *, const u_char *);
    442 extern u_int nd_printztn(netdissect_options *, const u_char *, u_int, const u_char *);
    443 extern int nd_printn(netdissect_options *, const u_char *, u_int, const u_char *);
    444 extern void nd_printjn(netdissect_options *, const u_char *, u_int);
    445 extern void nd_printjnp(netdissect_options *, const u_char *, u_int);
    446 
    447 /*
    448  * Flags for txtproto_print().
    449  */
    450 #define RESP_CODE_SECOND_TOKEN	0x00000001	/* response code is second token in response line */
    451 
    452 extern void txtproto_print(netdissect_options *, const u_char *, u_int,
    453 			   const char **, u_int);
    454 
    455 #if (defined(__i386__) || defined(_M_IX86) || defined(__X86__) || defined(__x86_64__) || defined(_M_X64)) || \
    456     (defined(__arm__) || defined(_M_ARM) || defined(__aarch64__)) || \
    457     (defined(__m68k__) && (!defined(__mc68000__) && !defined(__mc68010__))) || \
    458     (defined(__ppc__) || defined(__ppc64__) || defined(_M_PPC) || defined(_ARCH_PPC) || defined(_ARCH_PPC64)) || \
    459     (defined(__s390__) || defined(__s390x__) || defined(__zarch__)) || \
    460     defined(__vax__)
    461 /*
    462  * The processor natively handles unaligned loads, so just use memcpy()
    463  * and memcmp(), to enable those optimizations.
    464  *
    465  * XXX - are those all the x86 tests we need?
    466  * XXX - do we need to worry about ARMv1 through ARMv5, which didn't
    467  * support unaligned loads, and, if so, do we need to worry about all
    468  * of them, or just some of them, e.g. ARMv5?
    469  * XXX - are those the only 68k tests we need not to generated
    470  * unaligned accesses if the target is the 68000 or 68010?
    471  * XXX - are there any tests we don't need, because some definitions are for
    472  * compilers that also predefine the GCC symbols?
    473  * XXX - do we need to test for both 32-bit and 64-bit versions of those
    474  * architectures in all cases?
    475  */
    476 #define UNALIGNED_MEMCPY(p, q, l)	memcpy((p), (q), (l))
    477 #define UNALIGNED_MEMCMP(p, q, l)	memcmp((p), (q), (l))
    478 #else
    479 /*
    480  * The processor doesn't natively handle unaligned loads,
    481  * and the compiler might "helpfully" optimize memcpy()
    482  * and memcmp(), when handed pointers that would normally
    483  * be properly aligned, into sequences that assume proper
    484  * alignment.
    485  *
    486  * Do copies and compares of possibly-unaligned data by
    487  * calling routines that wrap memcpy() and memcmp(), to
    488  * prevent that optimization.
    489  */
    490 extern void unaligned_memcpy(void *, const void *, size_t);
    491 extern int unaligned_memcmp(const void *, const void *, size_t);
    492 #define UNALIGNED_MEMCPY(p, q, l)	unaligned_memcpy((p), (q), (l))
    493 #define UNALIGNED_MEMCMP(p, q, l)	unaligned_memcmp((p), (q), (l))
    494 #endif
    495 
    496 #define PLURAL_SUFFIX(n) \
    497 	(((n) != 1) ? "s" : "")
    498 
    499 extern const char *tok2strary_internal(const char **, int, const char *, int);
    500 #define	tok2strary(a,f,i) tok2strary_internal(a, sizeof(a)/sizeof(a[0]),f,i)
    501 
    502 struct uint_tokary
    503 {
    504 	u_int uintval;
    505 	const struct tok *tokary;
    506 };
    507 
    508 extern const struct tok *uint2tokary_internal(const struct uint_tokary[], const size_t, const u_int);
    509 #define uint2tokary(a, i) uint2tokary_internal(a, sizeof(a)/sizeof(a[0]), i)
    510 
    511 extern if_printer lookup_printer(int);
    512 
    513 #define ND_DEBUG {printf(" [%s:%d %s] ", __FILE__, __LINE__, __func__); fflush(stdout);}
    514 
    515 /* The DLT printer routines */
    516 
    517 extern void ap1394_if_print IF_PRINTER_ARGS;
    518 extern void arcnet_if_print IF_PRINTER_ARGS;
    519 extern void arcnet_linux_if_print IF_PRINTER_ARGS;
    520 extern void atm_if_print IF_PRINTER_ARGS;
    521 extern void brcm_tag_if_print IF_PRINTER_ARGS;
    522 extern void brcm_tag_prepend_if_print IF_PRINTER_ARGS;
    523 extern void bt_if_print IF_PRINTER_ARGS;
    524 extern void chdlc_if_print IF_PRINTER_ARGS;
    525 extern void cip_if_print IF_PRINTER_ARGS;
    526 extern void dsa_if_print IF_PRINTER_ARGS;
    527 extern void edsa_if_print IF_PRINTER_ARGS;
    528 extern void enc_if_print IF_PRINTER_ARGS;
    529 extern void ether_if_print IF_PRINTER_ARGS;
    530 extern void fddi_if_print IF_PRINTER_ARGS;
    531 extern void fr_if_print IF_PRINTER_ARGS;
    532 extern void ieee802_11_if_print IF_PRINTER_ARGS;
    533 extern void ieee802_11_radio_avs_if_print IF_PRINTER_ARGS;
    534 extern void ieee802_11_radio_if_print IF_PRINTER_ARGS;
    535 extern void ieee802_15_4_if_print IF_PRINTER_ARGS;
    536 extern void ieee802_15_4_tap_if_print IF_PRINTER_ARGS;
    537 extern void ipfc_if_print IF_PRINTER_ARGS;
    538 extern void ipnet_if_print IF_PRINTER_ARGS;
    539 extern void ipoib_if_print IF_PRINTER_ARGS;
    540 extern void juniper_atm1_if_print IF_PRINTER_ARGS;
    541 extern void juniper_atm2_if_print IF_PRINTER_ARGS;
    542 extern void juniper_chdlc_if_print IF_PRINTER_ARGS;
    543 extern void juniper_es_if_print IF_PRINTER_ARGS;
    544 extern void juniper_ether_if_print IF_PRINTER_ARGS;
    545 extern void juniper_frelay_if_print IF_PRINTER_ARGS;
    546 extern void juniper_ggsn_if_print IF_PRINTER_ARGS;
    547 extern void juniper_mfr_if_print IF_PRINTER_ARGS;
    548 extern void juniper_mlfr_if_print IF_PRINTER_ARGS;
    549 extern void juniper_mlppp_if_print IF_PRINTER_ARGS;
    550 extern void juniper_monitor_if_print IF_PRINTER_ARGS;
    551 extern void juniper_ppp_if_print IF_PRINTER_ARGS;
    552 extern void juniper_pppoe_atm_if_print IF_PRINTER_ARGS;
    553 extern void juniper_pppoe_if_print IF_PRINTER_ARGS;
    554 extern void juniper_services_if_print IF_PRINTER_ARGS;
    555 extern void ltalk_if_print IF_PRINTER_ARGS;
    556 extern void mfr_if_print IF_PRINTER_ARGS;
    557 extern void netanalyzer_if_print IF_PRINTER_ARGS;
    558 extern void netanalyzer_transparent_if_print IF_PRINTER_ARGS;
    559 extern void nflog_if_print IF_PRINTER_ARGS;
    560 extern void null_if_print IF_PRINTER_ARGS;
    561 extern void pflog_if_print IF_PRINTER_ARGS;
    562 extern void pktap_if_print IF_PRINTER_ARGS;
    563 extern void ppi_if_print IF_PRINTER_ARGS;
    564 extern void ppp_bsdos_if_print IF_PRINTER_ARGS;
    565 extern void ppp_hdlc_if_print IF_PRINTER_ARGS;
    566 extern void ppp_if_print IF_PRINTER_ARGS;
    567 extern void pppoe_if_print IF_PRINTER_ARGS;
    568 extern void prism_if_print IF_PRINTER_ARGS;
    569 extern void raw_if_print IF_PRINTER_ARGS;
    570 extern void sl_bsdos_if_print IF_PRINTER_ARGS;
    571 extern void sl_if_print IF_PRINTER_ARGS;
    572 extern void sll2_if_print IF_PRINTER_ARGS;
    573 extern void sll_if_print IF_PRINTER_ARGS;
    574 extern void sunatm_if_print IF_PRINTER_ARGS;
    575 extern void symantec_if_print IF_PRINTER_ARGS;
    576 extern void token_if_print IF_PRINTER_ARGS;
    577 extern void unsupported_if_print IF_PRINTER_ARGS;
    578 extern void usb_linux_48_byte_if_print IF_PRINTER_ARGS;
    579 extern void usb_linux_64_byte_if_print IF_PRINTER_ARGS;
    580 extern void vsock_if_print IF_PRINTER_ARGS;
    581 
    582 /*
    583  * Structure passed to some printers to allow them to print
    584  * link-layer address information if ndo_eflag isn't set
    585  * (because they are for protocols that don't have their
    586  * own addresses, so that we'd want to report link-layer
    587  * address information).
    588  *
    589  * This contains a pointer to an address and a pointer to a routine
    590  * to which we pass that pointer in order to get a string.
    591  */
    592 struct lladdr_info {
    593 	const char *(*addr_string)(netdissect_options *, const u_char *);
    594 	const u_char *addr;
    595 };
    596 
    597 /* The printer routines. */
    598 
    599 extern void aarp_print(netdissect_options *, const u_char *, u_int);
    600 extern int ah_print(netdissect_options *, const u_char *);
    601 extern void ahcp_print(netdissect_options *, const u_char *, u_int);
    602 extern void aodv_print(netdissect_options *, const u_char *, u_int, int);
    603 extern void aoe_print(netdissect_options *, const u_char *, const u_int);
    604 extern int  arista_ethertype_print(netdissect_options *,const u_char *, u_int);
    605 extern void arp_print(netdissect_options *, const u_char *, u_int, u_int);
    606 extern void ascii_print(netdissect_options *, const u_char *, u_int);
    607 extern void atalk_print(netdissect_options *, const u_char *, u_int);
    608 extern void atm_print(netdissect_options *, u_int, u_int, u_int, const u_char *, u_int, u_int);
    609 extern void babel_print(netdissect_options *, const u_char *, u_int);
    610 extern void bcm_li_print(netdissect_options *, const u_char *, u_int);
    611 extern void beep_print(netdissect_options *, const u_char *, u_int);
    612 extern void bfd_print(netdissect_options *, const u_char *, u_int, u_int);
    613 extern void bgp_print(netdissect_options *, const u_char *, u_int);
    614 extern const char *bgp_vpn_rd_print(netdissect_options *, const u_char *);
    615 extern void bootp_print(netdissect_options *, const u_char *, u_int);
    616 extern void calm_fast_print(netdissect_options *, const u_char *, u_int, const struct lladdr_info *);
    617 extern void carp_print(netdissect_options *, const u_char *, u_int, u_int);
    618 extern void cdp_print(netdissect_options *, const u_char *, u_int);
    619 extern void cfm_print(netdissect_options *, const u_char *, u_int);
    620 extern u_int chdlc_print(netdissect_options *, const u_char *, u_int);
    621 extern void cisco_autorp_print(netdissect_options *, const u_char *, u_int);
    622 extern void cnfp_print(netdissect_options *, const u_char *);
    623 extern void dccp_print(netdissect_options *, const u_char *, const u_char *, u_int);
    624 extern void decnet_print(netdissect_options *, const u_char *, u_int, u_int);
    625 extern void dhcp6_print(netdissect_options *, const u_char *, u_int);
    626 extern int dstopt_process(netdissect_options *, const u_char *);
    627 extern void dtp_print(netdissect_options *, const u_char *, u_int);
    628 extern void dvmrp_print(netdissect_options *, const u_char *, u_int);
    629 extern void eap_print(netdissect_options *, const u_char *, u_int);
    630 extern void eapol_print(netdissect_options *, const u_char *);
    631 extern void egp_print(netdissect_options *, const u_char *, u_int);
    632 extern void eigrp_print(netdissect_options *, const u_char *, u_int);
    633 extern void esp_print(netdissect_options *, const u_char *, u_int, const u_char *, u_int, int, u_int);
    634 extern u_int ether_print(netdissect_options *, const u_char *, u_int, u_int, void (*)(netdissect_options *, const u_char *), const u_char *);
    635 extern u_int ether_switch_tag_print(netdissect_options *, const u_char *, u_int, u_int, void (*)(netdissect_options *, const u_char *), u_int);
    636 extern int ethertype_print(netdissect_options *, u_short, const u_char *, u_int, u_int, const struct lladdr_info *, const struct lladdr_info *);
    637 extern u_int fddi_print(netdissect_options *, const u_char *, u_int, u_int);
    638 extern void forces_print(netdissect_options *, const u_char *, u_int);
    639 extern u_int fr_print(netdissect_options *, const u_char *, u_int);
    640 extern int frag6_print(netdissect_options *, const u_char *, const u_char *);
    641 extern void ftp_print(netdissect_options *, const u_char *, u_int);
    642 extern void geneve_print(netdissect_options *, const u_char *, u_int);
    643 extern void geonet_print(netdissect_options *, const u_char *, u_int, const struct lladdr_info *);
    644 extern void gre_print(netdissect_options *, const u_char *, u_int);
    645 extern int hbhopt_process(netdissect_options *, const u_char *, int *, uint32_t *);
    646 extern void hex_and_ascii_print(netdissect_options *, const char *, const u_char *, u_int);
    647 extern void hex_print(netdissect_options *, const char *ident, const u_char *cp, u_int);
    648 extern void hex_print_with_offset(netdissect_options *, const char *ident, const u_char *cp, u_int, u_int);
    649 extern void hncp_print(netdissect_options *, const u_char *, u_int);
    650 extern void hsrp_print(netdissect_options *, const u_char *, u_int);
    651 extern void http_print(netdissect_options *, const u_char *, u_int);
    652 extern void icmp6_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
    653 extern void icmp_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
    654 extern u_int ieee802_15_4_print(netdissect_options *, const u_char *, u_int);
    655 extern u_int ieee802_11_radio_print(netdissect_options *, const u_char *, u_int, u_int);
    656 extern void igmp_print(netdissect_options *, const u_char *, u_int);
    657 extern void igrp_print(netdissect_options *, const u_char *, u_int);
    658 extern void ip6_print(netdissect_options *, const u_char *, u_int);
    659 extern void ipN_print(netdissect_options *, const u_char *, u_int);
    660 extern void ip_print(netdissect_options *, const u_char *, const u_int);
    661 extern void ipcomp_print(netdissect_options *, const u_char *);
    662 extern void ipx_netbios_print(netdissect_options *, const u_char *, u_int);
    663 extern void ipx_print(netdissect_options *, const u_char *, u_int);
    664 extern void isakmp_print(netdissect_options *, const u_char *, u_int, const u_char *);
    665 extern void isakmp_rfc3948_print(netdissect_options *, const u_char *, u_int, const u_char *, int, int, u_int);
    666 extern void isoclns_print(netdissect_options *, const u_char *, u_int);
    667 extern void krb_print(netdissect_options *, const u_char *);
    668 extern void l2tp_print(netdissect_options *, const u_char *, u_int);
    669 extern void lane_print(netdissect_options *, const u_char *, u_int, u_int);
    670 extern void ldp_print(netdissect_options *, const u_char *, u_int);
    671 extern void lisp_print(netdissect_options *, const u_char *, u_int);
    672 extern u_int llap_print(netdissect_options *, const u_char *, u_int);
    673 extern int llc_print(netdissect_options *, const u_char *, u_int, u_int, const struct lladdr_info *, const struct lladdr_info *);
    674 extern void lldp_print(netdissect_options *, const u_char *, u_int);
    675 extern void lmp_print(netdissect_options *, const u_char *, u_int);
    676 extern void loopback_print(netdissect_options *, const u_char *, u_int);
    677 extern void lspping_print(netdissect_options *, const u_char *, u_int);
    678 extern void lwapp_control_print(netdissect_options *, const u_char *, u_int, int);
    679 extern void lwapp_data_print(netdissect_options *, const u_char *, u_int);
    680 extern void lwres_print(netdissect_options *, const u_char *, u_int);
    681 extern void m3ua_print(netdissect_options *, const u_char *, const u_int);
    682 extern int macsec_print(netdissect_options *, const u_char **,
    683 			 u_int *, u_int *, u_int *, const struct lladdr_info *,
    684 			 const struct lladdr_info *);
    685 extern u_int mfr_print(netdissect_options *, const u_char *, u_int);
    686 extern void mobile_print(netdissect_options *, const u_char *, u_int);
    687 extern int mobility_print(netdissect_options *, const u_char *, const u_char *);
    688 extern void mpcp_print(netdissect_options *, const u_char *, u_int);
    689 extern void mpls_print(netdissect_options *, const u_char *, u_int);
    690 extern int mptcp_print(netdissect_options *, const u_char *, u_int, u_char);
    691 extern void msdp_print(netdissect_options *, const u_char *, u_int);
    692 extern void msnlb_print(netdissect_options *, const u_char *);
    693 extern void nbt_tcp_print(netdissect_options *, const u_char *, u_int);
    694 extern void nbt_udp137_print(netdissect_options *, const u_char *, u_int);
    695 extern void nbt_udp138_print(netdissect_options *, const u_char *, u_int);
    696 extern void netbeui_print(netdissect_options *, u_short, const u_char *, u_int);
    697 extern void nfsreply_print(netdissect_options *, const u_char *, u_int, const u_char *);
    698 extern void nfsreply_noaddr_print(netdissect_options *, const u_char *, u_int, const u_char *);
    699 extern void nfsreq_noaddr_print(netdissect_options *, const u_char *, u_int, const u_char *);
    700 extern const u_char *fqdn_print(netdissect_options *, const u_char *, const u_char *);
    701 extern void domain_print(netdissect_options *, const u_char *, u_int, int, int);
    702 extern void nsh_print(netdissect_options *, const u_char *, u_int);
    703 extern void ntp_print(netdissect_options *, const u_char *, u_int);
    704 extern void oam_print(netdissect_options *, const u_char *, u_int, u_int);
    705 extern void olsr_print(netdissect_options *, const u_char *, u_int, int);
    706 extern void openflow_print(netdissect_options *, const u_char *, u_int);
    707 extern void ospf6_print(netdissect_options *, const u_char *, u_int);
    708 extern void ospf_print(netdissect_options *, const u_char *, u_int, const u_char *);
    709 extern int ospf_grace_lsa_print(netdissect_options *, const u_char *, u_int);
    710 extern int ospf_te_lsa_print(netdissect_options *, const u_char *, u_int);
    711 extern void otv_print(netdissect_options *, const u_char *, u_int);
    712 extern void pgm_print(netdissect_options *, const u_char *, u_int, const u_char *);
    713 extern void pim_print(netdissect_options *, const u_char *, u_int, const u_char *);
    714 extern void pimv1_print(netdissect_options *, const u_char *, u_int);
    715 extern u_int ppp_print(netdissect_options *, const u_char *, u_int);
    716 extern u_int pppoe_print(netdissect_options *, const u_char *, u_int);
    717 extern void pptp_print(netdissect_options *, const u_char *);
    718 extern void ptp_print(netdissect_options *, const u_char *, u_int);
    719 extern int print_unknown_data(netdissect_options *, const u_char *, const char *, u_int);
    720 extern const char *q922_string(netdissect_options *, const u_char *, u_int);
    721 extern void q933_print(netdissect_options *, const u_char *, u_int);
    722 extern void radius_print(netdissect_options *, const u_char *, u_int);
    723 extern void resp_print(netdissect_options *, const u_char *, u_int);
    724 extern void rip_print(netdissect_options *, const u_char *, u_int);
    725 extern void ripng_print(netdissect_options *, const u_char *, unsigned int);
    726 extern void rpki_rtr_print(netdissect_options *, const u_char *, u_int);
    727 extern void rsvp_print(netdissect_options *, const u_char *, u_int);
    728 extern int rt6_print(netdissect_options *, const u_char *, const u_char *);
    729 extern void rtl_print(netdissect_options *, const u_char *, u_int, const struct lladdr_info *, const struct lladdr_info *);
    730 extern void rtsp_print(netdissect_options *, const u_char *, u_int);
    731 extern void rx_print(netdissect_options *, const u_char *, u_int, uint16_t, uint16_t, const u_char *);
    732 extern void sctp_print(netdissect_options *, const u_char *, const u_char *, u_int);
    733 extern void sflow_print(netdissect_options *, const u_char *, u_int);
    734 extern void ssh_print(netdissect_options *, const u_char *, u_int);
    735 extern void sip_print(netdissect_options *, const u_char *, u_int);
    736 extern void slow_print(netdissect_options *, const u_char *, u_int);
    737 extern void smb_tcp_print(netdissect_options *, const u_char *, u_int);
    738 extern void smtp_print(netdissect_options *, const u_char *, u_int);
    739 extern int snap_print(netdissect_options *, const u_char *, u_int, u_int, const struct lladdr_info *, const struct lladdr_info *, u_int);
    740 extern void snmp_print(netdissect_options *, const u_char *, u_int);
    741 extern void stp_print(netdissect_options *, const u_char *, u_int);
    742 extern void sunrpc_print(netdissect_options *, const u_char *, u_int, const u_char *);
    743 extern void syslog_print(netdissect_options *, const u_char *, u_int);
    744 extern void tcp_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
    745 extern void telnet_print(netdissect_options *, const u_char *, u_int);
    746 extern void tftp_print(netdissect_options *, const u_char *, u_int);
    747 extern void timed_print(netdissect_options *, const u_char *);
    748 extern void tipc_print(netdissect_options *, const u_char *, u_int, u_int);
    749 extern u_int token_print(netdissect_options *, const u_char *, u_int, u_int);
    750 extern void udld_print(netdissect_options *, const u_char *, u_int);
    751 extern void udp_print(netdissect_options *, const u_char *, u_int, const u_char *, int, u_int);
    752 extern int vjc_print(netdissect_options *, const u_char *, u_short);
    753 extern void vqp_print(netdissect_options *, const u_char *, u_int);
    754 extern void vrrp_print(netdissect_options *, const u_char *, u_int, const u_char *, int, int);
    755 extern void vtp_print(netdissect_options *, const u_char *, const u_int);
    756 extern void vxlan_gpe_print(netdissect_options *, const u_char *, u_int);
    757 extern void vxlan_print(netdissect_options *, const u_char *, u_int);
    758 extern void wb_print(netdissect_options *, const u_char *, u_int);
    759 extern void whois_print(netdissect_options *, const u_char *, u_int);
    760 extern void zep_print(netdissect_options *, const u_char *, u_int);
    761 extern void zephyr_print(netdissect_options *, const u_char *, u_int);
    762 extern void zmtp1_print(netdissect_options *, const u_char *, u_int);
    763 extern void zmtp1_datagram_print(netdissect_options *, const u_char *, const u_int);
    764 extern void someip_print(netdissect_options *, const u_char *, const u_int);
    765 
    766 /* checksum routines */
    767 extern uint16_t verify_crc10_cksum(uint16_t, const u_char *, int);
    768 extern uint16_t create_osi_cksum(const uint8_t *, int, int);
    769 
    770 struct cksum_vec {
    771 	const uint8_t	*ptr;
    772 	int		len;
    773 };
    774 extern uint16_t in_cksum(const struct cksum_vec *, int);
    775 extern uint16_t in_cksum_shouldbe(uint16_t, uint16_t);
    776 
    777 /* IP protocol demuxing routines */
    778 extern void ip_demux_print(netdissect_options *, const u_char *, u_int, u_int, int, u_int, uint8_t, const u_char *);
    779 
    780 extern uint16_t nextproto4_cksum(netdissect_options *, const struct ip *, const uint8_t *, u_int, u_int, uint8_t);
    781 
    782 /* in print-ip6.c */
    783 extern uint16_t nextproto6_cksum(netdissect_options *, const struct ip6_hdr *, const uint8_t *, u_int, u_int, uint8_t);
    784 
    785 /* Utilities */
    786 extern void nd_print_trunc(netdissect_options *);
    787 extern void nd_print_protocol(netdissect_options *);
    788 extern void nd_print_protocol_caps(netdissect_options *);
    789 extern void nd_print_invalid(netdissect_options *);
    790 
    791 extern int mask2plen(uint32_t);
    792 extern int mask62plen(const u_char *);
    793 
    794 extern const char *dnnum_string(netdissect_options *, u_short);
    795 
    796 extern int decode_prefix4(netdissect_options *, const u_char *, u_int, char *, size_t);
    797 extern int decode_prefix6(netdissect_options *, const u_char *, u_int, char *, size_t);
    798 
    799 extern void esp_decodesecret_print(netdissect_options *);
    800 extern int esp_decrypt_buffer_by_ikev2_print(netdissect_options *, int,
    801 					     const u_char spii[8],
    802 					     const u_char spir[8],
    803 					     const u_char *, const u_char *);
    804 
    805 extern void pfsync_if_print IF_PRINTER_ARGS;
    806 extern void pfsync_ip_print(netdissect_options *, const u_char *, u_int, const u_char * __unused);
    807 
    808 #endif  /* netdissect_h */
    809