1/*
2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 2000
3 *	The Regents of the University of California.  All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 */
21#ifndef lint
22static const char rcsid[] _U_ =
23    "@(#) $Header: /tcpdump/master/tcpdump/print-ether.c,v 1.95.2.6 2006/02/20 18:15:03 hannes Exp $ (LBL)";
24#endif
25
26#ifdef HAVE_CONFIG_H
27#include "config.h"
28#endif
29
30#include <tcpdump-stdinc.h>
31
32#include <stdio.h>
33#include <pcap.h>
34
35#include "interface.h"
36#include "addrtoname.h"
37#include "ethertype.h"
38
39#include "ether.h"
40
41const struct tok ethertype_values[] = {
42    { ETHERTYPE_IP,		"IPv4" },
43    { ETHERTYPE_MPLS,		"MPLS unicast" },
44    { ETHERTYPE_MPLS_MULTI,	"MPLS multicast" },
45    { ETHERTYPE_IPV6,		"IPv6" },
46    { ETHERTYPE_8021Q,		"802.1Q" },
47    { ETHERTYPE_VMAN,		"VMAN" },
48    { ETHERTYPE_PUP,            "PUP" },
49    { ETHERTYPE_ARP,            "ARP"},
50    { ETHERTYPE_REVARP,         "Reverse ARP"},
51    { ETHERTYPE_NS,             "NS" },
52    { ETHERTYPE_SPRITE,         "Sprite" },
53    { ETHERTYPE_TRAIL,          "Trail" },
54    { ETHERTYPE_MOPDL,          "MOP DL" },
55    { ETHERTYPE_MOPRC,          "MOP RC" },
56    { ETHERTYPE_DN,             "DN" },
57    { ETHERTYPE_LAT,            "LAT" },
58    { ETHERTYPE_SCA,            "SCA" },
59    { ETHERTYPE_LANBRIDGE,      "Lanbridge" },
60    { ETHERTYPE_DECDNS,         "DEC DNS" },
61    { ETHERTYPE_DECDTS,         "DEC DTS" },
62    { ETHERTYPE_VEXP,           "VEXP" },
63    { ETHERTYPE_VPROD,          "VPROD" },
64    { ETHERTYPE_ATALK,          "Appletalk" },
65    { ETHERTYPE_AARP,           "Appletalk ARP" },
66    { ETHERTYPE_IPX,            "IPX" },
67    { ETHERTYPE_PPP,            "PPP" },
68    { ETHERTYPE_SLOW,           "Slow Protocols" },
69    { ETHERTYPE_PPPOED,         "PPPoE D" },
70    { ETHERTYPE_PPPOES,         "PPPoE S" },
71    { ETHERTYPE_EAPOL,          "EAPOL" },
72    { ETHERTYPE_JUMBO,          "Jumbo" },
73    { ETHERTYPE_LOOPBACK,       "Loopback" },
74    { ETHERTYPE_ISO,            "OSI" },
75    { ETHERTYPE_GRE_ISO,        "GRE-OSI" },
76    { 0, NULL}
77};
78
79static inline void
80ether_hdr_print(register const u_char *bp, u_int length)
81{
82	register const struct ether_header *ep;
83	ep = (const struct ether_header *)bp;
84
85	(void)printf("%s > %s",
86		     etheraddr_string(ESRC(ep)),
87		     etheraddr_string(EDST(ep)));
88
89	if (!qflag) {
90	        if (ntohs(ep->ether_type) <= ETHERMTU)
91		          (void)printf(", 802.3");
92                else
93		          (void)printf(", ethertype %s (0x%04x)",
94				       tok2str(ethertype_values,"Unknown", ntohs(ep->ether_type)),
95                                       ntohs(ep->ether_type));
96        } else {
97                if (ntohs(ep->ether_type) <= ETHERMTU)
98                          (void)printf(", 802.3");
99                else
100                          (void)printf(", %s", tok2str(ethertype_values,"Unknown Ethertype (0x%04x)", ntohs(ep->ether_type)));
101        }
102
103	(void)printf(", length %u: ", length);
104}
105
106void
107ether_print(const u_char *p, u_int length, u_int caplen)
108{
109	struct ether_header *ep;
110	u_short ether_type;
111	u_short extracted_ether_type;
112
113	if (caplen < ETHER_HDRLEN) {
114		printf("[|ether]");
115		return;
116	}
117
118	if (eflag)
119		ether_hdr_print(p, length);
120
121	length -= ETHER_HDRLEN;
122	caplen -= ETHER_HDRLEN;
123	ep = (struct ether_header *)p;
124	p += ETHER_HDRLEN;
125
126	ether_type = ntohs(ep->ether_type);
127
128	/*
129	 * Is it (gag) an 802.3 encapsulation?
130	 */
131	if (ether_type <= ETHERMTU) {
132		/* Try to print the LLC-layer header & higher layers */
133		if (llc_print(p, length, caplen, ESRC(ep), EDST(ep),
134		    &extracted_ether_type) == 0) {
135			/* ether_type not known, print raw packet */
136			if (!eflag)
137				ether_hdr_print((u_char *)ep, length + ETHER_HDRLEN);
138
139			if (!suppress_default_print)
140				default_print(p, caplen);
141		}
142	} else if (ether_encap_print(ether_type, p, length, caplen,
143	    &extracted_ether_type) == 0) {
144		/* ether_type not known, print raw packet */
145		if (!eflag)
146			ether_hdr_print((u_char *)ep, length + ETHER_HDRLEN);
147
148		if (!suppress_default_print)
149			default_print(p, caplen);
150	}
151}
152
153/*
154 * This is the top level routine of the printer.  'p' points
155 * to the ether header of the packet, 'h->ts' is the timestamp,
156 * 'h->len' is the length of the packet off the wire, and 'h->caplen'
157 * is the number of bytes actually captured.
158 */
159u_int
160ether_if_print(const struct pcap_pkthdr *h, const u_char *p)
161{
162	ether_print(p, h->len, h->caplen);
163
164	return (ETHER_HDRLEN);
165}
166
167/*
168 * Prints the packet encapsulated in an Ethernet data segment
169 * (or an equivalent encapsulation), given the Ethernet type code.
170 *
171 * Returns non-zero if it can do so, zero if the ethertype is unknown.
172 *
173 * The Ethernet type code is passed through a pointer; if it was
174 * ETHERTYPE_8021Q, it gets updated to be the Ethernet type of
175 * the 802.1Q payload, for the benefit of lower layers that might
176 * want to know what it is.
177 */
178
179int
180ether_encap_print(u_short ether_type, const u_char *p,
181    u_int length, u_int caplen, u_short *extracted_ether_type)
182{
183 recurse:
184	*extracted_ether_type = ether_type;
185
186	switch (ether_type) {
187
188	case ETHERTYPE_IP:
189	        ip_print(gndo, p, length);
190		return (1);
191
192#ifdef INET6
193	case ETHERTYPE_IPV6:
194		ip6_print(p, length);
195		return (1);
196#endif /*INET6*/
197
198	case ETHERTYPE_ARP:
199	case ETHERTYPE_REVARP:
200  	        arp_print(gndo, p, length, caplen);
201		return (1);
202
203	case ETHERTYPE_DN:
204		decnet_print(p, length, caplen);
205		return (1);
206
207	case ETHERTYPE_ATALK:
208		if (vflag)
209			fputs("et1 ", stdout);
210		atalk_print(p, length);
211		return (1);
212
213	case ETHERTYPE_AARP:
214		aarp_print(p, length);
215		return (1);
216
217	case ETHERTYPE_IPX:
218		printf("(NOV-ETHII) ");
219		ipx_print(p, length);
220		return (1);
221
222	case ETHERTYPE_8021Q:
223	        if (eflag)
224		    printf("vlan %u, p %u%s, ",
225			   ntohs(*(u_int16_t *)p) & 0xfff,
226			   ntohs(*(u_int16_t *)p) >> 13,
227			   (ntohs(*(u_int16_t *)p) & 0x1000) ? ", CFI" : "");
228
229		ether_type = ntohs(*(u_int16_t *)(p + 2));
230		p += 4;
231		length -= 4;
232		caplen -= 4;
233
234		if (ether_type > ETHERMTU) {
235		        if (eflag)
236			        printf("ethertype %s, ",
237				       tok2str(ethertype_values,"0x%04x", ether_type));
238			goto recurse;
239		}
240
241		*extracted_ether_type = 0;
242
243		if (llc_print(p, length, caplen, p - 18, p - 12,
244		    extracted_ether_type) == 0) {
245                        ether_hdr_print(p - 18, length + 4);
246
247                        if (!suppress_default_print) {
248                                default_print(p - 18, caplen + 4);
249                        }
250		}
251
252
253		return (1);
254
255        case ETHERTYPE_JUMBO:
256                ether_type = ntohs(*(u_int16_t *)(p));
257                p += 2;
258                length -= 2;
259                caplen -= 2;
260
261                if (ether_type > ETHERMTU) {
262                    if (eflag)
263                        printf("ethertype %s, ",
264                               tok2str(ethertype_values,"0x%04x", ether_type));
265                    goto recurse;
266                }
267
268                *extracted_ether_type = 0;
269
270                if (llc_print(p, length, caplen, p - 16, p - 10,
271                              extracted_ether_type) == 0) {
272                    ether_hdr_print(p - 16, length + 2);
273
274                    if (!suppress_default_print) {
275                            default_print(p - 16, caplen + 2);
276                    }
277                }
278
279                return (1);
280
281        case ETHERTYPE_ISO:
282                isoclns_print(p+1, length-1, length-1);
283                return(1);
284
285	case ETHERTYPE_PPPOED:
286	case ETHERTYPE_PPPOES:
287		pppoe_print(p, length);
288		return (1);
289
290	case ETHERTYPE_EAPOL:
291	        eap_print(gndo, p, length);
292		return (1);
293
294	case ETHERTYPE_PPP:
295		if (length) {
296			printf(": ");
297			ppp_print(p, length);
298		}
299		return (1);
300
301	case ETHERTYPE_SLOW:
302	        slow_print(p, length);
303		return (1);
304
305        case ETHERTYPE_LOOPBACK:
306                return (1);
307
308	case ETHERTYPE_MPLS:
309	case ETHERTYPE_MPLS_MULTI:
310		mpls_print(p, length);
311		return (1);
312
313	case ETHERTYPE_LAT:
314	case ETHERTYPE_SCA:
315	case ETHERTYPE_MOPRC:
316	case ETHERTYPE_MOPDL:
317		/* default_print for now */
318	default:
319		return (0);
320	}
321}
322
323
324/*
325 * Local Variables:
326 * c-style: whitesmith
327 * c-basic-offset: 8
328 * End:
329 */
330
331