1/*
2 * Copyright (c) 1994, 1995, 1996
3 *	The Regents of the University of California.  All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
16 * written permission.
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
20 *
21 * Format and print Novell IPX packets.
22 * Contributed by Brad Parker (brad@fcr.com).
23 */
24
25#define NETDISSECT_REWORKED
26#ifdef HAVE_CONFIG_H
27#include "config.h"
28#endif
29
30#include <tcpdump-stdinc.h>
31
32#include <stdio.h>
33
34#include "interface.h"
35#include "addrtoname.h"
36#include "extract.h"
37
38/* well-known sockets */
39#define	IPX_SKT_NCP		0x0451
40#define	IPX_SKT_SAP		0x0452
41#define	IPX_SKT_RIP		0x0453
42#define	IPX_SKT_NETBIOS		0x0455
43#define	IPX_SKT_DIAGNOSTICS	0x0456
44#define	IPX_SKT_NWLINK_DGM	0x0553	/* NWLink datagram, may contain SMB */
45#define	IPX_SKT_EIGRP		0x85be	/* Cisco EIGRP over IPX */
46
47/* IPX transport header */
48struct ipxHdr {
49    uint16_t	cksum;		/* Checksum */
50    uint16_t	length;		/* Length, in bytes, including header */
51    uint8_t	tCtl;		/* Transport Control (i.e. hop count) */
52    uint8_t	pType;		/* Packet Type (i.e. level 2 protocol) */
53    uint16_t	dstNet[2];	/* destination net */
54    uint8_t	dstNode[6];	/* destination node */
55    uint16_t	dstSkt;		/* destination socket */
56    uint16_t	srcNet[2];	/* source net */
57    uint8_t	srcNode[6];	/* source node */
58    uint16_t	srcSkt;		/* source socket */
59};
60
61#define ipxSize	30
62
63static const char *ipxaddr_string(uint32_t, const u_char *);
64static void ipx_decode(netdissect_options *, const struct ipxHdr *, const u_char *, u_int);
65static void ipx_sap_print(netdissect_options *, const u_short *, u_int);
66static void ipx_rip_print(netdissect_options *, const u_short *, u_int);
67
68/*
69 * Print IPX datagram packets.
70 */
71void
72ipx_print(netdissect_options *ndo, const u_char *p, u_int length)
73{
74	const struct ipxHdr *ipx = (const struct ipxHdr *)p;
75
76	if (!ndo->ndo_eflag)
77		ND_PRINT((ndo, "IPX "));
78
79	ND_TCHECK(ipx->srcSkt);
80	ND_PRINT((ndo, "%s.%04x > ",
81		     ipxaddr_string(EXTRACT_32BITS(ipx->srcNet), ipx->srcNode),
82		     EXTRACT_16BITS(&ipx->srcSkt)));
83
84	ND_PRINT((ndo, "%s.%04x: ",
85		     ipxaddr_string(EXTRACT_32BITS(ipx->dstNet), ipx->dstNode),
86		     EXTRACT_16BITS(&ipx->dstSkt)));
87
88	/* take length from ipx header */
89	ND_TCHECK(ipx->length);
90	length = EXTRACT_16BITS(&ipx->length);
91
92	ipx_decode(ndo, ipx, (u_char *)ipx + ipxSize, length - ipxSize);
93	return;
94trunc:
95	ND_PRINT((ndo, "[|ipx %d]", length));
96}
97
98static const char *
99ipxaddr_string(uint32_t net, const u_char *node)
100{
101    static char line[256];
102
103    snprintf(line, sizeof(line), "%08x.%02x:%02x:%02x:%02x:%02x:%02x",
104	    net, node[0], node[1], node[2], node[3], node[4], node[5]);
105
106    return line;
107}
108
109static void
110ipx_decode(netdissect_options *ndo, const struct ipxHdr *ipx, const u_char *datap, u_int length)
111{
112    register u_short dstSkt;
113
114    dstSkt = EXTRACT_16BITS(&ipx->dstSkt);
115    switch (dstSkt) {
116      case IPX_SKT_NCP:
117	ND_PRINT((ndo, "ipx-ncp %d", length));
118	break;
119      case IPX_SKT_SAP:
120	ipx_sap_print(ndo, (u_short *)datap, length);
121	break;
122      case IPX_SKT_RIP:
123	ipx_rip_print(ndo, (u_short *)datap, length);
124	break;
125      case IPX_SKT_NETBIOS:
126	ND_PRINT((ndo, "ipx-netbios %d", length));
127#ifdef TCPDUMP_DO_SMB
128	ipx_netbios_print(ndo, datap, length);
129#endif
130	break;
131      case IPX_SKT_DIAGNOSTICS:
132	ND_PRINT((ndo, "ipx-diags %d", length));
133	break;
134      case IPX_SKT_NWLINK_DGM:
135	ND_PRINT((ndo, "ipx-nwlink-dgm %d", length));
136#ifdef TCPDUMP_DO_SMB
137	ipx_netbios_print(ndo, datap, length);
138#endif
139	break;
140      case IPX_SKT_EIGRP:
141	eigrp_print(ndo, datap, length);
142	break;
143      default:
144	ND_PRINT((ndo, "ipx-#%x %d", dstSkt, length));
145	break;
146    }
147}
148
149static void
150ipx_sap_print(netdissect_options *ndo, const u_short *ipx, u_int length)
151{
152    int command, i;
153
154    ND_TCHECK(ipx[0]);
155    command = EXTRACT_16BITS(ipx);
156    ipx++;
157    length -= 2;
158
159    switch (command) {
160      case 1:
161      case 3:
162	if (command == 1)
163	    ND_PRINT((ndo, "ipx-sap-req"));
164	else
165	    ND_PRINT((ndo, "ipx-sap-nearest-req"));
166
167	ND_TCHECK(ipx[0]);
168	ND_PRINT((ndo, " %s", ipxsap_string(htons(EXTRACT_16BITS(&ipx[0])))));
169	break;
170
171      case 2:
172      case 4:
173	if (command == 2)
174	    ND_PRINT((ndo, "ipx-sap-resp"));
175	else
176	    ND_PRINT((ndo, "ipx-sap-nearest-resp"));
177
178	for (i = 0; i < 8 && length > 0; i++) {
179	    ND_TCHECK(ipx[0]);
180	    ND_PRINT((ndo, " %s '", ipxsap_string(htons(EXTRACT_16BITS(&ipx[0])))));
181	    if (fn_printzp(ndo, (u_char *)&ipx[1], 48, ndo->ndo_snapend)) {
182		ND_PRINT((ndo, "'"));
183		goto trunc;
184	    }
185	    ND_TCHECK2(ipx[25], 10);
186	    ND_PRINT((ndo, "' addr %s",
187		ipxaddr_string(EXTRACT_32BITS(&ipx[25]), (u_char *)&ipx[27])));
188	    ipx += 32;
189	    length -= 64;
190	}
191	break;
192      default:
193	ND_PRINT((ndo, "ipx-sap-?%x", command));
194	break;
195    }
196    return;
197trunc:
198    ND_PRINT((ndo, "[|ipx %d]", length));
199}
200
201static void
202ipx_rip_print(netdissect_options *ndo, const u_short *ipx, u_int length)
203{
204    int command, i;
205
206    ND_TCHECK(ipx[0]);
207    command = EXTRACT_16BITS(ipx);
208    ipx++;
209    length -= 2;
210
211    switch (command) {
212      case 1:
213	ND_PRINT((ndo, "ipx-rip-req"));
214	if (length > 0) {
215	    ND_TCHECK(ipx[3]);
216	    ND_PRINT((ndo, " %08x/%d.%d", EXTRACT_32BITS(&ipx[0]),
217			 EXTRACT_16BITS(&ipx[2]), EXTRACT_16BITS(&ipx[3])));
218	}
219	break;
220      case 2:
221	ND_PRINT((ndo, "ipx-rip-resp"));
222	for (i = 0; i < 50 && length > 0; i++) {
223	    ND_TCHECK(ipx[3]);
224	    ND_PRINT((ndo, " %08x/%d.%d", EXTRACT_32BITS(&ipx[0]),
225			 EXTRACT_16BITS(&ipx[2]), EXTRACT_16BITS(&ipx[3])));
226
227	    ipx += 4;
228	    length -= 8;
229	}
230	break;
231      default:
232	ND_PRINT((ndo, "ipx-rip-?%x", command));
233	break;
234    }
235    return;
236trunc:
237    ND_PRINT((ndo, "[|ipx %d]", length));
238}
239