tcpdump/print-zephyr.c

347 lines
8.0 KiB
C
Raw Permalink Normal View History

/*
* Decode and print Zephyr packets.
*
2019-08-05 21:11:50 +08:00
* https://web.mit.edu/zephyr/doc/protocol
*
* Copyright (c) 2001 Nickolai Zeldovich <kolya@MIT.EDU>
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that: (1) source code
* distributions retain the above copyright notice and this paragraph
* in its entirety, and (2) distributions including binary code include
* the above copyright notice and this paragraph in its entirety in
* the documentation or other materials provided with the distribution.
* The name of the author(s) may not be used to endorse or promote
* products derived from this software without specific prior written
* permission. THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY
* EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
* PURPOSE.
*/
/* \summary: Zephyr printer */
#include <config.h>
#include "netdissect-stdinc.h"
#include <stdio.h>
#include <string.h>
#include <stdlib.h>
#include "netdissect-ctype.h"
#include "netdissect.h"
#include "extract.h"
struct z_packet {
2015-04-27 08:24:42 +08:00
const char *version;
int numfields;
int kind;
2015-04-27 08:24:42 +08:00
const char *uid;
int port;
int auth;
int authlen;
2015-04-27 08:24:42 +08:00
const char *authdata;
const char *class;
const char *inst;
const char *opcode;
const char *sender;
Add a few more GCC warnings on GCC >= 2 for ".devel" builds. From Neil T. Spring: fixes for many of those warnings: addrtoname.c, configure.in: Linux needs netinet/ether.h for ether_ntohost print-*.c: change char *foo = "bar" to const char *foo = "bar" to appease -Wwrite-strings; should affect no run-time behavior. print-*.c: make some variables unsigned. print-bgp.c: plen ('prefix len') is unsigned, no reason to validate by comparing to zero. print-cnfp.c, print-rx.c: use intoa, provided by addrtoname, instead of inet_ntoa. print-domain.c: unsigned int l; (l=foo()) < 0 is guaranteed to be false, so check for (u_int)-1, which represents failure, explicitly. print-isakmp.c: complete initialization of attrmap objects. print-lwres.c: "if(x); print foo;" seemed much more likely to be intended to be "if(x) { print foo; }". print-smb.c: complete initialization of some structures. In addition, add some fixes for the signed vs. unsigned comparison warnings: extract.h: cast the result of the byte-extraction-and-combining, as, at least for the 16-bit version, C's integral promotions will turn "u_int16_t" into "int" if there are other "int"s nearby. print-*.c: make some more variables unsigned, or add casts to an unsigned type of signed values known not to be negative, or add casts to "int" of unsigned values known to fit in an "int", and make other changes needed to handle the aforementioned variables now being unsigned. print-isakmp.c: clean up the handling of error/status indicators in notify messages. print-ppp.c: get rid of a check that an unsigned quantity is >= 0. print-radius.c: clean up some of the bounds checking. print-smb.c: extract the word count into a "u_int" to avoid the aforementioned problems with C's integral promotions. print-snmp.c: change a check that an unsigned variable is >= 0 to a check that it's != 0. Also, fix some formats to use "%u" rather than "%d" for unsigned quantities.
2002-09-05 08:00:07 +08:00
const char *recipient;
2015-04-27 08:24:42 +08:00
const char *format;
int cksum;
int multi;
2015-04-27 08:24:42 +08:00
const char *multi_uid;
/* Other fields follow here.. */
};
enum z_packet_type {
Z_PACKET_UNSAFE = 0,
Z_PACKET_UNACKED,
Z_PACKET_ACKED,
Z_PACKET_HMACK,
Z_PACKET_HMCTL,
Z_PACKET_SERVACK,
Z_PACKET_SERVNAK,
Z_PACKET_CLIENTACK,
Z_PACKET_STAT
};
static const struct tok z_types[] = {
{ Z_PACKET_UNSAFE, "unsafe" },
{ Z_PACKET_UNACKED, "unacked" },
{ Z_PACKET_ACKED, "acked" },
{ Z_PACKET_HMACK, "hm-ack" },
{ Z_PACKET_HMCTL, "hm-ctl" },
{ Z_PACKET_SERVACK, "serv-ack" },
{ Z_PACKET_SERVNAK, "serv-nak" },
{ Z_PACKET_CLIENTACK, "client-ack" },
{ Z_PACKET_STAT, "stat" },
{ 0, NULL }
};
static char z_buf[256];
2015-04-27 08:24:42 +08:00
static const char *
parse_field(netdissect_options *ndo, const char **pptr, int *len)
{
2015-04-27 08:24:42 +08:00
const char *s;
/* Start of string */
s = *pptr;
/* Scan for the NUL terminator */
for (;;) {
if (*len == 0) {
/* Ran out of packet data without finding it */
return NULL;
}
if (GET_U_1(*pptr) == '\0') {
/* Found it */
break;
}
/* Keep scanning */
(*pptr)++;
(*len)--;
}
/* Skip the NUL terminator */
(*pptr)++;
(*len)--;
return s;
}
static const char *
2015-04-27 08:24:42 +08:00
z_triple(const char *class, const char *inst, const char *recipient)
{
if (!*recipient)
recipient = "*";
snprintf(z_buf, sizeof(z_buf), "<%s,%s,%s>", class, inst, recipient);
z_buf[sizeof(z_buf)-1] = '\0';
return z_buf;
}
static const char *
2015-04-27 08:24:42 +08:00
str_to_lower(const char *string)
{
2015-04-27 08:24:42 +08:00
char *zb_string;
strncpy(z_buf, string, sizeof(z_buf));
z_buf[sizeof(z_buf)-1] = '\0';
2015-04-27 08:24:42 +08:00
zb_string = z_buf;
while (*zb_string) {
*zb_string = ND_ASCII_TOLOWER(*zb_string);
2015-04-27 08:24:42 +08:00
zb_string++;
}
return z_buf;
}
#define ZEPHYR_PRINT(str1,str2) \
{ ND_PRINT("%s", (str1)); fn_print_str(ndo, (const u_char *)(str2)); }
void
zephyr_print(netdissect_options *ndo, const u_char *cp, u_int length)
{
struct z_packet z = {
NULL, /* version */
0, /* numfields */
0, /* kind */
NULL, /* uid */
0, /* port */
0, /* auth */
0, /* authlen */
NULL, /* authdata */
NULL, /* class */
NULL, /* inst */
NULL, /* opcode */
NULL, /* sender */
NULL, /* recipient */
NULL, /* format */
0, /* cksum */
0, /* multi */
NULL /* multi_uid */
};
2015-04-27 08:24:42 +08:00
const char *parse = (const char *) cp;
int parselen = length;
2015-04-27 08:24:42 +08:00
const char *s;
int lose = 0;
ndo->ndo_protocol = "zephyr";
2007-08-10 02:47:27 +08:00
/* squelch compiler warnings */
#define PARSE_STRING \
s = parse_field(ndo, &parse, &parselen); \
if (!s) lose = 1;
#define PARSE_FIELD_INT(field) \
PARSE_STRING \
if (!lose) field = strtol(s, 0, 16);
#define PARSE_FIELD_STR(field) \
PARSE_STRING \
if (!lose) field = s;
PARSE_FIELD_STR(z.version);
if (lose)
goto invalid;
if (strncmp(z.version, "ZEPH", 4))
return;
PARSE_FIELD_INT(z.numfields);
PARSE_FIELD_INT(z.kind);
PARSE_FIELD_STR(z.uid);
PARSE_FIELD_INT(z.port);
PARSE_FIELD_INT(z.auth);
PARSE_FIELD_INT(z.authlen);
PARSE_FIELD_STR(z.authdata);
PARSE_FIELD_STR(z.class);
PARSE_FIELD_STR(z.inst);
PARSE_FIELD_STR(z.opcode);
PARSE_FIELD_STR(z.sender);
PARSE_FIELD_STR(z.recipient);
PARSE_FIELD_STR(z.format);
PARSE_FIELD_INT(z.cksum);
PARSE_FIELD_INT(z.multi);
PARSE_FIELD_STR(z.multi_uid);
if (lose)
goto invalid;
2018-01-07 18:47:30 +08:00
ND_PRINT(" zephyr");
if (strncmp(z.version+4, "0.2", 3)) {
ZEPHYR_PRINT(" v", z.version+4)
return;
}
2018-01-07 18:47:30 +08:00
ND_PRINT(" %s", tok2str(z_types, "type %d", z.kind));
if (z.kind == Z_PACKET_SERVACK) {
/* Initialization to silence warnings */
2015-04-27 08:24:42 +08:00
const char *ackdata = NULL;
PARSE_FIELD_STR(ackdata);
if (!lose && strcmp(ackdata, "SENT"))
ZEPHYR_PRINT("/", str_to_lower(ackdata))
}
if (*z.sender) ZEPHYR_PRINT(" ", z.sender);
if (!strcmp(z.class, "USER_LOCATE")) {
if (!strcmp(z.opcode, "USER_HIDE"))
2018-01-07 18:47:30 +08:00
ND_PRINT(" hide");
else if (!strcmp(z.opcode, "USER_UNHIDE"))
2018-01-07 18:47:30 +08:00
ND_PRINT(" unhide");
else
ZEPHYR_PRINT(" locate ", z.inst);
return;
}
if (!strcmp(z.class, "ZEPHYR_ADMIN")) {
ZEPHYR_PRINT(" zephyr-admin ", str_to_lower(z.opcode));
return;
}
if (!strcmp(z.class, "ZEPHYR_CTL")) {
if (!strcmp(z.inst, "CLIENT")) {
if (!strcmp(z.opcode, "SUBSCRIBE") ||
!strcmp(z.opcode, "SUBSCRIBE_NODEFS") ||
!strcmp(z.opcode, "UNSUBSCRIBE")) {
2018-01-07 18:47:30 +08:00
ND_PRINT(" %ssub%s", strcmp(z.opcode, "SUBSCRIBE") ? "un" : "",
strcmp(z.opcode, "SUBSCRIBE_NODEFS") ? "" :
2018-01-07 18:47:30 +08:00
"-nodefs");
if (z.kind != Z_PACKET_SERVACK) {
/* Initialization to silence warnings */
2015-04-27 08:24:42 +08:00
const char *c = NULL, *i = NULL, *r = NULL;
PARSE_FIELD_STR(c);
PARSE_FIELD_STR(i);
PARSE_FIELD_STR(r);
if (!lose) ZEPHYR_PRINT(" ", z_triple(c, i, r));
}
return;
}
if (!strcmp(z.opcode, "GIMME")) {
2018-01-07 18:47:30 +08:00
ND_PRINT(" ret");
return;
}
if (!strcmp(z.opcode, "GIMMEDEFS")) {
2018-01-07 18:47:30 +08:00
ND_PRINT(" gimme-defs");
return;
}
if (!strcmp(z.opcode, "CLEARSUB")) {
2018-01-07 18:47:30 +08:00
ND_PRINT(" clear-subs");
return;
}
ZEPHYR_PRINT(" ", str_to_lower(z.opcode));
return;
}
if (!strcmp(z.inst, "HM")) {
ZEPHYR_PRINT(" ", str_to_lower(z.opcode));
return;
}
if (!strcmp(z.inst, "REALM")) {
if (!strcmp(z.opcode, "ADD_SUBSCRIBE"))
2018-01-07 18:47:30 +08:00
ND_PRINT(" realm add-subs");
if (!strcmp(z.opcode, "REQ_SUBSCRIBE"))
2018-01-07 18:47:30 +08:00
ND_PRINT(" realm req-subs");
if (!strcmp(z.opcode, "RLM_SUBSCRIBE"))
2018-01-07 18:47:30 +08:00
ND_PRINT(" realm rlm-sub");
if (!strcmp(z.opcode, "RLM_UNSUBSCRIBE"))
2018-01-07 18:47:30 +08:00
ND_PRINT(" realm rlm-unsub");
return;
}
}
if (!strcmp(z.class, "HM_CTL")) {
ZEPHYR_PRINT(" hm_ctl ", str_to_lower(z.inst));
ZEPHYR_PRINT(" ", str_to_lower(z.opcode));
return;
}
if (!strcmp(z.class, "HM_STAT")) {
if (!strcmp(z.inst, "HMST_CLIENT") && !strcmp(z.opcode, "GIMMESTATS")) {
2018-01-07 18:47:30 +08:00
ND_PRINT(" get-client-stats");
return;
}
}
if (!strcmp(z.class, "WG_CTL")) {
ZEPHYR_PRINT(" wg_ctl ", str_to_lower(z.inst));
ZEPHYR_PRINT(" ", str_to_lower(z.opcode));
return;
}
if (!strcmp(z.class, "LOGIN")) {
if (!strcmp(z.opcode, "USER_FLUSH")) {
2018-01-07 18:47:30 +08:00
ND_PRINT(" flush_locs");
return;
}
if (!strcmp(z.opcode, "NONE") ||
!strcmp(z.opcode, "OPSTAFF") ||
!strcmp(z.opcode, "REALM-VISIBLE") ||
!strcmp(z.opcode, "REALM-ANNOUNCED") ||
!strcmp(z.opcode, "NET-VISIBLE") ||
!strcmp(z.opcode, "NET-ANNOUNCED")) {
ZEPHYR_PRINT(" set-exposure ", str_to_lower(z.opcode));
return;
}
}
if (!*z.recipient)
z.recipient = "*";
ZEPHYR_PRINT(" to ", z_triple(z.class, z.inst, z.recipient));
if (*z.opcode)
ZEPHYR_PRINT(" op ", z.opcode);
return;
invalid:
nd_print_invalid(ndo);
}