mirrors/tcpdump
0
0
Fork 0
mirror of https://github.com/the-tcpdump-group/tcpdump.git synced 2024-11-30 21:44:49 +08:00
Code Issues Packages Projects Releases Wiki Activity
fa8c4d8115
tcpdump/tcp.h

163 lines
5.1 KiB
C
Raw Normal View History

Add "tcp.h" and "udp.h" headers, to declare the TCP and UDP stuff needed by dissectors, and have dissectors include them rather than <netinet/udp.h>, <netinet/udp_var.h>, or <netinet/tcp.h>, if they actually need that stuff. Remove all unnecessary includes of <netinet/udp*.h> or <netinet/tcp*.h> files.
2000-09-23 16:26:30 +08:00
/*
* Copyright (c) 1982, 1986, 1993
* The Regents of the University of California. All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. All advertising materials mentioning features or use of this software
* must display the following acknowledgement:
* This product includes software developed by the University of
* California, Berkeley and its contributors.
* 4. Neither the name of the University nor the names of its contributors
* may be used to endorse or promote products derived from this software
* without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
* ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
* IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
* ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
* FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
* OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
* HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
* LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
* OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
* SUCH DAMAGE.
*
* @(#)tcp.h 8.1 (Berkeley) 6/10/93
*/
/*
* TCP header.
* Per RFC 793, September, 1981.
*/
struct tcphdr {
More nd_ification of structures. We don't need to use & to get a pointer to an nd_uintN_t/nd_intN_t type, as they're arrays.
2017-12-11 16:17:47 +08:00
nd_uint16_t th_sport; /* source port */
nd_uint16_t th_dport; /* destination port */
nd_uint32_t th_seq; /* sequence number */
nd_uint32_t th_ack; /* acknowledgement number */
nd_uint8_t th_offx2; /* data offset, rsvd */
nd_uint8_t th_flags;
nd_uint16_t th_win; /* window */
nd_uint16_t th_sum; /* checksum */
nd_uint16_t th_urp; /* urgent pointer */
Get rid of ND_UNALIGNED. Structures that describe packet formats now all use nd_ types, none of which require more than 1-byte alignment, so compilers shouldn't assume that anything in those structures is aligned on any particular boundary, even without a "this is unaligned" hint.
2018-02-15 06:03:41 +08:00
};
Add "tcp.h" and "udp.h" headers, to declare the TCP and UDP stuff needed by dissectors, and have dissectors include them rather than <netinet/udp.h>, <netinet/udp_var.h>, or <netinet/tcp.h>, if they actually need that stuff. Remove all unnecessary includes of <netinet/udp*.h> or <netinet/tcp*.h> files.
2000-09-23 16:26:30 +08:00
More nd_ification of structures. We don't need to use & to get a pointer to an nd_uintN_t/nd_intN_t type, as they're arrays.
2017-12-11 16:17:47 +08:00
#define TH_OFF(th) ((EXTRACT_U_1((th)->th_offx2) & 0xf0) >> 4)
change the TCP printer to print new-style order: - seperate fields by comma - use [] for flags and options sets - print a trailing length field make use of tok2str() and bitttok2str() move port definitions into tcp.h
2007-01-29 17:59:42 +08:00
/* TCP flags */
#define TH_FIN 0x01
#define TH_SYN 0x02
#define TH_RST 0x04
#define TH_PUSH 0x08
#define TH_ACK 0x10
#define TH_URG 0x20
#define TH_ECNECHO 0x40 /* ECN Echo */
#define TH_CWR 0x80 /* ECN Cwnd Reduced */
Add "tcp.h" and "udp.h" headers, to declare the TCP and UDP stuff needed by dissectors, and have dissectors include them rather than <netinet/udp.h>, <netinet/udp_var.h>, or <netinet/tcp.h>, if they actually need that stuff. Remove all unnecessary includes of <netinet/udp*.h> or <netinet/tcp*.h> files.
2000-09-23 16:26:30 +08:00
#define TCPOPT_EOL 0
#define TCPOPT_NOP 1
#define TCPOPT_MAXSEG 2
#define TCPOLEN_MAXSEG 4
Move some stuff that tried to make up for system headers from print-tcp.c to tcp.h, since don't use the system headers now anyway it was just making up for our own tcp.h.
2001-05-09 09:16:57 +08:00
#define TCPOPT_WSCALE 3 /* window scale factor (rfc1323) */
#define TCPOPT_SACKOK 4 /* selective ack ok (rfc2018) */
#define TCPOPT_SACK 5 /* selective ack (rfc2018) */
#define TCPOPT_ECHO 6 /* echo (rfc1072) */
#define TCPOPT_ECHOREPLY 7 /* echo (rfc1072) */
#define TCPOPT_TIMESTAMP 8 /* timestamp (rfc1323) */
Add "tcp.h" and "udp.h" headers, to declare the TCP and UDP stuff needed by dissectors, and have dissectors include them rather than <netinet/udp.h>, <netinet/udp_var.h>, or <netinet/tcp.h>, if they actually need that stuff. Remove all unnecessary includes of <netinet/udp*.h> or <netinet/tcp*.h> files.
2000-09-23 16:26:30 +08:00
#define TCPOLEN_TIMESTAMP 10
#define TCPOLEN_TSTAMP_APPA (TCPOLEN_TIMESTAMP+2) /* appendix A */
Move some stuff that tried to make up for system headers from print-tcp.c to tcp.h, since don't use the system headers now anyway it was just making up for our own tcp.h.
2001-05-09 09:16:57 +08:00
#define TCPOPT_CC 11 /* T/TCP CC options (rfc1644) */
#define TCPOPT_CCNEW 12 /* T/TCP CC options (rfc1644) */
#define TCPOPT_CCECHO 13 /* T/TCP CC options (rfc1644) */
From Bruce M. Simpson: add a "-M" flag to specify a shared secret for TCP-MD5 (RFC 2385) digest verification if we have libcrypto.
2004-03-23 15:15:36 +08:00
#define TCPOPT_SIGNATURE 19 /* Keyed MD5 (rfc2385) */
#define TCPOLEN_SIGNATURE 18
#define TCP_SIGLEN 16 /* length of an option 19 digest */
Correct TCP option Kind value for TCP Auth and add SCPS-TP. Fixes first problem in issue #516 while the second one isn't broken in tcpdump.
2016-05-06 03:31:01 +08:00
#define TCPOPT_SCPS 20 /* SCPS-TP (CCSDS 714.0-B-2) */
From Fang Wang: RFC 5482 specifies a new TCP option -- the TCP User Timeout Option (UTO) -- that allows one end of a TCP connection to advertise its current user timeout value. The Kind of UTO option is 28 and the Length is 4. The tcpdump currently does not recognize UTO option.
2009-08-19 06:02:37 +08:00
#define TCPOPT_UTO 28 /* tcp user timeout (rfc5482) */
#define TCPOLEN_UTO 4
TCP: put TCP-AO option decoding right As it was correctly pointed out in GitHub issue #516, the TCPOPT_TCPAO (formerly TCPOPT_AUTH) case had an issue with option length processing, though without significant consequences thanks to a check elsewhere. Besides that, the old code (introduced in 2005) decoded a structure similar to a proposed encoding variant of the early (first published in 2007) revisions of the Internet-Draft but different from the encoding of RFC 5925 (published in 2010). These issues are now addressed and the TCP option renamed to TCP-AO.
2016-11-02 01:05:01 +08:00
#define TCPOPT_TCPAO 29 /* TCP authentication option (rfc5925) */
Multipath TCP (RFC 6824) support This commit adds the support of Multipath TCP (MPTCP). MPTCP is a new extension to TCP standardized at the IETF. MPTCP allows to use several IP addresses at the same time by distributing data across several subflows (TCP connections) while still presenting the standard TCP socket API to the application. Its benefits are better resource utilization, better throughput and smoother reaction to failures.
2013-02-26 00:00:02 +08:00
#define TCPOPT_MPTCP 30 /* MPTCP options */
Add support for TCP Fast Open official IANA option number https://tools.ietf.org/html/rfc7413
2015-04-08 08:42:55 +08:00
#define TCPOPT_FASTOPEN 34 /* TCP Fast Open (rfc7413) */
add support for experimental tcp fast open and parsing experimental options
2013-06-16 11:46:54 +08:00
#define TCPOPT_EXPERIMENT2 254 /* experimental headers (rfc4727) */
Add "tcp.h" and "udp.h" headers, to declare the TCP and UDP stuff needed by dissectors, and have dissectors include them rather than <netinet/udp.h>, <netinet/udp_var.h>, or <netinet/tcp.h>, if they actually need that stuff. Remove all unnecessary includes of <netinet/udp*.h> or <netinet/tcp*.h> files.
2000-09-23 16:26:30 +08:00
#define TCPOPT_TSTAMP_HDR \
(TCPOPT_NOP<<24|TCPOPT_NOP<<16|TCPOPT_TIMESTAMP<<8|TCPOLEN_TIMESTAMP)
change the TCP printer to print new-style order: - seperate fields by comma - use [] for flags and options sets - print a trailing length field make use of tok2str() and bitttok2str() move port definitions into tcp.h
2007-01-29 17:59:42 +08:00
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#ifndef FTP_PORT
#define FTP_PORT 21
#endif
#ifndef SSH_PORT
#define SSH_PORT 22
#endif
change the TCP printer to print new-style order: - seperate fields by comma - use [] for flags and options sets - print a trailing length field make use of tok2str() and bitttok2str() move port definitions into tcp.h
2007-01-29 17:59:42 +08:00
#ifndef TELNET_PORT
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#define TELNET_PORT 23
change the TCP printer to print new-style order: - seperate fields by comma - use [] for flags and options sets - print a trailing length field make use of tok2str() and bitttok2str() move port definitions into tcp.h
2007-01-29 17:59:42 +08:00
#endif
Add a routine to print "text protocols", and add FTP/HTTP/SMTP/RTSP support. "Text protocols" are protocols that have the general feel of FTP, with command lines with a command name and space-separated arguments and response lines beginning with a 3-digit reply code. They can also include HTTP-style headers and an entity body. We add support for the FTP control channel, HTTP, SMTP, and RTSP. We also change the SIP printer to use it.
2014-10-20 02:21:44 +08:00
#ifndef SMTP_PORT
#define SMTP_PORT 25
#endif
WHOIS is a plain text protocol, why not decode it. With txtproto_print() this has become trivial. Add a test.
2017-10-08 01:41:42 +08:00
#ifndef WHOIS_PORT
#define WHOIS_PORT 43
#endif
refine use of nameser.h Move the port number #define's to the TCP and UDP files such that they don't require nameser.h anymore. Update the TCP printer to disregard the multicast DNS port as it is UDP-only.
2015-07-13 17:12:03 +08:00
#ifndef NAMESERVER_PORT
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#define NAMESERVER_PORT 53
#endif
#ifndef HTTP_PORT
#define HTTP_PORT 80
#endif
NetBIOS Name Service can run over TCP.
2015-07-15 04:47:32 +08:00
#ifndef NETBIOS_NS_PORT
#define NETBIOS_NS_PORT 137 /* RFC 1001, RFC 1002 */
#endif
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#ifndef NETBIOS_SSN_PORT
#define NETBIOS_SSN_PORT 139 /* RFC 1001, RFC 1002 */
refine use of nameser.h Move the port number #define's to the TCP and UDP files such that they don't require nameser.h anymore. Update the TCP printer to disregard the multicast DNS port as it is UDP-only.
2015-07-13 17:12:03 +08:00
#endif
change the TCP printer to print new-style order: - seperate fields by comma - use [] for flags and options sets - print a trailing length field make use of tok2str() and bitttok2str() move port definitions into tcp.h
2007-01-29 17:59:42 +08:00
#ifndef BGP_PORT
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#define BGP_PORT 179
change the TCP printer to print new-style order: - seperate fields by comma - use [] for flags and options sets - print a trailing length field make use of tok2str() and bitttok2str() move port definitions into tcp.h
2007-01-29 17:59:42 +08:00
#endif
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#ifndef RPKI_RTR_PORT
#define RPKI_RTR_PORT 323
OpenFlow: add IANA-allocated TCP port OF specifications 1.0.2 and 1.3.3 use a different port number. That said, the old port is still likely to be seen in the wild after 4 years of deployment. Let tcpdump recognize both for a while.
2014-03-25 20:26:25 +08:00
#endif
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#ifndef SMB_PORT
#define SMB_PORT 445
#endif
#ifndef RTSP_PORT
#define RTSP_PORT 554
#endif
#ifndef MSDP_PORT
#define MSDP_PORT 639
#endif
#ifndef LDP_PORT
#define LDP_PORT 646
add minimal OpenFlow decoding framework This change registers OpenFlow TCP port number and adds processing of respective packets with openflow_print(), a new function that understands the minimal OpenFlow header format and can iterate over messages within a snapshot that starts with the header.
2013-05-22 00:44:07 +08:00
#endif
change the TCP printer to print new-style order: - seperate fields by comma - use [] for flags and options sets - print a trailing length field make use of tok2str() and bitttok2str() move port definitions into tcp.h
2007-01-29 17:59:42 +08:00
#ifndef PPTP_PORT
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#define PPTP_PORT 1723
change the TCP printer to print new-style order: - seperate fields by comma - use [] for flags and options sets - print a trailing length field make use of tok2str() and bitttok2str() move port definitions into tcp.h
2007-01-29 17:59:42 +08:00
#endif
#ifndef NFS_PORT
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#define NFS_PORT 2049
change the TCP printer to print new-style order: - seperate fields by comma - use [] for flags and options sets - print a trailing length field make use of tok2str() and bitttok2str() move port definitions into tcp.h
2007-01-29 17:59:42 +08:00
#endif
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#ifndef OPENFLOW_PORT_OLD
#define OPENFLOW_PORT_OLD 6633
SMB-over-TCP (port 445) support.
2007-12-09 08:30:47 +08:00
#endif
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#ifndef OPENFLOW_PORT_IANA
#define OPENFLOW_PORT_IANA 6653
Add a routine to print "text protocols", and add FTP/HTTP/SMTP/RTSP support. "Text protocols" are protocols that have the general feel of FTP, with command lines with a command name and space-separated arguments and response lines beginning with a 3-digit reply code. They can also include HTTP-style headers and an entity body. We add support for the FTP control channel, HTTP, SMTP, and RTSP. We also change the SIP printer to use it.
2014-10-20 02:21:44 +08:00
#endif
#ifndef HTTP_PORT_ALT
#define HTTP_PORT_ALT 8080
#endif
#ifndef RTSP_PORT_ALT
#define RTSP_PORT_ALT 8554
#endif
Clean up the port definitions. From Bill Parker: sort the port definitions, add some additional ports, and use #ifndef/#endif around all definitions. From me: use consistent indentation, add the RFCs for NetBIOS-over-TCP to the #defines for the NBT ports, and don't keep the IPv6 ports separate.
2015-07-15 04:39:07 +08:00
#ifndef BEEP_PORT
#define BEEP_PORT 10288
Add a routine to print "text protocols", and add FTP/HTTP/SMTP/RTSP support. "Text protocols" are protocols that have the general feel of FTP, with command lines with a command name and space-separated arguments and response lines beginning with a 3-digit reply code. They can also include HTTP-style headers and an entity body. We add support for the FTP control channel, HTTP, SMTP, and RTSP. We also change the SIP printer to use it.
2014-10-20 02:21:44 +08:00
#endif
Initial support for the REdis Serialization Protocol known as RESP. This commit adds support for RESP as defined in: http://redis.io/topics/protocol. It also supports inline commands and pipelining. Due to the popularity of RESP, numerous services are emerging that use this protocol. You may decode RESP packets on arbitrary ports using the "-T resp" option. Example captures can be found in tests/resp_*. A simple way to test this parser is to start redis-server and then run redis-cli commands such as "redis-cli set key value". Traditionally, redis-cli monitor is used to debug redis. Unfortunately, the "monitor" command can cause significant load on a redis-server in production. This parser may be used as a non-invasive alternative to redis-cli monitor.
2016-01-13 01:32:55 +08:00
#ifndef REDIS_PORT
#define REDIS_PORT 6379
#endif
Reference in New Issue Copy Permalink