mirror of
https://github.com/the-tcpdump-group/tcpdump.git
synced 2024-11-27 12:03:44 +08:00
12857bf113
Using Coccinelle script badzero.cocci
1711 lines
43 KiB
C
1711 lines
43 KiB
C
/*
|
|
* Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
|
|
* The Regents of the University of California. All rights reserved.
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that: (1) source code distributions
|
|
* retain the above copyright notice and this paragraph in its entirety, (2)
|
|
* distributions including binary code include the above copyright notice and
|
|
* this paragraph in its entirety in the documentation or other materials
|
|
* provided with the distribution, and (3) all advertising materials mentioning
|
|
* features or use of this software display the following acknowledgement:
|
|
* ``This product includes software developed by the University of California,
|
|
* Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
|
|
* the University nor the names of its contributors may be used to endorse
|
|
* or promote products derived from this software without specific prior
|
|
* written permission.
|
|
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
|
|
* WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
|
|
* MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
|
|
*/
|
|
|
|
/* \summary: Network File System (NFS) printer */
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
#include "config.h"
|
|
#endif
|
|
|
|
#include <netdissect-stdinc.h>
|
|
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
|
|
#include "netdissect.h"
|
|
#include "addrtoname.h"
|
|
#include "extract.h"
|
|
|
|
#include "nfs.h"
|
|
#include "nfsfh.h"
|
|
|
|
#include "ip.h"
|
|
#include "ip6.h"
|
|
#include "rpc_auth.h"
|
|
#include "rpc_msg.h"
|
|
|
|
static const char tstr[] = " [|nfs]";
|
|
|
|
static void nfs_printfh(netdissect_options *, const uint32_t *, const u_int);
|
|
static int xid_map_enter(netdissect_options *, const struct sunrpc_msg *, const u_char *);
|
|
static int xid_map_find(const struct sunrpc_msg *, const u_char *,
|
|
uint32_t *, uint32_t *);
|
|
static void interp_reply(netdissect_options *, const struct sunrpc_msg *, uint32_t, uint32_t, int);
|
|
static const uint32_t *parse_post_op_attr(netdissect_options *, const uint32_t *, int);
|
|
|
|
/*
|
|
* Mapping of old NFS Version 2 RPC numbers to generic numbers.
|
|
*/
|
|
uint32_t nfsv3_procid[NFS_NPROCS] = {
|
|
NFSPROC_NULL,
|
|
NFSPROC_GETATTR,
|
|
NFSPROC_SETATTR,
|
|
NFSPROC_NOOP,
|
|
NFSPROC_LOOKUP,
|
|
NFSPROC_READLINK,
|
|
NFSPROC_READ,
|
|
NFSPROC_NOOP,
|
|
NFSPROC_WRITE,
|
|
NFSPROC_CREATE,
|
|
NFSPROC_REMOVE,
|
|
NFSPROC_RENAME,
|
|
NFSPROC_LINK,
|
|
NFSPROC_SYMLINK,
|
|
NFSPROC_MKDIR,
|
|
NFSPROC_RMDIR,
|
|
NFSPROC_READDIR,
|
|
NFSPROC_FSSTAT,
|
|
NFSPROC_NOOP,
|
|
NFSPROC_NOOP,
|
|
NFSPROC_NOOP,
|
|
NFSPROC_NOOP,
|
|
NFSPROC_NOOP,
|
|
NFSPROC_NOOP,
|
|
NFSPROC_NOOP,
|
|
NFSPROC_NOOP
|
|
};
|
|
|
|
static const struct tok nfsproc_str[] = {
|
|
{ NFSPROC_NOOP, "nop" },
|
|
{ NFSPROC_NULL, "null" },
|
|
{ NFSPROC_GETATTR, "getattr" },
|
|
{ NFSPROC_SETATTR, "setattr" },
|
|
{ NFSPROC_LOOKUP, "lookup" },
|
|
{ NFSPROC_ACCESS, "access" },
|
|
{ NFSPROC_READLINK, "readlink" },
|
|
{ NFSPROC_READ, "read" },
|
|
{ NFSPROC_WRITE, "write" },
|
|
{ NFSPROC_CREATE, "create" },
|
|
{ NFSPROC_MKDIR, "mkdir" },
|
|
{ NFSPROC_SYMLINK, "symlink" },
|
|
{ NFSPROC_MKNOD, "mknod" },
|
|
{ NFSPROC_REMOVE, "remove" },
|
|
{ NFSPROC_RMDIR, "rmdir" },
|
|
{ NFSPROC_RENAME, "rename" },
|
|
{ NFSPROC_LINK, "link" },
|
|
{ NFSPROC_READDIR, "readdir" },
|
|
{ NFSPROC_READDIRPLUS, "readdirplus" },
|
|
{ NFSPROC_FSSTAT, "fsstat" },
|
|
{ NFSPROC_FSINFO, "fsinfo" },
|
|
{ NFSPROC_PATHCONF, "pathconf" },
|
|
{ NFSPROC_COMMIT, "commit" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
/*
|
|
* NFS V2 and V3 status values.
|
|
*
|
|
* Some of these come from the RFCs for NFS V2 and V3, with the message
|
|
* strings taken from the FreeBSD C library "errlst.c".
|
|
*
|
|
* Others are errors that are not in the RFC but that I suspect some
|
|
* NFS servers could return; the values are FreeBSD errno values, as
|
|
* the first NFS server was the SunOS 2.0 one, and until 5.0 SunOS
|
|
* was primarily BSD-derived.
|
|
*/
|
|
static const struct tok status2str[] = {
|
|
{ 1, "Operation not permitted" }, /* EPERM */
|
|
{ 2, "No such file or directory" }, /* ENOENT */
|
|
{ 5, "Input/output error" }, /* EIO */
|
|
{ 6, "Device not configured" }, /* ENXIO */
|
|
{ 11, "Resource deadlock avoided" }, /* EDEADLK */
|
|
{ 12, "Cannot allocate memory" }, /* ENOMEM */
|
|
{ 13, "Permission denied" }, /* EACCES */
|
|
{ 17, "File exists" }, /* EEXIST */
|
|
{ 18, "Cross-device link" }, /* EXDEV */
|
|
{ 19, "Operation not supported by device" }, /* ENODEV */
|
|
{ 20, "Not a directory" }, /* ENOTDIR */
|
|
{ 21, "Is a directory" }, /* EISDIR */
|
|
{ 22, "Invalid argument" }, /* EINVAL */
|
|
{ 26, "Text file busy" }, /* ETXTBSY */
|
|
{ 27, "File too large" }, /* EFBIG */
|
|
{ 28, "No space left on device" }, /* ENOSPC */
|
|
{ 30, "Read-only file system" }, /* EROFS */
|
|
{ 31, "Too many links" }, /* EMLINK */
|
|
{ 45, "Operation not supported" }, /* EOPNOTSUPP */
|
|
{ 62, "Too many levels of symbolic links" }, /* ELOOP */
|
|
{ 63, "File name too long" }, /* ENAMETOOLONG */
|
|
{ 66, "Directory not empty" }, /* ENOTEMPTY */
|
|
{ 69, "Disc quota exceeded" }, /* EDQUOT */
|
|
{ 70, "Stale NFS file handle" }, /* ESTALE */
|
|
{ 71, "Too many levels of remote in path" }, /* EREMOTE */
|
|
{ 99, "Write cache flushed to disk" }, /* NFSERR_WFLUSH (not used) */
|
|
{ 10001, "Illegal NFS file handle" }, /* NFS3ERR_BADHANDLE */
|
|
{ 10002, "Update synchronization mismatch" }, /* NFS3ERR_NOT_SYNC */
|
|
{ 10003, "READDIR/READDIRPLUS cookie is stale" }, /* NFS3ERR_BAD_COOKIE */
|
|
{ 10004, "Operation not supported" }, /* NFS3ERR_NOTSUPP */
|
|
{ 10005, "Buffer or request is too small" }, /* NFS3ERR_TOOSMALL */
|
|
{ 10006, "Unspecified error on server" }, /* NFS3ERR_SERVERFAULT */
|
|
{ 10007, "Object of that type not supported" }, /* NFS3ERR_BADTYPE */
|
|
{ 10008, "Request couldn't be completed in time" }, /* NFS3ERR_JUKEBOX */
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static const struct tok nfsv3_writemodes[] = {
|
|
{ 0, "unstable" },
|
|
{ 1, "datasync" },
|
|
{ 2, "filesync" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static const struct tok type2str[] = {
|
|
{ NFNON, "NON" },
|
|
{ NFREG, "REG" },
|
|
{ NFDIR, "DIR" },
|
|
{ NFBLK, "BLK" },
|
|
{ NFCHR, "CHR" },
|
|
{ NFLNK, "LNK" },
|
|
{ NFFIFO, "FIFO" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static const struct tok sunrpc_auth_str[] = {
|
|
{ SUNRPC_AUTH_OK, "OK" },
|
|
{ SUNRPC_AUTH_BADCRED, "Bogus Credentials (seal broken)" },
|
|
{ SUNRPC_AUTH_REJECTEDCRED, "Rejected Credentials (client should begin new session)" },
|
|
{ SUNRPC_AUTH_BADVERF, "Bogus Verifier (seal broken)" },
|
|
{ SUNRPC_AUTH_REJECTEDVERF, "Verifier expired or was replayed" },
|
|
{ SUNRPC_AUTH_TOOWEAK, "Credentials are too weak" },
|
|
{ SUNRPC_AUTH_INVALIDRESP, "Bogus response verifier" },
|
|
{ SUNRPC_AUTH_FAILED, "Unknown failure" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static const struct tok sunrpc_str[] = {
|
|
{ SUNRPC_PROG_UNAVAIL, "PROG_UNAVAIL" },
|
|
{ SUNRPC_PROG_MISMATCH, "PROG_MISMATCH" },
|
|
{ SUNRPC_PROC_UNAVAIL, "PROC_UNAVAIL" },
|
|
{ SUNRPC_GARBAGE_ARGS, "GARBAGE_ARGS" },
|
|
{ SUNRPC_SYSTEM_ERR, "SYSTEM_ERR" },
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static void
|
|
print_nfsaddr(netdissect_options *ndo,
|
|
const u_char *bp, const char *s, const char *d)
|
|
{
|
|
const struct ip *ip;
|
|
const struct ip6_hdr *ip6;
|
|
char srcaddr[INET6_ADDRSTRLEN], dstaddr[INET6_ADDRSTRLEN];
|
|
|
|
srcaddr[0] = dstaddr[0] = '\0';
|
|
switch (IP_V((const struct ip *)bp)) {
|
|
case 4:
|
|
ip = (const struct ip *)bp;
|
|
strlcpy(srcaddr, ipaddr_string(ndo, &ip->ip_src), sizeof(srcaddr));
|
|
strlcpy(dstaddr, ipaddr_string(ndo, &ip->ip_dst), sizeof(dstaddr));
|
|
break;
|
|
case 6:
|
|
ip6 = (const struct ip6_hdr *)bp;
|
|
strlcpy(srcaddr, ip6addr_string(ndo, &ip6->ip6_src),
|
|
sizeof(srcaddr));
|
|
strlcpy(dstaddr, ip6addr_string(ndo, &ip6->ip6_dst),
|
|
sizeof(dstaddr));
|
|
break;
|
|
default:
|
|
strlcpy(srcaddr, "?", sizeof(srcaddr));
|
|
strlcpy(dstaddr, "?", sizeof(dstaddr));
|
|
break;
|
|
}
|
|
|
|
ND_PRINT((ndo, "%s.%s > %s.%s: ", srcaddr, s, dstaddr, d));
|
|
}
|
|
|
|
static const uint32_t *
|
|
parse_sattr3(netdissect_options *ndo,
|
|
const uint32_t *dp, struct nfsv3_sattr *sa3)
|
|
{
|
|
ND_TCHECK(dp[0]);
|
|
sa3->sa_modeset = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
if (sa3->sa_modeset) {
|
|
ND_TCHECK(dp[0]);
|
|
sa3->sa_mode = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
}
|
|
|
|
ND_TCHECK(dp[0]);
|
|
sa3->sa_uidset = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
if (sa3->sa_uidset) {
|
|
ND_TCHECK(dp[0]);
|
|
sa3->sa_uid = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
}
|
|
|
|
ND_TCHECK(dp[0]);
|
|
sa3->sa_gidset = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
if (sa3->sa_gidset) {
|
|
ND_TCHECK(dp[0]);
|
|
sa3->sa_gid = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
}
|
|
|
|
ND_TCHECK(dp[0]);
|
|
sa3->sa_sizeset = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
if (sa3->sa_sizeset) {
|
|
ND_TCHECK(dp[0]);
|
|
sa3->sa_size = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
}
|
|
|
|
ND_TCHECK(dp[0]);
|
|
sa3->sa_atimetype = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
if (sa3->sa_atimetype == NFSV3SATTRTIME_TOCLIENT) {
|
|
ND_TCHECK(dp[1]);
|
|
sa3->sa_atime.nfsv3_sec = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
sa3->sa_atime.nfsv3_nsec = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
}
|
|
|
|
ND_TCHECK(dp[0]);
|
|
sa3->sa_mtimetype = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
if (sa3->sa_mtimetype == NFSV3SATTRTIME_TOCLIENT) {
|
|
ND_TCHECK(dp[1]);
|
|
sa3->sa_mtime.nfsv3_sec = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
sa3->sa_mtime.nfsv3_nsec = EXTRACT_32BITS(dp);
|
|
dp++;
|
|
}
|
|
|
|
return dp;
|
|
trunc:
|
|
return NULL;
|
|
}
|
|
|
|
static int nfserr; /* true if we error rather than trunc */
|
|
|
|
static void
|
|
print_sattr3(netdissect_options *ndo,
|
|
const struct nfsv3_sattr *sa3, int verbose)
|
|
{
|
|
if (sa3->sa_modeset)
|
|
ND_PRINT((ndo, " mode %o", sa3->sa_mode));
|
|
if (sa3->sa_uidset)
|
|
ND_PRINT((ndo, " uid %u", sa3->sa_uid));
|
|
if (sa3->sa_gidset)
|
|
ND_PRINT((ndo, " gid %u", sa3->sa_gid));
|
|
if (verbose > 1) {
|
|
if (sa3->sa_atimetype == NFSV3SATTRTIME_TOCLIENT)
|
|
ND_PRINT((ndo, " atime %u.%06u", sa3->sa_atime.nfsv3_sec,
|
|
sa3->sa_atime.nfsv3_nsec));
|
|
if (sa3->sa_mtimetype == NFSV3SATTRTIME_TOCLIENT)
|
|
ND_PRINT((ndo, " mtime %u.%06u", sa3->sa_mtime.nfsv3_sec,
|
|
sa3->sa_mtime.nfsv3_nsec));
|
|
}
|
|
}
|
|
|
|
void
|
|
nfsreply_print(netdissect_options *ndo,
|
|
register const u_char *bp, u_int length,
|
|
register const u_char *bp2)
|
|
{
|
|
register const struct sunrpc_msg *rp;
|
|
char srcid[20], dstid[20]; /*fits 32bit*/
|
|
|
|
nfserr = 0; /* assume no error */
|
|
rp = (const struct sunrpc_msg *)bp;
|
|
|
|
ND_TCHECK(rp->rm_xid);
|
|
if (!ndo->ndo_nflag) {
|
|
strlcpy(srcid, "nfs", sizeof(srcid));
|
|
snprintf(dstid, sizeof(dstid), "%u",
|
|
EXTRACT_32BITS(&rp->rm_xid));
|
|
} else {
|
|
snprintf(srcid, sizeof(srcid), "%u", NFS_PORT);
|
|
snprintf(dstid, sizeof(dstid), "%u",
|
|
EXTRACT_32BITS(&rp->rm_xid));
|
|
}
|
|
print_nfsaddr(ndo, bp2, srcid, dstid);
|
|
|
|
nfsreply_print_noaddr(ndo, bp, length, bp2);
|
|
return;
|
|
|
|
trunc:
|
|
if (!nfserr)
|
|
ND_PRINT((ndo, "%s", tstr));
|
|
}
|
|
|
|
void
|
|
nfsreply_print_noaddr(netdissect_options *ndo,
|
|
register const u_char *bp, u_int length,
|
|
register const u_char *bp2)
|
|
{
|
|
register const struct sunrpc_msg *rp;
|
|
uint32_t proc, vers, reply_stat;
|
|
enum sunrpc_reject_stat rstat;
|
|
uint32_t rlow;
|
|
uint32_t rhigh;
|
|
enum sunrpc_auth_stat rwhy;
|
|
|
|
nfserr = 0; /* assume no error */
|
|
rp = (const struct sunrpc_msg *)bp;
|
|
|
|
ND_TCHECK(rp->rm_reply.rp_stat);
|
|
reply_stat = EXTRACT_32BITS(&rp->rm_reply.rp_stat);
|
|
switch (reply_stat) {
|
|
|
|
case SUNRPC_MSG_ACCEPTED:
|
|
ND_PRINT((ndo, "reply ok %u", length));
|
|
if (xid_map_find(rp, bp2, &proc, &vers) >= 0)
|
|
interp_reply(ndo, rp, proc, vers, length);
|
|
break;
|
|
|
|
case SUNRPC_MSG_DENIED:
|
|
ND_PRINT((ndo, "reply ERR %u: ", length));
|
|
ND_TCHECK(rp->rm_reply.rp_reject.rj_stat);
|
|
rstat = EXTRACT_32BITS(&rp->rm_reply.rp_reject.rj_stat);
|
|
switch (rstat) {
|
|
|
|
case SUNRPC_RPC_MISMATCH:
|
|
ND_TCHECK(rp->rm_reply.rp_reject.rj_vers.high);
|
|
rlow = EXTRACT_32BITS(&rp->rm_reply.rp_reject.rj_vers.low);
|
|
rhigh = EXTRACT_32BITS(&rp->rm_reply.rp_reject.rj_vers.high);
|
|
ND_PRINT((ndo, "RPC Version mismatch (%u-%u)", rlow, rhigh));
|
|
break;
|
|
|
|
case SUNRPC_AUTH_ERROR:
|
|
ND_TCHECK(rp->rm_reply.rp_reject.rj_why);
|
|
rwhy = EXTRACT_32BITS(&rp->rm_reply.rp_reject.rj_why);
|
|
ND_PRINT((ndo, "Auth %s", tok2str(sunrpc_auth_str, "Invalid failure code %u", rwhy)));
|
|
break;
|
|
|
|
default:
|
|
ND_PRINT((ndo, "Unknown reason for rejecting rpc message %u", (unsigned int)rstat));
|
|
break;
|
|
}
|
|
break;
|
|
|
|
default:
|
|
ND_PRINT((ndo, "reply Unknown rpc response code=%u %u", reply_stat, length));
|
|
break;
|
|
}
|
|
return;
|
|
|
|
trunc:
|
|
if (!nfserr)
|
|
ND_PRINT((ndo, "%s", tstr));
|
|
}
|
|
|
|
/*
|
|
* Return a pointer to the first file handle in the packet.
|
|
* If the packet was truncated, return 0.
|
|
*/
|
|
static const uint32_t *
|
|
parsereq(netdissect_options *ndo,
|
|
register const struct sunrpc_msg *rp, register u_int length)
|
|
{
|
|
register const uint32_t *dp;
|
|
register u_int len;
|
|
|
|
/*
|
|
* find the start of the req data (if we captured it)
|
|
*/
|
|
dp = (const uint32_t *)&rp->rm_call.cb_cred;
|
|
ND_TCHECK(dp[1]);
|
|
len = EXTRACT_32BITS(&dp[1]);
|
|
if (len < length) {
|
|
dp += (len + (2 * sizeof(*dp) + 3)) / sizeof(*dp);
|
|
ND_TCHECK(dp[1]);
|
|
len = EXTRACT_32BITS(&dp[1]);
|
|
if (len < length) {
|
|
dp += (len + (2 * sizeof(*dp) + 3)) / sizeof(*dp);
|
|
ND_TCHECK2(dp[0], 0);
|
|
return (dp);
|
|
}
|
|
}
|
|
trunc:
|
|
return (NULL);
|
|
}
|
|
|
|
/*
|
|
* Print out an NFS file handle and return a pointer to following word.
|
|
* If packet was truncated, return 0.
|
|
*/
|
|
static const uint32_t *
|
|
parsefh(netdissect_options *ndo,
|
|
register const uint32_t *dp, int v3)
|
|
{
|
|
u_int len;
|
|
|
|
if (v3) {
|
|
ND_TCHECK(dp[0]);
|
|
len = EXTRACT_32BITS(dp) / 4;
|
|
dp++;
|
|
} else
|
|
len = NFSX_V2FH / 4;
|
|
|
|
if (ND_TTEST2(*dp, len * sizeof(*dp))) {
|
|
nfs_printfh(ndo, dp, len);
|
|
return (dp + len);
|
|
}
|
|
trunc:
|
|
return (NULL);
|
|
}
|
|
|
|
/*
|
|
* Print out a file name and return pointer to 32-bit word past it.
|
|
* If packet was truncated, return 0.
|
|
*/
|
|
static const uint32_t *
|
|
parsefn(netdissect_options *ndo,
|
|
register const uint32_t *dp)
|
|
{
|
|
register uint32_t len;
|
|
register const u_char *cp;
|
|
|
|
/* Bail if we don't have the string length */
|
|
ND_TCHECK(*dp);
|
|
|
|
/* Fetch string length; convert to host order */
|
|
len = *dp++;
|
|
NTOHL(len);
|
|
|
|
ND_TCHECK2(*dp, ((len + 3) & ~3));
|
|
|
|
cp = (const u_char *)dp;
|
|
/* Update 32-bit pointer (NFS filenames padded to 32-bit boundaries) */
|
|
dp += ((len + 3) & ~3) / sizeof(*dp);
|
|
ND_PRINT((ndo, "\""));
|
|
if (fn_printn(ndo, cp, len, ndo->ndo_snapend)) {
|
|
ND_PRINT((ndo, "\""));
|
|
goto trunc;
|
|
}
|
|
ND_PRINT((ndo, "\""));
|
|
|
|
return (dp);
|
|
trunc:
|
|
return NULL;
|
|
}
|
|
|
|
/*
|
|
* Print out file handle and file name.
|
|
* Return pointer to 32-bit word past file name.
|
|
* If packet was truncated (or there was some other error), return 0.
|
|
*/
|
|
static const uint32_t *
|
|
parsefhn(netdissect_options *ndo,
|
|
register const uint32_t *dp, int v3)
|
|
{
|
|
dp = parsefh(ndo, dp, v3);
|
|
if (dp == NULL)
|
|
return (NULL);
|
|
ND_PRINT((ndo, " "));
|
|
return (parsefn(ndo, dp));
|
|
}
|
|
|
|
void
|
|
nfsreq_print_noaddr(netdissect_options *ndo,
|
|
register const u_char *bp, u_int length,
|
|
register const u_char *bp2)
|
|
{
|
|
register const struct sunrpc_msg *rp;
|
|
register const uint32_t *dp;
|
|
nfs_type type;
|
|
int v3;
|
|
uint32_t proc;
|
|
uint32_t access_flags;
|
|
struct nfsv3_sattr sa3;
|
|
|
|
ND_PRINT((ndo, "%d", length));
|
|
nfserr = 0; /* assume no error */
|
|
rp = (const struct sunrpc_msg *)bp;
|
|
|
|
if (!xid_map_enter(ndo, rp, bp2)) /* record proc number for later on */
|
|
goto trunc;
|
|
|
|
v3 = (EXTRACT_32BITS(&rp->rm_call.cb_vers) == NFS_VER3);
|
|
proc = EXTRACT_32BITS(&rp->rm_call.cb_proc);
|
|
|
|
if (!v3 && proc < NFS_NPROCS)
|
|
proc = nfsv3_procid[proc];
|
|
|
|
ND_PRINT((ndo, " %s", tok2str(nfsproc_str, "proc-%u", proc)));
|
|
switch (proc) {
|
|
|
|
case NFSPROC_GETATTR:
|
|
case NFSPROC_SETATTR:
|
|
case NFSPROC_READLINK:
|
|
case NFSPROC_FSSTAT:
|
|
case NFSPROC_FSINFO:
|
|
case NFSPROC_PATHCONF:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
parsefh(ndo, dp, v3) != NULL)
|
|
return;
|
|
break;
|
|
|
|
case NFSPROC_LOOKUP:
|
|
case NFSPROC_CREATE:
|
|
case NFSPROC_MKDIR:
|
|
case NFSPROC_REMOVE:
|
|
case NFSPROC_RMDIR:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
parsefhn(ndo, dp, v3) != NULL)
|
|
return;
|
|
break;
|
|
|
|
case NFSPROC_ACCESS:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
(dp = parsefh(ndo, dp, v3)) != NULL) {
|
|
ND_TCHECK(dp[0]);
|
|
access_flags = EXTRACT_32BITS(&dp[0]);
|
|
if (access_flags & ~NFSV3ACCESS_FULL) {
|
|
/* NFSV3ACCESS definitions aren't up to date */
|
|
ND_PRINT((ndo, " %04x", access_flags));
|
|
} else if ((access_flags & NFSV3ACCESS_FULL) == NFSV3ACCESS_FULL) {
|
|
ND_PRINT((ndo, " NFS_ACCESS_FULL"));
|
|
} else {
|
|
char separator = ' ';
|
|
if (access_flags & NFSV3ACCESS_READ) {
|
|
ND_PRINT((ndo, " NFS_ACCESS_READ"));
|
|
separator = '|';
|
|
}
|
|
if (access_flags & NFSV3ACCESS_LOOKUP) {
|
|
ND_PRINT((ndo, "%cNFS_ACCESS_LOOKUP", separator));
|
|
separator = '|';
|
|
}
|
|
if (access_flags & NFSV3ACCESS_MODIFY) {
|
|
ND_PRINT((ndo, "%cNFS_ACCESS_MODIFY", separator));
|
|
separator = '|';
|
|
}
|
|
if (access_flags & NFSV3ACCESS_EXTEND) {
|
|
ND_PRINT((ndo, "%cNFS_ACCESS_EXTEND", separator));
|
|
separator = '|';
|
|
}
|
|
if (access_flags & NFSV3ACCESS_DELETE) {
|
|
ND_PRINT((ndo, "%cNFS_ACCESS_DELETE", separator));
|
|
separator = '|';
|
|
}
|
|
if (access_flags & NFSV3ACCESS_EXECUTE)
|
|
ND_PRINT((ndo, "%cNFS_ACCESS_EXECUTE", separator));
|
|
}
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_READ:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
(dp = parsefh(ndo, dp, v3)) != NULL) {
|
|
if (v3) {
|
|
ND_TCHECK(dp[2]);
|
|
ND_PRINT((ndo, " %u bytes @ %" PRIu64,
|
|
EXTRACT_32BITS(&dp[2]),
|
|
EXTRACT_64BITS(&dp[0])));
|
|
} else {
|
|
ND_TCHECK(dp[1]);
|
|
ND_PRINT((ndo, " %u bytes @ %u",
|
|
EXTRACT_32BITS(&dp[1]),
|
|
EXTRACT_32BITS(&dp[0])));
|
|
}
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_WRITE:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
(dp = parsefh(ndo, dp, v3)) != NULL) {
|
|
if (v3) {
|
|
ND_TCHECK(dp[2]);
|
|
ND_PRINT((ndo, " %u (%u) bytes @ %" PRIu64,
|
|
EXTRACT_32BITS(&dp[4]),
|
|
EXTRACT_32BITS(&dp[2]),
|
|
EXTRACT_64BITS(&dp[0])));
|
|
if (ndo->ndo_vflag) {
|
|
dp += 3;
|
|
ND_TCHECK(dp[0]);
|
|
ND_PRINT((ndo, " <%s>",
|
|
tok2str(nfsv3_writemodes,
|
|
NULL, EXTRACT_32BITS(dp))));
|
|
}
|
|
} else {
|
|
ND_TCHECK(dp[3]);
|
|
ND_PRINT((ndo, " %u (%u) bytes @ %u (%u)",
|
|
EXTRACT_32BITS(&dp[3]),
|
|
EXTRACT_32BITS(&dp[2]),
|
|
EXTRACT_32BITS(&dp[1]),
|
|
EXTRACT_32BITS(&dp[0])));
|
|
}
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_SYMLINK:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
(dp = parsefhn(ndo, dp, v3)) != NULL) {
|
|
ND_PRINT((ndo, " ->"));
|
|
if (v3 && (dp = parse_sattr3(ndo, dp, &sa3)) == NULL)
|
|
break;
|
|
if (parsefn(ndo, dp) == NULL)
|
|
break;
|
|
if (v3 && ndo->ndo_vflag)
|
|
print_sattr3(ndo, &sa3, ndo->ndo_vflag);
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_MKNOD:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
(dp = parsefhn(ndo, dp, v3)) != NULL) {
|
|
ND_TCHECK(*dp);
|
|
type = (nfs_type)EXTRACT_32BITS(dp);
|
|
dp++;
|
|
if ((dp = parse_sattr3(ndo, dp, &sa3)) == NULL)
|
|
break;
|
|
ND_PRINT((ndo, " %s", tok2str(type2str, "unk-ft %d", type)));
|
|
if (ndo->ndo_vflag && (type == NFCHR || type == NFBLK)) {
|
|
ND_TCHECK(dp[1]);
|
|
ND_PRINT((ndo, " %u/%u",
|
|
EXTRACT_32BITS(&dp[0]),
|
|
EXTRACT_32BITS(&dp[1])));
|
|
dp += 2;
|
|
}
|
|
if (ndo->ndo_vflag)
|
|
print_sattr3(ndo, &sa3, ndo->ndo_vflag);
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_RENAME:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
(dp = parsefhn(ndo, dp, v3)) != NULL) {
|
|
ND_PRINT((ndo, " ->"));
|
|
if (parsefhn(ndo, dp, v3) != NULL)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_LINK:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
(dp = parsefh(ndo, dp, v3)) != NULL) {
|
|
ND_PRINT((ndo, " ->"));
|
|
if (parsefhn(ndo, dp, v3) != NULL)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_READDIR:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
(dp = parsefh(ndo, dp, v3)) != NULL) {
|
|
if (v3) {
|
|
ND_TCHECK(dp[4]);
|
|
/*
|
|
* We shouldn't really try to interpret the
|
|
* offset cookie here.
|
|
*/
|
|
ND_PRINT((ndo, " %u bytes @ %" PRId64,
|
|
EXTRACT_32BITS(&dp[4]),
|
|
EXTRACT_64BITS(&dp[0])));
|
|
if (ndo->ndo_vflag)
|
|
ND_PRINT((ndo, " verf %08x%08x", dp[2], dp[3]));
|
|
} else {
|
|
ND_TCHECK(dp[1]);
|
|
/*
|
|
* Print the offset as signed, since -1 is
|
|
* common, but offsets > 2^31 aren't.
|
|
*/
|
|
ND_PRINT((ndo, " %u bytes @ %d",
|
|
EXTRACT_32BITS(&dp[1]),
|
|
EXTRACT_32BITS(&dp[0])));
|
|
}
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_READDIRPLUS:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
(dp = parsefh(ndo, dp, v3)) != NULL) {
|
|
ND_TCHECK(dp[4]);
|
|
/*
|
|
* We don't try to interpret the offset
|
|
* cookie here.
|
|
*/
|
|
ND_PRINT((ndo, " %u bytes @ %" PRId64,
|
|
EXTRACT_32BITS(&dp[4]),
|
|
EXTRACT_64BITS(&dp[0])));
|
|
if (ndo->ndo_vflag) {
|
|
ND_TCHECK(dp[5]);
|
|
ND_PRINT((ndo, " max %u verf %08x%08x",
|
|
EXTRACT_32BITS(&dp[5]), dp[2], dp[3]));
|
|
}
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_COMMIT:
|
|
if ((dp = parsereq(ndo, rp, length)) != NULL &&
|
|
(dp = parsefh(ndo, dp, v3)) != NULL) {
|
|
ND_TCHECK(dp[2]);
|
|
ND_PRINT((ndo, " %u bytes @ %" PRIu64,
|
|
EXTRACT_32BITS(&dp[2]),
|
|
EXTRACT_64BITS(&dp[0])));
|
|
return;
|
|
}
|
|
break;
|
|
|
|
default:
|
|
return;
|
|
}
|
|
|
|
trunc:
|
|
if (!nfserr)
|
|
ND_PRINT((ndo, "%s", tstr));
|
|
}
|
|
|
|
/*
|
|
* Print out an NFS file handle.
|
|
* We assume packet was not truncated before the end of the
|
|
* file handle pointed to by dp.
|
|
*
|
|
* Note: new version (using portable file-handle parser) doesn't produce
|
|
* generation number. It probably could be made to do that, with some
|
|
* additional hacking on the parser code.
|
|
*/
|
|
static void
|
|
nfs_printfh(netdissect_options *ndo,
|
|
register const uint32_t *dp, const u_int len)
|
|
{
|
|
my_fsid fsid;
|
|
uint32_t ino;
|
|
const char *sfsname = NULL;
|
|
char *spacep;
|
|
|
|
if (ndo->ndo_uflag) {
|
|
u_int i;
|
|
char const *sep = "";
|
|
|
|
ND_PRINT((ndo, " fh["));
|
|
for (i=0; i<len; i++) {
|
|
ND_PRINT((ndo, "%s%x", sep, dp[i]));
|
|
sep = ":";
|
|
}
|
|
ND_PRINT((ndo, "]"));
|
|
return;
|
|
}
|
|
|
|
Parse_fh((const u_char *)dp, len, &fsid, &ino, NULL, &sfsname, 0);
|
|
|
|
if (sfsname) {
|
|
/* file system ID is ASCII, not numeric, for this server OS */
|
|
static char temp[NFSX_V3FHMAX+1];
|
|
|
|
/* Make sure string is null-terminated */
|
|
strncpy(temp, sfsname, NFSX_V3FHMAX);
|
|
temp[sizeof(temp) - 1] = '\0';
|
|
/* Remove trailing spaces */
|
|
spacep = strchr(temp, ' ');
|
|
if (spacep)
|
|
*spacep = '\0';
|
|
|
|
ND_PRINT((ndo, " fh %s/", temp));
|
|
} else {
|
|
ND_PRINT((ndo, " fh %d,%d/",
|
|
fsid.Fsid_dev.Major, fsid.Fsid_dev.Minor));
|
|
}
|
|
|
|
if(fsid.Fsid_dev.Minor == 257)
|
|
/* Print the undecoded handle */
|
|
ND_PRINT((ndo, "%s", fsid.Opaque_Handle));
|
|
else
|
|
ND_PRINT((ndo, "%ld", (long) ino));
|
|
}
|
|
|
|
/*
|
|
* Maintain a small cache of recent client.XID.server/proc pairs, to allow
|
|
* us to match up replies with requests and thus to know how to parse
|
|
* the reply.
|
|
*/
|
|
|
|
struct xid_map_entry {
|
|
uint32_t xid; /* transaction ID (net order) */
|
|
int ipver; /* IP version (4 or 6) */
|
|
struct in6_addr client; /* client IP address (net order) */
|
|
struct in6_addr server; /* server IP address (net order) */
|
|
uint32_t proc; /* call proc number (host order) */
|
|
uint32_t vers; /* program version (host order) */
|
|
};
|
|
|
|
/*
|
|
* Map entries are kept in an array that we manage as a ring;
|
|
* new entries are always added at the tail of the ring. Initially,
|
|
* all the entries are zero and hence don't match anything.
|
|
*/
|
|
|
|
#define XIDMAPSIZE 64
|
|
|
|
struct xid_map_entry xid_map[XIDMAPSIZE];
|
|
|
|
int xid_map_next = 0;
|
|
int xid_map_hint = 0;
|
|
|
|
static int
|
|
xid_map_enter(netdissect_options *ndo,
|
|
const struct sunrpc_msg *rp, const u_char *bp)
|
|
{
|
|
const struct ip *ip = NULL;
|
|
const struct ip6_hdr *ip6 = NULL;
|
|
struct xid_map_entry *xmep;
|
|
|
|
if (!ND_TTEST(rp->rm_call.cb_vers))
|
|
return (0);
|
|
switch (IP_V((const struct ip *)bp)) {
|
|
case 4:
|
|
ip = (const struct ip *)bp;
|
|
break;
|
|
case 6:
|
|
ip6 = (const struct ip6_hdr *)bp;
|
|
break;
|
|
default:
|
|
return (1);
|
|
}
|
|
|
|
xmep = &xid_map[xid_map_next];
|
|
|
|
if (++xid_map_next >= XIDMAPSIZE)
|
|
xid_map_next = 0;
|
|
|
|
UNALIGNED_MEMCPY(&xmep->xid, &rp->rm_xid, sizeof(xmep->xid));
|
|
if (ip) {
|
|
xmep->ipver = 4;
|
|
UNALIGNED_MEMCPY(&xmep->client, &ip->ip_src, sizeof(ip->ip_src));
|
|
UNALIGNED_MEMCPY(&xmep->server, &ip->ip_dst, sizeof(ip->ip_dst));
|
|
}
|
|
else if (ip6) {
|
|
xmep->ipver = 6;
|
|
UNALIGNED_MEMCPY(&xmep->client, &ip6->ip6_src, sizeof(ip6->ip6_src));
|
|
UNALIGNED_MEMCPY(&xmep->server, &ip6->ip6_dst, sizeof(ip6->ip6_dst));
|
|
}
|
|
xmep->proc = EXTRACT_32BITS(&rp->rm_call.cb_proc);
|
|
xmep->vers = EXTRACT_32BITS(&rp->rm_call.cb_vers);
|
|
return (1);
|
|
}
|
|
|
|
/*
|
|
* Returns 0 and puts NFSPROC_xxx in proc return and
|
|
* version in vers return, or returns -1 on failure
|
|
*/
|
|
static int
|
|
xid_map_find(const struct sunrpc_msg *rp, const u_char *bp, uint32_t *proc,
|
|
uint32_t *vers)
|
|
{
|
|
int i;
|
|
struct xid_map_entry *xmep;
|
|
uint32_t xid;
|
|
const struct ip *ip = (const struct ip *)bp;
|
|
const struct ip6_hdr *ip6 = (const struct ip6_hdr *)bp;
|
|
int cmp;
|
|
|
|
UNALIGNED_MEMCPY(&xid, &rp->rm_xid, sizeof(xmep->xid));
|
|
/* Start searching from where we last left off */
|
|
i = xid_map_hint;
|
|
do {
|
|
xmep = &xid_map[i];
|
|
cmp = 1;
|
|
if (xmep->ipver != IP_V(ip) || xmep->xid != xid)
|
|
goto nextitem;
|
|
switch (xmep->ipver) {
|
|
case 4:
|
|
if (UNALIGNED_MEMCMP(&ip->ip_src, &xmep->server,
|
|
sizeof(ip->ip_src)) != 0 ||
|
|
UNALIGNED_MEMCMP(&ip->ip_dst, &xmep->client,
|
|
sizeof(ip->ip_dst)) != 0) {
|
|
cmp = 0;
|
|
}
|
|
break;
|
|
case 6:
|
|
if (UNALIGNED_MEMCMP(&ip6->ip6_src, &xmep->server,
|
|
sizeof(ip6->ip6_src)) != 0 ||
|
|
UNALIGNED_MEMCMP(&ip6->ip6_dst, &xmep->client,
|
|
sizeof(ip6->ip6_dst)) != 0) {
|
|
cmp = 0;
|
|
}
|
|
break;
|
|
default:
|
|
cmp = 0;
|
|
break;
|
|
}
|
|
if (cmp) {
|
|
/* match */
|
|
xid_map_hint = i;
|
|
*proc = xmep->proc;
|
|
*vers = xmep->vers;
|
|
return 0;
|
|
}
|
|
nextitem:
|
|
if (++i >= XIDMAPSIZE)
|
|
i = 0;
|
|
} while (i != xid_map_hint);
|
|
|
|
/* search failed */
|
|
return (-1);
|
|
}
|
|
|
|
/*
|
|
* Routines for parsing reply packets
|
|
*/
|
|
|
|
/*
|
|
* Return a pointer to the beginning of the actual results.
|
|
* If the packet was truncated, return 0.
|
|
*/
|
|
static const uint32_t *
|
|
parserep(netdissect_options *ndo,
|
|
register const struct sunrpc_msg *rp, register u_int length)
|
|
{
|
|
register const uint32_t *dp;
|
|
u_int len;
|
|
enum sunrpc_accept_stat astat;
|
|
|
|
/*
|
|
* Portability note:
|
|
* Here we find the address of the ar_verf credentials.
|
|
* Originally, this calculation was
|
|
* dp = (uint32_t *)&rp->rm_reply.rp_acpt.ar_verf
|
|
* On the wire, the rp_acpt field starts immediately after
|
|
* the (32 bit) rp_stat field. However, rp_acpt (which is a
|
|
* "struct accepted_reply") contains a "struct opaque_auth",
|
|
* whose internal representation contains a pointer, so on a
|
|
* 64-bit machine the compiler inserts 32 bits of padding
|
|
* before rp->rm_reply.rp_acpt.ar_verf. So, we cannot use
|
|
* the internal representation to parse the on-the-wire
|
|
* representation. Instead, we skip past the rp_stat field,
|
|
* which is an "enum" and so occupies one 32-bit word.
|
|
*/
|
|
dp = ((const uint32_t *)&rp->rm_reply) + 1;
|
|
ND_TCHECK(dp[1]);
|
|
len = EXTRACT_32BITS(&dp[1]);
|
|
if (len >= length)
|
|
return (NULL);
|
|
/*
|
|
* skip past the ar_verf credentials.
|
|
*/
|
|
dp += (len + (2*sizeof(uint32_t) + 3)) / sizeof(uint32_t);
|
|
ND_TCHECK2(dp[0], 0);
|
|
|
|
/*
|
|
* now we can check the ar_stat field
|
|
*/
|
|
astat = (enum sunrpc_accept_stat) EXTRACT_32BITS(dp);
|
|
if (astat != SUNRPC_SUCCESS) {
|
|
ND_PRINT((ndo, " %s", tok2str(sunrpc_str, "ar_stat %d", astat)));
|
|
nfserr = 1; /* suppress trunc string */
|
|
return (NULL);
|
|
}
|
|
/* successful return */
|
|
ND_TCHECK2(*dp, sizeof(astat));
|
|
return ((const uint32_t *) (sizeof(astat) + ((const char *)dp)));
|
|
trunc:
|
|
return (0);
|
|
}
|
|
|
|
static const uint32_t *
|
|
parsestatus(netdissect_options *ndo,
|
|
const uint32_t *dp, int *er)
|
|
{
|
|
int errnum;
|
|
|
|
ND_TCHECK(dp[0]);
|
|
|
|
errnum = EXTRACT_32BITS(&dp[0]);
|
|
if (er)
|
|
*er = errnum;
|
|
if (errnum != 0) {
|
|
if (!ndo->ndo_qflag)
|
|
ND_PRINT((ndo, " ERROR: %s",
|
|
tok2str(status2str, "unk %d", errnum)));
|
|
nfserr = 1;
|
|
}
|
|
return (dp + 1);
|
|
trunc:
|
|
return NULL;
|
|
}
|
|
|
|
static const uint32_t *
|
|
parsefattr(netdissect_options *ndo,
|
|
const uint32_t *dp, int verbose, int v3)
|
|
{
|
|
const struct nfs_fattr *fap;
|
|
|
|
fap = (const struct nfs_fattr *)dp;
|
|
ND_TCHECK(fap->fa_gid);
|
|
if (verbose) {
|
|
ND_PRINT((ndo, " %s %o ids %d/%d",
|
|
tok2str(type2str, "unk-ft %d ",
|
|
EXTRACT_32BITS(&fap->fa_type)),
|
|
EXTRACT_32BITS(&fap->fa_mode),
|
|
EXTRACT_32BITS(&fap->fa_uid),
|
|
EXTRACT_32BITS(&fap->fa_gid)));
|
|
if (v3) {
|
|
ND_TCHECK(fap->fa3_size);
|
|
ND_PRINT((ndo, " sz %" PRIu64,
|
|
EXTRACT_64BITS((const uint32_t *)&fap->fa3_size)));
|
|
} else {
|
|
ND_TCHECK(fap->fa2_size);
|
|
ND_PRINT((ndo, " sz %d", EXTRACT_32BITS(&fap->fa2_size)));
|
|
}
|
|
}
|
|
/* print lots more stuff */
|
|
if (verbose > 1) {
|
|
if (v3) {
|
|
ND_TCHECK(fap->fa3_ctime);
|
|
ND_PRINT((ndo, " nlink %d rdev %d/%d",
|
|
EXTRACT_32BITS(&fap->fa_nlink),
|
|
EXTRACT_32BITS(&fap->fa3_rdev.specdata1),
|
|
EXTRACT_32BITS(&fap->fa3_rdev.specdata2)));
|
|
ND_PRINT((ndo, " fsid %" PRIx64,
|
|
EXTRACT_64BITS((const uint32_t *)&fap->fa3_fsid)));
|
|
ND_PRINT((ndo, " fileid %" PRIx64,
|
|
EXTRACT_64BITS((const uint32_t *)&fap->fa3_fileid)));
|
|
ND_PRINT((ndo, " a/m/ctime %u.%06u",
|
|
EXTRACT_32BITS(&fap->fa3_atime.nfsv3_sec),
|
|
EXTRACT_32BITS(&fap->fa3_atime.nfsv3_nsec)));
|
|
ND_PRINT((ndo, " %u.%06u",
|
|
EXTRACT_32BITS(&fap->fa3_mtime.nfsv3_sec),
|
|
EXTRACT_32BITS(&fap->fa3_mtime.nfsv3_nsec)));
|
|
ND_PRINT((ndo, " %u.%06u",
|
|
EXTRACT_32BITS(&fap->fa3_ctime.nfsv3_sec),
|
|
EXTRACT_32BITS(&fap->fa3_ctime.nfsv3_nsec)));
|
|
} else {
|
|
ND_TCHECK(fap->fa2_ctime);
|
|
ND_PRINT((ndo, " nlink %d rdev 0x%x fsid 0x%x nodeid 0x%x a/m/ctime",
|
|
EXTRACT_32BITS(&fap->fa_nlink),
|
|
EXTRACT_32BITS(&fap->fa2_rdev),
|
|
EXTRACT_32BITS(&fap->fa2_fsid),
|
|
EXTRACT_32BITS(&fap->fa2_fileid)));
|
|
ND_PRINT((ndo, " %u.%06u",
|
|
EXTRACT_32BITS(&fap->fa2_atime.nfsv2_sec),
|
|
EXTRACT_32BITS(&fap->fa2_atime.nfsv2_usec)));
|
|
ND_PRINT((ndo, " %u.%06u",
|
|
EXTRACT_32BITS(&fap->fa2_mtime.nfsv2_sec),
|
|
EXTRACT_32BITS(&fap->fa2_mtime.nfsv2_usec)));
|
|
ND_PRINT((ndo, " %u.%06u",
|
|
EXTRACT_32BITS(&fap->fa2_ctime.nfsv2_sec),
|
|
EXTRACT_32BITS(&fap->fa2_ctime.nfsv2_usec)));
|
|
}
|
|
}
|
|
return ((const uint32_t *)((const unsigned char *)dp +
|
|
(v3 ? NFSX_V3FATTR : NFSX_V2FATTR)));
|
|
trunc:
|
|
return (NULL);
|
|
}
|
|
|
|
static int
|
|
parseattrstat(netdissect_options *ndo,
|
|
const uint32_t *dp, int verbose, int v3)
|
|
{
|
|
int er;
|
|
|
|
dp = parsestatus(ndo, dp, &er);
|
|
if (dp == NULL)
|
|
return (0);
|
|
if (er)
|
|
return (1);
|
|
|
|
return (parsefattr(ndo, dp, verbose, v3) != NULL);
|
|
}
|
|
|
|
static int
|
|
parsediropres(netdissect_options *ndo,
|
|
const uint32_t *dp)
|
|
{
|
|
int er;
|
|
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
return (0);
|
|
if (er)
|
|
return (1);
|
|
|
|
dp = parsefh(ndo, dp, 0);
|
|
if (dp == NULL)
|
|
return (0);
|
|
|
|
return (parsefattr(ndo, dp, ndo->ndo_vflag, 0) != NULL);
|
|
}
|
|
|
|
static int
|
|
parselinkres(netdissect_options *ndo,
|
|
const uint32_t *dp, int v3)
|
|
{
|
|
int er;
|
|
|
|
dp = parsestatus(ndo, dp, &er);
|
|
if (dp == NULL)
|
|
return(0);
|
|
if (er)
|
|
return(1);
|
|
if (v3 && !(dp = parse_post_op_attr(ndo, dp, ndo->ndo_vflag)))
|
|
return (0);
|
|
ND_PRINT((ndo, " "));
|
|
return (parsefn(ndo, dp) != NULL);
|
|
}
|
|
|
|
static int
|
|
parsestatfs(netdissect_options *ndo,
|
|
const uint32_t *dp, int v3)
|
|
{
|
|
const struct nfs_statfs *sfsp;
|
|
int er;
|
|
|
|
dp = parsestatus(ndo, dp, &er);
|
|
if (dp == NULL)
|
|
return (0);
|
|
if (!v3 && er)
|
|
return (1);
|
|
|
|
if (ndo->ndo_qflag)
|
|
return(1);
|
|
|
|
if (v3) {
|
|
if (ndo->ndo_vflag)
|
|
ND_PRINT((ndo, " POST:"));
|
|
if (!(dp = parse_post_op_attr(ndo, dp, ndo->ndo_vflag)))
|
|
return (0);
|
|
}
|
|
|
|
ND_TCHECK2(*dp, (v3 ? NFSX_V3STATFS : NFSX_V2STATFS));
|
|
|
|
sfsp = (const struct nfs_statfs *)dp;
|
|
|
|
if (v3) {
|
|
ND_PRINT((ndo, " tbytes %" PRIu64 " fbytes %" PRIu64 " abytes %" PRIu64,
|
|
EXTRACT_64BITS((const uint32_t *)&sfsp->sf_tbytes),
|
|
EXTRACT_64BITS((const uint32_t *)&sfsp->sf_fbytes),
|
|
EXTRACT_64BITS((const uint32_t *)&sfsp->sf_abytes)));
|
|
if (ndo->ndo_vflag) {
|
|
ND_PRINT((ndo, " tfiles %" PRIu64 " ffiles %" PRIu64 " afiles %" PRIu64 " invar %u",
|
|
EXTRACT_64BITS((const uint32_t *)&sfsp->sf_tfiles),
|
|
EXTRACT_64BITS((const uint32_t *)&sfsp->sf_ffiles),
|
|
EXTRACT_64BITS((const uint32_t *)&sfsp->sf_afiles),
|
|
EXTRACT_32BITS(&sfsp->sf_invarsec)));
|
|
}
|
|
} else {
|
|
ND_PRINT((ndo, " tsize %d bsize %d blocks %d bfree %d bavail %d",
|
|
EXTRACT_32BITS(&sfsp->sf_tsize),
|
|
EXTRACT_32BITS(&sfsp->sf_bsize),
|
|
EXTRACT_32BITS(&sfsp->sf_blocks),
|
|
EXTRACT_32BITS(&sfsp->sf_bfree),
|
|
EXTRACT_32BITS(&sfsp->sf_bavail)));
|
|
}
|
|
|
|
return (1);
|
|
trunc:
|
|
return (0);
|
|
}
|
|
|
|
static int
|
|
parserddires(netdissect_options *ndo,
|
|
const uint32_t *dp)
|
|
{
|
|
int er;
|
|
|
|
dp = parsestatus(ndo, dp, &er);
|
|
if (dp == NULL)
|
|
return (0);
|
|
if (er)
|
|
return (1);
|
|
if (ndo->ndo_qflag)
|
|
return (1);
|
|
|
|
ND_TCHECK(dp[2]);
|
|
ND_PRINT((ndo, " offset 0x%x size %d ",
|
|
EXTRACT_32BITS(&dp[0]), EXTRACT_32BITS(&dp[1])));
|
|
if (dp[2] != 0)
|
|
ND_PRINT((ndo, " eof"));
|
|
|
|
return (1);
|
|
trunc:
|
|
return (0);
|
|
}
|
|
|
|
static const uint32_t *
|
|
parse_wcc_attr(netdissect_options *ndo,
|
|
const uint32_t *dp)
|
|
{
|
|
ND_PRINT((ndo, " sz %" PRIu64, EXTRACT_64BITS(&dp[0])));
|
|
ND_PRINT((ndo, " mtime %u.%06u ctime %u.%06u",
|
|
EXTRACT_32BITS(&dp[2]), EXTRACT_32BITS(&dp[3]),
|
|
EXTRACT_32BITS(&dp[4]), EXTRACT_32BITS(&dp[5])));
|
|
return (dp + 6);
|
|
}
|
|
|
|
/*
|
|
* Pre operation attributes. Print only if vflag > 1.
|
|
*/
|
|
static const uint32_t *
|
|
parse_pre_op_attr(netdissect_options *ndo,
|
|
const uint32_t *dp, int verbose)
|
|
{
|
|
ND_TCHECK(dp[0]);
|
|
if (!EXTRACT_32BITS(&dp[0]))
|
|
return (dp + 1);
|
|
dp++;
|
|
ND_TCHECK2(*dp, 24);
|
|
if (verbose > 1) {
|
|
return parse_wcc_attr(ndo, dp);
|
|
} else {
|
|
/* If not verbose enough, just skip over wcc_attr */
|
|
return (dp + 6);
|
|
}
|
|
trunc:
|
|
return (NULL);
|
|
}
|
|
|
|
/*
|
|
* Post operation attributes are printed if vflag >= 1
|
|
*/
|
|
static const uint32_t *
|
|
parse_post_op_attr(netdissect_options *ndo,
|
|
const uint32_t *dp, int verbose)
|
|
{
|
|
ND_TCHECK(dp[0]);
|
|
if (!EXTRACT_32BITS(&dp[0]))
|
|
return (dp + 1);
|
|
dp++;
|
|
if (verbose) {
|
|
return parsefattr(ndo, dp, verbose, 1);
|
|
} else
|
|
return (dp + (NFSX_V3FATTR / sizeof (uint32_t)));
|
|
trunc:
|
|
return (NULL);
|
|
}
|
|
|
|
static const uint32_t *
|
|
parse_wcc_data(netdissect_options *ndo,
|
|
const uint32_t *dp, int verbose)
|
|
{
|
|
if (verbose > 1)
|
|
ND_PRINT((ndo, " PRE:"));
|
|
if (!(dp = parse_pre_op_attr(ndo, dp, verbose)))
|
|
return (0);
|
|
|
|
if (verbose)
|
|
ND_PRINT((ndo, " POST:"));
|
|
return parse_post_op_attr(ndo, dp, verbose);
|
|
}
|
|
|
|
static const uint32_t *
|
|
parsecreateopres(netdissect_options *ndo,
|
|
const uint32_t *dp, int verbose)
|
|
{
|
|
int er;
|
|
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
return (0);
|
|
if (er)
|
|
dp = parse_wcc_data(ndo, dp, verbose);
|
|
else {
|
|
ND_TCHECK(dp[0]);
|
|
if (!EXTRACT_32BITS(&dp[0]))
|
|
return (dp + 1);
|
|
dp++;
|
|
if (!(dp = parsefh(ndo, dp, 1)))
|
|
return (0);
|
|
if (verbose) {
|
|
if (!(dp = parse_post_op_attr(ndo, dp, verbose)))
|
|
return (0);
|
|
if (ndo->ndo_vflag > 1) {
|
|
ND_PRINT((ndo, " dir attr:"));
|
|
dp = parse_wcc_data(ndo, dp, verbose);
|
|
}
|
|
}
|
|
}
|
|
return (dp);
|
|
trunc:
|
|
return (NULL);
|
|
}
|
|
|
|
static int
|
|
parsewccres(netdissect_options *ndo,
|
|
const uint32_t *dp, int verbose)
|
|
{
|
|
int er;
|
|
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
return (0);
|
|
return parse_wcc_data(ndo, dp, verbose) != NULL;
|
|
}
|
|
|
|
static const uint32_t *
|
|
parsev3rddirres(netdissect_options *ndo,
|
|
const uint32_t *dp, int verbose)
|
|
{
|
|
int er;
|
|
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
return (0);
|
|
if (ndo->ndo_vflag)
|
|
ND_PRINT((ndo, " POST:"));
|
|
if (!(dp = parse_post_op_attr(ndo, dp, verbose)))
|
|
return (0);
|
|
if (er)
|
|
return dp;
|
|
if (ndo->ndo_vflag) {
|
|
ND_TCHECK(dp[1]);
|
|
ND_PRINT((ndo, " verf %08x%08x", dp[0], dp[1]));
|
|
dp += 2;
|
|
}
|
|
return dp;
|
|
trunc:
|
|
return (NULL);
|
|
}
|
|
|
|
static int
|
|
parsefsinfo(netdissect_options *ndo,
|
|
const uint32_t *dp)
|
|
{
|
|
const struct nfsv3_fsinfo *sfp;
|
|
int er;
|
|
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
return (0);
|
|
if (ndo->ndo_vflag)
|
|
ND_PRINT((ndo, " POST:"));
|
|
if (!(dp = parse_post_op_attr(ndo, dp, ndo->ndo_vflag)))
|
|
return (0);
|
|
if (er)
|
|
return (1);
|
|
|
|
sfp = (const struct nfsv3_fsinfo *)dp;
|
|
ND_TCHECK(*sfp);
|
|
ND_PRINT((ndo, " rtmax %u rtpref %u wtmax %u wtpref %u dtpref %u",
|
|
EXTRACT_32BITS(&sfp->fs_rtmax),
|
|
EXTRACT_32BITS(&sfp->fs_rtpref),
|
|
EXTRACT_32BITS(&sfp->fs_wtmax),
|
|
EXTRACT_32BITS(&sfp->fs_wtpref),
|
|
EXTRACT_32BITS(&sfp->fs_dtpref)));
|
|
if (ndo->ndo_vflag) {
|
|
ND_PRINT((ndo, " rtmult %u wtmult %u maxfsz %" PRIu64,
|
|
EXTRACT_32BITS(&sfp->fs_rtmult),
|
|
EXTRACT_32BITS(&sfp->fs_wtmult),
|
|
EXTRACT_64BITS((const uint32_t *)&sfp->fs_maxfilesize)));
|
|
ND_PRINT((ndo, " delta %u.%06u ",
|
|
EXTRACT_32BITS(&sfp->fs_timedelta.nfsv3_sec),
|
|
EXTRACT_32BITS(&sfp->fs_timedelta.nfsv3_nsec)));
|
|
}
|
|
return (1);
|
|
trunc:
|
|
return (0);
|
|
}
|
|
|
|
static int
|
|
parsepathconf(netdissect_options *ndo,
|
|
const uint32_t *dp)
|
|
{
|
|
int er;
|
|
const struct nfsv3_pathconf *spp;
|
|
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
return (0);
|
|
if (ndo->ndo_vflag)
|
|
ND_PRINT((ndo, " POST:"));
|
|
if (!(dp = parse_post_op_attr(ndo, dp, ndo->ndo_vflag)))
|
|
return (0);
|
|
if (er)
|
|
return (1);
|
|
|
|
spp = (const struct nfsv3_pathconf *)dp;
|
|
ND_TCHECK(*spp);
|
|
|
|
ND_PRINT((ndo, " linkmax %u namemax %u %s %s %s %s",
|
|
EXTRACT_32BITS(&spp->pc_linkmax),
|
|
EXTRACT_32BITS(&spp->pc_namemax),
|
|
EXTRACT_32BITS(&spp->pc_notrunc) ? "notrunc" : "",
|
|
EXTRACT_32BITS(&spp->pc_chownrestricted) ? "chownres" : "",
|
|
EXTRACT_32BITS(&spp->pc_caseinsensitive) ? "igncase" : "",
|
|
EXTRACT_32BITS(&spp->pc_casepreserving) ? "keepcase" : ""));
|
|
return (1);
|
|
trunc:
|
|
return (0);
|
|
}
|
|
|
|
static void
|
|
interp_reply(netdissect_options *ndo,
|
|
const struct sunrpc_msg *rp, uint32_t proc, uint32_t vers, int length)
|
|
{
|
|
register const uint32_t *dp;
|
|
register int v3;
|
|
int er;
|
|
|
|
v3 = (vers == NFS_VER3);
|
|
|
|
if (!v3 && proc < NFS_NPROCS)
|
|
proc = nfsv3_procid[proc];
|
|
|
|
ND_PRINT((ndo, " %s", tok2str(nfsproc_str, "proc-%u", proc)));
|
|
switch (proc) {
|
|
|
|
case NFSPROC_GETATTR:
|
|
dp = parserep(ndo, rp, length);
|
|
if (dp != NULL && parseattrstat(ndo, dp, !ndo->ndo_qflag, v3) != 0)
|
|
return;
|
|
break;
|
|
|
|
case NFSPROC_SETATTR:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
return;
|
|
if (v3) {
|
|
if (parsewccres(ndo, dp, ndo->ndo_vflag))
|
|
return;
|
|
} else {
|
|
if (parseattrstat(ndo, dp, !ndo->ndo_qflag, 0) != 0)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_LOOKUP:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (v3) {
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
break;
|
|
if (er) {
|
|
if (ndo->ndo_vflag > 1) {
|
|
ND_PRINT((ndo, " post dattr:"));
|
|
dp = parse_post_op_attr(ndo, dp, ndo->ndo_vflag);
|
|
}
|
|
} else {
|
|
if (!(dp = parsefh(ndo, dp, v3)))
|
|
break;
|
|
if ((dp = parse_post_op_attr(ndo, dp, ndo->ndo_vflag)) &&
|
|
ndo->ndo_vflag > 1) {
|
|
ND_PRINT((ndo, " post dattr:"));
|
|
dp = parse_post_op_attr(ndo, dp, ndo->ndo_vflag);
|
|
}
|
|
}
|
|
if (dp)
|
|
return;
|
|
} else {
|
|
if (parsediropres(ndo, dp) != 0)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_ACCESS:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
break;
|
|
if (ndo->ndo_vflag)
|
|
ND_PRINT((ndo, " attr:"));
|
|
if (!(dp = parse_post_op_attr(ndo, dp, ndo->ndo_vflag)))
|
|
break;
|
|
if (!er)
|
|
ND_PRINT((ndo, " c %04x", EXTRACT_32BITS(&dp[0])));
|
|
return;
|
|
|
|
case NFSPROC_READLINK:
|
|
dp = parserep(ndo, rp, length);
|
|
if (dp != NULL && parselinkres(ndo, dp, v3) != 0)
|
|
return;
|
|
break;
|
|
|
|
case NFSPROC_READ:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (v3) {
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
break;
|
|
if (!(dp = parse_post_op_attr(ndo, dp, ndo->ndo_vflag)))
|
|
break;
|
|
if (er)
|
|
return;
|
|
if (ndo->ndo_vflag) {
|
|
ND_TCHECK(dp[1]);
|
|
ND_PRINT((ndo, " %u bytes", EXTRACT_32BITS(&dp[0])));
|
|
if (EXTRACT_32BITS(&dp[1]))
|
|
ND_PRINT((ndo, " EOF"));
|
|
}
|
|
return;
|
|
} else {
|
|
if (parseattrstat(ndo, dp, ndo->ndo_vflag, 0) != 0)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_WRITE:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (v3) {
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
break;
|
|
if (!(dp = parse_wcc_data(ndo, dp, ndo->ndo_vflag)))
|
|
break;
|
|
if (er)
|
|
return;
|
|
if (ndo->ndo_vflag) {
|
|
ND_TCHECK(dp[0]);
|
|
ND_PRINT((ndo, " %u bytes", EXTRACT_32BITS(&dp[0])));
|
|
if (ndo->ndo_vflag > 1) {
|
|
ND_TCHECK(dp[1]);
|
|
ND_PRINT((ndo, " <%s>",
|
|
tok2str(nfsv3_writemodes,
|
|
NULL, EXTRACT_32BITS(&dp[1]))));
|
|
}
|
|
return;
|
|
}
|
|
} else {
|
|
if (parseattrstat(ndo, dp, ndo->ndo_vflag, v3) != 0)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_CREATE:
|
|
case NFSPROC_MKDIR:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (v3) {
|
|
if (parsecreateopres(ndo, dp, ndo->ndo_vflag) != NULL)
|
|
return;
|
|
} else {
|
|
if (parsediropres(ndo, dp) != 0)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_SYMLINK:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (v3) {
|
|
if (parsecreateopres(ndo, dp, ndo->ndo_vflag) != NULL)
|
|
return;
|
|
} else {
|
|
if (parsestatus(ndo, dp, &er) != NULL)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_MKNOD:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (parsecreateopres(ndo, dp, ndo->ndo_vflag) != NULL)
|
|
return;
|
|
break;
|
|
|
|
case NFSPROC_REMOVE:
|
|
case NFSPROC_RMDIR:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (v3) {
|
|
if (parsewccres(ndo, dp, ndo->ndo_vflag))
|
|
return;
|
|
} else {
|
|
if (parsestatus(ndo, dp, &er) != NULL)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_RENAME:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (v3) {
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
break;
|
|
if (ndo->ndo_vflag) {
|
|
ND_PRINT((ndo, " from:"));
|
|
if (!(dp = parse_wcc_data(ndo, dp, ndo->ndo_vflag)))
|
|
break;
|
|
ND_PRINT((ndo, " to:"));
|
|
if (!(dp = parse_wcc_data(ndo, dp, ndo->ndo_vflag)))
|
|
break;
|
|
}
|
|
return;
|
|
} else {
|
|
if (parsestatus(ndo, dp, &er) != NULL)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_LINK:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (v3) {
|
|
if (!(dp = parsestatus(ndo, dp, &er)))
|
|
break;
|
|
if (ndo->ndo_vflag) {
|
|
ND_PRINT((ndo, " file POST:"));
|
|
if (!(dp = parse_post_op_attr(ndo, dp, ndo->ndo_vflag)))
|
|
break;
|
|
ND_PRINT((ndo, " dir:"));
|
|
if (!(dp = parse_wcc_data(ndo, dp, ndo->ndo_vflag)))
|
|
break;
|
|
return;
|
|
}
|
|
} else {
|
|
if (parsestatus(ndo, dp, &er) != NULL)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_READDIR:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (v3) {
|
|
if (parsev3rddirres(ndo, dp, ndo->ndo_vflag))
|
|
return;
|
|
} else {
|
|
if (parserddires(ndo, dp) != 0)
|
|
return;
|
|
}
|
|
break;
|
|
|
|
case NFSPROC_READDIRPLUS:
|
|
if (!(dp = parserep(ndo, rp, length)))
|
|
break;
|
|
if (parsev3rddirres(ndo, dp, ndo->ndo_vflag))
|
|
return;
|
|
break;
|
|
|
|
case NFSPROC_FSSTAT:
|
|
dp = parserep(ndo, rp, length);
|
|
if (dp != NULL && parsestatfs(ndo, dp, v3) != 0)
|
|
return;
|
|
break;
|
|
|
|
case NFSPROC_FSINFO:
|
|
dp = parserep(ndo, rp, length);
|
|
if (dp != NULL && parsefsinfo(ndo, dp) != 0)
|
|
return;
|
|
break;
|
|
|
|
case NFSPROC_PATHCONF:
|
|
dp = parserep(ndo, rp, length);
|
|
if (dp != NULL && parsepathconf(ndo, dp) != 0)
|
|
return;
|
|
break;
|
|
|
|
case NFSPROC_COMMIT:
|
|
dp = parserep(ndo, rp, length);
|
|
if (dp != NULL && parsewccres(ndo, dp, ndo->ndo_vflag) != 0)
|
|
return;
|
|
break;
|
|
|
|
default:
|
|
return;
|
|
}
|
|
trunc:
|
|
if (!nfserr)
|
|
ND_PRINT((ndo, "%s", tstr));
|
|
}
|