2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
23 static const char rcsid[] _U_ =
24 "@(#) $Header: /tcpdump/master/tcpdump/print-udp.c,v 1.142 2007-08-08 17:20:58 hannes Exp $ (LBL)";
31 #include <tcpdump-stdinc.h>
36 #include <arpa/tftp.h>
41 #include "interface.h"
42 #include "addrtoname.h"
44 #include "appletalk.h"
61 u_int16_t rh_flags; /* T:2 P:1 CNT:5 PT:8 */
62 u_int16_t rh_len; /* length of message (in words) */
63 u_int32_t rh_ssrc; /* synchronization src id */
67 u_int32_t upper; /* more significant 32 bits */
68 u_int32_t lower; /* less significant 32 bits */
75 ntp64 sr_ntp; /* 64-bit ntp timestamp */
76 u_int32_t sr_ts; /* reference media timestamp */
77 u_int32_t sr_np; /* no. packets sent */
78 u_int32_t sr_nb; /* no. bytes sent */
83 * Time stamps are middle 32-bits of ntp timestamp.
86 u_int32_t rr_srcid; /* sender being reported */
87 u_int32_t rr_nl; /* no. packets lost */
88 u_int32_t rr_ls; /* extended last seq number received */
89 u_int32_t rr_dv; /* jitter (delay variance) */
90 u_int32_t rr_lsr; /* orig. ts from last rr from this src */
91 u_int32_t rr_dlsr; /* time from recpt of last rr to xmit time */
95 #define RTCP_PT_SR 200
96 #define RTCP_PT_RR 201
97 #define RTCP_PT_SDES 202
98 #define RTCP_SDES_CNAME 1
99 #define RTCP_SDES_NAME 2
100 #define RTCP_SDES_EMAIL 3
101 #define RTCP_SDES_PHONE 4
102 #define RTCP_SDES_LOC 5
103 #define RTCP_SDES_TOOL 6
104 #define RTCP_SDES_NOTE 7
105 #define RTCP_SDES_PRIV 8
106 #define RTCP_PT_BYE 203
107 #define RTCP_PT_APP 204
110 vat_print(const void *hdr, register const struct udphdr *up)
113 u_int ts = *(u_int16_t *)hdr;
114 if ((ts & 0xf060) != 0) {
116 (void)printf("udp/vt %u %d / %d",
117 (u_int32_t)(EXTRACT_16BITS(&up->uh_ulen) - sizeof(*up)),
118 ts & 0x3ff, ts >> 10);
121 u_int32_t i0 = EXTRACT_32BITS(&((u_int *)hdr)[0]);
122 u_int32_t i1 = EXTRACT_32BITS(&((u_int *)hdr)[1]);
123 printf("udp/vat %u c%d %u%s",
124 (u_int32_t)(EXTRACT_16BITS(&up->uh_ulen) - sizeof(*up) - 8),
126 i1, i0 & 0x800000? "*" : "");
129 printf(" f%d", (i0 >> 16) & 0x1f);
131 printf(" s%d", (i0 >> 24) & 0x3f);
136 rtp_print(const void *hdr, u_int len, register const struct udphdr *up)
139 u_int *ip = (u_int *)hdr;
140 u_int hasopt, hasext, contype, hasmarker;
141 u_int32_t i0 = EXTRACT_32BITS(&((u_int *)hdr)[0]);
142 u_int32_t i1 = EXTRACT_32BITS(&((u_int *)hdr)[1]);
143 u_int dlen = EXTRACT_16BITS(&up->uh_ulen) - sizeof(*up) - 8;
151 if ((i0 >> 30) == 1) {
153 hasopt = i0 & 0x800000;
154 contype = (i0 >> 16) & 0x3f;
155 hasmarker = i0 & 0x400000;
159 hasext = i0 & 0x10000000;
160 contype = (i0 >> 16) & 0x7f;
161 hasmarker = i0 & 0x800000;
167 printf("udp/%s %d c%d %s%s %d %u",
171 (hasopt || hasext)? "+" : "",
176 printf(" %u", EXTRACT_32BITS(&((u_int *)hdr)[2]));
181 optlen = (i2 >> 16) & 0xff;
182 if (optlen == 0 || optlen > len) {
188 } while ((int)i2 >= 0);
193 extlen = (i2 & 0xffff) + 1;
200 if (contype == 0x1f) /*XXX H.261 */
201 printf(" 0x%04x", ip[0] >> 16);
205 static const u_char *
206 rtcp_print(const u_char *hdr, const u_char *ep)
208 /* rtp v2 control (rtcp) */
209 struct rtcp_rr *rr = 0;
211 struct rtcphdr *rh = (struct rtcphdr *)hdr;
216 if ((u_char *)(rh + 1) > ep) {
220 len = (EXTRACT_16BITS(&rh->rh_len) + 1) * 4;
221 flags = EXTRACT_16BITS(&rh->rh_flags);
222 cnt = (flags >> 8) & 0x1f;
223 switch (flags & 0xff) {
225 sr = (struct rtcp_sr *)(rh + 1);
227 if (len != cnt * sizeof(*rr) + sizeof(*sr) + sizeof(*rh))
228 printf(" [%d]", len);
230 printf(" %u", EXTRACT_32BITS(&rh->rh_ssrc));
231 if ((u_char *)(sr + 1) > ep) {
235 ts = (double)(EXTRACT_32BITS(&sr->sr_ntp.upper)) +
236 ((double)(EXTRACT_32BITS(&sr->sr_ntp.lower)) /
238 printf(" @%.2f %u %up %ub", ts, EXTRACT_32BITS(&sr->sr_ts),
239 EXTRACT_32BITS(&sr->sr_np), EXTRACT_32BITS(&sr->sr_nb));
240 rr = (struct rtcp_rr *)(sr + 1);
244 if (len != cnt * sizeof(*rr) + sizeof(*rh))
245 printf(" [%d]", len);
246 rr = (struct rtcp_rr *)(rh + 1);
248 printf(" %u", EXTRACT_32BITS(&rh->rh_ssrc));
251 printf(" sdes %d", len);
253 printf(" %u", EXTRACT_32BITS(&rh->rh_ssrc));
257 printf(" bye %d", len);
259 printf(" %u", EXTRACT_32BITS(&rh->rh_ssrc));
263 printf(" type-0x%x %d", flags & 0xff, len);
270 if ((u_char *)(rr + 1) > ep) {
275 printf(" %u", EXTRACT_32BITS(&rr->rr_srcid));
276 ts = (double)(EXTRACT_32BITS(&rr->rr_lsr)) / 65536.;
277 dts = (double)(EXTRACT_32BITS(&rr->rr_dlsr)) / 65536.;
278 printf(" %ul %us %uj @%.2f+%.2f",
279 EXTRACT_32BITS(&rr->rr_nl) & 0x00ffffff,
280 EXTRACT_32BITS(&rr->rr_ls),
281 EXTRACT_32BITS(&rr->rr_dv), ts, dts);
286 static int udp_cksum(register const struct ip *ip,
287 register const struct udphdr *up,
300 register const u_int16_t *sp;
302 /* pseudo-header.. */
303 phu.ph.len = htons((u_int16_t)len);
305 phu.ph.proto = IPPROTO_UDP;
306 memcpy(&phu.ph.src, &ip->ip_src.s_addr, sizeof(u_int32_t));
308 memcpy(&phu.ph.dst, &ip->ip_dst.s_addr, sizeof(u_int32_t));
310 phu.ph.dst = ip_finddst(ip);
313 return in_cksum((u_short *)up, len,
314 sp[0]+sp[1]+sp[2]+sp[3]+sp[4]+sp[5]);
318 static int udp6_cksum(const struct ip6_hdr *ip6, const struct udphdr *up,
322 register const u_int16_t *sp;
326 struct in6_addr ph_src;
327 struct in6_addr ph_dst;
336 memset(&phu, 0, sizeof(phu));
337 phu.ph.ph_src = ip6->ip6_src;
338 phu.ph.ph_dst = ip6->ip6_dst;
339 phu.ph.ph_len = htonl(len);
340 phu.ph.ph_nxt = IPPROTO_UDP;
343 for (i = 0; i < sizeof(phu.pa) / sizeof(phu.pa[0]); i++)
346 sp = (const u_int16_t *)up;
348 for (i = 0; i < (len & ~1); i += 2)
352 sum += htons((*(const u_int8_t *)sp) << 8);
355 sum = (sum & 0xffff) + (sum >> 16);
363 udpipaddr_print(const struct ip *ip, int sport, int dport)
366 const struct ip6_hdr *ip6;
369 ip6 = (const struct ip6_hdr *)ip;
374 if (ip6->ip6_nxt == IPPROTO_UDP) {
376 (void)printf("%s > %s: ",
377 ip6addr_string(&ip6->ip6_src),
378 ip6addr_string(&ip6->ip6_dst));
380 (void)printf("%s.%s > %s.%s: ",
381 ip6addr_string(&ip6->ip6_src),
382 udpport_string(sport),
383 ip6addr_string(&ip6->ip6_dst),
384 udpport_string(dport));
388 (void)printf("%s > %s: ",
389 udpport_string(sport),
390 udpport_string(dport));
396 if (ip->ip_p == IPPROTO_UDP) {
398 (void)printf("%s > %s: ",
399 ipaddr_string(&ip->ip_src),
400 ipaddr_string(&ip->ip_dst));
402 (void)printf("%s.%s > %s.%s: ",
403 ipaddr_string(&ip->ip_src),
404 udpport_string(sport),
405 ipaddr_string(&ip->ip_dst),
406 udpport_string(dport));
410 (void)printf("%s > %s: ",
411 udpport_string(sport),
412 udpport_string(dport));
419 udp_print(register const u_char *bp, u_int length,
420 register const u_char *bp2, int fragmented)
422 register const struct udphdr *up;
423 register const struct ip *ip;
424 register const u_char *cp;
425 register const u_char *ep = bp + length;
426 u_int16_t sport, dport, ulen;
428 register const struct ip6_hdr *ip6;
433 up = (struct udphdr *)bp;
434 ip = (struct ip *)bp2;
437 ip6 = (struct ip6_hdr *)bp2;
441 cp = (u_char *)(up + 1);
442 if (!TTEST(up->uh_dport)) {
443 udpipaddr_print(ip, -1, -1);
444 (void)printf("[|udp]");
448 sport = EXTRACT_16BITS(&up->uh_sport);
449 dport = EXTRACT_16BITS(&up->uh_dport);
451 if (length < sizeof(struct udphdr)) {
452 udpipaddr_print(ip, sport, dport);
453 (void)printf("truncated-udp %d", length);
456 length -= sizeof(struct udphdr);
459 udpipaddr_print(ip, sport, dport);
460 (void)printf("[|udp]");
464 ulen = EXTRACT_16BITS(&up->uh_ulen);
466 udpipaddr_print(ip, sport, dport);
467 (void)printf("truncated-udplength %d", ulen);
471 register struct sunrpc_msg *rp;
472 enum sunrpc_msg_type direction;
474 switch (packettype) {
477 udpipaddr_print(ip, sport, dport);
478 vat_print((void *)(up + 1), up);
482 udpipaddr_print(ip, sport, dport);
483 wb_print((void *)(up + 1), length);
487 rp = (struct sunrpc_msg *)(up + 1);
488 direction = (enum sunrpc_msg_type)EXTRACT_32BITS(&rp->rm_direction);
489 if (direction == SUNRPC_CALL)
490 sunrpcrequest_print((u_char *)rp, length,
493 nfsreply_print((u_char *)rp, length,
494 (u_char *)ip); /*XXX*/
498 udpipaddr_print(ip, sport, dport);
499 rtp_print((void *)(up + 1), length, up);
503 udpipaddr_print(ip, sport, dport);
505 cp = rtcp_print(cp, ep);
509 udpipaddr_print(ip, sport, dport);
510 snmp_print((const u_char *)(up + 1), length);
514 udpipaddr_print(ip, sport, dport);
515 cnfp_print(cp, (const u_char *)ip);
519 udpipaddr_print(ip, sport, dport);
520 tftp_print(cp, length);
524 udpipaddr_print(ip, sport, dport);
525 aodv_print((const u_char *)(up + 1), length,
537 register struct sunrpc_msg *rp;
538 enum sunrpc_msg_type direction;
540 rp = (struct sunrpc_msg *)(up + 1);
541 if (TTEST(rp->rm_direction)) {
542 direction = (enum sunrpc_msg_type)EXTRACT_32BITS(&rp->rm_direction);
543 if (dport == NFS_PORT && direction == SUNRPC_CALL) {
544 nfsreq_print((u_char *)rp, length,
548 if (sport == NFS_PORT && direction == SUNRPC_REPLY) {
549 nfsreply_print((u_char *)rp, length,
554 if (dport == SUNRPC_PORT && direction == SUNRPC_CALL) {
555 sunrpcrequest_print((u_char *)rp, length, (u_char *)ip);
560 if (TTEST(((struct LAP *)cp)->type) &&
561 ((struct LAP *)cp)->type == lapDDP &&
562 (atalk_port(sport) || atalk_port(dport))) {
564 fputs("kip ", stdout);
565 llap_print(cp, length);
569 udpipaddr_print(ip, sport, dport);
571 if (IP_V(ip) == 4 && (vflag > 1) && !Kflag && !fragmented) {
572 int sum = up->uh_sum;
574 (void)printf("[no cksum] ");
575 } else if (TTEST2(cp[0], length)) {
576 sum = udp_cksum(ip, up, length + sizeof(struct udphdr));
578 (void)printf("[bad udp cksum %x!] ", sum);
580 (void)printf("[udp sum ok] ");
584 if (IP_V(ip) == 6 && ip6->ip6_plen && vflag && !Kflag && !fragmented) {
585 int sum = up->uh_sum;
586 /* for IPv6, UDP checksum is mandatory */
587 if (TTEST2(cp[0], length)) {
588 sum = udp6_cksum(ip6, up, length + sizeof(struct udphdr));
590 (void)printf("[bad udp cksum %x!] ", sum);
592 (void)printf("[udp sum ok] ");
598 #define ISPORT(p) (dport == (p) || sport == (p))
599 if (ISPORT(NAMESERVER_PORT))
600 ns_print((const u_char *)(up + 1), length, 0);
601 else if (ISPORT(MULTICASTDNS_PORT))
602 ns_print((const u_char *)(up + 1), length, 1);
603 else if (ISPORT(TIMED_PORT))
604 timed_print((const u_char *)(up + 1));
605 else if (ISPORT(TFTP_PORT))
606 tftp_print((const u_char *)(up + 1), length);
607 else if (ISPORT(IPPORT_BOOTPC) || ISPORT(IPPORT_BOOTPS))
608 bootp_print((const u_char *)(up + 1), length);
609 else if (ISPORT(RIP_PORT))
610 rip_print((const u_char *)(up + 1), length);
611 else if (ISPORT(AODV_PORT))
612 aodv_print((const u_char *)(up + 1), length,
618 else if (ISPORT(ISAKMP_PORT))
619 isakmp_print(gndo, (const u_char *)(up + 1), length, bp2);
620 else if (ISPORT(ISAKMP_PORT_NATT))
621 isakmp_rfc3948_print(gndo, (const u_char *)(up + 1), length, bp2);
623 else if (ISPORT(ISAKMP_PORT_USER1) || ISPORT(ISAKMP_PORT_USER2))
624 isakmp_print(gndo, (const u_char *)(up + 1), length, bp2);
626 else if (ISPORT(SNMP_PORT) || ISPORT(SNMPTRAP_PORT))
627 snmp_print((const u_char *)(up + 1), length);
628 else if (ISPORT(NTP_PORT))
629 ntp_print((const u_char *)(up + 1), length);
630 else if (ISPORT(KERBEROS_PORT) || ISPORT(KERBEROS_SEC_PORT))
631 krb_print((const void *)(up + 1));
632 else if (ISPORT(L2TP_PORT))
633 l2tp_print((const u_char *)(up + 1), length);
634 #ifdef TCPDUMP_DO_SMB
635 else if (ISPORT(NETBIOS_NS_PORT))
636 nbt_udp137_print((const u_char *)(up + 1), length);
637 else if (ISPORT(NETBIOS_DGRAM_PORT))
638 nbt_udp138_print((const u_char *)(up + 1), length);
640 else if (dport == 3456)
641 vat_print((const void *)(up + 1), up);
642 else if (ISPORT(ZEPHYR_SRV_PORT) || ISPORT(ZEPHYR_CLT_PORT))
643 zephyr_print((const void *)(up + 1), length);
645 * Since there are 10 possible ports to check, I think
646 * a <> test would be more efficient
648 else if ((sport >= RX_PORT_LOW && sport <= RX_PORT_HIGH) ||
649 (dport >= RX_PORT_LOW && dport <= RX_PORT_HIGH))
650 rx_print((const void *)(up + 1), length, sport, dport,
653 else if (ISPORT(RIPNG_PORT))
654 ripng_print((const u_char *)(up + 1), length);
655 else if (ISPORT(DHCP6_SERV_PORT) || ISPORT(DHCP6_CLI_PORT)) {
656 dhcp6_print((const u_char *)(up + 1), length);
660 * Kludge in test for whiteboard packets.
662 else if (dport == 4567)
663 wb_print((const void *)(up + 1), length);
664 else if (ISPORT(CISCO_AUTORP_PORT))
665 cisco_autorp_print((const void *)(up + 1), length);
666 else if (ISPORT(RADIUS_PORT) ||
667 ISPORT(RADIUS_NEW_PORT) ||
668 ISPORT(RADIUS_ACCOUNTING_PORT) ||
669 ISPORT(RADIUS_NEW_ACCOUNTING_PORT) )
670 radius_print((const u_char *)(up+1), length);
671 else if (dport == HSRP_PORT)
672 hsrp_print((const u_char *)(up + 1), length);
673 else if (ISPORT(LWRES_PORT))
674 lwres_print((const u_char *)(up + 1), length);
675 else if (ISPORT(LDP_PORT))
676 ldp_print((const u_char *)(up + 1), length);
677 else if (ISPORT(OLSR_PORT))
678 olsr_print((const u_char *)(up + 1), length,
680 (IP_V(ip) == 6) ? 1 : 0);
684 else if (ISPORT(MPLS_LSP_PING_PORT))
685 lspping_print((const u_char *)(up + 1), length);
686 else if (dport == BFD_CONTROL_PORT ||
687 dport == BFD_ECHO_PORT )
688 bfd_print((const u_char *)(up+1), length, dport);
689 else if (ISPORT(LMP_PORT))
690 lmp_print((const u_char *)(up + 1), length);
691 else if (ISPORT(VQP_PORT))
692 vqp_print((const u_char *)(up + 1), length);
693 else if (ISPORT(SFLOW_PORT))
694 sflow_print((const u_char *)(up + 1), length);
695 else if (dport == LWAPP_CONTROL_PORT)
696 lwapp_control_print((const u_char *)(up + 1), length, 1);
697 else if (sport == LWAPP_CONTROL_PORT)
698 lwapp_control_print((const u_char *)(up + 1), length, 0);
699 else if (ISPORT(LWAPP_DATA_PORT))
700 lwapp_data_print((const u_char *)(up + 1), length);
701 else if (ISPORT(SIP_PORT))
702 sip_print((const u_char *)(up + 1), length);
703 else if (ISPORT(SYSLOG_PORT))
704 syslog_print((const u_char *)(up + 1), length);
706 (void)printf("UDP, length %u",
707 (u_int32_t)(ulen - sizeof(*up)));
710 (void)printf("UDP, length %u", (u_int32_t)(ulen - sizeof(*up)));
716 * c-style: whitesmith