1 /*
2  * Copyright (c) 1988-1997
3  *	The Regents of the University of California.  All rights reserved.
4  *
5  * Copyright (c) 1998-2012  Michael Richardson <mcr@tcpdump.org>
6  *      The TCPDUMP project
7  *
8  * Redistribution and use in source and binary forms, with or without
9  * modification, are permitted provided that: (1) source code distributions
10  * retain the above copyright notice and this paragraph in its entirety, (2)
11  * distributions including binary code include the above copyright notice and
12  * this paragraph in its entirety in the documentation or other materials
13  * provided with the distribution, and (3) all advertising materials mentioning
14  * features or use of this software display the following acknowledgement:
15  * ``This product includes software developed by the University of California,
16  * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
17  * the University nor the names of its contributors may be used to endorse
18  * or promote products derived from this software without specific prior
19  * written permission.
20  * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
21  * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
22  * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
23  */
24 
25 #ifndef netdissect_h
26 #define netdissect_h
27 
28 #ifdef HAVE_OS_PROTO_H
29 #include "os-proto.h"
30 #endif
31 #include <sys/types.h>
32 #include <setjmp.h>
33 #include "status-exit-codes.h"
34 
35 /*
36  * Data types corresponding to multi-byte integral values within data
37  * structures.  These are defined as arrays of octets, so that they're
38  * not aligned on their "natural" boundaries, and so that you *must*
39  * use the EXTRACT_ macros to extract them (which you should be doing
40  * *anyway*, so as not to assume a particular byte order or alignment
41  * in your code).
42  *
43  * We even want EXTRACT_U_1 used for 8-bit integral values, so we
44  * define nd_uint8_t and nd_int8_t as arrays as well.
45  */
46 typedef unsigned char nd_uint8_t[1];
47 typedef unsigned char nd_uint16_t[2];
48 typedef unsigned char nd_uint24_t[3];
49 typedef unsigned char nd_uint32_t[4];
50 typedef unsigned char nd_uint40_t[5];
51 typedef unsigned char nd_uint48_t[6];
52 typedef unsigned char nd_uint56_t[7];
53 typedef unsigned char nd_uint64_t[8];
54 
55 typedef signed char nd_int8_t[1];
56 
57 /*
58  * "unsigned char" so that sign extension isn't done on the
59  * individual bytes while they're being assembled.
60  */
61 typedef unsigned char nd_int32_t[4];
62 typedef unsigned char nd_int64_t[8];
63 
64 #define	FMAXINT	(4294967296.0)	/* floating point rep. of MAXINT */
65 
66 /*
67  * Use this for IPv4 addresses and netmasks.
68  *
69  * It's defined as an array of octets, so that it's not guaranteed to
70  * be aligned on its "natural" boundary (in some packet formats, it
71  * *isn't* so aligned).  We have separate EXTRACT_ calls for them;
72  * sometimes you want the host-byte-order value, other times you want
73  * the network-byte-order value.
74  *
75  * Don't use EXTRACT_BE_U_4() on them, use EXTRACT_IPV4_TO_HOST_ORDER()
76  * if you want them in host byte order and EXTRACT_IPV4_TO_NETWORK_ORDER()
77  * if you want them in network byte order (which you want with system APIs
78  * that expect network-order IPv4 addresses, such as inet_ntop()).
79  *
80  * If, on your little-endian machine (e.g., an "IBM-compatible PC", no matter
81  * what the OS, or an Intel Mac, no matter what the OS), you get the wrong
82  * answer, and you've used EXTRACT_BE_U_4(), do *N*O*T* "fix" this by using
83  * EXTRACT_LE_U_4(), fix it by using EXTRACT_IPV4_TO_NETWORK_ORDER(),
84  * otherwise you're breaking the result on big-endian machines (e.g.,
85  * most PowerPC/Power ISA machines, System/390 and z/Architecture, SPARC,
86  * etc.).
87  *
88  * Yes, people do this; that's why Wireshark has tvb_get_ipv4(), to extract
89  * an IPv4 address from a packet data buffer; it was introduced in reaction
90  * to somebody who *had* done that.
91  */
92 typedef unsigned char nd_ipv4[4];
93 
94 /*
95  * Use this for IPv6 addresses and netmasks.
96  */
97 typedef unsigned char nd_ipv6[16];
98 
99 /*
100  * Use this for MAC addresses.
101  */
102 #define MAC_ADDR_LEN	6U		/* length of MAC addresses */
103 typedef unsigned char nd_mac_addr[MAC_ADDR_LEN];
104 
105 /*
106  * Use this for blobs of bytes; make them arrays of nd_byte.
107  */
108 typedef unsigned char nd_byte;
109 
110 /*
111  * Round up x to a multiple of y; y must be a power of 2.
112  */
113 #ifndef roundup2
114 #define	roundup2(x, y)	(((x)+((u_int)((y)-1)))&(~((u_int)((y)-1))))
115 #endif
116 
117 #include <stdarg.h>
118 #include <pcap.h>
119 
120 #include "ip.h" /* struct ip for nextproto4_cksum() */
121 #include "ip6.h" /* struct ip6 for nextproto6_cksum() */
122 
123 #ifndef HAVE_STRLCAT
124 extern size_t strlcat (char *, const char *, size_t);
125 #endif
126 #ifndef HAVE_STRLCPY
127 extern size_t strlcpy (char *, const char *, size_t);
128 #endif
129 
130 #ifndef HAVE_STRDUP
131 extern char *strdup (const char *str);
132 #endif
133 
134 #ifndef HAVE_STRSEP
135 extern char *strsep(char **, const char *);
136 #endif
137 
138 struct tok {
139 	u_int v;		/* value */
140 	const char *s;		/* string */
141 };
142 
143 extern const char *tok2strbuf(const struct tok *, const char *, u_int,
144 			      char *buf, size_t bufsize);
145 
146 /* tok2str is deprecated */
147 extern const char *tok2str(const struct tok *, const char *, u_int);
148 extern char *bittok2str(const struct tok *, const char *, u_int);
149 extern char *bittok2str_nosep(const struct tok *, const char *, u_int);
150 
151 /* Initialize netdissect. */
152 extern int nd_init(char *, size_t);
153 /* Clean up netdissect. */
154 extern void nd_cleanup(void);
155 
156 /* Do we have libsmi support? */
157 extern int nd_have_smi_support(void);
158 /* Load an SMI module. */
159 extern int nd_load_smi_module(const char *, char *, size_t);
160 /* Flag indicating whether an SMI module has been loaded. */
161 extern int nd_smi_module_loaded;
162 /* Version number of the SMI library, or NULL if we don't have libsmi support. */
163 extern const char *nd_smi_version_string(void);
164 
165 typedef struct netdissect_options netdissect_options;
166 
167 #define IF_PRINTER_ARGS (netdissect_options *, const struct pcap_pkthdr *, const u_char *)
168 
169 typedef void (*if_printer) IF_PRINTER_ARGS;
170 
171 /*
172  * In case the data in a buffer needs to be processed by being decrypted,
173  * decompressed, etc. before it's dissected, we can't process it in place,
174  * we have to allocate a new buffer for the processed data.
175  *
176  * We keep a stack of those buffers; when we allocate a new buffer, we
177  * push the current one onto a stack, and when we're done with the new
178  * buffer, we free the current buffer and pop the previous one off the
179  * stack.
180  *
181  * A buffer has a beginnning and end pointer, and a link to the previous
182  * buffer on the stack.
183  *
184  * In other cases, we temporarily adjust the snapshot end to reflect a
185  * packet-length field in the packet data and, when finished dissecting
186  * that part of the packet, restore the old snapshot end.  We keep that
187  * on the stack with null buffer pointer, meaning there's nothing to
188  * free.
189  */
190 struct netdissect_saved_packet_info {
191   u_char *ndspi_buffer;					/* pointer to allocated buffer data */
192   const u_char *ndspi_packetp;				/* saved beginning of data */
193   const u_char *ndspi_snapend;				/* saved end of data */
194   struct netdissect_saved_packet_info *ndspi_prev;	/* previous buffer on the stack */
195 };
196 
197 /* 'val' value(s) for longjmp */
198 #define ND_TRUNCATED 1
199 
200 struct netdissect_options {
201   int ndo_bflag;		/* print 4 byte ASes in ASDOT notation */
202   int ndo_eflag;		/* print ethernet header */
203   int ndo_fflag;		/* don't translate "foreign" IP address */
204   int ndo_Kflag;		/* don't check IP, TCP or UDP checksums */
205   int ndo_nflag;		/* leave addresses as numbers */
206   int ndo_Nflag;		/* remove domains from printed host names */
207   int ndo_qflag;		/* quick (shorter) output */
208   int ndo_Sflag;		/* print raw TCP sequence numbers */
209   int ndo_tflag;		/* print packet arrival time */
210   int ndo_uflag;		/* Print undecoded NFS handles */
211   int ndo_vflag;		/* verbosity level */
212   int ndo_xflag;		/* print packet in hex */
213   int ndo_Xflag;		/* print packet in hex/ASCII */
214   int ndo_Aflag;		/* print packet only in ASCII observing TAB,
215 				 * LF, CR and SPACE as graphical chars
216 				 */
217   int ndo_Hflag;		/* dissect 802.11s draft mesh standard */
218   const char *ndo_protocol;	/* protocol */
219   jmp_buf ndo_early_end;	/* jmp_buf for setjmp()/longjmp() */
220   void *ndo_last_mem_p;		/* pointer to the last allocated memory chunk */
221   int ndo_packet_number;	/* print a packet number in the beginning of line */
222   int ndo_suppress_default_print; /* don't use default_print() for unknown packet types */
223   int ndo_tstamp_precision;	/* requested time stamp precision */
224   const char *program_name;	/* Name of the program using the library */
225 
226   char *ndo_espsecret;
227   struct sa_list *ndo_sa_list_head;  /* used by print-esp.c */
228   struct sa_list *ndo_sa_default;
229 
230   char *ndo_sigsecret;		/* Signature verification secret key */
231 
232   int   ndo_packettype;	/* as specified by -T */
233 
234   int   ndo_snaplen;
235   int   ndo_ll_hdr_len;	/* link-layer header length */
236 
237   /*global pointers to beginning and end of current packet (during printing) */
238   const u_char *ndo_packetp;
239   const u_char *ndo_snapend;
240 
241   /* stack of saved packet boundary and buffer information */
242   struct netdissect_saved_packet_info *ndo_packet_info_stack;
243 
244   /* pointer to the if_printer function */
245   if_printer ndo_if_printer;
246 
247   /* pointer to void function to output stuff */
248   void (*ndo_default_print)(netdissect_options *,
249 			    const u_char *bp, u_int length);
250 
251   /* pointer to function to do regular output */
252   int  (*ndo_printf)(netdissect_options *,
253 		     const char *fmt, ...)
254 		     PRINTFLIKE_FUNCPTR(2, 3);
255   /* pointer to function to output errors */
256   void NORETURN_FUNCPTR (*ndo_error)(netdissect_options *,
257 				     status_exit_codes_t status,
258 				     const char *fmt, ...)
259 				     PRINTFLIKE_FUNCPTR(3, 4);
260   /* pointer to function to output warnings */
261   void (*ndo_warning)(netdissect_options *,
262 		      const char *fmt, ...)
263 		      PRINTFLIKE_FUNCPTR(2, 3);
264 };
265 
266 extern int nd_push_buffer(netdissect_options *, u_char *, const u_char *,
267     const u_char *);
268 extern int nd_push_snapend(netdissect_options *, const u_char *);
269 extern void nd_change_snapend(netdissect_options *, const u_char *);
270 extern void nd_pop_packet_info(netdissect_options *);
271 extern void nd_pop_all_packet_info(netdissect_options *);
272 
273 #define PT_VAT		1	/* Visual Audio Tool */
274 #define PT_WB		2	/* distributed White Board */
275 #define PT_RPC		3	/* Remote Procedure Call */
276 #define PT_RTP		4	/* Real-Time Applications protocol */
277 #define PT_RTCP		5	/* Real-Time Applications control protocol */
278 #define PT_SNMP		6	/* Simple Network Management Protocol */
279 #define PT_CNFP		7	/* Cisco NetFlow protocol */
280 #define PT_TFTP		8	/* trivial file transfer protocol */
281 #define PT_AODV		9	/* Ad-hoc On-demand Distance Vector Protocol */
282 #define PT_CARP		10	/* Common Address Redundancy Protocol */
283 #define PT_RADIUS	11	/* RADIUS authentication Protocol */
284 #define PT_ZMTP1	12	/* ZeroMQ Message Transport Protocol 1.0 */
285 #define PT_VXLAN	13	/* Virtual eXtensible Local Area Network */
286 #define PT_PGM		14	/* [UDP-encapsulated] Pragmatic General Multicast */
287 #define PT_PGM_ZMTP1	15	/* ZMTP/1.0 inside PGM (native or UDP-encapsulated) */
288 #define PT_LMP		16	/* Link Management Protocol */
289 #define PT_RESP		17	/* RESP */
290 #define PT_PTP		18	/* PTP */
291 #define PT_SOMEIP	19	/* Autosar SOME/IP Protocol */
292 #define PT_DOMAIN	20	/* Domain Name System (DNS) */
293 
294 #define ND_MIN(a,b) ((a)>(b)?(b):(a))
295 #define ND_MAX(a,b) ((b)>(a)?(b):(a))
296 
297 /* For source or destination ports tests (UDP, TCP, ...) */
298 #define IS_SRC_OR_DST_PORT(p) (sport == (p) || dport == (p))
299 
300 /*
301  * Maximum snapshot length.  This should be enough to capture the full
302  * packet on most network interfaces.
303  *
304  *
305  * Somewhat arbitrary, but chosen to be:
306  *
307  *    1) big enough for maximum-size Linux loopback packets (65549)
308  *       and some USB packets captured with USBPcap:
309  *
310  *           https://desowin.org/usbpcap/
311  *
312  *       (> 131072, < 262144)
313  *
314  * and
315  *
316  *    2) small enough not to cause attempts to allocate huge amounts of
317  *       memory; some applications might use the snapshot length in a
318  *       savefile header to control the size of the buffer they allocate,
319  *       so a size of, say, 2^31-1 might not work well.
320  *
321  * XXX - does it need to be bigger still?  Note that, for versions of
322  * libpcap with pcap_create()/pcap_activate(), if no -s flag is specified
323  * or -s 0 is specified, we won't set the snapshot length at all, and will
324  * let libpcap choose a snapshot length; newer versions may choose a bigger
325  * value than 262144 for D-Bus, for example.
326  */
327 #define MAXIMUM_SNAPLEN	262144
328 
329 /*
330  * True if "l" bytes from "p" were captured.
331  *
332  * The "ndo->ndo_snapend - (l) <= ndo->ndo_snapend" checks to make sure
333  * "l" isn't so large that "ndo->ndo_snapend - (l)" underflows.
334  *
335  * The check is for <= rather than < because "l" might be 0.
336  *
337  * We cast the pointers to uintptr_t to make sure that the compiler
338  * doesn't optimize away any of these tests (which it is allowed to
339  * do, as adding an integer to, or subtracting an integer from, a
340  * pointer assumes that the pointer is a pointer to an element of an
341  * array and that the result of the addition or subtraction yields a
342  * pointer to another member of the array, so that, for example, if
343  * you subtract a positive integer from a pointer, the result is
344  * guaranteed to be less than the original pointer value). See
345  *
346  *	https://www.kb.cert.org/vuls/id/162289
347  */
348 
349 /*
350  * Test in two parts to avoid these warnings:
351  * comparison of unsigned expression >= 0 is always true [-Wtype-limits],
352  * comparison is always true due to limited range of data type [-Wtype-limits].
353  */
354 #define IS_NOT_NEGATIVE(x) (((x) > 0) || ((x) == 0))
355 
356 #define ND_TTEST_LEN(p, l) \
357   (IS_NOT_NEGATIVE(l) && \
358 	((uintptr_t)ndo->ndo_snapend - (l) <= (uintptr_t)ndo->ndo_snapend && \
359          (uintptr_t)(p) <= (uintptr_t)ndo->ndo_snapend - (l)))
360 
361 /* True if "*(p)" was captured */
362 #define ND_TTEST_SIZE(p) ND_TTEST_LEN(p, sizeof(*(p)))
363 
364 /* Bail out if "l" bytes from "p" were not captured */
365 #ifdef ND_LONGJMP_FROM_TCHECK
366 #define ND_TCHECK_LEN(p, l) if (!ND_TTEST_LEN(p, l)) nd_trunc_longjmp(ndo)
367 #else
368 #define ND_TCHECK_LEN(p, l) if (!ND_TTEST_LEN(p, l)) goto trunc
369 #endif
370 
371 /* Bail out if "*(p)" was not captured */
372 #define ND_TCHECK_SIZE(p) ND_TCHECK_LEN(p, sizeof(*(p)))
373 
374 /*
375  * Number of bytes between two pointers.
376  */
377 #define ND_BYTES_BETWEEN(p1, p2) ((u_int)(((const uint8_t *)(p1)) - (const uint8_t *)(p2)))
378 
379 /*
380  * Number of bytes remaining in the captured data, starting at the
381  * byte pointed to by the argument.
382  */
383 #define ND_BYTES_AVAILABLE_AFTER(p) ND_BYTES_BETWEEN(ndo->ndo_snapend, (p))
384 
385 #define ND_PRINT(...) (ndo->ndo_printf)(ndo, __VA_ARGS__)
386 #define ND_DEFAULTPRINT(ap, length) (*ndo->ndo_default_print)(ndo, ap, length)
387 
388 extern void ts_print(netdissect_options *, const struct timeval *);
389 extern void signed_relts_print(netdissect_options *, int32_t);
390 extern void unsigned_relts_print(netdissect_options *, uint32_t);
391 
392 extern void fn_print_char(netdissect_options *, u_char);
393 extern void fn_print_str(netdissect_options *, const u_char *);
394 extern u_int nd_printztn(netdissect_options *, const u_char *, u_int, const u_char *);
395 extern int nd_printn(netdissect_options *, const u_char *, u_int, const u_char *);
396 extern void nd_printjnp(netdissect_options *, const u_char *, u_int);
397 
398 /*
399  * Flags for txtproto_print().
400  */
401 #define RESP_CODE_SECOND_TOKEN	0x00000001	/* response code is second token in response line */
402 
403 extern void txtproto_print(netdissect_options *, const u_char *, u_int,
404 			   const char **, u_int);
405 
406 #if (defined(__i386__) || defined(_M_IX86) || defined(__X86__) || defined(__x86_64__) || defined(_M_X64)) || \
407     (defined(__arm__) || defined(_M_ARM) || defined(__aarch64__)) || \
408     (defined(__m68k__) && (!defined(__mc68000__) && !defined(__mc68010__))) || \
409     (defined(__ppc__) || defined(__ppc64__) || defined(_M_PPC) || defined(_ARCH_PPC) || defined(_ARCH_PPC64)) || \
410     (defined(__s390__) || defined(__s390x__) || defined(__zarch__)) || \
411     defined(__vax__)
412 /*
413  * The procesor natively handles unaligned loads, so just use memcpy()
414  * and memcmp(), to enable those optimizations.
415  *
416  * XXX - are those all the x86 tests we need?
417  * XXX - do we need to worry about ARMv1 through ARMv5, which didn't
418  * support unaligned loads, and, if so, do we need to worry about all
419  * of them, or just some of them, e.g. ARMv5?
420  * XXX - are those the only 68k tests we need not to generated
421  * unaligned accesses if the target is the 68000 or 68010?
422  * XXX - are there any tests we don't need, because some definitions are for
423  * compilers that also predefine the GCC symbols?
424  * XXX - do we need to test for both 32-bit and 64-bit versions of those
425  * architectures in all cases?
426  */
427 #define UNALIGNED_MEMCPY(p, q, l)	memcpy((p), (q), (l))
428 #define UNALIGNED_MEMCMP(p, q, l)	memcmp((p), (q), (l))
429 #else
430 /*
431  * The processor doesn't natively handle unaligned loads,
432  * and the compiler might "helpfully" optimize memcpy()
433  * and memcmp(), when handed pointers that would normally
434  * be properly aligned, into sequences that assume proper
435  * alignment.
436  *
437  * Do copies and compares of possibly-unaligned data by
438  * calling routines that wrap memcpy() and memcmp(), to
439  * prevent that optimization.
440  */
441 extern void unaligned_memcpy(void *, const void *, size_t);
442 extern int unaligned_memcmp(const void *, const void *, size_t);
443 #define UNALIGNED_MEMCPY(p, q, l)	unaligned_memcpy((p), (q), (l))
444 #define UNALIGNED_MEMCMP(p, q, l)	unaligned_memcmp((p), (q), (l))
445 #endif
446 
447 #define PLURAL_SUFFIX(n) \
448 	(((n) != 1) ? "s" : "")
449 
450 extern const char *tok2strary_internal(const char **, int, const char *, int);
451 #define	tok2strary(a,f,i) tok2strary_internal(a, sizeof(a)/sizeof(a[0]),f,i)
452 
453 struct uint_tokary
454 {
455 	u_int uintval;
456 	const struct tok *tokary;
457 };
458 
459 extern const struct tok *uint2tokary_internal(const struct uint_tokary[], const size_t, const u_int);
460 #define uint2tokary(a, i) uint2tokary_internal(a, sizeof(a)/sizeof(a[0]), i)
461 
462 extern if_printer lookup_printer(int);
463 
464 #define ND_DEBUG {printf(" [%s:%d %s] ", __FILE__, __LINE__, __func__); fflush(stdout);}
465 
466 /* The DLT printer routines */
467 
468 extern void ap1394_if_print IF_PRINTER_ARGS;
469 extern void arcnet_if_print IF_PRINTER_ARGS;
470 extern void arcnet_linux_if_print IF_PRINTER_ARGS;
471 extern void atm_if_print IF_PRINTER_ARGS;
472 extern void bt_if_print IF_PRINTER_ARGS;
473 extern void brcm_tag_if_print IF_PRINTER_ARGS;
474 extern void brcm_tag_prepend_if_print IF_PRINTER_ARGS;
475 extern void chdlc_if_print IF_PRINTER_ARGS;
476 extern void cip_if_print IF_PRINTER_ARGS;
477 extern void dsa_if_print IF_PRINTER_ARGS;
478 extern void edsa_if_print IF_PRINTER_ARGS;
479 extern void enc_if_print IF_PRINTER_ARGS;
480 extern void ether_if_print IF_PRINTER_ARGS;
481 extern void fddi_if_print IF_PRINTER_ARGS;
482 extern void fr_if_print IF_PRINTER_ARGS;
483 extern void ieee802_11_if_print IF_PRINTER_ARGS;
484 extern void ieee802_11_radio_avs_if_print IF_PRINTER_ARGS;
485 extern void ieee802_11_radio_if_print IF_PRINTER_ARGS;
486 extern void ieee802_15_4_if_print IF_PRINTER_ARGS;
487 extern void ieee802_15_4_tap_if_print IF_PRINTER_ARGS;
488 extern void ipfc_if_print IF_PRINTER_ARGS;
489 extern void ipoib_if_print IF_PRINTER_ARGS;
490 extern void ipnet_if_print IF_PRINTER_ARGS;
491 extern void juniper_atm1_if_print IF_PRINTER_ARGS;
492 extern void juniper_atm2_if_print IF_PRINTER_ARGS;
493 extern void juniper_chdlc_if_print IF_PRINTER_ARGS;
494 extern void juniper_es_if_print IF_PRINTER_ARGS;
495 extern void juniper_ether_if_print IF_PRINTER_ARGS;
496 extern void juniper_frelay_if_print IF_PRINTER_ARGS;
497 extern void juniper_ggsn_if_print IF_PRINTER_ARGS;
498 extern void juniper_mfr_if_print IF_PRINTER_ARGS;
499 extern void juniper_mlfr_if_print IF_PRINTER_ARGS;
500 extern void juniper_mlppp_if_print IF_PRINTER_ARGS;
501 extern void juniper_monitor_if_print IF_PRINTER_ARGS;
502 extern void juniper_ppp_if_print IF_PRINTER_ARGS;
503 extern void juniper_pppoe_atm_if_print IF_PRINTER_ARGS;
504 extern void juniper_pppoe_if_print IF_PRINTER_ARGS;
505 extern void juniper_services_if_print IF_PRINTER_ARGS;
506 extern void ltalk_if_print IF_PRINTER_ARGS;
507 extern void mfr_if_print IF_PRINTER_ARGS;
508 extern void netanalyzer_if_print IF_PRINTER_ARGS;
509 extern void netanalyzer_transparent_if_print IF_PRINTER_ARGS;
510 extern void nflog_if_print IF_PRINTER_ARGS;
511 extern void null_if_print IF_PRINTER_ARGS;
512 extern void pflog_if_print IF_PRINTER_ARGS;
513 extern void pktap_if_print IF_PRINTER_ARGS;
514 extern void ppi_if_print IF_PRINTER_ARGS;
515 extern void ppp_bsdos_if_print IF_PRINTER_ARGS;
516 extern void ppp_hdlc_if_print IF_PRINTER_ARGS;
517 extern void ppp_if_print IF_PRINTER_ARGS;
518 extern void pppoe_if_print IF_PRINTER_ARGS;
519 extern void prism_if_print IF_PRINTER_ARGS;
520 extern void raw_if_print IF_PRINTER_ARGS;
521 extern void sl_bsdos_if_print IF_PRINTER_ARGS;
522 extern void sl_if_print IF_PRINTER_ARGS;
523 extern void sll_if_print IF_PRINTER_ARGS;
524 extern void sll2_if_print IF_PRINTER_ARGS;
525 extern void sunatm_if_print IF_PRINTER_ARGS;
526 extern void symantec_if_print IF_PRINTER_ARGS;
527 extern void token_if_print IF_PRINTER_ARGS;
528 extern void unsupported_if_print IF_PRINTER_ARGS;
529 extern void usb_linux_48_byte_if_print IF_PRINTER_ARGS;
530 extern void usb_linux_64_byte_if_print IF_PRINTER_ARGS;
531 extern void vsock_if_print IF_PRINTER_ARGS;
532 
533 /*
534  * Structure passed to some printers to allow them to print
535  * link-layer address information if ndo_eflag isn't set
536  * (because they are for protocols that don't have their
537  * own addresses, so that we'd want to report link-layer
538  * address information).
539  *
540  * This contains a pointer to an address and a pointer to a routine
541  * to which we pass that pointer in order to get a string.
542  */
543 struct lladdr_info {
544 	const char *(*addr_string)(netdissect_options *, const u_char *);
545 	const u_char *addr;
546 };
547 
548 /* The printer routines. */
549 
550 extern void aarp_print(netdissect_options *, const u_char *, u_int);
551 extern int ah_print(netdissect_options *, const u_char *);
552 extern void ahcp_print(netdissect_options *, const u_char *, u_int);
553 extern void aodv_print(netdissect_options *, const u_char *, u_int, int);
554 extern void aoe_print(netdissect_options *, const u_char *, const u_int);
555 extern int  arista_ethertype_print(netdissect_options *,const u_char *, u_int);
556 extern void arp_print(netdissect_options *, const u_char *, u_int, u_int);
557 extern void ascii_print(netdissect_options *, const u_char *, u_int);
558 extern void atalk_print(netdissect_options *, const u_char *, u_int);
559 extern void atm_print(netdissect_options *, u_int, u_int, u_int, const u_char *, u_int, u_int);
560 extern void babel_print(netdissect_options *, const u_char *, u_int);
561 extern void bcm_li_print(netdissect_options *, const u_char *, u_int);
562 extern void beep_print(netdissect_options *, const u_char *, u_int);
563 extern void bfd_print(netdissect_options *, const u_char *, u_int, u_int);
564 extern void bgp_print(netdissect_options *, const u_char *, u_int);
565 extern const char *bgp_vpn_rd_print(netdissect_options *, const u_char *);
566 extern void bootp_print(netdissect_options *, const u_char *, u_int);
567 extern void calm_fast_print(netdissect_options *, const u_char *, u_int, const struct lladdr_info *);
568 extern void carp_print(netdissect_options *, const u_char *, u_int, u_int);
569 extern void cdp_print(netdissect_options *, const u_char *, u_int);
570 extern void cfm_print(netdissect_options *, const u_char *, u_int);
571 extern u_int chdlc_print(netdissect_options *, const u_char *, u_int);
572 extern void cisco_autorp_print(netdissect_options *, const u_char *, u_int);
573 extern void cnfp_print(netdissect_options *, const u_char *);
574 extern void dccp_print(netdissect_options *, const u_char *, const u_char *, u_int);
575 extern void decnet_print(netdissect_options *, const u_char *, u_int, u_int);
576 extern void dhcp6_print(netdissect_options *, const u_char *, u_int);
577 extern int dstopt_process(netdissect_options *, const u_char *);
578 extern void dtp_print(netdissect_options *, const u_char *, u_int);
579 extern void dvmrp_print(netdissect_options *, const u_char *, u_int);
580 extern void eap_print(netdissect_options *, const u_char *, u_int);
581 extern void eapol_print(netdissect_options *, const u_char *);
582 extern void egp_print(netdissect_options *, const u_char *, u_int);
583 extern void eigrp_print(netdissect_options *, const u_char *, u_int);
584 extern void esp_print(netdissect_options *, const u_char *, u_int, const u_char *, u_int, int, u_int);
585 extern u_int ether_print(netdissect_options *, const u_char *, u_int, u_int, void (*)(netdissect_options *, const u_char *), const u_char *);
586 extern u_int ether_switch_tag_print(netdissect_options *, const u_char *, u_int, u_int, void (*)(netdissect_options *, const u_char *), u_int);
587 extern int ethertype_print(netdissect_options *, u_short, const u_char *, u_int, u_int, const struct lladdr_info *, const struct lladdr_info *);
588 extern u_int fddi_print(netdissect_options *, const u_char *, u_int, u_int);
589 extern void forces_print(netdissect_options *, const u_char *, u_int);
590 extern u_int fr_print(netdissect_options *, const u_char *, u_int);
591 extern int frag6_print(netdissect_options *, const u_char *, const u_char *);
592 extern void ftp_print(netdissect_options *, const u_char *, u_int);
593 extern void geneve_print(netdissect_options *, const u_char *, u_int);
594 extern void geonet_print(netdissect_options *, const u_char *, u_int, const struct lladdr_info *);
595 extern void gre_print(netdissect_options *, const u_char *, u_int);
596 extern int hbhopt_process(netdissect_options *, const u_char *, int *, uint32_t *);
597 extern void hex_and_ascii_print(netdissect_options *, const char *, const u_char *, u_int);
598 extern void hex_print(netdissect_options *, const char *ident, const u_char *cp, u_int);
599 extern void hex_print_with_offset(netdissect_options *, const char *ident, const u_char *cp, u_int, u_int);
600 extern void hncp_print(netdissect_options *, const u_char *, u_int);
601 extern void hsrp_print(netdissect_options *, const u_char *, u_int);
602 extern void http_print(netdissect_options *, const u_char *, u_int);
603 extern void icmp6_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
604 extern void icmp_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
605 extern u_int ieee802_15_4_print(netdissect_options *, const u_char *, u_int);
606 extern u_int ieee802_11_radio_print(netdissect_options *, const u_char *, u_int, u_int);
607 extern void igmp_print(netdissect_options *, const u_char *, u_int);
608 extern void igrp_print(netdissect_options *, const u_char *, u_int);
609 extern void ip6_print(netdissect_options *, const u_char *, u_int);
610 extern void ipN_print(netdissect_options *, const u_char *, u_int);
611 extern void ip_print(netdissect_options *, const u_char *, u_int);
612 extern void ipcomp_print(netdissect_options *, const u_char *);
613 extern void ipx_netbios_print(netdissect_options *, const u_char *, u_int);
614 extern void ipx_print(netdissect_options *, const u_char *, u_int);
615 extern void isakmp_print(netdissect_options *, const u_char *, u_int, const u_char *);
616 extern void isakmp_rfc3948_print(netdissect_options *, const u_char *, u_int, const u_char *, int, int, u_int);
617 extern void isoclns_print(netdissect_options *, const u_char *, u_int);
618 extern void krb_print(netdissect_options *, const u_char *);
619 extern void l2tp_print(netdissect_options *, const u_char *, u_int);
620 extern void lane_print(netdissect_options *, const u_char *, u_int, u_int);
621 extern void ldp_print(netdissect_options *, const u_char *, u_int);
622 extern void lisp_print(netdissect_options *, const u_char *, u_int);
623 extern u_int llap_print(netdissect_options *, const u_char *, u_int);
624 extern int llc_print(netdissect_options *, const u_char *, u_int, u_int, const struct lladdr_info *, const struct lladdr_info *);
625 extern void lldp_print(netdissect_options *, const u_char *, u_int);
626 extern void lmp_print(netdissect_options *, const u_char *, u_int);
627 extern void loopback_print(netdissect_options *, const u_char *, u_int);
628 extern void lspping_print(netdissect_options *, const u_char *, u_int);
629 extern void lwapp_control_print(netdissect_options *, const u_char *, u_int, int);
630 extern void lwapp_data_print(netdissect_options *, const u_char *, u_int);
631 extern void lwres_print(netdissect_options *, const u_char *, u_int);
632 extern void m3ua_print(netdissect_options *, const u_char *, const u_int);
633 extern int macsec_print(netdissect_options *, const u_char **,
634 			 u_int *, u_int *, u_int *, const struct lladdr_info *,
635 			 const struct lladdr_info *);
636 extern u_int mfr_print(netdissect_options *, const u_char *, u_int);
637 extern void mobile_print(netdissect_options *, const u_char *, u_int);
638 extern int mobility_print(netdissect_options *, const u_char *, const u_char *);
639 extern void mpcp_print(netdissect_options *, const u_char *, u_int);
640 extern void mpls_print(netdissect_options *, const u_char *, u_int);
641 extern int mptcp_print(netdissect_options *, const u_char *, u_int, u_char);
642 extern void msdp_print(netdissect_options *, const u_char *, u_int);
643 extern void msnlb_print(netdissect_options *, const u_char *);
644 extern void nbt_tcp_print(netdissect_options *, const u_char *, u_int);
645 extern void nbt_udp137_print(netdissect_options *, const u_char *, u_int);
646 extern void nbt_udp138_print(netdissect_options *, const u_char *, u_int);
647 extern void netbeui_print(netdissect_options *, u_short, const u_char *, u_int);
648 extern void nfsreply_print(netdissect_options *, const u_char *, u_int, const u_char *);
649 extern void nfsreply_noaddr_print(netdissect_options *, const u_char *, u_int, const u_char *);
650 extern void nfsreq_noaddr_print(netdissect_options *, const u_char *, u_int, const u_char *);
651 extern const u_char *fqdn_print(netdissect_options *, const u_char *, const u_char *);
652 extern void domain_print(netdissect_options *, const u_char *, u_int, int, int);
653 extern void nsh_print(netdissect_options *, const u_char *, u_int);
654 extern void ntp_print(netdissect_options *, const u_char *, u_int);
655 extern void oam_print(netdissect_options *, const u_char *, u_int, u_int);
656 extern void olsr_print(netdissect_options *, const u_char *, u_int, int);
657 extern void openflow_print(netdissect_options *, const u_char *, u_int);
658 extern void ospf6_print(netdissect_options *, const u_char *, u_int);
659 extern void ospf_print(netdissect_options *, const u_char *, u_int, const u_char *);
660 extern int ospf_grace_lsa_print(netdissect_options *, const u_char *, u_int);
661 extern int ospf_te_lsa_print(netdissect_options *, const u_char *, u_int);
662 extern void otv_print(netdissect_options *, const u_char *, u_int);
663 extern void pgm_print(netdissect_options *, const u_char *, u_int, const u_char *);
664 extern void pim_print(netdissect_options *, const u_char *, u_int, const u_char *);
665 extern void pimv1_print(netdissect_options *, const u_char *, u_int);
666 extern u_int ppp_print(netdissect_options *, const u_char *, u_int);
667 extern u_int pppoe_print(netdissect_options *, const u_char *, u_int);
668 extern void pptp_print(netdissect_options *, const u_char *);
669 extern void ptp_print(netdissect_options *, const u_char *, u_int);
670 extern int print_unknown_data(netdissect_options *, const u_char *, const char *, u_int);
671 extern const char *q922_string(netdissect_options *, const u_char *, u_int);
672 extern void q933_print(netdissect_options *, const u_char *, u_int);
673 extern void radius_print(netdissect_options *, const u_char *, u_int);
674 extern void resp_print(netdissect_options *, const u_char *, u_int);
675 extern void rip_print(netdissect_options *, const u_char *, u_int);
676 extern void ripng_print(netdissect_options *, const u_char *, unsigned int);
677 extern void rpki_rtr_print(netdissect_options *, const u_char *, u_int);
678 extern void rrcp_print(netdissect_options *, const u_char *, u_int, const struct lladdr_info *, const struct lladdr_info *);
679 extern void rsvp_print(netdissect_options *, const u_char *, u_int);
680 extern int rt6_print(netdissect_options *, const u_char *, const u_char *);
681 extern void rtsp_print(netdissect_options *, const u_char *, u_int);
682 extern void rx_print(netdissect_options *, const u_char *, u_int, uint16_t, uint16_t, const u_char *);
683 extern void sctp_print(netdissect_options *, const u_char *, const u_char *, u_int);
684 extern void sflow_print(netdissect_options *, const u_char *, u_int);
685 extern void ssh_print(netdissect_options *, const u_char *, u_int);
686 extern void sip_print(netdissect_options *, const u_char *, u_int);
687 extern void slow_print(netdissect_options *, const u_char *, u_int);
688 extern void smb_tcp_print(netdissect_options *, const u_char *, u_int);
689 extern void smtp_print(netdissect_options *, const u_char *, u_int);
690 extern int snap_print(netdissect_options *, const u_char *, u_int, u_int, const struct lladdr_info *, const struct lladdr_info *, u_int);
691 extern void snmp_print(netdissect_options *, const u_char *, u_int);
692 extern void stp_print(netdissect_options *, const u_char *, u_int);
693 extern void sunrpc_print(netdissect_options *, const u_char *, u_int, const u_char *);
694 extern void syslog_print(netdissect_options *, const u_char *, u_int);
695 extern void tcp_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
696 extern void telnet_print(netdissect_options *, const u_char *, u_int);
697 extern void tftp_print(netdissect_options *, const u_char *, u_int);
698 extern void timed_print(netdissect_options *, const u_char *);
699 extern void tipc_print(netdissect_options *, const u_char *, u_int, u_int);
700 extern u_int token_print(netdissect_options *, const u_char *, u_int, u_int);
701 extern void udld_print(netdissect_options *, const u_char *, u_int);
702 extern void udp_print(netdissect_options *, const u_char *, u_int, const u_char *, int, u_int);
703 extern int vjc_print(netdissect_options *, const u_char *, u_short);
704 extern void vqp_print(netdissect_options *, const u_char *, u_int);
705 extern void vrrp_print(netdissect_options *, const u_char *, u_int, const u_char *, int);
706 extern void vtp_print(netdissect_options *, const u_char *, const u_int);
707 extern void vxlan_gpe_print(netdissect_options *, const u_char *, u_int);
708 extern void vxlan_print(netdissect_options *, const u_char *, u_int);
709 extern void wb_print(netdissect_options *, const u_char *, u_int);
710 extern void zep_print(netdissect_options *, const u_char *, u_int);
711 extern void zephyr_print(netdissect_options *, const u_char *, u_int);
712 extern void zmtp1_print(netdissect_options *, const u_char *, u_int);
713 extern void zmtp1_datagram_print(netdissect_options *, const u_char *, const u_int);
714 extern void someip_print(netdissect_options *, const u_char *, const u_int);
715 
716 /* checksum routines */
717 extern void init_checksum(void);
718 extern uint16_t verify_crc10_cksum(uint16_t, const u_char *, int);
719 extern uint16_t create_osi_cksum(const uint8_t *, int, int);
720 
721 struct cksum_vec {
722 	const uint8_t	*ptr;
723 	int		len;
724 };
725 extern uint16_t in_cksum(const struct cksum_vec *, int);
726 extern uint16_t in_cksum_shouldbe(uint16_t, uint16_t);
727 
728 /* IP protocol demuxing routines */
729 extern void ip_demux_print(netdissect_options *, const u_char *, u_int, u_int, int, u_int, uint8_t, const u_char *);
730 
731 extern uint16_t nextproto4_cksum(netdissect_options *, const struct ip *, const uint8_t *, u_int, u_int, uint8_t);
732 
733 /* in print-ip6.c */
734 extern uint16_t nextproto6_cksum(netdissect_options *, const struct ip6_hdr *, const uint8_t *, u_int, u_int, uint8_t);
735 
736 /* Utilities */
737 extern void nd_print_trunc(netdissect_options *);
738 extern void nd_print_protocol(netdissect_options *);
739 extern void nd_print_protocol_caps(netdissect_options *);
740 extern void nd_print_invalid(netdissect_options *);
741 
742 extern int mask2plen(uint32_t);
743 extern int mask62plen(const u_char *);
744 
745 extern const char *dnnum_string(netdissect_options *, u_short);
746 
747 extern int decode_prefix4(netdissect_options *, const u_char *, u_int, char *, size_t);
748 extern int decode_prefix6(netdissect_options *, const u_char *, u_int, char *, size_t);
749 
750 extern void esp_decodesecret_print(netdissect_options *);
751 extern int esp_decrypt_buffer_by_ikev2_print(netdissect_options *, int,
752 					     const u_char spii[8],
753 					     const u_char spir[8],
754 					     const u_char *, const u_char *);
755 
756 #endif  /* netdissect_h */
757