2 * Copyright (c) 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
21 * Name to id translation routines used by the scanner.
22 * These functions are not time critical.
30 #include <sys/types.h>
31 #include <netdnet/dnetdb.h>
40 * To quote the MSDN page for getaddrinfo() at
42 * https://msdn.microsoft.com/en-us/library/windows/desktop/ms738520(v=vs.85).aspx
44 * "Support for getaddrinfo on Windows 2000 and older versions
45 * The getaddrinfo function was added to the Ws2_32.dll on Windows XP and
46 * later. To execute an application that uses this function on earlier
47 * versions of Windows, then you need to include the Ws2tcpip.h and
48 * Wspiapi.h files. When the Wspiapi.h include file is added, the
49 * getaddrinfo function is defined to the WspiapiGetAddrInfo inline
50 * function in the Wspiapi.h file. At runtime, the WspiapiGetAddrInfo
51 * function is implemented in such a way that if the Ws2_32.dll or the
52 * Wship6.dll (the file containing getaddrinfo in the IPv6 Technology
53 * Preview for Windows 2000) does not include getaddrinfo, then a
54 * version of getaddrinfo is implemented inline based on code in the
55 * Wspiapi.h header file. This inline code will be used on older Windows
56 * platforms that do not natively support the getaddrinfo function."
58 * We use getaddrinfo(), so we include Wspiapi.h here.
63 #include <sys/param.h>
64 #include <sys/types.h>
65 #include <sys/socket.h>
68 #include <netinet/in.h>
70 #ifdef HAVE_ETHER_HOSTTON
71 #if defined(NET_ETHERNET_H_DECLARES_ETHER_HOSTTON)
73 * OK, just include <net/ethernet.h>.
75 #include <net/ethernet.h>
76 #elif defined(NETINET_ETHER_H_DECLARES_ETHER_HOSTTON)
78 * OK, just include <netinet/ether.h>
80 #include <netinet/ether.h>
81 #elif defined(SYS_ETHERNET_H_DECLARES_ETHER_HOSTTON)
83 * OK, just include <sys/ethernet.h>
85 #include <sys/ethernet.h>
86 #elif defined(ARPA_INET_H_DECLARES_ETHER_HOSTTON)
88 * OK, just include <arpa/inet.h>
90 #include <arpa/inet.h>
91 #elif defined(NETINET_IF_ETHER_H_DECLARES_ETHER_HOSTTON)
93 * OK, include <netinet/if_ether.h>, after all the other stuff we
94 * need to include or define for its benefit.
96 #define NEED_NETINET_IF_ETHER_H
99 * We'll have to declare it ourselves.
100 * If <netinet/if_ether.h> defines struct ether_addr, include
101 * it. Otherwise, define it ourselves.
103 #ifdef HAVE_STRUCT_ETHER_ADDR
104 #define NEED_NETINET_IF_ETHER_H
105 #else /* HAVE_STRUCT_ETHER_ADDR */
107 unsigned char ether_addr_octet[6];
109 #endif /* HAVE_STRUCT_ETHER_ADDR */
110 #endif /* what declares ether_hostton() */
112 #ifdef NEED_NETINET_IF_ETHER_H
113 #include <net/if.h> /* Needed on some platforms */
114 #include <netinet/in.h> /* Needed on some platforms */
115 #include <netinet/if_ether.h>
116 #endif /* NEED_NETINET_IF_ETHER_H */
118 #ifndef HAVE_DECL_ETHER_HOSTTON
120 * No header declares it, so declare it ourselves.
122 extern int ether_hostton(const char *, struct ether_addr *);
123 #endif /* !defined(HAVE_DECL_ETHER_HOSTTON) */
124 #endif /* HAVE_ETHER_HOSTTON */
126 #include <arpa/inet.h>
136 #include "pcap-int.h"
139 #include <pcap/namedb.h>
140 #include "nametoaddr.h"
142 #ifdef HAVE_OS_PROTO_H
143 #include "os-proto.h"
147 #define NTOHL(x) (x) = ntohl(x)
148 #define NTOHS(x) (x) = ntohs(x)
152 * Convert host name to internet address.
153 * Return 0 upon failure.
154 * XXX - not thread-safe; don't use it inside libpcap.
157 pcap_nametoaddr(const char *name)
160 static bpf_u_int32 *hlist[2];
165 if ((hp = gethostbyname(name)) != NULL) {
167 hlist[0] = (bpf_u_int32 *)hp->h_addr;
171 for (p = (bpf_u_int32 **)hp->h_addr_list; *p; ++p)
173 return (bpf_u_int32 **)hp->h_addr_list;
181 pcap_nametoaddrinfo(const char *name)
183 struct addrinfo hints, *res;
186 memset(&hints, 0, sizeof(hints));
187 hints.ai_family = PF_UNSPEC;
188 hints.ai_socktype = SOCK_STREAM; /*not really*/
189 hints.ai_protocol = IPPROTO_TCP; /*not really*/
190 error = getaddrinfo(name, NULL, &hints, &res);
198 * Convert net name to internet address.
199 * Return 0 upon failure.
200 * XXX - not guaranteed to be thread-safe! See below for platforms
201 * on which it is thread-safe and on which it isn't.
204 pcap_nametonetaddr(const char *name)
208 * There's no "getnetbyname()" on Windows.
210 * XXX - I guess we could use the BSD code to read
211 * C:\Windows\System32\drivers\etc/networks, assuming
212 * that's its home on all the versions of Windows
213 * we use, but that file probably just has the loopback
214 * network on 127/24 on 99 44/100% of Windows machines.
216 * (Heck, these days it probably just has that on 99 44/100%
217 * of *UN*X* machines.)
225 #if defined(HAVE_LINUX_GETNETBYNAME_R)
227 * We have Linux's reentrant getnetbyname_r().
229 struct netent result_buf;
230 char buf[1024]; /* arbitrary size */
234 err = getnetbyname_r(name, &result_buf, buf, sizeof buf, &np,
238 * XXX - dynamically allocate the buffer, and make it
239 * bigger if we get ERANGE back?
243 #elif defined(HAVE_SOLARIS_IRIX_GETNETBYNAME_R)
245 * We have Solaris's and IRIX's reentrant getnetbyname_r().
247 struct netent result_buf;
248 char buf[1024]; /* arbitrary size */
250 np = getnetbyname_r(name, &result_buf, buf, (int)sizeof buf);
251 #elif defined(HAVE_AIX_GETNETBYNAME_R)
253 * We have AIX's reentrant getnetbyname_r().
255 struct netent result_buf;
256 struct netent_data net_data;
258 if (getnetbyname_r(name, &result_buf, &net_data) == -1)
264 * We don't have any getnetbyname_r(); either we have a
265 * getnetbyname() that uses thread-specific data, in which
266 * case we're thread-safe (sufficiently recent FreeBSD,
267 * sufficiently recent Darwin-based OS, sufficiently recent
268 * HP-UX, sufficiently recent Tru64 UNIX), or we have the
269 * traditional getnetbyname() (everything else, including
270 * current NetBSD and OpenBSD), in which case we're not
273 np = getnetbyname(name);
283 * Convert a port name to its port and protocol numbers.
284 * We assume only TCP or UDP.
285 * Return 0 upon failure.
288 pcap_nametoport(const char *name, int *port, int *proto)
290 struct addrinfo hints, *res, *ai;
292 struct sockaddr_in *in4;
294 struct sockaddr_in6 *in6;
300 * We check for both TCP and UDP in case there are
303 memset(&hints, 0, sizeof(hints));
304 hints.ai_family = PF_UNSPEC;
305 hints.ai_socktype = SOCK_STREAM;
306 hints.ai_protocol = IPPROTO_TCP;
307 error = getaddrinfo(NULL, name, &hints, &res);
309 if (error != EAI_NONAME) {
311 * This is a real error, not just "there's
312 * no such service name".
313 * XXX - this doesn't return an error string.
319 * OK, we found it. Did it find anything?
321 for (ai = res; ai != NULL; ai = ai->ai_next) {
323 * Does it have an address?
325 if (ai->ai_addr != NULL) {
327 * Yes. Get a port number; we're done.
329 if (ai->ai_addr->sa_family == AF_INET) {
330 in4 = (struct sockaddr_in *)ai->ai_addr;
331 tcp_port = ntohs(in4->sin_port);
335 if (ai->ai_addr->sa_family == AF_INET6) {
336 in6 = (struct sockaddr_in6 *)ai->ai_addr;
337 tcp_port = ntohs(in6->sin6_port);
346 memset(&hints, 0, sizeof(hints));
347 hints.ai_family = PF_UNSPEC;
348 hints.ai_socktype = SOCK_DGRAM;
349 hints.ai_protocol = IPPROTO_UDP;
350 error = getaddrinfo(NULL, name, &hints, &res);
352 if (error != EAI_NONAME) {
354 * This is a real error, not just "there's
355 * no such service name".
356 * XXX - this doesn't return an error string.
362 * OK, we found it. Did it find anything?
364 for (ai = res; ai != NULL; ai = ai->ai_next) {
366 * Does it have an address?
368 if (ai->ai_addr != NULL) {
370 * Yes. Get a port number; we're done.
372 if (ai->ai_addr->sa_family == AF_INET) {
373 in4 = (struct sockaddr_in *)ai->ai_addr;
374 udp_port = ntohs(in4->sin_port);
378 if (ai->ai_addr->sa_family == AF_INET6) {
379 in6 = (struct sockaddr_in6 *)ai->ai_addr;
380 udp_port = ntohs(in6->sin6_port);
390 * We need to check /etc/services for ambiguous entries.
391 * If we find an ambiguous entry, and it has the
392 * same port number, change the proto to PROTO_UNDEF
393 * so both TCP and UDP will be checked.
397 *proto = IPPROTO_TCP;
399 if (udp_port == tcp_port)
400 *proto = PROTO_UNDEF;
403 /* Can't handle ambiguous names that refer
404 to different port numbers. */
405 warning("ambiguous port %s in /etc/services",
413 *proto = IPPROTO_UDP;
416 #if defined(ultrix) || defined(__osf__)
417 /* Special hack in case NFS isn't in /etc/services */
418 if (strcmp(name, "nfs") == 0) {
420 *proto = PROTO_UNDEF;
428 * Convert a string in the form PPP-PPP, where correspond to ports, to
429 * a starting and ending port in a port range.
430 * Return 0 on failure.
433 pcap_nametoportrange(const char *name, int *port1, int *port2, int *proto)
439 if (sscanf(name, "%d-%d", &p1, &p2) != 2) {
440 if ((cpy = strdup(name)) == NULL)
443 if ((off = strchr(cpy, '-')) == NULL) {
450 if (pcap_nametoport(cpy, port1, proto) == 0) {
456 if (pcap_nametoport(off + 1, port2, proto) == 0) {
462 if (*proto != save_proto)
463 *proto = PROTO_UNDEF;
467 *proto = PROTO_UNDEF;
474 * XXX - not guaranteed to be thread-safe! See below for platforms
475 * on which it is thread-safe and on which it isn't.
478 pcap_nametoproto(const char *str)
481 #if defined(HAVE_LINUX_GETNETBYNAME_R)
483 * We have Linux's reentrant getprotobyname_r().
485 struct protoent result_buf;
486 char buf[1024]; /* arbitrary size */
489 err = getprotobyname_r(str, &result_buf, buf, sizeof buf, &p);
492 * XXX - dynamically allocate the buffer, and make it
493 * bigger if we get ERANGE back?
497 #elif defined(HAVE_SOLARIS_IRIX_GETNETBYNAME_R)
499 * We have Solaris's and IRIX's reentrant getprotobyname_r().
501 struct protoent result_buf;
502 char buf[1024]; /* arbitrary size */
504 p = getprotobyname_r(str, &result_buf, buf, (int)sizeof buf);
505 #elif defined(HAVE_AIX_GETNETBYNAME_R)
507 * We have AIX's reentrant getprotobyname_r().
509 struct protoent result_buf;
510 struct protoent_data proto_data;
512 if (getprotobyname_r(str, &result_buf, &proto_data) == -1)
518 * We don't have any getprotobyname_r(); either we have a
519 * getprotobyname() that uses thread-specific data, in which
520 * case we're thread-safe (sufficiently recent FreeBSD,
521 * sufficiently recent Darwin-based OS, sufficiently recent
522 * HP-UX, sufficiently recent Tru64 UNIX, Windows), or we have
523 * the traditional getprotobyname() (everything else, including
524 * current NetBSD and OpenBSD), in which case we're not
527 p = getprotobyname(str);
535 #include "ethertype.h"
543 * Static data base of ether protocol types.
544 * tcpdump used to import this, and it's declared as an export on
545 * Debian, at least, so make it a public symbol, even though we
546 * don't officially export it by declaring it in a header file.
547 * (Programs *should* do this themselves, as tcpdump now does.)
549 * We declare it here, right before defining it, to squelch any
550 * warnings we might get from compilers about the lack of a
553 PCAP_API struct eproto eproto_db[];
554 PCAP_API_DEF struct eproto eproto_db[] = {
555 { "pup", ETHERTYPE_PUP },
556 { "xns", ETHERTYPE_NS },
557 { "ip", ETHERTYPE_IP },
559 { "ip6", ETHERTYPE_IPV6 },
561 { "arp", ETHERTYPE_ARP },
562 { "rarp", ETHERTYPE_REVARP },
563 { "sprite", ETHERTYPE_SPRITE },
564 { "mopdl", ETHERTYPE_MOPDL },
565 { "moprc", ETHERTYPE_MOPRC },
566 { "decnet", ETHERTYPE_DN },
567 { "lat", ETHERTYPE_LAT },
568 { "sca", ETHERTYPE_SCA },
569 { "lanbridge", ETHERTYPE_LANBRIDGE },
570 { "vexp", ETHERTYPE_VEXP },
571 { "vprod", ETHERTYPE_VPROD },
572 { "atalk", ETHERTYPE_ATALK },
573 { "atalkarp", ETHERTYPE_AARP },
574 { "loopback", ETHERTYPE_LOOPBACK },
575 { "decdts", ETHERTYPE_DECDTS },
576 { "decdns", ETHERTYPE_DECDNS },
581 pcap_nametoeproto(const char *s)
583 struct eproto *p = eproto_db;
586 if (strcmp(p->s, s) == 0)
595 /* Static data base of LLC values. */
596 static struct eproto llc_db[] = {
597 { "iso", LLCSAP_ISONS },
598 { "stp", LLCSAP_8021D },
599 { "ipx", LLCSAP_IPX },
600 { "netbeui", LLCSAP_NETBEUI },
605 pcap_nametollc(const char *s)
607 struct eproto *p = llc_db;
610 if (strcmp(p->s, s) == 0)
617 /* Hex digit to 8-bit unsigned integer. */
622 return (u_char)(c - '0');
624 return (u_char)(c - 'a' + 10);
626 return (u_char)(c - 'A' + 10);
630 __pcap_atoin(const char *s, bpf_u_int32 *addr)
639 while (*s && *s != '.')
640 n = n * 10 + *s++ - '0';
652 __pcap_atodn(const char *s, bpf_u_int32 *addr)
655 #define AREAMASK 0176000
656 #define NODEMASK 01777
660 if (sscanf(s, "%d.%d", &area, &node) != 2)
663 *addr = (area << AREASHIFT) & AREAMASK;
664 *addr |= (node & NODEMASK);
670 * Convert 's', which can have the one of the forms:
672 * "xx:xx:xx:xx:xx:xx"
673 * "xx.xx.xx.xx.xx.xx"
674 * "xx-xx-xx-xx-xx-xx"
678 * (or various mixes of ':', '.', and '-') into a new
679 * ethernet address. Assumes 's' is well formed.
682 pcap_ether_aton(const char *s)
684 register u_char *ep, *e;
687 e = ep = (u_char *)malloc(6);
692 if (*s == ':' || *s == '.' || *s == '-')
695 if (isxdigit((unsigned char)*s)) {
705 #ifndef HAVE_ETHER_HOSTTON
708 * XXX - not thread-safe, because pcap_next_etherent() isn't thread-
709 * safe! Needs a mutex or a thread-safe pcap_next_etherent().
712 pcap_ether_hostton(const char *name)
714 register struct pcap_etherent *ep;
716 static FILE *fp = NULL;
720 fp = fopen(PCAP_ETHERS_FILE, "r");
724 } else if (fp == NULL)
729 while ((ep = pcap_next_etherent(fp)) != NULL) {
730 if (strcmp(ep->name, name) == 0) {
731 ap = (u_char *)malloc(6);
733 memcpy(ap, ep->addr, 6);
743 * Use the OS-supplied routine.
744 * This *should* be thread-safe; the API doesn't have a static buffer.
747 pcap_ether_hostton(const char *name)
753 if (ether_hostton(name, (struct ether_addr *)a) == 0) {
754 ap = (u_char *)malloc(6);
756 memcpy((char *)ap, (char *)a, 6);
763 * XXX - not guaranteed to be thread-safe!
767 __pcap_nametodnaddr(const char *name, u_short *res)
769 struct nodeent *getnodebyname();
772 nep = getnodebyname(name);
773 if (nep == ((struct nodeent *)0))
776 memcpy((char *)res, (char *)nep->n_addr, sizeof(unsigned short));
779 __pcap_nametodnaddr(const char *name _U_, u_short *res _U_)