2 * Copyright (c) 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
21 * Name to id translation routines used by the scanner.
22 * These functions are not time critical.
30 #include <sys/types.h>
31 #include <netdnet/dnetdb.h>
40 * To quote the MSDN page for getaddrinfo() at
42 * https://msdn.microsoft.com/en-us/library/windows/desktop/ms738520(v=vs.85).aspx
44 * "Support for getaddrinfo on Windows 2000 and older versions
45 * The getaddrinfo function was added to the Ws2_32.dll on Windows XP and
46 * later. To execute an application that uses this function on earlier
47 * versions of Windows, then you need to include the Ws2tcpip.h and
48 * Wspiapi.h files. When the Wspiapi.h include file is added, the
49 * getaddrinfo function is defined to the WspiapiGetAddrInfo inline
50 * function in the Wspiapi.h file. At runtime, the WspiapiGetAddrInfo
51 * function is implemented in such a way that if the Ws2_32.dll or the
52 * Wship6.dll (the file containing getaddrinfo in the IPv6 Technology
53 * Preview for Windows 2000) does not include getaddrinfo, then a
54 * version of getaddrinfo is implemented inline based on code in the
55 * Wspiapi.h header file. This inline code will be used on older Windows
56 * platforms that do not natively support the getaddrinfo function."
58 * We use getaddrinfo(), so we include Wspiapi.h here.
63 #include <sys/param.h>
64 #include <sys/types.h>
65 #include <sys/socket.h>
68 #include <netinet/in.h>
70 #ifdef HAVE_ETHER_HOSTTON
71 #if defined(NET_ETHERNET_H_DECLARES_ETHER_HOSTTON)
73 * OK, just include <net/ethernet.h>.
75 #include <net/ethernet.h>
76 #elif defined(NETINET_ETHER_H_DECLARES_ETHER_HOSTTON)
78 * OK, just include <netinet/ether.h>
80 #include <netinet/ether.h>
81 #elif defined(SYS_ETHERNET_H_DECLARES_ETHER_HOSTTON)
83 * OK, just include <sys/ethernet.h>
85 #include <sys/ethernet.h>
86 #elif defined(ARPA_INET_H_DECLARES_ETHER_HOSTTON)
88 * OK, just include <arpa/inet.h>
90 #include <arpa/inet.h>
91 #elif defined(NETINET_IF_ETHER_H_DECLARES_ETHER_HOSTTON)
93 * OK, include <netinet/if_ether.h>, after all the other stuff we
94 * need to include or define for its benefit.
96 #define NEED_NETINET_IF_ETHER_H
99 * We'll have to declare it ourselves.
100 * If <netinet/if_ether.h> defines struct ether_addr, include
101 * it. Otherwise, define it ourselves.
103 #ifdef HAVE_STRUCT_ETHER_ADDR
104 #define NEED_NETINET_IF_ETHER_H
105 #else /* HAVE_STRUCT_ETHER_ADDR */
107 unsigned char ether_addr_octet[6];
109 #endif /* HAVE_STRUCT_ETHER_ADDR */
110 #endif /* what declares ether_hostton() */
112 #ifdef NEED_NETINET_IF_ETHER_H
113 #include <net/if.h> /* Needed on some platforms */
114 #include <netinet/in.h> /* Needed on some platforms */
115 #include <netinet/if_ether.h>
116 #endif /* NEED_NETINET_IF_ETHER_H */
118 #ifndef HAVE_DECL_ETHER_HOSTTON
120 * No header declares it, so declare it ourselves.
122 extern int ether_hostton(const char *, struct ether_addr *);
123 #endif /* !defined(HAVE_DECL_ETHER_HOSTTON) */
124 #endif /* HAVE_ETHER_HOSTTON */
126 #include <arpa/inet.h>
135 #include "pcap-int.h"
137 #include "diag-control.h"
140 #include <pcap/namedb.h>
141 #include "nametoaddr.h"
143 #ifdef HAVE_OS_PROTO_H
144 #include "os-proto.h"
148 #define NTOHL(x) (x) = ntohl(x)
149 #define NTOHS(x) (x) = ntohs(x)
153 * Convert host name to internet address.
154 * Return 0 upon failure.
155 * XXX - not thread-safe; don't use it inside libpcap.
158 pcap_nametoaddr(const char *name)
161 static bpf_u_int32 *hlist[2];
167 * gethostbyname() is deprecated on Windows, perhaps because
168 * it's not thread-safe, or because it doesn't support IPv6,
171 * We deprecate pcap_nametoaddr() on all platforms because
172 * it's not thread-safe; we supply it for backwards compatibility,
173 * so suppress the deprecation warning. We could, I guess,
174 * use getaddrinfo() and construct the array ourselves, but
175 * that's probably not worth the effort, as that wouldn't make
176 * this thread-safe - we can't change the API to require that
177 * our caller free the address array, so we still have to reuse
181 if ((hp = gethostbyname(name)) != NULL) {
184 hlist[0] = (bpf_u_int32 *)hp->h_addr;
188 for (p = (bpf_u_int32 **)hp->h_addr_list; *p; ++p)
190 return (bpf_u_int32 **)hp->h_addr_list;
198 pcap_nametoaddrinfo(const char *name)
200 struct addrinfo hints, *res;
203 memset(&hints, 0, sizeof(hints));
204 hints.ai_family = PF_UNSPEC;
205 hints.ai_socktype = SOCK_STREAM; /*not really*/
206 hints.ai_protocol = IPPROTO_TCP; /*not really*/
207 error = getaddrinfo(name, NULL, &hints, &res);
215 * Convert net name to internet address.
216 * Return 0 upon failure.
217 * XXX - not guaranteed to be thread-safe! See below for platforms
218 * on which it is thread-safe and on which it isn't.
220 #if defined(_WIN32) || defined(__CYGWIN__)
222 pcap_nametonetaddr(const char *name _U_)
225 * There's no "getnetbyname()" on Windows.
227 * XXX - I guess we could use the BSD code to read
228 * C:\Windows\System32\drivers\etc/networks, assuming
229 * that's its home on all the versions of Windows
230 * we use, but that file probably just has the loopback
231 * network on 127/24 on 99 44/100% of Windows machines.
233 * (Heck, these days it probably just has that on 99 44/100%
234 * of *UN*X* machines.)
240 pcap_nametonetaddr(const char *name)
246 #if defined(HAVE_LINUX_GETNETBYNAME_R)
248 * We have Linux's reentrant getnetbyname_r().
250 struct netent result_buf;
251 char buf[1024]; /* arbitrary size */
256 * Apparently, the man page at
258 * http://man7.org/linux/man-pages/man3/getnetbyname_r.3.html
262 * If the function call successfully obtains a network record,
263 * then *result is set pointing to result_buf; otherwise, *result
266 * and, in fact, at least in some versions of GNU libc, it does
267 * *not* always get set if getnetbyname_r() succeeds.
270 err = getnetbyname_r(name, &result_buf, buf, sizeof buf, &np,
274 * XXX - dynamically allocate the buffer, and make it
275 * bigger if we get ERANGE back?
279 #elif defined(HAVE_SOLARIS_IRIX_GETNETBYNAME_R)
281 * We have Solaris's and IRIX's reentrant getnetbyname_r().
283 struct netent result_buf;
284 char buf[1024]; /* arbitrary size */
286 np = getnetbyname_r(name, &result_buf, buf, (int)sizeof buf);
287 #elif defined(HAVE_AIX_GETNETBYNAME_R)
289 * We have AIX's reentrant getnetbyname_r().
291 struct netent result_buf;
292 struct netent_data net_data;
294 if (getnetbyname_r(name, &result_buf, &net_data) == -1)
300 * We don't have any getnetbyname_r(); either we have a
301 * getnetbyname() that uses thread-specific data, in which
302 * case we're thread-safe (sufficiently recent FreeBSD,
303 * sufficiently recent Darwin-based OS, sufficiently recent
304 * HP-UX, sufficiently recent Tru64 UNIX), or we have the
305 * traditional getnetbyname() (everything else, including
306 * current NetBSD and OpenBSD), in which case we're not
309 np = getnetbyname(name);
319 * Convert a port name to its port and protocol numbers.
320 * We assume only TCP or UDP.
321 * Return 0 upon failure.
324 pcap_nametoport(const char *name, int *port, int *proto)
326 struct addrinfo hints, *res, *ai;
328 struct sockaddr_in *in4;
330 struct sockaddr_in6 *in6;
336 * We check for both TCP and UDP in case there are
339 memset(&hints, 0, sizeof(hints));
340 hints.ai_family = PF_UNSPEC;
341 hints.ai_socktype = SOCK_STREAM;
342 hints.ai_protocol = IPPROTO_TCP;
343 error = getaddrinfo(NULL, name, &hints, &res);
345 if (error != EAI_NONAME &&
346 error != EAI_SERVICE) {
348 * This is a real error, not just "there's
349 * no such service name".
350 * XXX - this doesn't return an error string.
356 * OK, we found it. Did it find anything?
358 for (ai = res; ai != NULL; ai = ai->ai_next) {
360 * Does it have an address?
362 if (ai->ai_addr != NULL) {
364 * Yes. Get a port number; we're done.
366 if (ai->ai_addr->sa_family == AF_INET) {
367 in4 = (struct sockaddr_in *)ai->ai_addr;
368 tcp_port = ntohs(in4->sin_port);
372 if (ai->ai_addr->sa_family == AF_INET6) {
373 in6 = (struct sockaddr_in6 *)ai->ai_addr;
374 tcp_port = ntohs(in6->sin6_port);
383 memset(&hints, 0, sizeof(hints));
384 hints.ai_family = PF_UNSPEC;
385 hints.ai_socktype = SOCK_DGRAM;
386 hints.ai_protocol = IPPROTO_UDP;
387 error = getaddrinfo(NULL, name, &hints, &res);
389 if (error != EAI_NONAME &&
390 error != EAI_SERVICE) {
392 * This is a real error, not just "there's
393 * no such service name".
394 * XXX - this doesn't return an error string.
400 * OK, we found it. Did it find anything?
402 for (ai = res; ai != NULL; ai = ai->ai_next) {
404 * Does it have an address?
406 if (ai->ai_addr != NULL) {
408 * Yes. Get a port number; we're done.
410 if (ai->ai_addr->sa_family == AF_INET) {
411 in4 = (struct sockaddr_in *)ai->ai_addr;
412 udp_port = ntohs(in4->sin_port);
416 if (ai->ai_addr->sa_family == AF_INET6) {
417 in6 = (struct sockaddr_in6 *)ai->ai_addr;
418 udp_port = ntohs(in6->sin6_port);
428 * We need to check /etc/services for ambiguous entries.
429 * If we find an ambiguous entry, and it has the
430 * same port number, change the proto to PROTO_UNDEF
431 * so both TCP and UDP will be checked.
435 *proto = IPPROTO_TCP;
437 if (udp_port == tcp_port)
438 *proto = PROTO_UNDEF;
441 /* Can't handle ambiguous names that refer
442 to different port numbers. */
443 warning("ambiguous port %s in /etc/services",
451 *proto = IPPROTO_UDP;
454 #if defined(ultrix) || defined(__osf__)
455 /* Special hack in case NFS isn't in /etc/services */
456 if (strcmp(name, "nfs") == 0) {
458 *proto = PROTO_UNDEF;
466 * Convert a string in the form PPP-PPP, where correspond to ports, to
467 * a starting and ending port in a port range.
468 * Return 0 on failure.
471 pcap_nametoportrange(const char *name, int *port1, int *port2, int *proto)
477 if (sscanf(name, "%d-%d", &p1, &p2) != 2) {
478 if ((cpy = strdup(name)) == NULL)
481 if ((off = strchr(cpy, '-')) == NULL) {
488 if (pcap_nametoport(cpy, port1, proto) == 0) {
494 if (pcap_nametoport(off + 1, port2, proto) == 0) {
500 if (*proto != save_proto)
501 *proto = PROTO_UNDEF;
505 *proto = PROTO_UNDEF;
512 * XXX - not guaranteed to be thread-safe! See below for platforms
513 * on which it is thread-safe and on which it isn't.
516 pcap_nametoproto(const char *str)
519 #if defined(HAVE_LINUX_GETNETBYNAME_R)
521 * We have Linux's reentrant getprotobyname_r().
523 struct protoent result_buf;
524 char buf[1024]; /* arbitrary size */
527 err = getprotobyname_r(str, &result_buf, buf, sizeof buf, &p);
530 * XXX - dynamically allocate the buffer, and make it
531 * bigger if we get ERANGE back?
535 #elif defined(HAVE_SOLARIS_IRIX_GETNETBYNAME_R)
537 * We have Solaris's and IRIX's reentrant getprotobyname_r().
539 struct protoent result_buf;
540 char buf[1024]; /* arbitrary size */
542 p = getprotobyname_r(str, &result_buf, buf, (int)sizeof buf);
543 #elif defined(HAVE_AIX_GETNETBYNAME_R)
545 * We have AIX's reentrant getprotobyname_r().
547 struct protoent result_buf;
548 struct protoent_data proto_data;
550 if (getprotobyname_r(str, &result_buf, &proto_data) == -1)
556 * We don't have any getprotobyname_r(); either we have a
557 * getprotobyname() that uses thread-specific data, in which
558 * case we're thread-safe (sufficiently recent FreeBSD,
559 * sufficiently recent Darwin-based OS, sufficiently recent
560 * HP-UX, sufficiently recent Tru64 UNIX, Windows), or we have
561 * the traditional getprotobyname() (everything else, including
562 * current NetBSD and OpenBSD), in which case we're not
565 p = getprotobyname(str);
573 #include "ethertype.h"
581 * Static data base of ether protocol types.
582 * tcpdump used to import this, and it's declared as an export on
583 * Debian, at least, so make it a public symbol, even though we
584 * don't officially export it by declaring it in a header file.
585 * (Programs *should* do this themselves, as tcpdump now does.)
587 * We declare it here, right before defining it, to squelch any
588 * warnings we might get from compilers about the lack of a
591 PCAP_API struct eproto eproto_db[];
592 PCAP_API_DEF struct eproto eproto_db[] = {
593 { "aarp", ETHERTYPE_AARP },
594 { "arp", ETHERTYPE_ARP },
595 { "atalk", ETHERTYPE_ATALK },
596 { "decnet", ETHERTYPE_DN },
597 { "ip", ETHERTYPE_IP },
599 { "ip6", ETHERTYPE_IPV6 },
601 { "lat", ETHERTYPE_LAT },
602 { "loopback", ETHERTYPE_LOOPBACK },
603 { "mopdl", ETHERTYPE_MOPDL },
604 { "moprc", ETHERTYPE_MOPRC },
605 { "rarp", ETHERTYPE_REVARP },
606 { "sca", ETHERTYPE_SCA },
611 pcap_nametoeproto(const char *s)
613 struct eproto *p = eproto_db;
616 if (strcmp(p->s, s) == 0)
625 /* Static data base of LLC values. */
626 static struct eproto llc_db[] = {
627 { "iso", LLCSAP_ISONS },
628 { "stp", LLCSAP_8021D },
629 { "ipx", LLCSAP_IPX },
630 { "netbeui", LLCSAP_NETBEUI },
635 pcap_nametollc(const char *s)
637 struct eproto *p = llc_db;
640 if (strcmp(p->s, s) == 0)
647 /* Hex digit to 8-bit unsigned integer. */
651 if (c >= '0' && c <= '9')
652 return (u_char)(c - '0');
653 else if (c >= 'a' && c <= 'f')
654 return (u_char)(c - 'a' + 10);
656 return (u_char)(c - 'A' + 10);
660 __pcap_atoin(const char *s, bpf_u_int32 *addr)
669 while (*s && *s != '.') {
671 /* The result will be > 255 */
674 n = n * 10 + *s++ - '0';
689 __pcap_atodn(const char *s, bpf_u_int32 *addr)
692 #define AREAMASK 0176000
693 #define NODEMASK 01777
697 if (sscanf(s, "%d.%d", &area, &node) != 2)
700 *addr = (area << AREASHIFT) & AREAMASK;
701 *addr |= (node & NODEMASK);
707 * Convert 's', which can have the one of the forms:
709 * "xx:xx:xx:xx:xx:xx"
710 * "xx.xx.xx.xx.xx.xx"
711 * "xx-xx-xx-xx-xx-xx"
715 * (or various mixes of ':', '.', and '-') into a new
716 * ethernet address. Assumes 's' is well formed.
719 pcap_ether_aton(const char *s)
721 register u_char *ep, *e;
724 e = ep = (u_char *)malloc(6);
729 if (*s == ':' || *s == '.' || *s == '-')
732 if (PCAP_ISXDIGIT(*s)) {
742 #ifndef HAVE_ETHER_HOSTTON
745 * XXX - not thread-safe, because pcap_next_etherent() isn't thread-
746 * safe! Needs a mutex or a thread-safe pcap_next_etherent().
749 pcap_ether_hostton(const char *name)
751 register struct pcap_etherent *ep;
753 static FILE *fp = NULL;
757 fp = fopen(PCAP_ETHERS_FILE, "r");
761 } else if (fp == NULL)
766 while ((ep = pcap_next_etherent(fp)) != NULL) {
767 if (strcmp(ep->name, name) == 0) {
768 ap = (u_char *)malloc(6);
770 memcpy(ap, ep->addr, 6);
780 * Use the OS-supplied routine.
781 * This *should* be thread-safe; the API doesn't have a static buffer.
784 pcap_ether_hostton(const char *name)
791 * In AIX 7.1 and 7.2: int ether_hostton(char *, struct ether_addr *);
793 pcap_strlcpy(namebuf, name, sizeof(namebuf));
795 if (ether_hostton(namebuf, (struct ether_addr *)a) == 0) {
796 ap = (u_char *)malloc(6);
798 memcpy((char *)ap, (char *)a, 6);
805 * XXX - not guaranteed to be thread-safe!
809 __pcap_nametodnaddr(const char *name, u_short *res)
811 struct nodeent *getnodebyname();
814 nep = getnodebyname(name);
815 if (nep == ((struct nodeent *)0))
818 memcpy((char *)res, (char *)nep->n_addr, sizeof(unsigned short));
821 __pcap_nametodnaddr(const char *name _U_, u_short *res _U_)