2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
21 * From: NetBSD: print-arcnet.c,v 1.2 2000/04/24 13:02:28 itojun Exp
24 #define NETDISSECT_REWORKED
29 #include <tcpdump-stdinc.h>
31 #include "interface.h"
35 * from: NetBSD: if_arc.h,v 1.13 1999/11/19 20:41:19 thorpej Exp
39 * Structure of a 2.5MB/s Arcnet header on the BSDs,
40 * as given to interface code.
47 * only present for newstyle encoding with LL fragmentation.
48 * Don't use sizeof(anything), use ARC_HDR{,NEW}LEN instead.
54 * only present in exception packets (arc_flag == 0xff)
56 uint8_t arc_type2; /* same as arc_type */
57 uint8_t arc_flag2; /* real flag value */
58 uint16_t arc_seqid2; /* real seqid value */
62 #define ARC_HDRNEWLEN 6
63 #define ARC_HDRNEWLEN_EXC 10
66 #define ARCTYPE_IP_OLD 240 /* IP protocol */
67 #define ARCTYPE_ARP_OLD 241 /* address resolution protocol */
70 #define ARCTYPE_IP 212 /* IP protocol */
71 #define ARCTYPE_ARP 213 /* address resolution protocol */
72 #define ARCTYPE_REVARP 214 /* reverse addr resolution protocol */
74 #define ARCTYPE_ATALK 221 /* Appletalk */
75 #define ARCTYPE_BANIAN 247 /* Banyan Vines */
76 #define ARCTYPE_IPX 250 /* Novell IPX */
78 #define ARCTYPE_INET6 0xc4 /* IPng */
79 #define ARCTYPE_DIAGNOSE 0x80 /* as per ANSI/ATA 878.1 */
82 * Structure of a 2.5MB/s Arcnet header on Linux. Linux has
83 * an extra "offset" field when given to interface code, and
84 * never presents packets that look like exception frames.
86 struct arc_linux_header {
92 * only present for newstyle encoding with LL fragmentation.
93 * Don't use sizeof(anything), use ARC_LINUX_HDR{,NEW}LEN
100 #define ARC_LINUX_HDRLEN 5
101 #define ARC_LINUX_HDRNEWLEN 8
103 static int arcnet_encap_print(netdissect_options *, u_char arctype, const u_char *p,
104 u_int length, u_int caplen);
106 static const struct tok arctypemap[] = {
107 { ARCTYPE_IP_OLD, "oldip" },
108 { ARCTYPE_ARP_OLD, "oldarp" },
109 { ARCTYPE_IP, "ip" },
110 { ARCTYPE_ARP, "arp" },
111 { ARCTYPE_REVARP, "rarp" },
112 { ARCTYPE_ATALK, "atalk" },
113 { ARCTYPE_BANIAN, "banyan" },
114 { ARCTYPE_IPX, "ipx" },
115 { ARCTYPE_INET6, "ipv6" },
116 { ARCTYPE_DIAGNOSE, "diag" },
121 arcnet_print(netdissect_options *ndo, const u_char *bp, u_int length, int phds,
122 int flag, u_int seqid)
124 const struct arc_header *ap;
125 const char *arctypename;
128 ap = (const struct arc_header *)bp;
131 if (ndo->ndo_qflag) {
132 ND_PRINT((ndo, "%02x %02x %d: ",
139 arctypename = tok2str(arctypemap, "%02x", ap->arc_type);
142 ND_PRINT((ndo, "%02x %02x %s %d: ",
143 ap->arc_shost, ap->arc_dhost, arctypename,
149 ND_PRINT((ndo, "%02x %02x %s seqid %04x %d: ",
150 ap->arc_shost, ap->arc_dhost, arctypename, seqid,
156 ND_PRINT((ndo, "%02x %02x %s seqid %04x "
157 "(first of %d fragments) %d: ",
158 ap->arc_shost, ap->arc_dhost, arctypename, seqid,
159 (flag + 3) / 2, length));
161 ND_PRINT((ndo, "%02x %02x %s seqid %04x "
162 "(fragment %d) %d: ",
163 ap->arc_shost, ap->arc_dhost, arctypename, seqid,
164 flag/2 + 1, length));
168 * This is the top level routine of the printer. 'p' points
169 * to the ARCNET header of the packet, 'h->ts' is the timestamp,
170 * 'h->len' is the length of the packet off the wire, and 'h->caplen'
171 * is the number of bytes actually captured.
174 arcnet_if_print(netdissect_options *ndo, const struct pcap_pkthdr *h, const u_char *p)
176 u_int caplen = h->caplen;
177 u_int length = h->len;
178 const struct arc_header *ap;
180 int phds, flag = 0, archdrlen = 0;
184 if (caplen < ARC_HDRLEN) {
185 ND_PRINT((ndo, "[|arcnet]"));
189 ap = (const struct arc_header *)p;
190 arc_type = ap->arc_type;
197 case ARCTYPE_ARP_OLD:
198 case ARCTYPE_DIAGNOSE:
200 archdrlen = ARC_HDRLEN;
205 if (caplen < ARC_HDRNEWLEN) {
206 arcnet_print(ndo, p, length, 0, 0, 0);
207 ND_PRINT((ndo, "[|phds]"));
211 if (ap->arc_flag == 0xff) {
212 if (caplen < ARC_HDRNEWLEN_EXC) {
213 arcnet_print(ndo, p, length, 0, 0, 0);
214 ND_PRINT((ndo, "[|phds extended]"));
217 flag = ap->arc_flag2;
218 seqid = EXTRACT_16BITS(&ap->arc_seqid2);
219 archdrlen = ARC_HDRNEWLEN_EXC;
222 seqid = EXTRACT_16BITS(&ap->arc_seqid);
223 archdrlen = ARC_HDRNEWLEN;
229 arcnet_print(ndo, p, length, phds, flag, seqid);
232 * Go past the ARCNET header.
238 if (phds && flag && (flag & 1) == 0) {
240 * This is a middle fragment.
245 if (!arcnet_encap_print(ndo, arc_type, p, length, caplen))
246 ND_DEFAULTPRINT(p, caplen);
252 * This is the top level routine of the printer. 'p' points
253 * to the ARCNET header of the packet, 'h->ts' is the timestamp,
254 * 'h->len' is the length of the packet off the wire, and 'h->caplen'
255 * is the number of bytes actually captured. It is quite similar
256 * to the non-Linux style printer except that Linux doesn't ever
257 * supply packets that look like exception frames, it always supplies
258 * reassembled packets rather than raw frames, and headers have an
259 * extra "offset" field between the src/dest and packet type.
262 arcnet_linux_if_print(netdissect_options *ndo, const struct pcap_pkthdr *h, const u_char *p)
264 u_int caplen = h->caplen;
265 u_int length = h->len;
266 const struct arc_linux_header *ap;
271 if (caplen < ARC_LINUX_HDRLEN) {
272 ND_PRINT((ndo, "[|arcnet]"));
276 ap = (const struct arc_linux_header *)p;
277 arc_type = ap->arc_type;
281 archdrlen = ARC_LINUX_HDRNEWLEN;
282 if (caplen < ARC_LINUX_HDRNEWLEN) {
283 ND_PRINT((ndo, "[|arcnet]"));
288 case ARCTYPE_ARP_OLD:
289 case ARCTYPE_DIAGNOSE:
290 archdrlen = ARC_LINUX_HDRLEN;
295 arcnet_print(ndo, p, length, 0, 0, 0);
298 * Go past the ARCNET header.
304 if (!arcnet_encap_print(ndo, arc_type, p, length, caplen))
305 ND_DEFAULTPRINT(p, caplen);
311 * Prints the packet encapsulated in an ARCnet data field,
312 * given the ARCnet system code.
314 * Returns non-zero if it can do so, zero if the system code is unknown.
319 arcnet_encap_print(netdissect_options *ndo, u_char arctype, const u_char *p,
320 u_int length, u_int caplen)
326 ip_print(ndo, p, length);
331 ip6_print(ndo, p, length);
335 case ARCTYPE_ARP_OLD:
338 arp_print(ndo, p, length, caplen);
341 case ARCTYPE_ATALK: /* XXX was this ever used? */
343 ND_PRINT((ndo, "et1 "));
344 atalk_print(ndo, p, length);
348 ipx_print(ndo, p, length);