2 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
25 static const char rcsid[] _U_ =
26 "@(#) $Header: /tcpdump/master/tcpdump/print-domain.c,v 1.89.2.1 2005/04/20 20:59:00 guy Exp $ (LBL)";
33 #include <tcpdump-stdinc.h>
40 #include "interface.h"
41 #include "addrtoname.h"
42 #include "extract.h" /* must come after interface.h */
44 static const char *ns_ops[] = {
45 "", " inv_q", " stat", " op3", " notify", " update", " op6", " op7",
46 " op8", " updataA", " updateD", " updateDA",
47 " updateM", " updateMA", " zoneInit", " zoneRef",
50 static const char *ns_resp[] = {
51 "", " FormErr", " ServFail", " NXDomain",
52 " NotImp", " Refused", " YXDomain", " YXRRSet",
53 " NXRRSet", " NotAuth", " NotZone", " Resp11",
54 " Resp12", " Resp13", " Resp14", " NoChange",
57 /* skip over a domain name */
59 ns_nskip(register const u_char *cp)
67 if ((i & INDIR_MASK) == INDIR_MASK)
69 if ((i & INDIR_MASK) == EDNS0_MASK) {
72 if ((i & ~INDIR_MASK) != EDNS0_ELT_BITLABEL)
73 return(NULL); /* unknown ELT */
76 if ((bitlen = *cp++) == 0)
78 bytelen = (bitlen + 7) / 8;
89 /* print a <domain-name> */
91 blabel_print(const u_char *cp)
94 const u_char *bitp, *lim;
99 if ((bitlen = *cp) == 0)
101 slen = (bitlen + 3) / 4;
104 /* print the bit string as a hex string */
106 for (bitp = cp + 1, b = bitlen; bitp < lim && b > 7; b -= 8, bitp++) {
108 printf("%02x", *bitp);
113 printf("%02x", tc & (0xff << (8 - b)));
117 printf("%1x", ((tc >> 4) & 0x0f) & (0x0f << (4 - b)));
119 printf("/%d]", bitlen);
122 printf(".../%d]", bitlen);
127 labellen(const u_char *cp)
134 if ((i & INDIR_MASK) == EDNS0_MASK) {
136 if ((elt = (i & ~INDIR_MASK)) != EDNS0_ELT_BITLABEL) {
137 printf("<ELT %d>", elt);
140 if (!TTEST2(*(cp + 1), 1))
142 if ((bitlen = *(cp + 1)) == 0)
144 return(((bitlen + 7) / 8) + 1);
149 static const u_char *
150 ns_nprint(register const u_char *cp, register const u_char *bp)
153 register const u_char *rp = NULL;
154 register int compress = 0;
157 int data_size = snapend - bp;
159 if ((l = labellen(cp)) == (u_int)-1)
164 if (((i = *cp++) & INDIR_MASK) != INDIR_MASK) {
170 while (i && cp < snapend) {
171 if ((i & INDIR_MASK) == INDIR_MASK) {
178 cp = bp + (((i << 8) | *cp) & 0x3fff);
179 if ((l = labellen(cp)) == (u_int)-1)
187 * If we've looked at every character in
188 * the message, this pointer will make
189 * us look at some character again,
190 * which means we're looping.
192 if (chars_processed >= data_size) {
198 if ((i & INDIR_MASK) == EDNS0_MASK) {
199 elt = (i & ~INDIR_MASK);
201 case EDNS0_ELT_BITLABEL:
202 if (blabel_print(cp) == NULL)
207 printf("<ELT %d>", elt);
211 if (fn_printn(cp, l, snapend))
216 chars_processed += l;
218 if ((l = labellen(cp)) == (u_int)-1)
232 /* print a <character-string> */
233 static const u_char *
234 ns_cprint(register const u_char *cp)
241 if (fn_printn(cp, i, snapend))
246 /* http://www.iana.org/assignments/dns-parameters */
247 struct tok ns_type2str[] = {
248 { T_A, "A" }, /* RFC 1035 */
249 { T_NS, "NS" }, /* RFC 1035 */
250 { T_MD, "MD" }, /* RFC 1035 */
251 { T_MF, "MF" }, /* RFC 1035 */
252 { T_CNAME, "CNAME" }, /* RFC 1035 */
253 { T_SOA, "SOA" }, /* RFC 1035 */
254 { T_MB, "MB" }, /* RFC 1035 */
255 { T_MG, "MG" }, /* RFC 1035 */
256 { T_MR, "MR" }, /* RFC 1035 */
257 { T_NULL, "NULL" }, /* RFC 1035 */
258 { T_WKS, "WKS" }, /* RFC 1035 */
259 { T_PTR, "PTR" }, /* RFC 1035 */
260 { T_HINFO, "HINFO" }, /* RFC 1035 */
261 { T_MINFO, "MINFO" }, /* RFC 1035 */
262 { T_MX, "MX" }, /* RFC 1035 */
263 { T_TXT, "TXT" }, /* RFC 1035 */
264 { T_RP, "RP" }, /* RFC 1183 */
265 { T_AFSDB, "AFSDB" }, /* RFC 1183 */
266 { T_X25, "X25" }, /* RFC 1183 */
267 { T_ISDN, "ISDN" }, /* RFC 1183 */
268 { T_RT, "RT" }, /* RFC 1183 */
269 { T_NSAP, "NSAP" }, /* RFC 1706 */
270 { T_NSAP_PTR, "NSAP_PTR" },
271 { T_SIG, "SIG" }, /* RFC 2535 */
272 { T_KEY, "KEY" }, /* RFC 2535 */
273 { T_PX, "PX" }, /* RFC 2163 */
274 { T_GPOS, "GPOS" }, /* RFC 1712 */
275 { T_AAAA, "AAAA" }, /* RFC 1886 */
276 { T_LOC, "LOC" }, /* RFC 1876 */
277 { T_NXT, "NXT" }, /* RFC 2535 */
278 { T_EID, "EID" }, /* Nimrod */
279 { T_NIMLOC, "NIMLOC" }, /* Nimrod */
280 { T_SRV, "SRV" }, /* RFC 2782 */
281 { T_ATMA, "ATMA" }, /* ATM Forum */
282 { T_NAPTR, "NAPTR" }, /* RFC 2168, RFC 2915 */
283 { T_A6, "A6" }, /* RFC 2874 */
284 { T_DNAME, "DNAME" }, /* RFC 2672 */
285 { T_OPT, "OPT" }, /* RFC 2671 */
286 { T_UINFO, "UINFO" },
289 { T_UNSPEC, "UNSPEC" },
290 { T_UNSPECA, "UNSPECA" },
291 { T_TKEY, "TKEY" }, /* RFC 2930 */
292 { T_TSIG, "TSIG" }, /* RFC 2845 */
293 { T_IXFR, "IXFR" }, /* RFC 1995 */
294 { T_AXFR, "AXFR" }, /* RFC 1035 */
295 { T_MAILB, "MAILB" }, /* RFC 1035 */
296 { T_MAILA, "MAILA" }, /* RFC 1035 */
301 struct tok ns_class2str[] = {
302 { C_IN, "IN" }, /* Not used */
303 { C_CHAOS, "CHAOS" },
310 static const u_char *
311 ns_qprint(register const u_char *cp, register const u_char *bp, int is_mdns)
313 register const u_char *np = cp;
318 if (cp == NULL || !TTEST2(*cp, 4))
321 /* print the qtype and qclass (if it's not IN) */
322 i = EXTRACT_16BITS(cp);
324 printf(" %s", tok2str(ns_type2str, "Type%d", i));
325 i = EXTRACT_16BITS(cp);
327 if (is_mdns && i == (C_IN|C_CACHE_FLUSH))
328 printf(" (Cache flush)");
330 printf(" %s", tok2str(ns_class2str, "(Class %d)", i));
333 cp = ns_nprint(np, bp);
334 return(cp ? cp + 4 : NULL);
338 static const u_char *
339 ns_rprint(register const u_char *cp, register const u_char *bp, int is_mdns)
341 register u_int class;
342 register u_short typ, len;
343 register const u_char *rp;
347 if ((cp = ns_nprint(cp, bp)) == NULL)
352 if (cp == NULL || !TTEST2(*cp, 10))
355 /* print the type/qtype and class (if it's not IN) */
356 typ = EXTRACT_16BITS(cp);
358 class = EXTRACT_16BITS(cp);
360 if (is_mdns && class == (C_IN|C_CACHE_FLUSH))
361 printf(" (Cache flush)");
362 else if (class != C_IN && typ != T_OPT)
363 printf(" %s", tok2str(ns_class2str, "(Class %d)", class));
368 len = EXTRACT_16BITS(cp);
373 printf(" %s", tok2str(ns_type2str, "Type%d", typ));
379 if (!TTEST2(*cp, sizeof(struct in_addr)))
381 printf(" %s", ipaddr_string(cp));
391 if (ns_nprint(cp, bp) == NULL)
399 if ((cp = ns_nprint(cp, bp)) == NULL)
402 if ((cp = ns_nprint(cp, bp)) == NULL)
404 if (!TTEST2(*cp, 5 * 4))
406 printf(" %u", EXTRACT_32BITS(cp));
408 printf(" %u", EXTRACT_32BITS(cp));
410 printf(" %u", EXTRACT_32BITS(cp));
412 printf(" %u", EXTRACT_32BITS(cp));
414 printf(" %u", EXTRACT_32BITS(cp));
421 if (ns_nprint(cp + 2, bp) == NULL)
423 printf(" %d", EXTRACT_16BITS(cp));
440 if (ns_nprint(cp + 6, bp) == NULL)
442 printf(":%d %d %d", EXTRACT_16BITS(cp + 4),
443 EXTRACT_16BITS(cp), EXTRACT_16BITS(cp + 2));
448 if (!TTEST2(*cp, sizeof(struct in6_addr)))
450 printf(" %s", ip6addr_string(cp));
461 pbyte = (pbit & ~7) / 8;
463 printf(" %u(bad plen)", pbit);
465 } else if (pbit < 128) {
466 if (!TTEST2(*(cp + 1), sizeof(a) - pbyte))
468 memset(&a, 0, sizeof(a));
469 memcpy(&a.s6_addr[pbyte], cp + 1, sizeof(a) - pbyte);
470 printf(" %u %s", pbit, ip6addr_string(&a));
474 if (ns_nprint(cp + 1 + sizeof(a) - pbyte, bp) == NULL)
482 printf(" UDPsize=%u", class);
485 case T_UNSPECA: /* One long string */
486 if (!TTEST2(*cp, len))
488 if (fn_printn(cp, len, snapend))
494 if (cp + len > snapend)
499 if ((cp = ns_nprint(cp, bp)) == NULL)
504 printf(" fudge=%u", EXTRACT_16BITS(cp));
508 printf(" maclen=%u", EXTRACT_16BITS(cp));
509 cp += 2 + EXTRACT_16BITS(cp);
512 printf(" origid=%u", EXTRACT_16BITS(cp));
516 printf(" error=%u", EXTRACT_16BITS(cp));
520 printf(" otherlen=%u", EXTRACT_16BITS(cp));
524 return (rp); /* XXX This isn't always right */
528 ns_print(register const u_char *bp, u_int length, int is_mdns)
530 register const HEADER *np;
531 register int qdcount, ancount, nscount, arcount;
532 register const u_char *cp;
535 np = (const HEADER *)bp;
537 /* get the byte-order right */
538 qdcount = EXTRACT_16BITS(&np->qdcount);
539 ancount = EXTRACT_16BITS(&np->ancount);
540 nscount = EXTRACT_16BITS(&np->nscount);
541 arcount = EXTRACT_16BITS(&np->arcount);
544 /* this is a response */
545 printf(" %d%s%s%s%s%s%s",
546 EXTRACT_16BITS(&np->id),
547 ns_ops[DNS_OPCODE(np)],
548 ns_resp[DNS_RCODE(np)],
549 DNS_AA(np)? "*" : "",
550 DNS_RA(np)? "" : "-",
551 DNS_TC(np)? "|" : "",
552 DNS_AD(np)? "$" : "");
555 printf(" [%dq]", qdcount);
556 /* Print QUESTION section on -vv */
557 cp = (const u_char *)(np + 1);
559 if (qdcount < EXTRACT_16BITS(&np->qdcount) - 1)
562 fputs(" q:", stdout);
563 if ((cp = ns_qprint(cp, bp, is_mdns)) == NULL)
566 if ((cp = ns_nskip(cp)) == NULL)
568 cp += 4; /* skip QTYPE and QCLASS */
571 printf(" %d/%d/%d", ancount, nscount, arcount);
573 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
575 while (cp < snapend && ancount--) {
577 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
583 /* Print NS and AR sections on -vv */
585 if (cp < snapend && nscount--) {
586 fputs(" ns:", stdout);
587 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
589 while (cp < snapend && nscount--) {
591 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
597 if (cp < snapend && arcount--) {
598 fputs(" ar:", stdout);
599 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
601 while (cp < snapend && arcount--) {
603 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
612 /* this is a request */
613 printf(" %d%s%s%s", EXTRACT_16BITS(&np->id), ns_ops[DNS_OPCODE(np)],
614 DNS_RD(np) ? "+" : "",
615 DNS_CD(np) ? "%" : "");
618 b2 = EXTRACT_16BITS(((u_short *)np)+1);
620 printf(" [b2&3=0x%x]", b2);
622 if (DNS_OPCODE(np) == IQUERY) {
624 printf(" [%dq]", qdcount);
626 printf(" [%da]", ancount);
630 printf(" [%da]", ancount);
632 printf(" [%dq]", qdcount);
635 printf(" [%dn]", nscount);
637 printf(" [%dau]", arcount);
639 cp = (const u_char *)(np + 1);
641 cp = ns_qprint(cp, (const u_char *)np, is_mdns);
644 while (cp < snapend && qdcount--) {
645 cp = ns_qprint((const u_char *)cp,
655 /* Print remaining sections on -vv */
658 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
660 while (cp < snapend && ancount--) {
662 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
668 if (cp < snapend && nscount--) {
669 fputs(" ns:", stdout);
670 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
672 while (nscount-- && cp < snapend) {
674 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
680 if (cp < snapend && arcount--) {
681 fputs(" ar:", stdout);
682 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
684 while (cp < snapend && arcount--) {
686 if ((cp = ns_rprint(cp, bp, is_mdns)) == NULL)
694 printf(" (%d)", length);