/* * Copyright (c) 1991, 1993, 1994, 1995, 1996, 1997 * The Regents of the University of California. All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that: (1) source code distributions * retain the above copyright notice and this paragraph in its entirety, (2) * distributions including binary code include the above copyright notice and * this paragraph in its entirety in the documentation or other materials * provided with the distribution, and (3) all advertising materials mentioning * features or use of this software display the following acknowledgement: * ``This product includes software developed by the University of California, * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of * the University nor the names of its contributors may be used to endorse * or promote products derived from this software without specific prior * written permission. * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. */ #ifndef lint static const char rcsid[] = "@(#) $Header: /cvs/OpenBSD/src/usr.sbin/tcpdump/print-null.c,v 1.9 1999/07/28 20:41:36 jakob Exp $ (LBL)"; #endif #include #include #include #include #include #ifdef __STDC__ struct mbuf; struct rtentry; #endif #include #include #include #include #include #include #include #include #include #include #include #include #include #include "addrtoname.h" #include "interface.h" /* * The DLT_NULL packet header is 4 bytes long. It contains a network * order 32 bit integer that specifies the family, e.g. AF_INET */ #define NULL_HDRLEN 4 #ifndef AF_NS #define AF_NS 6 /* XEROX NS protocols */ #endif static void null_print(const u_char *p, u_int length, u_int family) { if (nflag) { /* XXX just dump the header */ return; } switch (family) { case AF_INET: printf("ip: "); break; case AF_NS: printf("ns: "); break; default: printf("AF %d: ", family); break; } } void null_if_print(u_char *user, const struct pcap_pkthdr *h, const u_char *p) { u_int length = h->len; u_int caplen = h->caplen; u_int family; const u_char *pkt; ts_print(&h->ts); /* * Some printers want to get back at the link level addresses, * and/or check that they're not walking off the end of the packet. * Rather than pass them all the way down, we set these globals. */ packetp = p; snapend = p + caplen; pkt = p + NULL_HDRLEN; length -= NULL_HDRLEN; memcpy((char *)&family, (char *)p, sizeof(family)); if (eflag) null_print(p, length, family); switch (ntohl(family)) { case AF_INET: ip_print(pkt, length); break; case AF_APPLETALK: atalk_print(pkt, length); break; } if (xflag) default_print(pkt, caplen - NULL_HDRLEN); putchar('\n'); }