37e2725e53
It contains many fixes, including bounds checking, buffer overflows (in SLIP and bittok2str_internal), buffer over-reads, and infinite loops. One other notable change: Do not use getprotobynumber() for protocol name resolution. Do not do any protocol name resolution if -n is specified. Submitted by: gordon Reviewed by: delphij, emaste, glebius MFC after: 1 week Relnotes: Yes Security: CVE-2017-11108, CVE-2017-11541, CVE-2017-11542 Security: CVE-2017-11543, CVE-2017-12893, CVE-2017-12894 Security: CVE-2017-12895, CVE-2017-12896, CVE-2017-12897 Security: CVE-2017-12898, CVE-2017-12899, CVE-2017-12900 Security: CVE-2017-12901, CVE-2017-12902, CVE-2017-12985 Security: CVE-2017-12986, CVE-2017-12987, CVE-2017-12988 Security: CVE-2017-12989, CVE-2017-12990, CVE-2017-12991 Security: CVE-2017-12992, CVE-2017-12993, CVE-2017-12994 Security: CVE-2017-12995, CVE-2017-12996, CVE-2017-12997 Security: CVE-2017-12998, CVE-2017-12999, CVE-2017-13000 Security: CVE-2017-13001, CVE-2017-13002, CVE-2017-13003 Security: CVE-2017-13004, CVE-2017-13005, CVE-2017-13006 Security: CVE-2017-13007, CVE-2017-13008, CVE-2017-13009 Security: CVE-2017-13010, CVE-2017-13011, CVE-2017-13012 Security: CVE-2017-13013, CVE-2017-13014, CVE-2017-13015 Security: CVE-2017-13016, CVE-2017-13017, CVE-2017-13018 Security: CVE-2017-13019, CVE-2017-13020, CVE-2017-13021 Security: CVE-2017-13022, CVE-2017-13023, CVE-2017-13024 Security: CVE-2017-13025, CVE-2017-13026, CVE-2017-13027 Security: CVE-2017-13028, CVE-2017-13029, CVE-2017-13030 Security: CVE-2017-13031, CVE-2017-13032, CVE-2017-13033 Security: CVE-2017-13034, CVE-2017-13035, CVE-2017-13036 Security: CVE-2017-13037, CVE-2017-13038, CVE-2017-13039 Security: CVE-2017-13040, CVE-2017-13041, CVE-2017-13042 Security: CVE-2017-13043, CVE-2017-13044, CVE-2017-13045 Security: CVE-2017-13046, CVE-2017-13047, CVE-2017-13048 Security: CVE-2017-13049, CVE-2017-13050, CVE-2017-13051 Security: CVE-2017-13052, CVE-2017-13053, CVE-2017-13054 Security: CVE-2017-13055, CVE-2017-13687, CVE-2017-13688 Security: CVE-2017-13689, CVE-2017-13690, CVE-2017-13725 Differential Revision: https://reviews.freebsd.org/D12404
1086 lines
52 KiB
C
1086 lines
52 KiB
C
/*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that: (1) source code
|
|
* distributions retain the above copyright notice and this paragraph
|
|
* in its entirety, and (2) distributions including binary code include
|
|
* the above copyright notice and this paragraph in its entirety in
|
|
* the documentation or other materials provided with the distribution.
|
|
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND
|
|
* WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT
|
|
* LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
|
* FOR A PARTICULAR PURPOSE.
|
|
*
|
|
* Original code by Hannes Gredler (hannes@gredler.at)
|
|
*/
|
|
|
|
/* \summary: MPLS LSP PING printer */
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
#include "config.h"
|
|
#endif
|
|
|
|
#include <netdissect-stdinc.h>
|
|
|
|
#include "netdissect.h"
|
|
#include "extract.h"
|
|
#include "addrtoname.h"
|
|
|
|
#include "l2vpn.h"
|
|
#include "oui.h"
|
|
|
|
/* RFC 4349 */
|
|
|
|
/*
|
|
* LSPPING common header
|
|
*
|
|
* 0 1 2 3
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Version Number | Must Be Zero |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Message Type | Reply mode | Return Code | Return Subcode|
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Sender's Handle |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Sequence Number |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | TimeStamp Sent (seconds) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | TimeStamp Sent (microseconds) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | TimeStamp Received (seconds) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | TimeStamp Received (microseconds) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | TLVs ... |
|
|
* . .
|
|
* . .
|
|
* . .
|
|
*/
|
|
|
|
struct lspping_common_header {
|
|
uint8_t version[2];
|
|
uint8_t global_flags[2];
|
|
uint8_t msg_type;
|
|
uint8_t reply_mode;
|
|
uint8_t return_code;
|
|
uint8_t return_subcode;
|
|
uint8_t sender_handle[4];
|
|
uint8_t seq_number[4];
|
|
uint8_t ts_sent_sec[4];
|
|
uint8_t ts_sent_usec[4];
|
|
uint8_t ts_rcvd_sec[4];
|
|
uint8_t ts_rcvd_usec[4];
|
|
};
|
|
|
|
#define LSPPING_VERSION 1
|
|
|
|
static const struct tok lspping_msg_type_values[] = {
|
|
{ 1, "MPLS Echo Request"},
|
|
{ 2, "MPLS Echo Reply"},
|
|
{ 0, NULL}
|
|
};
|
|
|
|
static const struct tok lspping_reply_mode_values[] = {
|
|
{ 1, "Do not reply"},
|
|
{ 2, "Reply via an IPv4/IPv6 UDP packet"},
|
|
{ 3, "Reply via an IPv4/IPv6 UDP packet with Router Alert"},
|
|
{ 4, "Reply via application level control channel"},
|
|
{ 0, NULL}
|
|
};
|
|
|
|
static const struct tok lspping_return_code_values[] = {
|
|
{ 0, "No return code or return code contained in the Error Code TLV"},
|
|
{ 1, "Malformed echo request received"},
|
|
{ 2, "One or more of the TLVs was not understood"},
|
|
{ 3, "Replying router is an egress for the FEC at stack depth"},
|
|
{ 4, "Replying router has no mapping for the FEC at stack depth"},
|
|
{ 5, "Reserved"},
|
|
{ 6, "Reserved"},
|
|
{ 7, "Reserved"},
|
|
{ 8, "Label switched at stack-depth"},
|
|
{ 9, "Label switched but no MPLS forwarding at stack-depth"},
|
|
{ 10, "Mapping for this FEC is not the given label at stack depth"},
|
|
{ 11, "No label entry at stack-depth"},
|
|
{ 12, "Protocol not associated with interface at FEC stack depth"},
|
|
{ 13, "Premature termination of ping due to label stack shrinking to a single label"},
|
|
{ 0, NULL},
|
|
};
|
|
|
|
|
|
/*
|
|
* LSPPING TLV header
|
|
* 0 1 2 3
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Type | Length |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Value |
|
|
* . .
|
|
* . .
|
|
* . .
|
|
* | |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
|
|
struct lspping_tlv_header {
|
|
uint8_t type[2];
|
|
uint8_t length[2];
|
|
};
|
|
|
|
#define LSPPING_TLV_TARGET_FEC_STACK 1
|
|
#define LSPPING_TLV_DOWNSTREAM_MAPPING 2
|
|
#define LSPPING_TLV_PAD 3
|
|
/* not assigned 4 */
|
|
#define LSPPING_TLV_VENDOR_ENTERPRISE 5
|
|
#define LSPPING_TLV_VENDOR_ENTERPRISE_LEN 4
|
|
/* not assigned 6 */
|
|
#define LSPPING_TLV_INTERFACE_LABEL_STACK 7
|
|
/* not assigned 8 */
|
|
#define LSPPING_TLV_ERROR_CODE 9
|
|
#define LSPPING_TLV_REPLY_TOS_BYTE 10
|
|
#define LSPPING_TLV_BFD_DISCRIMINATOR 15 /* draft-ietf-bfd-mpls-02 */
|
|
#define LSPPING_TLV_BFD_DISCRIMINATOR_LEN 4
|
|
#define LSPPING_TLV_VENDOR_PRIVATE 0xfc00
|
|
|
|
static const struct tok lspping_tlv_values[] = {
|
|
{ LSPPING_TLV_TARGET_FEC_STACK, "Target FEC Stack" },
|
|
{ LSPPING_TLV_DOWNSTREAM_MAPPING, "Downstream Mapping" },
|
|
{ LSPPING_TLV_PAD, "Pad" },
|
|
{ LSPPING_TLV_ERROR_CODE, "Error Code" },
|
|
{ LSPPING_TLV_VENDOR_ENTERPRISE, "Vendor Enterprise Code" },
|
|
{ LSPPING_TLV_INTERFACE_LABEL_STACK, "Interface Label Stack" },
|
|
{ LSPPING_TLV_REPLY_TOS_BYTE, "Reply TOS Byte" },
|
|
{ LSPPING_TLV_BFD_DISCRIMINATOR, "BFD Discriminator" },
|
|
{ LSPPING_TLV_VENDOR_PRIVATE, "Vendor Private Code" },
|
|
{ 0, NULL}
|
|
};
|
|
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_LDP_IPV4 1
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_LDP_IPV6 2
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_RSVP_IPV4 3
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_RSVP_IPV6 4
|
|
/* not assigned 5 */
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_L3VPN_IPV4 6
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_L3VPN_IPV6 7
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_L2VPN_ENDPT 8
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_FEC_128_PW_OLD 9
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_FEC_128_PW 10
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_FEC_129_PW 11
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_BGP_IPV4 12
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_BGP_IPV6 13
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_GENERIC_IPV4 14
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_GENERIC_IPV6 15
|
|
#define LSPPING_TLV_TARGETFEC_SUBTLV_NIL_FEC 16
|
|
|
|
static const struct tok lspping_tlvtargetfec_subtlv_values[] = {
|
|
{ LSPPING_TLV_TARGETFEC_SUBTLV_LDP_IPV4, "LDP IPv4 prefix"},
|
|
{ LSPPING_TLV_TARGETFEC_SUBTLV_LDP_IPV6, "LDP IPv6 prefix"},
|
|
{ LSPPING_TLV_TARGETFEC_SUBTLV_RSVP_IPV4, "RSVP IPv4 Session Query"},
|
|
{ LSPPING_TLV_TARGETFEC_SUBTLV_RSVP_IPV6, "RSVP IPv6 Session Query"},
|
|
{ 5, "Reserved"},
|
|
{ LSPPING_TLV_TARGETFEC_SUBTLV_L3VPN_IPV4, "VPN IPv4 prefix"},
|
|
{ LSPPING_TLV_TARGETFEC_SUBTLV_L3VPN_IPV6, "VPN IPv6 prefix"},
|
|
{ LSPPING_TLV_TARGETFEC_SUBTLV_L2VPN_ENDPT, "L2 VPN endpoint"},
|
|
{ LSPPING_TLV_TARGETFEC_SUBTLV_FEC_128_PW_OLD, "FEC 128 pseudowire (old)"},
|
|
{ LSPPING_TLV_TARGETFEC_SUBTLV_FEC_128_PW, "FEC 128 pseudowire"},
|
|
{ LSPPING_TLV_TARGETFEC_SUBTLV_BGP_IPV4, "BGP labeled IPv4 prefix"},
|
|
{ LSPPING_TLV_TARGETFEC_SUBTLV_BGP_IPV6, "BGP labeled IPv6 prefix"},
|
|
{ 0, NULL}
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | IPv4 prefix |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Prefix Length | Must Be Zero |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
struct lspping_tlv_targetfec_subtlv_ldp_ipv4_t {
|
|
uint8_t prefix [4];
|
|
uint8_t prefix_len;
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | IPv6 prefix |
|
|
* | (16 octets) |
|
|
* | |
|
|
* | |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Prefix Length | Must Be Zero |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
struct lspping_tlv_targetfec_subtlv_ldp_ipv6_t {
|
|
uint8_t prefix [16];
|
|
uint8_t prefix_len;
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | IPv4 tunnel end point address |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Must Be Zero | Tunnel ID |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Extended Tunnel ID |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | IPv4 tunnel sender address |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Must Be Zero | LSP ID |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
struct lspping_tlv_targetfec_subtlv_rsvp_ipv4_t {
|
|
uint8_t tunnel_endpoint [4];
|
|
uint8_t res[2];
|
|
uint8_t tunnel_id[2];
|
|
uint8_t extended_tunnel_id[4];
|
|
uint8_t tunnel_sender [4];
|
|
uint8_t res2[2];
|
|
uint8_t lsp_id [2];
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | IPv6 tunnel end point address |
|
|
* | |
|
|
* | |
|
|
* | |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Must Be Zero | Tunnel ID |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Extended Tunnel ID |
|
|
* | |
|
|
* | |
|
|
* | |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | IPv6 tunnel sender address |
|
|
* | |
|
|
* | |
|
|
* | |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Must Be Zero | LSP ID |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
struct lspping_tlv_targetfec_subtlv_rsvp_ipv6_t {
|
|
uint8_t tunnel_endpoint [16];
|
|
uint8_t res[2];
|
|
uint8_t tunnel_id[2];
|
|
uint8_t extended_tunnel_id[16];
|
|
uint8_t tunnel_sender [16];
|
|
uint8_t res2[2];
|
|
uint8_t lsp_id [2];
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Route Distinguisher |
|
|
* | (8 octets) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | IPv4 prefix |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Prefix Length | Must Be Zero |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
struct lspping_tlv_targetfec_subtlv_l3vpn_ipv4_t {
|
|
uint8_t rd [8];
|
|
uint8_t prefix [4];
|
|
uint8_t prefix_len;
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Route Distinguisher |
|
|
* | (8 octets) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | IPv6 prefix |
|
|
* | (16 octets) |
|
|
* | |
|
|
* | |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Prefix Length | Must Be Zero |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
struct lspping_tlv_targetfec_subtlv_l3vpn_ipv6_t {
|
|
uint8_t rd [8];
|
|
uint8_t prefix [16];
|
|
uint8_t prefix_len;
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Route Distinguisher |
|
|
* | (8 octets) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Sender's VE ID | Receiver's VE ID |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Encapsulation Type | Must Be Zero |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* 0 1 2 3
|
|
*/
|
|
struct lspping_tlv_targetfec_subtlv_l2vpn_endpt_t {
|
|
uint8_t rd [8];
|
|
uint8_t sender_ve_id [2];
|
|
uint8_t receiver_ve_id [2];
|
|
uint8_t encapsulation[2];
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Remote PE Address |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | PW ID |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | PW Type | Must Be Zero |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
struct lspping_tlv_targetfec_subtlv_fec_128_pw_old {
|
|
uint8_t remote_pe_address [4];
|
|
uint8_t pw_id [4];
|
|
uint8_t pw_type[2];
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Sender's PE Address |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Remote PE Address |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | PW ID |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | PW Type | Must Be Zero |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
struct lspping_tlv_targetfec_subtlv_fec_128_pw {
|
|
uint8_t sender_pe_address [4];
|
|
uint8_t remote_pe_address [4];
|
|
uint8_t pw_id [4];
|
|
uint8_t pw_type[2];
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | IPv4 prefix |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Prefix Length | Must Be Zero |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
struct lspping_tlv_targetfec_subtlv_bgp_ipv4_t {
|
|
uint8_t prefix [4];
|
|
uint8_t prefix_len;
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | IPv6 prefix |
|
|
* | (16 octets) |
|
|
* | |
|
|
* | |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Prefix Length | Must Be Zero |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
struct lspping_tlv_targetfec_subtlv_bgp_ipv6_t {
|
|
uint8_t prefix [16];
|
|
uint8_t prefix_len;
|
|
};
|
|
|
|
/*
|
|
* 0 1 2 3
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | MTU | Address Type | Resvd (SBZ) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Downstream IP Address (4 or 16 octets) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Downstream Interface Address (4 or 16 octets) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Multipath Type| Depth Limit | Multipath Length |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* . .
|
|
* . (Multipath Information) .
|
|
* . .
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Downstream Label | Protocol |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* . .
|
|
* . .
|
|
* . .
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Downstream Label | Protocol |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*/
|
|
/* Enough to get the address type */
|
|
struct lspping_tlv_downstream_map_t {
|
|
uint8_t mtu [2];
|
|
uint8_t address_type;
|
|
uint8_t ds_flags;
|
|
};
|
|
|
|
struct lspping_tlv_downstream_map_ipv4_t {
|
|
uint8_t mtu [2];
|
|
uint8_t address_type;
|
|
uint8_t ds_flags;
|
|
uint8_t downstream_ip[4];
|
|
uint8_t downstream_interface[4];
|
|
};
|
|
|
|
struct lspping_tlv_downstream_map_ipv4_unmb_t {
|
|
uint8_t mtu [2];
|
|
uint8_t address_type;
|
|
uint8_t ds_flags;
|
|
uint8_t downstream_ip[4];
|
|
uint8_t downstream_interface[4];
|
|
};
|
|
|
|
struct lspping_tlv_downstream_map_ipv6_t {
|
|
uint8_t mtu [2];
|
|
uint8_t address_type;
|
|
uint8_t ds_flags;
|
|
uint8_t downstream_ip[16];
|
|
uint8_t downstream_interface[16];
|
|
};
|
|
|
|
struct lspping_tlv_downstream_map_ipv6_unmb_t {
|
|
uint8_t mtu [2];
|
|
uint8_t address_type;
|
|
uint8_t ds_flags;
|
|
uint8_t downstream_ip[16];
|
|
uint8_t downstream_interface[4];
|
|
};
|
|
|
|
struct lspping_tlv_downstream_map_info_t {
|
|
uint8_t multipath_type;
|
|
uint8_t depth_limit;
|
|
uint8_t multipath_length [2];
|
|
};
|
|
|
|
#define LSPPING_AFI_IPV4 1
|
|
#define LSPPING_AFI_IPV4_UNMB 2
|
|
#define LSPPING_AFI_IPV6 3
|
|
#define LSPPING_AFI_IPV6_UNMB 4
|
|
|
|
static const struct tok lspping_tlv_downstream_addr_values[] = {
|
|
{ LSPPING_AFI_IPV4, "IPv4"},
|
|
{ LSPPING_AFI_IPV4_UNMB, "Unnumbered IPv4"},
|
|
{ LSPPING_AFI_IPV6, "IPv6"},
|
|
{ LSPPING_AFI_IPV6_UNMB, "IPv6"},
|
|
{ 0, NULL}
|
|
};
|
|
|
|
void
|
|
lspping_print(netdissect_options *ndo,
|
|
register const u_char *pptr, register u_int len)
|
|
{
|
|
const struct lspping_common_header *lspping_com_header;
|
|
const struct lspping_tlv_header *lspping_tlv_header;
|
|
const struct lspping_tlv_header *lspping_subtlv_header;
|
|
const u_char *tptr,*tlv_tptr,*subtlv_tptr;
|
|
u_int tlen,lspping_tlv_len,lspping_tlv_type,tlv_tlen;
|
|
int tlv_hexdump,subtlv_hexdump;
|
|
u_int lspping_subtlv_len,lspping_subtlv_type;
|
|
struct timeval timestamp;
|
|
|
|
union {
|
|
const struct lspping_tlv_downstream_map_t *lspping_tlv_downstream_map;
|
|
const struct lspping_tlv_downstream_map_ipv4_t *lspping_tlv_downstream_map_ipv4;
|
|
const struct lspping_tlv_downstream_map_ipv4_unmb_t *lspping_tlv_downstream_map_ipv4_unmb;
|
|
const struct lspping_tlv_downstream_map_ipv6_t *lspping_tlv_downstream_map_ipv6;
|
|
const struct lspping_tlv_downstream_map_ipv6_unmb_t *lspping_tlv_downstream_map_ipv6_unmb;
|
|
const struct lspping_tlv_downstream_map_info_t *lspping_tlv_downstream_map_info;
|
|
} tlv_ptr;
|
|
|
|
union {
|
|
const struct lspping_tlv_targetfec_subtlv_ldp_ipv4_t *lspping_tlv_targetfec_subtlv_ldp_ipv4;
|
|
const struct lspping_tlv_targetfec_subtlv_ldp_ipv6_t *lspping_tlv_targetfec_subtlv_ldp_ipv6;
|
|
const struct lspping_tlv_targetfec_subtlv_rsvp_ipv4_t *lspping_tlv_targetfec_subtlv_rsvp_ipv4;
|
|
const struct lspping_tlv_targetfec_subtlv_rsvp_ipv6_t *lspping_tlv_targetfec_subtlv_rsvp_ipv6;
|
|
const struct lspping_tlv_targetfec_subtlv_l3vpn_ipv4_t *lspping_tlv_targetfec_subtlv_l3vpn_ipv4;
|
|
const struct lspping_tlv_targetfec_subtlv_l3vpn_ipv6_t *lspping_tlv_targetfec_subtlv_l3vpn_ipv6;
|
|
const struct lspping_tlv_targetfec_subtlv_l2vpn_endpt_t *lspping_tlv_targetfec_subtlv_l2vpn_endpt;
|
|
const struct lspping_tlv_targetfec_subtlv_fec_128_pw_old *lspping_tlv_targetfec_subtlv_l2vpn_vcid_old;
|
|
const struct lspping_tlv_targetfec_subtlv_fec_128_pw *lspping_tlv_targetfec_subtlv_l2vpn_vcid;
|
|
const struct lspping_tlv_targetfec_subtlv_bgp_ipv4_t *lspping_tlv_targetfec_subtlv_bgp_ipv4;
|
|
const struct lspping_tlv_targetfec_subtlv_bgp_ipv6_t *lspping_tlv_targetfec_subtlv_bgp_ipv6;
|
|
} subtlv_ptr;
|
|
|
|
tptr=pptr;
|
|
lspping_com_header = (const struct lspping_common_header *)pptr;
|
|
if (len < sizeof(const struct lspping_common_header))
|
|
goto tooshort;
|
|
ND_TCHECK(*lspping_com_header);
|
|
|
|
/*
|
|
* Sanity checking of the header.
|
|
*/
|
|
if (EXTRACT_16BITS(&lspping_com_header->version[0]) != LSPPING_VERSION) {
|
|
ND_PRINT((ndo, "LSP-PING version %u packet not supported",
|
|
EXTRACT_16BITS(&lspping_com_header->version[0])));
|
|
return;
|
|
}
|
|
|
|
/* in non-verbose mode just lets print the basic Message Type*/
|
|
if (ndo->ndo_vflag < 1) {
|
|
ND_PRINT((ndo, "LSP-PINGv%u, %s, seq %u, length: %u",
|
|
EXTRACT_16BITS(&lspping_com_header->version[0]),
|
|
tok2str(lspping_msg_type_values, "unknown (%u)",lspping_com_header->msg_type),
|
|
EXTRACT_32BITS(lspping_com_header->seq_number),
|
|
len));
|
|
return;
|
|
}
|
|
|
|
/* ok they seem to want to know everything - lets fully decode it */
|
|
|
|
tlen=len;
|
|
|
|
ND_PRINT((ndo, "\n\tLSP-PINGv%u, msg-type: %s (%u), length: %u\n\t reply-mode: %s (%u)",
|
|
EXTRACT_16BITS(&lspping_com_header->version[0]),
|
|
tok2str(lspping_msg_type_values, "unknown",lspping_com_header->msg_type),
|
|
lspping_com_header->msg_type,
|
|
len,
|
|
tok2str(lspping_reply_mode_values, "unknown",lspping_com_header->reply_mode),
|
|
lspping_com_header->reply_mode));
|
|
|
|
/*
|
|
* the following return codes require that the subcode is attached
|
|
* at the end of the translated token output
|
|
*/
|
|
if (lspping_com_header->return_code == 3 ||
|
|
lspping_com_header->return_code == 4 ||
|
|
lspping_com_header->return_code == 8 ||
|
|
lspping_com_header->return_code == 10 ||
|
|
lspping_com_header->return_code == 11 ||
|
|
lspping_com_header->return_code == 12 )
|
|
ND_PRINT((ndo, "\n\t Return Code: %s %u (%u)\n\t Return Subcode: (%u)",
|
|
tok2str(lspping_return_code_values, "unknown",lspping_com_header->return_code),
|
|
lspping_com_header->return_subcode,
|
|
lspping_com_header->return_code,
|
|
lspping_com_header->return_subcode));
|
|
else
|
|
ND_PRINT((ndo, "\n\t Return Code: %s (%u)\n\t Return Subcode: (%u)",
|
|
tok2str(lspping_return_code_values, "unknown",lspping_com_header->return_code),
|
|
lspping_com_header->return_code,
|
|
lspping_com_header->return_subcode));
|
|
|
|
ND_PRINT((ndo, "\n\t Sender Handle: 0x%08x, Sequence: %u",
|
|
EXTRACT_32BITS(lspping_com_header->sender_handle),
|
|
EXTRACT_32BITS(lspping_com_header->seq_number)));
|
|
|
|
timestamp.tv_sec=EXTRACT_32BITS(lspping_com_header->ts_sent_sec);
|
|
timestamp.tv_usec=EXTRACT_32BITS(lspping_com_header->ts_sent_usec);
|
|
ND_PRINT((ndo, "\n\t Sender Timestamp: "));
|
|
ts_print(ndo, ×tamp);
|
|
|
|
timestamp.tv_sec=EXTRACT_32BITS(lspping_com_header->ts_rcvd_sec);
|
|
timestamp.tv_usec=EXTRACT_32BITS(lspping_com_header->ts_rcvd_usec);
|
|
ND_PRINT((ndo, "Receiver Timestamp: "));
|
|
if ((timestamp.tv_sec != 0) && (timestamp.tv_usec != 0))
|
|
ts_print(ndo, ×tamp);
|
|
else
|
|
ND_PRINT((ndo, "no timestamp"));
|
|
|
|
tptr+=sizeof(const struct lspping_common_header);
|
|
tlen-=sizeof(const struct lspping_common_header);
|
|
|
|
while (tlen != 0) {
|
|
/* Does the TLV go past the end of the packet? */
|
|
if (tlen < sizeof(struct lspping_tlv_header))
|
|
goto tooshort;
|
|
|
|
/* did we capture enough for fully decoding the tlv header ? */
|
|
ND_TCHECK2(*tptr, sizeof(struct lspping_tlv_header));
|
|
|
|
lspping_tlv_header = (const struct lspping_tlv_header *)tptr;
|
|
lspping_tlv_type=EXTRACT_16BITS(lspping_tlv_header->type);
|
|
lspping_tlv_len=EXTRACT_16BITS(lspping_tlv_header->length);
|
|
|
|
ND_PRINT((ndo, "\n\t %s TLV (%u), length: %u",
|
|
tok2str(lspping_tlv_values,
|
|
"Unknown",
|
|
lspping_tlv_type),
|
|
lspping_tlv_type,
|
|
lspping_tlv_len));
|
|
|
|
/* some little sanity checking */
|
|
if (lspping_tlv_len == 0) {
|
|
tptr+=sizeof(struct lspping_tlv_header);
|
|
tlen-=sizeof(struct lspping_tlv_header);
|
|
continue; /* no value to dissect */
|
|
}
|
|
|
|
tlv_tptr=tptr+sizeof(struct lspping_tlv_header);
|
|
tlv_tlen=lspping_tlv_len; /* header not included -> no adjustment */
|
|
|
|
/* Does the TLV go past the end of the packet? */
|
|
if (tlen < lspping_tlv_len+sizeof(struct lspping_tlv_header))
|
|
goto tooshort;
|
|
/* did we capture enough for fully decoding the tlv ? */
|
|
ND_TCHECK2(*tlv_tptr, lspping_tlv_len);
|
|
tlv_hexdump=FALSE;
|
|
|
|
switch(lspping_tlv_type) {
|
|
case LSPPING_TLV_TARGET_FEC_STACK:
|
|
while (tlv_tlen != 0) {
|
|
/* Does the subTLV header go past the end of the TLV? */
|
|
if (tlv_tlen < sizeof(struct lspping_tlv_header)) {
|
|
ND_PRINT((ndo, "\n\t TLV is too short"));
|
|
tlv_hexdump = TRUE;
|
|
goto tlv_tooshort;
|
|
}
|
|
/* did we capture enough for fully decoding the subtlv header ? */
|
|
ND_TCHECK2(*tlv_tptr, sizeof(struct lspping_tlv_header));
|
|
subtlv_hexdump=FALSE;
|
|
|
|
lspping_subtlv_header = (const struct lspping_tlv_header *)tlv_tptr;
|
|
lspping_subtlv_type=EXTRACT_16BITS(lspping_subtlv_header->type);
|
|
lspping_subtlv_len=EXTRACT_16BITS(lspping_subtlv_header->length);
|
|
subtlv_tptr=tlv_tptr+sizeof(struct lspping_tlv_header);
|
|
|
|
/* Does the subTLV go past the end of the TLV? */
|
|
if (tlv_tlen < lspping_subtlv_len+sizeof(struct lspping_tlv_header)) {
|
|
ND_PRINT((ndo, "\n\t TLV is too short"));
|
|
tlv_hexdump = TRUE;
|
|
goto tlv_tooshort;
|
|
}
|
|
|
|
/* Did we capture enough for fully decoding the subTLV? */
|
|
ND_TCHECK2(*subtlv_tptr, lspping_subtlv_len);
|
|
|
|
ND_PRINT((ndo, "\n\t %s subTLV (%u), length: %u",
|
|
tok2str(lspping_tlvtargetfec_subtlv_values,
|
|
"Unknown",
|
|
lspping_subtlv_type),
|
|
lspping_subtlv_type,
|
|
lspping_subtlv_len));
|
|
|
|
switch(lspping_subtlv_type) {
|
|
|
|
case LSPPING_TLV_TARGETFEC_SUBTLV_LDP_IPV4:
|
|
/* Is the subTLV length correct? */
|
|
if (lspping_subtlv_len != 5) {
|
|
ND_PRINT((ndo, "\n\t invalid subTLV length, should be 5"));
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
} else {
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_ldp_ipv4 = \
|
|
(const struct lspping_tlv_targetfec_subtlv_ldp_ipv4_t *)subtlv_tptr;
|
|
ND_PRINT((ndo, "\n\t %s/%u",
|
|
ipaddr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_ldp_ipv4->prefix),
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_ldp_ipv4->prefix_len));
|
|
}
|
|
break;
|
|
|
|
case LSPPING_TLV_TARGETFEC_SUBTLV_LDP_IPV6:
|
|
/* Is the subTLV length correct? */
|
|
if (lspping_subtlv_len != 17) {
|
|
ND_PRINT((ndo, "\n\t invalid subTLV length, should be 17"));
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
} else {
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_ldp_ipv6 = \
|
|
(const struct lspping_tlv_targetfec_subtlv_ldp_ipv6_t *)subtlv_tptr;
|
|
ND_PRINT((ndo, "\n\t %s/%u",
|
|
ip6addr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_ldp_ipv6->prefix),
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_ldp_ipv6->prefix_len));
|
|
}
|
|
break;
|
|
|
|
case LSPPING_TLV_TARGETFEC_SUBTLV_BGP_IPV4:
|
|
/* Is the subTLV length correct? */
|
|
if (lspping_subtlv_len != 5) {
|
|
ND_PRINT((ndo, "\n\t invalid subTLV length, should be 5"));
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
} else {
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_bgp_ipv4 = \
|
|
(const struct lspping_tlv_targetfec_subtlv_bgp_ipv4_t *)subtlv_tptr;
|
|
ND_PRINT((ndo, "\n\t %s/%u",
|
|
ipaddr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_bgp_ipv4->prefix),
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_bgp_ipv4->prefix_len));
|
|
}
|
|
break;
|
|
|
|
case LSPPING_TLV_TARGETFEC_SUBTLV_BGP_IPV6:
|
|
/* Is the subTLV length correct? */
|
|
if (lspping_subtlv_len != 17) {
|
|
ND_PRINT((ndo, "\n\t invalid subTLV length, should be 17"));
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
} else {
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_bgp_ipv6 = \
|
|
(const struct lspping_tlv_targetfec_subtlv_bgp_ipv6_t *)subtlv_tptr;
|
|
ND_PRINT((ndo, "\n\t %s/%u",
|
|
ip6addr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_bgp_ipv6->prefix),
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_bgp_ipv6->prefix_len));
|
|
}
|
|
break;
|
|
|
|
case LSPPING_TLV_TARGETFEC_SUBTLV_RSVP_IPV4:
|
|
/* Is the subTLV length correct? */
|
|
if (lspping_subtlv_len != 20) {
|
|
ND_PRINT((ndo, "\n\t invalid subTLV length, should be 20"));
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
} else {
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv4 = \
|
|
(const struct lspping_tlv_targetfec_subtlv_rsvp_ipv4_t *)subtlv_tptr;
|
|
ND_PRINT((ndo, "\n\t tunnel end-point %s, tunnel sender %s, lsp-id 0x%04x" \
|
|
"\n\t tunnel-id 0x%04x, extended tunnel-id %s",
|
|
ipaddr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv4->tunnel_endpoint),
|
|
ipaddr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv4->tunnel_sender),
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv4->lsp_id),
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv4->tunnel_id),
|
|
ipaddr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv4->extended_tunnel_id)));
|
|
}
|
|
break;
|
|
|
|
case LSPPING_TLV_TARGETFEC_SUBTLV_RSVP_IPV6:
|
|
/* Is the subTLV length correct? */
|
|
if (lspping_subtlv_len != 56) {
|
|
ND_PRINT((ndo, "\n\t invalid subTLV length, should be 56"));
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
} else {
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv6 = \
|
|
(const struct lspping_tlv_targetfec_subtlv_rsvp_ipv6_t *)subtlv_tptr;
|
|
ND_PRINT((ndo, "\n\t tunnel end-point %s, tunnel sender %s, lsp-id 0x%04x" \
|
|
"\n\t tunnel-id 0x%04x, extended tunnel-id %s",
|
|
ip6addr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv6->tunnel_endpoint),
|
|
ip6addr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv6->tunnel_sender),
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv6->lsp_id),
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv6->tunnel_id),
|
|
ip6addr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_rsvp_ipv6->extended_tunnel_id)));
|
|
}
|
|
break;
|
|
|
|
case LSPPING_TLV_TARGETFEC_SUBTLV_L3VPN_IPV4:
|
|
/* Is the subTLV length correct? */
|
|
if (lspping_subtlv_len != 13) {
|
|
ND_PRINT((ndo, "\n\t invalid subTLV length, should be 13"));
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
} else {
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_l3vpn_ipv4 = \
|
|
(const struct lspping_tlv_targetfec_subtlv_l3vpn_ipv4_t *)subtlv_tptr;
|
|
ND_PRINT((ndo, "\n\t RD: %s, %s/%u",
|
|
bgp_vpn_rd_print(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_l3vpn_ipv4->rd),
|
|
ipaddr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_l3vpn_ipv4->prefix),
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_l3vpn_ipv4->prefix_len));
|
|
}
|
|
break;
|
|
|
|
case LSPPING_TLV_TARGETFEC_SUBTLV_L3VPN_IPV6:
|
|
/* Is the subTLV length correct? */
|
|
if (lspping_subtlv_len != 25) {
|
|
ND_PRINT((ndo, "\n\t invalid subTLV length, should be 25"));
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
} else {
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_l3vpn_ipv6 = \
|
|
(const struct lspping_tlv_targetfec_subtlv_l3vpn_ipv6_t *)subtlv_tptr;
|
|
ND_PRINT((ndo, "\n\t RD: %s, %s/%u",
|
|
bgp_vpn_rd_print(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_l3vpn_ipv6->rd),
|
|
ip6addr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_l3vpn_ipv6->prefix),
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_l3vpn_ipv6->prefix_len));
|
|
}
|
|
break;
|
|
|
|
case LSPPING_TLV_TARGETFEC_SUBTLV_L2VPN_ENDPT:
|
|
/* Is the subTLV length correct? */
|
|
if (lspping_subtlv_len != 14) {
|
|
ND_PRINT((ndo, "\n\t invalid subTLV length, should be 14"));
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
} else {
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_endpt = \
|
|
(const struct lspping_tlv_targetfec_subtlv_l2vpn_endpt_t *)subtlv_tptr;
|
|
ND_PRINT((ndo, "\n\t RD: %s, Sender VE ID: %u, Receiver VE ID: %u" \
|
|
"\n\t Encapsulation Type: %s (%u)",
|
|
bgp_vpn_rd_print(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_endpt->rd),
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_endpt->sender_ve_id),
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_endpt->receiver_ve_id),
|
|
tok2str(mpls_pw_types_values,
|
|
"unknown",
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_endpt->encapsulation)),
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_endpt->encapsulation)));
|
|
}
|
|
break;
|
|
|
|
/* the old L2VPN VCID subTLV does not have support for the sender field */
|
|
case LSPPING_TLV_TARGETFEC_SUBTLV_FEC_128_PW_OLD:
|
|
/* Is the subTLV length correct? */
|
|
if (lspping_subtlv_len != 10) {
|
|
ND_PRINT((ndo, "\n\t invalid subTLV length, should be 10"));
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
} else {
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_vcid_old = \
|
|
(const struct lspping_tlv_targetfec_subtlv_fec_128_pw_old *)subtlv_tptr;
|
|
ND_PRINT((ndo, "\n\t Remote PE: %s" \
|
|
"\n\t PW ID: 0x%08x, PW Type: %s (%u)",
|
|
ipaddr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_vcid_old->remote_pe_address),
|
|
EXTRACT_32BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_vcid_old->pw_id),
|
|
tok2str(mpls_pw_types_values,
|
|
"unknown",
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_vcid_old->pw_type)),
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_vcid_old->pw_type)));
|
|
}
|
|
break;
|
|
|
|
case LSPPING_TLV_TARGETFEC_SUBTLV_FEC_128_PW:
|
|
/* Is the subTLV length correct? */
|
|
if (lspping_subtlv_len != 14) {
|
|
ND_PRINT((ndo, "\n\t invalid subTLV length, should be 14"));
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
} else {
|
|
subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_vcid = \
|
|
(const struct lspping_tlv_targetfec_subtlv_fec_128_pw *)subtlv_tptr;
|
|
ND_PRINT((ndo, "\n\t Sender PE: %s, Remote PE: %s" \
|
|
"\n\t PW ID: 0x%08x, PW Type: %s (%u)",
|
|
ipaddr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_vcid->sender_pe_address),
|
|
ipaddr_string(ndo, subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_vcid->remote_pe_address),
|
|
EXTRACT_32BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_vcid->pw_id),
|
|
tok2str(mpls_pw_types_values,
|
|
"unknown",
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_vcid->pw_type)),
|
|
EXTRACT_16BITS(subtlv_ptr.lspping_tlv_targetfec_subtlv_l2vpn_vcid->pw_type)));
|
|
}
|
|
break;
|
|
|
|
default:
|
|
subtlv_hexdump=TRUE; /* unknown subTLV just hexdump it */
|
|
break;
|
|
}
|
|
/* do we want to see an additionally subtlv hexdump ? */
|
|
if (ndo->ndo_vflag > 1 || subtlv_hexdump==TRUE)
|
|
print_unknown_data(ndo, tlv_tptr+sizeof(struct lspping_tlv_header), \
|
|
"\n\t ",
|
|
lspping_subtlv_len);
|
|
|
|
/* All subTLVs are aligned to four octet boundary */
|
|
if (lspping_subtlv_len % 4) {
|
|
lspping_subtlv_len += 4 - (lspping_subtlv_len % 4);
|
|
/* Does the subTLV, including padding, go past the end of the TLV? */
|
|
if (tlv_tlen < lspping_subtlv_len+sizeof(struct lspping_tlv_header)) {
|
|
ND_PRINT((ndo, "\n\t\t TLV is too short"));
|
|
return;
|
|
}
|
|
}
|
|
tlv_tptr+=lspping_subtlv_len;
|
|
tlv_tlen-=lspping_subtlv_len+sizeof(struct lspping_tlv_header);
|
|
}
|
|
break;
|
|
|
|
case LSPPING_TLV_DOWNSTREAM_MAPPING:
|
|
/* Does the header go past the end of the TLV? */
|
|
if (tlv_tlen < sizeof(struct lspping_tlv_downstream_map_t)) {
|
|
ND_PRINT((ndo, "\n\t TLV is too short"));
|
|
tlv_hexdump = TRUE;
|
|
goto tlv_tooshort;
|
|
}
|
|
/* Did we capture enough to get the address family? */
|
|
ND_TCHECK2(*tlv_tptr, sizeof(struct lspping_tlv_downstream_map_t));
|
|
|
|
tlv_ptr.lspping_tlv_downstream_map= \
|
|
(const struct lspping_tlv_downstream_map_t *)tlv_tptr;
|
|
|
|
/* that strange thing with the downstream map TLV is that until now
|
|
* we do not know if its IPv4 or IPv6 or is unnumbered; after
|
|
* we find the address-type, we recast the tlv_tptr and move on. */
|
|
|
|
ND_PRINT((ndo, "\n\t MTU: %u, Address-Type: %s (%u)",
|
|
EXTRACT_16BITS(tlv_ptr.lspping_tlv_downstream_map->mtu),
|
|
tok2str(lspping_tlv_downstream_addr_values,
|
|
"unknown",
|
|
tlv_ptr.lspping_tlv_downstream_map->address_type),
|
|
tlv_ptr.lspping_tlv_downstream_map->address_type));
|
|
|
|
switch(tlv_ptr.lspping_tlv_downstream_map->address_type) {
|
|
|
|
case LSPPING_AFI_IPV4:
|
|
/* Does the data go past the end of the TLV? */
|
|
if (tlv_tlen < sizeof(struct lspping_tlv_downstream_map_ipv4_t)) {
|
|
ND_PRINT((ndo, "\n\t TLV is too short"));
|
|
tlv_hexdump = TRUE;
|
|
goto tlv_tooshort;
|
|
}
|
|
/* Did we capture enough for this part of the TLV? */
|
|
ND_TCHECK2(*tlv_tptr, sizeof(struct lspping_tlv_downstream_map_ipv4_t));
|
|
|
|
tlv_ptr.lspping_tlv_downstream_map_ipv4= \
|
|
(const struct lspping_tlv_downstream_map_ipv4_t *)tlv_tptr;
|
|
ND_PRINT((ndo, "\n\t Downstream IP: %s" \
|
|
"\n\t Downstream Interface IP: %s",
|
|
ipaddr_string(ndo, tlv_ptr.lspping_tlv_downstream_map_ipv4->downstream_ip),
|
|
ipaddr_string(ndo, tlv_ptr.lspping_tlv_downstream_map_ipv4->downstream_interface)));
|
|
tlv_tptr+=sizeof(struct lspping_tlv_downstream_map_ipv4_t);
|
|
tlv_tlen-=sizeof(struct lspping_tlv_downstream_map_ipv4_t);
|
|
break;
|
|
case LSPPING_AFI_IPV4_UNMB:
|
|
/* Does the data go past the end of the TLV? */
|
|
if (tlv_tlen < sizeof(struct lspping_tlv_downstream_map_ipv4_unmb_t)) {
|
|
ND_PRINT((ndo, "\n\t TLV is too short"));
|
|
tlv_hexdump = TRUE;
|
|
goto tlv_tooshort;
|
|
}
|
|
/* Did we capture enough for this part of the TLV? */
|
|
ND_TCHECK2(*tlv_tptr, sizeof(struct lspping_tlv_downstream_map_ipv4_unmb_t));
|
|
|
|
tlv_ptr.lspping_tlv_downstream_map_ipv4_unmb= \
|
|
(const struct lspping_tlv_downstream_map_ipv4_unmb_t *)tlv_tptr;
|
|
ND_PRINT((ndo, "\n\t Downstream IP: %s" \
|
|
"\n\t Downstream Interface Index: 0x%08x",
|
|
ipaddr_string(ndo, tlv_ptr.lspping_tlv_downstream_map_ipv4_unmb->downstream_ip),
|
|
EXTRACT_32BITS(tlv_ptr.lspping_tlv_downstream_map_ipv4_unmb->downstream_interface)));
|
|
tlv_tptr+=sizeof(struct lspping_tlv_downstream_map_ipv4_unmb_t);
|
|
tlv_tlen-=sizeof(struct lspping_tlv_downstream_map_ipv4_unmb_t);
|
|
break;
|
|
case LSPPING_AFI_IPV6:
|
|
/* Does the data go past the end of the TLV? */
|
|
if (tlv_tlen < sizeof(struct lspping_tlv_downstream_map_ipv6_t)) {
|
|
ND_PRINT((ndo, "\n\t TLV is too short"));
|
|
tlv_hexdump = TRUE;
|
|
goto tlv_tooshort;
|
|
}
|
|
/* Did we capture enough for this part of the TLV? */
|
|
ND_TCHECK2(*tlv_tptr, sizeof(struct lspping_tlv_downstream_map_ipv6_t));
|
|
|
|
tlv_ptr.lspping_tlv_downstream_map_ipv6= \
|
|
(const struct lspping_tlv_downstream_map_ipv6_t *)tlv_tptr;
|
|
ND_PRINT((ndo, "\n\t Downstream IP: %s" \
|
|
"\n\t Downstream Interface IP: %s",
|
|
ip6addr_string(ndo, tlv_ptr.lspping_tlv_downstream_map_ipv6->downstream_ip),
|
|
ip6addr_string(ndo, tlv_ptr.lspping_tlv_downstream_map_ipv6->downstream_interface)));
|
|
tlv_tptr+=sizeof(struct lspping_tlv_downstream_map_ipv6_t);
|
|
tlv_tlen-=sizeof(struct lspping_tlv_downstream_map_ipv6_t);
|
|
break;
|
|
case LSPPING_AFI_IPV6_UNMB:
|
|
/* Does the data go past the end of the TLV? */
|
|
if (tlv_tlen < sizeof(struct lspping_tlv_downstream_map_ipv6_unmb_t)) {
|
|
ND_PRINT((ndo, "\n\t TLV is too short"));
|
|
tlv_hexdump = TRUE;
|
|
goto tlv_tooshort;
|
|
}
|
|
/* Did we capture enough for this part of the TLV? */
|
|
ND_TCHECK2(*tlv_tptr, sizeof(struct lspping_tlv_downstream_map_ipv6_unmb_t));
|
|
|
|
tlv_ptr.lspping_tlv_downstream_map_ipv6_unmb= \
|
|
(const struct lspping_tlv_downstream_map_ipv6_unmb_t *)tlv_tptr;
|
|
ND_PRINT((ndo, "\n\t Downstream IP: %s" \
|
|
"\n\t Downstream Interface Index: 0x%08x",
|
|
ip6addr_string(ndo, tlv_ptr.lspping_tlv_downstream_map_ipv6_unmb->downstream_ip),
|
|
EXTRACT_32BITS(tlv_ptr.lspping_tlv_downstream_map_ipv6_unmb->downstream_interface)));
|
|
tlv_tptr+=sizeof(struct lspping_tlv_downstream_map_ipv6_unmb_t);
|
|
tlv_tlen-=sizeof(struct lspping_tlv_downstream_map_ipv6_unmb_t);
|
|
break;
|
|
|
|
default:
|
|
/* should not happen ! - no error message - tok2str() has barked already */
|
|
break;
|
|
}
|
|
|
|
/* Does the data go past the end of the TLV? */
|
|
if (tlv_tlen < sizeof(struct lspping_tlv_downstream_map_info_t)) {
|
|
ND_PRINT((ndo, "\n\t TLV is too short"));
|
|
tlv_hexdump = TRUE;
|
|
goto tlv_tooshort;
|
|
}
|
|
/* Did we capture enough for this part of the TLV? */
|
|
ND_TCHECK2(*tlv_tptr, sizeof(struct lspping_tlv_downstream_map_info_t));
|
|
|
|
tlv_ptr.lspping_tlv_downstream_map_info= \
|
|
(const struct lspping_tlv_downstream_map_info_t *)tlv_tptr;
|
|
|
|
/* FIXME add hash-key type, depth limit, multipath processing */
|
|
|
|
tlv_tptr+=sizeof(struct lspping_tlv_downstream_map_info_t);
|
|
tlv_tlen-=sizeof(struct lspping_tlv_downstream_map_info_t);
|
|
|
|
/* FIXME print downstream labels */
|
|
|
|
tlv_hexdump=TRUE; /* dump the TLV until code complete */
|
|
|
|
break;
|
|
|
|
case LSPPING_TLV_BFD_DISCRIMINATOR:
|
|
if (tlv_tlen < LSPPING_TLV_BFD_DISCRIMINATOR_LEN) {
|
|
ND_PRINT((ndo, "\n\t TLV is too short"));
|
|
tlv_hexdump = TRUE;
|
|
goto tlv_tooshort;
|
|
} else {
|
|
ND_TCHECK2(*tptr, LSPPING_TLV_BFD_DISCRIMINATOR_LEN);
|
|
ND_PRINT((ndo, "\n\t BFD Discriminator 0x%08x", EXTRACT_32BITS(tptr)));
|
|
}
|
|
break;
|
|
|
|
case LSPPING_TLV_VENDOR_ENTERPRISE:
|
|
{
|
|
uint32_t vendor_id;
|
|
|
|
if (tlv_tlen < LSPPING_TLV_VENDOR_ENTERPRISE_LEN) {
|
|
ND_PRINT((ndo, "\n\t TLV is too short"));
|
|
tlv_hexdump = TRUE;
|
|
goto tlv_tooshort;
|
|
} else {
|
|
ND_TCHECK2(*tptr, LSPPING_TLV_VENDOR_ENTERPRISE_LEN);
|
|
vendor_id = EXTRACT_32BITS(tlv_tptr);
|
|
ND_PRINT((ndo, "\n\t Vendor: %s (0x%04x)",
|
|
tok2str(smi_values, "Unknown", vendor_id),
|
|
vendor_id));
|
|
}
|
|
}
|
|
break;
|
|
|
|
/*
|
|
* FIXME those are the defined TLVs that lack a decoder
|
|
* you are welcome to contribute code ;-)
|
|
*/
|
|
case LSPPING_TLV_PAD:
|
|
case LSPPING_TLV_ERROR_CODE:
|
|
case LSPPING_TLV_VENDOR_PRIVATE:
|
|
|
|
default:
|
|
if (ndo->ndo_vflag <= 1)
|
|
print_unknown_data(ndo, tlv_tptr, "\n\t ", tlv_tlen);
|
|
break;
|
|
}
|
|
/* do we want to see an additionally tlv hexdump ? */
|
|
tlv_tooshort:
|
|
if (ndo->ndo_vflag > 1 || tlv_hexdump==TRUE)
|
|
print_unknown_data(ndo, tptr+sizeof(struct lspping_tlv_header), "\n\t ",
|
|
lspping_tlv_len);
|
|
|
|
|
|
/* All TLVs are aligned to four octet boundary */
|
|
if (lspping_tlv_len % 4) {
|
|
lspping_tlv_len += (4 - lspping_tlv_len % 4);
|
|
/* Does the TLV, including padding, go past the end of the packet? */
|
|
if (tlen < lspping_tlv_len+sizeof(struct lspping_tlv_header))
|
|
goto tooshort;
|
|
}
|
|
|
|
tptr+=lspping_tlv_len+sizeof(struct lspping_tlv_header);
|
|
tlen-=lspping_tlv_len+sizeof(struct lspping_tlv_header);
|
|
}
|
|
return;
|
|
tooshort:
|
|
ND_PRINT((ndo, "\n\t\t packet is too short"));
|
|
return;
|
|
trunc:
|
|
ND_PRINT((ndo, "\n\t\t packet exceeded snapshot"));
|
|
return;
|
|
}
|
|
/*
|
|
* Local Variables:
|
|
* c-style: whitesmith
|
|
* c-basic-offset: 8
|
|
* End:
|
|
*/
|