404 lines
14 KiB
C
404 lines
14 KiB
C
/*
|
|
* Copyright (c) 1998-2007 The TCPDUMP project
|
|
*
|
|
* Redistribution and use in source and binary forms, with or without
|
|
* modification, are permitted provided that: (1) source code
|
|
* distributions retain the above copyright notice and this paragraph
|
|
* in its entirety, and (2) distributions including binary code include
|
|
* the above copyright notice and this paragraph in its entirety in
|
|
* the documentation or other materials provided with the distribution.
|
|
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND
|
|
* WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT
|
|
* LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
|
|
* FOR A PARTICULAR PURPOSE.
|
|
*
|
|
* Reference documentation:
|
|
* http://www.cisco.com/c/en/us/support/docs/lan-switching/vtp/10558-21.html
|
|
* http://docstore.mik.ua/univercd/cc/td/doc/product/lan/trsrb/frames.htm
|
|
*
|
|
* Original code ode by Carles Kishimoto <carles.kishimoto@gmail.com>
|
|
*/
|
|
|
|
/* \summary: Cisco VLAN Trunking Protocol (VTP) printer */
|
|
|
|
#ifdef HAVE_CONFIG_H
|
|
#include "config.h"
|
|
#endif
|
|
|
|
#include <netdissect-stdinc.h>
|
|
|
|
#include "netdissect.h"
|
|
#include "addrtoname.h"
|
|
#include "extract.h"
|
|
|
|
#define VTP_HEADER_LEN 36
|
|
#define VTP_DOMAIN_NAME_LEN 32
|
|
#define VTP_MD5_DIGEST_LEN 16
|
|
#define VTP_UPDATE_TIMESTAMP_LEN 12
|
|
#define VTP_VLAN_INFO_FIXED_PART_LEN 12 /* length of VLAN info before VLAN name */
|
|
|
|
#define VTP_SUMMARY_ADV 0x01
|
|
#define VTP_SUBSET_ADV 0x02
|
|
#define VTP_ADV_REQUEST 0x03
|
|
#define VTP_JOIN_MESSAGE 0x04
|
|
|
|
struct vtp_vlan_ {
|
|
uint8_t len;
|
|
uint8_t status;
|
|
uint8_t type;
|
|
uint8_t name_len;
|
|
uint16_t vlanid;
|
|
uint16_t mtu;
|
|
uint32_t index;
|
|
};
|
|
|
|
static const struct tok vtp_message_type_values[] = {
|
|
{ VTP_SUMMARY_ADV, "Summary advertisement"},
|
|
{ VTP_SUBSET_ADV, "Subset advertisement"},
|
|
{ VTP_ADV_REQUEST, "Advertisement request"},
|
|
{ VTP_JOIN_MESSAGE, "Join message"},
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static const struct tok vtp_header_values[] = {
|
|
{ 0x01, "Followers"}, /* On Summary advertisement, 3rd byte is Followers */
|
|
{ 0x02, "Seq number"}, /* On Subset advertisement, 3rd byte is Sequence number */
|
|
{ 0x03, "Rsvd"}, /* On Adver. requests 3rd byte is Rsvd */
|
|
{ 0x04, "Rsvd"}, /* On Adver. requests 3rd byte is Rsvd */
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static const struct tok vtp_vlan_type_values[] = {
|
|
{ 0x01, "Ethernet"},
|
|
{ 0x02, "FDDI"},
|
|
{ 0x03, "TrCRF"},
|
|
{ 0x04, "FDDI-net"},
|
|
{ 0x05, "TrBRF"},
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static const struct tok vtp_vlan_status[] = {
|
|
{ 0x00, "Operational"},
|
|
{ 0x01, "Suspended"},
|
|
{ 0, NULL }
|
|
};
|
|
|
|
#define VTP_VLAN_SOURCE_ROUTING_RING_NUMBER 0x01
|
|
#define VTP_VLAN_SOURCE_ROUTING_BRIDGE_NUMBER 0x02
|
|
#define VTP_VLAN_STP_TYPE 0x03
|
|
#define VTP_VLAN_PARENT_VLAN 0x04
|
|
#define VTP_VLAN_TRANS_BRIDGED_VLAN 0x05
|
|
#define VTP_VLAN_PRUNING 0x06
|
|
#define VTP_VLAN_BRIDGE_TYPE 0x07
|
|
#define VTP_VLAN_ARP_HOP_COUNT 0x08
|
|
#define VTP_VLAN_STE_HOP_COUNT 0x09
|
|
#define VTP_VLAN_BACKUP_CRF_MODE 0x0A
|
|
|
|
static const struct tok vtp_vlan_tlv_values[] = {
|
|
{ VTP_VLAN_SOURCE_ROUTING_RING_NUMBER, "Source-Routing Ring Number TLV"},
|
|
{ VTP_VLAN_SOURCE_ROUTING_BRIDGE_NUMBER, "Source-Routing Bridge Number TLV"},
|
|
{ VTP_VLAN_STP_TYPE, "STP type TLV"},
|
|
{ VTP_VLAN_PARENT_VLAN, "Parent VLAN TLV"},
|
|
{ VTP_VLAN_TRANS_BRIDGED_VLAN, "Translationally bridged VLANs TLV"},
|
|
{ VTP_VLAN_PRUNING, "Pruning TLV"},
|
|
{ VTP_VLAN_BRIDGE_TYPE, "Bridge Type TLV"},
|
|
{ VTP_VLAN_ARP_HOP_COUNT, "Max ARP Hop Count TLV"},
|
|
{ VTP_VLAN_STE_HOP_COUNT, "Max STE Hop Count TLV"},
|
|
{ VTP_VLAN_BACKUP_CRF_MODE, "Backup CRF Mode TLV"},
|
|
{ 0, NULL }
|
|
};
|
|
|
|
static const struct tok vtp_stp_type_values[] = {
|
|
{ 1, "SRT"},
|
|
{ 2, "SRB"},
|
|
{ 3, "Auto"},
|
|
{ 0, NULL }
|
|
};
|
|
|
|
void
|
|
vtp_print (netdissect_options *ndo,
|
|
const u_char *pptr, u_int length)
|
|
{
|
|
int type, len, tlv_len, tlv_value, mgmtd_len;
|
|
const u_char *tptr;
|
|
const struct vtp_vlan_ *vtp_vlan;
|
|
|
|
if (length < VTP_HEADER_LEN)
|
|
goto trunc;
|
|
|
|
tptr = pptr;
|
|
|
|
ND_TCHECK2(*tptr, VTP_HEADER_LEN);
|
|
|
|
type = *(tptr+1);
|
|
ND_PRINT((ndo, "VTPv%u, Message %s (0x%02x), length %u",
|
|
*tptr,
|
|
tok2str(vtp_message_type_values,"Unknown message type", type),
|
|
type,
|
|
length));
|
|
|
|
/* In non-verbose mode, just print version and message type */
|
|
if (ndo->ndo_vflag < 1) {
|
|
return;
|
|
}
|
|
|
|
/* verbose mode print all fields */
|
|
ND_PRINT((ndo, "\n\tDomain name: "));
|
|
mgmtd_len = *(tptr + 3);
|
|
if (mgmtd_len < 1 || mgmtd_len > 32) {
|
|
ND_PRINT((ndo, " [invalid MgmtD Len %d]", mgmtd_len));
|
|
return;
|
|
}
|
|
fn_printzp(ndo, tptr + 4, mgmtd_len, NULL);
|
|
ND_PRINT((ndo, ", %s: %u",
|
|
tok2str(vtp_header_values, "Unknown", type),
|
|
*(tptr+2)));
|
|
|
|
tptr += VTP_HEADER_LEN;
|
|
|
|
switch (type) {
|
|
|
|
case VTP_SUMMARY_ADV:
|
|
|
|
/*
|
|
* SUMMARY ADVERTISEMENT
|
|
*
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Version | Code | Followers | MgmtD Len |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Management Domain Name (zero-padded to 32 bytes) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Configuration revision number |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Updater Identity IP address |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Update Timestamp (12 bytes) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | MD5 digest (16 bytes) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*
|
|
*/
|
|
|
|
ND_TCHECK2(*tptr, 8);
|
|
ND_PRINT((ndo, "\n\t Config Rev %x, Updater %s",
|
|
EXTRACT_32BITS(tptr),
|
|
ipaddr_string(ndo, tptr+4)));
|
|
tptr += 8;
|
|
ND_TCHECK2(*tptr, VTP_UPDATE_TIMESTAMP_LEN);
|
|
ND_PRINT((ndo, ", Timestamp 0x%08x 0x%08x 0x%08x",
|
|
EXTRACT_32BITS(tptr),
|
|
EXTRACT_32BITS(tptr + 4),
|
|
EXTRACT_32BITS(tptr + 8)));
|
|
tptr += VTP_UPDATE_TIMESTAMP_LEN;
|
|
ND_TCHECK2(*tptr, VTP_MD5_DIGEST_LEN);
|
|
ND_PRINT((ndo, ", MD5 digest: %08x%08x%08x%08x",
|
|
EXTRACT_32BITS(tptr),
|
|
EXTRACT_32BITS(tptr + 4),
|
|
EXTRACT_32BITS(tptr + 8),
|
|
EXTRACT_32BITS(tptr + 12)));
|
|
tptr += VTP_MD5_DIGEST_LEN;
|
|
break;
|
|
|
|
case VTP_SUBSET_ADV:
|
|
|
|
/*
|
|
* SUBSET ADVERTISEMENT
|
|
*
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Version | Code | Seq number | MgmtD Len |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Management Domain Name (zero-padded to 32 bytes) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Configuration revision number |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | VLAN info field 1 |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | ................ |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | VLAN info field N |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*
|
|
*/
|
|
|
|
ND_TCHECK_32BITS(tptr);
|
|
ND_PRINT((ndo, ", Config Rev %x", EXTRACT_32BITS(tptr)));
|
|
|
|
/*
|
|
* VLAN INFORMATION
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | V info len | Status | VLAN type | VLAN name len |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | ISL vlan id | MTU size |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | 802.10 index (SAID) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | VLAN name |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*
|
|
*/
|
|
|
|
tptr += 4;
|
|
while ((unsigned)(tptr - pptr) < length) {
|
|
|
|
ND_TCHECK_8BITS(tptr);
|
|
len = *tptr;
|
|
if (len == 0)
|
|
break;
|
|
|
|
ND_TCHECK2(*tptr, len);
|
|
|
|
vtp_vlan = (const struct vtp_vlan_*)tptr;
|
|
if (len < VTP_VLAN_INFO_FIXED_PART_LEN)
|
|
goto trunc;
|
|
ND_TCHECK(*vtp_vlan);
|
|
ND_PRINT((ndo, "\n\tVLAN info status %s, type %s, VLAN-id %u, MTU %u, SAID 0x%08x, Name ",
|
|
tok2str(vtp_vlan_status,"Unknown",vtp_vlan->status),
|
|
tok2str(vtp_vlan_type_values,"Unknown",vtp_vlan->type),
|
|
EXTRACT_16BITS(&vtp_vlan->vlanid),
|
|
EXTRACT_16BITS(&vtp_vlan->mtu),
|
|
EXTRACT_32BITS(&vtp_vlan->index)));
|
|
len -= VTP_VLAN_INFO_FIXED_PART_LEN;
|
|
tptr += VTP_VLAN_INFO_FIXED_PART_LEN;
|
|
if (len < 4*((vtp_vlan->name_len + 3)/4))
|
|
goto trunc;
|
|
ND_TCHECK2(*tptr, vtp_vlan->name_len);
|
|
fn_printzp(ndo, tptr, vtp_vlan->name_len, NULL);
|
|
|
|
/*
|
|
* Vlan names are aligned to 32-bit boundaries.
|
|
*/
|
|
len -= 4*((vtp_vlan->name_len + 3)/4);
|
|
tptr += 4*((vtp_vlan->name_len + 3)/4);
|
|
|
|
/* TLV information follows */
|
|
|
|
while (len > 0) {
|
|
|
|
/*
|
|
* Cisco specs say 2 bytes for type + 2 bytes for length;
|
|
* see http://docstore.mik.ua/univercd/cc/td/doc/product/lan/trsrb/frames.htm
|
|
* However, actual packets on the wire appear to use 1
|
|
* byte for the type and 1 byte for the length, so that's
|
|
* what we do.
|
|
*/
|
|
if (len < 2)
|
|
goto trunc;
|
|
ND_TCHECK2(*tptr, 2);
|
|
type = *tptr;
|
|
tlv_len = *(tptr+1);
|
|
|
|
ND_PRINT((ndo, "\n\t\t%s (0x%04x) TLV",
|
|
tok2str(vtp_vlan_tlv_values, "Unknown", type),
|
|
type));
|
|
|
|
if (len < tlv_len * 2 + 2) {
|
|
ND_PRINT((ndo, " (TLV goes past the end of the packet)"));
|
|
return;
|
|
}
|
|
ND_TCHECK2(*tptr, tlv_len * 2 +2);
|
|
|
|
/*
|
|
* We assume the value is a 2-byte integer; the length is
|
|
* in units of 16-bit words.
|
|
*/
|
|
if (tlv_len != 1) {
|
|
ND_PRINT((ndo, " (invalid TLV length %u != 1)", tlv_len));
|
|
return;
|
|
} else {
|
|
tlv_value = EXTRACT_16BITS(tptr+2);
|
|
|
|
switch (type) {
|
|
case VTP_VLAN_STE_HOP_COUNT:
|
|
ND_PRINT((ndo, ", %u", tlv_value));
|
|
break;
|
|
|
|
case VTP_VLAN_PRUNING:
|
|
ND_PRINT((ndo, ", %s (%u)",
|
|
tlv_value == 1 ? "Enabled" : "Disabled",
|
|
tlv_value));
|
|
break;
|
|
|
|
case VTP_VLAN_STP_TYPE:
|
|
ND_PRINT((ndo, ", %s (%u)",
|
|
tok2str(vtp_stp_type_values, "Unknown", tlv_value),
|
|
tlv_value));
|
|
break;
|
|
|
|
case VTP_VLAN_BRIDGE_TYPE:
|
|
ND_PRINT((ndo, ", %s (%u)",
|
|
tlv_value == 1 ? "SRB" : "SRT",
|
|
tlv_value));
|
|
break;
|
|
|
|
case VTP_VLAN_BACKUP_CRF_MODE:
|
|
ND_PRINT((ndo, ", %s (%u)",
|
|
tlv_value == 1 ? "Backup" : "Not backup",
|
|
tlv_value));
|
|
break;
|
|
|
|
/*
|
|
* FIXME those are the defined TLVs that lack a decoder
|
|
* you are welcome to contribute code ;-)
|
|
*/
|
|
|
|
case VTP_VLAN_SOURCE_ROUTING_RING_NUMBER:
|
|
case VTP_VLAN_SOURCE_ROUTING_BRIDGE_NUMBER:
|
|
case VTP_VLAN_PARENT_VLAN:
|
|
case VTP_VLAN_TRANS_BRIDGED_VLAN:
|
|
case VTP_VLAN_ARP_HOP_COUNT:
|
|
default:
|
|
print_unknown_data(ndo, tptr, "\n\t\t ", 2 + tlv_len*2);
|
|
break;
|
|
}
|
|
}
|
|
len -= 2 + tlv_len*2;
|
|
tptr += 2 + tlv_len*2;
|
|
}
|
|
}
|
|
break;
|
|
|
|
case VTP_ADV_REQUEST:
|
|
|
|
/*
|
|
* ADVERTISEMENT REQUEST
|
|
*
|
|
* 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Version | Code | Reserved | MgmtD Len |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Management Domain Name (zero-padded to 32 bytes) |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
* | Start value |
|
|
* +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+
|
|
*
|
|
*/
|
|
|
|
ND_TCHECK2(*tptr, 4);
|
|
ND_PRINT((ndo, "\n\tStart value: %u", EXTRACT_32BITS(tptr)));
|
|
break;
|
|
|
|
case VTP_JOIN_MESSAGE:
|
|
|
|
/* FIXME - Could not find message format */
|
|
break;
|
|
|
|
default:
|
|
break;
|
|
}
|
|
|
|
return;
|
|
|
|
trunc:
|
|
ND_PRINT((ndo, "[|vtp]"));
|
|
}
|
|
|
|
/*
|
|
* Local Variables:
|
|
* c-style: whitesmith
|
|
* c-basic-offset: 4
|
|
* End:
|
|
*/
|