dissector.h

   1 /*
   2  * netsniff-ng - the packet sniffing beast
   3  * Copyright 2009 - 2013 Daniel Borkmann.
   4  * Subject to the GPL, version 2.
   5  */
   6
   7 #ifndef DISSECTOR_H
   8 #define DISSECTOR_H
   9
  10 #include <stdlib.h>
  11 #include <stdint.h>
  12 #include <sys/socket.h>
  13 #include <linux/if_packet.h>
  14 #include <linux/if.h>
  15 #include <libnl3/netlink/msg.h>
  16
  17 #include "ring.h"
  18 #include "tprintf.h"
  19 #include "linktype.h"
  20
  21 #define PRINT_NORM              0
  22 #define PRINT_LESS              1
  23 #define PRINT_HEX               2
  24 #define PRINT_ASCII             3
  25 #define PRINT_HEX_ASCII         4
  26 #define PRINT_NONE              5
  27
  28 extern char *if_indextoname(unsigned ifindex, char *ifname);
  29
  30 static const char * const packet_types[256] = {
  31         [0 ... 255]             =       "?",  /* Unknown */
  32         [PACKET_HOST]           =       "<",  /* Incoming */
  33         [PACKET_BROADCAST]      =       "B",  /* Broadcast */
  34         [PACKET_MULTICAST]      =       "M",  /* Multicast */
  35         [PACKET_OTHERHOST]      =       "P",  /* Promisc */
  36         [PACKET_OUTGOING]       =       ">",  /* Outgoing */
  37         [PACKET_USER]           =       ">U", /* To Userspace */
  38         [PACKET_KERNEL]         =       ">K", /* To Kernelspace */
  39 };
  40
  41 static inline const char *__show_ts_source(uint32_t status)
  42 {
  43         if (status & TP_STATUS_TS_RAW_HARDWARE)
  44                 return "(raw hw ts)";
  45         else if (status & TP_STATUS_TS_SYS_HARDWARE)
  46                 return "(sys hw ts)";
  47         else if (status & TP_STATUS_TS_SOFTWARE)
  48                 return "(sw ts)";
  49         else
  50                 return "";
  51 }
  52
  53 static inline void __show_frame_hdr(uint8_t *packet, size_t len, int linktype,
  54                                     struct sockaddr_ll *s_ll, void *raw_hdr,
  55                                     int mode, bool v3)
  56 {
  57         char tmp[IFNAMSIZ];
  58         union tpacket_uhdr hdr;
  59         uint8_t pkttype = s_ll->sll_pkttype;
  60         bool is_nl;
  61
  62         if (mode == PRINT_NONE)
  63                 return;
  64
  65         /*
  66          * If we're capturing on nlmon0, all packets will have sll_pkttype set
  67          * to PACKET_OUTGOING, but we actually want PACKET_USER/PACKET_KERNEL as
  68          * it originally was set in the kernel. Thus, use nlmsghdr->nlmsg_pid to
  69          * restore the type.
  70          */
  71         is_nl = (linktype == LINKTYPE_NETLINK && len >= sizeof(struct nlmsghdr));
  72         if (is_nl && pkttype == PACKET_OUTGOING) {
  73                 struct nlmsghdr *hdr = (struct nlmsghdr *) packet;
  74                 pkttype = hdr->nlmsg_pid == 0 ? PACKET_KERNEL : PACKET_USER;
  75         }
  76
  77         hdr.raw = raw_hdr;
  78         switch (mode) {
  79         case PRINT_LESS:
  80                 tprintf("%s %s %u",
  81                         packet_types[pkttype] ? : "?",
  82                         if_indextoname(s_ll->sll_ifindex, tmp) ? : "?",
  83                         tpacket_uhdr(hdr, tp_len, v3));
  84                 break;
  85         default:
  86                 tprintf("%s %s %u %us.%uns %s\n",
  87                         packet_types[pkttype] ? : "?",
  88                         if_indextoname(s_ll->sll_ifindex, tmp) ? : "?",
  89                         tpacket_uhdr(hdr, tp_len, v3),
  90                         tpacket_uhdr(hdr, tp_sec, v3),
  91                         tpacket_uhdr(hdr, tp_nsec, v3),
  92                         v3 ? "" : __show_ts_source(hdr.h2->tp_status));
  93                 break;
  94         }
  95 }
  96
  97 static inline void show_frame_hdr(uint8_t *packet, size_t len, int linktype,
  98                                   struct frame_map *hdr, int mode)
  99 {
 100         __show_frame_hdr(packet, len, linktype, &hdr->s_ll, &hdr->tp_h, mode, false);
 101 }
 102
 103 extern void dissector_init_all(int fnttype);
 104 extern void dissector_entry_point(uint8_t *packet, size_t len, int linktype, int mode);
 105 extern void dissector_cleanup_all(void);
 106 extern int dissector_set_print_type(void *ptr, int type);
 107
 108 #endif /* DISSECTOR_H */