dissector_eth.c

   1 /*
   2  * netsniff-ng - the packet sniffing beast
   3  * By Daniel Borkmann <daniel@netsniff-ng.org>
   4  * Copyright 2009, 2010 Daniel Borkmann.
   5  * Subject to the GPL, version 2.
   6  */
   7
   8 #include <stdint.h>
   9
  10 #include "hash.h"
  11 #include "oui.h"
  12 #include "protos.h"
  13 #include "pkt_buff.h"
  14 #include "dissector.h"
  15 #include "dissector_eth.h"
  16 #include "xmalloc.h"
  17
  18 struct hash_table eth_lay2;
  19 struct hash_table eth_lay3;
  20
  21 static struct hash_table eth_ether_types;
  22 static struct hash_table eth_ports_udp;
  23 static struct hash_table eth_ports_tcp;
  24
  25 struct port {
  26         unsigned int id;
  27         char *port;
  28         struct port *next;
  29 };
  30
  31 #define __do_lookup_inline(id, struct_name, hash_ptr, struct_member)    \
  32         ({                                                              \
  33                 struct struct_name *entry = lookup_hash(id, hash_ptr);  \
  34                                                                         \
  35                 while (entry && id != entry->id)                        \
  36                         entry = entry->next;                            \
  37                                                                         \
  38                 (entry && id == entry->id ? entry->struct_member : 0);  \
  39         })
  40
  41 char *lookup_port_udp(unsigned int id)
  42 {
  43         return __do_lookup_inline(id, port, &eth_ports_udp, port);
  44 }
  45
  46 char *lookup_port_tcp(unsigned int id)
  47 {
  48         return __do_lookup_inline(id, port, &eth_ports_tcp, port);
  49 }
  50
  51 char *lookup_ether_type(unsigned int id)
  52 {
  53         return __do_lookup_inline(id, port, &eth_ether_types, port);
  54 }
  55
  56 #ifdef __WITH_PROTOS
  57 static inline void dissector_init_entry(int type)
  58 {
  59         dissector_set_print_type(&ethernet_ops, type);
  60 }
  61
  62 static inline void dissector_init_exit(int type)
  63 {
  64         dissector_set_print_type(&none_ops, type);
  65 }
  66
  67 static void dissector_init_layer_2(int type)
  68 {
  69         init_hash(&eth_lay2);
  70         INSERT_HASH_PROTOS(arp_ops, eth_lay2);
  71         INSERT_HASH_PROTOS(vlan_ops, eth_lay2);
  72         INSERT_HASH_PROTOS(ipv4_ops, eth_lay2);
  73         INSERT_HASH_PROTOS(ipv6_ops, eth_lay2);
  74         INSERT_HASH_PROTOS(QinQ_ops, eth_lay2);
  75         INSERT_HASH_PROTOS(mpls_uc_ops, eth_lay2);
  76         for_each_hash_int(&eth_lay2, dissector_set_print_type, type);
  77 }
  78
  79 static void dissector_init_layer_3(int type)
  80 {
  81         init_hash(&eth_lay3);
  82         INSERT_HASH_PROTOS(icmpv4_ops, eth_lay3);
  83         INSERT_HASH_PROTOS(icmpv6_ops, eth_lay3);
  84         INSERT_HASH_PROTOS(igmp_ops, eth_lay3);
  85         INSERT_HASH_PROTOS(ip_auth_ops, eth_lay3);
  86         INSERT_HASH_PROTOS(ip_esp_ops, eth_lay3);
  87         INSERT_HASH_PROTOS(ipv6_dest_opts_ops, eth_lay3);
  88         INSERT_HASH_PROTOS(ipv6_fragm_ops, eth_lay3);
  89         INSERT_HASH_PROTOS(ipv6_hop_by_hop_ops, eth_lay3);
  90         INSERT_HASH_PROTOS(ipv6_in_ipv4_ops, eth_lay3);
  91         INSERT_HASH_PROTOS(ipv6_mobility_ops, eth_lay3);
  92         INSERT_HASH_PROTOS(ipv6_no_next_header_ops, eth_lay3);
  93         INSERT_HASH_PROTOS(ipv6_routing_ops, eth_lay3);
  94         INSERT_HASH_PROTOS(tcp_ops, eth_lay3);
  95         INSERT_HASH_PROTOS(udp_ops, eth_lay3);
  96         for_each_hash_int(&eth_lay3, dissector_set_print_type, type);
  97 }
  98 #else
  99 static inline void dissector_init_entry(int type) {}
 100 static inline void dissector_init_exit(int type) {}
 101 static void dissector_init_layer_2(int type) {}
 102 static void dissector_init_layer_3(int type) {}
 103 #endif /* __WITH_PROTOS */
 104
 105 enum ports {
 106         PORTS_UDP,
 107         PORTS_TCP,
 108         PORTS_ETHER,
 109 };
 110
 111 static void dissector_init_ports(enum ports which)
 112 {
 113         FILE *fp;
 114         char buff[128], *ptr, *file;
 115         struct hash_table *table;
 116         struct port *p;
 117         void **pos;
 118
 119         switch (which) {
 120         case PORTS_UDP:
 121                 file = "/etc/netsniff-ng/udp.conf";
 122                 table = &eth_ports_udp;
 123                 break;
 124         case PORTS_TCP:
 125                 file = "/etc/netsniff-ng/tcp.conf";
 126                 table = &eth_ports_tcp;
 127                 break;
 128         case PORTS_ETHER:
 129                 file = "/etc/netsniff-ng/ether.conf";
 130                 table = &eth_ether_types;
 131                 break;
 132         default:
 133                 bug();
 134         }
 135
 136         fp = fopen(file, "r");
 137         if (!fp)
 138                 panic("No %s found!\n", file);
 139
 140         memset(buff, 0, sizeof(buff));
 141
 142         while (fgets(buff, sizeof(buff), fp) != NULL) {
 143                 buff[sizeof(buff) - 1] = 0;
 144                 ptr = buff;
 145
 146                 p = xmalloc(sizeof(*p));
 147                 p->id = strtol(ptr, &ptr, 0);
 148
 149                 if ((ptr = strstr(buff, ", ")))
 150                         ptr += strlen(", ");
 151                 ptr = strtrim_right(ptr, '\n');
 152                 ptr = strtrim_right(ptr, ' ');
 153
 154                 p->port = xstrdup(ptr);
 155                 p->next = NULL;
 156
 157                 pos = insert_hash(p->id, p, table);
 158                 if (pos) {
 159                         p->next = *pos;
 160                         *pos = p;
 161                 }
 162
 163                 memset(buff, 0, sizeof(buff));
 164         }
 165
 166         fclose(fp);
 167 }
 168
 169 static int dissector_cleanup_ports(void *ptr)
 170 {
 171         struct port *tmp, *p = ptr;
 172
 173         if (!ptr)
 174                 return 0;
 175
 176         while ((tmp = p->next)) {
 177                 xfree(p->port);
 178                 xfree(p);
 179                 p = tmp;
 180         }
 181
 182         xfree(p->port);
 183         xfree(p);
 184
 185         return 0;
 186 }
 187
 188 void dissector_init_ethernet(int fnttype)
 189 {
 190         dissector_init_entry(fnttype);
 191         dissector_init_layer_2(fnttype);
 192         dissector_init_layer_3(fnttype);
 193         dissector_init_exit(fnttype);
 194
 195 #ifdef __WITH_PROTOS
 196         dissector_init_oui();
 197 #endif
 198         dissector_init_ports(PORTS_UDP);
 199         dissector_init_ports(PORTS_TCP);
 200         dissector_init_ports(PORTS_ETHER);
 201 }
 202
 203 void dissector_cleanup_ethernet(void)
 204 {
 205         free_hash(&eth_lay2);
 206         free_hash(&eth_lay3);
 207
 208         for_each_hash(&eth_ether_types, dissector_cleanup_ports);
 209         for_each_hash(&eth_ports_udp, dissector_cleanup_ports);
 210         for_each_hash(&eth_ports_tcp, dissector_cleanup_ports);
 211
 212         free_hash(&eth_ether_types);
 213         free_hash(&eth_ports_udp);
 214         free_hash(&eth_ports_tcp);
 215
 216 #ifdef __WITH_PROTOS
 217         dissector_cleanup_oui();
 218 #endif
 219 }