2 * Copyright (c) 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 1998
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
21 * Name to id translation routines used by the scanner.
22 * These functions are not time critical.
30 #include <sys/types.h>
31 #include <netdnet/dnetdb.h>
40 * To quote the MSDN page for getaddrinfo() at
42 * https://msdn.microsoft.com/en-us/library/windows/desktop/ms738520(v=vs.85).aspx
44 * "Support for getaddrinfo on Windows 2000 and older versions
45 * The getaddrinfo function was added to the Ws2_32.dll on Windows XP and
46 * later. To execute an application that uses this function on earlier
47 * versions of Windows, then you need to include the Ws2tcpip.h and
48 * Wspiapi.h files. When the Wspiapi.h include file is added, the
49 * getaddrinfo function is defined to the WspiapiGetAddrInfo inline
50 * function in the Wspiapi.h file. At runtime, the WspiapiGetAddrInfo
51 * function is implemented in such a way that if the Ws2_32.dll or the
52 * Wship6.dll (the file containing getaddrinfo in the IPv6 Technology
53 * Preview for Windows 2000) does not include getaddrinfo, then a
54 * version of getaddrinfo is implemented inline based on code in the
55 * Wspiapi.h header file. This inline code will be used on older Windows
56 * platforms that do not natively support the getaddrinfo function."
58 * We use getaddrinfo(), so we include Wspiapi.h here.
63 #include <sys/param.h>
64 #include <sys/types.h>
65 #include <sys/socket.h>
68 #include <netinet/in.h>
70 #ifdef HAVE_ETHER_HOSTTON
71 #if defined(NET_ETHERNET_H_DECLARES_ETHER_HOSTTON)
73 * OK, just include <net/ethernet.h>.
75 #include <net/ethernet.h>
76 #elif defined(NETINET_ETHER_H_DECLARES_ETHER_HOSTTON)
78 * OK, just include <netinet/ether.h>
80 #include <netinet/ether.h>
81 #elif defined(SYS_ETHERNET_H_DECLARES_ETHER_HOSTTON)
83 * OK, just include <sys/ethernet.h>
85 #include <sys/ethernet.h>
86 #elif defined(ARPA_INET_H_DECLARES_ETHER_HOSTTON)
88 * OK, just include <arpa/inet.h>
90 #include <arpa/inet.h>
91 #elif defined(NETINET_IF_ETHER_H_DECLARES_ETHER_HOSTTON)
93 * OK, include <netinet/if_ether.h>, after all the other stuff we
94 * need to include or define for its benefit.
96 #define NEED_NETINET_IF_ETHER_H
99 * We'll have to declare it ourselves.
100 * If <netinet/if_ether.h> defines struct ether_addr, include
101 * it. Otherwise, define it ourselves.
103 #ifdef HAVE_STRUCT_ETHER_ADDR
104 #define NEED_NETINET_IF_ETHER_H
105 #else /* HAVE_STRUCT_ETHER_ADDR */
107 unsigned char ether_addr_octet
[6];
109 #endif /* HAVE_STRUCT_ETHER_ADDR */
110 #endif /* what declares ether_hostton() */
112 #ifdef NEED_NETINET_IF_ETHER_H
113 #include <net/if.h> /* Needed on some platforms */
114 #include <netinet/in.h> /* Needed on some platforms */
115 #include <netinet/if_ether.h>
116 #endif /* NEED_NETINET_IF_ETHER_H */
118 #ifndef HAVE_DECL_ETHER_HOSTTON
120 * No header declares it, so declare it ourselves.
122 extern int ether_hostton(const char *, struct ether_addr
*);
123 #endif /* !defined(HAVE_DECL_ETHER_HOSTTON) */
124 #endif /* HAVE_ETHER_HOSTTON */
126 #include <arpa/inet.h>
135 #include "pcap-int.h"
137 #include "diag-control.h"
140 #include <pcap/namedb.h>
141 #include "nametoaddr.h"
143 #ifdef HAVE_OS_PROTO_H
144 #include "os-proto.h"
148 #define NTOHL(x) (x) = ntohl(x)
149 #define NTOHS(x) (x) = ntohs(x)
153 * Convert host name to internet address.
154 * Return 0 upon failure.
155 * XXX - not thread-safe; don't use it inside libpcap.
158 pcap_nametoaddr(const char *name
)
161 static bpf_u_int32
*hlist
[2];
167 * gethostbyname() is deprecated on Windows, perhaps because
168 * it's not thread-safe, or because it doesn't support IPv6,
171 * We deprecate pcap_nametoaddr() on all platforms because
172 * it's not thread-safe; we supply it for backwards compatibility,
173 * so suppress the deprecation warning. We could, I guess,
174 * use getaddrinfo() and construct the array ourselves, but
175 * that's probably not worth the effort, as that wouldn't make
176 * this thread-safe - we can't change the API to require that
177 * our caller free the address array, so we still have to reuse
181 if ((hp
= gethostbyname(name
)) != NULL
) {
184 hlist
[0] = (bpf_u_int32
*)hp
->h_addr
;
188 for (p
= (bpf_u_int32
**)hp
->h_addr_list
; *p
; ++p
)
190 return (bpf_u_int32
**)hp
->h_addr_list
;
198 pcap_nametoaddrinfo(const char *name
)
200 struct addrinfo hints
, *res
;
203 memset(&hints
, 0, sizeof(hints
));
204 hints
.ai_family
= PF_UNSPEC
;
205 hints
.ai_socktype
= SOCK_STREAM
; /*not really*/
206 hints
.ai_protocol
= IPPROTO_TCP
; /*not really*/
207 error
= getaddrinfo(name
, NULL
, &hints
, &res
);
215 * Convert net name to internet address.
216 * Return 0 upon failure.
217 * XXX - not guaranteed to be thread-safe! See below for platforms
218 * on which it is thread-safe and on which it isn't.
220 #if defined(_WIN32) || defined(__CYGWIN__)
222 pcap_nametonetaddr(const char *name _U_
)
225 * There's no "getnetbyname()" on Windows.
227 * XXX - I guess we could use the BSD code to read
228 * C:\Windows\System32\drivers\etc/networks, assuming
229 * that's its home on all the versions of Windows
230 * we use, but that file probably just has the loopback
231 * network on 127/24 on 99 44/100% of Windows machines.
233 * (Heck, these days it probably just has that on 99 44/100%
234 * of *UN*X* machines.)
240 pcap_nametonetaddr(const char *name
)
246 #if defined(HAVE_LINUX_GETNETBYNAME_R)
248 * We have Linux's reentrant getnetbyname_r().
250 struct netent result_buf
;
251 char buf
[1024]; /* arbitrary size */
256 * Apparently, the man page at
258 * http://man7.org/linux/man-pages/man3/getnetbyname_r.3.html
262 * If the function call successfully obtains a network record,
263 * then *result is set pointing to result_buf; otherwise, *result
266 * and, in fact, at least in some versions of GNU libc, it does
267 * *not* always get set if getnetbyname_r() succeeds.
270 err
= getnetbyname_r(name
, &result_buf
, buf
, sizeof buf
, &np
,
274 * XXX - dynamically allocate the buffer, and make it
275 * bigger if we get ERANGE back?
279 #elif defined(HAVE_SOLARIS_IRIX_GETNETBYNAME_R)
281 * We have Solaris's and IRIX's reentrant getnetbyname_r().
283 struct netent result_buf
;
284 char buf
[1024]; /* arbitrary size */
286 np
= getnetbyname_r(name
, &result_buf
, buf
, (int)sizeof buf
);
287 #elif defined(HAVE_AIX_GETNETBYNAME_R)
289 * We have AIX's reentrant getnetbyname_r().
291 struct netent result_buf
;
292 struct netent_data net_data
;
294 if (getnetbyname_r(name
, &result_buf
, &net_data
) == -1)
300 * We don't have any getnetbyname_r(); either we have a
301 * getnetbyname() that uses thread-specific data, in which
302 * case we're thread-safe (sufficiently recent FreeBSD,
303 * sufficiently recent Darwin-based OS, sufficiently recent
304 * HP-UX, sufficiently recent Tru64 UNIX), or we have the
305 * traditional getnetbyname() (everything else, including
306 * current NetBSD and OpenBSD), in which case we're not
309 np
= getnetbyname(name
);
319 * Convert a port name to its port and protocol numbers.
320 * We assume only TCP or UDP.
321 * Return 0 upon failure.
324 pcap_nametoport(const char *name
, int *port
, int *proto
)
326 struct addrinfo hints
, *res
, *ai
;
328 struct sockaddr_in
*in4
;
330 struct sockaddr_in6
*in6
;
336 * We check for both TCP and UDP in case there are
339 memset(&hints
, 0, sizeof(hints
));
340 hints
.ai_family
= PF_UNSPEC
;
341 hints
.ai_socktype
= SOCK_STREAM
;
342 hints
.ai_protocol
= IPPROTO_TCP
;
343 error
= getaddrinfo(NULL
, name
, &hints
, &res
);
345 if (error
!= EAI_NONAME
&&
346 error
!= EAI_SERVICE
) {
348 * This is a real error, not just "there's
349 * no such service name".
350 * XXX - this doesn't return an error string.
356 * OK, we found it. Did it find anything?
358 for (ai
= res
; ai
!= NULL
; ai
= ai
->ai_next
) {
360 * Does it have an address?
362 if (ai
->ai_addr
!= NULL
) {
364 * Yes. Get a port number; we're done.
366 if (ai
->ai_addr
->sa_family
== AF_INET
) {
367 in4
= (struct sockaddr_in
*)ai
->ai_addr
;
368 tcp_port
= ntohs(in4
->sin_port
);
372 if (ai
->ai_addr
->sa_family
== AF_INET6
) {
373 in6
= (struct sockaddr_in6
*)ai
->ai_addr
;
374 tcp_port
= ntohs(in6
->sin6_port
);
383 memset(&hints
, 0, sizeof(hints
));
384 hints
.ai_family
= PF_UNSPEC
;
385 hints
.ai_socktype
= SOCK_DGRAM
;
386 hints
.ai_protocol
= IPPROTO_UDP
;
387 error
= getaddrinfo(NULL
, name
, &hints
, &res
);
389 if (error
!= EAI_NONAME
&&
390 error
!= EAI_SERVICE
) {
392 * This is a real error, not just "there's
393 * no such service name".
394 * XXX - this doesn't return an error string.
400 * OK, we found it. Did it find anything?
402 for (ai
= res
; ai
!= NULL
; ai
= ai
->ai_next
) {
404 * Does it have an address?
406 if (ai
->ai_addr
!= NULL
) {
408 * Yes. Get a port number; we're done.
410 if (ai
->ai_addr
->sa_family
== AF_INET
) {
411 in4
= (struct sockaddr_in
*)ai
->ai_addr
;
412 udp_port
= ntohs(in4
->sin_port
);
416 if (ai
->ai_addr
->sa_family
== AF_INET6
) {
417 in6
= (struct sockaddr_in6
*)ai
->ai_addr
;
418 udp_port
= ntohs(in6
->sin6_port
);
428 * We need to check /etc/services for ambiguous entries.
429 * If we find an ambiguous entry, and it has the
430 * same port number, change the proto to PROTO_UNDEF
431 * so both TCP and UDP will be checked.
435 *proto
= IPPROTO_TCP
;
437 if (udp_port
== tcp_port
)
438 *proto
= PROTO_UNDEF
;
441 /* Can't handle ambiguous names that refer
442 to different port numbers. */
443 warning("ambiguous port %s in /etc/services",
451 *proto
= IPPROTO_UDP
;
454 #if defined(ultrix) || defined(__osf__)
455 /* Special hack in case NFS isn't in /etc/services */
456 if (strcmp(name
, "nfs") == 0) {
458 *proto
= PROTO_UNDEF
;
466 * Convert a string in the form PPP-PPP, where correspond to ports, to
467 * a starting and ending port in a port range.
468 * Return 0 on failure.
471 pcap_nametoportrange(const char *name
, int *port1
, int *port2
, int *proto
)
477 if (sscanf(name
, "%d-%d", &p1
, &p2
) != 2) {
478 if ((cpy
= strdup(name
)) == NULL
)
481 if ((off
= strchr(cpy
, '-')) == NULL
) {
488 if (pcap_nametoport(cpy
, port1
, proto
) == 0) {
494 if (pcap_nametoport(off
+ 1, port2
, proto
) == 0) {
500 if (*proto
!= save_proto
)
501 *proto
= PROTO_UNDEF
;
505 *proto
= PROTO_UNDEF
;
512 * XXX - not guaranteed to be thread-safe! See below for platforms
513 * on which it is thread-safe and on which it isn't.
516 pcap_nametoproto(const char *str
)
519 #if defined(HAVE_LINUX_GETNETBYNAME_R)
521 * We have Linux's reentrant getprotobyname_r().
523 struct protoent result_buf
;
524 char buf
[1024]; /* arbitrary size */
527 err
= getprotobyname_r(str
, &result_buf
, buf
, sizeof buf
, &p
);
530 * XXX - dynamically allocate the buffer, and make it
531 * bigger if we get ERANGE back?
535 #elif defined(HAVE_SOLARIS_IRIX_GETNETBYNAME_R)
537 * We have Solaris's and IRIX's reentrant getprotobyname_r().
539 struct protoent result_buf
;
540 char buf
[1024]; /* arbitrary size */
542 p
= getprotobyname_r(str
, &result_buf
, buf
, (int)sizeof buf
);
543 #elif defined(HAVE_AIX_GETNETBYNAME_R)
545 * We have AIX's reentrant getprotobyname_r().
547 struct protoent result_buf
;
548 struct protoent_data proto_data
;
550 if (getprotobyname_r(str
, &result_buf
, &proto_data
) == -1)
556 * We don't have any getprotobyname_r(); either we have a
557 * getprotobyname() that uses thread-specific data, in which
558 * case we're thread-safe (sufficiently recent FreeBSD,
559 * sufficiently recent Darwin-based OS, sufficiently recent
560 * HP-UX, sufficiently recent Tru64 UNIX, Windows), or we have
561 * the traditional getprotobyname() (everything else, including
562 * current NetBSD and OpenBSD), in which case we're not
565 p
= getprotobyname(str
);
573 #include "ethertype.h"
581 * Static data base of ether protocol types.
582 * tcpdump used to import this, and it's declared as an export on
583 * Debian, at least, so make it a public symbol, even though we
584 * don't officially export it by declaring it in a header file.
585 * (Programs *should* do this themselves, as tcpdump now does.)
587 * We declare it here, right before defining it, to squelch any
588 * warnings we might get from compilers about the lack of a
591 PCAP_API
struct eproto eproto_db
[];
592 PCAP_API_DEF
struct eproto eproto_db
[] = {
593 { "aarp", ETHERTYPE_AARP
},
594 { "arp", ETHERTYPE_ARP
},
595 { "atalk", ETHERTYPE_ATALK
},
596 { "decnet", ETHERTYPE_DN
},
597 { "ip", ETHERTYPE_IP
},
599 { "ip6", ETHERTYPE_IPV6
},
601 { "lat", ETHERTYPE_LAT
},
602 { "loopback", ETHERTYPE_LOOPBACK
},
603 { "mopdl", ETHERTYPE_MOPDL
},
604 { "moprc", ETHERTYPE_MOPRC
},
605 { "rarp", ETHERTYPE_REVARP
},
606 { "sca", ETHERTYPE_SCA
},
611 pcap_nametoeproto(const char *s
)
613 struct eproto
*p
= eproto_db
;
616 if (strcmp(p
->s
, s
) == 0)
625 /* Static data base of LLC values. */
626 static struct eproto llc_db
[] = {
627 { "iso", LLCSAP_ISONS
},
628 { "stp", LLCSAP_8021D
},
629 { "ipx", LLCSAP_IPX
},
630 { "netbeui", LLCSAP_NETBEUI
},
635 pcap_nametollc(const char *s
)
637 struct eproto
*p
= llc_db
;
640 if (strcmp(p
->s
, s
) == 0)
647 /* Hex digit to 8-bit unsigned integer. */
651 if (c
>= '0' && c
<= '9')
652 return (u_char
)(c
- '0');
653 else if (c
>= 'a' && c
<= 'f')
654 return (u_char
)(c
- 'a' + 10);
656 return (u_char
)(c
- 'A' + 10);
660 __pcap_atoin(const char *s
, bpf_u_int32
*addr
)
669 while (*s
&& *s
!= '.') {
671 /* The result will be > 255 */
674 n
= n
* 10 + *s
++ - '0';
689 __pcap_atodn(const char *s
, bpf_u_int32
*addr
)
692 #define AREAMASK 0176000
693 #define NODEMASK 01777
697 if (sscanf(s
, "%d.%d", &area
, &node
) != 2)
700 *addr
= (area
<< AREASHIFT
) & AREAMASK
;
701 *addr
|= (node
& NODEMASK
);
707 * Convert 's', which can have the one of the forms:
709 * "xx:xx:xx:xx:xx:xx"
710 * "xx.xx.xx.xx.xx.xx"
711 * "xx-xx-xx-xx-xx-xx"
715 * (or various mixes of ':', '.', and '-') into a new
716 * ethernet address. Assumes 's' is well formed.
719 pcap_ether_aton(const char *s
)
721 register u_char
*ep
, *e
;
724 e
= ep
= (u_char
*)malloc(6);
729 if (*s
== ':' || *s
== '.' || *s
== '-')
732 if (PCAP_ISXDIGIT(*s
)) {
742 #ifndef HAVE_ETHER_HOSTTON
745 * XXX - not thread-safe, because pcap_next_etherent() isn't thread-
746 * safe! Needs a mutex or a thread-safe pcap_next_etherent().
749 pcap_ether_hostton(const char *name
)
751 register struct pcap_etherent
*ep
;
753 static FILE *fp
= NULL
;
757 fp
= fopen(PCAP_ETHERS_FILE
, "r");
761 } else if (fp
== NULL
)
766 while ((ep
= pcap_next_etherent(fp
)) != NULL
) {
767 if (strcmp(ep
->name
, name
) == 0) {
768 ap
= (u_char
*)malloc(6);
770 memcpy(ap
, ep
->addr
, 6);
780 * Use the OS-supplied routine.
781 * This *should* be thread-safe; the API doesn't have a static buffer.
784 pcap_ether_hostton(const char *name
)
790 if (ether_hostton(name
, (struct ether_addr
*)a
) == 0) {
791 ap
= (u_char
*)malloc(6);
793 memcpy((char *)ap
, (char *)a
, 6);
800 * XXX - not guaranteed to be thread-safe!
804 __pcap_nametodnaddr(const char *name
, u_short
*res
)
806 struct nodeent
*getnodebyname();
809 nep
= getnodebyname(name
);
810 if (nep
== ((struct nodeent
*)0))
813 memcpy((char *)res
, (char *)nep
->n_addr
, sizeof(unsigned short));
816 __pcap_nametodnaddr(const char *name _U_
, u_short
*res _U_
)