dissector.h

   1 /*
   2  * netsniff-ng - the packet sniffing beast
   3  * Copyright 2009 - 2013 Daniel Borkmann.
   4  * Subject to the GPL, version 2.
   5  */
   6
   7 #ifndef DISSECTOR_H
   8 #define DISSECTOR_H
   9
  10 #include <stdlib.h>
  11 #include <stdint.h>
  12 #include <sys/socket.h>
  13 #include <linux/if_packet.h>
  14 #include <linux/if.h>
  15 #include <netlink/msg.h>
  16
  17 #include "ring.h"
  18 #include "tprintf.h"
  19 #include "linktype.h"
  20
  21 #define PRINT_NORM              0
  22 #define PRINT_LESS              1
  23 #define PRINT_HEX               2
  24 #define PRINT_ASCII             3
  25 #define PRINT_HEX_ASCII         4
  26 #define PRINT_NONE              5
  27
  28 extern char *if_indextoname(unsigned ifindex, char *ifname);
  29
  30 static const char * const packet_types[256] = {
  31         [PACKET_HOST]           =       "<",  /* Incoming */
  32         [PACKET_BROADCAST]      =       "B",  /* Broadcast */
  33         [PACKET_MULTICAST]      =       "M",  /* Multicast */
  34         [PACKET_OTHERHOST]      =       "P",  /* Promisc */
  35         [PACKET_OUTGOING]       =       ">",  /* Outgoing */
  36         [PACKET_USER]           =       ">U", /* To Userspace */
  37         [PACKET_KERNEL]         =       ">K", /* To Kernelspace */
  38 };
  39
  40 static inline const char *__show_ts_source(uint32_t status)
  41 {
  42         if (status & TP_STATUS_TS_RAW_HARDWARE)
  43                 return "(raw hw ts)";
  44         else if (status & TP_STATUS_TS_SYS_HARDWARE)
  45                 return "(sys hw ts)";
  46         else if (status & TP_STATUS_TS_SOFTWARE)
  47                 return "(sw ts)";
  48         else
  49                 return "";
  50 }
  51
  52 static inline void __show_frame_hdr(uint8_t *packet, size_t len, int linktype,
  53                                     struct sockaddr_ll *s_ll, void *raw_hdr,
  54                                     int mode, bool v3, unsigned long count)
  55 {
  56         char tmp[IFNAMSIZ];
  57         union tpacket_uhdr hdr;
  58         uint8_t pkttype = s_ll->sll_pkttype;
  59         bool is_nl;
  60
  61         if (mode == PRINT_NONE)
  62                 return;
  63
  64         /*
  65          * If we're capturing on nlmon0, all packets will have sll_pkttype set
  66          * to PACKET_OUTGOING, but we actually want PACKET_USER/PACKET_KERNEL as
  67          * it originally was set in the kernel. Thus, use nlmsghdr->nlmsg_pid to
  68          * restore the type.
  69          */
  70         is_nl = (linktype == LINKTYPE_NETLINK && len >= sizeof(struct nlmsghdr));
  71         if (is_nl && pkttype == PACKET_OUTGOING) {
  72                 struct nlmsghdr *hdr = (struct nlmsghdr *) packet;
  73                 pkttype = hdr->nlmsg_pid == 0 ? PACKET_KERNEL : PACKET_USER;
  74         }
  75
  76         hdr.raw = raw_hdr;
  77         switch (mode) {
  78         case PRINT_LESS:
  79                 tprintf("%s %s %u #%lu",
  80                         packet_types[pkttype] ? : "?",
  81                         if_indextoname(s_ll->sll_ifindex, tmp) ? : "?",
  82                         tpacket_uhdr(hdr, tp_len, v3),
  83                         count);
  84                 break;
  85         default:
  86                 tprintf("%s %s %u %us.%uns #%lu %s\n",
  87                         packet_types[pkttype] ? : "?",
  88                         if_indextoname(s_ll->sll_ifindex, tmp) ? : "?",
  89                         tpacket_uhdr(hdr, tp_len, v3),
  90                         tpacket_uhdr(hdr, tp_sec, v3),
  91                         tpacket_uhdr(hdr, tp_nsec, v3),
  92                         count,
  93                         v3 ? "" : __show_ts_source(hdr.h2->tp_status));
  94                 break;
  95         }
  96 }
  97
  98 static inline void show_frame_hdr(uint8_t *packet, size_t len, int linktype,
  99                                   struct frame_map *hdr, int mode,
 100                                   unsigned long count)
 101 {
 102         __show_frame_hdr(packet, len, linktype, &hdr->s_ll, &hdr->tp_h, mode,
 103                          false, count);
 104 }
 105
 106 extern void dissector_init_all(int fnttype);
 107 extern void dissector_entry_point(uint8_t *packet, size_t len, int linktype,
 108                                   int mode, struct sockaddr_ll *sll);
 109 extern void dissector_cleanup_all(void);
 110 extern int dissector_set_print_type(void *ptr, int type);
 111
 112 #endif /* DISSECTOR_H */