2 * Copyright (c) 1998-2011 The TCPDUMP project
4 * Redistribution and use in source and binary forms, with or without
5 * modification, are permitted provided that: (1) source code
6 * distributions retain the above copyright notice and this paragraph
7 * in its entirety, and (2) distributions including binary code include
8 * the above copyright notice and this paragraph in its entirety in
9 * the documentation or other materials provided with the distribution.
10 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND
11 * WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT
12 * LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS
13 * FOR A PARTICULAR PURPOSE.
15 * Original code by Hannes Gredler (hannes@gredler.at)
18 /* \summary: Resource Public Key Infrastructure (RPKI) to Router Protocol printer */
20 /* specification: RFC 6810 */
26 #include <netdissect-stdinc.h>
30 #include "netdissect.h"
32 #include "addrtoname.h"
34 static const char tstr
[] = "[|RPKI-RTR]";
37 * RPKI/Router PDU header
39 * Here's what the PDU header looks like.
40 * The length does include the version and length fields.
42 typedef struct rpki_rtr_pdu_
{
43 u_char version
; /* Version number */
44 u_char pdu_type
; /* PDU type */
46 u_char session_id
[2]; /* Session id */
47 u_char error_code
[2]; /* Error code */
51 #define RPKI_RTR_PDU_OVERHEAD (offsetof(rpki_rtr_pdu, rpki_rtr_pdu_msg))
56 typedef struct rpki_rtr_pdu_ipv4_prefix_
{
57 rpki_rtr_pdu pdu_header
;
64 } rpki_rtr_pdu_ipv4_prefix
;
69 typedef struct rpki_rtr_pdu_ipv6_prefix_
{
70 rpki_rtr_pdu pdu_header
;
77 } rpki_rtr_pdu_ipv6_prefix
;
82 typedef struct rpki_rtr_pdu_error_report_
{
83 rpki_rtr_pdu pdu_header
;
84 u_char encapsulated_pdu_length
[4]; /* Encapsulated PDU length */
85 /* Copy of Erroneous PDU (variable, optional) */
86 /* Length of Error Text (4 octets in network byte order) */
87 /* Arbitrary Text of Error Diagnostic Message (variable, optional) */
88 } rpki_rtr_pdu_error_report
;
93 #define RPKI_RTR_SERIAL_NOTIFY_PDU 0
94 #define RPKI_RTR_SERIAL_QUERY_PDU 1
95 #define RPKI_RTR_RESET_QUERY_PDU 2
96 #define RPKI_RTR_CACHE_RESPONSE_PDU 3
97 #define RPKI_RTR_IPV4_PREFIX_PDU 4
98 #define RPKI_RTR_IPV6_PREFIX_PDU 6
99 #define RPKI_RTR_END_OF_DATA_PDU 7
100 #define RPKI_RTR_CACHE_RESET_PDU 8
101 #define RPKI_RTR_ERROR_REPORT_PDU 10
103 static const struct tok rpki_rtr_pdu_values
[] = {
104 { RPKI_RTR_SERIAL_NOTIFY_PDU
, "Serial Notify" },
105 { RPKI_RTR_SERIAL_QUERY_PDU
, "Serial Query" },
106 { RPKI_RTR_RESET_QUERY_PDU
, "Reset Query" },
107 { RPKI_RTR_CACHE_RESPONSE_PDU
, "Cache Response" },
108 { RPKI_RTR_IPV4_PREFIX_PDU
, "IPV4 Prefix" },
109 { RPKI_RTR_IPV6_PREFIX_PDU
, "IPV6 Prefix" },
110 { RPKI_RTR_END_OF_DATA_PDU
, "End of Data" },
111 { RPKI_RTR_CACHE_RESET_PDU
, "Cache Reset" },
112 { RPKI_RTR_ERROR_REPORT_PDU
, "Error Report" },
116 static const struct tok rpki_rtr_error_codes
[] = {
117 { 0, "Corrupt Data" },
118 { 1, "Internal Error" },
119 { 2, "No Data Available" },
120 { 3, "Invalid Request" },
121 { 4, "Unsupported Protocol Version" },
122 { 5, "Unsupported PDU Type" },
123 { 6, "Withdrawal of Unknown Record" },
124 { 7, "Duplicate Announcement Received" },
129 * Build a indentation string for a given indentation level.
130 * XXX this should be really in util.c
133 indent_string (u_int indent
)
142 * Does the static buffer fit ?
144 if (sizeof(buf
) < ((indent
/8) + (indent
%8) + 2)) {
154 while (indent
>= 8) {
175 * Print a single PDU.
178 rpki_rtr_pdu_print (netdissect_options
*ndo
, const u_char
*tptr
, const u_int len
,
179 const u_char recurse
, const u_int indent
)
181 const rpki_rtr_pdu
*pdu_header
;
182 u_int pdu_type
, pdu_len
, hexdump
;
185 /* Protocol Version */
186 ND_TCHECK_8BITS(tptr
);
188 /* Skip the rest of the input buffer because even if this is
189 * a well-formed PDU of a future RPKI-Router protocol version
190 * followed by a well-formed PDU of RPKI-Router protocol
191 * version 0, there is no way to know exactly how to skip the
194 ND_PRINT((ndo
, "%sRPKI-RTRv%u (unknown)", indent_string(8), *tptr
));
197 if (len
< sizeof(rpki_rtr_pdu
)) {
198 ND_PRINT((ndo
, "(%u bytes is too few to decode)", len
));
201 ND_TCHECK2(*tptr
, sizeof(rpki_rtr_pdu
));
202 pdu_header
= (const rpki_rtr_pdu
*)tptr
;
203 pdu_type
= pdu_header
->pdu_type
;
204 pdu_len
= EXTRACT_32BITS(pdu_header
->length
);
205 /* Do not check bounds with pdu_len yet, do it in the case blocks
206 * below to make it possible to decode at least the beginning of
207 * a truncated Error Report PDU or a truncated encapsulated PDU.
211 ND_PRINT((ndo
, "%sRPKI-RTRv%u, %s PDU (%u), length: %u",
214 tok2str(rpki_rtr_pdu_values
, "Unknown", pdu_type
),
216 if (pdu_len
< sizeof(rpki_rtr_pdu
) || pdu_len
> len
)
222 * The following PDUs share the message format.
224 case RPKI_RTR_SERIAL_NOTIFY_PDU
:
225 case RPKI_RTR_SERIAL_QUERY_PDU
:
226 case RPKI_RTR_END_OF_DATA_PDU
:
227 if (pdu_len
!= sizeof(rpki_rtr_pdu
) + 4)
229 ND_TCHECK2(*tptr
, pdu_len
);
230 msg
= (const u_char
*)(pdu_header
+ 1);
231 ND_PRINT((ndo
, "%sSession ID: 0x%04x, Serial: %u",
232 indent_string(indent
+2),
233 EXTRACT_16BITS(pdu_header
->u
.session_id
),
234 EXTRACT_32BITS(msg
)));
238 * The following PDUs share the message format.
240 case RPKI_RTR_RESET_QUERY_PDU
:
241 case RPKI_RTR_CACHE_RESET_PDU
:
242 if (pdu_len
!= sizeof(rpki_rtr_pdu
))
244 /* no additional boundary to check */
251 case RPKI_RTR_CACHE_RESPONSE_PDU
:
252 if (pdu_len
!= sizeof(rpki_rtr_pdu
))
254 /* no additional boundary to check */
255 ND_PRINT((ndo
, "%sSession ID: 0x%04x",
256 indent_string(indent
+2),
257 EXTRACT_16BITS(pdu_header
->u
.session_id
)));
260 case RPKI_RTR_IPV4_PREFIX_PDU
:
262 const rpki_rtr_pdu_ipv4_prefix
*pdu
;
264 if (pdu_len
!= sizeof(rpki_rtr_pdu
) + 12)
266 ND_TCHECK2(*tptr
, pdu_len
);
267 pdu
= (const rpki_rtr_pdu_ipv4_prefix
*)tptr
;
268 ND_PRINT((ndo
, "%sIPv4 Prefix %s/%u-%u, origin-as %u, flags 0x%02x",
269 indent_string(indent
+2),
270 ipaddr_string(ndo
, pdu
->prefix
),
271 pdu
->prefix_length
, pdu
->max_length
,
272 EXTRACT_32BITS(pdu
->as
), pdu
->flags
));
276 case RPKI_RTR_IPV6_PREFIX_PDU
:
278 const rpki_rtr_pdu_ipv6_prefix
*pdu
;
280 if (pdu_len
!= sizeof(rpki_rtr_pdu
) + 24)
282 ND_TCHECK2(*tptr
, pdu_len
);
283 pdu
= (const rpki_rtr_pdu_ipv6_prefix
*)tptr
;
284 ND_PRINT((ndo
, "%sIPv6 Prefix %s/%u-%u, origin-as %u, flags 0x%02x",
285 indent_string(indent
+2),
286 ip6addr_string(ndo
, pdu
->prefix
),
287 pdu
->prefix_length
, pdu
->max_length
,
288 EXTRACT_32BITS(pdu
->as
), pdu
->flags
));
292 case RPKI_RTR_ERROR_REPORT_PDU
:
294 const rpki_rtr_pdu_error_report
*pdu
;
295 u_int encapsulated_pdu_length
, text_length
, tlen
, error_code
;
297 tlen
= sizeof(rpki_rtr_pdu
);
298 /* Do not test for the "Length of Error Text" data element yet. */
299 if (pdu_len
< tlen
+ 4)
301 ND_TCHECK2(*tptr
, tlen
+ 4);
302 /* Safe up to and including the "Length of Encapsulated PDU"
303 * data element, more data elements may be present.
305 pdu
= (const rpki_rtr_pdu_error_report
*)tptr
;
306 encapsulated_pdu_length
= EXTRACT_32BITS(pdu
->encapsulated_pdu_length
);
309 error_code
= EXTRACT_16BITS(pdu
->pdu_header
.u
.error_code
);
310 ND_PRINT((ndo
, "%sError code: %s (%u), Encapsulated PDU length: %u",
311 indent_string(indent
+2),
312 tok2str(rpki_rtr_error_codes
, "Unknown", error_code
),
313 error_code
, encapsulated_pdu_length
));
315 if (encapsulated_pdu_length
) {
316 /* Section 5.10 of RFC 6810 says:
317 * "An Error Report PDU MUST NOT be sent for an Error Report PDU."
319 * However, as far as the protocol encoding goes Error Report PDUs can
320 * happen to be nested in each other, however many times, in which case
321 * the decoder should still print such semantically incorrect PDUs.
323 * That said, "the Erroneous PDU field MAY be truncated" (ibid), thus
324 * to keep things simple this implementation decodes only the two
325 * outermost layers of PDUs and makes bounds checks in the outer and
326 * the inner PDU independently.
328 if (pdu_len
< tlen
+ encapsulated_pdu_length
)
331 ND_TCHECK2(*tptr
, tlen
+ encapsulated_pdu_length
);
334 ND_PRINT((ndo
, "%s-----encapsulated PDU-----", indent_string(indent
+4)));
335 rpki_rtr_pdu_print(ndo
, tptr
+ tlen
,
336 encapsulated_pdu_length
, 0, indent
+ 2);
338 tlen
+= encapsulated_pdu_length
;
341 if (pdu_len
< tlen
+ 4)
343 ND_TCHECK2(*tptr
, tlen
+ 4);
344 /* Safe up to and including the "Length of Error Text" data element,
345 * one more data element may be present.
349 * Extract, trail-zero and print the Error message.
351 text_length
= EXTRACT_32BITS(tptr
+ tlen
);
355 if (pdu_len
< tlen
+ text_length
)
357 /* fn_printn() makes the bounds check */
358 ND_PRINT((ndo
, "%sError text: ", indent_string(indent
+2)));
359 if (fn_printn(ndo
, tptr
+ tlen
, text_length
, ndo
->ndo_snapend
))
366 ND_TCHECK2(*tptr
, pdu_len
);
369 * Unknown data, please hexdump.
374 /* do we also want to see a hex dump ? */
375 if (ndo
->ndo_vflag
> 1 || (ndo
->ndo_vflag
&& hexdump
)) {
376 print_unknown_data(ndo
,tptr
,"\n\t ", pdu_len
);
381 ND_PRINT((ndo
, "%s", istr
));
382 ND_TCHECK2(*tptr
, len
);
385 ND_PRINT((ndo
, "\n\t%s", tstr
));
390 rpki_rtr_print(netdissect_options
*ndo
, register const u_char
*pptr
, register u_int len
)
392 if (!ndo
->ndo_vflag
) {
393 ND_PRINT((ndo
, ", RPKI-RTR"));
397 u_int pdu_len
= rpki_rtr_pdu_print(ndo
, pptr
, len
, 1, 8);
405 * c-style: whitesmith