1 /* 2 * Copyright (c) 1990, 1991, 1993, 1994, 1995, 1996, 1997 3 * The Regents of the University of California. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that: (1) source code distributions 7 * retain the above copyright notice and this paragraph in its entirety, (2) 8 * distributions including binary code include the above copyright notice and 9 * this paragraph in its entirety in the documentation or other materials 10 * provided with the distribution, and (3) all advertising materials mentioning 11 * features or use of this software display the following acknowledgement: 12 * ``This product includes software developed by the University of California, 13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of 14 * the University nor the names of its contributors may be used to endorse 15 * or promote products derived from this software without specific prior 16 * written permission. 17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED 18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF 19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. 20 */ 21 22 #include <sys/cdefs.h> 23 #ifndef lint 24 __RCSID("$NetBSD: print-vjc.c,v 1.4 2014/11/20 03:05:03 christos Exp $"); 25 #endif 26 27 #define NETDISSECT_REWORKED 28 #ifdef HAVE_CONFIG_H 29 #include "config.h" 30 #endif 31 32 #include <tcpdump-stdinc.h> 33 34 #include "interface.h" 35 #include "slcompress.h" 36 #include "ppp.h" 37 38 /* 39 * XXX - for BSD/OS PPP, what packets get supplied with a PPP header type 40 * of PPP_VJC and what packets get supplied with a PPP header type of 41 * PPP_VJNC? PPP_VJNC is for "UNCOMPRESSED_TCP" packets, and PPP_VJC 42 * is for COMPRESSED_TCP packets (PPP_IP is used for TYPE_IP packets). 43 * 44 * RFC 1144 implies that, on the wire, the packet type is *not* needed 45 * for PPP, as different PPP protocol types can be used; it only needs 46 * to be put on the wire for SLIP. 47 * 48 * It also indicates that, for compressed SLIP: 49 * 50 * If the COMPRESSED_TCP bit is set in the first byte, it's 51 * a COMPRESSED_TCP packet; that byte is the change byte, and 52 * the COMPRESSED_TCP bit, 0x80, isn't used in the change byte. 53 * 54 * If the upper 4 bits of the first byte are 7, it's an 55 * UNCOMPRESSED_TCP packet; that byte is the first byte of 56 * the UNCOMPRESSED_TCP modified IP header, with a connection 57 * number in the protocol field, and with the version field 58 * being 7, not 4. 59 * 60 * Otherwise, the packet is an IPv4 packet (where the upper 4 bits 61 * of the packet are 4). 62 * 63 * So this routine looks as if it's sort-of intended to handle 64 * compressed SLIP, although it doesn't handle UNCOMPRESSED_TCP 65 * correctly for that (it doesn't fix the version number and doesn't 66 * do anything to the protocol field), and doesn't check for COMPRESSED_TCP 67 * packets correctly for that (you only check the first bit - see 68 * B.1 in RFC 1144). 69 * 70 * But it's called for BSD/OS PPP, not SLIP - perhaps BSD/OS does weird 71 * things with the headers? 72 * 73 * Without a BSD/OS VJC-compressed PPP trace, or knowledge of what the 74 * BSD/OS VJC code does, we can't say what's the case. 75 * 76 * We therefore leave "proto" - which is the PPP protocol type - in place, 77 * *not* marked as unused, for now, so that GCC warnings about the 78 * unused argument remind us that we should fix this some day. 79 */ 80 int 81 vjc_print(netdissect_options *ndo, register const char *bp, u_short proto _U_) 82 { 83 int i; 84 85 switch (bp[0] & 0xf0) { 86 case TYPE_IP: 87 if (ndo->ndo_eflag) 88 ND_PRINT((ndo, "(vjc type=IP) ")); 89 return PPP_IP; 90 case TYPE_UNCOMPRESSED_TCP: 91 if (ndo->ndo_eflag) 92 ND_PRINT((ndo, "(vjc type=raw TCP) ")); 93 return PPP_IP; 94 case TYPE_COMPRESSED_TCP: 95 if (ndo->ndo_eflag) 96 ND_PRINT((ndo, "(vjc type=compressed TCP) ")); 97 for (i = 0; i < 8; i++) { 98 if (bp[1] & (0x80 >> i)) 99 ND_PRINT((ndo, "%c", "?CI?SAWU"[i])); 100 } 101 if (bp[1]) 102 ND_PRINT((ndo, " ")); 103 ND_PRINT((ndo, "C=0x%02x ", bp[2])); 104 ND_PRINT((ndo, "sum=0x%04x ", *(u_short *)&bp[3])); 105 return -1; 106 case TYPE_ERROR: 107 if (ndo->ndo_eflag) 108 ND_PRINT((ndo, "(vjc type=error) ")); 109 return -1; 110 default: 111 if (ndo->ndo_eflag) 112 ND_PRINT((ndo, "(vjc type=0x%02x) ", bp[0] & 0xf0)); 113 return -1; 114 } 115 } 116