4 * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997, 2000
5 * The Regents of the University of California. All rights reserved.
7 * Redistribution and use in source and binary forms, with or without
8 * modification, are permitted provided that: (1) source code distributions
9 * retain the above copyright notice and this paragraph in its entirety, (2)
10 * distributions including binary code include the above copyright notice and
11 * this paragraph in its entirety in the documentation or other materials
12 * provided with the distribution, and (3) all advertising materials mentioning
13 * features or use of this software display the following acknowledgement:
14 * ``This product includes software developed by the University of California,
15 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
16 * the University nor the names of its contributors may be used to endorse
17 * or promote products derived from this software without specific prior
19 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
20 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
21 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
23 #include <sys/cdefs.h>
26 static const char rcsid
[] _U_
=
27 "@(#) Header: /tcpdump/master/tcpdump/print-symantec.c,v 1.4.2.1 2005/07/07 01:24:39 guy Exp (LBL)";
29 __RCSID("$NetBSD: tcpdump2rcsid.ex,v 1.1 2001/06/25 20:09:58 itojun Exp $");
37 #include <tcpdump-stdinc.h>
42 #include "interface.h"
43 #include "addrtoname.h"
44 #include "ethertype.h"
48 struct symantec_header
{
55 symantec_hdr_print(register const u_char
*bp
, u_int length
)
57 register const struct symantec_header
*sp
;
60 sp
= (const struct symantec_header
*)bp
;
62 etype
= ntohs(sp
->ether_type
);
64 if (etype
<= ETHERMTU
)
65 (void)printf("invalid ethertype %u", etype
);
67 (void)printf("ethertype %s (0x%04x)",
68 tok2str(ethertype_values
,"Unknown", etype
),
71 if (etype
<= ETHERMTU
)
72 (void)printf("invalid ethertype %u", etype
);
74 (void)printf("%s", tok2str(ethertype_values
,"Unknown Ethertype (0x%04x)", etype
));
77 (void)printf(", length %u: ", length
);
81 * This is the top level routine of the printer. 'p' points
82 * to the ether header of the packet, 'h->ts' is the timestamp,
83 * 'h->len' is the length of the packet off the wire, and 'h->caplen'
84 * is the number of bytes actually captured.
87 symantec_if_print(const struct pcap_pkthdr
*h
, const u_char
*p
)
89 u_int length
= h
->len
;
90 u_int caplen
= h
->caplen
;
91 struct symantec_header
*sp
;
93 u_short extracted_ether_type
;
95 if (caplen
< sizeof (struct symantec_header
)) {
96 printf("[|symantec]");
101 symantec_hdr_print(p
, length
);
103 length
-= sizeof (struct symantec_header
);
104 caplen
-= sizeof (struct symantec_header
);
105 sp
= (struct symantec_header
*)p
;
106 p
+= sizeof (struct symantec_header
);
108 ether_type
= ntohs(sp
->ether_type
);
110 if (ether_type
<= ETHERMTU
) {
111 /* ether_type not known, print raw packet */
113 symantec_hdr_print((u_char
*)sp
, length
+ sizeof (struct symantec_header
));
115 if (!suppress_default_print
)
116 default_print(p
, caplen
);
117 } else if (ether_encap_print(ether_type
, p
, length
, caplen
,
118 &extracted_ether_type
) == 0) {
119 /* ether_type not known, print raw packet */
121 symantec_hdr_print((u_char
*)sp
, length
+ sizeof (struct symantec_header
));
123 if (!suppress_default_print
)
124 default_print(p
, caplen
);
127 return (sizeof (struct symantec_header
));