2 * netsniff-ng - the packet sniffing beast
3 * Copyright (C) 2012 Christoph Jaeger <christoph@netsniff-ng.org>
4 * Subject to the GPL, version 2.
10 #include <arpa/inet.h>
11 #include <asm/byteorder.h>
12 #include <netinet/in.h>
15 #include "dissector_eth.h"
16 #include "proto_struct.h"
19 /* IGMPv0 (RFC-988) */
25 uint32_t group_address
;
29 /* igmp_v0_msg.type */
30 #define IGMP_V0_CREATE_GROUP_REQUEST 0x01
31 #define IGMP_V0_CREATE_GROUP_REPLY 0x02
32 #define IGMP_V0_JOIN_GROUP_REQUEST 0x03
33 #define IGMP_V0_JOIN_GROUP_REPLY 0x04
34 #define IGMP_V0_LEAVE_GROUP_REQUEST 0x05
35 #define IGMP_V0_LEAVE_GROUP_REPLY 0x06
36 #define IGMP_V0_CONFIRM_GROUP_REQUEST 0x07
37 #define IGMP_V0_CONFIRM_GROUP_REPLY 0x08
39 /* IGMPv1 (RFC-1054/RFC-1112, obsoletes RFC-988) */
42 uint8_t version__type
;
44 #if defined(__LITTLE_ENDIAN_BITFIELD)
47 #elif defined(__BIG_ENDIAN_BITFIELD)
51 # error "Please fix <asm/byteorder.h>"
55 uint8_t unused
; /* always zero */
57 uint32_t group_address
;
58 } __attribute__((packed
));
60 /* igmp_v1_msg.version__type (!) */
61 /* IGMP_V1_MEMBERSHIP_QUERY 0x11 */
62 #define IGMP_V1_MEMBERSHIP_REPORT 0x12
64 /* IGMPv2 (RFC-2236) */
67 uint8_t max_resp_time
;
69 uint32_t group_address
;
70 } __attribute__((packed
));
72 /* igmp_v2_msg.type */
73 /* IGMP_V2_MEMBERSHIP_QUERY 0x11 */
74 #define IGMP_V2_MEMBERSHIP_REPORT 0x16
75 #define IGMP_V2_LEAVE_GROUP 0x17
79 * The RGMP message format resembles the IGMPv2 message format. All RGMP
80 * messages are sent with TTL 1, to destination address 224.0.0.25.
82 #define RGMP_LEAVE_GROUP 0xFC
83 #define RGMP_JOIN_GROUP 0xFD
85 #define RGMP_HELLO 0xFF
87 /* IGMPv3 (RFC-3376) */
88 struct igmp_v3_group_record
{
90 uint8_t aux_data_len
; /* always zero */
91 uint16_t number_of_sources
;
92 uint32_t multicast_address
;
93 uint32_t source_addresses
[0];
94 /* auxiliary data (IGMPv3 does not define any) */
95 } __attribute__((packed
));
97 /* igmp_v3_group_record.record_type */
98 #define IGMP_V3_MODE_IS_INCLUDE 1
99 #define IGMP_V3_MODE_IS_EXCLUDE 2
100 #define IGMP_V3_CHANGE_TO_INCLUDE_MODE 3
101 #define IGMP_V3_CHANGE_TO_EXCLUDE_MODE 4
102 #define IGMP_V3_ALLOW_NEW_SOURCES 5
103 #define IGMP_V3_BLOCK_OLD_SOURCES 6
105 struct igmp_v3_membership_report
{
110 uint16_t number_of_group_records
;
111 struct igmp_v3_group_record group_records
[0];
112 } __attribute__((packed
));
114 struct igmp_v3_membership_query
{
116 uint8_t max_resp_code
;
118 uint32_t group_address
;
119 #if defined(__LITTLE_ENDIAN_BITFIELD)
123 #elif defined(__BIG_ENDIAN_BITFIELD)
128 # error "Please fix <asm/byteorder.h>"
131 uint16_t number_of_sources
;
132 uint32_t source_addresses
[0];
133 } __attribute__((packed
));
135 #define IGMP_MEMBERSHIP_QUERY 0x11 /* v1/v2/v3 */
136 #define IGMP_V3_MEMBERSHIP_REPORT 0x22
138 #define EXP(x) (((x) & 0x70) >> 4)
139 #define MANT(x) ((x) & 0x0F)
141 #define DECODE_MAX_RESP_CODE(x) ((x) < 128 ? (x) : (MANT(x) | 0x10) << (EXP(x) + 3))
142 #define DECODE_QQIC(x) ((x) < 128 ? (x) : (MANT(x) | 0x10) << (EXP(x) + 3))
144 static char *friendly_msg_type_name(uint8_t msg_type
)
147 case IGMP_V0_CREATE_GROUP_REQUEST
:
148 return "Create Group Request";
149 case IGMP_V0_CREATE_GROUP_REPLY
:
150 return "Create Group Reply";
151 case IGMP_V0_JOIN_GROUP_REQUEST
:
152 return "Join Group Request";
153 case IGMP_V0_JOIN_GROUP_REPLY
:
154 return "Join Group Reply";
155 case IGMP_V0_LEAVE_GROUP_REQUEST
:
156 return "Leave Group Request";
157 case IGMP_V0_LEAVE_GROUP_REPLY
:
158 return "Leave Group Reply";
159 case IGMP_V0_CONFIRM_GROUP_REQUEST
:
160 return "Confirm Group Request";
161 case IGMP_V0_CONFIRM_GROUP_REPLY
:
162 return "Confirm Group Reply";
163 case IGMP_MEMBERSHIP_QUERY
:
164 return "Membership Query";
165 case IGMP_V1_MEMBERSHIP_REPORT
:
166 case IGMP_V2_MEMBERSHIP_REPORT
:
167 case IGMP_V3_MEMBERSHIP_REPORT
:
168 return "Membership Report";
169 case IGMP_V2_LEAVE_GROUP
:
170 return "Leave Group";
175 case RGMP_JOIN_GROUP
:
177 case RGMP_LEAVE_GROUP
:
178 return "Leave Group";
184 #define PRINT_FRIENDLY_NAMED_MSG_TYPE(type) \
186 if (friendly_msg_type_name(type)) \
187 tprintf(" Type (0x%.2x, %s)", type, \
188 friendly_msg_type_name(type)); \
190 tprintf(" Type (0x%.2x)", type); \
193 static char *friendly_group_rec_type_name(uint8_t rec_type
)
196 case IGMP_V3_MODE_IS_INCLUDE
:
197 return "Mode Is Include";
198 case IGMP_V3_MODE_IS_EXCLUDE
:
199 return "Mode Is Exclude";
200 case IGMP_V3_CHANGE_TO_INCLUDE_MODE
:
201 return "Change To Include Mode";
202 case IGMP_V3_CHANGE_TO_EXCLUDE_MODE
:
203 return "Change To Exclude Mode";
204 case IGMP_V3_ALLOW_NEW_SOURCES
:
205 return "Allow New Sources";
206 case IGMP_V3_BLOCK_OLD_SOURCES
:
207 return "Block Old Sources";
213 static inline void dissect_igmp_v0(struct pkt_buff
*pkt
)
215 char addr
[INET_ADDRSTRLEN
];
218 static const char *reply_codes
[] = {
220 "Request Denied, No Resources",
221 "Request Denied, Invalid Code",
222 "Request Denied, Invalid Group Address",
223 "Request Denied, Invalid Access Key"
226 struct igmp_v0_msg
*msg
=
227 (struct igmp_v0_msg
*) pkt_pull(pkt
, sizeof(*msg
));
232 tprintf(" [ IGMPv0");
233 PRINT_FRIENDLY_NAMED_MSG_TYPE(msg
->type
);
236 case IGMP_V0_CREATE_GROUP_REQUEST
:
239 tprintf(", Code (%u, %s)", msg
->code
, "Public");
242 tprintf(", Code (%u, %s)", msg
->code
, "Private");
245 tprintf(", Code (%u)", msg
->code
);
248 case IGMP_V0_CREATE_GROUP_REPLY
:
249 case IGMP_V0_JOIN_GROUP_REPLY
:
250 case IGMP_V0_LEAVE_GROUP_REPLY
:
251 case IGMP_V0_CONFIRM_GROUP_REPLY
:
253 tprintf(", Code (%u, %s)", msg
->code
, reply_codes
[msg
->code
]);
255 tprintf(", Code (%u, Request Pending, Retry In %u Seconds)",
256 msg
->code
, msg
->code
);
259 tprintf(", Code (%u)", msg
->code
);
262 csum
= calc_csum(msg
, sizeof(*msg
) + pkt_len(pkt
), 0);
263 tprintf(", CSum (0x%.4x) is %s", ntohs(msg
->checksum
), csum
?
264 colorize_start_full(black
, red
) "bogus (!)" colorize_end() : "ok");
266 tprintf(" - %s should be %x%s", colorize_start_full(black
, red
),
267 csum_expected(msg
->checksum
, csum
), colorize_end());
268 tprintf(", Id (%u)", ntohs(msg
->identifier
));
269 inet_ntop(AF_INET
, &msg
->group_address
, addr
, sizeof(addr
));
270 tprintf(", Group Addr (%s)", addr
);
271 tprintf(", Access Key (0x%.16x)", msg
->access_key
);
275 static inline void dissect_igmp_v1(struct pkt_buff
*pkt
)
277 char addr
[INET_ADDRSTRLEN
];
280 struct igmp_v1_msg
*msg
=
281 (struct igmp_v1_msg
*) pkt_pull(pkt
, sizeof(*msg
));
286 tprintf(" [ IGMPv1");
287 PRINT_FRIENDLY_NAMED_MSG_TYPE(msg
->version__type
);
288 csum
= calc_csum(msg
, sizeof(*msg
) + pkt_len(pkt
), 0);
289 tprintf(", CSum (0x%.4x) is %s", ntohs(msg
->checksum
), csum
?
290 colorize_start_full(black
, red
) "bogus (!)" colorize_end() : "ok");
292 tprintf(" - %s should be %x%s", colorize_start_full(black
, red
),
293 csum_expected(msg
->checksum
, csum
), colorize_end());
294 inet_ntop(AF_INET
, &msg
->group_address
, addr
, sizeof(addr
));
295 tprintf(", Group Addr (%s)", addr
);
299 static inline void dissect_igmp_v2(struct pkt_buff
*pkt
)
301 char addr
[INET_ADDRSTRLEN
];
304 struct igmp_v2_msg
*msg
=
305 (struct igmp_v2_msg
*) pkt_pull(pkt
, sizeof(*msg
));
313 case RGMP_JOIN_GROUP
:
314 case RGMP_LEAVE_GROUP
:
315 tprintf(" [ IGMPv2 (RGMP)");
318 tprintf(" [ IGMPv2");
322 PRINT_FRIENDLY_NAMED_MSG_TYPE(msg
->type
);
323 tprintf(", Max Resp Time (%u)", msg
->max_resp_time
);
324 csum
= calc_csum(msg
, sizeof(*msg
) + pkt_len(pkt
), 0);
325 tprintf(", CSum (0x%.4x) is %s", ntohs(msg
->checksum
), csum
?
326 colorize_start_full(black
, red
) "bogus (!)" colorize_end() : "ok");
328 tprintf(" - %s should be %x%s", colorize_start_full(black
, red
),
329 csum_expected(msg
->checksum
, csum
), colorize_end());
330 inet_ntop(AF_INET
, &msg
->group_address
, addr
, sizeof(addr
));
331 tprintf(", Group Addr (%s)", addr
);
335 static inline void dissect_igmp_v3_membership_query(struct pkt_buff
*pkt
)
337 char addr
[INET_ADDRSTRLEN
];
342 struct igmp_v3_membership_query
*msg
=
343 (struct igmp_v3_membership_query
*) pkt_pull(pkt
, sizeof(*msg
));
348 tprintf(" [ IGMPv3");
349 PRINT_FRIENDLY_NAMED_MSG_TYPE(msg
->type
);
350 tprintf(", Max Resp Code (0x%.2x => %u)", msg
->max_resp_code
,
351 DECODE_MAX_RESP_CODE(msg
->max_resp_code
));
352 csum
= calc_csum(msg
, sizeof(*msg
) + pkt_len(pkt
), 0);
353 tprintf(", CSum (0x%.4x) is %s", ntohs(msg
->checksum
), csum
?
354 colorize_start_full(black
, red
) "bogus (!)" colorize_end() : "ok");
356 tprintf(" - %s should be %x%s", colorize_start_full(black
, red
),
357 csum_expected(msg
->checksum
, csum
), colorize_end());
358 inet_ntop(AF_INET
, &msg
->group_address
, addr
, sizeof(addr
));
359 /* S Flag (Suppress Router-Side Processing) */
360 tprintf(", Suppress (%u)", msg
->s_flag
? 1 : 0);
361 /* QRV (Querier's Robustness Variable) */
362 tprintf(", QRV (%u)", msg
->qrv
);
363 /* QQIC (Querier's Query Interval Code) */
364 tprintf(", QQIC (0x%.2x => %u)", msg
->qqic
, DECODE_QQIC(msg
->qqic
));
365 tprintf(", Group Addr (%s)", addr
);
366 n
= ntohs(msg
->number_of_sources
);
367 tprintf(", Num Src (%u)", n
);
370 src_addr
= (uint32_t *) pkt_pull(pkt
, sizeof(*src_addr
));
371 if (src_addr
!= NULL
) {
372 inet_ntop(AF_INET
, src_addr
, addr
, sizeof(addr
));
373 tprintf(", Src Addr (%s", addr
);
375 src_addr
= (uint32_t *)
376 pkt_pull(pkt
, sizeof(*src_addr
));
377 if (src_addr
!= NULL
)
379 inet_ntop(AF_INET
, src_addr
, addr
, sizeof(addr
));
380 tprintf(", %s", addr
);
389 static inline void dissect_igmp_v3_membership_report(struct pkt_buff
*pkt
)
391 char addr
[INET_ADDRSTRLEN
];
396 struct igmp_v3_group_record
*rec
;
397 struct igmp_v3_membership_report
*msg
=
398 (struct igmp_v3_membership_report
*) pkt_pull(pkt
, sizeof(*msg
));
403 tprintf(" [ IGMPv3");
404 PRINT_FRIENDLY_NAMED_MSG_TYPE(msg
->type
);
405 csum
= calc_csum(msg
, sizeof(*msg
) + pkt_len(pkt
), 0);
406 tprintf(", CSum (0x%.4x) is %s", ntohs(msg
->checksum
), csum
?
407 colorize_start_full(black
, red
) "bogus (!)" colorize_end() : "ok");
409 tprintf(" - %s should be %x%s", colorize_start_full(black
, red
),
410 csum_expected(msg
->checksum
, csum
), colorize_end());
411 m
= ntohs(msg
->number_of_group_records
);
412 tprintf(", Num Group Rec (%u)", m
);
416 rec
= (struct igmp_v3_group_record
*) pkt_pull(pkt
, sizeof(*rec
));
421 tprintf(" [ Group Record");
422 if (friendly_group_rec_type_name(rec
->record_type
))
423 tprintf(" Type (%u, %s)", rec
->record_type
,
424 friendly_group_rec_type_name(rec
->record_type
));
426 tprintf(" Type (%u)", rec
->record_type
);
427 n
= ntohs(rec
->number_of_sources
);
428 tprintf(", Num Src (%u)", n
);
429 inet_ntop(AF_INET
, &rec
->multicast_address
, addr
, sizeof(addr
));
430 tprintf(", Multicast Addr (%s)", addr
);
433 src_addr
= (uint32_t *) pkt_pull(pkt
, sizeof(*src_addr
));
434 if (src_addr
!= NULL
) {
435 inet_ntop(AF_INET
, src_addr
, addr
, sizeof(addr
));
436 tprintf(", Src Addr (%s", addr
);
438 src_addr
= (uint32_t *)
439 pkt_pull(pkt
, sizeof(*src_addr
));
440 if (src_addr
!= NULL
)
442 inet_ntop(AF_INET
, src_addr
, addr
, sizeof(addr
));
443 tprintf(", %s", addr
);
454 static inline void igmp(struct pkt_buff
*pkt
)
456 switch (*pkt_peek(pkt
)) {
457 case IGMP_V0_CREATE_GROUP_REQUEST
:
458 case IGMP_V0_CREATE_GROUP_REPLY
:
459 case IGMP_V0_JOIN_GROUP_REQUEST
:
460 case IGMP_V0_JOIN_GROUP_REPLY
:
461 case IGMP_V0_LEAVE_GROUP_REQUEST
:
462 case IGMP_V0_LEAVE_GROUP_REPLY
:
463 case IGMP_V0_CONFIRM_GROUP_REQUEST
:
464 case IGMP_V0_CONFIRM_GROUP_REPLY
:
465 if (pkt_len(pkt
) == sizeof(struct igmp_v0_msg
))
466 dissect_igmp_v0(pkt
);
468 case IGMP_MEMBERSHIP_QUERY
: /* v1/v2/v3 */
469 if (pkt_len(pkt
) >= sizeof(struct igmp_v3_membership_query
))
470 dissect_igmp_v3_membership_query(pkt
);
471 else if (pkt_len(pkt
) == sizeof(struct igmp_v2_msg
)
472 && *(pkt_peek(pkt
) + 1))
473 dissect_igmp_v2(pkt
);
474 else if (pkt_len(pkt
) == sizeof(struct igmp_v1_msg
))
475 dissect_igmp_v1(pkt
);
477 case IGMP_V1_MEMBERSHIP_REPORT
:
478 if (pkt_len(pkt
) == sizeof(struct igmp_v1_msg
))
479 dissect_igmp_v1(pkt
);
483 case RGMP_JOIN_GROUP
:
484 case RGMP_LEAVE_GROUP
:
485 case IGMP_V2_MEMBERSHIP_REPORT
:
486 case IGMP_V2_LEAVE_GROUP
:
487 if (pkt_len(pkt
) == sizeof(struct igmp_v2_msg
))
488 dissect_igmp_v2(pkt
);
490 case IGMP_V3_MEMBERSHIP_REPORT
:
491 if (pkt_len(pkt
) >= sizeof(struct igmp_v3_membership_report
))
492 dissect_igmp_v3_membership_report(pkt
);
497 static inline void igmp_less(struct pkt_buff
*pkt
)
501 switch (*pkt_peek(pkt
)) {
502 case IGMP_V0_CREATE_GROUP_REQUEST
:
503 case IGMP_V0_CREATE_GROUP_REPLY
:
504 case IGMP_V0_JOIN_GROUP_REQUEST
:
505 case IGMP_V0_JOIN_GROUP_REPLY
:
506 case IGMP_V0_LEAVE_GROUP_REQUEST
:
507 case IGMP_V0_LEAVE_GROUP_REPLY
:
508 case IGMP_V0_CONFIRM_GROUP_REQUEST
:
509 case IGMP_V0_CONFIRM_GROUP_REPLY
:
510 if (pkt_len(pkt
) == sizeof(struct igmp_v0_msg
))
513 case IGMP_MEMBERSHIP_QUERY
: /* v1/v2/v3 */
514 if (pkt_len(pkt
) >= sizeof(struct igmp_v3_membership_query
))
516 else if (pkt_len(pkt
) == sizeof(struct igmp_v2_msg
)
517 && *(pkt_peek(pkt
) + 1))
519 else if (pkt_len(pkt
) == sizeof(struct igmp_v1_msg
))
522 case IGMP_V1_MEMBERSHIP_REPORT
:
523 if (pkt_len(pkt
) == sizeof(struct igmp_v1_msg
))
528 case RGMP_JOIN_GROUP
:
529 case RGMP_LEAVE_GROUP
:
530 case IGMP_V2_MEMBERSHIP_REPORT
:
531 case IGMP_V2_LEAVE_GROUP
:
532 if (pkt_len(pkt
) == sizeof(struct igmp_v2_msg
))
535 case IGMP_V3_MEMBERSHIP_REPORT
:
536 if (pkt_len(pkt
) >= sizeof(struct igmp_v3_membership_report
))
541 if (version
< 0 || version
> 3)
544 switch (*pkt_peek(pkt
)) {
547 case RGMP_JOIN_GROUP
:
548 case RGMP_LEAVE_GROUP
:
549 tprintf(" IGMPv2 (RGMP)");
552 tprintf(" IGMPv%u", version
);
555 PRINT_FRIENDLY_NAMED_MSG_TYPE(*pkt_peek(pkt
));
558 struct protocol igmp_ops
= {
561 .print_less
= igmp_less
,
564 #endif /* PROTO_IGMP_H */