wmem: allow wmem_destroy_list to ignore a NULL list.

[wireshark-sm.git] / epan / addr_resolv.c

/* addr_resolv.c
 * Routines for network object lookup
 *
 * Laurent Deniel <laurent.deniel@free.fr>
 *
 * Add option to resolv VLAN ID to describing name
 * Uli Heilmeier, March 2016
 *
 * Wireshark - Network traffic analyzer
 * By Gerald Combs <gerald@wireshark.org>
 * Copyright 1998 Gerald Combs
 *
 * SPDX-License-Identifier: GPL-2.0-or-later
 */

#include "config.h"

#include <stdio.h>
#include <stdlib.h>
#include <string.h>
#include <errno.h>

#include <wsutil/strtoi.h>
#include <wsutil/ws_assert.h>

#include "enterprises.h"
#include "manuf.h"

/*
 * Win32 doesn't have SIGALRM (and it's the OS where name lookup calls
 * are most likely to take a long time, given the way address-to-name
 * lookups are done over NBNS).
 *
 * macOS does have SIGALRM, but if you longjmp() out of a name resolution
 * call in a signal handler, you might crash, because the state of the
 * resolution code that sends messages to lookupd might be inconsistent
 * if you jump out of it in middle of a call.
 *
 * There's no guarantee that longjmp()ing out of name resolution calls
 * will work on *any* platform; OpenBSD got rid of the alarm/longjmp
 * code in tcpdump, to avoid those sorts of problems, and that was
 * picked up by tcpdump.org tcpdump.
 *
 * So, for now, we do not use alarm() and SIGALRM to time out host name
 * lookups.  If we get a lot of complaints about lookups taking a long time,
 * we can reconsider that decision.  (Note that tcpdump originally added
 * such a timeout mechanism that for the benefit of systems using NIS to
 * look up host names; that might now be fixed in NIS implementations, for
 * those sites still using NIS rather than DNS for that....  tcpdump no
 * longer does that, for the same reasons that we don't.)
 *
 * If we're using an asynchronous DNS resolver, that shouldn't be an issue.
 * If we're using a synchronous name lookup mechanism (which we'd do mainly
 * to support resolving addresses and host names using more mechanisms than
 * just DNS, such as NIS, NBNS, or Mr. Hosts File), we could do that in
 * a separate thread, making it, in effect, asynchronous.
 */

#ifdef HAVE_NETINET_IN_H
# include <netinet/in.h>
#endif

#ifdef HAVE_NETDB_H
#include <netdb.h>
#endif

#ifdef HAVE_SYS_SOCKET_H
#include <sys/socket.h>     /* needed to define AF_ values on UNIX */
#endif

#ifdef _WIN32
#include <winsock2.h>       /* needed to define AF_ values on Windows */
#include <ws2tcpip.h>
#endif

#ifdef _WIN32
# define socklen_t unsigned int
#endif
#include <ares.h>
#include <ares_version.h>

#include <glib.h>

#include "packet.h"
#include "addr_resolv.h"
#include "wsutil/filesystem.h"

#include <wsutil/report_message.h>
#include <wsutil/file_util.h>
#include <wsutil/pint.h>
#include <wsutil/inet_cidr.h>

#include <epan/strutil.h>
#include <epan/to_str.h>
#include <epan/maxmind_db.h>
#include <epan/prefs.h>
#include <epan/uat.h>
#include "services.h"

#define ENAME_HOSTS     "hosts"
#define ENAME_SUBNETS   "subnets"
#define ENAME_ETHERS    "ethers"
#define ENAME_IPXNETS   "ipxnets"
#define ENAME_MANUF     "manuf"
#define ENAME_WKA       "wka"
#define ENAME_SERVICES  "services"
#define ENAME_VLANS     "vlans"
#define ENAME_SS7PCS    "ss7pcs"
#define ENAME_ENTERPRISES "enterprises"

#define HASHETHSIZE      2048
#define HASHHOSTSIZE     2048
#define HASHIPXNETSIZE    256
#define SUBNETLENGTHSIZE   32  /*1-32 inc.*/

/* hash table used for IPv4 lookup */

#define HASH_IPV4_ADDRESS(addr) (g_htonl(addr) & (HASHHOSTSIZE - 1))


typedef struct sub_net_hashipv4 {
    unsigned          addr;
    /* XXX: No longer needed?*/
    uint8_t           flags;          /* B0 dummy_entry, B1 resolve, B2 If the address is used in the trace */
    struct sub_net_hashipv4   *next;
    char              name[MAXNAMELEN];
} sub_net_hashipv4_t;

/* Array of entries of subnets of different lengths */
typedef struct {
    size_t       mask_length;      /*1-32*/
    uint32_t     mask;             /* e.g. 255.255.255.*/
    sub_net_hashipv4_t** subnet_addresses; /* Hash table of subnet addresses */
} subnet_length_entry_t;


/* hash table used for IPX network lookup */

/* XXX - check goodness of hash function */

#define HASH_IPX_NET(net)   ((net) & (HASHIPXNETSIZE - 1))

typedef struct hashipxnet {
    unsigned            addr;
    struct hashipxnet  *next;
    char                name[MAXNAMELEN];
} hashipxnet_t;

typedef struct hashvlan {
    unsigned            id;
/*    struct hashvlan     *next; */
    char                name[MAXVLANNAMELEN];
} hashvlan_t;

typedef struct ss7pc {
    uint32_t            id; /* 1st byte NI, 3 following bytes: Point Code */
    char                pc_addr[MAXNAMELEN];
    char                name[MAXNAMELEN];
} hashss7pc_t;

/* hash tables used for ethernet and manufacturer lookup */
struct hashether {
    uint8_t           flags;  /* (See above) */
    uint8_t           addr[6];
    char              hexaddr[6*3];
    char              resolved_name[MAXNAMELEN];
};

struct hashwka {
    uint8_t           flags;  /* (See above) */
    char*             name;
};

struct hashmanuf {
    uint8_t           flags;  /* (See above) */
    uint8_t           addr[3];
    char              hexaddr[3*3];
    char              resolved_name[MAXNAMELEN];
    char              resolved_longname[MAXNAMELEN];
};

/* internal ethernet type */
typedef struct _ether
{
    uint8_t           addr[6];
    char              name[MAXNAMELEN];
    char              longname[MAXNAMELEN];
} ether_t;

/* internal ipxnet type */
typedef struct _ipxnet
{
    unsigned          addr;
    char              name[MAXNAMELEN];
} ipxnet_t;

/* internal vlan type */
typedef struct _vlan
{
    unsigned          id;
    char              name[MAXVLANNAMELEN];
} vlan_t;

/* internal services custom type */
typedef struct _serv_port_custom_key {
    uint16_t          port;
    port_type         type;
} serv_port_custom_key_t;

static wmem_allocator_t *addr_resolv_scope;

// Maps unsigned -> hashipxnet_t*
static wmem_map_t *ipxnet_hash_table;
static wmem_map_t *ipv4_hash_table;
static wmem_map_t *ipv6_hash_table;
// Maps unsigned -> hashvlan_t*
static wmem_map_t *vlan_hash_table;
static wmem_map_t *ss7pc_hash_table;

// Maps IP address -> manually set hostname.
static wmem_map_t *manually_resolved_ipv4_list;
static wmem_map_t *manually_resolved_ipv6_list;

static addrinfo_lists_t addrinfo_lists;

struct cb_serv_data {
    char        *service;
    port_type    proto;
};

// Maps unsigned -> hashmanuf_t*
// XXX: Note that hashmanuf_t* only accommodates 24-bit OUIs.
// We might want to store vendor names from MA-M and MA-S to
// present in the Resolved Addresses dialog.
static wmem_map_t *manuf_hashtable;
// Maps address -> hashwka_t*
static wmem_map_t *wka_hashtable;
// Maps address -> hashether_t*
static wmem_map_t *eth_hashtable;
// Maps unsigned -> serv_port_t*
static wmem_map_t *serv_port_hashtable;
static wmem_map_t *serv_port_custom_hashtable;

// Maps enterprise-id -> enterprise-desc (only used for user additions)
static GHashTable *enterprises_hashtable;

static subnet_length_entry_t subnet_length_entries[SUBNETLENGTHSIZE]; /* Ordered array of entries */
static bool have_subnet_entry;

static bool new_resolved_objects;

static GPtrArray* extra_hosts_files;

static hashether_t *add_eth_name(const uint8_t *addr, const char *name);
static void add_serv_port_cb(const uint32_t port, void *ptr);

/* http://eternallyconfuzzled.com/tuts/algorithms/jsw_tut_hashing.aspx#existing
 * One-at-a-Time hash
 */
unsigned
ipv6_oat_hash(const void *key)
{
    int len = 16;
    const unsigned char *p = (const unsigned char *)key;
    unsigned h = 0;
    int i;

    for ( i = 0; i < len; i++ ) {
        h += p[i];
        h += ( h << 10 );
        h ^= ( h >> 6 );
    }

    h += ( h << 3 );
    h ^= ( h >> 11 );
    h += ( h << 15 );

    return h;
}

gboolean
ipv6_equal(const void *v1, const void *v2)
{

    if (memcmp(v1, v2, sizeof (ws_in6_addr)) == 0) {
        return true;
    }

    return false;
}

/*
 * Flag controlling what names to resolve.
 */
e_addr_resolve gbl_resolv_flags = {
    true,   /* mac_name */
    false,  /* network_name */
    false,  /* transport_name */
    true,   /* dns_pkt_addr_resolution */
    false,  /* handshake_sni_addr_resolution */
    true,   /* use_external_net_name_resolver */
    false,  /* vlan_name */
    false,  /* ss7 point code names */
    true,   /* maxmind_geoip */
};

/* XXX - ares_init_options(3) says:
 * "The recommended concurrent query limit is about 32k queries"
 */
static unsigned name_resolve_concurrency = 500;
static bool resolve_synchronously;

/*
 *  Global variables (can be changed in GUI sections)
 *  XXX - they could be changed in GUI code, but there's currently no
 *  GUI code to change them.
 */

char *g_ethers_path;     /* global ethers file     */
char *g_pethers_path;     /* personal ethers file   */
char *g_wka_path;     /* global well-known-addresses file */
char *g_manuf_path;     /* global manuf file      */
char *g_pmanuf_path;     /* personal manuf file      */
char *g_ipxnets_path;     /* global ipxnets file    */
char *g_pipxnets_path;     /* personal ipxnets file  */
char *g_services_path;     /* global services file   */
char *g_pservices_path;     /* personal services file */
char *g_pvlan_path;     /* personal vlans file    */
char *g_ss7pcs_path;     /* personal ss7pcs file   */
char *g_enterprises_path;   /* global enterprises file   */
char *g_penterprises_path;  /* personal enterprises file */
                                    /* first resolving call   */

/*
 * Submitted asynchronous queries trigger a callback (c_ares_ghba_cb()).
 * Queries are added to c_ares_queue_head. During processing, queries are
 * popped off the front of c_ares_queue_head and submitted using
 * ares_gethostbyaddr().
 * The callback processes the response, then frees the request.
 */
typedef struct _async_dns_queue_msg
{
    union {
        uint32_t          ip4;
        ws_in6_addr ip6;
    } addr;
    int                 family;
} async_dns_queue_msg_t;

typedef struct _async_hostent {
    int addr_size;
    int   copied;
    void *addrp;
} async_hostent_t;

static void
c_ares_ghba_cb(void *arg, int status, int timeouts _U_, struct hostent *he);

/*
 * Submitted synchronous queries trigger a callback (c_ares_ghba_sync_cb()).
 * The callback processes the response, sets completed to true if
 * completed is non-NULL, then frees the request.
 */
typedef struct _sync_dns_data
{
    union {
        uint32_t     ip4;
        ws_in6_addr  ip6;
    } addr;
    int              family;
    bool            *completed;
} sync_dns_data_t;

static ares_channel ghba_chan; /* ares_gethostbyaddr -- Usually non-interactive, no timeout */
static ares_channel ghbn_chan; /* ares_gethostbyname -- Usually interactive, timeout */

static  bool        async_dns_initialized;
static  unsigned    async_dns_in_flight;
static  wmem_list_t *async_dns_queue_head;
static  GMutex      async_dns_queue_mtx;

//UAT for providing a list of DNS servers to C-ARES for name resolution
bool use_custom_dns_server_list;
struct dns_server_data {
    char *ipaddr;
    uint32_t udp_port;
    uint32_t tcp_port;
};

UAT_CSTRING_CB_DEF(dnsserverlist_uats, ipaddr, struct dns_server_data)
UAT_DEC_CB_DEF(dnsserverlist_uats, tcp_port, struct dns_server_data)
UAT_DEC_CB_DEF(dnsserverlist_uats, udp_port, struct dns_server_data)

static uat_t *dnsserver_uat;
static struct dns_server_data  *dnsserverlist_uats;
static unsigned ndnsservers;

static void
dns_server_free_cb(void *data)
{
    struct dns_server_data *h = (struct dns_server_data*)data;

    g_free(h->ipaddr);
}

static void*
dns_server_copy_cb(void *dst_, const void *src_, size_t len _U_)
{
    const struct dns_server_data *src = (const struct dns_server_data *)src_;
    struct dns_server_data       *dst = (struct dns_server_data *)dst_;

    dst->ipaddr = g_strdup(src->ipaddr);
    dst->udp_port = src->udp_port;
    dst->tcp_port = src->tcp_port;

    return dst;
}

static bool
dnsserver_uat_fld_ip_chk_cb(void* r _U_, const char* ipaddr, unsigned len _U_, const void* u1 _U_, const void* u2 _U_, char** err)
{
    //Check for a valid IPv4 or IPv6 address.
    if (ipaddr && g_hostname_is_ip_address(ipaddr)) {
        *err = NULL;
        return true;
    }

    *err = ws_strdup_printf("No valid IP address given.");
    return false;
}

static bool
dnsserver_uat_fld_port_chk_cb(void* r _U_, const char* p, unsigned len _U_, const void* u1 _U_, const void* u2 _U_, char** err)
{
    if (!p || strlen(p) == 0u) {
        // This should be removed in favor of Decode As. Make it optional.
        *err = NULL;
        return true;
    }

    if (strcmp(p, "53") != 0){
        uint16_t port;
        if (!ws_strtou16(p, NULL, &port)) {
            *err = g_strdup("Invalid port given.");
            return false;
        }
    }

    *err = NULL;
    return true;
}

static void
c_ares_ghba_sync_cb(void *arg, int status, int timeouts _U_, struct hostent *he) {
    sync_dns_data_t *sdd = (sync_dns_data_t *)arg;
    char **p;

    if (status == ARES_SUCCESS) {
        for (p = he->h_addr_list; *p != NULL; p++) {
            switch(sdd->family) {
                case AF_INET:
                    add_ipv4_name(sdd->addr.ip4, he->h_name, false);
                    break;
                case AF_INET6:
                    add_ipv6_name(&sdd->addr.ip6, he->h_name, false);
                    break;
                default:
                    /* Throw an exception? */
                    break;
            }
        }

    }

    /*
     * Let our caller know that this is complete.
     */
    *sdd->completed = true;

    /*
     * Free the structure for this call.
     */
    g_free(sdd);
}

static void
wait_for_sync_resolv(bool *completed) {
    int nfds;
    fd_set rfds, wfds;
    struct timeval tv;

    while (!*completed) {
        /*
         * Not yet resolved; wait for something to show up on the
         * address-to-name C-ARES channel.
         *
         * To quote the source code for ares_timeout() as of C-ARES
         * 1.12.0, "WARNING: Beware that this is linear in the number
         * of outstanding requests! You are probably far better off
         * just calling ares_process() once per second, rather than
         * calling ares_timeout() to figure out when to next call
         * ares_process().", although we should have only one request
         * outstanding.
         * As of C-ARES 1.20.0, the ares_timeout() function is now O(1),
         * but we don't require that minimum version.
         * https://github.com/c-ares/c-ares/commit/cf99c025cfb3e21295b59923876a31a68ea2cb4b
         *
         * And, yes, we have to reset it each time, as select(), in
         * some OSes modifies the timeout to reflect the time remaining
         * (e.g., Linux) and select() in other OSes doesn't (most if not
         * all other UN*Xes, Windows?), so we can't rely on *either*
         * behavior.
         */
        tv.tv_sec = 1;
        tv.tv_usec = 0;

        FD_ZERO(&rfds);
        FD_ZERO(&wfds);
        nfds = ares_fds(ghba_chan, &rfds, &wfds);
        if (nfds > 0) {
            if (select(nfds, &rfds, &wfds, NULL, &tv) == -1) { /* call to select() failed */
                /* If it's interrupted by a signal, no need to put out a message */
                if (errno != EINTR)
                    fprintf(stderr, "Warning: call to select() failed, error is %s\n", g_strerror(errno));
                return;
            }
            ares_process(ghba_chan, &rfds, &wfds);
        }
    }
}

static void
process_async_dns_queue(void)
{
    wmem_list_frame_t* head;
    async_dns_queue_msg_t *caqm;

    if (async_dns_queue_head == NULL)
        return;

    if (!g_mutex_trylock(&async_dns_queue_mtx))
        return;

    head = wmem_list_head(async_dns_queue_head);

    while (head != NULL && async_dns_in_flight <= name_resolve_concurrency) {
        caqm = (async_dns_queue_msg_t *)wmem_list_frame_data(head);
        wmem_list_remove_frame(async_dns_queue_head, head);
        if (caqm->family == AF_INET) {
            ares_gethostbyaddr(ghba_chan, &caqm->addr.ip4, sizeof(uint32_t), AF_INET,
                    c_ares_ghba_cb, caqm);
            async_dns_in_flight++;
        } else if (caqm->family == AF_INET6) {
            ares_gethostbyaddr(ghba_chan, &caqm->addr.ip6, sizeof(ws_in6_addr),
                    AF_INET6, c_ares_ghba_cb, caqm);
            async_dns_in_flight++;
        }

        head = wmem_list_head(async_dns_queue_head);
    }

    g_mutex_unlock(&async_dns_queue_mtx);
}

static void
wait_for_async_queue(void)
{
    struct timeval tv = { 0, 0 };
    int nfds;
    fd_set rfds, wfds;

    new_resolved_objects = false;

    if (!async_dns_initialized) {
        maxmind_db_lookup_process();
        return;
    }

    while (1) {
        /* We're switching to synchronous lookups, so process anything in
         * the asynchronous queue. There might be more in the queue than
         * name_resolve_concurrency allows, so check each cycle.
         */
        process_async_dns_queue();

        FD_ZERO(&rfds);
        FD_ZERO(&wfds);
        nfds = ares_fds(ghba_chan, &rfds, &wfds);
        if (nfds == 0) {
            /* No more requests waiting for reply; we're done here. */
            break;
        }

        /* See comment in wait_for_sync_resolv() about ares_timeout() being
         * O(N) in the number of outstanding requests until c-ares 1.20, and
         * why we might as well just set a 1 second to select().
         */
        tv.tv_sec = 1;
        tv.tv_usec = 0;

        if (select(nfds, &rfds, &wfds, NULL, &tv) == -1) { /* call to select() failed */
            /* If it's interrupted by a signal, no need to put out a message */
            if (errno != EINTR)
                fprintf(stderr, "Warning: call to select() failed, error is %s\n", g_strerror(errno));
            return;
        }
        ares_process(ghba_chan, &rfds, &wfds);
    }

    maxmind_db_lookup_process();
    return;
}

static void
sync_lookup_ip4(const uint32_t addr)
{
    bool completed = false;
    sync_dns_data_t *sdd;

    if (!async_dns_initialized) {
        /*
         * c-ares not initialized.  Bail out.
         */
        return;
    }

    /*
     * Start the request.
     */
    sdd = g_new(sync_dns_data_t, 1);
    sdd->family = AF_INET;
    sdd->addr.ip4 = addr;
    sdd->completed = &completed;
    ares_gethostbyaddr(ghba_chan, &addr, sizeof(uint32_t), AF_INET,
                       c_ares_ghba_sync_cb, sdd);

    /*
     * Now wait for it to finish.
     */
    wait_for_sync_resolv(&completed);
}

static void
sync_lookup_ip6(const ws_in6_addr *addrp)
{
    bool completed = false;
    sync_dns_data_t *sdd;

    if (!async_dns_initialized) {
        /*
         * c-ares not initialized.  Bail out.
         */
        return;
    }

    /*
     * Start the request.
     */
    sdd = g_new(sync_dns_data_t, 1);
    sdd->family = AF_INET6;
    memcpy(&sdd->addr.ip6, addrp, sizeof(sdd->addr.ip6));
    sdd->completed = &completed;
    ares_gethostbyaddr(ghba_chan, addrp, sizeof(ws_in6_addr), AF_INET6,
                       c_ares_ghba_sync_cb, sdd);

    /*
     * Now wait for it to finish.
     */
    wait_for_sync_resolv(&completed);
}

void
set_resolution_synchrony(bool synchronous)
{
    resolve_synchronously = synchronous;
    maxmind_db_set_synchrony(synchronous);

    if (synchronous) {
        wait_for_async_queue();
    }
}

static void
c_ares_set_dns_servers(void)
{
    if ((!async_dns_initialized) || (!use_custom_dns_server_list))
        return;

    if (ndnsservers == 0) {
        //clear the list of servers.  This may effectively disable name resolution
        ares_set_servers_ports(ghba_chan, NULL);
        ares_set_servers_ports(ghbn_chan, NULL);
    } else {
        struct ares_addr_port_node* servers = wmem_alloc_array(NULL, struct ares_addr_port_node, ndnsservers);
        ws_in4_addr ipv4addr;
        ws_in6_addr ipv6addr;
        bool invalid_IP_found = false;
        struct ares_addr_port_node* server;
        unsigned i;
        for (i = 0, server = servers; i < ndnsservers-1; i++, server++) {
            if (ws_inet_pton6(dnsserverlist_uats[i].ipaddr, &ipv6addr)) {
                server->family = AF_INET6;
                memcpy(&server->addr.addr6, &ipv6addr, 16);
            } else if (ws_inet_pton4(dnsserverlist_uats[i].ipaddr, &ipv4addr)) {
                server->family = AF_INET;
                memcpy(&server->addr.addr4, &ipv4addr, 4);
            } else {
                //This shouldn't happen, but just in case...
                invalid_IP_found = true;
                server->family = 0;
                memset(&server->addr.addr4, 0, 4);
                break;
            }

            server->udp_port = (int)dnsserverlist_uats[i].udp_port;
            server->tcp_port = (int)dnsserverlist_uats[i].tcp_port;

            server->next = (server+1);
        }
        if (!invalid_IP_found) {
            if (ws_inet_pton6(dnsserverlist_uats[i].ipaddr, &ipv6addr)) {
                server->family = AF_INET6;
                memcpy(&server->addr.addr6, &ipv6addr, 16);
            }
            else if (ws_inet_pton4(dnsserverlist_uats[i].ipaddr, &ipv4addr)) {
                server->family = AF_INET;
                memcpy(&server->addr.addr4, &ipv4addr, 4);
            } else {
                //This shouldn't happen, but just in case...
                server->family = 0;
                memset(&server->addr.addr4, 0, 4);
            }
        }
        server->udp_port = (int)dnsserverlist_uats[i].udp_port;
        server->tcp_port = (int)dnsserverlist_uats[i].tcp_port;

        server->next = NULL;

        ares_set_servers_ports(ghba_chan, servers);
        ares_set_servers_ports(ghbn_chan, servers);
        wmem_free(NULL, servers);
    }
}

typedef struct {
    uint32_t     mask;
    size_t       mask_length;
    const char* name; /* Shallow copy */
} subnet_entry_t;

/* Maximum supported line length of hosts, services, manuf, etc. */
#define MAX_LINELEN     1024

/** Read a line without trailing (CR)LF. Returns -1 on failure.  */
static int
fgetline(char *buf, int size, FILE *fp)
{
    if (fgets(buf, size, fp)) {
        int len = (int)strcspn(buf, "\r\n");
        buf[len] = '\0';
        return len;
    }
    return -1;

} /* fgetline */


/*
 *  Local function definitions
 */
static subnet_entry_t subnet_lookup(const uint32_t addr);
static void subnet_entry_set(uint32_t subnet_addr, const uint8_t mask_length, const char* name);

static unsigned serv_port_custom_hash(const void *k)
{
    const serv_port_custom_key_t *key = (const serv_port_custom_key_t*)k;
    return key->port + (key->type << 16);
}

static gboolean serv_port_custom_equal(const void *k1, const void *k2)
{
    const serv_port_custom_key_t *key1 = (const serv_port_custom_key_t*)k1;
    const serv_port_custom_key_t *key2 = (const serv_port_custom_key_t*)k2;

    return (key1->port == key2->port) && (key1->type == key2->type);
}

static void
add_custom_service_name(port_type proto, const unsigned port, const char *service_name)
{
    char *name;
    serv_port_custom_key_t *key, *orig_key;

    key = wmem_new(addr_resolv_scope, serv_port_custom_key_t);
    key->port = (uint16_t)port;
    key->type = proto;

    if (wmem_map_lookup_extended(serv_port_custom_hashtable, key, (const void**)&orig_key, (void**)&name)) {
        wmem_free(addr_resolv_scope, orig_key);
        wmem_free(addr_resolv_scope, name);
    }

    name = wmem_strdup(addr_resolv_scope, service_name);
    wmem_map_insert(serv_port_custom_hashtable, key, name);

    // A new custom entry is not a new resolved object.
    // new_resolved_objects = true;
}

static serv_port_t*
add_service_name(port_type proto, const unsigned port, const char *service_name)
{
    serv_port_t *serv_port_names;

    serv_port_names = (serv_port_t *)wmem_map_lookup(serv_port_hashtable, GUINT_TO_POINTER(port));
    if (serv_port_names == NULL) {
        serv_port_names = wmem_new0(addr_resolv_scope, serv_port_t);
        wmem_map_insert(serv_port_hashtable, GUINT_TO_POINTER(port), serv_port_names);
    }

    /* We don't need to strdup because service_name is owned by either
     * the global arrays or the custom table, which manage the memory
     * and have lifespans at least as long as the addr_resolv_scope.
     */
    switch(proto) {
        case PT_TCP:
            serv_port_names->tcp_name = service_name;
            break;
        case PT_UDP:
            serv_port_names->udp_name = service_name;
            break;
        case PT_SCTP:
            serv_port_names->sctp_name = service_name;
            break;
        case PT_DCCP:
            serv_port_names->dccp_name = service_name;
            break;
        default:
            return serv_port_names;
            /* Should not happen */
    }

    new_resolved_objects = true;
    return serv_port_names;
}

static void
parse_service_line (char *line)
{
    char *cp;
    char *service;
    char *port;
    port_type proto;
    struct cb_serv_data cb_data;
    range_t *port_rng = NULL;

    if ((cp = strchr(line, '#')))
        *cp = '\0';

    if ((cp = strtok(line, " \t")) == NULL)
        return;

    service = cp;

    if ((cp = strtok(NULL, " \t")) == NULL)
        return;

    port = cp;

    if (strtok(cp, "/") == NULL)
        return;

    if (range_convert_str(NULL, &port_rng, port, UINT16_MAX) != CVT_NO_ERROR) {
        wmem_free (NULL, port_rng);
        return;
    }

    while ((cp = strtok(NULL, "/")) != NULL) {
        if (strcmp(cp, "tcp") == 0) {
            proto = PT_TCP;
        }
        else if (strcmp(cp, "udp") == 0) {
            proto = PT_UDP;
        }
        else if (strcmp(cp, "sctp") == 0) {
            proto = PT_SCTP;
        }
        else if (strcmp(cp, "dccp") == 0) {
            proto = PT_DCCP;
        }
        else {
            break;
        }
        cb_data.service = service;
        cb_data.proto = proto;
        range_foreach(port_rng, add_serv_port_cb, &cb_data);
    }

    wmem_free (NULL, port_rng);
} /* parse_service_line */


static void
add_serv_port_cb(const uint32_t port, void *ptr)
{
    struct cb_serv_data *cb_data = (struct cb_serv_data *)ptr;

    if ( port ) {
        add_custom_service_name(cb_data->proto, port, cb_data->service);
    }
}


static bool
parse_services_file(const char * path)
{
    FILE *serv_p;
    char    buf[MAX_LINELEN];

    /* services hash table initialization */
    serv_p = ws_fopen(path, "r");

    if (serv_p == NULL)
        return false;

    while (fgetline(buf, sizeof(buf), serv_p) >= 0) {
        parse_service_line(buf);
    }

    fclose(serv_p);
    return true;
}

/* -----------------
 * unsigned integer to ascii
 */
static char *
wmem_utoa(wmem_allocator_t *allocator, unsigned port)
{
    char *bp = (char *)wmem_alloc(allocator, MAXNAMELEN);

    /* XXX, uint32_to_str() ? */
    uint32_to_str_buf(port, bp, MAXNAMELEN);
    return bp;
}

static const char *
_serv_name_lookup(port_type proto, unsigned port, serv_port_t **value_ret)
{
    serv_port_t *serv_port_names;
    const char* name = NULL;
    ws_services_proto_t p;
    ws_services_entry_t const *serv;

    /* Look in the cache */
    serv_port_names = (serv_port_t *)wmem_map_lookup(serv_port_hashtable, GUINT_TO_POINTER(port));

    if (serv_port_names == NULL) {
        /* Try the user custom table */
        serv_port_custom_key_t custom_key = { (uint16_t)port, proto };
        name = wmem_map_lookup(serv_port_custom_hashtable, &custom_key);
    }

    if (name == NULL) {
        /* now look in the global tables */
        bool valid_proto = true;
        switch(proto) {
            case PT_TCP: p = ws_tcp; break;
            case PT_UDP: p = ws_udp; break;
            case PT_SCTP: p = ws_sctp; break;
            case PT_DCCP: p = ws_dccp; break;
            default: valid_proto = false;
        }
        if (valid_proto) {
            serv = global_services_lookup(port, p);
            if (serv) {
                name = serv->name;
            }
        }
    }

    if (name) {
        /* Cache result */
        serv_port_names = add_service_name(proto, port, name);
    }

    if (value_ret != NULL)
        *value_ret = serv_port_names;

    if (serv_port_names == NULL)
        return NULL;

    switch (proto) {
        case PT_UDP:
            return serv_port_names->udp_name;
        case PT_TCP:
            return serv_port_names->tcp_name;
        case PT_SCTP:
            return serv_port_names->sctp_name;
        case PT_DCCP:
            return serv_port_names->dccp_name;
        default:
            break;
    }
    return NULL;
}

const char *
try_serv_name_lookup(port_type proto, unsigned port)
{
    return (proto == PT_NONE) ? NULL : _serv_name_lookup(proto, port, NULL);
}

const char *
serv_name_lookup(port_type proto, unsigned port)
{
    serv_port_t *serv_port_names = NULL;
    const char *name;

    /* first look for the name */
    name = _serv_name_lookup(proto, port, &serv_port_names);
    if (name != NULL)
        return name;

    if (serv_port_names == NULL) {
        serv_port_names = wmem_new0(addr_resolv_scope, serv_port_t);
        wmem_map_insert(serv_port_hashtable, GUINT_TO_POINTER(port), serv_port_names);
    }

    /* No name; create the numeric string. */
    if (serv_port_names->numeric == NULL) {
        serv_port_names->numeric = wmem_strdup_printf(addr_resolv_scope, "%u", port);
    }

    return serv_port_names->numeric;
}

static void
initialize_services(void)
{
    ws_assert(serv_port_hashtable == NULL);
    serv_port_hashtable = wmem_map_new(addr_resolv_scope, g_direct_hash, g_direct_equal);
    ws_assert(serv_port_custom_hashtable == NULL);
    serv_port_custom_hashtable = wmem_map_new(addr_resolv_scope, serv_port_custom_hash, serv_port_custom_equal);

    /* Compute the pathname of the global services file. */
    if (g_services_path == NULL) {
        g_services_path = get_datafile_path(ENAME_SERVICES);
    }
    parse_services_file(g_services_path);

    /* Compute the pathname of the personal services file */
    if (g_pservices_path == NULL) {
        /* Check profile directory before personal configuration */
        g_pservices_path = get_persconffile_path(ENAME_SERVICES, true);
        if (!parse_services_file(g_pservices_path)) {
            g_free(g_pservices_path);
            g_pservices_path = get_persconffile_path(ENAME_SERVICES, false);
            parse_services_file(g_pservices_path);
        }
    }
}

static void
service_name_lookup_cleanup(void)
{
    serv_port_hashtable = NULL;
    serv_port_custom_hashtable = NULL;
    g_free(g_services_path);
    g_services_path = NULL;
    g_free(g_pservices_path);
    g_pservices_path = NULL;
}

static void
parse_enterprises_line (char *line)
{
    char *tok, *dec_str, *org_str;
    uint32_t dec;
    bool had_comment = false;

    /* Stop the line at any comment found */
    if ((tok = strchr(line, '#'))) {
        *tok = '\0';
        had_comment = true;
    }
    /* Get enterprise number */
    dec_str = strtok(line, " \t");
    if (!dec_str)
        return;
    /* Get enterprise name */
    org_str = strtok(NULL, ""); /* everything else */
    if (org_str && had_comment) {
        /* Only need to strip after (between name and where comment was) */
        org_str = g_strchomp(org_str);
    }
    if (!org_str)
        return;

    /* Add entry using number as key */
    if (!ws_strtou32(dec_str, NULL, &dec))
        return;
    g_hash_table_insert(enterprises_hashtable, GUINT_TO_POINTER(dec), g_strdup(org_str));
}


static bool
parse_enterprises_file(const char * path)
{
    FILE *fp;
    char    buf[MAX_LINELEN];

    fp = ws_fopen(path, "r");
    if (fp == NULL)
        return false;

    while (fgetline(buf, sizeof(buf), fp) >= 0) {
        parse_enterprises_line(buf);
    }

    fclose(fp);
    return true;
}

static void
initialize_enterprises(void)
{
    ws_assert(enterprises_hashtable == NULL);
    enterprises_hashtable = g_hash_table_new_full(NULL, NULL, NULL, g_free);

    if (g_enterprises_path == NULL) {
        g_enterprises_path = get_datafile_path(ENAME_ENTERPRISES);
    }
    parse_enterprises_file(g_enterprises_path);

    /* Populate entries from profile or personal */
    if (g_penterprises_path == NULL) {
        /* Check profile directory before personal configuration */
        g_penterprises_path = get_persconffile_path(ENAME_ENTERPRISES, true);
        if (!file_exists(g_penterprises_path)) {
            g_free(g_penterprises_path);
            g_penterprises_path = get_persconffile_path(ENAME_ENTERPRISES, false);
        }
    }
    /* Parse personal file (if present) */
    parse_enterprises_file(g_penterprises_path);
}

const char *
try_enterprises_lookup(uint32_t value)
{
    /* Trying extra entries first. N.B. This does allow entries to be overwritten and found.. */
    const char *name = (const char *)g_hash_table_lookup(enterprises_hashtable, GUINT_TO_POINTER(value));
    if (name) {
        return name;
    }
    else {
        return global_enterprises_lookup(value);
    }
}

const char *
enterprises_lookup(uint32_t value, const char *unknown_str)
{
    const char *s;

    s = try_enterprises_lookup(value);
    if (s != NULL)
        return s;
    if (unknown_str != NULL)
        return unknown_str;
    return "<Unknown>";
}

void
enterprises_base_custom(char *buf, uint32_t value)
{
    const char *s;

    if ((s = try_enterprises_lookup(value)) == NULL)
        s = ITEM_LABEL_UNKNOWN_STR;
    snprintf(buf, ITEM_LABEL_LENGTH, "%s (%u)", s, value);
}

static void
enterprises_cleanup(void)
{
    ws_assert(enterprises_hashtable);
    g_hash_table_destroy(enterprises_hashtable);
    enterprises_hashtable = NULL;
    g_free(g_enterprises_path);
    g_enterprises_path = NULL;
    g_free(g_penterprises_path);
    g_penterprises_path = NULL;
}

/* Fill in an IP4 structure with info from subnets file or just with the
 * string form of the address.
 */
bool
fill_dummy_ip4(const unsigned addr, hashipv4_t* volatile tp)
{
    subnet_entry_t subnet_entry;

    /* return value : true if addr matches any subnet */
    bool cidr_covered = false;

    /* Overwrite if we get async DNS reply */

    /* Do we have a subnet for this address? */
    subnet_entry = subnet_lookup(addr);
    if (0 != subnet_entry.mask) {
        /* Print name, then '.' then IP address after subnet mask */
        uint32_t host_addr;
        char buffer[WS_INET_ADDRSTRLEN];
        char* paddr;
        size_t i;

        host_addr = addr & (~subnet_entry.mask);
        ip_addr_to_str_buf(&host_addr, buffer, WS_INET_ADDRSTRLEN);
        paddr = buffer;

        /* Skip to first octet that is not totally masked
         * If length of mask is 32, we chomp the whole address.
         * If the address string starts '.' (should not happen?),
         * we skip that '.'.
         */
        i = subnet_entry.mask_length / 8;
        while(*(paddr) != '\0' && i > 0) {
            if (*(++paddr) == '.') {
                --i;
            }
        }

        /* There are more efficient ways to do this, but this is safe if we
         * trust snprintf and MAXDNSNAMELEN
         */
        snprintf(tp->name, MAXDNSNAMELEN, "%s%s", subnet_entry.name, paddr);

        /* Evaluate the subnet in CIDR notation
         * Reuse buffers built above
         */
        uint32_t subnet_addr;
        subnet_addr = addr & subnet_entry.mask;

        char buffer_subnet[WS_INET_ADDRSTRLEN];
        ip_addr_to_str_buf(&subnet_addr, buffer_subnet, WS_INET_ADDRSTRLEN);

        char buffer_cidr[WS_INET_CIDRADDRSTRLEN];
        snprintf(buffer_cidr, WS_INET_CIDRADDRSTRLEN, "%s%s%u", buffer_subnet, "/", (unsigned)subnet_entry.mask_length);

        snprintf(tp->cidr_addr, WS_INET_CIDRADDRSTRLEN, "%s%s%u", buffer_subnet, "/", (unsigned)subnet_entry.mask_length);
        cidr_covered = true;
    } else {
        /* XXX: This means we end up printing "1.2.3.4 (1.2.3.4)" in many cases */
        ip_addr_to_str_buf(&addr, tp->name, MAXDNSNAMELEN);

        /* IP does not belong to any known subnet, just indicate this IP without "/.32" */
        ip_addr_to_str_buf(&addr, tp->cidr_addr, MAXDNSNAMELEN);
    }
    return cidr_covered;
}


/* Fill in an IP6 structure with the string form of the address.
 */
static void
fill_dummy_ip6(hashipv6_t* volatile tp)
{
    /* Overwrite if we get async DNS reply */
    (void) g_strlcpy(tp->name, tp->ip6, MAXDNSNAMELEN);
}

static void
c_ares_ghba_cb(void *arg, int status, int timeouts _U_, struct hostent *he) {
    async_dns_queue_msg_t *caqm = (async_dns_queue_msg_t *)arg;
    char **p;

    if (!caqm) return;
    /* XXX, what to do if async_dns_in_flight == 0? */
    async_dns_in_flight--;

    if (status == ARES_SUCCESS) {
        for (p = he->h_addr_list; *p != NULL; p++) {
            switch(caqm->family) {
                case AF_INET:
                    add_ipv4_name(caqm->addr.ip4, he->h_name, false);
                    break;
                case AF_INET6:
                    add_ipv6_name(&caqm->addr.ip6, he->h_name, false);
                    break;
                default:
                    /* Throw an exception? */
                    break;
            }
        }
    }
    wmem_free(addr_resolv_scope, caqm);
}

/* --------------- */
hashipv4_t *
new_ipv4(const unsigned addr)
{
    hashipv4_t *tp = wmem_new(addr_resolv_scope, hashipv4_t);
    tp->addr = addr;
    tp->flags = 0;
    tp->name[0] = '\0';
    ip_addr_to_str_buf(&addr, tp->ip, sizeof(tp->ip));
    return tp;
}

static hashipv4_t *
host_lookup(const unsigned addr)
{
    hashipv4_t * volatile tp;

    tp = (hashipv4_t *)wmem_map_lookup(ipv4_hash_table, GUINT_TO_POINTER(addr));
    if (tp == NULL) {
        /*
         * We don't already have an entry for this host name; create one,
         * and then try to resolve it.
         */
        tp = new_ipv4(addr);
        fill_dummy_ip4(addr, tp);
        wmem_map_insert(ipv4_hash_table, GUINT_TO_POINTER(addr), tp);
    } else if (tp->flags & TRIED_OR_RESOLVED_MASK) {
        return tp;
    }

    /*
     * This hasn't been resolved yet, and we haven't tried to
     * resolve it already.
     */

    if (!gbl_resolv_flags.network_name)
        return tp;

    if (gbl_resolv_flags.use_external_net_name_resolver) {
        tp->flags |= TRIED_RESOLVE_ADDRESS;

        if (async_dns_initialized) {
            /* c-ares is initialized, so we can use it */
            if (resolve_synchronously || name_resolve_concurrency == 0) {
                /*
                 * Either all names are to be resolved synchronously or
                 * the concurrencly level is 0; do the resolution
                 * synchronously.
                 */
                sync_lookup_ip4(addr);
            } else {
                /*
                 * Names are to be resolved asynchronously, and we
                 * allow at least one asynchronous request in flight;
                 * post an asynchronous request.
                 */
                async_dns_queue_msg_t *caqm;

                caqm = wmem_new(addr_resolv_scope, async_dns_queue_msg_t);
                caqm->family = AF_INET;
                caqm->addr.ip4 = addr;
                wmem_list_append(async_dns_queue_head, (void *) caqm);
            }
        }
    }

    return tp;

} /* host_lookup */

/* --------------- */
static hashipv6_t *
new_ipv6(const ws_in6_addr *addr)
{
    hashipv6_t *tp = wmem_new(addr_resolv_scope, hashipv6_t);
    memcpy(tp->addr, addr->bytes, sizeof tp->addr);
    tp->flags = 0;
    tp->name[0] = '\0';
    ip6_to_str_buf(addr, tp->ip6, sizeof(tp->ip6));
    return tp;
}

/* ------------------------------------ */
static hashipv6_t *
host_lookup6(const ws_in6_addr *addr)
{
    hashipv6_t * volatile tp;

    tp = (hashipv6_t *)wmem_map_lookup(ipv6_hash_table, addr);
    if (tp == NULL) {
        /*
         * We don't already have an entry for this host name; create one,
         * and then try to resolve it.
         */
        ws_in6_addr *addr_key;

        addr_key = wmem_new(addr_resolv_scope, ws_in6_addr);
        tp = new_ipv6(addr);
        memcpy(addr_key, addr, 16);
        fill_dummy_ip6(tp);
        wmem_map_insert(ipv6_hash_table, addr_key, tp);
    } else if (tp->flags & TRIED_OR_RESOLVED_MASK) {
        return tp;
    }

    /*
     * This hasn't been resolved yet, and we haven't tried to
     * resolve it already.
     */

    if (!gbl_resolv_flags.network_name)
        return tp;

    if (gbl_resolv_flags.use_external_net_name_resolver) {
        tp->flags |= TRIED_RESOLVE_ADDRESS;

        if (async_dns_initialized) {
            /* c-ares is initialized, so we can use it */
            if (resolve_synchronously || name_resolve_concurrency == 0) {
                /*
                 * Either all names are to be resolved synchronously or
                 * the concurrencly level is 0; do the resolution
                 * synchronously.
                 */
                sync_lookup_ip6(addr);
            } else {
                /*
                 * Names are to be resolved asynchronously, and we
                 * allow at least one asynchronous request in flight;
                 * post an asynchronous request.
                 */
                async_dns_queue_msg_t *caqm;

                caqm = wmem_new(addr_resolv_scope, async_dns_queue_msg_t);
                caqm->family = AF_INET6;
                memcpy(&caqm->addr.ip6, addr, sizeof(caqm->addr.ip6));
                wmem_list_append(async_dns_queue_head, (void *) caqm);
            }
        }
    }

    return tp;

} /* host_lookup6 */

/*
 * Ethernet / manufacturer resolution
 *
 * The following functions implement ethernet address resolution and
 * ethers files parsing (see ethers(4)).
 *
 * The manuf file has the same format as ethers(4) except that names are
 * truncated to MAXMANUFLEN-1 (8) characters and that an address contains
 * only 3 bytes (instead of 6).
 *
 * Notes:
 *
 * I decide to not use the existing functions (see ethers(3) on some
 * operating systems) for the following reasons:
 * - performance gains (use of hash tables and some other enhancements),
 * - use of two ethers files (system-wide and per user),
 * - avoid the use of NIS maps,
 * - lack of these functions on some systems.
 *
 * So the following functions do _not_ behave as the standard ones.
 *
 * -- Laurent.
 */

/*
 * Converts Ethernet addresses of the form aa:bb:cc or aa:bb:cc:dd:ee:ff/28.
 * '-' is also supported as a separator. The
 * octets must be exactly two hexadecimal characters and the mask must be either
 * 28 or 36. Pre-condition: cp MUST be at least 21 bytes.
 */
static bool
parse_ether_address_fast(const unsigned char *cp, ether_t *eth, unsigned int *mask,
        const bool accept_mask)
{
    /* XXX copied from strutil.c */
    /* a map from ASCII hex chars to their value */
    static const int8_t str_to_nibble[256] = {
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
         0, 1, 2, 3, 4, 5, 6, 7, 8, 9,-1,-1,-1,-1,-1,-1,
        -1,10,11,12,13,14,15,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,10,11,12,13,14,15,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,
        -1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1
    };
    const uint8_t *str_to_nibble_usg = (const uint8_t *)str_to_nibble;

    unsigned char sep = cp[2];
    if ((sep != ':' && sep != '-') || cp[5] != sep) {
        /* Unexpected separators. */
        return false;
    }

    /* N.B. store octet values in an int to detect invalid (-1) entries */
    int num0 = (str_to_nibble_usg[cp[0]] << 4) | (int8_t)str_to_nibble_usg[cp[1]];
    int num1 = (str_to_nibble_usg[cp[3]] << 4) | (int8_t)str_to_nibble_usg[cp[4]];
    int num2 = (str_to_nibble_usg[cp[6]] << 4) | (int8_t)str_to_nibble_usg[cp[7]];

    if ((num0 | num1 | num2) & 0x100) {
        /* Not hexadecimal numbers. */
        return false;
    }

    eth->addr[0] = (uint8_t)num0;
    eth->addr[1] = (uint8_t)num1;
    eth->addr[2] = (uint8_t)num2;

    if (cp[8] == '\0' && accept_mask) {
        /* Indicate that this is a manufacturer ID (0 is not allowed as a mask). */
        *mask = 0;
        return true;
    } else if (cp[8] != sep || !accept_mask) {
        /* Format not handled by this fast path. */
        return false;
    }

    /* N.B. store octet values in an int to detect invalid (-1) entries */
    int num3 = (str_to_nibble_usg[cp[9]]  << 4) | (int8_t)str_to_nibble_usg[cp[10]];
    int num4 = (str_to_nibble_usg[cp[12]] << 4) | (int8_t)str_to_nibble_usg[cp[13]];
    int num5 = (str_to_nibble_usg[cp[15]] << 4) | (int8_t)str_to_nibble_usg[cp[16]];

    if (((num3 | num4 | num5) & 0x100) || cp[11] != sep || cp[14] != sep)  {
        /* Not hexadecimal numbers or invalid separators. */
        return false;
    }

    eth->addr[3] = (uint8_t)num3;
    eth->addr[4] = (uint8_t)num4;
    eth->addr[5] = (uint8_t)num5;
    if (cp[17] == '\0') {
        /* We got 6 bytes, so this is a MAC address (48 is not allowed as a mask). */
        *mask = 48;
        return true;
    } else if (cp[17] != '/' || cp[20] != '\0') {
        /* Format not handled by this fast path. */
        return false;
    }

    int m1 = cp[18];
    int m2 = cp[19];
    if (m1 == '3' && m2 == '6') {   /* Mask /36 */
        eth->addr[4] &= 0xf0;
        eth->addr[5] = 0;
        *mask = 36;
        return true;
    }
    if (m1 == '2' && m2 == '8') {   /* Mask /28 */
        eth->addr[3] &= 0xf0;
        eth->addr[4] = 0;
        eth->addr[5] = 0;
        *mask = 28;
        return true;
    }
    /* Unsupported mask */
    return false;
}

/*
 * If "accept_mask" is false, cp must point to an address that consists
 * of exactly 6 bytes.
 * If "accept_mask" is true, parse an up-to-6-byte sequence with an optional
 * mask.
 */
static bool
parse_ether_address(const char *cp, ether_t *eth, unsigned int *mask,
        const bool accept_mask)
{
    int i;
    unsigned long num;
    char *p;
    char sep = '\0';

    for (i = 0; i < 6; i++) {
        /* Get a hex number, 1 or 2 digits, no sign characters allowed. */
        if (!g_ascii_isxdigit(*cp))
            return false;
        num = strtoul(cp, &p, 16);
        if (p == cp)
            return false; /* failed */
        if (num > 0xFF)
            return false; /* not a valid octet */
        eth->addr[i] = (uint8_t) num;
        cp = p;     /* skip past the number */

        /* OK, what character terminated the octet? */
        if (*cp == '/') {
            /* "/" - this has a mask. */
            if (!accept_mask) {
                /* Entries with masks are not allowed in this file. */
                return false;
            }
            cp++; /* skip past the '/' to get to the mask */
            if (!g_ascii_isdigit(*cp))
                return false;   /* no sign allowed */
            num = strtoul(cp, &p, 10);
            if (p == cp)
                return false;   /* failed */
            cp = p;   /* skip past the number */
            if (*cp != '\0' && !g_ascii_isspace(*cp))
                return false;   /* bogus terminator */
            if (num == 0 || num >= 48)
                return false;   /* bogus mask */
            /* Mask out the bits not covered by the mask */
            *mask = (int)num;
            for (i = 0; num >= 8; i++, num -= 8)
                ;   /* skip octets entirely covered by the mask */
            /* Mask out the first masked octet */
            eth->addr[i] &= (0xFF << (8 - num));
            i++;
            /* Mask out completely-masked-out octets */
            for (; i < 6; i++)
                eth->addr[i] = 0;
            return true;
        }
        if (*cp == '\0') {
            /* We're at the end of the address, and there's no mask. */
            if (i == 2) {
                /* We got 3 bytes, so this is a manufacturer ID. */
                if (!accept_mask) {
                    /* Manufacturer IDs are not allowed in this file */
                    return false;
                }
                /* Indicate that this is a manufacturer ID (0 is not allowed
                   as a mask). */
                *mask = 0;
                return true;
            }

            if (i == 5) {
                /* We got 6 bytes, so this is a MAC address (48 is not allowed as a mask). */
                if (accept_mask)
                    *mask = 48;
                return true;
            }

            /* We didn't get 3 or 6 bytes, and there's no mask; this is
               illegal. */
            return false;
        } else {
            if (sep == '\0') {
                /* We don't know the separator used in this number; it can either
                   be ':', '-', or '.'. */
                if (*cp != ':' && *cp != '-' && *cp != '.')
                    return false;
                sep = *cp;  /* subsequent separators must be the same */
            } else {
                /* It has to be the same as the first separator */
                if (*cp != sep)
                    return false;
            }
        }
        cp++;
    }

    return true;
}

static int
parse_ether_line(char *line, ether_t *eth, unsigned int *mask,
        const bool accept_mask)
{
    /*
     *  See the ethers(4) or ethers(5) man page for ethers file format
     *  (not available on all systems).
     *  We allow both ethernet address separators (':' and '-'),
     *  as well as Wireshark's '.' separator.
     */

    char *cp;

    line = g_strstrip(line);
    if (line[0] == '\0' || line[0] == '#')
        return -1;

    if ((cp = strchr(line, '#'))) {
        *cp = '\0';
        g_strchomp(line);
    }

    if ((cp = strtok(line, " \t")) == NULL)
        return -1;

    /* First try to match the common format for the large ethers file. */
    if (!parse_ether_address_fast(cp, eth, mask, accept_mask)) {
        /* Fallback for the well-known addresses (wka) file. */
        if (!parse_ether_address(cp, eth, mask, accept_mask))
            return -1;
    }

    if ((cp = strtok(NULL, " \t")) == NULL)
        return -1;

    (void) g_strlcpy(eth->name, cp, MAXNAMELEN);

    if ((cp = strtok(NULL, "\t")) != NULL)
    {
        (void) g_strlcpy(eth->longname, cp, MAXNAMELEN);
    } else {
        /* Make the long name the short name */
        (void) g_strlcpy(eth->longname, eth->name, MAXNAMELEN);
    }

    return 0;

} /* parse_ether_line */

static FILE *eth_p;

static void
set_ethent(char *path)
{
    if (eth_p)
        rewind(eth_p);
    else
        eth_p = ws_fopen(path, "r");
}

static void
end_ethent(void)
{
    if (eth_p) {
        fclose(eth_p);
        eth_p = NULL;
    }
}

static ether_t *
get_ethent(unsigned int *mask, const bool accept_mask)
{

    static ether_t eth;
    char    buf[MAX_LINELEN];

    if (eth_p == NULL)
        return NULL;

    while (fgetline(buf, sizeof(buf), eth_p) >= 0) {
        if (parse_ether_line(buf, &eth, mask, accept_mask) == 0) {
            return &eth;
        }
    }

    return NULL;

} /* get_ethent */

static ether_t *
get_ethbyaddr(const uint8_t *addr)
{

    ether_t *eth;

    set_ethent(g_pethers_path);

    while (((eth = get_ethent(NULL, false)) != NULL) && memcmp(addr, eth->addr, 6) != 0)
        ;

    if (eth == NULL) {
        end_ethent();

        set_ethent(g_ethers_path);

        while (((eth = get_ethent(NULL, false)) != NULL) && memcmp(addr, eth->addr, 6) != 0)
            ;

        end_ethent();
    }

    return eth;

} /* get_ethbyaddr */

static hashmanuf_t *
manuf_hash_new_entry(const uint8_t *addr, const char* name, const char* longname)
{
    unsigned manuf_key;
    hashmanuf_t *manuf_value;
    char *endp;

    /* manuf needs only the 3 most significant octets of the ethernet address */
    manuf_key = (addr[0] << 16) + (addr[1] << 8) + addr[2];
    manuf_value = wmem_new(addr_resolv_scope, hashmanuf_t);

    memcpy(manuf_value->addr, addr, 3);
    if (name != NULL) {
        (void) g_strlcpy(manuf_value->resolved_name, name, MAXNAMELEN);
        manuf_value->flags = NAME_RESOLVED;
        if (longname != NULL) {
            (void) g_strlcpy(manuf_value->resolved_longname, longname, MAXNAMELEN);
        }
        else {
            (void) g_strlcpy(manuf_value->resolved_longname, name, MAXNAMELEN);
        }
    }
    else {
        manuf_value->flags = 0;
        manuf_value->resolved_name[0] = '\0';
        manuf_value->resolved_longname[0] = '\0';
    }
    /* Values returned by bytes_to_hexstr_punct() are *not* null-terminated */
    endp = bytes_to_hexstr_punct(manuf_value->hexaddr, addr, sizeof(manuf_value->addr), ':');
    *endp = '\0';

    wmem_map_insert(manuf_hashtable, GUINT_TO_POINTER(manuf_key), manuf_value);
    return manuf_value;
}

static hashwka_t*
wka_hash_new_entry(const uint8_t *addr, char* name)
{
    uint8_t *wka_key;
    hashwka_t *wka_value;

    wka_key = (uint8_t *)wmem_alloc(addr_resolv_scope, 6);
    memcpy(wka_key, addr, 6);

    wka_value = (hashwka_t*)wmem_new(addr_resolv_scope, hashwka_t);
    wka_value->flags = NAME_RESOLVED;
    wka_value->name = wmem_strdup(addr_resolv_scope, name);

    wmem_map_insert(wka_hashtable, wka_key, wka_value);
    return wka_value;
}

static void
add_manuf_name(const uint8_t *addr, unsigned int mask, char *name, char *longname)
{
    switch (mask)
    {
    case 0:
        {
        /* This is a manufacturer ID; add it to the manufacturer ID hash table */
        hashmanuf_t *entry = manuf_hash_new_entry(addr, name, longname);
        entry->flags |= STATIC_HOSTNAME;
        break;
        }
    case 48:
        {
        /* This is a well-known MAC address; add it to the Ethernet hash table */
        hashether_t *entry = add_eth_name(addr, name);
        entry->flags |= STATIC_HOSTNAME;
        break;
        }
    default:
        {
        /* This is a range of well-known addresses; add it to the well-known-address table */
        hashwka_t *entry = wka_hash_new_entry(addr, name);
        entry->flags |= STATIC_HOSTNAME;
        break;
        }
    }
} /* add_manuf_name */

/* XXX: manuf_name_lookup returns a hashmanuf_t*, which cannot hold a 28 or
 * 36 bit MA-M or MA-S. So it returns those as unresolved. For EUI-48 and
 * EUI-64, MA-M and MA-S should be checked for separately in the global
 * tables.
 *
 * XXX - size_t is used only in a ws_return_val_if() that checks
 * whether the argument has at least 3 bytes; that's done only if
 * assertions are enabled, so it's used only if assertions are
 * enabled.  This means that, if assertions aren't enabled, a
 * warning that the argument is unused will be issued by at least
 * some compilers, so we mark it as unused.  Should we do that
 * check unconditionally, and just emit a warning if assertions
 * are enabled?
 */
static hashmanuf_t *
manuf_name_lookup(const uint8_t *addr, size_t size _U_)
{
    uint32_t      manuf_key;
    uint8_t      oct;
    hashmanuf_t  *manuf_value;

    ws_return_val_if(size < 3, NULL);

    /* manuf needs only the 3 most significant octets of the ethernet address */
    manuf_key = addr[0];
    manuf_key = manuf_key<<8;
    oct = addr[1];
    manuf_key = manuf_key | oct;
    manuf_key = manuf_key<<8;
    oct = addr[2];
    manuf_key = manuf_key | oct;


    /* first try to find a "perfect match" */
    manuf_value = (hashmanuf_t*)wmem_map_lookup(manuf_hashtable, GUINT_TO_POINTER(manuf_key));
    if (manuf_value != NULL) {
        manuf_value->flags |= TRIED_RESOLVE_ADDRESS;
        return manuf_value;
    }

    /* Mask out the broadcast/multicast flag but not the locally
     * administered flag as locally administered means: not assigned
     * by the IEEE but the local administrator instead.
     * 0x01 multicast / broadcast bit
     * 0x02 locally administered bit */
    if ((manuf_key & 0x00010000) != 0) {
        manuf_key &= 0x00FEFFFF;
        manuf_value = (hashmanuf_t*)wmem_map_lookup(manuf_hashtable, GUINT_TO_POINTER(manuf_key));
        if (manuf_value != NULL) {
            manuf_value->flags |= TRIED_RESOLVE_ADDRESS;
            return manuf_value;
        }
    }

    /* Try the global manuf tables. */
    const char *short_name, *long_name;
    /* We can't insert a 28 or 36 bit entry into the used hash table. */
    short_name = ws_manuf_lookup_oui24(addr, &long_name);
    if (short_name != NULL) {
        /* Found it */
        manuf_value = manuf_hash_new_entry(addr, short_name, long_name);
    } else {
        /* Add the address as a hex string */
        manuf_value = manuf_hash_new_entry(addr, NULL, NULL);
    }

    manuf_value->flags |= TRIED_RESOLVE_ADDRESS;
    return manuf_value;

} /* manuf_name_lookup */

static char *
wka_name_lookup(const uint8_t *addr, const unsigned int mask)
{
    uint8_t    masked_addr[6];
    unsigned   num;
    int        i;
    hashwka_t *value;

    if (wka_hashtable == NULL) {
        return NULL;
    }
    /* Get the part of the address covered by the mask. */
    for (i = 0, num = mask; num >= 8; i++, num -= 8)
        masked_addr[i] = addr[i];   /* copy octets entirely covered by the mask */
    /* Mask out the first masked octet */
    masked_addr[i] = addr[i] & (0xFF << (8 - num));
    i++;
    /* Zero out completely-masked-out octets */
    for (; i < 6; i++)
        masked_addr[i] = 0;

    value = (hashwka_t*)wmem_map_lookup(wka_hashtable, masked_addr);

    if (value) {
        value->flags |= TRIED_RESOLVE_ADDRESS;
        return value->name;
    }

    return NULL;

} /* wka_name_lookup */

unsigned get_hash_ether_status(hashether_t* ether)
{
    return ether->flags;
}

bool get_hash_ether_used(hashether_t* ether)
{
    return ((ether->flags & TRIED_OR_RESOLVED_MASK) == TRIED_OR_RESOLVED_MASK);
}

char* get_hash_ether_hexaddr(hashether_t* ether)
{
    return ether->hexaddr;
}

char* get_hash_ether_resolved_name(hashether_t* ether)
{
    return ether->resolved_name;
}

bool get_hash_wka_used(hashwka_t* wka)
{
    return ((wka->flags & TRIED_OR_RESOLVED_MASK) == TRIED_OR_RESOLVED_MASK);
}

char* get_hash_wka_resolved_name(hashwka_t* wka)
{
    return wka->name;
}

static unsigned
eth_addr_hash(const void *key)
{
    return wmem_strong_hash((const uint8_t *)key, 6);
}

static gboolean
eth_addr_cmp(const void *a, const void *b)
{
    return (memcmp(a, b, 6) == 0);
}

static void
initialize_ethers(void)
{
    ether_t *eth;
    unsigned mask = 0;

    /* hash table initialization */
    ws_assert(wka_hashtable == NULL);
    wka_hashtable   = wmem_map_new(addr_resolv_scope, eth_addr_hash, eth_addr_cmp);
    ws_assert(manuf_hashtable == NULL);
    manuf_hashtable = wmem_map_new(addr_resolv_scope, g_direct_hash, g_direct_equal);
    ws_assert(eth_hashtable == NULL);
    eth_hashtable   = wmem_map_new(addr_resolv_scope, eth_addr_hash, eth_addr_cmp);

    /* Compute the pathname of the ethers file. */
    if (g_ethers_path == NULL) {
        g_ethers_path = g_build_filename(get_systemfile_dir(), ENAME_ETHERS, NULL);
    }

    /* Set g_pethers_path here, but don't actually do anything
     * with it. It's used in get_ethbyaddr().
     */
    if (g_pethers_path == NULL) {
        /* Check profile directory before personal configuration */
        g_pethers_path = get_persconffile_path(ENAME_ETHERS, true);
        if (!file_exists(g_pethers_path)) {
            g_free(g_pethers_path);
            g_pethers_path = get_persconffile_path(ENAME_ETHERS, false);
        }
    }

    /* Compute the pathname of the global manuf file */
    if (g_manuf_path == NULL)
        g_manuf_path = get_datafile_path(ENAME_MANUF);
    /* Read it and initialize the hash table */
    if (file_exists(g_manuf_path)) {
        set_ethent(g_manuf_path);
        while ((eth = get_ethent(&mask, true))) {
            add_manuf_name(eth->addr, mask, eth->name, eth->longname);
        }
        end_ethent();
    }

    /* Compute the pathname of the personal manuf file */
    if (g_pmanuf_path == NULL) {
        /* Check profile directory before personal configuration */
        g_pmanuf_path = get_persconffile_path(ENAME_MANUF, true);
        if (!file_exists(g_pmanuf_path)) {
            g_free(g_pmanuf_path);
            g_pmanuf_path = get_persconffile_path(ENAME_MANUF, false);
        }
    }
    /* Read it and initialize the hash table */
    if (file_exists(g_pmanuf_path)) {
        set_ethent(g_pmanuf_path);
        while ((eth = get_ethent(&mask, true))) {
            add_manuf_name(eth->addr, mask, eth->name, eth->longname);
        }
        end_ethent();
    }

    /* Compute the pathname of the wka file */
    if (g_wka_path == NULL)
        g_wka_path = get_datafile_path(ENAME_WKA);

    /* Read it and initialize the hash table */
    set_ethent(g_wka_path);
    while ((eth = get_ethent(&mask, true))) {
        add_manuf_name(eth->addr, mask, eth->name, eth->longname);
    }
    end_ethent();

} /* initialize_ethers */

static void
ethers_cleanup(void)
{
    wka_hashtable = NULL;
    manuf_hashtable = NULL;
    eth_hashtable = NULL;
    g_free(g_ethers_path);
    g_ethers_path = NULL;
    g_free(g_pethers_path);
    g_pethers_path = NULL;
    g_free(g_manuf_path);
    g_manuf_path = NULL;
    g_free(g_pmanuf_path);
    g_pmanuf_path = NULL;
    g_free(g_wka_path);
    g_wka_path = NULL;
}

static void
eth_resolved_name_fill(hashether_t *tp, const char *name, unsigned mask, const uint8_t *addr)
{
    switch (mask) {
        case 24:
            snprintf(tp->resolved_name, MAXNAMELEN, "%s_%02x:%02x:%02x",
                    name, addr[3], addr[4], addr[5]);
            break;
        case 28:
            snprintf(tp->resolved_name, MAXNAMELEN, "%s_%01x:%02x:%02x",
                    name, addr[3] & 0x0F, addr[4], addr[5]);
            break;
        case 36:
            snprintf(tp->resolved_name, MAXNAMELEN, "%s_%01x:%02x",
                    name, addr[4] & 0x0F, addr[5]);
            break;
        default: // Future-proof generic algorithm
        {
            unsigned bytes = mask / 8;
            unsigned bitmask = mask % 8;

            int pos = snprintf(tp->resolved_name, MAXNAMELEN, "%s", name);
            if (pos >= MAXNAMELEN) return;

            if (bytes < 6) {
                pos += snprintf(tp->resolved_name + pos, MAXNAMELEN - pos,
                    bitmask >= 4 ? "_%01x" : "_%02x",
                    addr[bytes] & (0xFF >> bitmask));
                bytes++;
            }

            while (bytes < 6) {
                if (pos >= MAXNAMELEN) return;
                pos += snprintf(tp->resolved_name + pos, MAXNAMELEN - pos, ":%02x",
                    addr[bytes]);
                bytes++;
            }
        }
    }
}

/* Resolve ethernet address */
static hashether_t *
eth_addr_resolve(hashether_t *tp) {
    ether_t      *eth;
    hashmanuf_t *manuf_value;
    const uint8_t *addr = tp->addr;
    size_t addr_size = sizeof(tp->addr);

    if ( (eth = get_ethbyaddr(addr)) != NULL) {
        (void) g_strlcpy(tp->resolved_name, eth->name, MAXNAMELEN);
        tp->flags |= NAME_RESOLVED | STATIC_HOSTNAME;
        return tp;
    } else if (!(tp->flags & NAME_RESOLVED)) {
        unsigned      mask;
        char         *name;
        address       ether_addr;

        /* Unknown name.  Try looking for it in the well-known-address
           tables for well-known address ranges smaller than 2^24. */
        mask = 7;
        do {
            /* Only the topmost 5 bytes participate fully */
            if ((name = wka_name_lookup(addr, mask+40)) != NULL) {
                snprintf(tp->resolved_name, MAXNAMELEN, "%s_%02x",
                        name, addr[5] & (0xFF >> mask));
                tp->flags |= NAME_RESOLVED | NAME_RESOLVED_PREFIX;
                return tp;
            }
        } while (mask--);

        mask = 7;
        do {
            /* Only the topmost 4 bytes participate fully */
            if ((name = wka_name_lookup(addr, mask+32)) != NULL) {
                snprintf(tp->resolved_name, MAXNAMELEN, "%s_%02x:%02x",
                        name, addr[4] & (0xFF >> mask), addr[5]);
                tp->flags |= NAME_RESOLVED | NAME_RESOLVED_PREFIX;
                return tp;
            }
        } while (mask--);

        mask = 7;
        do {
            /* Only the topmost 3 bytes participate fully */
            if ((name = wka_name_lookup(addr, mask+24)) != NULL) {
                snprintf(tp->resolved_name, MAXNAMELEN, "%s_%02x:%02x:%02x",
                        name, addr[3] & (0xFF >> mask), addr[4], addr[5]);
                tp->flags |= NAME_RESOLVED | NAME_RESOLVED_PREFIX;
                return tp;
            }
        } while (mask--);

        /* Now try looking in the manufacturer table. */
        manuf_value = manuf_name_lookup(addr, addr_size);
        if ((manuf_value != NULL) && ((manuf_value->flags & NAME_RESOLVED) == NAME_RESOLVED)) {
            snprintf(tp->resolved_name, MAXNAMELEN, "%s_%02x:%02x:%02x",
                    manuf_value->resolved_name, addr[3], addr[4], addr[5]);
            tp->flags |= NAME_RESOLVED | NAME_RESOLVED_PREFIX;
            return tp;
        }

        /* Now try looking for it in the well-known-address
           tables for well-known address ranges larger than 2^24. */
        mask = 7;
        do {
            /* Only the topmost 2 bytes participate fully */
            if ((name = wka_name_lookup(addr, mask+16)) != NULL) {
                snprintf(tp->resolved_name, MAXNAMELEN, "%s_%02x:%02x:%02x:%02x",
                        name, addr[2] & (0xFF >> mask), addr[3], addr[4],
                        addr[5]);
                tp->flags |= NAME_RESOLVED | NAME_RESOLVED_PREFIX;
                return tp;
            }
        } while (mask--);

        mask = 7;
        do {
            /* Only the topmost byte participates fully */
            if ((name = wka_name_lookup(addr, mask+8)) != NULL) {
                snprintf(tp->resolved_name, MAXNAMELEN, "%s_%02x:%02x:%02x:%02x:%02x",
                        name, addr[1] & (0xFF >> mask), addr[2], addr[3],
                        addr[4], addr[5]);
                tp->flags |= NAME_RESOLVED | NAME_RESOLVED_PREFIX;
                return tp;
            }
        } while (mask--);

        mask = 7;
        do {
            /* Not even the topmost byte participates fully */
            if ((name = wka_name_lookup(addr, mask)) != NULL) {
                snprintf(tp->resolved_name, MAXNAMELEN, "%s_%02x:%02x:%02x:%02x:%02x:%02x",
                        name, addr[0] & (0xFF >> mask), addr[1], addr[2],
                        addr[3], addr[4], addr[5]);
                tp->flags |= NAME_RESOLVED | NAME_RESOLVED_PREFIX;
                return tp;
            }
        } while (--mask); /* Work down to the last bit */

        /* Now try looking in the global manuf data for a MA-M or MA-S
         * match. We do this last so that the other files override this
         * result.
         */
        const char *short_name, *long_name;
        short_name = ws_manuf_lookup(addr, &long_name, &mask);
        if (short_name != NULL) {
            if (mask == 24) {
                /* This shouldn't happen as it should be handled above,
                 * but it doesn't hurt.
                 */
                manuf_hash_new_entry(addr, short_name, long_name);
            }
            eth_resolved_name_fill(tp, short_name, mask, addr);
            tp->flags |= NAME_RESOLVED | NAME_RESOLVED_PREFIX;
            return tp;
        }
        /* No match whatsoever. */
        set_address(&ether_addr, AT_ETHER, 6, addr);
        address_to_str_buf(&ether_addr, tp->resolved_name, MAXNAMELEN);
        return tp;
    }
    return tp;
} /* eth_addr_resolve */

static hashether_t *
eth_hash_new_entry(const uint8_t *addr, const bool resolve)
{
    hashether_t *tp;
    char *endp;

    tp = wmem_new(addr_resolv_scope, hashether_t);
    memcpy(tp->addr, addr, sizeof(tp->addr));
    tp->flags = 0;
    /* Values returned by bytes_to_hexstr_punct() are *not* null-terminated */
    endp = bytes_to_hexstr_punct(tp->hexaddr, addr, sizeof(tp->addr), ':');
    *endp = '\0';
    tp->resolved_name[0] = '\0';

    if (resolve)
        eth_addr_resolve(tp);

    wmem_map_insert(eth_hashtable, tp->addr, tp);

    return tp;
} /* eth_hash_new_entry */

static hashether_t *
add_eth_name(const uint8_t *addr, const char *name)
{
    hashether_t *tp;

    tp = (hashether_t *)wmem_map_lookup(eth_hashtable, addr);

    if (tp == NULL) {
        tp = eth_hash_new_entry(addr, false);
    }

    if (strcmp(tp->resolved_name, name) != 0) {
        (void) g_strlcpy(tp->resolved_name, name, MAXNAMELEN);
        tp->flags |= NAME_RESOLVED;
        new_resolved_objects = true;
    }

    return tp;
} /* add_eth_name */

static hashether_t *
eth_name_lookup(const uint8_t *addr, const bool resolve)
{
    hashether_t  *tp;

    tp = (hashether_t *)wmem_map_lookup(eth_hashtable, addr);

    if (tp == NULL) {
        tp = eth_hash_new_entry(addr, resolve);
    } else {
        if (resolve && !(tp->flags & TRIED_RESOLVE_ADDRESS)) {
            /* We don't test TRIED_OR_RESOLVED_MASK (but check
             * RESOLVED_NAME in eth_addr_resolve) so that the ethers
             * files take precendent over wka, NRBs, ARP discovery, etc.
             * XXX: What _is_ the proper precedence, and should it
             * be configurable? (cf. #18075) */
            eth_addr_resolve(tp); /* Found but needs to be resolved */
        }
    }
    if (resolve) {
        tp->flags |= TRIED_RESOLVE_ADDRESS;
    }

    return tp;

} /* eth_name_lookup */


/* IPXNETS */
static int
parse_ipxnets_line(char *line, ipxnet_t *ipxnet)
{
    /*
     *  We allow three address separators (':', '-', and '.'),
     *  as well as no separators
     */

    char      *cp;
    uint32_t  a, a0, a1, a2, a3;
    bool      found_single_number = false;

    if ((cp = strchr(line, '#')))
        *cp = '\0';

    if ((cp = strtok(line, " \t\n")) == NULL)
        return -1;

    /* Either fill a0,a1,a2,a3 and found_single_number is false,
     * fill a and found_single_number is true,
     * or return -1
     */
    if (sscanf(cp, "%x:%x:%x:%x", &a0, &a1, &a2, &a3) != 4) {
        if (sscanf(cp, "%x-%x-%x-%x", &a0, &a1, &a2, &a3) != 4) {
            if (sscanf(cp, "%x.%x.%x.%x", &a0, &a1, &a2, &a3) != 4) {
                if (sscanf(cp, "%x", &a) == 1) {
                    found_single_number = true;
                }
                else {
                    return -1;
                }
            }
        }
    }

    if ((cp = strtok(NULL, " \t\n")) == NULL)
        return -1;

    if (found_single_number) {
        ipxnet->addr = a;
    }
    else {
        ipxnet->addr = (a0 << 24) | (a1 << 16) | (a2 << 8) | a3;
    }

    (void) g_strlcpy(ipxnet->name, cp, MAXNAMELEN);

    return 0;

} /* parse_ipxnets_line */

static FILE *ipxnet_p;

static void
set_ipxnetent(char *path)
{
    if (ipxnet_p)
        rewind(ipxnet_p);
    else
        ipxnet_p = ws_fopen(path, "r");
}

static void
end_ipxnetent(void)
{
    if (ipxnet_p) {
        fclose(ipxnet_p);
        ipxnet_p = NULL;
    }
}

static ipxnet_t *
get_ipxnetent(void)
{

    static ipxnet_t ipxnet;
    char    buf[MAX_LINELEN];

    if (ipxnet_p == NULL)
        return NULL;

    while (fgetline(buf, sizeof(buf), ipxnet_p) >= 0) {
        if (parse_ipxnets_line(buf, &ipxnet) == 0) {
            return &ipxnet;
        }
    }

    return NULL;

} /* get_ipxnetent */

static ipxnet_t *
get_ipxnetbyaddr(uint32_t addr)
{
    ipxnet_t *ipxnet;

    set_ipxnetent(g_ipxnets_path);

    while (((ipxnet = get_ipxnetent()) != NULL) && (addr != ipxnet->addr) ) ;

    if (ipxnet == NULL) {
        end_ipxnetent();

        set_ipxnetent(g_pipxnets_path);

        while (((ipxnet = get_ipxnetent()) != NULL) && (addr != ipxnet->addr) )
            ;

        end_ipxnetent();
    }

    return ipxnet;

} /* get_ipxnetbyaddr */

static void
initialize_ipxnets(void)
{
    /* Compute the pathname of the ipxnets file.
     *
     * XXX - is there a notion of an "ipxnets file" in any flavor of
     * UNIX, or with any add-on Netware package for UNIX?  If not,
     * should the UNIX version of the ipxnets file be in the datafile
     * directory as well?
     */
    if (g_ipxnets_path == NULL) {
        g_ipxnets_path = wmem_strdup_printf(addr_resolv_scope, "%s" G_DIR_SEPARATOR_S "%s",
                get_systemfile_dir(), ENAME_IPXNETS);
    }

    /* Set g_pipxnets_path here, but don't actually do anything
     * with it. It's used in get_ipxnetbyaddr().
     */
    if (g_pipxnets_path == NULL) {
        /* Check profile directory before personal configuration */
        g_pipxnets_path = get_persconffile_path(ENAME_IPXNETS, true);
        if (!file_exists(g_pipxnets_path)) {
            g_free(g_pipxnets_path);
            g_pipxnets_path = get_persconffile_path(ENAME_IPXNETS, false);
        }
    }

} /* initialize_ipxnets */

static void
ipx_name_lookup_cleanup(void)
{
    g_ipxnets_path = NULL;
    g_free(g_pipxnets_path);
    g_pipxnets_path = NULL;
}

static char *
ipxnet_name_lookup(wmem_allocator_t *allocator, const unsigned addr)
{
    hashipxnet_t *tp;
    ipxnet_t *ipxnet;

    tp = (hashipxnet_t *)wmem_map_lookup(ipxnet_hash_table, GUINT_TO_POINTER(addr));
    if (tp == NULL) {
        tp = wmem_new(addr_resolv_scope, hashipxnet_t);
        wmem_map_insert(ipxnet_hash_table, GUINT_TO_POINTER(addr), tp);
    } else {
        return wmem_strdup(allocator, tp->name);
    }

    /* fill in a new entry */

    tp->addr = addr;

    if ( (ipxnet = get_ipxnetbyaddr(addr)) == NULL) {
        /* unknown name */
        snprintf(tp->name, MAXNAMELEN, "%X", addr);

    } else {
        (void) g_strlcpy(tp->name, ipxnet->name, MAXNAMELEN);
    }

    return wmem_strdup(allocator, tp->name);

} /* ipxnet_name_lookup */

/* VLANS */
static int
parse_vlan_line(char *line, vlan_t *vlan)
{
    char      *cp;
    uint16_t  id;

    if ((cp = strchr(line, '#')))
        *cp = '\0';

    if ((cp = strtok(line, " \t\n")) == NULL)
        return -1;

    if (sscanf(cp, "%" SCNu16, &id) == 1) {
        vlan->id = id;
    }
    else {
        return -1;
    }

    if ((cp = strtok(NULL, "\t\n")) == NULL)
        return -1;

    (void) g_strlcpy(vlan->name, cp, MAXVLANNAMELEN);

    return 0;

} /* parse_vlan_line */

static FILE *vlan_p;

static void
set_vlanent(char *path)
{
    if (vlan_p)
        rewind(vlan_p);
    else
        vlan_p = ws_fopen(path, "r");
}

static void
end_vlanent(void)
{
    if (vlan_p) {
        fclose(vlan_p);
        vlan_p = NULL;
    }
}

static vlan_t *
get_vlanent(void)
{

    static vlan_t vlan;
    char    buf[MAX_LINELEN];

    if (vlan_p == NULL)
        return NULL;

    while (fgetline(buf, sizeof(buf), vlan_p) >= 0) {
        if (parse_vlan_line(buf, &vlan) == 0) {
            return &vlan;
        }
    }

    return NULL;

} /* get_vlanent */

static vlan_t *
get_vlannamebyid(uint16_t id)
{
    vlan_t *vlan;

    set_vlanent(g_pvlan_path);

    while (((vlan = get_vlanent()) != NULL) && (id != vlan->id) ) ;

    if (vlan == NULL) {
        end_vlanent();

    }

    return vlan;

} /* get_vlannamebyid */

static void
initialize_vlans(void)
{
    ws_assert(vlan_hash_table == NULL);
    vlan_hash_table = wmem_map_new(addr_resolv_scope, g_direct_hash, g_direct_equal);

    /* Set g_pvlan_path here, but don't actually do anything
     * with it. It's used in get_vlannamebyid()
     */
    if (g_pvlan_path == NULL) {
        /* Check profile directory before personal configuration */
        g_pvlan_path = get_persconffile_path(ENAME_VLANS, true);
        if (!file_exists(g_pvlan_path)) {
            g_free(g_pvlan_path);
            g_pvlan_path = get_persconffile_path(ENAME_VLANS, false);
        }
    }
} /* initialize_vlans */

static void
vlan_name_lookup_cleanup(void)
{
    end_vlanent();
    vlan_hash_table = NULL;
    g_free(g_pvlan_path);
    g_pvlan_path = NULL;
}

static const char *
vlan_name_lookup(const unsigned id)
{
    hashvlan_t *tp;
    vlan_t *vlan;

    tp = (hashvlan_t *)wmem_map_lookup(vlan_hash_table, GUINT_TO_POINTER(id));
    if (tp == NULL) {
        tp = wmem_new(addr_resolv_scope, hashvlan_t);
        wmem_map_insert(vlan_hash_table, GUINT_TO_POINTER(id), tp);
    } else {
        return tp->name;
    }

    /* fill in a new entry */

    tp->id = id;

    if ( (vlan = get_vlannamebyid(id)) == NULL) {
        /* unknown name */
        snprintf(tp->name, MAXVLANNAMELEN, "<%u>", id);

    } else {
        (void) g_strlcpy(tp->name, vlan->name, MAXVLANNAMELEN);
    }

    return tp->name;

} /* vlan_name_lookup */
/* VLAN END */

static bool
read_hosts_file (const char *hostspath, bool store_entries)
{
    FILE *hf;
    char line[MAX_LINELEN];
    char *cp;
    union {
        uint32_t ip4_addr;
        ws_in6_addr ip6_addr;
    } host_addr;
    bool is_ipv6, entry_found = false;

    /*
     *  See the hosts(4) or hosts(5) man page for hosts file format
     *  (not available on all systems).
     */
    if ((hf = ws_fopen(hostspath, "r")) == NULL)
        return false;

    while (fgetline(line, sizeof(line), hf) >= 0) {
        if ((cp = strchr(line, '#')))
            *cp = '\0';

        if ((cp = strtok(line, " \t")) == NULL)
            continue; /* no tokens in the line */

        if (ws_inet_pton6(cp, &host_addr.ip6_addr)) {
            /* Valid IPv6 */
            is_ipv6 = true;
        } else if (ws_inet_pton4(cp, &host_addr.ip4_addr)) {
            /* Valid IPv4 */
            is_ipv6 = false;
        } else {
            continue;
        }

        if ((cp = strtok(NULL, " \t")) == NULL)
            continue; /* no host name */

        entry_found = true;
        if (store_entries) {
            if (is_ipv6) {
                add_ipv6_name(&host_addr.ip6_addr, cp, true);
            } else {
                add_ipv4_name(host_addr.ip4_addr, cp, true);
            }
        }
    }

    fclose(hf);
    return entry_found ? true : false;
} /* read_hosts_file */

bool
add_hosts_file (const char *hosts_file)
{
    bool found = false;
    unsigned i;

    if (!hosts_file)
        return false;

    if (!extra_hosts_files)
        extra_hosts_files = g_ptr_array_new();

    for (i = 0; i < extra_hosts_files->len; i++) {
        if (strcmp(hosts_file, (const char *) g_ptr_array_index(extra_hosts_files, i)) == 0)
            found = true;
    }

    if (!found) {
        g_ptr_array_add(extra_hosts_files, wmem_strdup(addr_resolv_scope, hosts_file));
        return read_hosts_file (hosts_file, false);
    }
    return true;
}

bool
add_ip_name_from_string (const char *addr, const char *name)
{
    union {
        uint32_t ip4_addr;
        ws_in6_addr ip6_addr;
    } host_addr;
    bool is_ipv6;
    resolved_name_t *resolved_entry;

    if (ws_inet_pton6(addr, &host_addr.ip6_addr)) {
        is_ipv6 = true;
    } else if (ws_inet_pton4(addr, &host_addr.ip4_addr)) {
        is_ipv6 = false;
    } else {
        return false;
    }

    if (is_ipv6) {
        resolved_entry = (resolved_name_t*)wmem_map_lookup(manually_resolved_ipv6_list, &host_addr.ip6_addr);
        if (resolved_entry)
        {
            // If we found a previous matching key (IP address), then just update the value (custom hostname);
            (void) g_strlcpy(resolved_entry->name, name, MAXDNSNAMELEN);
        }
        else
        {
            // Add a new mapping entry, if this IP address isn't already in the list.
            ws_in6_addr* addr_key = wmem_new(wmem_epan_scope(), ws_in6_addr);
            memcpy(addr_key, &host_addr.ip6_addr, sizeof(ws_in6_addr));

            resolved_entry = wmem_new(wmem_epan_scope(), resolved_name_t);
            (void) g_strlcpy(resolved_entry->name, name, MAXDNSNAMELEN);

            wmem_map_insert(manually_resolved_ipv6_list, addr_key, resolved_entry);
        }
    } else {
        resolved_entry = (resolved_name_t*)wmem_map_lookup(manually_resolved_ipv4_list, GUINT_TO_POINTER(host_addr.ip4_addr));
        if (resolved_entry)
        {
            // If we found a previous matching key (IP address), then just update the value (custom hostname);
            (void) g_strlcpy(resolved_entry->name, name, MAXDNSNAMELEN);
        }
        else
        {
            // Add a new mapping entry, if this IP address isn't already in the list.
            resolved_entry = wmem_new(wmem_epan_scope(), resolved_name_t);
            (void) g_strlcpy(resolved_entry->name, name, MAXDNSNAMELEN);

            wmem_map_insert(manually_resolved_ipv4_list, GUINT_TO_POINTER(host_addr.ip4_addr), resolved_entry);
        }
    }

    return true;
} /* add_ip_name_from_string */

extern resolved_name_t* get_edited_resolved_name(const char* addr)
{
    uint32_t ip4_addr;
    ws_in6_addr ip6_addr;
    resolved_name_t* resolved_entry = NULL;

    if (ws_inet_pton6(addr, &ip6_addr)) {
        resolved_entry = (resolved_name_t*)wmem_map_lookup(manually_resolved_ipv6_list, &ip6_addr);
    }
    else if (ws_inet_pton4(addr, &ip4_addr)) {
        resolved_entry = (resolved_name_t*)wmem_map_lookup(manually_resolved_ipv4_list, GUINT_TO_POINTER(ip4_addr));
    }

    return resolved_entry;
}

/*
 * Add the resolved addresses that are in use to the list used to create the pcapng NRB
 */
static void
ipv4_hash_table_resolved_to_list(void *key _U_, void *value, void *user_data)
{
    addrinfo_lists_t *lists = (addrinfo_lists_t *)user_data;
    hashipv4_t *ipv4_hash_table_entry = (hashipv4_t *)value;

    if ((ipv4_hash_table_entry->flags & USED_AND_RESOLVED_MASK) == USED_AND_RESOLVED_MASK) {
        lists->ipv4_addr_list = g_list_prepend(lists->ipv4_addr_list, ipv4_hash_table_entry);
    }
}

/*
 * Add the resolved addresses that are in use to the list used to create the pcapng NRB
 */
static void
ipv6_hash_table_resolved_to_list(void *key _U_, void *value, void *user_data)
{
    addrinfo_lists_t *lists = (addrinfo_lists_t *)user_data;
    hashipv6_t *ipv6_hash_table_entry = (hashipv6_t *)value;

    if ((ipv6_hash_table_entry->flags & USED_AND_RESOLVED_MASK) == USED_AND_RESOLVED_MASK) {
        lists->ipv6_addr_list = g_list_prepend(lists->ipv6_addr_list, ipv6_hash_table_entry);
    }
}

addrinfo_lists_t *
get_addrinfo_list(void)
{
    if (ipv4_hash_table) {
        wmem_map_foreach(ipv4_hash_table, ipv4_hash_table_resolved_to_list, &addrinfo_lists);
    }

    if (ipv6_hash_table) {
        wmem_map_foreach(ipv6_hash_table, ipv6_hash_table_resolved_to_list, &addrinfo_lists);
    }

    return &addrinfo_lists;
}

/* Read in a list of subnet definition - name pairs.
 * <line> = <comment> | <entry> | <whitespace>
 * <comment> = <whitespace>#<any>
 * <entry> = <subnet_definition> <whitespace> <subnet_name> [<comment>|<whitespace><any>]
 * <subnet_definition> = <ipv4_address> / <subnet_mask_length>
 * <ipv4_address> is a full address; it will be masked to get the subnet-ID.
 * <subnet_mask_length> is a decimal 1-31
 * <subnet_name> is a string containing no whitespace.
 * <whitespace> = (space | tab)+
 * Any malformed entries are ignored.
 * Any trailing data after the subnet_name is ignored.
 *
 * XXX Support IPv6
 */
static bool
read_subnets_file (const char *subnetspath)
{
    FILE *hf;
    char line[MAX_LINELEN];
    char *cp, *cp2;
    uint32_t host_addr; /* IPv4 ONLY */
    uint8_t mask_length;

    if ((hf = ws_fopen(subnetspath, "r")) == NULL)
        return false;

    while (fgetline(line, sizeof(line), hf) >= 0) {
        if ((cp = strchr(line, '#')))
            *cp = '\0';

        if ((cp = strtok(line, " \t")) == NULL)
            continue; /* no tokens in the line */


        /* Expected format is <IP4 address>/<subnet length> */
        cp2 = strchr(cp, '/');
        if (NULL == cp2) {
            /* No length */
            continue;
        }
        *cp2 = '\0'; /* Cut token */
        ++cp2    ;

        /* Check if this is a valid IPv4 address */
        if (!str_to_ip(cp, &host_addr)) {
            continue; /* no */
        }

        if (!ws_strtou8(cp2, NULL, &mask_length) || mask_length == 0 || mask_length > 32) {
            continue; /* invalid mask length */
        }

        if ((cp = strtok(NULL, " \t")) == NULL)
            continue; /* no subnet name */

        subnet_entry_set(host_addr, mask_length, cp);
    }

    fclose(hf);
    return true;
} /* read_subnets_file */

static subnet_entry_t
subnet_lookup(const uint32_t addr)
{
    subnet_entry_t subnet_entry;
    uint32_t i;

    /* Search mask lengths linearly, longest first */

    i = SUBNETLENGTHSIZE;
    while(have_subnet_entry && i > 0) {
        uint32_t masked_addr;
        subnet_length_entry_t* length_entry;

        /* Note that we run from 31 (length 32)  to 0 (length 1)  */
        --i;
        ws_assert(i < SUBNETLENGTHSIZE);


        length_entry = &subnet_length_entries[i];

        if (NULL != length_entry->subnet_addresses) {
            sub_net_hashipv4_t * tp;
            uint32_t hash_idx;

            masked_addr = addr & length_entry->mask;
            hash_idx = HASH_IPV4_ADDRESS(masked_addr);

            tp = length_entry->subnet_addresses[hash_idx];
            while(tp != NULL && tp->addr != masked_addr) {
                tp = tp->next;
            }

            if (NULL != tp) {
                subnet_entry.mask = length_entry->mask;
                subnet_entry.mask_length = i + 1; /* Length is offset + 1 */
                subnet_entry.name = tp->name;
                return subnet_entry;
            }
        }
    }

    subnet_entry.mask = 0;
    subnet_entry.mask_length = 0;
    subnet_entry.name = NULL;

    return subnet_entry;
}

/* Add a subnet-definition - name pair to the set.
 * The definition is taken by masking the address passed in with the mask of the
 * given length.
 */
static void
subnet_entry_set(uint32_t subnet_addr, const uint8_t mask_length, const char* name)
{
    subnet_length_entry_t* entry;
    sub_net_hashipv4_t * tp;
    size_t hash_idx;

    ws_assert(mask_length > 0 && mask_length <= 32);

    entry = &subnet_length_entries[mask_length - 1];

    subnet_addr &= entry->mask;

    hash_idx = HASH_IPV4_ADDRESS(subnet_addr);

    if (NULL == entry->subnet_addresses) {
        entry->subnet_addresses = (sub_net_hashipv4_t**)wmem_alloc0(addr_resolv_scope, sizeof(sub_net_hashipv4_t*) * HASHHOSTSIZE);
    }

    if (NULL != (tp = entry->subnet_addresses[hash_idx])) {
        sub_net_hashipv4_t * new_tp;

        while (tp->next) {
            if (tp->addr == subnet_addr) {
                return; /* XXX provide warning that an address was repeated? */
            } else {
                tp = tp->next;
            }
        }

        new_tp = wmem_new(addr_resolv_scope, sub_net_hashipv4_t);
        tp->next = new_tp;
        tp = new_tp;
    } else {
        tp = entry->subnet_addresses[hash_idx] = wmem_new(addr_resolv_scope, sub_net_hashipv4_t);
    }

    tp->next = NULL;
    tp->addr = subnet_addr;
    (void) g_strlcpy(tp->name, name, MAXNAMELEN); /* This is longer than subnet names can actually be */
    have_subnet_entry = true;
}

static void
subnet_name_lookup_init(void)
{
    char* subnetspath;
    uint32_t i;

    for(i = 0; i < SUBNETLENGTHSIZE; ++i) {
        uint32_t length = i + 1;

        subnet_length_entries[i].subnet_addresses  = NULL;
        subnet_length_entries[i].mask_length  = length;
        subnet_length_entries[i].mask = g_htonl(ws_ipv4_get_subnet_mask(length));
    }

    /* Check profile directory before personal configuration */
    subnetspath = get_persconffile_path(ENAME_SUBNETS, true);
    if (!read_subnets_file(subnetspath)) {
        if (errno != ENOENT) {
            report_open_failure(subnetspath, errno, false);
        }

        g_free(subnetspath);
        subnetspath = get_persconffile_path(ENAME_SUBNETS, false);
        if (!read_subnets_file(subnetspath) && errno != ENOENT) {
            report_open_failure(subnetspath, errno, false);
        }
    }
    g_free(subnetspath);

    /*
     * Load the global subnets file, if we have one.
     */
    subnetspath = get_datafile_path(ENAME_SUBNETS);
    if (!read_subnets_file(subnetspath) && errno != ENOENT) {
        report_open_failure(subnetspath, errno, false);
    }
    g_free(subnetspath);
}

/* SS7 PC Name Resolution Portion */
static hashss7pc_t *
new_ss7pc(const uint8_t ni, const uint32_t pc)
{
    hashss7pc_t *tp = wmem_new(addr_resolv_scope, hashss7pc_t);
    tp->id = (ni<<24) + (pc&0xffffff);
    tp->pc_addr[0] = '\0';
    tp->name[0] = '\0';

    return tp;
}

static hashss7pc_t *
host_lookup_ss7pc(const uint8_t ni, const uint32_t pc)
{
    hashss7pc_t * volatile tp;
    uint32_t id;

    id = (ni<<24) + (pc&0xffffff);

    tp = (hashss7pc_t *)wmem_map_lookup(ss7pc_hash_table, GUINT_TO_POINTER(id));
    if (tp == NULL) {
        tp = new_ss7pc(ni, pc);
        wmem_map_insert(ss7pc_hash_table, GUINT_TO_POINTER(id), tp);
    }

    return tp;
}

void fill_unresolved_ss7pc(const char * pc_addr, const uint8_t ni, const uint32_t pc)
{
    hashss7pc_t *tp = host_lookup_ss7pc(ni, pc);

    (void) g_strlcpy(tp->pc_addr, pc_addr, MAXNAMELEN);
}

const char *
get_hostname_ss7pc(const uint8_t ni, const uint32_t pc)
{
    hashss7pc_t *tp = host_lookup_ss7pc(ni, pc);

    /* never resolved yet*/
    if (tp->pc_addr[0] == '\0')
        return tp->pc_addr;

    /* Don't have name in file */
    if (tp->name[0] == '\0')
        return tp->pc_addr;

    if (!gbl_resolv_flags.ss7pc_name)
        return tp->pc_addr;

    return tp->name;
}

static void
add_ss7pc_name(const uint8_t ni, uint32_t pc, const char *name)
{
    hashss7pc_t *tp;
    uint32_t id;

    if (!name || name[0] == '\0')
        return;

    id = (ni<<24) + (pc&0xffffff);
    tp = (hashss7pc_t *)wmem_map_lookup(ss7pc_hash_table, GUINT_TO_POINTER(id));
    if (!tp) {
        tp = new_ss7pc(ni, pc);
        wmem_map_insert(ss7pc_hash_table, GUINT_TO_POINTER(id), tp);
    }

    if (g_ascii_strcasecmp(tp->name, name)) {
        (void) g_strlcpy(tp->name, name, MAXNAMELEN);
    }
}

static bool
read_ss7pcs_file(const char *ss7pcspath)
{
    FILE *hf;
    char line[MAX_LINELEN];
    char *cp;
    uint8_t ni;
    uint32_t pc;
    bool entry_found = false;

    /*
    *  File format is Network Indicator (decimal)<dash>Point Code (Decimal)<tab/space>Hostname
    */
    if ((hf = ws_fopen(ss7pcspath, "r")) == NULL)
        return false;

    while (fgetline(line, sizeof(line), hf) >= 0) {
        if ((cp = strchr(line, '#')))
            *cp = '\0';

        if ((cp = strtok(line, "-")) == NULL)
            continue; /*no ni-pc separator*/
        if (!ws_strtou8(cp, NULL, &ni))
            continue;
        if (ni > 3)
             continue;

        if ((cp = strtok(NULL, " \t")) == NULL)
            continue; /* no tokens for pc and name */
        if (!ws_strtou32(cp, NULL, &pc))
            continue;
        if (pc >> 24 > 0)
            continue;

        if ((cp = strtok(NULL, " \t")) == NULL)
            continue; /* no host name */

        entry_found = true;
        add_ss7pc_name(ni, pc, cp);
    }

    fclose(hf);
    return entry_found ? true : false;
}

static void
ss7pc_name_lookup_init(void)
{
    char *ss7pcspath;

    ws_assert(ss7pc_hash_table == NULL);

    ss7pc_hash_table = wmem_map_new(addr_resolv_scope, g_direct_hash, g_direct_equal);

    /*
     * Load the user's ss7pcs file
     */
    ss7pcspath = get_persconffile_path(ENAME_SS7PCS, true);
    if (!read_ss7pcs_file(ss7pcspath) && errno != ENOENT) {
        report_open_failure(ss7pcspath, errno, false);
    }
    g_free(ss7pcspath);
}

/* SS7PC Name Resolution End*/


/*
 *  External Functions
 */

void
addr_resolve_pref_init(module_t *nameres)
{
    prefs_register_bool_preference(nameres, "mac_name",
            "Resolve MAC addresses",
            "Resolve Ethernet MAC addresses to host names from the preferences"
            " or system's Ethers file, or to a manufacturer based name.",
            &gbl_resolv_flags.mac_name);

    prefs_register_bool_preference(nameres, "transport_name",
            "Resolve transport names",
            "Resolve TCP/UDP ports into service names",
            &gbl_resolv_flags.transport_name);

    prefs_register_bool_preference(nameres, "network_name",
            "Resolve network (IP) addresses",
            "Resolve IPv4, IPv6, and IPX addresses into host names."
            " The next set of check boxes determines how name resolution should be performed."
            " If no other options are checked name resolution is made from Wireshark's host file"
            " and capture file name resolution blocks.",
            &gbl_resolv_flags.network_name);

    prefs_register_bool_preference(nameres, "dns_pkt_addr_resolution",
            "Use captured DNS packet data for name resolution",
            "Use address/name pairs found in captured DNS packets for name resolution.",
            &gbl_resolv_flags.dns_pkt_addr_resolution);

    prefs_register_bool_preference(nameres, "handshake_sni_addr_resolution",
            "Use SNI information from captured handshake packets",
            "Use the Server Name Indication found in TLS handshakes for name resolution.",
            &gbl_resolv_flags.handshake_sni_addr_resolution);

    prefs_register_bool_preference(nameres, "use_external_name_resolver",
            "Use your system's DNS settings for name resolution",
            "Use your system's configured name resolver"
            " (usually DNS) to resolve network names."
            " Only applies when network name resolution"
            " is enabled.",
            &gbl_resolv_flags.use_external_net_name_resolver);

    prefs_register_bool_preference(nameres, "use_custom_dns_servers",
            "Use a custom list of DNS servers for name resolution",
            "Use a DNS Servers list to resolve network names if true.  If false, default information is used",
            &use_custom_dns_server_list);

    static uat_field_t dns_server_uats_flds[] = {
        UAT_FLD_CSTRING_OTHER(dnsserverlist_uats, ipaddr, "IP address", dnsserver_uat_fld_ip_chk_cb, "IPv4 or IPv6 address"),
        UAT_FLD_CSTRING_OTHER(dnsserverlist_uats, tcp_port, "TCP Port", dnsserver_uat_fld_port_chk_cb, "Port Number (TCP)"),
        UAT_FLD_CSTRING_OTHER(dnsserverlist_uats, udp_port, "UDP Port", dnsserver_uat_fld_port_chk_cb, "Port Number (UDP)"),
        UAT_END_FIELDS
    };

    dnsserver_uat = uat_new("DNS Servers",
        sizeof(struct dns_server_data),
        "addr_resolve_dns_servers",        /* filename */
        true,                       /* from_profile */
        &dnsserverlist_uats,        /* data_ptr */
        &ndnsservers,               /* numitems_ptr */
        UAT_AFFECTS_DISSECTION,
        NULL,
        dns_server_copy_cb,
        NULL,
        dns_server_free_cb,
        c_ares_set_dns_servers,
        NULL,
        dns_server_uats_flds);
    static const char *dnsserver_uat_defaults[] = { NULL, "53", "53" };
    uat_set_default_values(dnsserver_uat, dnsserver_uat_defaults);
    prefs_register_uat_preference(nameres, "dns_servers",
        "DNS Servers",
        "A table of IPv4 and IPv6 addresses of DNS servers to be used to resolve IP names and addresses",
        dnsserver_uat);

    prefs_register_obsolete_preference(nameres, "concurrent_dns");

    prefs_register_uint_preference(nameres, "name_resolve_concurrency",
            "Maximum concurrent requests",
            "The maximum number of DNS requests that may"
            " be active at any time. A large value (many"
            " thousands) might overload the network or make"
            " your DNS server behave badly.",
            10,
            &name_resolve_concurrency);

    prefs_register_obsolete_preference(nameres, "hosts_file_handling");

    prefs_register_bool_preference(nameres, "vlan_name",
            "Resolve VLAN IDs",
            "Resolve VLAN IDs to network names from the preferences \"vlans\" file."
            " Format of the file is: \"ID<Tab>Name\"."
            " One line per VLAN, e.g.: 1 Management",
            &gbl_resolv_flags.vlan_name);

    prefs_register_bool_preference(nameres, "ss7_pc_name",
            "Resolve SS7 PCs",
            "Resolve SS7 Point Codes to node names from the profiles \"ss7pcs\" file."
            " Format of the file is: \"Network_Indicator<Dash>PC_Decimal<Tab>Name\"."
            " One line per Point Code, e.g.: 2-1234 MyPointCode1",
            &gbl_resolv_flags.ss7pc_name);

}

void addr_resolve_pref_apply(void)
{
    c_ares_set_dns_servers();
    maxmind_db_pref_apply();
}

void
disable_name_resolution(void) {
    gbl_resolv_flags.mac_name                           = false;
    gbl_resolv_flags.network_name                       = false;
    gbl_resolv_flags.transport_name                     = false;
    gbl_resolv_flags.dns_pkt_addr_resolution            = false;
    gbl_resolv_flags.handshake_sni_addr_resolution      = false;
    gbl_resolv_flags.use_external_net_name_resolver     = false;
    gbl_resolv_flags.vlan_name                          = false;
    gbl_resolv_flags.ss7pc_name                         = false;
    gbl_resolv_flags.maxmind_geoip                      = false;
}

bool
host_name_lookup_process(void) {
    struct timeval tv = { 0, 0 };
    int nfds;
    fd_set rfds, wfds;
    bool nro = new_resolved_objects;

    new_resolved_objects = false;
    nro |= maxmind_db_lookup_process();

    if (!async_dns_initialized)
        /* c-ares not initialized. Bail out and cancel timers. */
        return nro;

    process_async_dns_queue();

    FD_ZERO(&rfds);
    FD_ZERO(&wfds);
    nfds = ares_fds(ghba_chan, &rfds, &wfds);
    if (nfds > 0) {
        if (select(nfds, &rfds, &wfds, NULL, &tv) == -1) { /* call to select() failed */
            /* If it's interrupted by a signal, no need to put out a message */
            if (errno != EINTR)
                fprintf(stderr, "Warning: call to select() failed, error is %s\n", g_strerror(errno));
            return nro;
        }
        ares_process(ghba_chan, &rfds, &wfds);
    }

    /* Any new entries? */
    return nro;
}

static void
_host_name_lookup_cleanup(void) {
    async_dns_queue_head = NULL;

    if (async_dns_initialized) {
        ares_destroy(ghba_chan);
        ares_destroy(ghbn_chan);
    }
#ifdef CARES_HAVE_ARES_LIBRARY_INIT
    ares_library_cleanup();
#endif
    async_dns_initialized = false;
}

const char *
get_hostname(const unsigned addr)
{
    /* XXX why do we call this if we're not resolving? To create hash entries?
     * Why? So that we can return a const char*?
     *
     * Note the returned string is in addr_resolv_scope, which has a similar
     * life to the global file scope (slightly larger, in that the resolved
     * addresses need to be available during dissector registration, e.g.
     * for RADIUS and enterprises), so if not copied it is possible to use
     * it after freeing.
     *
     * Should this be deprecated in favor of get_hostname_wmem so that
     * host name lookups don't increase persistent memory usage even when
     * hostname lookups are disabled? (An alternative would be to return
     * NULL when lookups are disabled, but callers don't expect that.)
     */
    hashipv4_t *tp = host_lookup(addr);

    if (!gbl_resolv_flags.network_name)
        return tp->ip;

    tp->flags |= RESOLVED_ADDRESS_USED;

    return tp->name;
}

char *
get_hostname_wmem(wmem_allocator_t *allocator, const unsigned addr)
{
    if (!gbl_resolv_flags.network_name)
        return ip_addr_to_str(allocator, &addr);

    hashipv4_t *tp = host_lookup(addr);

    tp->flags |= RESOLVED_ADDRESS_USED;

    return wmem_strdup(allocator, tp->name);
}
/* -------------------------- */

const char *
get_hostname6(const ws_in6_addr *addr)
{
    /* XXX why do we call this if we're not resolving? To create hash entries?
     * Why? The same comments as get_hostname above apply.
     */
    hashipv6_t *tp = host_lookup6(addr);

    if (!gbl_resolv_flags.network_name)
        return tp->ip6;

    tp->flags |= RESOLVED_ADDRESS_USED;

    return tp->name;
}

char *
get_hostname6_wmem(wmem_allocator_t *allocator, const ws_in6_addr *addr)
{
    if (!gbl_resolv_flags.network_name)
        return ip6_to_str(allocator, addr);

    hashipv6_t *tp = host_lookup6(addr);

    tp->flags |= RESOLVED_ADDRESS_USED;

    return wmem_strdup(allocator, tp->name);
}
/* -------------------------- */
void
add_ipv4_name(const unsigned addr, const char *name, bool static_entry)
{
    hashipv4_t *tp;

    /*
     * Don't add zero-length names; apparently, some resolvers will return
     * them if they get them from DNS.
     */
    if (!name || name[0] == '\0')
        return;

    tp = (hashipv4_t *)wmem_map_lookup(ipv4_hash_table, GUINT_TO_POINTER(addr));
    if (!tp) {
        tp = new_ipv4(addr);
        wmem_map_insert(ipv4_hash_table, GUINT_TO_POINTER(addr), tp);
    }

    if (g_ascii_strcasecmp(tp->name, name) && (static_entry || !(tp->flags & STATIC_HOSTNAME))) {
        (void) g_strlcpy(tp->name, name, MAXDNSNAMELEN);
        new_resolved_objects = true;
        if (static_entry)
            tp->flags |= STATIC_HOSTNAME;
    }
    tp->flags |= TRIED_RESOLVE_ADDRESS|NAME_RESOLVED;
} /* add_ipv4_name */

/* -------------------------- */
void
add_ipv6_name(const ws_in6_addr *addrp, const char *name, const bool static_entry)
{
    hashipv6_t *tp;

    /*
     * Don't add zero-length names; apparently, some resolvers will return
     * them if they get them from DNS.
     */
    if (!name || name[0] == '\0')
        return;

    tp = (hashipv6_t *)wmem_map_lookup(ipv6_hash_table, addrp);
    if (!tp) {
        ws_in6_addr *addr_key;

        addr_key = wmem_new(addr_resolv_scope, ws_in6_addr);
        tp = new_ipv6(addrp);
        memcpy(addr_key, addrp, 16);
        wmem_map_insert(ipv6_hash_table, addr_key, tp);
    }

    if (g_ascii_strcasecmp(tp->name, name) && (static_entry || !(tp->flags & STATIC_HOSTNAME))) {
        (void) g_strlcpy(tp->name, name, MAXDNSNAMELEN);
        new_resolved_objects = true;
        if (static_entry)
            tp->flags |= STATIC_HOSTNAME;
    }
    tp->flags |= TRIED_RESOLVE_ADDRESS|NAME_RESOLVED;
} /* add_ipv6_name */

static void
add_manually_resolved_ipv4(void *key, void *value, void *user_data _U_)
{
    resolved_name_t *resolved_ipv4_entry = (resolved_name_t*)value;
    add_ipv4_name(GPOINTER_TO_UINT(key), resolved_ipv4_entry->name, true);
}

static void
add_manually_resolved_ipv6(void *key, void *value, void *user_data _U_)
{
    resolved_name_t *resolved_ipv6_entry = (resolved_name_t*)value;
    add_ipv6_name((ws_in6_addr*)key, resolved_ipv6_entry->name, true);
}

static void
add_manually_resolved(void)
{
    if (manually_resolved_ipv4_list) {
        wmem_map_foreach(manually_resolved_ipv4_list, add_manually_resolved_ipv4, NULL);
    }

    if (manually_resolved_ipv6_list) {
        wmem_map_foreach(manually_resolved_ipv6_list, add_manually_resolved_ipv6, NULL);
    }
}

static void
host_name_lookup_init(void)
{
    char *hostspath;
    unsigned i;

    ws_assert(ipxnet_hash_table == NULL);
    ipxnet_hash_table = wmem_map_new(addr_resolv_scope, g_direct_hash, g_direct_equal);

    ws_assert(ipv4_hash_table == NULL);
    ipv4_hash_table = wmem_map_new(addr_resolv_scope, g_direct_hash, g_direct_equal);

    ws_assert(ipv6_hash_table == NULL);
    ipv6_hash_table = wmem_map_new(addr_resolv_scope, ipv6_oat_hash, ipv6_equal);

    ws_assert(async_dns_queue_head == NULL);
    async_dns_queue_head = wmem_list_new(addr_resolv_scope);

    /*
     * The manually resolved lists are the only address resolution maps
     * that are not reset by addr_resolv_cleanup(), because they are
     * the only ones that do not have entries from personal configuration
     * files that can change when changing configurations. All their
     * entries must also be in epan scope.
     */
    if (manually_resolved_ipv4_list == NULL)
        manually_resolved_ipv4_list = wmem_map_new(wmem_epan_scope(), g_direct_hash, g_direct_equal);

    if (manually_resolved_ipv6_list == NULL)
        manually_resolved_ipv6_list = wmem_map_new(wmem_epan_scope(), ipv6_oat_hash, ipv6_equal);

    /*
     * Load the global hosts file, if we have one.
     */
    hostspath = get_datafile_path(ENAME_HOSTS);
    if (!read_hosts_file(hostspath, true) && errno != ENOENT) {
        report_open_failure(hostspath, errno, false);
    }
    g_free(hostspath);
    /*
     * Load the user's hosts file no matter what, if they have one.
     */
    hostspath = get_persconffile_path(ENAME_HOSTS, true);
    if (!read_hosts_file(hostspath, true) && errno != ENOENT) {
        report_open_failure(hostspath, errno, false);
    }
    g_free(hostspath);
#ifdef CARES_HAVE_ARES_LIBRARY_INIT
    if (ares_library_init(ARES_LIB_INIT_ALL) == ARES_SUCCESS) {
#endif
        /* XXX - Check which options we should set */
        if (ares_init_options(&ghba_chan, NULL, 0) == ARES_SUCCESS && ares_init_options(&ghbn_chan, NULL, 0) == ARES_SUCCESS) {
            async_dns_initialized = true;
            c_ares_set_dns_servers();
        }
#ifdef CARES_HAVE_ARES_LIBRARY_INIT
    }
#endif

    if (extra_hosts_files) {
        for (i = 0; i < extra_hosts_files->len; i++) {
            read_hosts_file((const char *) g_ptr_array_index(extra_hosts_files, i), true);
        }
    }

    subnet_name_lookup_init();

    add_manually_resolved();

    ss7pc_name_lookup_init();
}

static void
host_name_lookup_cleanup(void)
{
    uint32_t i, j;
    sub_net_hashipv4_t *entry, *next_entry;

    _host_name_lookup_cleanup();

    ipxnet_hash_table = NULL;
    ipv4_hash_table = NULL;
    ipv6_hash_table = NULL;
    ss7pc_hash_table = NULL;

    for(i = 0; i < SUBNETLENGTHSIZE; ++i) {
        if (subnet_length_entries[i].subnet_addresses != NULL) {
            for (j = 0; j < HASHHOSTSIZE; j++) {
                for (entry = subnet_length_entries[i].subnet_addresses[j];
                     entry != NULL; entry = next_entry) {
                    next_entry = entry->next;
                    wmem_free(addr_resolv_scope, entry);
                }
            }
            wmem_free(addr_resolv_scope, subnet_length_entries[i].subnet_addresses);
            subnet_length_entries[i].subnet_addresses = NULL;
        }
    }

    have_subnet_entry = false;
    new_resolved_objects = false;
}


void host_name_lookup_reset(void)
{
    addr_resolv_cleanup();
    addr_resolv_init();
}

char *
udp_port_to_display(wmem_allocator_t *allocator, unsigned port)
{

    if (!gbl_resolv_flags.transport_name) {
        return wmem_utoa(allocator, port);
    }

    return wmem_strdup(allocator, serv_name_lookup(PT_UDP, port));

} /* udp_port_to_display */

char *
dccp_port_to_display(wmem_allocator_t *allocator, unsigned port)
{

    if (!gbl_resolv_flags.transport_name) {
        return wmem_utoa(allocator, port);
    }

    return wmem_strdup(allocator, serv_name_lookup(PT_DCCP, port));

} /* dccp_port_to_display */

char *
tcp_port_to_display(wmem_allocator_t *allocator, unsigned port)
{

    if (!gbl_resolv_flags.transport_name) {
        return wmem_utoa(allocator, port);
    }

    return wmem_strdup(allocator, serv_name_lookup(PT_TCP, port));

} /* tcp_port_to_display */

char *
sctp_port_to_display(wmem_allocator_t *allocator, unsigned port)
{

    if (!gbl_resolv_flags.transport_name) {
        return wmem_utoa(allocator, port);
    }

    return wmem_strdup(allocator, serv_name_lookup(PT_SCTP, port));

} /* sctp_port_to_display */

char *
port_with_resolution_to_str(wmem_allocator_t *scope, port_type proto, unsigned port)
{
    const char *port_str;

    if (!gbl_resolv_flags.transport_name || (proto == PT_NONE)) {
        /* No name resolution support, just return port string */
        return wmem_strdup_printf(scope, "%u", port);
    }
    port_str = serv_name_lookup(proto, port);
    ws_assert(port_str);
    return wmem_strdup_printf(scope, "%s (%u)", port_str, port);
}

int
port_with_resolution_to_str_buf(char *buf, unsigned long buf_size, port_type proto, unsigned port)
{
    const char *port_str;

    if (!gbl_resolv_flags.transport_name || (proto == PT_NONE)) {
        /* No name resolution support, just return port string */
        return snprintf(buf, buf_size, "%u", port);
    }
    port_str = serv_name_lookup(proto, port);
    ws_assert(port_str);
    return snprintf(buf, buf_size, "%s (%u)", port_str, port);
}

const char *
get_ether_name(const uint8_t *addr)
{
    hashether_t *tp;
    bool resolve = gbl_resolv_flags.mac_name;

    tp = eth_name_lookup(addr, resolve);

    return resolve ? tp->resolved_name : tp->hexaddr;

} /* get_ether_name */

const char *
tvb_get_ether_name(tvbuff_t *tvb, int offset)
{
    return get_ether_name(tvb_get_ptr(tvb, offset, 6));
}

/* Look for a (non-dummy) ether name in the hash, and return it if found.
 * If it's not found, simply return NULL.
 */
const char *
get_ether_name_if_known(const uint8_t *addr)
{
    hashether_t *tp;

    /* Initialize ether structs if we're the first
     * ether-related function called */
    if (!gbl_resolv_flags.mac_name)
        return NULL;

    /* eth_name_lookup will create a (resolved) hash entry
     * if it doesn't exist, so it never returns NULL */
    tp = eth_name_lookup(addr, true);

    if ((tp->flags & (NAME_RESOLVED | NAME_RESOLVED_PREFIX)) == NAME_RESOLVED) {
        /* Name is from an exact match, not a prefix/OUI */
        return tp->resolved_name;
    }
    else {
        /* Name was created */
        return NULL;
    }
}

void
add_ether_byip(const unsigned ip, const uint8_t *eth)
{
    hashipv4_t *tp;

    /* first check that IP address can be resolved */
    if (!gbl_resolv_flags.network_name)
        return;

    tp = host_lookup(ip);

    /*
     * Was this IP address resolved to a host name?
     */
    if (tp->flags & NAME_RESOLVED) {
        /*
         * Yes, so add an entry in the ethers hashtable resolving
         * the MAC address to that name.
         */
        add_eth_name(eth, tp->name);
    }

} /* add_ether_byip */

char *
get_ipxnet_name(wmem_allocator_t *allocator, const uint32_t addr)
{

    if (!gbl_resolv_flags.network_name) {
        return ipxnet_to_str_punct(allocator, addr, '\0');
    }

    return ipxnet_name_lookup(allocator, addr);

} /* get_ipxnet_name */

char *
get_vlan_name(wmem_allocator_t *allocator, const uint16_t id)
{

    if (!gbl_resolv_flags.vlan_name) {
        return NULL;
    }

    return wmem_strdup(allocator, vlan_name_lookup(id));

} /* get_vlan_name */

const char *
get_manuf_name(const uint8_t *addr, size_t size)
{
    hashmanuf_t *manuf_value;

    ws_return_val_if(size < 3, NULL);

    manuf_value = manuf_name_lookup(addr, size);
    if (gbl_resolv_flags.mac_name && ((manuf_value->flags & NAME_RESOLVED) == NAME_RESOLVED))
        return manuf_value->resolved_name;

    return manuf_value->hexaddr;

} /* get_manuf_name */

const char *
tvb_get_manuf_name(tvbuff_t *tvb, int offset)
{
    uint8_t buf[3] = { 0 };
    tvb_memcpy(tvb, buf, offset, 3);
    return get_manuf_name(buf, sizeof(buf));
}

const char *
get_manuf_name_if_known(const uint8_t *addr, size_t size)
{
    hashmanuf_t *manuf_value;

    ws_return_val_if(size < 3, NULL);

    manuf_value = manuf_name_lookup(addr, size);
    if (manuf_value != NULL && ((manuf_value->flags & NAME_RESOLVED) == NAME_RESOLVED)) {
        return manuf_value->resolved_longname;
    }

    if (size >= 6) {
        /* Try the global manuf tables. */
        const char *short_name, *long_name;
        short_name = ws_manuf_lookup_str(addr, &long_name);
        if (short_name != NULL) {
            /* Found it */
            return long_name;
        }
    }

    return NULL;

} /* get_manuf_name_if_known */

const char *
uint_get_manuf_name_if_known(const uint32_t manuf_key)
{
    uint8_t addr[6] = { 0 };
    addr[0] = (manuf_key >> 16) & 0xFF;
    addr[1] = (manuf_key >> 8) & 0xFF;
    addr[2] = manuf_key & 0xFF;

    return get_manuf_name_if_known(addr, sizeof(addr));
}

const char *
tvb_get_manuf_name_if_known(tvbuff_t *tvb, int offset)
{
    uint8_t buf[3] = { 0 };
    tvb_memcpy(tvb, buf, offset, 3);
    return get_manuf_name_if_known(buf, sizeof(buf));
}

bool get_hash_manuf_used(hashmanuf_t* manuf)
{
    return ((manuf->flags & TRIED_OR_RESOLVED_MASK) == TRIED_OR_RESOLVED_MASK);
}

char* get_hash_manuf_resolved_name(hashmanuf_t* manuf)
{
    return manuf->resolved_longname;
}

char *
eui64_to_display(wmem_allocator_t *allocator, const uint64_t addr_eui64)
{
    uint8_t *addr = (uint8_t *)wmem_alloc(NULL, 8);
    hashmanuf_t *manuf_value;
    char *ret;

    /* Copy and convert the address to network byte order. */
    *(uint64_t *)(void *)(addr) = pntoh64(&(addr_eui64));

    /* manuf_name_lookup returns a hashmanuf_t* that covers an entire /24,
     * so we can't properly use it for MA-M and MA-S. We do want to check
     * it first so it also covers the user-defined tables.
     */
    manuf_value = manuf_name_lookup(addr, 8);
    if (!gbl_resolv_flags.mac_name || !manuf_value || ((manuf_value->flags & NAME_RESOLVED) == 0)) {
        /* Now try looking in the global manuf data for a MA-M or MA-S match.
         */
        const char *short_name, *long_name;
        unsigned mask;
        short_name = ws_manuf_lookup(addr, &long_name, &mask);
        if (short_name != NULL) {
            switch (mask) {
                case 24:
                    /* This shouldn't happen as it should be handled above. */
                    manuf_hash_new_entry(addr, short_name, long_name);
                    ret = wmem_strdup_printf(allocator, "%s_%02x:%02x:%02x:%02x:%02x", short_name, addr[3], addr[4], addr[5], addr[6], addr[7]);
                    break;
                case 28:
                    ret = wmem_strdup_printf(allocator, "%s_%01x:%02x:%02x:%02x:%02x", short_name, addr[3] & 0x0F, addr[4], addr[5], addr[6], addr[7]);
                    break;
                case 36:
                    ret = wmem_strdup_printf(allocator, "%s_%01x:%02x:%02x:%02x", short_name, addr[4] & 0x0F, addr[5], addr[6], addr[7]);
                    break;
                default:
                    /* Doesn't happen, ignore for now. */
                    ret = wmem_strdup_printf(allocator, "%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x", addr[0], addr[1], addr[2], addr[3], addr[4], addr[5], addr[6], addr[7]);
                    break;
            }
        } else {
            ret = wmem_strdup_printf(allocator, "%02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x", addr[0], addr[1], addr[2], addr[3], addr[4], addr[5], addr[6], addr[7]);
        }
    } else {
        ret = wmem_strdup_printf(allocator, "%s_%02x:%02x:%02x:%02x:%02x", manuf_value->resolved_name, addr[3], addr[4], addr[5], addr[6], addr[7]);
    }

    wmem_free(NULL, addr);
    return ret;
} /* eui64_to_display */

#define GHI_TIMEOUT (250 * 1000)
static void
c_ares_ghi_cb(void *arg, int status, int timeouts _U_, struct hostent *hp) {
    /*
     * XXX - If we wanted to be really fancy we could cache results here and
     * look them up in get_host_ipaddr* below.
     *
     * XXX - This only gets the first host address if there's more than one.
     */
    async_hostent_t *ahp = (async_hostent_t *)arg;
    if (status == ARES_SUCCESS && hp && ahp && hp->h_length == ahp->addr_size) {
        memcpy(ahp->addrp, hp->h_addr, hp->h_length);
        ahp->copied = hp->h_length;
    }
}

/* Translate a string, assumed either to be a dotted-quad IPv4 address or
 * a host name, to a numeric IPv4 address.  Return true if we succeed and
 * set "*addrp" to that numeric IPv4 address; return false if we fail. */
bool
get_host_ipaddr(const char *host, uint32_t *addrp)
{
    struct timeval tv = { 0, GHI_TIMEOUT }, *tvp;
    int nfds;
    fd_set rfds, wfds;
    async_hostent_t ahe;

    /*
     * XXX - are there places where this is used to translate something
     * that's *only* supposed to be an IPv4 address, and where it
     * *shouldn't* translate host names?
     */
    if (!ws_inet_pton4(host, addrp)) {

        /* It's not a valid dotted-quad IP address; is it a valid
         * host name?
         */

        /* If we're not allowed to do name resolution, don't do name
         * resolution...
         * XXX - What if we're allowed to do name resolution, and the name
         * is in a DNS packet we've dissected or in a Name Resolution Block,
         * or a user-entered manual name resolution?
         */
        if (!gbl_resolv_flags.network_name ||
                !gbl_resolv_flags.use_external_net_name_resolver) {
            return false;
        }

        if (!async_dns_initialized || name_resolve_concurrency < 1) {
            return false;
        }
        ahe.addr_size = (int) sizeof (struct in_addr);
        ahe.copied = 0;
        ahe.addrp = addrp;
        ares_gethostbyname(ghbn_chan, host, AF_INET, c_ares_ghi_cb, &ahe);
        FD_ZERO(&rfds);
        FD_ZERO(&wfds);
        nfds = ares_fds(ghbn_chan, &rfds, &wfds);
        if (nfds > 0) {
            tvp = ares_timeout(ghbn_chan, &tv, &tv);
            if (select(nfds, &rfds, &wfds, NULL, tvp) == -1) { /* call to select() failed */
                /* If it's interrupted by a signal, no need to put out a message */
                if (errno != EINTR)
                    fprintf(stderr, "Warning: call to select() failed, error is %s\n", g_strerror(errno));
                return false;
            }
            ares_process(ghbn_chan, &rfds, &wfds);
        }
        ares_cancel(ghbn_chan);
        if (ahe.addr_size == ahe.copied) {
            return true;
        }
        return false;
    }

    return true;
}

/*
 * Translate IPv6 numeric address or FQDN hostname into binary IPv6 address.
 * Return true if we succeed and set "*addrp" to that numeric IPv6 address;
 * return false if we fail.
 */
bool
get_host_ipaddr6(const char *host, ws_in6_addr *addrp)
{
    struct timeval tv = { 0, GHI_TIMEOUT }, *tvp;
    int nfds;
    fd_set rfds, wfds;
    async_hostent_t ahe;

    if (str_to_ip6(host, addrp))
        return true;

    /* It's not a valid dotted-quad IP address; is it a valid
     * host name?
     *
     * XXX - are there places where this is used to translate something
     * that's *only* supposed to be an IPv6 address, and where it
     * *shouldn't* translate host names?
     */

    /* If we're not allowed to do name resolution, don't do name
     * resolution...
     * XXX - What if we're allowed to do name resolution, and the name
     * is in a DNS packet we've dissected or in a Name Resolution Block,
     * or a user-entered manual name resolution?
     */
    if (!gbl_resolv_flags.network_name ||
            !gbl_resolv_flags.use_external_net_name_resolver) {
        return false;
    }

    /* try FQDN */
    if (!async_dns_initialized || name_resolve_concurrency < 1) {
        return false;
    }
    ahe.addr_size = (int) sizeof (ws_in6_addr);
    ahe.copied = 0;
    ahe.addrp = addrp;
    ares_gethostbyname(ghbn_chan, host, AF_INET6, c_ares_ghi_cb, &ahe);
    FD_ZERO(&rfds);
    FD_ZERO(&wfds);
    nfds = ares_fds(ghbn_chan, &rfds, &wfds);
    if (nfds > 0) {
        tvp = ares_timeout(ghbn_chan, &tv, &tv);
        if (select(nfds, &rfds, &wfds, NULL, tvp) == -1) { /* call to select() failed */
            /* If it's interrupted by a signal, no need to put out a message */
            if (errno != EINTR)
                fprintf(stderr, "Warning: call to select() failed, error is %s\n", g_strerror(errno));
            return false;
        }
        ares_process(ghbn_chan, &rfds, &wfds);
    }
    ares_cancel(ghbn_chan);
    if (ahe.addr_size == ahe.copied) {
        return true;
    }

    return false;
}

wmem_map_t *
get_manuf_hashtable(void)
{
    return manuf_hashtable;
}

wmem_map_t *
get_wka_hashtable(void)
{
    return wka_hashtable;
}

wmem_map_t *
get_eth_hashtable(void)
{
    return eth_hashtable;
}

wmem_map_t *
get_serv_port_hashtable(void)
{
    return serv_port_hashtable;
}

wmem_map_t *
get_ipxnet_hash_table(void)
{
        return ipxnet_hash_table;
}

wmem_map_t *
get_vlan_hash_table(void)
{
        return vlan_hash_table;
}

wmem_map_t *
get_ipv4_hash_table(void)
{
        return ipv4_hash_table;
}

wmem_map_t *
get_ipv6_hash_table(void)
{
        return ipv6_hash_table;
}
/* Initialize all the address resolution subsystems in this file */
void
addr_resolv_init(void)
{
    ws_assert(addr_resolv_scope == NULL);
    addr_resolv_scope = wmem_allocator_new(WMEM_ALLOCATOR_BLOCK);
    initialize_services();
    initialize_ethers();
    initialize_ipxnets();
    initialize_vlans();
    initialize_enterprises();
    host_name_lookup_init();
}

/* Clean up all the address resolution subsystems in this file */
void
addr_resolv_cleanup(void)
{
    vlan_name_lookup_cleanup();
    service_name_lookup_cleanup();
    ethers_cleanup();
    ipx_name_lookup_cleanup();
    enterprises_cleanup();
    host_name_lookup_cleanup();

    wmem_destroy_allocator(addr_resolv_scope);
    addr_resolv_scope = NULL;
}

bool
str_to_ip(const char *str, void *dst)
{
    return ws_inet_pton4(str, (uint32_t *)dst);
}

bool
str_to_ip6(const char *str, void *dst)
{
    return ws_inet_pton6(str, (ws_in6_addr *)dst);
}

/*
 * convert a 0-terminated string that contains an ethernet address into
 * the corresponding sequence of 6 bytes
 * eth_bytes is a buffer >= 6 bytes that was allocated by the caller
 */
bool
str_to_eth(const char *str, char *eth_bytes)
{
    ether_t eth;

    if (!parse_ether_address(str, &eth, NULL, false))
        return false;

    memcpy(eth_bytes, eth.addr, sizeof(eth.addr));
    return true;
}

/*
 * Editor modelines  -  https://www.wireshark.org/tools/modelines.html
 *
 * Local variables:
 * c-basic-offset: 4
 * tab-width: 8
 * indent-tabs-mode: nil
 * End:
 *
 * vi: set shiftwidth=4 tabstop=8 expandtab:
 * :indentSize=4:tabSize=8:noTabs=true:
 */