/* * This module implements decoding of OpenFlow protocol version 1.0 (wire * protocol 0x01). The decoder implements terse (default), detailed (-v) and * full (-vv) output formats and, as much as each format implies, detects and * tries to work around sizing anomalies inside the messages. The decoder marks * up bogus values of selected message fields and decodes partially captured * messages up to the snapshot end. It is based on the specification below: * * [OF10] https://www.opennetworking.org/wp-content/uploads/2013/04/openflow-spec-v1.0.0.pdf * * Most functions in this file take the following arguments: * * cp -- the pointer to the first octet to decode * * len -- the declared length of the structure to decode * The convention is that a printer function returns iff the given structure is * completely within the packet buffer; otherwise it processes the part that is * within the buffer, sooner of later takes the "truncated packet" shortcut via * longjmp() and never returns. With that in mind, the function may return * without printing the structure completely if it is invalid or the ndo_vflag * value is not high enough. This way the calling function can try to decode * the next data item. * * Decoding of Ethernet frames nested in OFPT_PACKET_IN and OFPT_PACKET_OUT * messages is done only when the verbosity level set by command-line argument * is "-vvv" or higher. In that case the verbosity level is temporarily * decremented by 3 during the nested frame decoding. For example, running * tcpdump with "-vvvv" will do full decoding of OpenFlow and "-v" decoding of * the nested frames. * * Partial decoding of Big Switch Networks vendor extensions is done after the * oftest (OpenFlow Testing Framework) and Loxigen (library generator) source * code. * * * Copyright (c) 2013 The TCPDUMP project * All rights reserved. * * Redistribution and use in source and binary forms, with or without * modification, are permitted provided that the following conditions * are met: * 1. Redistributions of source code must retain the above copyright * notice, this list of conditions and the following disclaimer. * 2. Redistributions in binary form must reproduce the above copyright * notice, this list of conditions and the following disclaimer in the * documentation and/or other materials provided with the distribution. * * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS * "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT * LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS * FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE * COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER * CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN * ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE * POSSIBILITY OF SUCH DAMAGE. */ /* \summary: OpenFlow protocol version 1.0 printer */ #ifdef HAVE_CONFIG_H #include #endif #include "netdissect-stdinc.h" #define ND_LONGJMP_FROM_TCHECK #include "netdissect.h" #include "extract.h" #include "addrtoname.h" #include "ethertype.h" #include "ipproto.h" #include "oui.h" #include "openflow.h" #define OFPT_HELLO 0x00 #define OFPT_ERROR 0x01 #define OFPT_ECHO_REQUEST 0x02 #define OFPT_ECHO_REPLY 0x03 #define OFPT_VENDOR 0x04 #define OFPT_FEATURES_REQUEST 0x05 #define OFPT_FEATURES_REPLY 0x06 #define OFPT_GET_CONFIG_REQUEST 0x07 #define OFPT_GET_CONFIG_REPLY 0x08 #define OFPT_SET_CONFIG 0x09 #define OFPT_PACKET_IN 0x0a #define OFPT_FLOW_REMOVED 0x0b #define OFPT_PORT_STATUS 0x0c #define OFPT_PACKET_OUT 0x0d #define OFPT_FLOW_MOD 0x0e #define OFPT_PORT_MOD 0x0f #define OFPT_STATS_REQUEST 0x10 #define OFPT_STATS_REPLY 0x11 #define OFPT_BARRIER_REQUEST 0x12 #define OFPT_BARRIER_REPLY 0x13 #define OFPT_QUEUE_GET_CONFIG_REQUEST 0x14 #define OFPT_QUEUE_GET_CONFIG_REPLY 0x15 #define OFPT_MAX OFPT_QUEUE_GET_CONFIG_REPLY #define OFPPC_PORT_DOWN (1U <<0) #define OFPPC_NO_STP (1U <<1) #define OFPPC_NO_RECV (1U <<2) #define OFPPC_NO_RECV_STP (1U <<3) #define OFPPC_NO_FLOOD (1U <<4) #define OFPPC_NO_FWD (1U <<5) #define OFPPC_NO_PACKET_IN (1U <<6) static const struct tok ofppc_bm[] = { { OFPPC_PORT_DOWN, "PORT_DOWN" }, { OFPPC_NO_STP, "NO_STP" }, { OFPPC_NO_RECV, "NO_RECV" }, { OFPPC_NO_RECV_STP, "NO_RECV_STP" }, { OFPPC_NO_FLOOD, "NO_FLOOD" }, { OFPPC_NO_FWD, "NO_FWD" }, { OFPPC_NO_PACKET_IN, "NO_PACKET_IN" }, { 0, NULL } }; #define OFPPC_U (~(OFPPC_PORT_DOWN | OFPPC_NO_STP | OFPPC_NO_RECV | \ OFPPC_NO_RECV_STP | OFPPC_NO_FLOOD | OFPPC_NO_FWD | \ OFPPC_NO_PACKET_IN)) /* * [OF10] lists all FPPS_ constants in one enum, but they mean a 1-bit bitmap * in the least significant octet and a 2-bit code point in the next octet. * Remember to mix or to separate these two parts as the context requires. */ #define OFPPS_LINK_DOWN (1U << 0) /* bitmap */ #define OFPPS_STP_LISTEN (0U << 8) /* code point */ #define OFPPS_STP_LEARN (1U << 8) /* code point */ #define OFPPS_STP_FORWARD (2U << 8) /* code point */ #define OFPPS_STP_BLOCK (3U << 8) /* code point */ #define OFPPS_STP_MASK (3U << 8) /* code point bitmask */ static const struct tok ofpps_stp_str[] = { { OFPPS_STP_LISTEN, "STP_LISTEN" }, { OFPPS_STP_LEARN, "STP_LEARN" }, { OFPPS_STP_FORWARD, "STP_FORWARD" }, { OFPPS_STP_BLOCK, "STP_BLOCK" }, { 0, NULL } }; #define OFPPS_U (~(OFPPS_LINK_DOWN | OFPPS_STP_LISTEN | OFPPS_STP_LEARN | \ OFPPS_STP_FORWARD | OFPPS_STP_BLOCK)) #define OFPP_MAX 0xff00U #define OFPP_IN_PORT 0xfff8U #define OFPP_TABLE 0xfff9U #define OFPP_NORMAL 0xfffaU #define OFPP_FLOOD 0xfffbU #define OFPP_ALL 0xfffcU #define OFPP_CONTROLLER 0xfffdU #define OFPP_LOCAL 0xfffeU #define OFPP_NONE 0xffffU static const struct tok ofpp_str[] = { { OFPP_MAX, "MAX" }, { OFPP_IN_PORT, "IN_PORT" }, { OFPP_TABLE, "TABLE" }, { OFPP_NORMAL, "NORMAL" }, { OFPP_FLOOD, "FLOOD" }, { OFPP_ALL, "ALL" }, { OFPP_CONTROLLER, "CONTROLLER" }, { OFPP_LOCAL, "LOCAL" }, { OFPP_NONE, "NONE" }, { 0, NULL } }; #define OFPPF_10MB_HD (1U << 0) #define OFPPF_10MB_FD (1U << 1) #define OFPPF_100MB_HD (1U << 2) #define OFPPF_100MB_FD (1U << 3) #define OFPPF_1GB_HD (1U << 4) #define OFPPF_1GB_FD (1U << 5) #define OFPPF_10GB_FD (1U << 6) #define OFPPF_COPPER (1U << 7) #define OFPPF_FIBER (1U << 8) #define OFPPF_AUTONEG (1U << 9) #define OFPPF_PAUSE (1U <<10) #define OFPPF_PAUSE_ASYM (1U <<11) static const struct tok ofppf_bm[] = { { OFPPF_10MB_HD, "10MB_HD" }, { OFPPF_10MB_FD, "10MB_FD" }, { OFPPF_100MB_HD, "100MB_HD" }, { OFPPF_100MB_FD, "100MB_FD" }, { OFPPF_1GB_HD, "1GB_HD" }, { OFPPF_1GB_FD, "1GB_FD" }, { OFPPF_10GB_FD, "10GB_FD" }, { OFPPF_COPPER, "COPPER" }, { OFPPF_FIBER, "FIBER" }, { OFPPF_AUTONEG, "AUTONEG" }, { OFPPF_PAUSE, "PAUSE" }, { OFPPF_PAUSE_ASYM, "PAUSE_ASYM" }, { 0, NULL } }; #define OFPPF_U (~(OFPPF_10MB_HD | OFPPF_10MB_FD | OFPPF_100MB_HD | \ OFPPF_100MB_FD | OFPPF_1GB_HD | OFPPF_1GB_FD | \ OFPPF_10GB_FD | OFPPF_COPPER | OFPPF_FIBER | \ OFPPF_AUTONEG | OFPPF_PAUSE | OFPPF_PAUSE_ASYM)) #define OFPQT_NONE 0x0000 #define OFPQT_MIN_RATE 0x0001 static const struct tok ofpqt_str[] = { { OFPQT_NONE, "NONE" }, { OFPQT_MIN_RATE, "MIN_RATE" }, { 0, NULL } }; #define OFPFW_IN_PORT (1U <<0) #define OFPFW_DL_VLAN (1U <<1) #define OFPFW_DL_SRC (1U <<2) #define OFPFW_DL_DST (1U <<3) #define OFPFW_DL_TYPE (1U <<4) #define OFPFW_NW_PROTO (1U <<5) #define OFPFW_TP_SRC (1U <<6) #define OFPFW_TP_DST (1U <<7) #define OFPFW_NW_SRC_SHIFT 8 #define OFPFW_NW_SRC_BITS 6 #define OFPFW_NW_SRC_MASK (((1U < 0 && vid < 0x0fff) ? "" : " (bogus)"); return buf; } static const char * pcp_str(const uint8_t pcp) { static char buf[sizeof("255 (bogus)")]; snprintf(buf, sizeof(buf), "%u%s", pcp, pcp <= 7 ? "" : " (bogus)"); return buf; } static void of10_bsn_message_print(netdissect_options *ndo, const u_char *cp, u_int len) { uint32_t subtype; ND_PRINT("\n\t"); ND_ICHECK_U(len, <, 4); /* subtype */ subtype = GET_BE_U_4(cp); OF_FWD(4); ND_PRINT(" subtype %s", tok2str(bsn_subtype_str, "unknown (0x%08x)", subtype)); switch (subtype) { case BSN_GET_IP_MASK_REQUEST: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | index | pad | * +---------------+---------------+---------------+---------------+ * | pad | * +---------------+---------------+---------------+---------------+ * */ ND_ICHECK_U(len, !=, 8); /* index */ ND_PRINT(", index %u", GET_U_1(cp)); OF_FWD(1); /* pad */ /* Always the last field, check bounds. */ ND_TCHECK_7(cp); break; case BSN_SET_IP_MASK: case BSN_GET_IP_MASK_REPLY: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | index | pad | * +---------------+---------------+---------------+---------------+ * | mask | * +---------------+---------------+---------------+---------------+ * */ ND_ICHECK_U(len, !=, 8); /* index */ ND_PRINT(", index %u", GET_U_1(cp)); OF_FWD(1); /* pad */ OF_FWD(3); /* mask */ ND_PRINT(", mask %s", GET_IPADDR_STRING(cp)); break; case BSN_SET_MIRRORING: case BSN_GET_MIRRORING_REQUEST: case BSN_GET_MIRRORING_REPLY: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | report m. p. | pad | * +---------------+---------------+---------------+---------------+ * */ ND_ICHECK_U(len, !=, 4); /* report_mirror_ports */ ND_PRINT(", report_mirror_ports %s", tok2str(bsn_onoff_str, "bogus (%u)", GET_U_1(cp))); OF_FWD(1); /* pad */ /* Always the last field, check bounds. */ ND_TCHECK_3(cp); break; case BSN_GET_INTERFACES_REQUEST: case BSN_GET_L2_TABLE_REQUEST: case BSN_BW_ENABLE_GET_REQUEST: case BSN_BW_CLEAR_DATA_REQUEST: case BSN_HYBRID_GET_REQUEST: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * */ ND_ICHECK_U(len, !=, 0); break; case BSN_VIRTUAL_PORT_REMOVE_REQUEST: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | vport_no | * +---------------+---------------+---------------+---------------+ * */ ND_ICHECK_U(len, !=, 4); /* vport_no */ ND_PRINT(", vport_no %u", GET_BE_U_4(cp)); break; case BSN_SHELL_COMMAND: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | service | * +---------------+---------------+---------------+---------------+ * | data ... * +---------------+---------------+-------- * */ ND_ICHECK_U(len, <, 4); /* service */ ND_PRINT(", service %u", GET_BE_U_4(cp)); OF_FWD(4); /* data */ ND_PRINT(", data '"); nd_printjn(ndo, cp, len); ND_PRINT("'"); break; case BSN_SHELL_OUTPUT: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | data ... * +---------------+---------------+-------- * */ /* already checked that len >= 4 */ /* data */ ND_PRINT(", data '"); nd_printjn(ndo, cp, len); ND_PRINT("'"); break; case BSN_SHELL_STATUS: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | status | * +---------------+---------------+---------------+---------------+ * */ ND_ICHECK_U(len, !=, 4); /* status */ ND_PRINT(", status 0x%08x", GET_BE_U_4(cp)); break; default: ND_TCHECK_LEN(cp, len); } return; invalid: /* skip the undersized data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } static void of10_bsn_actions_print(netdissect_options *ndo, const u_char *cp, u_int len) { uint32_t subtype, vlan_tag; ND_PRINT("\n\t "); ND_ICHECK_U(len, <, 4); /* subtype */ subtype = GET_BE_U_4(cp); OF_FWD(4); ND_PRINT(" subtype %s", tok2str(bsn_action_subtype_str, "unknown (0x%08x)", subtype)); switch (subtype) { case BSN_ACTION_MIRROR: /* * 0 1 2 3 * 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 * +---------------+---------------+---------------+---------------+ * | subtype | * +---------------+---------------+---------------+---------------+ * | dest_port | * +---------------+---------------+---------------+---------------+ * | vlan_tag | * +---------------+---------------+---------------+---------------+ * | copy_stage | pad | * +---------------+---------------+---------------+---------------+ * */ ND_ICHECK_U(len, !=, 12); /* dest_port */ ND_PRINT(", dest_port %u", GET_BE_U_4(cp)); OF_FWD(4); /* vlan_tag */ vlan_tag = GET_BE_U_4(cp); OF_FWD(4); switch (vlan_tag >> 16) { case 0: ND_PRINT(", vlan_tag none"); break; case ETHERTYPE_8021Q: ND_PRINT(", vlan_tag 802.1Q (%s)", ieee8021q_tci_string(vlan_tag & 0xffff)); break; default: ND_PRINT(", vlan_tag unknown (0x%04x)", vlan_tag >> 16); } /* copy_stage */ ND_PRINT(", copy_stage %s", tok2str(bsn_mirror_copy_stage_str, "unknown (%u)", GET_U_1(cp))); OF_FWD(1); /* pad */ /* Always the last field, check bounds. */ ND_TCHECK_3(cp); break; default: ND_TCHECK_LEN(cp, len); } return; invalid: nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } static void of10_vendor_action_print(netdissect_options *ndo, const u_char *cp, u_int len) { uint32_t vendor; void (*decoder)(netdissect_options *, const u_char *, u_int); ND_ICHECK_U(len, <, 4); /* vendor */ vendor = GET_BE_U_4(cp); OF_FWD(4); ND_PRINT(", vendor 0x%08x (%s)", vendor, of_vendor_name(vendor)); /* data */ decoder = vendor == OUI_BSN ? of10_bsn_actions_print : of_data_print; decoder(ndo, cp, len); return; invalid: /* skip the undersized data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* [OF10] Section 5.5.4 */ static void of10_vendor_message_print(netdissect_options *ndo, const u_char *cp, u_int len) { uint32_t vendor; void (*decoder)(netdissect_options *, const u_char *, u_int); /* vendor */ vendor = GET_BE_U_4(cp); OF_FWD(4); ND_PRINT(", vendor 0x%08x (%s)", vendor, of_vendor_name(vendor)); /* data */ decoder = vendor == OUI_BSN ? of10_bsn_message_print : of_data_print; decoder(ndo, cp, len); } /* Vendor ID is mandatory, data is optional. */ static void of10_vendor_data_print(netdissect_options *ndo, const u_char *cp, u_int len) { uint32_t vendor; ND_ICHECK_U(len, <, 4); /* vendor */ vendor = GET_BE_U_4(cp); OF_FWD(4); ND_PRINT(", vendor 0x%08x (%s)", vendor, of_vendor_name(vendor)); /* data */ of_data_print(ndo, cp, len); return; invalid: /* skip the undersized data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } static void of10_packet_data_print(netdissect_options *ndo, const u_char *cp, const u_int len) { if (len == 0) return; /* data */ ND_PRINT("\n\t data (%u octets)", len); if (ndo->ndo_vflag < 3) { ND_TCHECK_LEN(cp, len); return; } ndo->ndo_vflag -= 3; ND_PRINT(", frame decoding below\n"); /* * The encapsulated Ethernet frame is not necessarily the last * data of this packet (i.e. there may be more OpenFlow messages * after the current OFPT_PACKET_IN/OFPT_PACKET_OUT message, in * which case the current (outer) packet's snapshot end is not * what ether_print() needs to decode an Ethernet frame nested in * the middle of a TCP payload. */ const u_char *snapend_save = ndo->ndo_snapend; ndo->ndo_snapend = ND_MIN(cp + len, ndo->ndo_snapend); ether_print(ndo, cp, len, ND_BYTES_AVAILABLE_AFTER(cp), NULL, NULL); ndo->ndo_snapend = snapend_save; ndo->ndo_vflag += 3; } /* [OF10] Section 5.2.1 */ static void of10_phy_port_print(netdissect_options *ndo, const u_char *cp) { uint32_t state; /* port_no */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* hw_addr */ ND_PRINT(", hw_addr %s", GET_ETHERADDR_STRING(cp)); cp += MAC_ADDR_LEN; /* name */ ND_PRINT(", name '"); nd_printjnp(ndo, cp, OFP_MAX_PORT_NAME_LEN); ND_PRINT("'"); cp += OFP_MAX_PORT_NAME_LEN; if (ndo->ndo_vflag < 2) { ND_TCHECK_LEN(cp, 24); return; } /* config */ ND_PRINT("\n\t config 0x%08x", GET_BE_U_4(cp)); of_bitmap_print(ndo, ofppc_bm, GET_BE_U_4(cp), OFPPC_U); cp += 4; /* state */ state = GET_BE_U_4(cp); /* * Decode the code point and the single bit separately, but * format the result as a single sequence of comma-separated * strings (see the comments at the OFPPS_ props). */ ND_PRINT("\n\t state 0x%08x (%s%s)%s", state, tok2str(ofpps_stp_str, "", state & OFPPS_STP_MASK), state & OFPPS_LINK_DOWN ? ", LINK_DOWN" : "", state & OFPPS_U ? " (bogus)" : ""); cp += 4; /* curr */ ND_PRINT("\n\t curr 0x%08x", GET_BE_U_4(cp)); of_bitmap_print(ndo, ofppf_bm, GET_BE_U_4(cp), OFPPF_U); cp += 4; /* advertised */ ND_PRINT("\n\t advertised 0x%08x", GET_BE_U_4(cp)); of_bitmap_print(ndo, ofppf_bm, GET_BE_U_4(cp), OFPPF_U); cp += 4; /* supported */ ND_PRINT("\n\t supported 0x%08x", GET_BE_U_4(cp)); of_bitmap_print(ndo, ofppf_bm, GET_BE_U_4(cp), OFPPF_U); cp += 4; /* peer */ ND_PRINT("\n\t peer 0x%08x", GET_BE_U_4(cp)); of_bitmap_print(ndo, ofppf_bm, GET_BE_U_4(cp), OFPPF_U); } /* [OF10] Section 5.2.2 */ static void of10_queue_props_print(netdissect_options *ndo, const u_char *cp, u_int len) { while (len) { uint16_t property, plen; u_char plen_bogus = 0, skip = 0; ND_PRINT("\n\t "); ND_ICHECKMSG_U("remaining length", len, <, OF_QUEUE_PROP_MINLEN); /* property */ property = GET_BE_U_2(cp); OF_FWD(2); ND_PRINT(" property %s", tok2str(ofpqt_str, "invalid (0x%04x)", property)); /* len */ plen = GET_BE_U_2(cp); OF_FWD(2); ND_PRINT(", len %u", plen); ND_ICHECKMSG_U("property length", plen, <, OF_QUEUE_PROP_MINLEN); ND_ICHECKMSG_U("property length", plen, >, len + 4); /* pad */ /* Sometimes the last field, check bounds. */ OF_CHK_FWD(4); /* property-specific constraints and decoding */ switch (property) { case OFPQT_NONE: plen_bogus = plen != OF_QUEUE_PROP_MINLEN; break; case OFPQT_MIN_RATE: plen_bogus = plen != OF_QUEUE_PROP_MIN_RATE_FIXLEN; break; default: skip = 1; } if (plen_bogus) { ND_PRINT(" (bogus)"); skip = 1; } if (skip) { /* * plen >= OF_QUEUE_PROP_MINLEN * cp is OF_QUEUE_PROP_MINLEN bytes in */ OF_CHK_FWD(plen - OF_QUEUE_PROP_MINLEN); continue; } if (property == OFPQT_MIN_RATE) { /* the only case of property decoding */ /* rate */ uint16_t rate = GET_BE_U_2(cp); OF_FWD(2); if (rate > 1000) ND_PRINT(", rate disabled"); else ND_PRINT(", rate %u.%u%%", rate / 10, rate % 10); /* pad */ /* Sometimes the last field, check bounds. */ OF_CHK_FWD(6); } } /* while */ return; invalid: /* skip the rest of queue properties */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* ibid */ static void of10_queues_print(netdissect_options *ndo, const u_char *cp, u_int len) { while (len) { uint16_t desclen; ND_PRINT("\n\t "); ND_ICHECKMSG_U("remaining length", len, <, OF_PACKET_QUEUE_MINLEN); /* queue_id */ ND_PRINT(" queue_id %u", GET_BE_U_4(cp)); OF_FWD(4); /* len */ desclen = GET_BE_U_2(cp); OF_FWD(2); ND_PRINT(", len %u", desclen); ND_ICHECKMSG_U("prop. desc. length", desclen, <, OF_PACKET_QUEUE_MINLEN); ND_ICHECKMSG_U("prop. desc. length", desclen, >, len + 6); /* pad */ /* Sometimes the last field, check bounds. */ OF_CHK_FWD(2); /* properties */ if (ndo->ndo_vflag >= 2) of10_queue_props_print(ndo, cp, desclen - OF_PACKET_QUEUE_MINLEN); else ND_TCHECK_LEN(cp, desclen - OF_PACKET_QUEUE_MINLEN); OF_FWD(desclen - OF_PACKET_QUEUE_MINLEN); } /* while */ return; invalid: /* skip the rest of queues */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* [OF10] Section 5.2.3 */ static void of10_match_print(netdissect_options *ndo, const char *pfx, const u_char *cp) { uint32_t wildcards; uint16_t dl_type; uint8_t nw_proto; u_int nw_bits; const char *field_name; /* wildcards */ wildcards = GET_BE_U_4(cp); if (wildcards & OFPFW_U) ND_PRINT("%swildcards 0x%08x (bogus)", pfx, wildcards); cp += 4; /* in_port */ if (! (wildcards & OFPFW_IN_PORT)) ND_PRINT("%smatch in_port %s", pfx, tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* dl_src */ if (! (wildcards & OFPFW_DL_SRC)) ND_PRINT("%smatch dl_src %s", pfx, GET_ETHERADDR_STRING(cp)); cp += MAC_ADDR_LEN; /* dl_dst */ if (! (wildcards & OFPFW_DL_DST)) ND_PRINT("%smatch dl_dst %s", pfx, GET_ETHERADDR_STRING(cp)); cp += MAC_ADDR_LEN; /* dl_vlan */ if (! (wildcards & OFPFW_DL_VLAN)) ND_PRINT("%smatch dl_vlan %s", pfx, vlan_str(GET_BE_U_2(cp))); cp += 2; /* dl_vlan_pcp */ if (! (wildcards & OFPFW_DL_VLAN_PCP)) ND_PRINT("%smatch dl_vlan_pcp %s", pfx, pcp_str(GET_U_1(cp))); cp += 1; /* pad1 */ cp += 1; /* dl_type */ dl_type = GET_BE_U_2(cp); cp += 2; if (! (wildcards & OFPFW_DL_TYPE)) ND_PRINT("%smatch dl_type 0x%04x", pfx, dl_type); /* nw_tos */ if (! (wildcards & OFPFW_NW_TOS)) ND_PRINT("%smatch nw_tos 0x%02x", pfx, GET_U_1(cp)); cp += 1; /* nw_proto */ nw_proto = GET_U_1(cp); cp += 1; if (! (wildcards & OFPFW_NW_PROTO)) { field_name = ! (wildcards & OFPFW_DL_TYPE) && dl_type == ETHERTYPE_ARP ? "arp_opcode" : "nw_proto"; ND_PRINT("%smatch %s %u", pfx, field_name, nw_proto); } /* pad2 */ cp += 2; /* nw_src */ nw_bits = (wildcards & OFPFW_NW_SRC_MASK) >> OFPFW_NW_SRC_SHIFT; if (nw_bits < 32) ND_PRINT("%smatch nw_src %s/%u", pfx, GET_IPADDR_STRING(cp), 32 - nw_bits); cp += 4; /* nw_dst */ nw_bits = (wildcards & OFPFW_NW_DST_MASK) >> OFPFW_NW_DST_SHIFT; if (nw_bits < 32) ND_PRINT("%smatch nw_dst %s/%u", pfx, GET_IPADDR_STRING(cp), 32 - nw_bits); cp += 4; /* tp_src */ if (! (wildcards & OFPFW_TP_SRC)) { field_name = ! (wildcards & OFPFW_DL_TYPE) && dl_type == ETHERTYPE_IP && ! (wildcards & OFPFW_NW_PROTO) && nw_proto == IPPROTO_ICMP ? "icmp_type" : "tp_src"; ND_PRINT("%smatch %s %u", pfx, field_name, GET_BE_U_2(cp)); } cp += 2; /* tp_dst */ /* The last unconditional check was at nw_proto, so have an "else" here. */ if (! (wildcards & OFPFW_TP_DST)) { field_name = ! (wildcards & OFPFW_DL_TYPE) && dl_type == ETHERTYPE_IP && ! (wildcards & OFPFW_NW_PROTO) && nw_proto == IPPROTO_ICMP ? "icmp_code" : "tp_dst"; ND_PRINT("%smatch %s %u", pfx, field_name, GET_BE_U_2(cp)); } else ND_TCHECK_2(cp); } /* [OF10] Section 5.2.4 */ static void of10_actions_print(netdissect_options *ndo, const char *pfx, const u_char *cp, u_int len) { while (len) { uint16_t type, alen, output_port; u_char alen_bogus = 0, skip = 0; ND_PRINT("%saction", pfx); ND_ICHECKMSG_U("remaining length", len, <, OF_ACTION_MINLEN); /* type */ type = GET_BE_U_2(cp); OF_FWD(2); ND_PRINT(" type %s", tok2str(ofpat_str, "invalid (0x%04x)", type)); /* length */ alen = GET_BE_U_2(cp); OF_FWD(2); ND_PRINT(", len %u", alen); /* * The 4-byte "pad" in the specification is not a field of the * action header, but a placeholder to illustrate the 64-bit * alignment requirement. Action type specific case blocks * below fetch these 4 bytes. */ /* On action size underrun/overrun skip the rest of the action list. */ ND_ICHECK_U(alen, <, OF_ACTION_MINLEN); ND_ICHECK_U(alen, >, len + 4); /* * After validating the basic length constraint it will be safe * to skip the current action if the action size is not valid * for the type or the type is invalid. */ switch (type) { case OFPAT_OUTPUT: case OFPAT_SET_VLAN_VID: case OFPAT_SET_VLAN_PCP: case OFPAT_STRIP_VLAN: case OFPAT_SET_NW_SRC: case OFPAT_SET_NW_DST: case OFPAT_SET_NW_TOS: case OFPAT_SET_TP_SRC: case OFPAT_SET_TP_DST: alen_bogus = alen != 8; break; case OFPAT_SET_DL_SRC: case OFPAT_SET_DL_DST: case OFPAT_ENQUEUE: alen_bogus = alen != 16; break; case OFPAT_VENDOR: alen_bogus = alen % 8 != 0; /* already >= 8 so far */ break; default: skip = 1; } if (alen_bogus) { ND_PRINT(" (bogus)"); skip = 1; } if (skip) { /* * alen >= OF_ACTION_MINLEN * cp is 4 bytes in */ OF_CHK_FWD(alen - 4); continue; } /* OK to decode the rest of the action structure */ switch (type) { case OFPAT_OUTPUT: /* port */ output_port = GET_BE_U_2(cp); OF_FWD(2); ND_PRINT(", port %s", tok2str(ofpp_str, "%u", output_port)); /* max_len */ if (output_port == OFPP_CONTROLLER) ND_PRINT(", max_len %u", GET_BE_U_2(cp)); else ND_TCHECK_2(cp); OF_FWD(2); break; case OFPAT_SET_VLAN_VID: /* vlan_vid */ ND_PRINT(", vlan_vid %s", vlan_str(GET_BE_U_2(cp))); OF_FWD(2); /* pad */ /* Sometimes the last field, check bounds. */ OF_CHK_FWD(2); break; case OFPAT_SET_VLAN_PCP: /* vlan_pcp */ ND_PRINT(", vlan_pcp %s", pcp_str(GET_U_1(cp))); OF_FWD(1); /* pad */ /* Sometimes the last field, check bounds. */ OF_CHK_FWD(3); break; case OFPAT_SET_DL_SRC: case OFPAT_SET_DL_DST: /* dl_addr */ ND_PRINT(", dl_addr %s", GET_ETHERADDR_STRING(cp)); OF_FWD(MAC_ADDR_LEN); /* pad */ /* Sometimes the last field, check bounds. */ OF_CHK_FWD(6); break; case OFPAT_SET_NW_SRC: case OFPAT_SET_NW_DST: /* nw_addr */ ND_PRINT(", nw_addr %s", GET_IPADDR_STRING(cp)); OF_FWD(4); break; case OFPAT_SET_NW_TOS: /* nw_tos */ ND_PRINT(", nw_tos 0x%02x", GET_U_1(cp)); OF_FWD(1); /* pad */ /* Sometimes the last field, check bounds. */ OF_CHK_FWD(3); break; case OFPAT_SET_TP_SRC: case OFPAT_SET_TP_DST: /* nw_tos */ ND_PRINT(", tp_port %u", GET_BE_U_2(cp)); OF_FWD(2); /* pad */ /* Sometimes the last field, check bounds. */ OF_CHK_FWD(2); break; case OFPAT_ENQUEUE: /* port */ ND_PRINT(", port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); OF_FWD(2); /* pad */ OF_FWD(6); /* queue_id */ ND_PRINT(", queue_id %s", tok2str(ofpq_str, "%u", GET_BE_U_4(cp))); OF_FWD(4); break; case OFPAT_VENDOR: of10_vendor_action_print(ndo, cp, alen - 4); OF_FWD(alen - 4); break; case OFPAT_STRIP_VLAN: /* pad */ /* Sometimes the last field, check bounds. */ OF_CHK_FWD(4); break; } /* switch */ } /* while */ return; invalid: /* skip the rest of actions */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* [OF10] Section 5.3.1 */ static void of10_features_reply_print(netdissect_options *ndo, const u_char *cp, u_int len) { /* datapath_id */ ND_PRINT("\n\t dpid 0x%016" PRIx64, GET_BE_U_8(cp)); OF_FWD(8); /* n_buffers */ ND_PRINT(", n_buffers %u", GET_BE_U_4(cp)); OF_FWD(4); /* n_tables */ ND_PRINT(", n_tables %u", GET_U_1(cp)); OF_FWD(1); /* pad */ OF_FWD(3); /* capabilities */ ND_PRINT("\n\t capabilities 0x%08x", GET_BE_U_4(cp)); of_bitmap_print(ndo, ofp_capabilities_bm, GET_BE_U_4(cp), OFPCAP_U); OF_FWD(4); /* actions */ ND_PRINT("\n\t actions 0x%08x", GET_BE_U_4(cp)); of_bitmap_print(ndo, ofpat_bm, GET_BE_U_4(cp), OFPAT_U); OF_FWD(4); /* ports */ while (len) { ND_ICHECKMSG_U("\n\t port def. length", len, <, OF_PHY_PORT_FIXLEN); of10_phy_port_print(ndo, cp); OF_FWD(OF_PHY_PORT_FIXLEN); } return; invalid: /* skip the undersized trailing data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* [OF10] Section 5.3.2 */ static void of10_switch_config_msg_print(netdissect_options *ndo, const u_char *cp, u_int len _U_) { /* flags */ ND_PRINT("\n\t flags %s", tok2str(ofp_config_str, "invalid (0x%04x)", GET_BE_U_2(cp))); cp += 2; /* miss_send_len */ ND_PRINT(", miss_send_len %u", GET_BE_U_2(cp)); } /* [OF10] Section 5.3.3 */ static void of10_flow_mod_print(netdissect_options *ndo, const u_char *cp, u_int len) { uint16_t command; /* match */ of10_match_print(ndo, "\n\t ", cp); OF_FWD(OF_MATCH_FIXLEN); /* cookie */ ND_PRINT("\n\t cookie 0x%016" PRIx64, GET_BE_U_8(cp)); OF_FWD(8); /* command */ command = GET_BE_U_2(cp); ND_PRINT(", command %s", tok2str(ofpfc_str, "invalid (0x%04x)", command)); OF_FWD(2); /* idle_timeout */ if (GET_BE_U_2(cp)) ND_PRINT(", idle_timeout %u", GET_BE_U_2(cp)); OF_FWD(2); /* hard_timeout */ if (GET_BE_U_2(cp)) ND_PRINT(", hard_timeout %u", GET_BE_U_2(cp)); OF_FWD(2); /* priority */ if (GET_BE_U_2(cp)) ND_PRINT(", priority %u", GET_BE_U_2(cp)); OF_FWD(2); /* buffer_id */ if (command == OFPFC_ADD || command == OFPFC_MODIFY || command == OFPFC_MODIFY_STRICT) ND_PRINT(", buffer_id %s", tok2str(bufferid_str, "0x%08x", GET_BE_U_4(cp))); OF_FWD(4); /* out_port */ if (command == OFPFC_DELETE || command == OFPFC_DELETE_STRICT) ND_PRINT(", out_port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); OF_FWD(2); /* flags */ ND_PRINT(", flags 0x%04x", GET_BE_U_2(cp)); of_bitmap_print(ndo, ofpff_bm, GET_BE_U_2(cp), OFPFF_U); OF_FWD(2); /* actions */ of10_actions_print(ndo, "\n\t ", cp, len); } /* ibid */ static void of10_port_mod_print(netdissect_options *ndo, const u_char *cp, u_int len _U_) { /* port_no */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* hw_addr */ ND_PRINT(", hw_addr %s", GET_ETHERADDR_STRING(cp)); cp += MAC_ADDR_LEN; /* config */ ND_PRINT("\n\t config 0x%08x", GET_BE_U_4(cp)); of_bitmap_print(ndo, ofppc_bm, GET_BE_U_4(cp), OFPPC_U); cp += 4; /* mask */ ND_PRINT("\n\t mask 0x%08x", GET_BE_U_4(cp)); of_bitmap_print(ndo, ofppc_bm, GET_BE_U_4(cp), OFPPC_U); cp += 4; /* advertise */ ND_PRINT("\n\t advertise 0x%08x", GET_BE_U_4(cp)); of_bitmap_print(ndo, ofppf_bm, GET_BE_U_4(cp), OFPPF_U); cp += 4; /* pad */ /* Always the last field, check bounds. */ ND_TCHECK_4(cp); } /* [OF10] Section 5.3.4 */ static void of10_queue_get_config_request_print(netdissect_options *ndo, const u_char *cp, u_int len _U_) { /* port */ ND_PRINT("\n\t port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); cp += 2; /* pad */ /* Always the last field, check bounds. */ ND_TCHECK_2(cp); } /* ibid */ static void of10_queue_get_config_reply_print(netdissect_options *ndo, const u_char *cp, u_int len) { /* port */ ND_PRINT("\n\t port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); OF_FWD(2); /* pad */ /* Sometimes the last field, check bounds. */ OF_CHK_FWD(6); /* queues */ of10_queues_print(ndo, cp, len); } /* [OF10] Section 5.3.5 */ static void of10_stats_request_print(netdissect_options *ndo, const u_char *cp, u_int len) { uint16_t type; /* type */ type = GET_BE_U_2(cp); OF_FWD(2); ND_PRINT("\n\t type %s", tok2str(ofpst_str, "invalid (0x%04x)", type)); /* flags */ ND_PRINT(", flags 0x%04x", GET_BE_U_2(cp)); if (GET_BE_U_2(cp)) ND_PRINT(" (bogus)"); OF_FWD(2); /* type-specific body of one of fixed lengths */ switch(type) { case OFPST_DESC: case OFPST_TABLE: ND_ICHECK_U(len, !=, 0); return; case OFPST_FLOW: case OFPST_AGGREGATE: ND_ICHECK_U(len, !=, OF_FLOW_STATS_REQUEST_FIXLEN); /* match */ of10_match_print(ndo, "\n\t ", cp); OF_FWD(OF_MATCH_FIXLEN); /* table_id */ ND_PRINT("\n\t table_id %s", tok2str(tableid_str, "%u", GET_U_1(cp))); OF_FWD(1); /* pad */ OF_FWD(1); /* out_port */ ND_PRINT(", out_port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); return; case OFPST_PORT: ND_ICHECK_U(len, !=, OF_PORT_STATS_REQUEST_FIXLEN); /* port_no */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); OF_FWD(2); /* pad */ /* Always the last field, check bounds. */ OF_CHK_FWD(6); return; case OFPST_QUEUE: ND_ICHECK_U(len, !=, OF_QUEUE_STATS_REQUEST_FIXLEN); /* port_no */ ND_PRINT("\n\t port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); OF_FWD(2); /* pad */ OF_FWD(2); /* queue_id */ ND_PRINT(", queue_id %s", tok2str(ofpq_str, "%u", GET_BE_U_4(cp))); return; case OFPST_VENDOR: of10_vendor_data_print(ndo, cp, len); return; } return; invalid: /* skip the message body */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* ibid */ static void of10_desc_stats_reply_print(netdissect_options *ndo, const u_char *cp, u_int len) { ND_PRINT("\n\t "); ND_ICHECK_U(len, !=, OF_DESC_STATS_REPLY_FIXLEN); /* mfr_desc */ ND_PRINT(" mfr_desc '"); nd_printjnp(ndo, cp, DESC_STR_LEN); ND_PRINT("'"); OF_FWD(DESC_STR_LEN); /* hw_desc */ ND_PRINT("\n\t hw_desc '"); nd_printjnp(ndo, cp, DESC_STR_LEN); ND_PRINT("'"); OF_FWD(DESC_STR_LEN); /* sw_desc */ ND_PRINT("\n\t sw_desc '"); nd_printjnp(ndo, cp, DESC_STR_LEN); ND_PRINT("'"); OF_FWD(DESC_STR_LEN); /* serial_num */ ND_PRINT("\n\t serial_num '"); nd_printjnp(ndo, cp, SERIAL_NUM_LEN); ND_PRINT("'"); OF_FWD(SERIAL_NUM_LEN); /* dp_desc */ ND_PRINT("\n\t dp_desc '"); nd_printjnp(ndo, cp, DESC_STR_LEN); ND_PRINT("'"); return; invalid: /* skip the message body */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* ibid */ static void of10_flow_stats_reply_print(netdissect_options *ndo, const u_char *cp, u_int len) { while (len) { uint16_t entry_len; ND_PRINT("\n\t"); ND_ICHECKMSG_U("remaining length", len, <, OF_FLOW_STATS_REPLY_MINLEN); /* length */ entry_len = GET_BE_U_2(cp); ND_PRINT(" length %u", entry_len); ND_ICHECK_U(entry_len, <, OF_FLOW_STATS_REPLY_MINLEN); ND_ICHECK_U(entry_len, >, len); OF_FWD(2); /* table_id */ ND_PRINT(", table_id %s", tok2str(tableid_str, "%u", GET_U_1(cp))); OF_FWD(1); /* pad */ OF_FWD(1); /* match */ of10_match_print(ndo, "\n\t ", cp); OF_FWD(OF_MATCH_FIXLEN); /* duration_sec */ ND_PRINT("\n\t duration_sec %u", GET_BE_U_4(cp)); OF_FWD(4); /* duration_nsec */ ND_PRINT(", duration_nsec %u", GET_BE_U_4(cp)); OF_FWD(4); /* priority */ ND_PRINT(", priority %u", GET_BE_U_2(cp)); OF_FWD(2); /* idle_timeout */ ND_PRINT(", idle_timeout %u", GET_BE_U_2(cp)); OF_FWD(2); /* hard_timeout */ ND_PRINT(", hard_timeout %u", GET_BE_U_2(cp)); OF_FWD(2); /* pad2 */ OF_FWD(6); /* cookie */ ND_PRINT(", cookie 0x%016" PRIx64, GET_BE_U_8(cp)); OF_FWD(8); /* packet_count */ ND_PRINT(", packet_count %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* byte_count */ ND_PRINT(", byte_count %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* actions */ of10_actions_print(ndo, "\n\t ", cp, entry_len - OF_FLOW_STATS_REPLY_MINLEN); OF_FWD(entry_len - OF_FLOW_STATS_REPLY_MINLEN); } /* while */ return; invalid: /* skip the rest of flow statistics entries */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* ibid */ static void of10_aggregate_stats_reply_print(netdissect_options *ndo, const u_char *cp, u_int len) { ND_PRINT("\n\t"); ND_ICHECKMSG_U("remaining length", len, !=, OF_AGGREGATE_STATS_REPLY_FIXLEN); /* packet_count */ ND_PRINT(" packet_count %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* byte_count */ ND_PRINT(", byte_count %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* flow_count */ ND_PRINT(", flow_count %u", GET_BE_U_4(cp)); OF_FWD(4); /* pad */ /* Always the last field, check bounds. */ ND_TCHECK_4(cp); return; invalid: /* skip the message body */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* ibid */ static void of10_table_stats_reply_print(netdissect_options *ndo, const u_char *cp, u_int len) { while (len) { ND_PRINT("\n\t"); ND_ICHECKMSG_U("remaining length", len, <, OF_TABLE_STATS_REPLY_FIXLEN); /* table_id */ ND_PRINT(" table_id %s", tok2str(tableid_str, "%u", GET_U_1(cp))); OF_FWD(1); /* pad */ OF_FWD(3); /* name */ ND_PRINT(", name '"); nd_printjnp(ndo, cp, OFP_MAX_TABLE_NAME_LEN); ND_PRINT("'"); OF_FWD(OFP_MAX_TABLE_NAME_LEN); /* wildcards */ ND_PRINT("\n\t wildcards 0x%08x", GET_BE_U_4(cp)); of_bitmap_print(ndo, ofpfw_bm, GET_BE_U_4(cp), OFPFW_U); OF_FWD(4); /* max_entries */ ND_PRINT("\n\t max_entries %u", GET_BE_U_4(cp)); OF_FWD(4); /* active_count */ ND_PRINT(", active_count %u", GET_BE_U_4(cp)); OF_FWD(4); /* lookup_count */ ND_PRINT(", lookup_count %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* matched_count */ ND_PRINT(", matched_count %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); } /* while */ return; invalid: /* skip the undersized trailing data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* ibid */ static void of10_port_stats_reply_print(netdissect_options *ndo, const u_char *cp, u_int len) { while (len) { ND_PRINT("\n\t "); ND_ICHECKMSG_U("remaining length", len, <, OF_PORT_STATS_REPLY_FIXLEN); /* port_no */ ND_PRINT(" port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); OF_FWD(2); if (ndo->ndo_vflag < 2) { OF_CHK_FWD(OF_PORT_STATS_REPLY_FIXLEN - 2); continue; } /* pad */ OF_FWD(6); /* rx_packets */ ND_PRINT(", rx_packets %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* tx_packets */ ND_PRINT(", tx_packets %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* rx_bytes */ ND_PRINT(", rx_bytes %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* tx_bytes */ ND_PRINT(", tx_bytes %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* rx_dropped */ ND_PRINT(", rx_dropped %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* tx_dropped */ ND_PRINT(", tx_dropped %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* rx_errors */ ND_PRINT(", rx_errors %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* tx_errors */ ND_PRINT(", tx_errors %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* rx_frame_err */ ND_PRINT(", rx_frame_err %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* rx_over_err */ ND_PRINT(", rx_over_err %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* rx_crc_err */ ND_PRINT(", rx_crc_err %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* collisions */ ND_PRINT(", collisions %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); } /* while */ return; invalid: /* skip the undersized trailing data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* ibid */ static void of10_queue_stats_reply_print(netdissect_options *ndo, const u_char *cp, u_int len) { while (len) { ND_PRINT("\n\t "); ND_ICHECKMSG_U("remaining length", len, <, OF_QUEUE_STATS_REPLY_FIXLEN); /* port_no */ ND_PRINT(" port_no %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); OF_FWD(2); /* pad */ OF_FWD(2); /* queue_id */ ND_PRINT(", queue_id %u", GET_BE_U_4(cp)); OF_FWD(4); /* tx_bytes */ ND_PRINT(", tx_bytes %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* tx_packets */ ND_PRINT(", tx_packets %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); /* tx_errors */ ND_PRINT(", tx_errors %" PRIu64, GET_BE_U_8(cp)); OF_FWD(8); } /* while */ return; invalid: /* skip the undersized trailing data */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* ibid */ static void of10_stats_reply_print(netdissect_options *ndo, const u_char *cp, u_int len) { uint16_t type; /* type */ type = GET_BE_U_2(cp); ND_PRINT("\n\t type %s", tok2str(ofpst_str, "invalid (0x%04x)", type)); OF_FWD(2); /* flags */ ND_PRINT(", flags 0x%04x", GET_BE_U_2(cp)); of_bitmap_print(ndo, ofpsf_reply_bm, GET_BE_U_2(cp), OFPSF_REPLY_U); OF_FWD(2); if (ndo->ndo_vflag > 0) { void (*decoder)(netdissect_options *, const u_char *, u_int) = type == OFPST_DESC ? of10_desc_stats_reply_print : type == OFPST_FLOW ? of10_flow_stats_reply_print : type == OFPST_AGGREGATE ? of10_aggregate_stats_reply_print : type == OFPST_TABLE ? of10_table_stats_reply_print : type == OFPST_PORT ? of10_port_stats_reply_print : type == OFPST_QUEUE ? of10_queue_stats_reply_print : type == OFPST_VENDOR ? of10_vendor_data_print : NULL; if (decoder != NULL) { decoder(ndo, cp, len); return; } } ND_TCHECK_LEN(cp, len); } /* [OF10] Section 5.3.6 */ static void of10_packet_out_print(netdissect_options *ndo, const u_char *cp, u_int len) { uint16_t actions_len; /* buffer_id */ ND_PRINT("\n\t buffer_id 0x%08x", GET_BE_U_4(cp)); OF_FWD(4); /* in_port */ ND_PRINT(", in_port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); OF_FWD(2); /* actions_len */ actions_len = GET_BE_U_2(cp); ND_PRINT(", actions_len %u", actions_len); OF_FWD(2); ND_ICHECK_U(actions_len, >, len); /* actions */ of10_actions_print(ndo, "\n\t ", cp, actions_len); OF_FWD(actions_len); /* data */ of10_packet_data_print(ndo, cp, len); return; invalid: /* skip the rest of the message body */ nd_print_invalid(ndo); ND_TCHECK_LEN(cp, len); } /* [OF10] Section 5.4.1 */ static void of10_packet_in_print(netdissect_options *ndo, const u_char *cp, u_int len) { /* buffer_id */ ND_PRINT("\n\t buffer_id %s", tok2str(bufferid_str, "0x%08x", GET_BE_U_4(cp))); OF_FWD(4); /* total_len */ ND_PRINT(", total_len %u", GET_BE_U_2(cp)); OF_FWD(2); /* in_port */ ND_PRINT(", in_port %s", tok2str(ofpp_str, "%u", GET_BE_U_2(cp))); OF_FWD(2); /* reason */ ND_PRINT(", reason %s", tok2str(ofpr_str, "invalid (0x%02x)", GET_U_1(cp))); OF_FWD(1); /* pad */ /* Sometimes the last field, check bounds. */ OF_CHK_FWD(1); /* data */ of10_packet_data_print(ndo, cp, len); } /* [OF10] Section 5.4.2 */ static void of10_flow_removed_print(netdissect_options *ndo, const u_char *cp, u_int len _U_) { /* match */ of10_match_print(ndo, "\n\t ", cp); cp += OF_MATCH_FIXLEN; /* cookie */ ND_PRINT("\n\t cookie 0x%016" PRIx64, GET_BE_U_8(cp)); cp += 8; /* priority */ if (GET_BE_U_2(cp)) ND_PRINT(", priority %u", GET_BE_U_2(cp)); cp += 2; /* reason */ ND_PRINT(", reason %s", tok2str(ofprr_str, "unknown (0x%02x)", GET_U_1(cp))); cp += 1; /* pad */ cp += 1; /* duration_sec */ ND_PRINT(", duration_sec %u", GET_BE_U_4(cp)); cp += 4; /* duration_nsec */ ND_PRINT(", duration_nsec %u", GET_BE_U_4(cp)); cp += 4; /* idle_timeout */ if (GET_BE_U_2(cp)) ND_PRINT(", idle_timeout %u", GET_BE_U_2(cp)); cp += 2; /* pad2 */ cp += 2; /* packet_count */ ND_PRINT(", packet_count %" PRIu64, GET_BE_U_8(cp)); cp += 8; /* byte_count */ ND_PRINT(", byte_count %" PRIu64, GET_BE_U_8(cp)); } /* [OF10] Section 5.4.3 */ static void of10_port_status_print(netdissect_options *ndo, const u_char *cp, u_int len _U_) { /* reason */ ND_PRINT("\n\t reason %s", tok2str(ofppr_str, "invalid (0x%02x)", GET_U_1(cp))); cp += 1; /* pad */ /* No need to check bounds, more data follows. */ cp += 7; /* desc */ of10_phy_port_print(ndo, cp); } /* [OF10] Section 5.4.4 */ static void of10_error_print(netdissect_options *ndo, const u_char *cp, u_int len) { uint16_t type, code; const struct tok *code_str; /* type */ type = GET_BE_U_2(cp); OF_FWD(2); ND_PRINT("\n\t type %s", tok2str(ofpet_str, "invalid (0x%04x)", type)); /* code */ code = GET_BE_U_2(cp); OF_FWD(2); code_str = uint2tokary(of10_ofpet2tokary, type); if (code_str != NULL) ND_PRINT(", code %s", tok2str(code_str, "invalid (0x%04x)", code)); else ND_PRINT(", code invalid (0x%04x)", code); /* data */ of_data_print(ndo, cp, len); } static const struct of_msgtypeinfo of10_msgtypeinfo[OFPT_MAX + 1] = { /* * [OF10] Section 5.5.1 * Variable-size data. */ { "HELLO", of_data_print, REQ_MINLEN, 0 }, /* * [OF10] Section 5.4.4 * A fixed-size message body and variable-size data. */ { "ERROR", of10_error_print, REQ_MINLEN, OF_ERROR_MSG_MINLEN }, /* * [OF10] Section 5.5.2 * Variable-size data. */ { "ECHO_REQUEST", of_data_print, REQ_MINLEN, 0 }, /* * [OF10] Section 5.5.3 * Variable-size data. */ { "ECHO_REPLY", of_data_print, REQ_MINLEN, 0 }, /* * [OF10] Section 5.5.4 * A fixed-size message body and variable-size data. */ { "VENDOR", of10_vendor_message_print, REQ_MINLEN, OF_VENDOR_MINLEN }, /* * [OF10] Section 5.3.1 * No message body. */ { "FEATURES_REQUEST", NULL, REQ_FIXLEN, 0 }, /* * [OF10] Section 5.3.1 * A fixed-size message body and n * fixed-size data units. */ { "FEATURES_REPLY", of10_features_reply_print, REQ_MINLEN, OF_FEATURES_REPLY_MINLEN }, /* * [OF10] Section 5.3.2 * No message body. */ { "GET_CONFIG_REQUEST", NULL, REQ_FIXLEN, 0 }, /* * [OF10] Section 5.3.2 * A fixed-size message body. */ { "GET_CONFIG_REPLY", of10_switch_config_msg_print, REQ_FIXLEN, OF_SWITCH_CONFIG_FIXLEN }, /* * [OF10] Section 5.3.2 * A fixed-size message body. */ { "SET_CONFIG", of10_switch_config_msg_print, REQ_FIXLEN, OF_SWITCH_CONFIG_FIXLEN }, /* * [OF10] Section 5.4.1 * A fixed-size message body and variable-size data. * (The 2 mock octets count in OF_PACKET_IN_MINLEN only.) */ { "PACKET_IN", of10_packet_in_print, REQ_MINLEN, OF_PACKET_IN_MINLEN - 2 }, /* * [OF10] Section 5.4.2 * A fixed-size message body. */ { "FLOW_REMOVED", of10_flow_removed_print, REQ_FIXLEN, OF_FLOW_REMOVED_FIXLEN }, /* * [OF10] Section 5.4.3 * A fixed-size message body. */ { "PORT_STATUS", of10_port_status_print, REQ_FIXLEN, OF_PORT_STATUS_FIXLEN }, /* * [OF10] Section 5.3.6 * A fixed-size message body, n * variable-size data units and * variable-size data. */ { "PACKET_OUT", of10_packet_out_print, REQ_MINLEN, OF_PACKET_OUT_MINLEN }, /* * [OF10] Section 5.3.3 * A fixed-size message body and n * variable-size data units. */ { "FLOW_MOD", of10_flow_mod_print, REQ_MINLEN, OF_FLOW_MOD_MINLEN }, /* * [OF10] Section 5.3.3 * A fixed-size message body. */ { "PORT_MOD", of10_port_mod_print, REQ_FIXLEN, OF_PORT_MOD_FIXLEN }, /* * [OF10] Section 5.3.5 * A fixed-size message body and possibly more data of varying size * and structure. */ { "STATS_REQUEST", of10_stats_request_print, REQ_MINLEN, OF_STATS_REQUEST_MINLEN }, /* * [OF10] Section 5.3.5 * A fixed-size message body and possibly more data of varying size * and structure. */ { "STATS_REPLY", of10_stats_reply_print, REQ_MINLEN, OF_STATS_REPLY_MINLEN }, /* * [OF10] Section 5.3.7 * No message body. */ { "BARRIER_REQUEST", NULL, REQ_FIXLEN, 0 }, /* * [OF10] Section 5.3.7 * No message body. */ { "BARRIER_REPLY", NULL, REQ_FIXLEN, 0 }, /* * [OF10] Section 5.3.4 * A fixed-size message body. */ { "QUEUE_GET_CONFIG_REQUEST", of10_queue_get_config_request_print, REQ_FIXLEN, OF_QUEUE_GET_CONFIG_REQUEST_FIXLEN }, /* * [OF10] Section 5.3.4 * A fixed-size message body and n * variable-size data units. */ { "QUEUE_GET_CONFIG_REPLY", of10_queue_get_config_reply_print, REQ_MINLEN, OF_QUEUE_GET_CONFIG_REPLY_MINLEN }, }; const struct of_msgtypeinfo * of10_identify_msgtype(const uint8_t type) { return type <= OFPT_MAX ? &of10_msgtypeinfo[type] : NULL; }