1999-04-06 16:24:50 +00:00
|
|
|
/* packet-ipv6.h
|
2002-08-28 21:04:11 +00:00
|
|
|
* Definitions for IPv6 packet disassembly
|
1999-04-06 16:24:50 +00:00
|
|
|
*
|
2006-05-21 04:49:01 +00:00
|
|
|
* Wireshark - Network traffic analyzer
|
|
|
|
|
* By Gerald Combs <gerald@wireshark.org>
|
2001-01-23 02:49:55 +00:00
|
|
|
*
|
1999-04-06 16:24:50 +00:00
|
|
|
* Copyright 1998 Gerald Combs
|
|
|
|
|
*
|
|
|
|
|
* This program is free software; you can redistribute it and/or
|
|
|
|
|
* modify it under the terms of the GNU General Public License
|
|
|
|
|
* as published by the Free Software Foundation; either version 2
|
|
|
|
|
* of the License, or (at your option) any later version.
|
2002-08-28 21:04:11 +00:00
|
|
|
*
|
1999-04-06 16:24:50 +00:00
|
|
|
* This program is distributed in the hope that it will be useful,
|
|
|
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
|
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
|
|
|
* GNU General Public License for more details.
|
2002-08-28 21:04:11 +00:00
|
|
|
*
|
1999-04-06 16:24:50 +00:00
|
|
|
* You should have received a copy of the GNU General Public License
|
|
|
|
|
* along with this program; if not, write to the Free Software
|
2012-06-28 22:56:06 +00:00
|
|
|
* Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
|
1999-04-06 16:24:50 +00:00
|
|
|
*/
|
|
|
|
|
|
1999-03-28 18:32:03 +00:00
|
|
|
#ifndef __PACKET_IPV6_H_DEFINED__
|
|
|
|
|
#define __PACKET_IPV6_H_DEFINED__
|
|
|
|
|
|
2002-01-21 07:37:49 +00:00
|
|
|
#include <epan/ipv6-utils.h>
|
1999-07-23 15:08:25 +00:00
|
|
|
|
2008-05-20 21:57:14 +00:00
|
|
|
/* this definition makes trouble with Microsoft Platform SDK: ws2tcpip.h and is used nowhere */
|
|
|
|
|
/*#define INET6_ADDRSTRLEN 46*/
|
1999-03-28 18:32:03 +00:00
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Definition for internet protocol version 6.
|
2010-07-20 16:18:18 +00:00
|
|
|
* RFC 2460
|
1999-03-28 18:32:03 +00:00
|
|
|
*/
|
|
|
|
|
struct ip6_hdr {
|
|
|
|
|
union {
|
|
|
|
|
struct ip6_hdrctl {
|
2010-07-20 16:18:18 +00:00
|
|
|
guint32 ip6_un1_flow; /* version, class, flow */
|
1999-03-28 18:32:03 +00:00
|
|
|
guint16 ip6_un1_plen; /* payload length */
|
|
|
|
|
guint8 ip6_un1_nxt; /* next header */
|
|
|
|
|
guint8 ip6_un1_hlim; /* hop limit */
|
|
|
|
|
} ip6_un1;
|
|
|
|
|
guint8 ip6_un2_vfc; /* 4 bits version, 4 bits class */
|
|
|
|
|
} ip6_ctlun;
|
|
|
|
|
struct e_in6_addr ip6_src; /* source address */
|
|
|
|
|
struct e_in6_addr ip6_dst; /* destination address */
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
#define ip6_vfc ip6_ctlun.ip6_un2_vfc
|
|
|
|
|
#define ip6_flow ip6_ctlun.ip6_un1.ip6_un1_flow
|
|
|
|
|
#define ip6_plen ip6_ctlun.ip6_un1.ip6_un1_plen
|
|
|
|
|
#define ip6_nxt ip6_ctlun.ip6_un1.ip6_un1_nxt
|
|
|
|
|
#define ip6_hlim ip6_ctlun.ip6_un1.ip6_un1_hlim
|
|
|
|
|
#define ip6_hops ip6_ctlun.ip6_un1.ip6_un1_hlim
|
|
|
|
|
|
Generalize the "ip_src" and "ip_dst" members of the "packet_info"
structure to "dl_src"/"dl_dst", "net_src"/"net_dst", and "src"/"dst"
addresses, where an address is an address type, an address length in
bytes, and a pointer to that many bytes.
"dl_{src,dst}" are the link-layer source/destination; "net_{src,dst}"
are the network-layer source/destination; "{src,dst}" are the
source/destination from the highest of those two layers that we have in
the packet.
Add a port type to "packet_info" as well, specifying whether it's a TCP
or UDP port.
Don't set the address and port columns in the dissector functions; just
set the address and port members of the "packet_info" structure. Set
the columns in "fill_in_columns()"; this means that if we're showing
COL_{DEF,RES,UNRES}_SRC" or "COL_{DEF,RES,UNRES}_DST", we only generate
the string from "src" or "dst", we don't generate a string for the
link-layer address and then overwrite it with a string for the
network-layer address (generating those strings costs CPU).
Add support for "conversations", where a "conversation" is (at present)
a source and destination address and a source and destination port. (In
the future, we may support "conversations" above the transport layer,
e.g. a TFTP conversation, where the first packet goes from the client to
the TFTP server port, but the reply comes back from a different port,
and all subsequent packets go between the client address/port and the
server address/new port, or an NFS conversation, which might include
lock manager, status monitor, and mount packets, as well as NFS
packets.)
Currently, all we support is a call that takes the source and
destination address/port pairs, looks them up in a hash table, and:
if nothing is found, creates a new entry in the hash table, and
assigns it a unique 32-bit conversation ID, and returns that
conversation ID;
if an entry is found, returns its conversation ID.
Use that in the SMB and AFS code to keep track of individual SMB or AFS
conversations. We need to match up requests and replies, as, for
certain replies, the operation code for the request to which it's a
reply doesn't show up in the reply - you have to find the request with a
matching transaction ID. Transaction IDs are per-conversation, so the
hash table for requests should include a conversation ID and transaction
ID as the key.
This allows SMB and AFS decoders to handle IPv4 or IPv6 addresses
transparently (and should allow the SMB decoder to handle NetBIOS atop
other protocols as well, if the source and destination address and port
values in the "packet_info" structure are set appropriately).
In the "Follow TCP Connection" code, check to make sure that the
addresses are IPv4 addressses; ultimately, that code should be changed
to use the conversation code instead, which will let it handle IPv6
transparently.
svn path=/trunk/; revision=909
1999-10-22 07:18:23 +00:00
|
|
|
/* Offsets of fields within an IPv6 header. */
|
2008-02-24 21:04:42 +00:00
|
|
|
#define IP6H_CTL 0
|
Generalize the "ip_src" and "ip_dst" members of the "packet_info"
structure to "dl_src"/"dl_dst", "net_src"/"net_dst", and "src"/"dst"
addresses, where an address is an address type, an address length in
bytes, and a pointer to that many bytes.
"dl_{src,dst}" are the link-layer source/destination; "net_{src,dst}"
are the network-layer source/destination; "{src,dst}" are the
source/destination from the highest of those two layers that we have in
the packet.
Add a port type to "packet_info" as well, specifying whether it's a TCP
or UDP port.
Don't set the address and port columns in the dissector functions; just
set the address and port members of the "packet_info" structure. Set
the columns in "fill_in_columns()"; this means that if we're showing
COL_{DEF,RES,UNRES}_SRC" or "COL_{DEF,RES,UNRES}_DST", we only generate
the string from "src" or "dst", we don't generate a string for the
link-layer address and then overwrite it with a string for the
network-layer address (generating those strings costs CPU).
Add support for "conversations", where a "conversation" is (at present)
a source and destination address and a source and destination port. (In
the future, we may support "conversations" above the transport layer,
e.g. a TFTP conversation, where the first packet goes from the client to
the TFTP server port, but the reply comes back from a different port,
and all subsequent packets go between the client address/port and the
server address/new port, or an NFS conversation, which might include
lock manager, status monitor, and mount packets, as well as NFS
packets.)
Currently, all we support is a call that takes the source and
destination address/port pairs, looks them up in a hash table, and:
if nothing is found, creates a new entry in the hash table, and
assigns it a unique 32-bit conversation ID, and returns that
conversation ID;
if an entry is found, returns its conversation ID.
Use that in the SMB and AFS code to keep track of individual SMB or AFS
conversations. We need to match up requests and replies, as, for
certain replies, the operation code for the request to which it's a
reply doesn't show up in the reply - you have to find the request with a
matching transaction ID. Transaction IDs are per-conversation, so the
hash table for requests should include a conversation ID and transaction
ID as the key.
This allows SMB and AFS decoders to handle IPv4 or IPv6 addresses
transparently (and should allow the SMB decoder to handle NetBIOS atop
other protocols as well, if the source and destination address and port
values in the "packet_info" structure are set appropriately).
In the "Follow TCP Connection" code, check to make sure that the
addresses are IPv4 addressses; ultimately, that code should be changed
to use the conversation code instead, which will let it handle IPv6
transparently.
svn path=/trunk/; revision=909
1999-10-22 07:18:23 +00:00
|
|
|
#define IP6H_CTL_FLOW 0
|
|
|
|
|
#define IP6H_CTL_PLEN 4
|
|
|
|
|
#define IP6H_CTL_NXT 6
|
|
|
|
|
#define IP6H_CTL_HLIM 7
|
|
|
|
|
#define IP6H_CTL_VFC 0
|
2008-02-24 21:04:42 +00:00
|
|
|
#define IP6H_SRC 8
|
|
|
|
|
#define IP6H_DST 24
|
Generalize the "ip_src" and "ip_dst" members of the "packet_info"
structure to "dl_src"/"dl_dst", "net_src"/"net_dst", and "src"/"dst"
addresses, where an address is an address type, an address length in
bytes, and a pointer to that many bytes.
"dl_{src,dst}" are the link-layer source/destination; "net_{src,dst}"
are the network-layer source/destination; "{src,dst}" are the
source/destination from the highest of those two layers that we have in
the packet.
Add a port type to "packet_info" as well, specifying whether it's a TCP
or UDP port.
Don't set the address and port columns in the dissector functions; just
set the address and port members of the "packet_info" structure. Set
the columns in "fill_in_columns()"; this means that if we're showing
COL_{DEF,RES,UNRES}_SRC" or "COL_{DEF,RES,UNRES}_DST", we only generate
the string from "src" or "dst", we don't generate a string for the
link-layer address and then overwrite it with a string for the
network-layer address (generating those strings costs CPU).
Add support for "conversations", where a "conversation" is (at present)
a source and destination address and a source and destination port. (In
the future, we may support "conversations" above the transport layer,
e.g. a TFTP conversation, where the first packet goes from the client to
the TFTP server port, but the reply comes back from a different port,
and all subsequent packets go between the client address/port and the
server address/new port, or an NFS conversation, which might include
lock manager, status monitor, and mount packets, as well as NFS
packets.)
Currently, all we support is a call that takes the source and
destination address/port pairs, looks them up in a hash table, and:
if nothing is found, creates a new entry in the hash table, and
assigns it a unique 32-bit conversation ID, and returns that
conversation ID;
if an entry is found, returns its conversation ID.
Use that in the SMB and AFS code to keep track of individual SMB or AFS
conversations. We need to match up requests and replies, as, for
certain replies, the operation code for the request to which it's a
reply doesn't show up in the reply - you have to find the request with a
matching transaction ID. Transaction IDs are per-conversation, so the
hash table for requests should include a conversation ID and transaction
ID as the key.
This allows SMB and AFS decoders to handle IPv4 or IPv6 addresses
transparently (and should allow the SMB decoder to handle NetBIOS atop
other protocols as well, if the source and destination address and port
values in the "packet_info" structure are set appropriately).
In the "Follow TCP Connection" code, check to make sure that the
addresses are IPv4 addressses; ultimately, that code should be changed
to use the conversation code instead, which will let it handle IPv6
transparently.
svn path=/trunk/; revision=909
1999-10-22 07:18:23 +00:00
|
|
|
|
1999-03-28 18:32:03 +00:00
|
|
|
#define IPV6_FLOWINFO_MASK 0x0fffffff /* flow info (28 bits) */
|
|
|
|
|
#define IPV6_FLOWLABEL_MASK 0x000fffff /* flow label (20 bits) */
|
|
|
|
|
|
|
|
|
|
/*
|
|
|
|
|
* Extension Headers
|
|
|
|
|
*/
|
|
|
|
|
|
|
|
|
|
struct ip6_ext {
|
2002-08-02 23:36:07 +00:00
|
|
|
guchar ip6e_nxt;
|
|
|
|
|
guchar ip6e_len;
|
1999-03-28 18:32:03 +00:00
|
|
|
};
|
|
|
|
|
|
|
|
|
|
/* Routing header */
|
|
|
|
|
struct ip6_rthdr {
|
|
|
|
|
guint8 ip6r_nxt; /* next header */
|
|
|
|
|
guint8 ip6r_len; /* length in units of 8 octets */
|
|
|
|
|
guint8 ip6r_type; /* routing type */
|
|
|
|
|
guint8 ip6r_segleft; /* segments left */
|
|
|
|
|
/* followed by routing type specific data */
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
/* Type 0 Routing header */
|
|
|
|
|
struct ip6_rthdr0 {
|
|
|
|
|
guint8 ip6r0_nxt; /* next header */
|
|
|
|
|
guint8 ip6r0_len; /* length in units of 8 octets */
|
|
|
|
|
guint8 ip6r0_type; /* always zero */
|
|
|
|
|
guint8 ip6r0_segleft; /* segments left */
|
|
|
|
|
guint8 ip6r0_reserved; /* reserved field */
|
|
|
|
|
guint8 ip6r0_slmap[3]; /* strict/loose bit map */
|
|
|
|
|
struct e_in6_addr ip6r0_addr[1]; /* up to 23 addresses */
|
|
|
|
|
};
|
|
|
|
|
|
|
|
|
|
/* Fragment header */
|
|
|
|
|
struct ip6_frag {
|
|
|
|
|
guint8 ip6f_nxt; /* next header */
|
|
|
|
|
guint8 ip6f_reserved; /* reserved field */
|
|
|
|
|
guint16 ip6f_offlg; /* offset, reserved, and flag */
|
|
|
|
|
guint32 ip6f_ident; /* identification */
|
|
|
|
|
};
|
|
|
|
|
|
2007-04-12 17:34:30 +00:00
|
|
|
/* SHIM6 control message types */
|
2008-02-24 21:04:42 +00:00
|
|
|
#define SHIM6_TYPE_I1 0x01 /* 0 000 0001 */
|
|
|
|
|
#define SHIM6_TYPE_R1 0x02 /* 0 000 0010 */
|
|
|
|
|
#define SHIM6_TYPE_I2 0x03 /* 0 000 0011 */
|
|
|
|
|
#define SHIM6_TYPE_R2 0x04 /* 0 000 0100 */
|
|
|
|
|
#define SHIM6_TYPE_R1BIS 0x05 /* 0 000 0101 */
|
|
|
|
|
#define SHIM6_TYPE_I2BIS 0x06 /* 0 000 0110 */
|
|
|
|
|
#define SHIM6_TYPE_UPD_REQ 0x40 /* 0 100 0000 = 64 */
|
|
|
|
|
#define SHIM6_TYPE_UPD_ACK 0x41 /* 0 100 0001 = 65 */
|
2007-04-12 17:34:30 +00:00
|
|
|
#define SHIM6_TYPE_KEEPALIVE 0x42 /* 0 100 0010 = 66 */
|
2008-02-24 21:04:42 +00:00
|
|
|
#define SHIM6_TYPE_PROBE 0x43 /* 0 100 0011 = 67 */
|
2007-04-12 17:34:30 +00:00
|
|
|
|
|
|
|
|
/* SHIM6 Options */
|
|
|
|
|
#define SHIM6_OPT_RESPVAL 0x01 /* 0 000 0001 */
|
|
|
|
|
#define SHIM6_OPT_LOCLIST 0x02 /* 0 000 0010 */
|
|
|
|
|
#define SHIM6_OPT_LOCPREF 0x03 /* 0 000 0011 */
|
|
|
|
|
#define SHIM6_OPT_CGAPDM 0x04 /* 0 000 0100 */
|
|
|
|
|
#define SHIM6_OPT_CGASIG 0x05 /* 0 000 0101 */
|
|
|
|
|
#define SHIM6_OPT_ULIDPAIR 0x06 /* 0 000 0110 */
|
|
|
|
|
#define SHIM6_OPT_FII 0x07 /* 0 000 0111 */
|
|
|
|
|
|
|
|
|
|
/* SHIM6 Bitmasks */
|
2008-02-24 21:04:42 +00:00
|
|
|
#define SHIM6_BITMASK_P 0x80 /* 1 000 0000 */
|
|
|
|
|
#define SHIM6_BITMASK_TYPE 0x7F /* 0 111 1111 */
|
2007-04-12 17:34:30 +00:00
|
|
|
#define SHIM6_BITMASK_PROTOCOL 0x01 /* 0 000 0001 */
|
|
|
|
|
#define SHIM6_BITMASK_SPECIFIC 0xFE /* 1 111 1110 */
|
2008-02-24 21:04:42 +00:00
|
|
|
#define SHIM6_BITMASK_R 0x80 /* 1 000 0000 */
|
|
|
|
|
#define SHIM6_BITMASK_CT 0x7F /* 0 111 1111 */
|
2007-04-12 17:34:30 +00:00
|
|
|
#define SHIM6_BITMASK_OPT_TYPE 0xFFFE /* 1 111 1111 1 111 1110 */
|
|
|
|
|
#define SHIM6_BITMASK_CRITICAL 0x01 /* 0 000 0001 */
|
|
|
|
|
#define SHIM6_BITMASK_PRECVD 0xF0 /* 1 111 0000 */
|
2008-02-24 21:04:42 +00:00
|
|
|
#define SHIM6_BITMASK_PSENT 0x0F /* 0 000 1111 */
|
|
|
|
|
#define SHIM6_BITMASK_STA 0xC0 /* 1 100 0000 */
|
2007-04-12 17:34:30 +00:00
|
|
|
|
|
|
|
|
/* SHIM6 Verification Methods */
|
2008-02-24 21:04:42 +00:00
|
|
|
#define SHIM6_VERIF_HBA 0x01 /* 0 000 0001 */
|
|
|
|
|
#define SHIM6_VERIF_CGA 0x02 /* 0 000 0010 */
|
2007-04-12 17:34:30 +00:00
|
|
|
|
|
|
|
|
/* SHIM6 Flags */
|
2008-02-24 21:04:42 +00:00
|
|
|
#define SHIM6_FLAG_BROKEN 0x01 /* 0 000 0001 */
|
2007-04-12 17:34:30 +00:00
|
|
|
#define SHIM6_FLAG_TEMPORARY 0x02 /* 0 000 0010 */
|
|
|
|
|
|
|
|
|
|
/* SHIM6 REAP States */
|
|
|
|
|
#define SHIM6_REAP_OPERATIONAL 0x00 /* 0 000 0000 */
|
|
|
|
|
#define SHIM6_REAP_EXPLORING 0x01 /* 0 000 0001 */
|
|
|
|
|
#define SHIM6_REAP_INBOUNDOK 0x02 /* 0 000 0010 */
|
|
|
|
|
|
|
|
|
|
/* SHIM6 header */
|
|
|
|
|
struct ip6_shim {
|
|
|
|
|
guint8 ip6s_nxt; /* next header */
|
|
|
|
|
guint8 ip6s_len; /* header extension length */
|
|
|
|
|
guint8 ip6s_p; /* P field and first 7 bits of remainder */
|
|
|
|
|
/* followed by shim6 specific data*/
|
|
|
|
|
};
|
|
|
|
|
|
1999-03-28 18:32:03 +00:00
|
|
|
#define IP6F_OFF_MASK 0xfff8 /* mask out offset from _offlg */
|
2012-06-19 20:20:18 +00:00
|
|
|
#define IP6F_OFF_SHIFT 3 /* right-shift offset by this many bits */
|
1999-03-28 18:32:03 +00:00
|
|
|
#define IP6F_RESERVED_MASK 0x0006 /* reserved bits in ip6f_offlg */
|
|
|
|
|
#define IP6F_MORE_FRAG 0x0001 /* more-fragments flag */
|
|
|
|
|
|
2013-09-11 17:39:49 +00:00
|
|
|
#ifdef __cplusplus
|
|
|
|
|
extern "C" {
|
|
|
|
|
#endif /* __cplusplus */
|
|
|
|
|
|
2002-10-22 22:04:23 +00:00
|
|
|
void capture_ipv6(const guchar *, int, int, packet_counts *);
|
|
|
|
|
|
2013-09-11 17:39:49 +00:00
|
|
|
#ifdef __cplusplus
|
|
|
|
|
}
|
|
|
|
|
#endif /* __cplusplus */
|
2002-10-22 22:04:23 +00:00
|
|
|
|
1999-03-28 18:32:03 +00:00
|
|
|
#endif /* __PACKET_IPV6_H_DEFINED__ */
|