/****************************************************************************
** File: llc.c
**
** Author: Mike Borella
**
** Comments: Dump LLC packets
**
** $Id: llc.c,v 1.5 2001/05/28 19:24:04 mborella Exp $
**
** This program is free software; you can redistribute it and/or modify
** it under the terms of the GNU General Public License as published by
** the Free Software Foundation; either version 2 of the License, or
** (at your option) any later version.
**
** This program is distributed in the hope that it will be useful,
** but WITHOUT ANY WARRANTY; without even the implied warranty of
** MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
** GNU Library General Public License for more details.
**
** You should have received a copy of the GNU General Public License
** along with this program; if not, write to the Free Software
** Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA 02111-1307, USA.
**
*****************************************************************************/
#include "global.h"
#include "llc.h"
#include "ipx.h"
extern struct arg_t *my_args;
/*----------------------------------------------------------------------------
**
** dump_llc()
**
** Process packets encapsulated in LLC
**
**----------------------------------------------------------------------------
*/
void dump_llc(packet_t *pkt)
{
llc_header_t llc;
u_int8_t org_id[3];
u_int16_t ethertype;
u_int8_t control;
/* Set the layer */
set_layer(LAYER_DATALINK);
/*
* Read the header
*/
if (get_packet_bytes((u_int8_t *) &llc, pkt, 2) == 0)
return;
/*
* Dump header
*/
if (my_args->m)
{
display_minimal_string("| LLC ");
display_minimal((u_int8_t *) &llc.dsap, 1, DISP_DEC);
display_minimal_string(" ");
display_minimal((u_int8_t *) &llc.ssap, 1, DISP_DEC);
display_minimal_string(" ");
}
else
{
/* announcement */
display_header_banner("LLC header");
display("DSAP", (u_int8_t *) &llc.dsap, 1, DISP_DEC);
display("SSAP", (u_int8_t *) &llc.ssap, 1, DISP_DEC);
}
/* check for IPX raw framing */
if (llc.dsap == 255 && llc.ssap == 255)
{
dump_ipx(pkt);
return;
}
/*
* At this point we know we have a control field, so get it
*/
if (get_packet_bytes((u_int8_t *) &control, pkt, 1) == 0)
return;
if (my_args->m)
{
display_minimal((u_int8_t *) &control, 1, DISP_DEC);
display_minimal_string(" ");
}
else
display("Control", (u_int8_t *) &control, 1, DISP_DEC);
/* check for NETBIOS logon */
if (llc.dsap == 240 && llc.ssap == 240)
{
/* dump_ipx(pkt); */
return;
}
/* check for IPX/NETBIOS encapsulation */
if (llc.dsap == 224 && llc.ssap == 224)
{
dump_ipx(pkt);
return;
}
/* check for SNAP (802.1a) encapsulation */
if (llc.dsap == 170 && llc.ssap == 170)
{
/* The next three bytes should be the organization id, which is
typically 0 */
if (get_packet_bytes((u_int8_t *) &org_id, pkt, 3) == 0)
return;
if (get_packet_bytes((u_int8_t *) ðertype, pkt, 2) == 0)
return;
/*
* Conversions
*/
ethertype = ntohs(ethertype);
/*
* Display fields
*/
if (my_args->m)
{
display_minimal_string("SNAP ");
display_minimal((u_int8_t *) ðertype, 2, DISP_HEX);
display_minimal_string(" ");
}
else
{
/* announcement */
display_header_banner("SNAP header");
display("Organization ID", (u_int8_t *) &org_id, 3, DISP_DEC);
display("Protocol", (u_int8_t *) ðertype, 2, DISP_DEC);
}
}
return;
}
syntax highlighted by Code2HTML, v. 0.9.1