gfwleak/common-tools-tcp-burst
Archived
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
This repository has been archived on 2025-09-14. You can view files and clone it, but cannot push or open issues or pull requests.
Files
a0436f126f022013236f45eecee982d921918767
common-tools-tcp-burst/src/tcpr.h
lijia f36a4fca25 copy from intranet.
2019-07-10 17:54:02 +08:00

1733 lines
57 KiB
C
Raw Blame History

/* $Id: tcpr.h 2423 2010-03-13 07:09:49Z aturner $ */
/*
* Copyright (c) 2006-2010 Aaron Turner.
* Copyright (c) 1998 - 2004 Mike D. Schiffman <mike@infonexus.com>
* All rights reserved.
*
* Redistribution and use in source and binary forms, with or without
* modification, are permitted provided that the following conditions
* are met:
*
* 1. Redistributions of source code must retain the above copyright
* notice, this list of conditions and the following disclaimer.
* 2. Redistributions in binary form must reproduce the above copyright
* notice, this list of conditions and the following disclaimer in the
* documentation and/or other materials provided with the distribution.
* 3. Neither the names of the copyright owners nor the names of its
* contributors may be used to endorse or promote products derived from
* this software without specific prior written permission.
*
* THIS SOFTWARE IS PROVIDED ``AS IS'' AND ANY EXPRESS OR IMPLIED
* WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF
* MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
* IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY
* DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
* DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE
* GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
* INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
* IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR
* OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF
* ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
*/
/*
* This header is heavily based off of (in other words basically stolen from)
* libnet 1.1.3's libnet-headers.h. Many thanks to Mike for doing all this
* work so I basically just needed to do a search and replace to get things
* to work.
*/
#include <sys/types.h>
#include <netinet/in.h>
#include <netinet/in_systm.h>
#ifndef _TCPR_H_
#define _TCPR_H_
#define ETHER_ADDR_LEN 0x6
#define FDDI_ADDR_LEN 0x6
#define TOKEN_RING_ADDR_LEN 0x6
#define TCPR_ORG_CODE_SIZE 0x3
/**
* Libnet defines header sizes for every builder function exported.
*/
#define TCPR_802_1Q_H 0x12 /**< 802.1Q header: 18 bytes */
#define TCPR_802_1X_H 0x04 /**< 802.1X header: 4 bytes */
#define TCPR_802_2_H 0x03 /**< 802.2 LLC header: 3 bytes */
#define TCPR_802_2SNAP_H 0x08 /**< 802.2 LLC/SNAP header:8 bytes */
#define TCPR_802_3_H 0x0e /**< 802.3 header: 14 bytes */
#define TCPR_ARP_H 0x08 /**< ARP header w/o addrs: 8 bytes */
#define TCPR_ARP_ETH_IP_H 0x1c /**< ARP w/ ETH and IP: 28 bytes */
#define TCPR_BGP4_HEADER_H 0x13 /**< BGP header: 19 bytes */
#define TCPR_BGP4_OPEN_H 0x0a /**< BGP open header: 10 bytes */
#define TCPR_BGP4_UPDATE_H 0x04 /**< BGP open header: 4 bytes */
#define TCPR_BGP4_NOTIFICATION_H 0x02 /**< BGP notif. header: 2 bytes */
#define TCPR_CDP_H 0x08 /**< CDP header base: 8 bytes */
#define TCPR_DHCPV4_H 0xf0 /**< DHCP v4 header: 240 bytes */
#define TCPR_UDP_DNSV4_H 0x0c /**< UDP DNS v4 header: 12 bytes */
#define TCPR_TCP_DNSV4_H 0x0e /**< TCP DNS v4 header: 14 bytes */
#define TCPR_ETH_H 0x0e /**< Ethernet header: 14 bytes */
#define TCPR_ETH_MTU 1500 /**< Ethernet MTU size: 1500 bytes */
#define TCPR_FDDI_H 0x15 /**< FDDI header: 21 bytes */
#define TCPR_ICMPV4_H 0x04 /**< ICMP header base: 4 bytes */
#define TCPR_ICMPV4_ECHO_H 0x08 /**< ICMP_ECHO header: 8 bytes */
#define TCPR_ICMPV4_MASK_H 0x0c /**< ICMP_MASK header: 12 bytes */
#define TCPR_ICMPV4_UNREACH_H 0x08 /**< ICMP_UNREACH header: 8 bytes */
#define TCPR_ICMPV4_TIMXCEED_H 0x08 /**< ICMP_TIMXCEED header: 8 bytes */
#define TCPR_ICMPV4_REDIRECT_H 0x08 /**< ICMP_REDIRECT header: 8 bytes */
#define TCPR_ICMPV4_TS_H 0x14 /**< ICMP_TIMESTAMP headr:20 bytes */
#define TCPR_ICMPV6_H 0x08 /**< ICMP6 header base: 8 bytes */
#define TCPR_IGMP_H 0x08 /**< IGMP header: 8 bytes */
#define TCPR_IPV4_H 0x14 /**< IPv4 header: 20 bytes */
#define TCPR_IPV6_H 0x28 /**< IPv6 header: 40 bytes */
#define TCPR_IPV6_FRAG_H 0x08 /**< IPv6 frag header: 8 bytes */
#define TCPR_IPV6_ROUTING_H 0x04 /**< IPv6 frag header base:4 bytes */
#define TCPR_IPV6_DESTOPTS_H 0x02 /**< IPv6 dest opts base: 2 bytes */
#define TCPR_IPV6_HBHOPTS_H 0x02 /**< IPv6 hop/hop opt base:2 bytes */
#define TCPR_IPSEC_ESP_HDR_H 0x0c /**< IPSEC ESP header: 12 bytes */
#define TCPR_IPSEC_ESP_FTR_H 0x02 /**< IPSEC ESP footer: 2 bytes */
#define TCPR_IPSEC_AH_H 0x10 /**< IPSEC AH header: 16 bytes */
#define TCPR_ISL_H 0x1a /**< ISL header: 26 bytes */
#define TCPR_GRE_H 0x04 /**< GRE header: 4 bytes */
#define TCPR_GRE_SRE_H 0x04 /**< GRE SRE header: 4 bytes */
#define TCPR_MPLS_H 0x04 /**< MPLS header: 4 bytes */
#define TCPR_OSPF_H 0x10 /**< OSPF header: 16 bytes */
#define TCPR_OSPF_HELLO_H 0x18 /**< OSPF hello header: 24 bytes */
#define TCPR_OSPF_DBD_H 0x08 /**< OSPF DBD header: 8 bytes */
#define TCPR_OSPF_LSR_H 0x0c /**< OSPF LSR header: 12 bytes */
#define TCPR_OSPF_LSU_H 0x04 /**< OSPF LSU header: 4 bytes */
#define TCPR_OSPF_LSA_H 0x14 /**< OSPF LSA header: 20 bytes */
#define TCPR_OSPF_AUTH_H 0x08 /**< OSPF AUTH header: 8 bytes */
#define TCPR_OSPF_CKSUM 0x10 /**< OSPF CKSUM header: 16 bytes */
#define TCPR_OSPF_LS_RTR_H 0x10 /**< OSPF LS RTR header: 16 bytes */
#define TCPR_OSPF_LS_NET_H 0x08 /**< OSPF LS NET header: 8 bytes */
#define TCPR_OSPF_LS_SUM_H 0x0c /**< OSPF LS SUM header: 12 bytes */
#define TCPR_OSPF_LS_AS_EXT_H 0x10 /**< OSPF LS AS header: 16 bytes */
#define TCPR_NTP_H 0x30 /**< NTP header: 48 bytes */
#define TCPR_RIP_H 0x18 /**< RIP header base: 24 bytes */
#define TCPR_RPC_CALL_H 0x28 /**< RPC header: 40 bytes
* (assuming 8 byte auth header)
*/
#define TCPR_RPC_CALL_TCP_H 0x2c /**< RPC header: 44 bytes
* (with record marking)
*/
#define TCPR_SEBEK_H 0x30 /* sebek header: 48 bytes */
#define TCPR_STP_CONF_H 0x23 /**< STP conf header: 35 bytes */
#define TCPR_STP_TCN_H 0x04 /**< STP tcn header: 4 bytes */
#define TCPR_TOKEN_RING_H 0x16 /**< Token Ring header: 22 bytes */
#define TCPR_TCP_H 0x14 /**< TCP header: 20 bytes */
#define TCPR_UDP_H 0x08 /**< UDP header: 8 bytes */
#define TCPR_VRRP_H 0x08 /**< VRRP header: 8 bytes */
#define TCPR_HSRP_H 0x14 /**< HSRP header: 8 bytes */
/**
* IEEE 802.1Q (Virtual Local Area Network) VLAN header, static header
* size: 8 bytes
*/
struct tcpr_802_1q_hdr
{
u_int8_t vlan_dhost[ETHER_ADDR_LEN]; /**< destination ethernet address */
u_int8_t vlan_shost[ETHER_ADDR_LEN]; /**< source ethernet address */
u_int16_t vlan_tpi; /**< tag protocol ID */
u_int16_t vlan_priority_c_vid; /**< priority | VLAN ID */
#define TCPR_802_1Q_PRIMASK 0x0007 /**< priority mask */
#define TCPR_802_1Q_CFIMASK 0x0001 /**< CFI mask */
#define TCPR_802_1Q_VIDMASK 0x0fff /**< vid mask */
u_int16_t vlan_len; /**< length or type (802.3 / Eth 2) */
};
/**
* IEEE 802.1X EAP (Extensible Authentication Protocol) header, static header
* size: 4 bytes
*/
struct tcpr_802_1x_hdr
{
u_int8_t dot1x_version; /**< protocol version */
u_int8_t dot1x_type; /**< frame type */
#define TCPR_802_1X_PACKET 0x00 /**< 802.1x packet */
#define TCPR_802_1X_START 0x01 /**< 802.1x start */
#define TCPR_802_1X_LOGOFF 0x02 /**< 802.1x logoff */
#define TCPR_802_1X_KEY 0x03 /**< 802.1x key */
#define TCPR_802_1X_ENCASFAL 0x04 /**< 802.1x encasfal */
u_int16_t dot1x_length; /**< total frame length */
};
/*
* IEEE 802.2 LLC header
* Link Layer Control
* static header size: 4 bytes
*/
struct tcpr_802_2_hdr
{
u_int8_t llc_dsap; /* destination service access point */
u_int8_t llc_ssap; /* source service access point */
#define TCPR_SAP_STP 0x42
#define TCPR_SAP_SNAP 0xaa
u_int16_t llc_control; /* control field */
};
/*
* IEEE 802.2 LLC/SNAP header
* SubNetwork Attachment Point
* static header size: 8 bytes
*/
struct tcpr_802_2snap_hdr
{
u_int8_t snap_dsap; /* destination service access point */
u_int8_t snap_ssap; /* destination service access point */
u_int8_t snap_control; /* control field */
u_int8_t snap_oui[3]; /* OUI */
u_int16_t snap_type; /* type */
};
/*
* 802.3 header
* IEEE Ethernet
* Static header size: 14 bytes
*/
struct tcpr_802_3_hdr
{
u_int8_t _802_3_dhost[ETHER_ADDR_LEN];/* destination ethernet address */
u_int8_t _802_3_shost[ETHER_ADDR_LEN];/* source ethernet address */
u_int16_t _802_3_len; /* packet type ID */
};
/*
* ARP header
* Address Resolution Protocol
* Base header size: 8 bytes
*/
struct tcpr_arp_hdr
{
u_int16_t ar_hrd; /* format of hardware address */
#define ARPHRD_NETROM 0 /* from KA9Q: NET/ROM pseudo */
#define ARPHRD_ETHER 1 /* Ethernet 10Mbps */
#define ARPHRD_EETHER 2 /* Experimental Ethernet */
#define ARPHRD_AX25 3 /* AX.25 Level 2 */
#define ARPHRD_PRONET 4 /* PROnet token ring */
#define ARPHRD_CHAOS 5 /* Chaosnet */
#define ARPHRD_IEEE802 6 /* IEEE 802.2 Ethernet/TR/TB */
#define ARPHRD_ARCNET 7 /* ARCnet */
#define ARPHRD_APPLETLK 8 /* APPLEtalk */
#define ARPHRD_LANSTAR 9 /* Lanstar */
#define ARPHRD_DLCI 15 /* Frame Relay DLCI */
#define ARPHRD_ATM 19 /* ATM */
#define ARPHRD_METRICOM 23 /* Metricom STRIP (new IANA id) */
#define ARPHRD_IPSEC 31 /* IPsec tunnel */
u_int16_t ar_pro; /* format of protocol address */
u_int8_t ar_hln; /* length of hardware address */
u_int8_t ar_pln; /* length of protocol addres */
u_int16_t ar_op; /* operation type */
#define ARPOP_REQUEST 1 /* req to resolve address */
#define ARPOP_REPLY 2 /* resp to previous request */
#define ARPOP_REVREQUEST 3 /* req protocol address given hardware */
#define ARPOP_REVREPLY 4 /* resp giving protocol address */
#define ARPOP_INVREQUEST 8 /* req to identify peer */
#define ARPOP_INVREPLY 9 /* resp identifying peer */
/* address information allocated dynamically */
};
/*
* BGP4 header
* Border Gateway Protocol 4
* Base header size : 19 bytes
*/
struct tcpr_bgp4_header_hdr
{
#define TCPR_BGP4_MARKER_SIZE 16
u_int8_t marker[TCPR_BGP4_MARKER_SIZE];
u_int16_t len;
u_int8_t type;
#define TCPR_BGP4_OPEN 1
#define TCPR_BGP4_UPDATE 2
#define TCPR_BGP4_NOTIFICATION 3
#define TCPR_BGP4_KEEPALIVE 4
};
/*
* BGP4 open header
* Border Gateway Protocol 4
* Base header size : 10 bytes
*/
struct tcpr_bgp4_open_hdr
{
u_int8_t version;
u_int16_t src_as;
u_int16_t hold_time;
u_int32_t bgp_id;
u_int8_t opt_len;
};
/*
* BGP4 notification message
*
* Border Gateway Protocol 4
* Base header size : 2 bytes
*
* Use payload if you need data
*/
struct tcpr_bgp4_notification_hdr
{
#define TCPR_BGP4_MESSAGE_HEADER_ERROR 1
#define TCPR_BGP4_OPEN_MESSAGE_ERROR 2
#define TCPR_BGP4_UPDATE_MESSAGE_ERROR 3
#define TCPR_BGP4_HOLD_TIMER_EXPIRED 4
#define TCPR_BGP4_FINITE_STATE__ERROR 5
#define TCPR_BGP4_CEASE 6
u_int8_t err_code;
/* Message Header Error subcodes */
#define TCPR_BGP4_CONNECTION_NOT_SYNCHRONIZED 1
#define TCPR_BGP4_BAD_MESSAGE_LENGTH 2
#define TCPR_BGP4_BAD_MESSAGE_TYPE 3
/* OPEN Message Error subcodes */
#define TCPR_BGP4_UNSUPPORTED_VERSION_NUMBER 1
#define TCPR_BGP4_BAD_PEER_AS 2
#define TCPR_BGP4_BAD_BGP_IDENTIFIER 3
#define TCPR_BGP4_UNSUPPORTED_OPTIONAL_PARAMETER 4
#define TCPR_BGP4_AUTHENTICATION_FAILURE 5
#define TCPR_BGP4_UNACCEPTABLE_HOLD_TIME 6
/* UPDATE Message Error subcodes */
#define TCPR_BGP4_MALFORMED_ATTRIBUTE_LIST
#define TCPR_BGP4_UNRECOGNIZED_WELL_KNOWN_ATTRIBUTE
#define TCPR_BGP4_MISSING_WELL_KNOWN_ATTRIBUTE
#define TCPR_BGP4_ATTRIBUTE_FLAGS_ERROR
#define TCPR_BGP4_ATTRIBUTE_LENGTH_ERROR
#define TCPR_BGP4_INVALID_ORIGIN_ATTRIBUTE
#define TCPR_BGP4_AS_ROUTING_LOOP
#define TCPR_BGP4_INVALID_NEXT_HOP_ATTRIBUTE
#define TCPR_BGP4_OPTIONAL_ATTRIBUTE_ERROR
#define TCPR_BGP4_INVALID_NETWORK_FIELD
#define TCPR_BGP4_MALFORMED_AS_PATH
u_int8_t err_subcode;
};
/*
* CDP header
* Cisco Discovery Protocol
* Base header size: 8 bytes
*/
/*
* For checksum stuff -- IANA says 135-254 is "unassigned" as of 12.2001.
* Let's hope this one stays that way for a while!
*/
#define TCPR_PROTO_CDP 200
struct tcpr_cdp_hdr
{
u_int8_t cdp_version; /* version (should always be 0x01) */
u_int8_t cdp_ttl; /* time reciever should hold info in this packet */
u_int16_t cdp_sum; /* checksum */
u_int16_t cdp_type; /* type */
#define TCPR_CDP_DEVID 0x1 /* device id */
#define TCPR_CDP_ADDRESS 0x2 /* address */
#define TCPR_CDP_PORTID 0x3 /* port id */
#define TCPR_CDP_CAPABIL 0x4 /* capabilities */
#define TCPR_CDP_VERSION 0x5 /* version */
#define TCPR_CDP_PLATFORM 0x6 /* platform */
#define TCPR_CDP_IPPREFIX 0x7 /* ip prefix */
u_int16_t cdp_len; /* type + length + value */
/* value information done dynamically */
/* CDP capabilities */
#define TCPR_CDP_CAP_L3R 0x01/* performs level 3 routing */
#define TCPR_CDP_CAP_L2B 0x02/* performs level 2 transparent bridging */
#define TCPR_CDP_CAP_L2SRB 0x04/* performs level 2 sourceroute bridging */
#define TCPR_CDP_CAP_L2S 0x08/* performs level 2 switching */
#define TCPR_CDP_CAP_SR 0x10/* sends and recieves packets on a network */
#define TCPR_CDP_CAP_NOI 0x20/* does not forward IGMP on non-router ports */
#define TCPR_CDP_CAP_L1F 0x40/* provides level 1 functionality */
};
/*
* Used as an overlay for type/len/values
*/
struct tcpr_cdp_value_hdr
{
u_int16_t cdp_type;
u_int16_t cdp_len;
};
/*
* DHCP header
* Dynamic Host Configuration Protocol
* Static header size: f0 bytes
*/
struct tcpr_dhcpv4_hdr
{
u_int8_t dhcp_opcode; /* opcode */
#define TCPR_DHCP_REQUEST 0x1
#define TCPR_DHCP_REPLY 0x2
u_int8_t dhcp_htype; /* hardware address type */
u_int8_t dhcp_hlen; /* hardware address length */
u_int8_t dhcp_hopcount; /* used by proxy servers */
u_int32_t dhcp_xid; /* transaction ID */
u_int16_t dhcp_secs; /* number of seconds since trying to bootstrap */
u_int16_t dhcp_flags; /* flags for DHCP, unused for BOOTP */
u_int32_t dhcp_cip; /* client's IP */
u_int32_t dhcp_yip; /* your IP */
u_int32_t dhcp_sip; /* server's IP */
u_int32_t dhcp_gip; /* gateway IP */
u_int8_t dhcp_chaddr[16]; /* client hardware address */
u_int8_t dhcp_sname[64]; /* server host name */
u_int8_t dhcp_file[128]; /* boot file name */
u_int32_t dhcp_magic; /* BOOTP magic header */
#define DHCP_MAGIC 0x63825363
#define TCPR_BOOTP_MIN_LEN 0x12c
#define TCPR_DHCP_PAD 0x00
#define TCPR_DHCP_SUBNETMASK 0x01
#define TCPR_DHCP_TIMEOFFSET 0x02
#define TCPR_DHCP_ROUTER 0x03
#define TCPR_DHCP_TIMESERVER 0x04
#define TCPR_DHCP_NAMESERVER 0x05
#define TCPR_DHCP_DNS 0x06
#define TCPR_DHCP_LOGSERV 0x07
#define TCPR_DHCP_COOKIESERV 0x08
#define TCPR_DHCP_LPRSERV 0x09
#define TCPR_DHCP_IMPSERV 0x0a
#define TCPR_DHCP_RESSERV 0x0b
#define TCPR_DHCP_HOSTNAME 0x0c
#define TCPR_DHCP_BOOTFILESIZE 0x0d
#define TCPR_DHCP_DUMPFILE 0x0e
#define TCPR_DHCP_DOMAINNAME 0x0f
#define TCPR_DHCP_SWAPSERV 0x10
#define TCPR_DHCP_ROOTPATH 0x11
#define TCPR_DHCP_EXTENPATH 0x12
#define TCPR_DHCP_IPFORWARD 0x13
#define TCPR_DHCP_SRCROUTE 0x14
#define TCPR_DHCP_POLICYFILTER 0x15
#define TCPR_DHCP_MAXASMSIZE 0x16
#define TCPR_DHCP_IPTTL 0x17
#define TCPR_DHCP_MTUTIMEOUT 0x18
#define TCPR_DHCP_MTUTABLE 0x19
#define TCPR_DHCP_MTUSIZE 0x1a
#define TCPR_DHCP_LOCALSUBNETS 0x1b
#define TCPR_DHCP_BROADCASTADDR 0x1c
#define TCPR_DHCP_DOMASKDISCOV 0x1d
#define TCPR_DHCP_MASKSUPPLY 0x1e
#define TCPR_DHCP_DOROUTEDISC 0x1f
#define TCPR_DHCP_ROUTERSOLICIT 0x20
#define TCPR_DHCP_STATICROUTE 0x21
#define TCPR_DHCP_TRAILERENCAP 0x22
#define TCPR_DHCP_ARPTIMEOUT 0x23
#define TCPR_DHCP_ETHERENCAP 0x24
#define TCPR_DHCP_TCPTTL 0x25
#define TCPR_DHCP_TCPKEEPALIVE 0x26
#define TCPR_DHCP_TCPALIVEGARBAGE 0x27
#define TCPR_DHCP_NISDOMAIN 0x28
#define TCPR_DHCP_NISSERVERS 0x29
#define TCPR_DHCP_NISTIMESERV 0x2a
#define TCPR_DHCP_VENDSPECIFIC 0x2b
#define TCPR_DHCP_NBNS 0x2c
#define TCPR_DHCP_NBDD 0x2d
#define TCPR_DHCP_NBTCPIP 0x2e
#define TCPR_DHCP_NBTCPSCOPE 0x2f
#define TCPR_DHCP_XFONT 0x30
#define TCPR_DHCP_XDISPLAYMGR 0x31
#define TCPR_DHCP_DISCOVERADDR 0x32
#define TCPR_DHCP_LEASETIME 0x33
#define TCPR_DHCP_OPTIONOVERLOAD 0x34
#define TCPR_DHCP_MESSAGETYPE 0x35
#define TCPR_DHCP_SERVIDENT 0x36
#define TCPR_DHCP_PARAMREQUEST 0x37
#define TCPR_DHCP_MESSAGE 0x38
#define TCPR_DHCP_MAXMSGSIZE 0x39
#define TCPR_DHCP_RENEWTIME 0x3a
#define TCPR_DHCP_REBINDTIME 0x3b
#define TCPR_DHCP_CLASSSID 0x3c
#define TCPR_DHCP_CLIENTID 0x3d
#define TCPR_DHCP_NISPLUSDOMAIN 0x40
#define TCPR_DHCP_NISPLUSSERVERS 0x41
#define TCPR_DHCP_MOBILEIPAGENT 0x44
#define TCPR_DHCP_SMTPSERVER 0x45
#define TCPR_DHCP_POP3SERVER 0x46
#define TCPR_DHCP_NNTPSERVER 0x47
#define TCPR_DHCP_WWWSERVER 0x48
#define TCPR_DHCP_FINGERSERVER 0x49
#define TCPR_DHCP_IRCSERVER 0x4a
#define TCPR_DHCP_STSERVER 0x4b
#define TCPR_DHCP_STDASERVER 0x4c
#define TCPR_DHCP_END 0xff
#define TCPR_DHCP_MSGDISCOVER 0x01
#define TCPR_DHCP_MSGOFFER 0x02
#define TCPR_DHCP_MSGREQUEST 0x03
#define TCPR_DHCP_MSGDECLINE 0x04
#define TCPR_DHCP_MSGACK 0x05
#define TCPR_DHCP_MSGNACK 0x06
#define TCPR_DHCP_MSGRELEASE 0x07
#define TCPR_DHCP_MSGINFORM 0x08
};
/*
* Base DNSv4 header
* Domain Name System
* Base header size: 12/14 bytes
*/
struct tcpr_dnsv4_hdr
{
u_int16_t h_len; /* length of the packet - only used with TCP */
u_int16_t id; /* DNS packet ID */
u_int16_t flags; /* DNS flags */
u_int16_t num_q; /* Number of questions */
u_int16_t num_answ_rr; /* Number of answer resource records */
u_int16_t num_auth_rr; /* Number of authority resource records */
u_int16_t num_addi_rr; /* Number of additional resource records */
};
#define TCPR_DNS_H TCPR_UDP_DNSV4_H
struct tcpr_dnsv4udp_hdr
{
u_int16_t id; /* DNS packet ID */
u_int16_t flags; /* DNS flags */
u_int16_t num_q; /* Number of questions */
u_int16_t num_answ_rr; /* Number of answer resource records */
u_int16_t num_auth_rr; /* Number of authority resource records */
u_int16_t num_addi_rr; /* Number of additional resource records */
};
/*
* Ethernet II header
* Static header size: 14 bytes
*/
struct tcpr_ethernet_hdr
{
u_int8_t ether_dhost[ETHER_ADDR_LEN];/* destination ethernet address */
u_int8_t ether_shost[ETHER_ADDR_LEN];/* source ethernet address */
u_int16_t ether_type; /* protocol */
};
#ifndef ETHERTYPE_PUP
#define ETHERTYPE_PUP 0x0200 /* PUP protocol */
#endif
#ifndef ETHERTYPE_IP
#define ETHERTYPE_IP 0x0800 /* IP protocol */
#endif
#ifndef ETHERTYPE_ARP
#define ETHERTYPE_ARP 0x0806 /* addr. resolution protocol */
#endif
#ifndef ETHERTYPE_REVARP
#define ETHERTYPE_REVARP 0x8035 /* reverse addr. resolution protocol */
#endif
#ifndef ETHERTYPE_VLAN
#define ETHERTYPE_VLAN 0x8100 /* IEEE 802.1Q VLAN tagging */
#endif
#ifndef ETHERTYPE_EAP
#define ETHERTYPE_EAP 0x888e /* IEEE 802.1X EAP authentication */
#endif
#ifndef ETHERTYPE_MPLS
#define ETHERTYPE_MPLS 0x8847 /* MPLS */
#endif
#ifndef ETHERTYPE_LOOPBACK
#define ETHERTYPE_LOOPBACK 0x9000 /* used to test interfaces */
#endif
#ifndef ETHERTYPE_IP6
#define ETHERTYPE_IP6 0x86DD /* IPv6 */
#endif
struct tcpr_ether_addr
{
u_int8_t ether_addr_octet[6]; /* Ethernet address */
};
/*
* Fiber Distributed Data Interface header
*
* Static header size: 21 bytes (LLC and 48-bit address addr only)
*
* Note: Organization field is 3 bytes which throws off the
* alignment of type. Therefore fddi_type (19 bytes in)
* is specified as two u_int8_ts.
*/
struct tcpr_fddi_hdr
{
u_int8_t fddi_frame_control; /* Class/Format/Priority */
#define TCPR_FDDI_LLC_FRAME 0x10
#define TCPR_FDDI_48BIT_ADDR 0x40
#define TCPR_FDDI_FC_REQD TCPR_FDDI_LLC_FRAME | TCPR_FDDI_48BIT_ADDR
u_int8_t fddi_dhost[FDDI_ADDR_LEN]; /* destination fddi address */
u_int8_t fddi_shost[FDDI_ADDR_LEN]; /* source fddi address */
u_int8_t fddi_llc_dsap; /* DSAP */
u_int8_t fddi_llc_ssap; /* SSAP */
u_int8_t fddi_llc_control_field; /* Class/Format/Priority */
u_int8_t fddi_llc_org_code[TCPR_ORG_CODE_SIZE]; /* Organization Code 3-bytes */
u_int8_t fddi_type; /* Protocol Type */
u_int8_t fddi_type1; /* see note above. */
#define FDDI_TYPE_IP 0x0800 /* IP protocol */
#define FDDI_TYPE_ARP 0x0806 /* addr. resolution protocol */
#define FDDI_TYPE_REVARP 0x8035 /* reverse addr. resolution protocol */
};
struct tcpr_fddi_addr
{
u_int8_t fddi_addr_octet[6]; /* FDDI address */
};
/*
* GRE header - RFC 1701 & 2637
* Generic Routing Encapsulation (GRE)
* Base header size: 4 bytes
*/
struct tcpr_gre_hdr
{
u_int16_t flags_ver;
#define GRE_CSUM 0x8000
#define GRE_ROUTING 0x4000
#define GRE_KEY 0x2000
#define GRE_SEQ 0x1000
#define GRE_STRICT 0x0800
#define GRE_REC 0x0700
#define GRE_ACK 0x0080
#define GRE_FLAGS_MASK 0x00F8
#define GRE_VERSION_MASK 0x0007
#define GRE_VERSION_0 0x0000
#define GRE_VERSION_1 0x0001
u_int16_t type;
#define GRE_SNA 0x0004
#define GRE_OSI_NETWORK_LAYER 0x00FE
#define GRE_PUP 0x0200
#define GRE_XNS 0x0600
#define GRE_IP 0x0800
#define GRE_CHAOS 0x0804
#define GRE_RFC_826_ARP 0x0806
#define GRE_FRAME_RELAY_ARP 0x0808
#define GRE_VINES 0x0BAD
#define GRE_VINES_ECHO 0x0BAE
#define GRE_VINES_LOOPBACK 0x0BAF
#define GRE_DECNET 0x6003
#define GRE_TRANSPARENT_ETHERNET_BRIDGING 0x6558
#define GRE_RAW_FRAME_RELAY 0x6559
#define GRE_APOLLO_DOMAIN 0x8019
#define GRE_ETHERTALK 0x809B
#define GRE_NOVELL_IPX 0x8137
#define GRE_RFC_1144_TCP_IP_COMPRESSION 0x876B
#define GRE_IP_AUTONOMOUS_SYSTEMS 0x876C
#define GRE_SECURE_DATA 0x876D
#define GRE_PPP 0x880b /* taken from RFC 2637 */
union {
struct {
u_int16_t sum; /* optional */
u_int16_t offset; /* optional */
u_int32_t key; /* optional */
u_int32_t seq; /* optional */
} _gre;
struct {
u_int16_t payload_s; /* optional */
u_int16_t callID; /* optional */
u_int32_t seq; /* optional */
u_int32_t ack; /* optional */
} _egre;
}_data;
#define gre_sum _data._gre.sum
#define gre_offset _data._gre.offset
#define gre_key _data._gre.key
#define gre_seq _data._gre.seq
#define egre_payload_s _data._egre.payload_s
#define egre_callID _data._egre.callID
#define egre_seq _data._egre.seq
#define egre_ack _data._egre.ack
};
#ifndef IPPROTO_GRE
#define IPPROTO_GRE 47
#endif
/*
* Source Route Entries (SRE)
* This is used for GRE as the Routing field is a list of SREs - RFC 1701
* Base header size: 4 bytes
*/
struct tcpr_gre_sre_hdr
{
u_int16_t af; /* address familly */
u_int8_t sre_offset;
u_int8_t sre_length;
u_int8_t *routing;
};
/*
* IPv4 header
* Internet Protocol, version 4
* Static header size: 20 bytes
*/
struct tcpr_ipv4_hdr
{
#ifdef WORDS_BIGENDIAN
u_int8_t ip_v:4, /* version */
ip_hl:4; /* header length */
#else
u_int8_t ip_hl:4, /* header length */
ip_v:4; /* version */
#endif
u_int8_t ip_tos; /* type of service */
#ifndef IPTOS_LOWDELAY
#define IPTOS_LOWDELAY 0x10
#endif
#ifndef IPTOS_THROUGHPUT
#define IPTOS_THROUGHPUT 0x08
#endif
#ifndef IPTOS_RELIABILITY
#define IPTOS_RELIABILITY 0x04
#endif
#ifndef IPTOS_LOWCOST
#define IPTOS_LOWCOST 0x02
#endif
u_int16_t ip_len; /* total length */
u_int16_t ip_id; /* identification */
u_int16_t ip_off;
#ifndef IP_RF
#define IP_RF 0x8000 /* reserved fragment flag */
#endif
#ifndef IP_DF
#define IP_DF 0x4000 /* dont fragment flag */
#endif
#ifndef IP_MF
#define IP_MF 0x2000 /* more fragments flag */
#endif
#ifndef IP_OFFMASK
#define IP_OFFMASK 0x1fff /* mask for fragmenting bits */
#endif
u_int8_t ip_ttl; /* time to live */
u_int8_t ip_p; /* protocol */
u_int16_t ip_sum; /* checksum */
struct in_addr ip_src, ip_dst; /* source and dest address */
};
/*
* IP options
*/
#ifndef IPOPT_EOL
#define IPOPT_EOL 0 /* end of option list */
#endif
#ifndef IPOPT_NOP
#define IPOPT_NOP 1 /* no operation */
#endif
#ifndef IPOPT_RR
#define IPOPT_RR 7 /* record packet route */
#endif
#ifndef IPOPT_TS
#define IPOPT_TS 68 /* timestamp */
#endif
#ifndef IPOPT_SECURITY
#define IPOPT_SECURITY 130 /* provide s,c,h,tcc */
#endif
#ifndef IPOPT_LSRR
#define IPOPT_LSRR 131 /* loose source route */
#endif
#ifndef IPOPT_SATID
#define IPOPT_SATID 136 /* satnet id */
#endif
#ifndef IPOPT_SSRR
#define IPOPT_SSRR 137 /* strict source route */
#endif
struct tcpr_in6_addr
{
union
{
u_int8_t __u6_addr8[16];
u_int16_t __u6_addr16[8];
u_int32_t __u6_addr32[4];
} __u6_addr; /* 128-bit IP6 address */
};
#define tcpr_s6_addr __u6_addr.__u6_addr8
#define tcpr_s6_addr8 __u6_addr.__u6_addr8
#define tcpr_s6_addr16 __u6_addr.__u6_addr16
#define tcpr_s6_addr32 __u6_addr.__u6_addr32
/*
* IPv6 header
* Internet Protocol, version 6
* Static header size: 40 bytes
*/
struct tcpr_ipv6_hdr
{
u_int8_t ip_flags[4]; /* version, traffic class, flow label */
u_int16_t ip_len; /* total length */
u_int8_t ip_nh; /* next header */
u_int8_t ip_hl; /* hop limit */
struct tcpr_in6_addr ip_src, ip_dst; /* source and dest address */
};
struct tcpr_ipv6_ext_hdr_base
{
u_int8_t ip_nh; /* next header */
u_int8_t ip_len; /* length of header in 8 octet units (sans 1st) */
/* some more bytes are always here, but we don't know what kind */
};
#define TCPR_IPV6_NH_NO_NEXT 59
#define TCPR_IPV6_NH_IPV6 41
#define TCPR_IPV6_NH_ESP 50
#define TCPR_IPV6_NH_AH 51
/*
* IPv6 frag header
* Internet Protocol, version 6
* Static header size: 8 bytes
*/
#define TCPR_IPV6_NH_FRAGMENT 44
struct tcpr_ipv6_frag_hdr
{
u_int8_t ip_nh; /* next header */
u_int8_t ip_reserved; /* reserved */
u_int16_t ip_frag; /* fragmentation stuff */
u_int32_t ip_id; /* id */
};
/*
* IPv6 routing header
* Internet Protocol, version 6
* Base header size: 4 bytes
*/
#define TCPR_IPV6_NH_ROUTING 43
struct tcpr_ipv6_routing_hdr
{
u_int8_t ip_nh; /* next header */
u_int8_t ip_len; /* length of header in 8 octet units (sans 1st) */
u_int8_t ip_rtype; /* routing type */
u_int8_t ip_segments; /* segments left */
/* routing information allocated dynamically */
};
/*
* IPv6 destination options header
* Internet Protocol, version 6
* Base header size: 2 bytes
*/
#define TCPR_IPV6_NH_DESTOPTS 60
struct tcpr_ipv6_destopts_hdr
{
u_int8_t ip_nh; /* next header */
u_int8_t ip_len; /* length of header in 8 octet units (sans 1st) */
/* destination options information allocated dynamically */
};
/*
* IPv6 hop by hop options header
* Internet Protocol, version 6
* Base header size: 2 bytes
*/
#define TCPR_IPV6_NH_HBH 0
struct tcpr_ipv6_hbhopts_hdr
{
u_int8_t ip_nh; /* next header */
u_int8_t ip_len; /* length of header in 8 octet units (sans 1st) */
/* destination options information allocated dynamically */
};
/*
* ICMP6 header
* Internet Control Message Protocol v6
* Base header size: 8 bytes
*/
#ifndef IPPROTO_ICMP6
#define IPPROTO_ICMP6 0x3a
#endif
struct tcpr_icmpv6_hdr
{
u_int8_t icmp_type; /* ICMP type */
#ifndef ICMP6_ECHO
#define ICMP6_ECHO 128
#endif
#ifndef ICMP6_ECHOREPLY
#define ICMP6_ECHOREPLY 129
#endif
#ifndef ICMP6_UNREACH
#define ICMP6_UNREACH 1
#endif
#ifndef ICMP6_PKTTOOBIG
#define ICMP6_PKTTOOBIG 2
#endif
#ifndef ICMP6_TIMXCEED
#define ICMP6_TIMXCEED 3
#endif
#ifndef ICMP6_PARAMPROB
#define ICMP6_PARAMPROB 4
#endif
u_int8_t icmp_code; /* ICMP code */
u_int16_t icmp_sum; /* ICMP Checksum */
u_int16_t id; /* ICMP id */
u_int16_t seq; /* ICMP sequence number */
};
/*
* ICMP header
* Internet Control Message Protocol
* Base header size: 4 bytes
*/
struct tcpr_icmpv4_hdr
{
u_int8_t icmp_type; /* ICMP type */
#ifndef ICMP_ECHOREPLY
#define ICMP_ECHOREPLY 0
#endif
#ifndef ICMP_UNREACH
#define ICMP_UNREACH 3
#endif
#ifndef ICMP_SOURCEQUENCH
#define ICMP_SOURCEQUENCH 4
#endif
#ifndef ICMP_REDIRECT
#define ICMP_REDIRECT 5
#endif
#ifndef ICMP_ECHO
#define ICMP_ECHO 8
#endif
#ifndef ICMP_ROUTERADVERT
#define ICMP_ROUTERADVERT 9
#endif
#ifndef ICMP_ROUTERSOLICIT
#define ICMP_ROUTERSOLICIT 10
#endif
#ifndef ICMP_TIMXCEED
#define ICMP_TIMXCEED 11
#endif
#ifndef ICMP_PARAMPROB
#define ICMP_PARAMPROB 12
#endif
#ifndef ICMP_TSTAMP
#define ICMP_TSTAMP 13
#endif
#ifndef ICMP_TSTAMPREPLY
#define ICMP_TSTAMPREPLY 14
#endif
#ifndef ICMP_IREQ
#define ICMP_IREQ 15
#endif
#ifndef ICMP_IREQREPLY
#define ICMP_IREQREPLY 16
#endif
#ifndef ICMP_MASKREQ
#define ICMP_MASKREQ 17
#endif
#ifndef ICMP_MASKREPLY
#define ICMP_MASKREPLY 18
#endif
u_int8_t icmp_code; /* ICMP code */
#ifndef ICMP_UNREACH_NET
#define ICMP_UNREACH_NET 0
#endif
#ifndef ICMP_UNREACH_HOST
#define ICMP_UNREACH_HOST 1
#endif
#ifndef ICMP_UNREACH_PROTOCOL
#define ICMP_UNREACH_PROTOCOL 2
#endif
#ifndef ICMP_UNREACH_PORT
#define ICMP_UNREACH_PORT 3
#endif
#ifndef ICMP_UNREACH_NEEDFRAG
#define ICMP_UNREACH_NEEDFRAG 4
#endif
#ifndef ICMP_UNREACH_SRCFAIL
#define ICMP_UNREACH_SRCFAIL 5
#endif
#ifndef ICMP_UNREACH_NET_UNKNOWN
#define ICMP_UNREACH_NET_UNKNOWN 6
#endif
#ifndef ICMP_UNREACH_HOST_UNKNOWN
#define ICMP_UNREACH_HOST_UNKNOWN 7
#endif
#ifndef ICMP_UNREACH_ISOLATED
#define ICMP_UNREACH_ISOLATED 8
#endif
#ifndef ICMP_UNREACH_NET_PROHIB
#define ICMP_UNREACH_NET_PROHIB 9
#endif
#ifndef ICMP_UNREACH_HOST_PROHIB
#define ICMP_UNREACH_HOST_PROHIB 10
#endif
#ifndef ICMP_UNREACH_TOSNET
#define ICMP_UNREACH_TOSNET 11
#endif
#ifndef ICMP_UNREACH_TOSHOST
#define ICMP_UNREACH_TOSHOST 12
#endif
#ifndef ICMP_UNREACH_FILTER_PROHIB
#define ICMP_UNREACH_FILTER_PROHIB 13
#endif
#ifndef ICMP_UNREACH_HOST_PRECEDENCE
#define ICMP_UNREACH_HOST_PRECEDENCE 14
#endif
#ifndef ICMP_UNREACH_PRECEDENCE_CUTOFF
#define ICMP_UNREACH_PRECEDENCE_CUTOFF 15
#endif
#ifndef ICMP_REDIRECT_NET
#define ICMP_REDIRECT_NET 0
#endif
#ifndef ICMP_REDIRECT_HOST
#define ICMP_REDIRECT_HOST 1
#endif
#ifndef ICMP_REDIRECT_TOSNET
#define ICMP_REDIRECT_TOSNET 2
#endif
#ifndef ICMP_REDIRECT_TOSHOST
#define ICMP_REDIRECT_TOSHOST 3
#endif
#ifndef ICMP_TIMXCEED_INTRANS
#define ICMP_TIMXCEED_INTRANS 0
#endif
#ifndef ICMP_TIMXCEED_REASS
#define ICMP_TIMXCEED_REASS 1
#endif
#ifndef ICMP_PARAMPROB_OPTABSENT
#define ICMP_PARAMPROB_OPTABSENT 1
#endif
u_int16_t icmp_sum; /* ICMP Checksum */
union
{
struct
{
u_int16_t id; /* ICMP id */
u_int16_t seq;/* ICMP sequence number */
} echo;
#undef icmp_id
#undef icmp_seq
#define icmp_id hun.echo.id
#define icmp_seq hun.echo.seq
u_int32_t gateway; /* gateway host */
struct
{
u_int16_t pad;/* padding */
u_int16_t mtu;/* MTU size */
} frag;
} hun;
union
{
struct
{
n_time its_otime;
n_time its_rtime;
n_time its_ttime;
} ts;
struct
{
struct tcpr_ipv4_hdr idi_ip;
/* options and then 64 bits of data */
} ip;
u_int32_t mask;
int8_t data[1];
#undef icmp_mask
#define icmp_mask dun.mask
#undef icmp_data
#define icmp_data dun.data
#undef icmp_otime
#define icmp_otime dun.ts.its_otime
#undef icmp_rtime
#define icmp_rtime dun.ts.its_rtime
#undef icmp_ttime
#define icmp_ttime dun.ts.its_ttime
}dun;
};
/*
* IGMP header
* Internet Group Message Protocol
* Static header size: 8 bytes
*/
struct tcpr_igmp_hdr
{
u_int8_t igmp_type; /* IGMP type */
#ifndef IGMP_MEMBERSHIP_QUERY
#define IGMP_MEMBERSHIP_QUERY 0x11 /* membership query */
#endif
#ifndef IGMP_V1_MEMBERSHIP_REPORT
#define IGMP_V1_MEMBERSHIP_REPORT 0x12 /* Ver. 1 membership report */
#endif
#ifndef IGMP_V2_MEMBERSHIP_REPORT
#define IGMP_V2_MEMBERSHIP_REPORT 0x16 /* Ver. 2 membership report */
#endif
#ifndef IGMP_LEAVE_GROUP
#define IGMP_LEAVE_GROUP 0x17 /* Leave-group message */
#endif
u_int8_t igmp_code; /* IGMP code */
u_int16_t igmp_sum; /* IGMP checksum */
struct in_addr igmp_group;/* IGMP host IP */
};
/*
* IPSEC header
* Internet Protocol Security Protocol
* Encapsulating Security Payload Header Static header size: 12 bytes
* Encapsulating Security Payload Footer Base header size: 2 bytes
* Authentication Header Static Size: 16 bytes
*/
#ifndef IPPROTO_ESP
#define IPPROTO_ESP 50 /* not everyone's got this */
#endif
struct tcpr_esp_hdr
{
u_int32_t esp_spi; /* security parameter index */
u_int32_t esp_seq; /* ESP sequence number */
u_int32_t esp_iv; /* initialization vector */
};
struct tcpr_esp_ftr
{
u_int8_t esp_pad_len; /* padding length */
u_int8_t esp_nh; /* next header pointer */
int8_t *esp_auth; /* authentication data */
};
#ifndef IPPROTO_AH
#define IPPROTO_AH 51 /* not everyone's got this */
#endif
struct tcpr_ah_hdr
{
u_int8_t ah_nh; /* next header */
u_int8_t ah_len; /* payload length */
u_int16_t ah_res; /* reserved */
u_int32_t ah_spi; /* security parameter index */
u_int32_t ah_seq; /* AH sequence number */
u_int32_t ah_auth; /* authentication data */
};
/*
* ISL header
* Cisco Inter-Switch Link
* Static header size: 26 bytes
*/
/*
* For checksum stuff -- IANA says 135-254 is "unassigned" as of 12.2001.
* Let's hope this one stays that way for a while!
*/
#define TCPR_PROTO_ISL 201
struct tcpr_isl_hdr
{
u_int8_t isl_dhost[5]; /* destination address "01:00:0c:00:00" */
#ifdef WORDS_BIGENDIAN
u_int8_t isl_user:4, /* user defined bits */
isl_type:4; /* type of frame */
#else
u_int8_t isl_type:4, /* type of frame */
isl_user:4; /* user defined bits */
#endif
u_int8_t isl_shost[6]; /* source address */
u_int16_t isl_len; /* total length of packet - 18 bytes */
u_int8_t isl_snap[6]; /* 0xaaaa03 + vendor code */
u_int16_t isl_vid; /* 15 bit VLAN ID, 1 bit BPDU / CDP indicator */
u_int16_t isl_index; /* port index */
u_int16_t isl_reserved; /* used for FDDI and token ring */
/* ethernet frame and 4 byte isl crc */
};
#ifndef IPPROTO_OSPF
#define IPPROTO_OSPF 89 /* not everyone's got this */
#endif
#define IPPROTO_OSPF_LSA 890 /* made this up. Hope it's unused */
#define TCPR_MODX 4102 /* used in LSA checksum */
/*
* Options used in multiple OSPF packets
* More info can be found in section A.2 of RFC 2328.
*/
#define TCPR_OPT_EBIT 0x02 /* describes the way AS-external-LSAs are flooded */
#define TCPR_OPT_MCBIT 0x04 /* whether or not IP multicast dgrams are fwdd */
#define TCPR_OPT_NPBIT 0x08 /* describes handling of type-7 LSAs */
#define TCPR_OPT_EABIT 0x10 /* rtr's willingness to send/recv EA-LSAs */
#define TCPR_OPT_DCBIT 0x20 /* describes handling of demand circuits */
/*
* MPLS header
* Multi-Protocol Label Switching
* Static header size: 4 bytes
*/
struct tcpr_mpls_hdr
{
u_int32_t mpls_les; /* 20 bits label, 3 bits exp, 1 bit bos, ttl */
#define TCPR_MPLS_BOS_ON 1
#define TCPR_MPLS_BOS_OFF 0
};
/*
* NTP header
* Network Time Protocol
* Static header size: 48 bytes
*/
struct tcpr_ntp_hdr_l_fp /* int32_t floating point (64-bit) */
{
u_int32_t integer; /* integer */
u_int32_t fraction; /* fraction */
};
struct tcpr_ntp_hdr_s_fp /* int16_t floating point (32-bit) */
{
u_int16_t integer; /* integer */
u_int16_t fraction; /* fraction */
};
struct tcpr_ntp_hdr
{
u_int8_t ntp_li_vn_mode; /* leap indicator, version, mode */
#define TCPR_NTP_LI_NW 0x0 /* no warning */
#define TCPR_NTP_LI_AS 0x1 /* last minute has 61 seconds */
#define TCPR_NTP_LI_DS 0x2 /* last minute has 59 seconds */
#define TCPR_NTP_LI_AC 0x3 /* alarm condition */
#define TCPR_NTP_VN_2 0x2 /* version 2 */
#define TCPR_NTP_VN_3 0x3 /* version 3 */
#define TCPR_NTP_VN_4 0x4 /* version 4 */
#define TCPR_NTP_MODE_R 0x0 /* reserved */
#define TCPR_NTP_MODE_A 0x1 /* symmetric active */
#define TCPR_NTP_MODE_P 0x2 /* symmetric passive */
#define TCPR_NTP_MODE_C 0x3 /* client */
#define TCPR_NTP_MODE_S 0x4 /* server */
#define TCPR_NTP_MODE_B 0x5 /* broadcast */
#define TCPR_NTP_MODE_RC 0x6 /* reserved for NTP control message */
#define TCPR_NTP_MODE_RP 0x7 /* reserved for private use */
u_int8_t ntp_stratum; /* stratum */
#define TCPR_NTP_STRATUM_UNAVAIL 0x0 /* unspecified or unavailable */
#define TCPR_NTP_STRATUM_PRIMARY 0x1 /* primary reference (radio clock) */
/* 2 - 15 is secondary */
/* 16 - 255 is reserved */
u_int8_t ntp_poll; /* poll interval (should be 4 - 12) */
u_int8_t ntp_precision; /* local clock precision */
struct tcpr_ntp_hdr_s_fp ntp_delay; /* roundtrip delay */
struct tcpr_ntp_hdr_s_fp ntp_dispersion; /* nominal error */
u_int32_t ntp_reference_id; /* reference source id */
#define TCPR_NTP_REF_LOCAL 0x4c4f434c /* uncalibrated local clock */
#define TCPR_NTP_REF_PPS 0x50505300 /* atomic / pulse-per-second clock */
#define TCPR_NTP_REF_ACTS 0x41435453 /* NIST dialup modem */
#define TCPR_NTP_REF_USNO 0x55534e4f /* USNO modem service */
#define TCPR_NTP_REF_PTB 0x50544200 /* PTB (German) modem service */
#define TCPR_NTP_REF_TDF 0x54444600 /* Allouis (French) radio */
#define TCPR_NTP_REF_DCF 0x44434600 /* Mainflingen (German) radio */
#define TCPR_NTP_REF_MSF 0x4d534600 /* Rugby (UK) radio */
#define TCPR_NTP_REF_WWV 0x57575600 /* Ft Collins (US) radio */
#define TCPR_NTP_REF_WWVB 0x57575642 /* Boulder (US) radio */
#define TCPR_NTP_REF_WWVH 0x57575648 /* Kaui Hawaii (US) radio */
#define TCPR_NTP_REF_CHU 0x43485500 /* Ottaha (Canada) radio */
#define TCPR_NTP_REF_LORC 0x4c4f5243 /* LORAN-C radionavigation */
#define TCPR_NTP_REF_OMEG 0x4f4d4547 /* OMEGA radionavigation */
#define TCPR_NTP_REF_GPS 0x47505300 /* global positioning system */
#define TCPR_NTP_REF_GOES 0x474f4553 /* geostationary orbit env satellite */
struct tcpr_ntp_hdr_l_fp ntp_ref_ts; /* reference timestamp */
struct tcpr_ntp_hdr_l_fp ntp_orig_ts; /* originate timestamp */
struct tcpr_ntp_hdr_l_fp ntp_rec_ts; /* receive timestamp */
struct tcpr_ntp_hdr_l_fp ntp_xmt_ts; /* transmit timestamp */
};
/*
* OSPFv2 header
* Open Shortest Path First
* Static header size: 16 bytes
*/
struct tcpr_ospf_hdr
{
u_int8_t ospf_v; /* version */
#define OSPFVERSION 2
u_int8_t ospf_type; /* type */
#define TCPR_OSPF_UMD 0 /* UMd monitoring packet */
#define TCPR_OSPF_HELLO 1 /* HELLO packet */
#define TCPR_OSPF_DBD 2 /* dataBase description packet */
#define TCPR_OSPF_LSR 3 /* link state request packet */
#define TCPR_OSPF_LSU 4 /* link state Update Packet */
#define TCPR_OSPF_LSA 5 /* link state acknowledgement packet */
u_int16_t ospf_len; /* length */
struct in_addr ospf_rtr_id; /* source router ID */
struct in_addr ospf_area_id;/* roam ID */
u_int16_t ospf_sum; /* checksum */
u_int16_t ospf_auth_type; /* authentication type */
#define TCPR_OSPF_AUTH_NULL 0 /* null password */
#define TCPR_OSPF_AUTH_SIMPLE 1 /* simple, plaintext, 8 int8_t password */
#define TCPR_OSPF_AUTH_MD5 2 /* MD5 */
};
/*
* OSPF authentication header
* Open Shortest Path First
* Static header size: 8 bytes
*/
struct tcpr_auth_hdr
{
u_int16_t ospf_auth_null; /* NULL */
u_int8_t ospf_auth_keyid; /* authentication key ID */
u_int8_t ospf_auth_len; /* auth data length */
u_int ospf_auth_seq; /* cryptographic sequence number */
};
/*
* OSPF hello header
* Open Shortest Path First
* Static header size: 28 bytes
*/
struct tcpr_ospf_hello_hdr
{
struct in_addr hello_nmask; /* netmask associated with the interface */
u_int16_t hello_intrvl; /* num of seconds between routers last packet */
u_int8_t hello_opts; /* Options for HELLO packets (look above) */
u_int8_t hello_rtr_pri; /* router's priority (if 0, can't be backup) */
u_int hello_dead_intvl; /* # of secs a router is silent till deemed down */
struct in_addr hello_des_rtr; /* Designated router on the network */
struct in_addr hello_bkup_rtr; /* Backup router */
struct in_addr hello_nbr; /* neighbor router, memcpy more as needed */
};
/*
* Database Description header.
*/
struct tcpr_dbd_hdr
{
u_int16_t dbd_mtu_len; /* max length of IP dgram that this 'if' can use */
u_int8_t dbd_opts; /* DBD packet options (from above) */
u_int8_t dbd_type; /* type of exchange occurring */
#define TCPR_DBD_IBI 0x01 /* init */
#define TCPR_DBD_MBIT 0x02 /* more DBD packets are to come */
#define TCPR_DBD_MSBIT 0x04 /* If 1, sender is the master in the exchange */
u_int dbd_seq; /* DBD sequence number */
};
/*
* used for the LS type field in all LS* headers
*/
#define TCPR_LS_TYPE_RTR 1 /* router-LSA */
#define TCPR_LS_TYPE_NET 2 /* network-LSA */
#define TCPR_LS_TYPE_IP 3 /* summary-LSA (IP Network) */
#define TCPR_LS_TYPE_ASBR 4 /* summary-LSA (ASBR) */
#define TCPR_LS_TYPE_ASEXT 5 /* AS-external-LSA */
/*
* Link State Request header
*/
struct tcpr_lsr_hdr
{
u_int lsr_type; /* type of LS being requested */
u_int lsr_lsid; /* link state ID */
struct in_addr lsr_adrtr; /* advertising router (memcpy more as needed) */
};
/*
* Link State Update header
*/
struct tcpr_lsu_hdr
{
u_int lsu_num; /* number of LSAs that will be broadcasted */
};
/*
* Link State Acknowledgement header.
*/
struct tcpr_lsa_hdr
{
u_int16_t lsa_age; /* time in seconds since the LSA was originated */
u_int8_t lsa_opts; /* look above for OPTS_* */
u_int8_t lsa_type; /* look below for LS_TYPE_* */
u_int lsa_id; /* link State ID */
struct in_addr lsa_adv; /* router ID of Advertising router */
u_int lsa_seq; /* LSA sequence number to detect old/bad ones */
u_int16_t lsa_sum; /* "Fletcher Checksum" of all fields minus age */
u_int16_t lsa_len; /* length in bytes including the 20 byte header */
};
/*
* Router LSA data format
*
* Other stuff for TOS can be added for backward compatability, for this
* version, only OSPFv2 is being FULLY supported.
*/
struct tcpr_rtr_lsa_hdr
{
u_int16_t rtr_flags; /* set to help describe packet */
#define TCPR_RTR_FLAGS_W 0x0100 /* W bit */
#define TCPR_RTR_FLAGS_E 0x0200 /* E bit */
#define TCPR_RTR_FLAGS_B 0x0400 /* B bit */
u_int16_t rtr_num; /* number of links within that packet */
u_int rtr_link_id; /* describes link_data (look below) */
#define TCPR_LINK_ID_NBR_ID 1 /* Neighbors router ID, also can be 4 */
#define TCPR_LINK_ID_IP_DES 2 /* IP address of designated router */
#define TCPR_LINK_ID_SUB 3 /* IP subnet number */
u_int rtr_link_data; /* Depending on link_id, info is here */
u_int8_t rtr_type; /* Description of router link */
#define TCPR_RTR_TYPE_PTP 1 /* Point-To-Point */
#define TCPR_RTR_TYPE_TRANS 2 /* Connection to a "transit network" */
#define TCPR_RTR_TYPE_STUB 3 /* Connectin to a "stub network" */
#define RTR_TYPE_VRTL 4 /* connects to a "virtual link" */
u_int8_t rtr_tos_num; /* number of different TOS metrics for this link */
u_int16_t rtr_metric; /* the "cost" of using this link */
};
/*
* Network LSA data format.
*/
struct tcpr_net_lsa_hdr
{
struct in_addr net_nmask; /* Netmask for that network */
u_int net_rtr_id; /* ID of router attached to that network */
};
/*
* Summary LSA data format.
*/
struct tcpr_sum_lsa_hdr
{
struct in_addr sum_nmask; /* Netmask of destination IP address */
u_int sum_metric; /* Same as in rtr_lsa (&0xfff to use last 24bit */
u_int sum_tos_metric; /* first 8bits are TOS, 24bits are TOS Metric */
};
/*
* AS External LSA data format.
* & 0xfff logic operator for as_metric to get last 24bits.
*/
struct tcpr_as_lsa_hdr
{
struct in_addr as_nmask; /* Netmask for advertised destination */
u_int as_metric; /* May have to set E bit in first 8bits */
#define TCPR_AS_E_BIT_ON 0x80000000 /* as_metric */
struct in_addr as_fwd_addr; /* Forwarding address */
u_int as_rte_tag; /* External route tag */
};
/*
* Base RIP header
* Routing Information Protocol
* Base header size: 24 bytes
*/
struct tcpr_rip_hdr
{
u_int8_t rip_cmd; /* RIP command */
#define RIPCMD_REQUEST 1 /* want info */
#define RIPCMD_RESPONSE 2 /* responding to request */
#define RIPCMD_TRACEON 3 /* turn tracing on */
#define RIPCMD_TRACEOFF 4 /* turn it off */
#define RIPCMD_POLL 5 /* like request, but anyone answers */
#define RIPCMD_POLLENTRY 6 /* like poll, but for entire entry */
#define RIPCMD_MAX 7 /* ? command */
u_int8_t rip_ver; /* RIP version */
#define RIPVER_0 0
#define RIPVER_1 1
#define RIPVER_2 2
u_int16_t rip_rd; /* Zero (v1) or Routing Domain (v2) */
u_int16_t rip_af; /* Address family */
u_int16_t rip_rt; /* Zero (v1) or Route Tag (v2) */
u_int32_t rip_addr; /* IP address */
u_int32_t rip_mask; /* Zero (v1) or Subnet Mask (v2) */
u_int32_t rip_next_hop; /* Zero (v1) or Next hop IP address (v2) */
u_int32_t rip_metric; /* Metric */
};
/*
* RPC headers
* Remote Procedure Call
*/
#define TCPR_RPC_CALL 0
#define TCPR_RPC_REPLY 1
#define TCPR_RPC_VERS 2
#define TCPR_RPC_LAST_FRAG 0x80000000
/*
* Portmap defines
*/
#define TCPR_PMAP_PROGRAM 100000
#define TCPR_PMAP_PROC_NULL 0
#define TCPR_PMAP_PROC_SET 1
#define TCPR_PMAP_PROC_UNSET 2
#define TCPR_PMAP_PROC_GETADDR 3
#define TCPR_PMAP_PROC_DUMP 4
#define TCPR_PMAP_PROC_CALLIT 5
#define TCPR_PMAP_PROC_BCAST 5 /* Not a typo */
#define TCPR_PMAP_PROC_GETTIME 6
#define TCPR_PMAP_PROC_UADDR2TADDR 7
#define TCPR_PMAP_PROC_TADDR2UADDR 8
#define TCPR_PMAP_PROC_GETVERSADDR 9
#define TCPR_PMAP_PROC_INDIRECT 10
#define TCPR_PMAP_PROC_GETADDRLIST 11
#define TCPR_PMAP_PROC_GETSTAT 12
/* There will be more to add... */
struct tcpr_rpc_opaque_auth
{
u_int32_t rpc_auth_flavor;
u_int32_t rpc_auth_length;
#if 0
u_int8_t *rpc_auth_data;
#endif
};
struct tcpr_rpc_call
{
u_int32_t rpc_rpcvers; /* RPC version - must be 2 */
u_int32_t rpc_prognum; /* Program Number */
u_int32_t rpc_vers; /* Program Version */
u_int32_t rpc_procedure; /* RPC procedure */
struct tcpr_rpc_opaque_auth rpc_credentials;
struct tcpr_rpc_opaque_auth rpc_verifier;
};
struct tcpr_rpc_call_hdr
{
u_int32_t rpc_xid; /* xid (transaction identifier) */
u_int32_t rpc_type;
struct tcpr_rpc_call rpc_call;
};
struct tcpr_rpc_call_tcp_hdr
{
u_int32_t rpc_record_marking; /* used with byte stream protocols */
struct tcpr_rpc_call_hdr rpc_common;
};
/*
* STP configuration header
* Spanning Tree Protocol
* Static header size: 35 bytes
*/
struct tcpr_stp_conf_hdr
{
u_int16_t stp_id; /* protocol id */
u_int8_t stp_version; /* protocol version */
u_int8_t stp_bpdu_type; /* bridge protocol data unit type */
u_int8_t stp_flags; /* control flags */
u_int8_t stp_rootid[8]; /* root id */
u_int32_t stp_rootpc; /* root path cost */
u_int8_t stp_bridgeid[8]; /* bridge id */
u_int16_t stp_portid; /* port id */
u_int16_t stp_mage; /* message age */
u_int16_t stp_maxage; /* max age */
u_int16_t stp_hellot; /* hello time */
u_int16_t stp_fdelay; /* forward delay */
};
/*
* STP topology change notification header
* Spanning Tree Protocol
* Static header size: 4 bytes
*/
struct tcpr_stp_tcn_hdr
{
u_int16_t stp_id; /* protocol id */
u_int8_t stp_version; /* protocol version */
u_int8_t stp_bpdu_type; /* bridge protocol data unit type */
};
/*
* TCP header
* Transmission Control Protocol
* Static header size: 20 bytes
*/
struct tcpr_tcp_hdr
{
u_int16_t th_sport; /* source port */
u_int16_t th_dport; /* destination port */
u_int32_t th_seq; /* sequence number */
u_int32_t th_ack; /* acknowledgement number */
#ifdef WORDS_BIGENDIAN
u_int8_t th_off:4, /* data offset */
th_x2:4; /* (unused) */
#else
u_int8_t th_x2:4, /* (unused) */
th_off:4; /* data offset */
#endif
u_int8_t th_flags; /* control flags */
#ifndef TH_FIN
#define TH_FIN 0x01 /* finished send data */
#endif
#ifndef TH_SYN
#define TH_SYN 0x02 /* synchronize sequence numbers */
#endif
#ifndef TH_RST
#define TH_RST 0x04 /* reset the connection */
#endif
#ifndef TH_PUSH
#define TH_PUSH 0x08 /* push data to the app layer */
#endif
#ifndef TH_ACK
#define TH_ACK 0x10 /* acknowledge */
#endif
#ifndef TH_URG
#define TH_URG 0x20 /* urgent! */
#endif
#ifndef TH_ECE
#define TH_ECE 0x40
#endif
#ifndef TH_CWR
#define TH_CWR 0x80
#endif
u_int16_t th_win; /* window */
u_int16_t th_sum; /* checksum */
u_int16_t th_urp; /* urgent pointer */
};
/*
* Token Ring Header
*/
struct tcpr_token_ring_hdr
{
u_int8_t token_ring_access_control;
#define TCPR_TOKEN_RING_FRAME 0x10
u_int8_t token_ring_frame_control;
#define TCPR_TOKEN_RING_LLC_FRAME 0x40
u_int8_t token_ring_dhost[TOKEN_RING_ADDR_LEN];
u_int8_t token_ring_shost[TOKEN_RING_ADDR_LEN];
u_int8_t token_ring_llc_dsap;
u_int8_t token_ring_llc_ssap;
u_int8_t token_ring_llc_control_field;
u_int8_t token_ring_llc_org_code[TCPR_ORG_CODE_SIZE];
u_int16_t token_ring_type;
#define TOKEN_RING_TYPE_IP 0x0800 /* IP protocol */
#define TOKEN_RING_TYPE_ARP 0x0806 /* addr. resolution protocol */
#define TOKEN_RING_TYPE_REVARP 0x8035 /* reverse addr. resolution protocol */
};
struct tcpr_token_ring_addr
{
u_int8_t token_ring_addr_octet[6]; /* Token Ring address */
};
/*
* UDP header
* User Data Protocol
* Static header size: 8 bytes
*/
struct tcpr_udp_hdr
{
u_int16_t uh_sport; /* soure port */
u_int16_t uh_dport; /* destination port */
u_int16_t uh_ulen; /* length */
u_int16_t uh_sum; /* checksum */
};
/*
* Sebek header
* Static header size: 48 bytes
*/
struct tcpr_sebek_hdr
{
u_int32_t magic; /* identify packets that should be hidden */
u_int16_t version; /* protocol version, currently 1 */
#define SEBEK_PROTO_VERSION 1
u_int16_t type; /* type of record (read data is type 0, write data is type 1) */
#define SEBEK_TYPE_READ 0 /* Currently, only read is supported */
#define SEBEK_TYPE_WRITE 1
u_int32_t counter; /* PDU counter used to identify when packet are lost */
u_int32_t time_sec; /* seconds since EPOCH according to the honeypot */
u_int32_t time_usec; /* residual microseconds */
u_int32_t pid; /* PID */
u_int32_t uid; /* UID */
u_int32_t fd; /* FD */
#define SEBEK_CMD_LENGTH 12
u_int8_t cmd[SEBEK_CMD_LENGTH]; /* 12 first characters of the command */
u_int32_t length; /* length in bytes of the PDU's body */
};
/*
* VRRP header
* Virtual Router Redundancy Protocol
* Static header size: 8 bytes
*/
#ifndef IPPROTO_VRRP
#define IPPROTO_VRRP 112 /* not everyone's got this */
#endif
struct tcpr_vrrp_hdr
{
#ifdef WORDS_BIGENDIAN
u_int8_t vrrp_t:4, /* packet type */
vrrp_v:4; /* protocol version */
#else
u_int8_t vrrp_v:4, /* protocol version */
vrrp_t:4; /* packet type */
#endif
#define TCPR_VRRP_VERSION_01 0x1
#define TCPR_VRRP_VERSION_02 0x2
#define TCPR_VRRP_TYPE_ADVERT 0x1
u_int8_t vrrp_vrouter_id; /* virtual router id */
u_int8_t vrrp_priority; /* priority */
u_int8_t vrrp_ip_count; /* number of IP addresses */
u_int8_t vrrp_auth_type; /* authorization type */
#define TCPR_VRRP_AUTH_NONE 0x1
#define TCPR_VRRP_AUTH_PASSWD 0x2
#define TCPR_VRRP_AUTH_IPAH 0x3
u_int8_t vrrp_advert_int; /* advertisement interval */
u_int16_t vrrp_sum; /* checksum */
/* additional addresses */
/* authentication info */
};
/*
* HSRP header
* Static header size: 20 bytes
*/
struct tcpr_hsrp_hdr
{
#define TCPR_HSRP_VERSION 0x0
u_int8_t version; /* Version of the HSRP messages */
#define TCPR_HSRP_TYPE_HELLO 0x0
#define TCPR_HSRP_TYPE_COUP 0x1
#define TCPR_HSRP_TYPE_RESIGN 0x2
u_int8_t opcode; /* Type of message */
#define TCPR_HSRP_STATE_INITIAL 0x0
#define TCPR_HSRP_STATE_LEARN 0x1
#define TCPR_HSRP_STATE_LISTEN 0x2
#define TCPR_HSRP_STATE_SPEAK 0x4
#define TCPR_HSRP_STATE_STANDBY 0x8
#define TCPR_HSRP_STATE_ACTIVE 0x10
u_int8_t state; /* Current state of the router */
u_int8_t hello_time; /* Period in seconds between hello messages */
u_int8_t hold_time; /* Seconds that the current hello message is valid */
u_int8_t priority; /* Priority for the election proccess */
u_int8_t group; /* Standby group */
u_int8_t reserved; /* Reserved field */
#define HSRP_AUTHDATA_LENGTH 8
u_int8_t authdata[HSRP_AUTHDATA_LENGTH]; /* Password */
u_int32_t virtual_ip; /* Virtual IP address */
};
#endif
Reference in New Issue View Git Blame Copy Permalink