1*05b00f60SXin Li /*
2*05b00f60SXin Li * Copyright (c) 2016 Gerard Garcia <[email protected]>
3*05b00f60SXin Li * Copyright (c) 2017 Red Hat, Inc.
4*05b00f60SXin Li *
5*05b00f60SXin Li * Redistribution and use in source and binary forms, with or without
6*05b00f60SXin Li * modification, are permitted provided that the following conditions
7*05b00f60SXin Li * are met:
8*05b00f60SXin Li *
9*05b00f60SXin Li * 1. Redistributions of source code must retain the above copyright
10*05b00f60SXin Li * notice, this list of conditions and the following disclaimer.
11*05b00f60SXin Li * 2. Redistributions in binary form must reproduce the above copyright
12*05b00f60SXin Li * notice, this list of conditions and the following disclaimer in
13*05b00f60SXin Li * the documentation and/or other materials provided with the
14*05b00f60SXin Li * distribution.
15*05b00f60SXin Li * 3. The names of the authors may not be used to endorse or promote
16*05b00f60SXin Li * products derived from this software without specific prior
17*05b00f60SXin Li * written permission.
18*05b00f60SXin Li *
19*05b00f60SXin Li * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR
20*05b00f60SXin Li * IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED
21*05b00f60SXin Li * WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
22*05b00f60SXin Li */
23*05b00f60SXin Li
24*05b00f60SXin Li /* \summary: Linux vsock printer */
25*05b00f60SXin Li
26*05b00f60SXin Li #ifdef HAVE_CONFIG_H
27*05b00f60SXin Li #include <config.h>
28*05b00f60SXin Li #endif
29*05b00f60SXin Li
30*05b00f60SXin Li #include "netdissect-stdinc.h"
31*05b00f60SXin Li #include <stddef.h>
32*05b00f60SXin Li
33*05b00f60SXin Li #include "netdissect.h"
34*05b00f60SXin Li #include "extract.h"
35*05b00f60SXin Li
36*05b00f60SXin Li enum af_vsockmon_transport {
37*05b00f60SXin Li AF_VSOCK_TRANSPORT_UNKNOWN = 0,
38*05b00f60SXin Li AF_VSOCK_TRANSPORT_NO_INFO = 1, /* No transport information */
39*05b00f60SXin Li AF_VSOCK_TRANSPORT_VIRTIO = 2, /* Virtio transport header */
40*05b00f60SXin Li };
41*05b00f60SXin Li
42*05b00f60SXin Li static const struct tok vsock_transport[] = {
43*05b00f60SXin Li {AF_VSOCK_TRANSPORT_UNKNOWN, "UNKNOWN"},
44*05b00f60SXin Li {AF_VSOCK_TRANSPORT_NO_INFO, "NO_INFO"},
45*05b00f60SXin Li {AF_VSOCK_TRANSPORT_VIRTIO, "VIRTIO"},
46*05b00f60SXin Li { 0, NULL }
47*05b00f60SXin Li };
48*05b00f60SXin Li
49*05b00f60SXin Li enum af_vsockmon_op {
50*05b00f60SXin Li AF_VSOCK_OP_UNKNOWN = 0,
51*05b00f60SXin Li AF_VSOCK_OP_CONNECT = 1,
52*05b00f60SXin Li AF_VSOCK_OP_DISCONNECT = 2,
53*05b00f60SXin Li AF_VSOCK_OP_CONTROL = 3,
54*05b00f60SXin Li AF_VSOCK_OP_PAYLOAD = 4,
55*05b00f60SXin Li };
56*05b00f60SXin Li
57*05b00f60SXin Li static const struct tok vsock_op[] = {
58*05b00f60SXin Li {AF_VSOCK_OP_UNKNOWN, "UNKNOWN"},
59*05b00f60SXin Li {AF_VSOCK_OP_CONNECT, "CONNECT"},
60*05b00f60SXin Li {AF_VSOCK_OP_DISCONNECT, "DISCONNECT"},
61*05b00f60SXin Li {AF_VSOCK_OP_CONTROL, "CONTROL"},
62*05b00f60SXin Li {AF_VSOCK_OP_PAYLOAD, "PAYLOAD"},
63*05b00f60SXin Li { 0, NULL }
64*05b00f60SXin Li };
65*05b00f60SXin Li
66*05b00f60SXin Li enum virtio_vsock_type {
67*05b00f60SXin Li VIRTIO_VSOCK_TYPE_STREAM = 1,
68*05b00f60SXin Li };
69*05b00f60SXin Li
70*05b00f60SXin Li static const struct tok virtio_type[] = {
71*05b00f60SXin Li {VIRTIO_VSOCK_TYPE_STREAM, "STREAM"},
72*05b00f60SXin Li { 0, NULL }
73*05b00f60SXin Li };
74*05b00f60SXin Li
75*05b00f60SXin Li enum virtio_vsock_op {
76*05b00f60SXin Li VIRTIO_VSOCK_OP_INVALID = 0,
77*05b00f60SXin Li VIRTIO_VSOCK_OP_REQUEST = 1,
78*05b00f60SXin Li VIRTIO_VSOCK_OP_RESPONSE = 2,
79*05b00f60SXin Li VIRTIO_VSOCK_OP_RST = 3,
80*05b00f60SXin Li VIRTIO_VSOCK_OP_SHUTDOWN = 4,
81*05b00f60SXin Li VIRTIO_VSOCK_OP_RW = 5,
82*05b00f60SXin Li VIRTIO_VSOCK_OP_CREDIT_UPDATE = 6,
83*05b00f60SXin Li VIRTIO_VSOCK_OP_CREDIT_REQUEST = 7,
84*05b00f60SXin Li };
85*05b00f60SXin Li
86*05b00f60SXin Li static const struct tok virtio_op[] = {
87*05b00f60SXin Li {VIRTIO_VSOCK_OP_INVALID, "INVALID"},
88*05b00f60SXin Li {VIRTIO_VSOCK_OP_REQUEST, "REQUEST"},
89*05b00f60SXin Li {VIRTIO_VSOCK_OP_RESPONSE, "RESPONSE"},
90*05b00f60SXin Li {VIRTIO_VSOCK_OP_RST, "RST"},
91*05b00f60SXin Li {VIRTIO_VSOCK_OP_SHUTDOWN, "SHUTDOWN"},
92*05b00f60SXin Li {VIRTIO_VSOCK_OP_RW, "RW"},
93*05b00f60SXin Li {VIRTIO_VSOCK_OP_CREDIT_UPDATE, "CREDIT UPDATE"},
94*05b00f60SXin Li {VIRTIO_VSOCK_OP_CREDIT_REQUEST, "CREDIT REQUEST"},
95*05b00f60SXin Li { 0, NULL }
96*05b00f60SXin Li };
97*05b00f60SXin Li
98*05b00f60SXin Li /* All fields are little-endian */
99*05b00f60SXin Li
100*05b00f60SXin Li struct virtio_vsock_hdr {
101*05b00f60SXin Li nd_uint64_t src_cid;
102*05b00f60SXin Li nd_uint64_t dst_cid;
103*05b00f60SXin Li nd_uint32_t src_port;
104*05b00f60SXin Li nd_uint32_t dst_port;
105*05b00f60SXin Li nd_uint32_t len;
106*05b00f60SXin Li nd_uint16_t type; /* enum virtio_vsock_type */
107*05b00f60SXin Li nd_uint16_t op; /* enum virtio_vsock_op */
108*05b00f60SXin Li nd_uint32_t flags;
109*05b00f60SXin Li nd_uint32_t buf_alloc;
110*05b00f60SXin Li nd_uint32_t fwd_cnt;
111*05b00f60SXin Li };
112*05b00f60SXin Li
113*05b00f60SXin Li struct af_vsockmon_hdr {
114*05b00f60SXin Li nd_uint64_t src_cid;
115*05b00f60SXin Li nd_uint64_t dst_cid;
116*05b00f60SXin Li nd_uint32_t src_port;
117*05b00f60SXin Li nd_uint32_t dst_port;
118*05b00f60SXin Li nd_uint16_t op; /* enum af_vsockmon_op */
119*05b00f60SXin Li nd_uint16_t transport; /* enum af_vosckmon_transport */
120*05b00f60SXin Li nd_uint16_t len; /* size of transport header */
121*05b00f60SXin Li nd_uint8_t reserved[2];
122*05b00f60SXin Li };
123*05b00f60SXin Li
124*05b00f60SXin Li static void
vsock_virtio_hdr_print(netdissect_options * ndo,const struct virtio_vsock_hdr * hdr)125*05b00f60SXin Li vsock_virtio_hdr_print(netdissect_options *ndo, const struct virtio_vsock_hdr *hdr)
126*05b00f60SXin Li {
127*05b00f60SXin Li uint16_t u16_v;
128*05b00f60SXin Li uint32_t u32_v;
129*05b00f60SXin Li
130*05b00f60SXin Li u32_v = GET_LE_U_4(hdr->len);
131*05b00f60SXin Li ND_PRINT("len %u", u32_v);
132*05b00f60SXin Li
133*05b00f60SXin Li u16_v = GET_LE_U_2(hdr->type);
134*05b00f60SXin Li ND_PRINT(", type %s",
135*05b00f60SXin Li tok2str(virtio_type, "Invalid type (%hu)", u16_v));
136*05b00f60SXin Li
137*05b00f60SXin Li u16_v = GET_LE_U_2(hdr->op);
138*05b00f60SXin Li ND_PRINT(", op %s",
139*05b00f60SXin Li tok2str(virtio_op, "Invalid op (%hu)", u16_v));
140*05b00f60SXin Li
141*05b00f60SXin Li u32_v = GET_LE_U_4(hdr->flags);
142*05b00f60SXin Li ND_PRINT(", flags %x", u32_v);
143*05b00f60SXin Li
144*05b00f60SXin Li u32_v = GET_LE_U_4(hdr->buf_alloc);
145*05b00f60SXin Li ND_PRINT(", buf_alloc %u", u32_v);
146*05b00f60SXin Li
147*05b00f60SXin Li u32_v = GET_LE_U_4(hdr->fwd_cnt);
148*05b00f60SXin Li ND_PRINT(", fwd_cnt %u", u32_v);
149*05b00f60SXin Li }
150*05b00f60SXin Li
151*05b00f60SXin Li /*
152*05b00f60SXin Li * This size had better fit in a u_int.
153*05b00f60SXin Li */
154*05b00f60SXin Li static u_int
vsock_transport_hdr_size(uint16_t transport)155*05b00f60SXin Li vsock_transport_hdr_size(uint16_t transport)
156*05b00f60SXin Li {
157*05b00f60SXin Li switch (transport) {
158*05b00f60SXin Li case AF_VSOCK_TRANSPORT_VIRTIO:
159*05b00f60SXin Li return (u_int)sizeof(struct virtio_vsock_hdr);
160*05b00f60SXin Li default:
161*05b00f60SXin Li return 0;
162*05b00f60SXin Li }
163*05b00f60SXin Li }
164*05b00f60SXin Li
165*05b00f60SXin Li /* Returns 0 on success, -1 on truncation */
166*05b00f60SXin Li static int
vsock_transport_hdr_print(netdissect_options * ndo,uint16_t transport,const u_char * p,const u_int caplen)167*05b00f60SXin Li vsock_transport_hdr_print(netdissect_options *ndo, uint16_t transport,
168*05b00f60SXin Li const u_char *p, const u_int caplen)
169*05b00f60SXin Li {
170*05b00f60SXin Li u_int transport_size = vsock_transport_hdr_size(transport);
171*05b00f60SXin Li const void *hdr;
172*05b00f60SXin Li
173*05b00f60SXin Li if (caplen < sizeof(struct af_vsockmon_hdr) + transport_size) {
174*05b00f60SXin Li return -1;
175*05b00f60SXin Li }
176*05b00f60SXin Li
177*05b00f60SXin Li hdr = p + sizeof(struct af_vsockmon_hdr);
178*05b00f60SXin Li switch (transport) {
179*05b00f60SXin Li case AF_VSOCK_TRANSPORT_VIRTIO:
180*05b00f60SXin Li ND_PRINT(" (");
181*05b00f60SXin Li vsock_virtio_hdr_print(ndo, hdr);
182*05b00f60SXin Li ND_PRINT(")");
183*05b00f60SXin Li break;
184*05b00f60SXin Li default:
185*05b00f60SXin Li break;
186*05b00f60SXin Li }
187*05b00f60SXin Li return 0;
188*05b00f60SXin Li }
189*05b00f60SXin Li
190*05b00f60SXin Li static void
vsock_hdr_print(netdissect_options * ndo,const u_char * p,const u_int caplen)191*05b00f60SXin Li vsock_hdr_print(netdissect_options *ndo, const u_char *p, const u_int caplen)
192*05b00f60SXin Li {
193*05b00f60SXin Li const struct af_vsockmon_hdr *hdr = (const struct af_vsockmon_hdr *)p;
194*05b00f60SXin Li uint16_t hdr_transport, hdr_op;
195*05b00f60SXin Li uint32_t hdr_src_port, hdr_dst_port;
196*05b00f60SXin Li uint64_t hdr_src_cid, hdr_dst_cid;
197*05b00f60SXin Li u_int total_hdr_size;
198*05b00f60SXin Li int ret = 0;
199*05b00f60SXin Li
200*05b00f60SXin Li hdr_transport = GET_LE_U_2(hdr->transport);
201*05b00f60SXin Li ND_PRINT("%s",
202*05b00f60SXin Li tok2str(vsock_transport, "Invalid transport (%u)",
203*05b00f60SXin Li hdr_transport));
204*05b00f60SXin Li
205*05b00f60SXin Li /* If verbose level is more than 0 print transport details */
206*05b00f60SXin Li if (ndo->ndo_vflag) {
207*05b00f60SXin Li ret = vsock_transport_hdr_print(ndo, hdr_transport, p, caplen);
208*05b00f60SXin Li if (ret == 0)
209*05b00f60SXin Li ND_PRINT("\n\t");
210*05b00f60SXin Li } else
211*05b00f60SXin Li ND_PRINT(" ");
212*05b00f60SXin Li
213*05b00f60SXin Li hdr_src_cid = GET_LE_U_8(hdr->src_cid);
214*05b00f60SXin Li hdr_dst_cid = GET_LE_U_8(hdr->dst_cid);
215*05b00f60SXin Li hdr_src_port = GET_LE_U_4(hdr->src_port);
216*05b00f60SXin Li hdr_dst_port = GET_LE_U_4(hdr->dst_port);
217*05b00f60SXin Li hdr_op = GET_LE_U_2(hdr->op);
218*05b00f60SXin Li ND_PRINT("%" PRIu64 ".%u > %" PRIu64 ".%u %s, length %u",
219*05b00f60SXin Li hdr_src_cid, hdr_src_port,
220*05b00f60SXin Li hdr_dst_cid, hdr_dst_port,
221*05b00f60SXin Li tok2str(vsock_op, " invalid op (%u)", hdr_op),
222*05b00f60SXin Li caplen);
223*05b00f60SXin Li
224*05b00f60SXin Li if (ret < 0)
225*05b00f60SXin Li goto trunc;
226*05b00f60SXin Li
227*05b00f60SXin Li /* If debug level is more than 1 print payload contents */
228*05b00f60SXin Li /* This size had better fit in a u_int */
229*05b00f60SXin Li total_hdr_size = (u_int)sizeof(struct af_vsockmon_hdr) +
230*05b00f60SXin Li vsock_transport_hdr_size(hdr_transport);
231*05b00f60SXin Li if (ndo->ndo_vflag > 1 && hdr_op == AF_VSOCK_OP_PAYLOAD) {
232*05b00f60SXin Li if (caplen > total_hdr_size) {
233*05b00f60SXin Li const u_char *payload = p + total_hdr_size;
234*05b00f60SXin Li
235*05b00f60SXin Li ND_PRINT("\n");
236*05b00f60SXin Li print_unknown_data(ndo, payload, "\t",
237*05b00f60SXin Li caplen - total_hdr_size);
238*05b00f60SXin Li } else
239*05b00f60SXin Li goto trunc;
240*05b00f60SXin Li }
241*05b00f60SXin Li return;
242*05b00f60SXin Li
243*05b00f60SXin Li trunc:
244*05b00f60SXin Li nd_print_trunc(ndo);
245*05b00f60SXin Li }
246*05b00f60SXin Li
247*05b00f60SXin Li void
vsock_if_print(netdissect_options * ndo,const struct pcap_pkthdr * h,const u_char * cp)248*05b00f60SXin Li vsock_if_print(netdissect_options *ndo, const struct pcap_pkthdr *h,
249*05b00f60SXin Li const u_char *cp)
250*05b00f60SXin Li {
251*05b00f60SXin Li u_int caplen = h->caplen;
252*05b00f60SXin Li
253*05b00f60SXin Li ndo->ndo_protocol = "vsock";
254*05b00f60SXin Li
255*05b00f60SXin Li if (caplen < sizeof(struct af_vsockmon_hdr)) {
256*05b00f60SXin Li nd_print_trunc(ndo);
257*05b00f60SXin Li ndo->ndo_ll_hdr_len += caplen;
258*05b00f60SXin Li return;
259*05b00f60SXin Li }
260*05b00f60SXin Li ndo->ndo_ll_hdr_len += sizeof(struct af_vsockmon_hdr);
261*05b00f60SXin Li vsock_hdr_print(ndo, cp, caplen);
262*05b00f60SXin Li }
263