1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
|
/*******************************************************************************
*
* Copyright (c) 2013 Robert Krause (ruport@f00l.de)
*
* This file is part of Netmate.
*
* Netmate is free software: you can redistribute it and/or modify it under the
* terms of the GNU General Public License as published by the Free Software
* Foundation, either version 3 of the License, or any later version.
*
* Netmate is distributed in the hope that it will be useful, but WITHOUT ANY
* WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
* FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License along with
* Netmate. If not, see http://www.gnu.org/licenses/.
*
******************************************************************************/
/******************************************************************************/
/* netmate layer2 protocols */
/******************************************************************************/
char *hardwaretype(unsigned short id);
char *ethertype(unsigned short id);
GtkGrid *ethernet_grid(struct ether_header *eth); /* ethernet */
GtkGrid *sll_grid(struct sll_header *sll); /* ssl (linux cooked) */
/******************************************************************************/
/* taken from http://www.tcpdump.org/linktypes.html */
char *hardwaretype(unsigned short id) {
switch (id) {
case 0:
return("NULL");
case 1:
return("ETHERNET");
case 3:
return("AX25");
case 6:
return("IEEE802_5");
case 7:
return("ARCNET_BSD");
case 8:
return("SLIP");
case 9:
return("PPP");
case 10:
return("FDDI");
case 50:
return("PPP_HDLC");
case 51:
return("PPP_ETHER");
case 100:
return("ATM_RFC1483");
case 101:
return("RAW");
case 104:
return("C_HDLC");
case 105:
return("IEEE802_11");
case 107:
return("FRELAY");
case 108:
return("LOOP");
case 113:
return("LINUX_SLL");
case 114:
return("LTALK");
case 117:
return("PFLOG");
case 119:
return("IEEE802_11_PRISM");
case 122:
return("IP_OVER_FC");
case 123:
return("SUNATM");
case 127:
return("IEEE802_11_RADIOTAP");
case 129:
return("ARCNET_LINUX");
case 138:
return("APPLE_IP_OVER_IEEE1394");
case 139:
return("MTP2_WITH_PHDR");
case 140:
return("MTP2");
case 141:
return("MTP3");
case 142:
return("SCCP");
case 143:
return("DOCSIS");
case 144:
return("LINUX_IRDA");
case 163:
return("IEEE802_11_AVS");
case 165:
return("BACNET_MS_TP");
case 166:
return("PPP_PPPD");
case 169:
return("GPRS_LLC");
case 177:
return("LINUX_LAPD");
case 187:
return("BLUETOOTH_HCI_H4");
case 189:
return("USB_LINUX");
case 192:
return("PPI");
case 195:
return("IEEE802_15_4");
case 196:
return("SITA");
case 197:
return("ERF");
case 201:
return("BLUETOOTH_HCI_H4_WITH_PHDR");
case 202:
return("AX25_KISS");
case 203:
return("LAPD");
case 204:
return("PPP_WITH_DIR");
case 205:
return("C_HDLC_WITH_DIR");
case 206:
return("FRELAY_WITH_DIR");
case 209:
return("IPMB_LINUX");
case 215:
return("IEEE802_15_4_NONASK_PHY");
case 220:
return("USB_LINUX_MMAPPED");
case 224:
return("FC_2");
case 225:
return("FC_2_WITH_FRAME_DELIMS");
case 226:
return("IPNET");
case 227:
return("CAN_SOCKETCAN");
case 228:
return("IPV4");
case 229:
return("IPV6");
case 230:
return("IEEE802_15_4_NOFCS");
case 231:
return("DBUS");
case 235:
return("DVB_CI");
case 236:
return("MUX27010");
case 237:
return("STANAG_5066_D_PDU");
case 239:
return("NFLOG");
case 240:
return("NETANALYZER");
case 241:
return("NETANALYZER_TRANSPARENT");
case 242:
return("IPOIB");
case 243:
return("MPEG_2_TS");
case 244:
return("NG40");
case 245:
return("NFC_LLCP");
case 247:
return("INFINIBAND");
case 248:
return("SCTP");
case 249:
return("USBPCAP");
case 250:
return("RTAC_SERIAL");
case 251:
return("BLUETOOTH_LE_LL");
}
return("UNKNOWN");
}
/* taken from http://en.wikipedia.org/wiki/EtherType */
char *ethertype(unsigned short id) {
switch (id) {
case 0x0800:
return("IPv4");
case 0x0806:
return("ARP");
case 0x0842:
return("Wake-on-LAN");
case 0x22F3:
return("IETF TRILL Protocol");
case 0x6003:
return("DECnet Phase IV");
case 0x8035:
return("RARP");
case 0x809B:
return("AppleTalk (Ethertalk)");
case 0x80F3:
return("AARP");
case 0x8100:
return("VLAN-tagged frame (IEEE 802.1Q)");
case 0x8137:
return("IPX");
case 0x8138:
return("IPX");
case 0x8204:
return("QNX Qnet");
case 0x86DD:
return("IPv6");
case 0x8808:
return("Ethernet flow control");
case 0x8809:
return("Slow Protocols (IEEE 802.3)");
case 0x8819:
return("CobraNet");
case 0x8847:
return("MPLS unicast");
case 0x8848:
return("MPLS multicast");
case 0x8863:
return("PPPoE Discovery Stage");
case 0x8864:
return("PPPoE Session Stage");
case 0x8870:
return("Jumbo Frames");
case 0x887B:
return("HomePlug 1.0 MME");
case 0x888E:
return("EAP over LAN (IEEE 802.1X)");
case 0x8892:
return("PROFINET Protocol");
case 0x889A:
return("HyperSCSI");
case 0x88A2:
return("ATA over Ethernet");
case 0x88A4:
return("EtherCAT Protocol");
case 0x88A8:
return("Provider Bridging (IEEE 802.1ad)");
case 0x88AB:
return("Ethernet Powerlink");
case 0x88CC:
return("LLDP");
case 0x88CD:
return("SERCOS III");
case 0x88E1:
return("HomePlug AV MME");
case 0x88E3:
return("Media Redundancy Protocol (IEC62439-2)");
case 0x88E5:
return("MAC security (IEEE 802.1AE)");
case 0x88F7:
return("Precision Time Protocol (IEEE 1588)");
case 0x8902:
return("IEEE 802.1ag Connectivity Fault Management (CFM) Protocol");
case 0x8906:
return("Fibre Channel over Ethernet (FCoE)");
case 0x8914:
return("FCoE Initialization Protocol");
case 0x8915:
return("RDMA over Converged Ethernet (RoCE)");
case 0x892F:
return("High-availability Seamless Redundancy (HSR)");
case 0x9000:
return("Ethernet Configuration Testing Protocol");
case 0x9100:
return("Q-in-Q");
case 0xCAFE:
return("Veritas Low Latency Transport (LLT)");
}
return("UNKNOWN");
}
GtkGrid *sll_grid(struct sll_header *sll) {
GtkGrid *grid; /* the grid itself */
int x, y; /* position of next empty grid cell */
char *label; /* label of buttons to set */
/* init a new empty grid */
grid = GTK_GRID(gtk_grid_new());
/* set columns to be uniform sized (for better bit size representation) */
gtk_grid_set_column_homogeneous(grid, TRUE);
/* allocate memory for button label */
label = malloc(100);
/* build bit indication topic line (0 1 2 .. 31) */
for (x=0; x<32; x++) {
sprintf(label, "%u", x);
gtk_grid_attach(grid, gtk_label_new(label), x, 0, 1, 1);
}
/* set cell pointer to next empty grid cell */
x=0;
y=1;
/* Packet Type */
switch (htons(sll->sll_pkttype)) {
case 0:
sprintf(label, "Packet Type: %u (%s)", htons(sll->sll_pkttype), "Sent to us (unicast)");
break;
case 1:
sprintf(label, "Packet Type: %u (%s)", htons(sll->sll_pkttype), "Sent to us (broadcast)");
break;
case 2:
sprintf(label, "Packet Type: %u (%s)", htons(sll->sll_pkttype), "Sent to us (multicast)");
break;
case 3:
sprintf(label, "Packet Type: %u (%s)", htons(sll->sll_pkttype), "Sent to someone else (unicast)");
break;
case 4:
sprintf(label, "Packet Type: %u (%s)", htons(sll->sll_pkttype), "Sent by us");
break;
default:
sprintf(label, "Packet Type: %u (%s)", htons(sll->sll_pkttype), "UNKNOWN");
}
append_field(grid, &x, &y, sizeof(sll->sll_pkttype)*8, label, SLL_PACKET_TYPE);
/* ARP Header Type */
sprintf(label, "ARPHRD_ Type: %u (%s)", htons(sll->sll_hatype), hardwaretype(htons(sll->sll_hatype)));
append_field(grid, &x, &y, sizeof(sll->sll_hatype)*8, label, SLL_ARPHRD_TYPE);
/* Link-layer Address Length */
sprintf(label, "Link-layer Address Length: %u", htons(sll->sll_halen));
append_field(grid, &x, &y, sizeof(sll->sll_halen)*8, label, SLL_LLA_LENGTH);
/* Link-layer Address */
sprintf(label, "Link-layer Address: %02x:%02x:%02x:%02x:%02x:%02x:%02x:%02x", sll->sll_addr[0], sll->sll_addr[1], sll->sll_addr[2], sll->sll_addr[3], sll->sll_addr[4], sll->sll_addr[5], sll->sll_addr[6], sll->sll_addr[7]);
append_field(grid, &x, &y, sizeof(sll->sll_addr)*8, label, SLL_LLA);
/* Upper Layer Protocol */
sprintf(label, "Protocol Type: 0x%04x (%s)", htons(sll->sll_protocol), ethertype(htons(sll->sll_protocol)));
append_field(grid, &x, &y, sizeof(sll->sll_protocol)*8, label, SLL_PROTOCOL);
/* free memory of label */
free(label);
/* show ethernet grid (tab) */
gtk_widget_show_all(GTK_WIDGET(grid));
/* return grid to tab builder */
return(grid);
}
GtkGrid *ethernet_grid(struct ether_header *eth) {
GtkGrid *grid; /* the grid itself */
int x, y; /* position pointer to next empty grid cell */
char *label; /* label of buttons to set */
/* init new empty grid */
grid = GTK_GRID(gtk_grid_new());
/* set columns to be uniform sized (for better bit size representation) */
gtk_grid_set_column_homogeneous(grid, TRUE);
/* allocate memory for button label */
label = malloc(100);
/* build bit indication topic line (0 1 2 .. 31) */
for (x=0; x<32; x++) {
sprintf(label, "%u", x);
gtk_grid_attach(grid, gtk_label_new(label), x, 0, 1, 1);
}
/* set cell pointer to next empty grid cell */
x=0;
y=1;
/* destination mac */
sprintf(label, "Destination: %02x:%02x:%02x:%02x:%02x:%02x", eth->ether_dhost[0], eth->ether_dhost[1], eth->ether_dhost[2], eth->ether_dhost[3], eth->ether_dhost[4], eth->ether_dhost[5]);
append_field(grid, &x, &y, sizeof(eth->ether_dhost)*8, label, ETHERNET_DESTINATION);
/* source mac */
sprintf(label, "Source: %02x:%02x:%02x:%02x:%02x:%02x", eth->ether_shost[0], eth->ether_shost[1], eth->ether_shost[2], eth->ether_shost[3], eth->ether_shost[4], eth->ether_shost[5]);
append_field(grid, &x, &y, sizeof(eth->ether_shost)*8, label, ETHERNET_DESTINATION);
/* upper layer protocol */
sprintf(label, "Type: 0x%04x (%s)", htons(eth->ether_type), ethertype(htons(eth->ether_type)));
append_field(grid, &x, &y, sizeof(eth->ether_type)*8, label, ETHERNET_TYPE);
/* free memory of label */
free(label);
/* show ethernet grid (tab) */
gtk_widget_show_all(GTK_WIDGET(grid));
/* return grid to tab builder */
return(grid);
}
|
