| %top { | |
| /* Must come first for _LARGE_FILE_API on AIX. */ | |
| #ifdef HAVE_CONFIG_H | |
| #include <config.h> | |
| #endif | |
| /* | |
| * Must come first to avoid warnings on Windows. | |
| * | |
| * Flex-generated scanners may only include <inttypes.h> if __STDC_VERSION__ | |
| * is defined with a value >= 199901, meaning "full C99", and MSVC may not | |
| * define it with that value, because it isn't 100% C99-compliant, even | |
| * though it has an <inttypes.h> capable of defining everything the Flex | |
| * scanner needs. | |
| * | |
| * We, however, will include it if we know we have an MSVC version that has | |
| * it; this means that we may define the INTn_MAX and UINTn_MAX values in | |
| * scanner.c, and then include <stdint.h>, which may define them differently | |
| * (same value, but different string of characters), causing compiler warnings. | |
| * | |
| * If we include it here, and they're defined, that'll prevent scanner.c | |
| * from defining them. So we include <pcap/pcap-inttypes.h>, to get | |
| * <inttypes.h> if we have it. | |
| */ | |
| #include <pcap/pcap-inttypes.h> | |
| } | |
| /* | |
| * We want a reentrant scanner. | |
| */ | |
| %option reentrant | |
| /* | |
| * And we need to pass the compiler state to the scanner. | |
| */ | |
| %option extra-type="compiler_state_t *" | |
| /* | |
| * We don't use input, so don't generate code for it. | |
| */ | |
| %option noinput | |
| /* | |
| * We don't use unput, so don't generate code for it. | |
| */ | |
| %option nounput | |
| /* | |
| * We don't read from the terminal. | |
| */ | |
| %option never-interactive | |
| /* | |
| * We want to stop processing when we get to the end of the input. | |
| */ | |
| %option noyywrap | |
| /* | |
| * We want to generate code that can be used by a reentrant parser | |
| * generated by Bison or Berkeley YACC. | |
| */ | |
| %option bison-bridge | |
| %{ | |
| /* | |
| * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997 | |
| * The Regents of the University of California. All rights reserved. | |
| * | |
| * Redistribution and use in source and binary forms, with or without | |
| * modification, are permitted provided that: (1) source code distributions | |
| * retain the above copyright notice and this paragraph in its entirety, (2) | |
| * distributions including binary code include the above copyright notice and | |
| * this paragraph in its entirety in the documentation or other materials | |
| * provided with the distribution, and (3) all advertising materials mentioning | |
| * features or use of this software display the following acknowledgement: | |
| * ``This product includes software developed by the University of California, | |
| * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of | |
| * the University nor the names of its contributors may be used to endorse | |
| * or promote products derived from this software without specific prior | |
| * written permission. | |
| * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED | |
| * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF | |
| * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. | |
| */ | |
| #include <ctype.h> | |
| #include <string.h> | |
| #include "pcap-int.h" | |
| #include "gencode.h" | |
| #include "grammar.h" | |
| /* | |
| * Earlier versions of Flex don't declare these, so we declare them | |
| * ourselves to squelch warnings. | |
| */ | |
| int pcap_get_column(yyscan_t); | |
| void pcap_set_column(int, yyscan_t); | |
| #ifdef INET6 | |
| #ifdef _WIN32 | |
| #include <winsock2.h> | |
| #include <ws2tcpip.h> | |
| /* | |
| * To quote the MSDN page for getaddrinfo() at | |
| * | |
| * https://msdn.microsoft.com/en-us/library/windows/desktop/ms738520(v=vs.85).aspx | |
| * | |
| * "Support for getaddrinfo on Windows 2000 and older versions | |
| * The getaddrinfo function was added to the Ws2_32.dll on Windows XP and | |
| * later. To execute an application that uses this function on earlier | |
| * versions of Windows, then you need to include the Ws2tcpip.h and | |
| * Wspiapi.h files. When the Wspiapi.h include file is added, the | |
| * getaddrinfo function is defined to the WspiapiGetAddrInfo inline | |
| * function in the Wspiapi.h file. At runtime, the WspiapiGetAddrInfo | |
| * function is implemented in such a way that if the Ws2_32.dll or the | |
| * Wship6.dll (the file containing getaddrinfo in the IPv6 Technology | |
| * Preview for Windows 2000) does not include getaddrinfo, then a | |
| * version of getaddrinfo is implemented inline based on code in the | |
| * Wspiapi.h header file. This inline code will be used on older Windows | |
| * platforms that do not natively support the getaddrinfo function." | |
| * | |
| * We use getaddrinfo(), so we include Wspiapi.h here. | |
| */ | |
| #include <wspiapi.h> | |
| #else /* _WIN32 */ | |
| #include <sys/socket.h> /* for "struct sockaddr" in "struct addrinfo" */ | |
| #include <netdb.h> /* for "struct addrinfo" */ | |
| #endif /* _WIN32 */ | |
| /* Workaround for AIX 4.3 */ | |
| #if !defined(AI_NUMERICHOST) | |
| #define AI_NUMERICHOST 0x04 | |
| #endif | |
| #endif /*INET6*/ | |
| #include <pcap/namedb.h> | |
| #include "grammar.h" | |
| #ifdef HAVE_OS_PROTO_H | |
| #include "os-proto.h" | |
| #endif | |
| static int stoi(char *); | |
| static inline int xdtoi(int); | |
| %} | |
| N ([0-9]+|(0X|0x)[0-9A-Fa-f]+) | |
| B ([0-9A-Fa-f][0-9A-Fa-f]?) | |
| B2 ([0-9A-Fa-f][0-9A-Fa-f][0-9A-Fa-f][0-9A-Fa-f]) | |
| W ([0-9A-Fa-f][0-9A-Fa-f]?[0-9A-Fa-f]?[0-9A-Fa-f]?) | |
| %a 18400 | |
| %o 21500 | |
| %e 7600 | |
| %k 4550 | |
| %p 27600 | |
| %n 2000 | |
| V680 {W}:{W}:{W}:{W}:{W}:{W}:{W}:{W} | |
| V670 ::{W}:{W}:{W}:{W}:{W}:{W}:{W} | |
| V671 {W}::{W}:{W}:{W}:{W}:{W}:{W} | |
| V672 {W}:{W}::{W}:{W}:{W}:{W}:{W} | |
| V673 {W}:{W}:{W}::{W}:{W}:{W}:{W} | |
| V674 {W}:{W}:{W}:{W}::{W}:{W}:{W} | |
| V675 {W}:{W}:{W}:{W}:{W}::{W}:{W} | |
| V676 {W}:{W}:{W}:{W}:{W}:{W}::{W} | |
| V677 {W}:{W}:{W}:{W}:{W}:{W}:{W}:: | |
| V660 ::{W}:{W}:{W}:{W}:{W}:{W} | |
| V661 {W}::{W}:{W}:{W}:{W}:{W} | |
| V662 {W}:{W}::{W}:{W}:{W}:{W} | |
| V663 {W}:{W}:{W}::{W}:{W}:{W} | |
| V664 {W}:{W}:{W}:{W}::{W}:{W} | |
| V665 {W}:{W}:{W}:{W}:{W}::{W} | |
| V666 {W}:{W}:{W}:{W}:{W}:{W}:: | |
| V650 ::{W}:{W}:{W}:{W}:{W} | |
| V651 {W}::{W}:{W}:{W}:{W} | |
| V652 {W}:{W}::{W}:{W}:{W} | |
| V653 {W}:{W}:{W}::{W}:{W} | |
| V654 {W}:{W}:{W}:{W}::{W} | |
| V655 {W}:{W}:{W}:{W}:{W}:: | |
| V640 ::{W}:{W}:{W}:{W} | |
| V641 {W}::{W}:{W}:{W} | |
| V642 {W}:{W}::{W}:{W} | |
| V643 {W}:{W}:{W}::{W} | |
| V644 {W}:{W}:{W}:{W}:: | |
| V630 ::{W}:{W}:{W} | |
| V631 {W}::{W}:{W} | |
| V632 {W}:{W}::{W} | |
| V633 {W}:{W}:{W}:: | |
| V620 ::{W}:{W} | |
| V621 {W}::{W} | |
| V622 {W}:{W}:: | |
| V610 ::{W} | |
| V611 {W}:: | |
| V600 :: | |
| V6604 {W}:{W}:{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} | |
| V6504 ::{W}:{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} | |
| V6514 {W}::{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} | |
| V6524 {W}:{W}::{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} | |
| V6534 {W}:{W}:{W}::{W}:{W}:{N}\.{N}\.{N}\.{N} | |
| V6544 {W}:{W}:{W}:{W}::{W}:{N}\.{N}\.{N}\.{N} | |
| V6554 {W}:{W}:{W}:{W}:{W}::{N}\.{N}\.{N}\.{N} | |
| V6404 ::{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} | |
| V6414 {W}::{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} | |
| V6424 {W}:{W}::{W}:{W}:{N}\.{N}\.{N}\.{N} | |
| V6434 {W}:{W}:{W}::{W}:{N}\.{N}\.{N}\.{N} | |
| V6444 {W}:{W}:{W}:{W}::{N}\.{N}\.{N}\.{N} | |
| V6304 ::{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} | |
| V6314 {W}::{W}:{W}:{N}\.{N}\.{N}\.{N} | |
| V6324 {W}:{W}::{W}:{N}\.{N}\.{N}\.{N} | |
| V6334 {W}:{W}:{W}::{N}\.{N}\.{N}\.{N} | |
| V6204 ::{W}:{W}:{N}\.{N}\.{N}\.{N} | |
| V6214 {W}::{W}:{N}\.{N}\.{N}\.{N} | |
| V6224 {W}:{W}::{N}\.{N}\.{N}\.{N} | |
| V6104 ::{W}:{N}\.{N}\.{N}\.{N} | |
| V6114 {W}::{N}\.{N}\.{N}\.{N} | |
| V6004 ::{N}\.{N}\.{N}\.{N} | |
| V6 ({V680}|{V670}|{V671}|{V672}|{V673}|{V674}|{V675}|{V676}|{V677}|{V660}|{V661}|{V662}|{V663}|{V664}|{V665}|{V666}|{V650}|{V651}|{V652}|{V653}|{V654}|{V655}|{V640}|{V641}|{V642}|{V643}|{V644}|{V630}|{V631}|{V632}|{V633}|{V620}|{V621}|{V622}|{V610}|{V611}|{V600}|{V6604}|{V6504}|{V6514}|{V6524}|{V6534}|{V6544}|{V6554}|{V6404}|{V6414}|{V6424}|{V6434}|{V6444}|{V6304}|{V6314}|{V6324}|{V6334}|{V6204}|{V6214}|{V6224}|{V6104}|{V6114}|{V6004}) | |
| MAC ({B}:{B}:{B}:{B}:{B}:{B}|{B}\-{B}\-{B}\-{B}\-{B}\-{B}|{B}\.{B}\.{B}\.{B}\.{B}\.{B}|{B2}\.{B2}\.{B2}|{B2}{3}) | |
| %% | |
| dst return DST; | |
| src return SRC; | |
| link|ether|ppp|slip return LINK; | |
| fddi|tr|wlan return LINK; | |
| arp return ARP; | |
| rarp return RARP; | |
| ip return IP; | |
| sctp return SCTP; | |
| tcp return TCP; | |
| udp return UDP; | |
| icmp return ICMP; | |
| igmp return IGMP; | |
| igrp return IGRP; | |
| pim return PIM; | |
| vrrp return VRRP; | |
| carp return CARP; | |
| radio return RADIO; | |
| ip6 return IPV6; | |
| icmp6 return ICMPV6; | |
| ah return AH; | |
| esp return ESP; | |
| atalk return ATALK; | |
| aarp return AARP; | |
| decnet return DECNET; | |
| lat return LAT; | |
| sca return SCA; | |
| moprc return MOPRC; | |
| mopdl return MOPDL; | |
| iso return ISO; | |
| esis return ESIS; | |
| es-is return ESIS; | |
| isis return ISIS; | |
| is-is return ISIS; | |
| l1 return L1; | |
| l2 return L2; | |
| iih return IIH; | |
| lsp return LSP; | |
| snp return SNP; | |
| csnp return CSNP; | |
| psnp return PSNP; | |
| clnp return CLNP; | |
| stp return STP; | |
| ipx return IPX; | |
| netbeui return NETBEUI; | |
| host return HOST; | |
| net return NET; | |
| mask return NETMASK; | |
| port return PORT; | |
| portrange return PORTRANGE; | |
| proto return PROTO; | |
| protochain { | |
| #ifdef NO_PROTOCHAIN | |
| bpf_error(yyextra, "%s not supported", yytext); | |
| #else | |
| return PROTOCHAIN; | |
| #endif | |
| } | |
| gateway return GATEWAY; | |
| type return TYPE; | |
| subtype return SUBTYPE; | |
| direction|dir return DIR; | |
| address1|addr1 return ADDR1; | |
| address2|addr2 return ADDR2; | |
| address3|addr3 return ADDR3; | |
| address4|addr4 return ADDR4; | |
| ra return RA; | |
| ta return TA; | |
| less return LESS; | |
| greater return GREATER; | |
| byte return CBYTE; | |
| broadcast return TK_BROADCAST; | |
| multicast return TK_MULTICAST; | |
| and|"&&" return AND; | |
| or|"||" return OR; | |
| not return '!'; | |
| len|length return LEN; | |
| inbound return INBOUND; | |
| outbound return OUTBOUND; | |
| vlan return VLAN; | |
| mpls return MPLS; | |
| pppoed return PPPOED; | |
| pppoes return PPPOES; | |
| geneve return GENEVE; | |
| lane return LANE; | |
| llc return LLC; | |
| metac return METAC; | |
| bcc return BCC; | |
| oam return OAM; | |
| oamf4 return OAMF4; | |
| oamf4ec return OAMF4EC; | |
| oamf4sc return OAMF4SC; | |
| sc return SC; | |
| ilmic return ILMIC; | |
| vpi return VPI; | |
| vci return VCI; | |
| connectmsg return CONNECTMSG; | |
| metaconnect return METACONNECT; | |
| on|ifname return PF_IFNAME; | |
| rset|ruleset return PF_RSET; | |
| rnr|rulenum return PF_RNR; | |
| srnr|subrulenum return PF_SRNR; | |
| reason return PF_REASON; | |
| action return PF_ACTION; | |
| fisu return FISU; | |
| lssu return LSSU; | |
| lsu return LSSU; | |
| msu return MSU; | |
| hfisu return HFISU; | |
| hlssu return HLSSU; | |
| hmsu return HMSU; | |
| sio return SIO; | |
| opc return OPC; | |
| dpc return DPC; | |
| sls return SLS; | |
| hsio return HSIO; | |
| hopc return HOPC; | |
| hdpc return HDPC; | |
| hsls return HSLS; | |
| [ \r\n\t] ; | |
| [+\-*/%:\[\]!<>()&|\^=] return yytext[0]; | |
| ">=" return GEQ; | |
| "<=" return LEQ; | |
| "!=" return NEQ; | |
| "==" return '='; | |
| "<<" return LSH; | |
| ">>" return RSH; | |
| ${B} { yylval->e = pcap_ether_aton(((char *)yytext)+1); | |
| if (yylval->e == NULL) | |
| bpf_error(yyextra, "malloc"); | |
| return AID; } | |
| {MAC} { yylval->e = pcap_ether_aton((char *)yytext); | |
| if (yylval->e == NULL) | |
| bpf_error(yyextra, "malloc"); | |
| return EID; } | |
| {N} { yylval->i = stoi((char *)yytext); return NUM; } | |
| ({N}\.{N})|({N}\.{N}\.{N})|({N}\.{N}\.{N}\.{N}) { | |
| yylval->s = sdup(yyextra, (char *)yytext); return HID; } | |
| {V6} { | |
| #ifdef INET6 | |
| struct addrinfo hints, *res; | |
| memset(&hints, 0, sizeof(hints)); | |
| hints.ai_family = AF_INET6; | |
| hints.ai_flags = AI_NUMERICHOST; | |
| if (getaddrinfo(yytext, NULL, &hints, &res)) | |
| bpf_error(yyextra, "bogus IPv6 address %s", yytext); | |
| else { | |
| freeaddrinfo(res); | |
| yylval->s = sdup(yyextra, (char *)yytext); return HID6; | |
| } | |
| #else | |
| bpf_error(yyextra, "IPv6 address %s not supported", yytext); | |
| #endif /*INET6*/ | |
| } | |
| {B}:+({B}:+)+ { bpf_error(yyextra, "bogus ethernet address %s", yytext); } | |
| icmptype { yylval->i = 0; return NUM; } | |
| icmpcode { yylval->i = 1; return NUM; } | |
| icmp-echoreply { yylval->i = 0; return NUM; } | |
| icmp-unreach { yylval->i = 3; return NUM; } | |
| icmp-sourcequench { yylval->i = 4; return NUM; } | |
| icmp-redirect { yylval->i = 5; return NUM; } | |
| icmp-echo { yylval->i = 8; return NUM; } | |
| icmp-routeradvert { yylval->i = 9; return NUM; } | |
| icmp-routersolicit { yylval->i = 10; return NUM; } | |
| icmp-timxceed { yylval->i = 11; return NUM; } | |
| icmp-paramprob { yylval->i = 12; return NUM; } | |
| icmp-tstamp { yylval->i = 13; return NUM; } | |
| icmp-tstampreply { yylval->i = 14; return NUM; } | |
| icmp-ireq { yylval->i = 15; return NUM; } | |
| icmp-ireqreply { yylval->i = 16; return NUM; } | |
| icmp-maskreq { yylval->i = 17; return NUM; } | |
| icmp-maskreply { yylval->i = 18; return NUM; } | |
| tcpflags { yylval->i = 13; return NUM; } | |
| tcp-fin { yylval->i = 0x01; return NUM; } | |
| tcp-syn { yylval->i = 0x02; return NUM; } | |
| tcp-rst { yylval->i = 0x04; return NUM; } | |
| tcp-push { yylval->i = 0x08; return NUM; } | |
| tcp-ack { yylval->i = 0x10; return NUM; } | |
| tcp-urg { yylval->i = 0x20; return NUM; } | |
| tcp-ece { yylval->i = 0x40; return NUM; } | |
| tcp-cwr { yylval->i = 0x80; return NUM; } | |
| [A-Za-z0-9]([-_.A-Za-z0-9]*[.A-Za-z0-9])? { | |
| yylval->s = sdup(yyextra, (char *)yytext); return ID; } | |
| "\\"[^ !()\n\t]+ { yylval->s = sdup(yyextra, (char *)yytext + 1); return ID; } | |
| [^ \[\]\t\n\-_.A-Za-z0-9!<>()&|=]+ { | |
| bpf_error(yyextra, "illegal token: %s", yytext); } | |
| . { bpf_error(yyextra, "illegal char '%c'", *yytext); } | |
| %% | |
| /* Hex digit to integer. */ | |
| static inline int | |
| xdtoi(c) | |
| register int c; | |
| { | |
| if (isdigit(c)) | |
| return c - '0'; | |
| else if (islower(c)) | |
| return c - 'a' + 10; | |
| else | |
| return c - 'A' + 10; | |
| } | |
| /* | |
| * Convert string to integer. Just like atoi(), but checks for | |
| * preceding 0x or 0 and uses hex or octal instead of decimal. | |
| */ | |
| static int | |
| stoi(s) | |
| char *s; | |
| { | |
| int base = 10; | |
| int n = 0; | |
| if (*s == '0') { | |
| if (s[1] == 'x' || s[1] == 'X') { | |
| s += 2; | |
| base = 16; | |
| } | |
| else { | |
| base = 8; | |
| s += 1; | |
| } | |
| } | |
| while (*s) | |
| n = n * base + xdtoi(*s++); | |
| return n; | |
| } |