| %top { |
| /* Must come first for _LARGE_FILE_API on AIX. */ |
| #ifdef HAVE_CONFIG_H |
| #include "config.h" |
| #endif |
| } |
| |
| /* |
| * We want a reentrant scanner. |
| */ |
| %option reentrant |
| |
| /* |
| * And we need to pass the compiler state to the scanner. |
| */ |
| %option extra-type="compiler_state_t *" |
| |
| /* |
| * We don't use input, so don't generate code for it. |
| */ |
| %option noinput |
| |
| /* |
| * We don't use unput, so don't generate code for it. |
| */ |
| %option nounput |
| |
| /* |
| * We don't read from the terminal. |
| */ |
| %option never-interactive |
| |
| /* |
| * We want to stop processing when we get to the end of the input. |
| */ |
| %option noyywrap |
| |
| /* |
| * We want to generate code that can be used by a reentrant parser |
| * generated by Bison or Berkeley YACC. |
| */ |
| %option bison-bridge |
| |
| %{ |
| /* |
| * Copyright (c) 1988, 1989, 1990, 1991, 1992, 1993, 1994, 1995, 1996, 1997 |
| * The Regents of the University of California. All rights reserved. |
| * |
| * Redistribution and use in source and binary forms, with or without |
| * modification, are permitted provided that: (1) source code distributions |
| * retain the above copyright notice and this paragraph in its entirety, (2) |
| * distributions including binary code include the above copyright notice and |
| * this paragraph in its entirety in the documentation or other materials |
| * provided with the distribution, and (3) all advertising materials mentioning |
| * features or use of this software display the following acknowledgement: |
| * ``This product includes software developed by the University of California, |
| * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of |
| * the University nor the names of its contributors may be used to endorse |
| * or promote products derived from this software without specific prior |
| * written permission. |
| * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED |
| * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF |
| * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. |
| */ |
| |
| #ifdef _WIN32 |
| #include <pcap-stdinc.h> |
| #else |
| #if HAVE_INTTYPES_H |
| #include <inttypes.h> |
| #elif HAVE_STDINT_H |
| #include <stdint.h> |
| #endif |
| #ifdef HAVE_SYS_BITYPES_H |
| #include <sys/bitypes.h> |
| #endif |
| #include <sys/types.h> |
| #endif |
| |
| #include <ctype.h> |
| #include <string.h> |
| |
| #include "pcap-int.h" |
| |
| #include "gencode.h" |
| |
| #include "grammar.h" |
| |
| /* |
| * Earlier versions of Flex don't declare these, so we declare them |
| * ourselves to squelch warnings. |
| */ |
| int pcap_get_column(yyscan_t); |
| void pcap_set_column(int, yyscan_t); |
| |
| #ifdef INET6 |
| |
| #ifdef _WIN32 |
| /* |
| * To quote the MSDN page for getaddrinfo() at |
| * |
| * https://msdn.microsoft.com/en-us/library/windows/desktop/ms738520(v=vs.85).aspx |
| * |
| * "Support for getaddrinfo on Windows 2000 and older versions |
| * The getaddrinfo function was added to the Ws2_32.dll on Windows XP and |
| * later. To execute an application that uses this function on earlier |
| * versions of Windows, then you need to include the Ws2tcpip.h and |
| * Wspiapi.h files. When the Wspiapi.h include file is added, the |
| * getaddrinfo function is defined to the WspiapiGetAddrInfo inline |
| * function in the Wspiapi.h file. At runtime, the WspiapiGetAddrInfo |
| * function is implemented in such a way that if the Ws2_32.dll or the |
| * Wship6.dll (the file containing getaddrinfo in the IPv6 Technology |
| * Preview for Windows 2000) does not include getaddrinfo, then a |
| * version of getaddrinfo is implemented inline based on code in the |
| * Wspiapi.h header file. This inline code will be used on older Windows |
| * platforms that do not natively support the getaddrinfo function." |
| * |
| * We use getaddrinfo(), so we include Wspiapi.h here. pcap-stdinc.h |
| * includes Ws2tcpip.h, so we don't need to include it ourselves. |
| */ |
| #include <Wspiapi.h> |
| #else /* _WIN32 */ |
| #include <sys/socket.h> /* for "struct sockaddr" in "struct addrinfo" */ |
| #include <netdb.h> /* for "struct addrinfo" */ |
| #endif /* _WIN32 */ |
| |
| /* Workaround for AIX 4.3 */ |
| #if !defined(AI_NUMERICHOST) |
| #define AI_NUMERICHOST 0x04 |
| #endif |
| |
| #endif /*INET6*/ |
| |
| #include <pcap/namedb.h> |
| #include "grammar.h" |
| |
| #ifdef HAVE_OS_PROTO_H |
| #include "os-proto.h" |
| #endif |
| |
| static int stoi(char *); |
| static inline int xdtoi(int); |
| |
| %} |
| |
| N ([0-9]+|(0X|0x)[0-9A-Fa-f]+) |
| B ([0-9A-Fa-f][0-9A-Fa-f]?) |
| B2 ([0-9A-Fa-f][0-9A-Fa-f][0-9A-Fa-f][0-9A-Fa-f]) |
| W ([0-9A-Fa-f][0-9A-Fa-f]?[0-9A-Fa-f]?[0-9A-Fa-f]?) |
| |
| %a 18400 |
| %o 21500 |
| %e 7600 |
| %k 4550 |
| %p 27600 |
| %n 2000 |
| |
| V680 {W}:{W}:{W}:{W}:{W}:{W}:{W}:{W} |
| |
| V670 ::{W}:{W}:{W}:{W}:{W}:{W}:{W} |
| V671 {W}::{W}:{W}:{W}:{W}:{W}:{W} |
| V672 {W}:{W}::{W}:{W}:{W}:{W}:{W} |
| V673 {W}:{W}:{W}::{W}:{W}:{W}:{W} |
| V674 {W}:{W}:{W}:{W}::{W}:{W}:{W} |
| V675 {W}:{W}:{W}:{W}:{W}::{W}:{W} |
| V676 {W}:{W}:{W}:{W}:{W}:{W}::{W} |
| V677 {W}:{W}:{W}:{W}:{W}:{W}:{W}:: |
| |
| V660 ::{W}:{W}:{W}:{W}:{W}:{W} |
| V661 {W}::{W}:{W}:{W}:{W}:{W} |
| V662 {W}:{W}::{W}:{W}:{W}:{W} |
| V663 {W}:{W}:{W}::{W}:{W}:{W} |
| V664 {W}:{W}:{W}:{W}::{W}:{W} |
| V665 {W}:{W}:{W}:{W}:{W}::{W} |
| V666 {W}:{W}:{W}:{W}:{W}:{W}:: |
| |
| V650 ::{W}:{W}:{W}:{W}:{W} |
| V651 {W}::{W}:{W}:{W}:{W} |
| V652 {W}:{W}::{W}:{W}:{W} |
| V653 {W}:{W}:{W}::{W}:{W} |
| V654 {W}:{W}:{W}:{W}::{W} |
| V655 {W}:{W}:{W}:{W}:{W}:: |
| |
| V640 ::{W}:{W}:{W}:{W} |
| V641 {W}::{W}:{W}:{W} |
| V642 {W}:{W}::{W}:{W} |
| V643 {W}:{W}:{W}::{W} |
| V644 {W}:{W}:{W}:{W}:: |
| |
| V630 ::{W}:{W}:{W} |
| V631 {W}::{W}:{W} |
| V632 {W}:{W}::{W} |
| V633 {W}:{W}:{W}:: |
| |
| V620 ::{W}:{W} |
| V621 {W}::{W} |
| V622 {W}:{W}:: |
| |
| V610 ::{W} |
| V611 {W}:: |
| |
| V600 :: |
| |
| V6604 {W}:{W}:{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} |
| |
| V6504 ::{W}:{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} |
| V6514 {W}::{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} |
| V6524 {W}:{W}::{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} |
| V6534 {W}:{W}:{W}::{W}:{W}:{N}\.{N}\.{N}\.{N} |
| V6544 {W}:{W}:{W}:{W}::{W}:{N}\.{N}\.{N}\.{N} |
| V6554 {W}:{W}:{W}:{W}:{W}::{N}\.{N}\.{N}\.{N} |
| |
| V6404 ::{W}:{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} |
| V6414 {W}::{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} |
| V6424 {W}:{W}::{W}:{W}:{N}\.{N}\.{N}\.{N} |
| V6434 {W}:{W}:{W}::{W}:{N}\.{N}\.{N}\.{N} |
| V6444 {W}:{W}:{W}:{W}::{N}\.{N}\.{N}\.{N} |
| |
| V6304 ::{W}:{W}:{W}:{N}\.{N}\.{N}\.{N} |
| V6314 {W}::{W}:{W}:{N}\.{N}\.{N}\.{N} |
| V6324 {W}:{W}::{W}:{N}\.{N}\.{N}\.{N} |
| V6334 {W}:{W}:{W}::{N}\.{N}\.{N}\.{N} |
| |
| V6204 ::{W}:{W}:{N}\.{N}\.{N}\.{N} |
| V6214 {W}::{W}:{N}\.{N}\.{N}\.{N} |
| V6224 {W}:{W}::{N}\.{N}\.{N}\.{N} |
| |
| V6104 ::{W}:{N}\.{N}\.{N}\.{N} |
| V6114 {W}::{N}\.{N}\.{N}\.{N} |
| |
| V6004 ::{N}\.{N}\.{N}\.{N} |
| |
| |
| V6 ({V680}|{V670}|{V671}|{V672}|{V673}|{V674}|{V675}|{V676}|{V677}|{V660}|{V661}|{V662}|{V663}|{V664}|{V665}|{V666}|{V650}|{V651}|{V652}|{V653}|{V654}|{V655}|{V640}|{V641}|{V642}|{V643}|{V644}|{V630}|{V631}|{V632}|{V633}|{V620}|{V621}|{V622}|{V610}|{V611}|{V600}|{V6604}|{V6504}|{V6514}|{V6524}|{V6534}|{V6544}|{V6554}|{V6404}|{V6414}|{V6424}|{V6434}|{V6444}|{V6304}|{V6314}|{V6324}|{V6334}|{V6204}|{V6214}|{V6224}|{V6104}|{V6114}|{V6004}) |
| |
| MAC ({B}:{B}:{B}:{B}:{B}:{B}|{B}\-{B}\-{B}\-{B}\-{B}\-{B}|{B}\.{B}\.{B}\.{B}\.{B}\.{B}|{B2}\.{B2}\.{B2}|{B2}{3}) |
| |
| |
| |
| %% |
| dst return DST; |
| src return SRC; |
| |
| link|ether|ppp|slip return LINK; |
| fddi|tr|wlan return LINK; |
| arp return ARP; |
| rarp return RARP; |
| ip return IP; |
| sctp return SCTP; |
| tcp return TCP; |
| udp return UDP; |
| icmp return ICMP; |
| igmp return IGMP; |
| igrp return IGRP; |
| pim return PIM; |
| vrrp return VRRP; |
| carp return CARP; |
| radio return RADIO; |
| |
| ip6 return IPV6; |
| icmp6 return ICMPV6; |
| ah return AH; |
| esp return ESP; |
| |
| atalk return ATALK; |
| aarp return AARP; |
| decnet return DECNET; |
| lat return LAT; |
| sca return SCA; |
| moprc return MOPRC; |
| mopdl return MOPDL; |
| |
| iso return ISO; |
| esis return ESIS; |
| es-is return ESIS; |
| isis return ISIS; |
| is-is return ISIS; |
| l1 return L1; |
| l2 return L2; |
| iih return IIH; |
| lsp return LSP; |
| snp return SNP; |
| csnp return CSNP; |
| psnp return PSNP; |
| |
| clnp return CLNP; |
| |
| stp return STP; |
| |
| ipx return IPX; |
| |
| netbeui return NETBEUI; |
| |
| host return HOST; |
| net return NET; |
| mask return NETMASK; |
| port return PORT; |
| portrange return PORTRANGE; |
| proto return PROTO; |
| protochain { |
| #ifdef NO_PROTOCHAIN |
| bpf_error(yyextra, "%s not supported", yytext); |
| #else |
| return PROTOCHAIN; |
| #endif |
| } |
| |
| gateway return GATEWAY; |
| |
| type return TYPE; |
| subtype return SUBTYPE; |
| direction|dir return DIR; |
| address1|addr1 return ADDR1; |
| address2|addr2 return ADDR2; |
| address3|addr3 return ADDR3; |
| address4|addr4 return ADDR4; |
| ra return RA; |
| ta return TA; |
| |
| less return LESS; |
| greater return GREATER; |
| byte return CBYTE; |
| broadcast return TK_BROADCAST; |
| multicast return TK_MULTICAST; |
| |
| and|"&&" return AND; |
| or|"||" return OR; |
| not return '!'; |
| |
| len|length return LEN; |
| inbound return INBOUND; |
| outbound return OUTBOUND; |
| |
| vlan return VLAN; |
| mpls return MPLS; |
| pppoed return PPPOED; |
| pppoes return PPPOES; |
| geneve return GENEVE; |
| |
| lane return LANE; |
| llc return LLC; |
| metac return METAC; |
| bcc return BCC; |
| oam return OAM; |
| oamf4 return OAMF4; |
| oamf4ec return OAMF4EC; |
| oamf4sc return OAMF4SC; |
| sc return SC; |
| ilmic return ILMIC; |
| vpi return VPI; |
| vci return VCI; |
| connectmsg return CONNECTMSG; |
| metaconnect return METACONNECT; |
| |
| on|ifname return PF_IFNAME; |
| rset|ruleset return PF_RSET; |
| rnr|rulenum return PF_RNR; |
| srnr|subrulenum return PF_SRNR; |
| reason return PF_REASON; |
| action return PF_ACTION; |
| |
| fisu return FISU; |
| lssu return LSSU; |
| lsu return LSSU; |
| msu return MSU; |
| hfisu return HFISU; |
| hlssu return HLSSU; |
| hmsu return HMSU; |
| sio return SIO; |
| opc return OPC; |
| dpc return DPC; |
| sls return SLS; |
| hsio return HSIO; |
| hopc return HOPC; |
| hdpc return HDPC; |
| hsls return HSLS; |
| |
| [ \r\n\t] ; |
| [+\-*/%:\[\]!<>()&|\^=] return yytext[0]; |
| ">=" return GEQ; |
| "<=" return LEQ; |
| "!=" return NEQ; |
| "==" return '='; |
| "<<" return LSH; |
| ">>" return RSH; |
| ${B} { yylval->e = pcap_ether_aton(((char *)yytext)+1); |
| if (yylval->e == NULL) |
| bpf_error(yyextra, "malloc"); |
| return AID; } |
| {MAC} { yylval->e = pcap_ether_aton((char *)yytext); |
| if (yylval->e == NULL) |
| bpf_error(yyextra, "malloc"); |
| return EID; } |
| {N} { yylval->i = stoi((char *)yytext); return NUM; } |
| ({N}\.{N})|({N}\.{N}\.{N})|({N}\.{N}\.{N}\.{N}) { |
| yylval->s = sdup(yyextra, (char *)yytext); return HID; } |
| {V6} { |
| #ifdef INET6 |
| struct addrinfo hints, *res; |
| memset(&hints, 0, sizeof(hints)); |
| hints.ai_family = AF_INET6; |
| hints.ai_flags = AI_NUMERICHOST; |
| if (getaddrinfo(yytext, NULL, &hints, &res)) |
| bpf_error(yyextra, "bogus IPv6 address %s", yytext); |
| else { |
| freeaddrinfo(res); |
| yylval->s = sdup(yyextra, (char *)yytext); return HID6; |
| } |
| #else |
| bpf_error(yyextra, "IPv6 address %s not supported", yytext); |
| #endif /*INET6*/ |
| } |
| {B}:+({B}:+)+ { bpf_error(yyextra, "bogus ethernet address %s", yytext); } |
| icmptype { yylval->i = 0; return NUM; } |
| icmpcode { yylval->i = 1; return NUM; } |
| icmp-echoreply { yylval->i = 0; return NUM; } |
| icmp-unreach { yylval->i = 3; return NUM; } |
| icmp-sourcequench { yylval->i = 4; return NUM; } |
| icmp-redirect { yylval->i = 5; return NUM; } |
| icmp-echo { yylval->i = 8; return NUM; } |
| icmp-routeradvert { yylval->i = 9; return NUM; } |
| icmp-routersolicit { yylval->i = 10; return NUM; } |
| icmp-timxceed { yylval->i = 11; return NUM; } |
| icmp-paramprob { yylval->i = 12; return NUM; } |
| icmp-tstamp { yylval->i = 13; return NUM; } |
| icmp-tstampreply { yylval->i = 14; return NUM; } |
| icmp-ireq { yylval->i = 15; return NUM; } |
| icmp-ireqreply { yylval->i = 16; return NUM; } |
| icmp-maskreq { yylval->i = 17; return NUM; } |
| icmp-maskreply { yylval->i = 18; return NUM; } |
| tcpflags { yylval->i = 13; return NUM; } |
| tcp-fin { yylval->i = 0x01; return NUM; } |
| tcp-syn { yylval->i = 0x02; return NUM; } |
| tcp-rst { yylval->i = 0x04; return NUM; } |
| tcp-push { yylval->i = 0x08; return NUM; } |
| tcp-ack { yylval->i = 0x10; return NUM; } |
| tcp-urg { yylval->i = 0x20; return NUM; } |
| [A-Za-z0-9]([-_.A-Za-z0-9]*[.A-Za-z0-9])? { |
| yylval->s = sdup(yyextra, (char *)yytext); return ID; } |
| "\\"[^ !()\n\t]+ { yylval->s = sdup(yyextra, (char *)yytext + 1); return ID; } |
| [^ \[\]\t\n\-_.A-Za-z0-9!<>()&|=]+ { |
| bpf_error(yyextra, "illegal token: %s", yytext); } |
| . { bpf_error(yyextra, "illegal char '%c'", *yytext); } |
| %% |
| |
| /* Hex digit to integer. */ |
| static inline int |
| xdtoi(c) |
| register int c; |
| { |
| if (isdigit(c)) |
| return c - '0'; |
| else if (islower(c)) |
| return c - 'a' + 10; |
| else |
| return c - 'A' + 10; |
| } |
| |
| /* |
| * Convert string to integer. Just like atoi(), but checks for |
| * preceding 0x or 0 and uses hex or octal instead of decimal. |
| */ |
| static int |
| stoi(s) |
| char *s; |
| { |
| int base = 10; |
| int n = 0; |
| |
| if (*s == '0') { |
| if (s[1] == 'x' || s[1] == 'X') { |
| s += 2; |
| base = 16; |
| } |
| else { |
| base = 8; |
| s += 1; |
| } |
| } |
| while (*s) |
| n = n * base + xdtoi(*s++); |
| |
| return n; |
| } |