2 * OSPF Sending and Receiving OSPF Packets.
3 * Copyright (C) 1999, 2000 Toshiaki Takada
5 * This file is part of GNU Zebra.
7 * GNU Zebra is free software; you can redistribute it and/or modify it
8 * under the terms of the GNU General Public License as published by the
9 * Free Software Foundation; either version 2, or (at your option) any
12 * GNU Zebra is distributed in the hope that it will be useful, but
13 * WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
15 * General Public License for more details.
17 * You should have received a copy of the GNU General Public License along
18 * with this program; see the file COPYING; if not, write to the Free Software
19 * Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA
31 #include "sockunion.h"
36 #ifdef CRYPTO_INTERNAL
40 #include "lib_errors.h"
42 #include "ospfd/ospfd.h"
43 #include "ospfd/ospf_network.h"
44 #include "ospfd/ospf_interface.h"
45 #include "ospfd/ospf_ism.h"
46 #include "ospfd/ospf_asbr.h"
47 #include "ospfd/ospf_lsa.h"
48 #include "ospfd/ospf_lsdb.h"
49 #include "ospfd/ospf_neighbor.h"
50 #include "ospfd/ospf_nsm.h"
51 #include "ospfd/ospf_packet.h"
52 #include "ospfd/ospf_spf.h"
53 #include "ospfd/ospf_flood.h"
54 #include "ospfd/ospf_dump.h"
55 #include "ospfd/ospf_errors.h"
58 * OSPF Fragmentation / fragmented writes
60 * ospfd can support writing fragmented packets, for cases where
61 * kernel will not fragment IP_HDRINCL and/or multicast destined
62 * packets (ie TTBOMK all kernels, BSD, SunOS, Linux). However,
63 * SunOS, probably BSD too, clobber the user supplied IP ID and IP
64 * flags fields, hence user-space fragmentation will not work.
65 * Only Linux is known to leave IP header unmolested.
66 * Further, fragmentation really should be done the kernel, which already
67 * supports it, and which avoids nasty IP ID state problems.
69 * Fragmentation of OSPF packets can be required on networks with router
70 * with many many interfaces active in one area, or on networks with links
74 #define WANT_OSPF_WRITE_FRAGMENT
77 /* Packet Type String. */
78 const struct message ospf_packet_type_str
[] = {
79 {OSPF_MSG_HELLO
, "Hello"},
80 {OSPF_MSG_DB_DESC
, "Database Description"},
81 {OSPF_MSG_LS_REQ
, "Link State Request"},
82 {OSPF_MSG_LS_UPD
, "Link State Update"},
83 {OSPF_MSG_LS_ACK
, "Link State Acknowledgment"},
86 /* Minimum (besides OSPF_HEADER_SIZE) lengths for OSPF packets of
87 particular types, offset is the "type" field of a packet. */
88 static const uint16_t ospf_packet_minlen
[] = {
91 OSPF_DB_DESC_MIN_SIZE
,
97 /* Minimum (besides OSPF_LSA_HEADER_SIZE) lengths for LSAs of particular
98 types, offset is the "LSA type" field. */
99 static const uint16_t ospf_lsa_minlen
[] = {
101 OSPF_ROUTER_LSA_MIN_SIZE
,
102 OSPF_NETWORK_LSA_MIN_SIZE
,
103 OSPF_SUMMARY_LSA_MIN_SIZE
,
104 OSPF_SUMMARY_LSA_MIN_SIZE
,
105 OSPF_AS_EXTERNAL_LSA_MIN_SIZE
,
107 OSPF_AS_EXTERNAL_LSA_MIN_SIZE
,
114 /* for ospf_check_auth() */
115 static int ospf_check_sum(struct ospf_header
*);
117 /* OSPF authentication checking function */
118 static int ospf_auth_type(struct ospf_interface
*oi
)
122 if (OSPF_IF_PARAM(oi
, auth_type
) == OSPF_AUTH_NOTSET
)
123 auth_type
= oi
->area
->auth_type
;
125 auth_type
= OSPF_IF_PARAM(oi
, auth_type
);
127 /* Handle case where MD5 key list is not configured aka Cisco */
128 if (auth_type
== OSPF_AUTH_CRYPTOGRAPHIC
129 && list_isempty(OSPF_IF_PARAM(oi
, auth_crypt
)))
130 return OSPF_AUTH_NULL
;
135 static struct ospf_packet
*ospf_packet_new(size_t size
)
137 struct ospf_packet
*new;
139 new = XCALLOC(MTYPE_OSPF_PACKET
, sizeof(struct ospf_packet
));
140 new->s
= stream_new(size
);
145 void ospf_packet_free(struct ospf_packet
*op
)
150 XFREE(MTYPE_OSPF_PACKET
, op
);
153 struct ospf_fifo
*ospf_fifo_new(void)
155 struct ospf_fifo
*new;
157 new = XCALLOC(MTYPE_OSPF_FIFO
, sizeof(struct ospf_fifo
));
161 /* Add new packet to fifo. */
162 void ospf_fifo_push(struct ospf_fifo
*fifo
, struct ospf_packet
*op
)
165 fifo
->tail
->next
= op
;
174 /* Add new packet to head of fifo. */
175 static void ospf_fifo_push_head(struct ospf_fifo
*fifo
, struct ospf_packet
*op
)
177 op
->next
= fifo
->head
;
179 if (fifo
->tail
== NULL
)
187 /* Delete first packet from fifo. */
188 struct ospf_packet
*ospf_fifo_pop(struct ospf_fifo
*fifo
)
190 struct ospf_packet
*op
;
195 fifo
->head
= op
->next
;
197 if (fifo
->head
== NULL
)
206 /* Return first fifo entry. */
207 struct ospf_packet
*ospf_fifo_head(struct ospf_fifo
*fifo
)
212 /* Flush ospf packet fifo. */
213 void ospf_fifo_flush(struct ospf_fifo
*fifo
)
215 struct ospf_packet
*op
;
216 struct ospf_packet
*next
;
218 for (op
= fifo
->head
; op
; op
= next
) {
220 ospf_packet_free(op
);
222 fifo
->head
= fifo
->tail
= NULL
;
226 /* Free ospf packet fifo. */
227 void ospf_fifo_free(struct ospf_fifo
*fifo
)
229 ospf_fifo_flush(fifo
);
231 XFREE(MTYPE_OSPF_FIFO
, fifo
);
234 static void ospf_packet_add(struct ospf_interface
*oi
, struct ospf_packet
*op
)
236 /* Add packet to end of queue. */
237 ospf_fifo_push(oi
->obuf
, op
);
239 /* Debug of packet fifo*/
240 /* ospf_fifo_debug (oi->obuf); */
243 static void ospf_packet_add_top(struct ospf_interface
*oi
,
244 struct ospf_packet
*op
)
246 /* Add packet to head of queue. */
247 ospf_fifo_push_head(oi
->obuf
, op
);
249 /* Debug of packet fifo*/
250 /* ospf_fifo_debug (oi->obuf); */
253 static void ospf_packet_delete(struct ospf_interface
*oi
)
255 struct ospf_packet
*op
;
257 op
= ospf_fifo_pop(oi
->obuf
);
260 ospf_packet_free(op
);
263 static struct ospf_packet
*ospf_packet_dup(struct ospf_packet
*op
)
265 struct ospf_packet
*new;
267 if (stream_get_endp(op
->s
) != op
->length
)
270 "ospf_packet_dup stream %lu ospf_packet %u size mismatch",
271 (unsigned long)STREAM_SIZE(op
->s
), op
->length
);
273 /* Reserve space for MD5 authentication that may be added later. */
274 new = ospf_packet_new(stream_get_endp(op
->s
) + OSPF_AUTH_MD5_SIZE
);
275 stream_copy(new->s
, op
->s
);
278 new->length
= op
->length
;
284 static unsigned int ospf_packet_authspace(struct ospf_interface
*oi
)
288 if (ospf_auth_type(oi
) == OSPF_AUTH_CRYPTOGRAPHIC
)
289 auth
= OSPF_AUTH_MD5_SIZE
;
294 static unsigned int ospf_packet_max(struct ospf_interface
*oi
)
298 max
= oi
->ifp
->mtu
- ospf_packet_authspace(oi
);
300 max
-= (OSPF_HEADER_SIZE
+ sizeof(struct ip
));
306 static int ospf_check_md5_digest(struct ospf_interface
*oi
,
307 struct ospf_header
*ospfh
)
309 #ifdef CRYPTO_OPENSSL
311 #elif CRYPTO_INTERNAL
314 unsigned char digest
[OSPF_AUTH_MD5_SIZE
];
315 struct crypt_key
*ck
;
316 struct ospf_neighbor
*nbr
;
317 uint16_t length
= ntohs(ospfh
->length
);
319 /* Get secret key. */
320 ck
= ospf_crypt_key_lookup(OSPF_IF_PARAM(oi
, auth_crypt
),
321 ospfh
->u
.crypt
.key_id
);
323 flog_warn(EC_OSPF_MD5
, "interface %s: ospf_check_md5 no key %d",
324 IF_NAME(oi
), ospfh
->u
.crypt
.key_id
);
328 /* check crypto seqnum. */
329 nbr
= ospf_nbr_lookup_by_routerid(oi
->nbrs
, &ospfh
->router_id
);
332 && ntohl(nbr
->crypt_seqnum
) > ntohl(ospfh
->u
.crypt
.crypt_seqnum
)) {
335 "interface %s: ospf_check_md5 bad sequence %d (expect %d)",
336 IF_NAME(oi
), ntohl(ospfh
->u
.crypt
.crypt_seqnum
),
337 ntohl(nbr
->crypt_seqnum
));
341 /* Generate a digest for the ospf packet - their digest + our digest. */
342 #ifdef CRYPTO_OPENSSL
343 unsigned int md5_size
= OSPF_AUTH_MD5_SIZE
;
344 ctx
= EVP_MD_CTX_new();
345 EVP_DigestInit(ctx
, EVP_md5());
346 EVP_DigestUpdate(ctx
, ospfh
, length
);
347 EVP_DigestUpdate(ctx
, ck
->auth_key
, OSPF_AUTH_MD5_SIZE
);
348 EVP_DigestFinal(ctx
, digest
, &md5_size
);
349 EVP_MD_CTX_free(ctx
);
350 #elif CRYPTO_INTERNAL
351 memset(&ctx
, 0, sizeof(ctx
));
353 MD5Update(&ctx
, ospfh
, length
);
354 MD5Update(&ctx
, ck
->auth_key
, OSPF_AUTH_MD5_SIZE
);
355 MD5Final(digest
, &ctx
);
358 /* compare the two */
359 if (memcmp((caddr_t
)ospfh
+ length
, digest
, OSPF_AUTH_MD5_SIZE
)) {
360 flog_warn(EC_OSPF_MD5
,
361 "interface %s: ospf_check_md5 checksum mismatch",
366 /* save neighbor's crypt_seqnum */
368 nbr
->crypt_seqnum
= ospfh
->u
.crypt
.crypt_seqnum
;
372 /* This function is called from ospf_write(), it will detect the
373 authentication scheme and if it is MD5, it will change the sequence
374 and update the MD5 digest. */
375 static int ospf_make_md5_digest(struct ospf_interface
*oi
,
376 struct ospf_packet
*op
)
378 struct ospf_header
*ospfh
;
379 unsigned char digest
[OSPF_AUTH_MD5_SIZE
] = {0};
380 #ifdef CRYPTO_OPENSSL
382 #elif CRYPTO_INTERNAL
387 struct crypt_key
*ck
;
388 const uint8_t *auth_key
;
390 ibuf
= STREAM_DATA(op
->s
);
391 ospfh
= (struct ospf_header
*)ibuf
;
393 if (ntohs(ospfh
->auth_type
) != OSPF_AUTH_CRYPTOGRAPHIC
)
396 /* We do this here so when we dup a packet, we don't have to
397 waste CPU rewriting other headers.
399 Note that quagga_time /deliberately/ is not used here */
400 t
= (time(NULL
) & 0xFFFFFFFF);
401 if (t
> oi
->crypt_seqnum
)
402 oi
->crypt_seqnum
= t
;
406 ospfh
->u
.crypt
.crypt_seqnum
= htonl(oi
->crypt_seqnum
);
408 /* Get MD5 Authentication key from auth_key list. */
409 if (list_isempty(OSPF_IF_PARAM(oi
, auth_crypt
)))
410 auth_key
= (const uint8_t *)digest
;
412 ck
= listgetdata(listtail(OSPF_IF_PARAM(oi
, auth_crypt
)));
413 auth_key
= ck
->auth_key
;
416 /* Generate a digest for the entire packet + our secret key. */
417 #ifdef CRYPTO_OPENSSL
418 unsigned int md5_size
= OSPF_AUTH_MD5_SIZE
;
419 ctx
= EVP_MD_CTX_new();
420 EVP_DigestInit(ctx
, EVP_md5());
421 EVP_DigestUpdate(ctx
, ibuf
, ntohs(ospfh
->length
));
422 EVP_DigestUpdate(ctx
, auth_key
, OSPF_AUTH_MD5_SIZE
);
423 EVP_DigestFinal(ctx
, digest
, &md5_size
);
424 EVP_MD_CTX_free(ctx
);
425 #elif CRYPTO_INTERNAL
426 memset(&ctx
, 0, sizeof(ctx
));
428 MD5Update(&ctx
, ibuf
, ntohs(ospfh
->length
));
429 MD5Update(&ctx
, auth_key
, OSPF_AUTH_MD5_SIZE
);
430 MD5Final(digest
, &ctx
);
433 /* Append md5 digest to the end of the stream. */
434 stream_put(op
->s
, digest
, OSPF_AUTH_MD5_SIZE
);
436 /* We do *NOT* increment the OSPF header length. */
437 op
->length
= ntohs(ospfh
->length
) + OSPF_AUTH_MD5_SIZE
;
439 if (stream_get_endp(op
->s
) != op
->length
)
443 "ospf_make_md5_digest: length mismatch stream %lu ospf_packet %u",
444 (unsigned long)stream_get_endp(op
->s
), op
->length
);
446 return OSPF_AUTH_MD5_SIZE
;
450 static int ospf_ls_req_timer(struct thread
*thread
)
452 struct ospf_neighbor
*nbr
;
454 nbr
= THREAD_ARG(thread
);
455 nbr
->t_ls_req
= NULL
;
457 /* Send Link State Request. */
458 if (ospf_ls_request_count(nbr
))
459 ospf_ls_req_send(nbr
);
461 /* Set Link State Request retransmission timer. */
462 OSPF_NSM_TIMER_ON(nbr
->t_ls_req
, ospf_ls_req_timer
, nbr
->v_ls_req
);
467 void ospf_ls_req_event(struct ospf_neighbor
*nbr
)
470 thread_cancel(nbr
->t_ls_req
);
471 nbr
->t_ls_req
= NULL
;
473 nbr
->t_ls_req
= NULL
;
474 thread_add_event(master
, ospf_ls_req_timer
, nbr
, 0, &nbr
->t_ls_req
);
477 /* Cyclic timer function. Fist registered in ospf_nbr_new () in
479 int ospf_ls_upd_timer(struct thread
*thread
)
481 struct ospf_neighbor
*nbr
;
483 nbr
= THREAD_ARG(thread
);
484 nbr
->t_ls_upd
= NULL
;
486 /* Send Link State Update. */
487 if (ospf_ls_retransmit_count(nbr
) > 0) {
489 struct ospf_lsdb
*lsdb
;
491 int retransmit_interval
;
493 retransmit_interval
=
494 OSPF_IF_PARAM(nbr
->oi
, retransmit_interval
);
496 lsdb
= &nbr
->ls_rxmt
;
499 for (i
= OSPF_MIN_LSA
; i
< OSPF_MAX_LSA
; i
++) {
500 struct route_table
*table
= lsdb
->type
[i
].db
;
501 struct route_node
*rn
;
503 for (rn
= route_top(table
); rn
; rn
= route_next(rn
)) {
504 struct ospf_lsa
*lsa
;
506 if ((lsa
= rn
->info
) != NULL
) {
507 /* Don't retransmit an LSA if we
509 the last RxmtInterval seconds - this
511 neighbour a chance to acknowledge the
513 have ben just received before the
515 fired. This is a small tweak to what
517 but it will cut out out a lot of
520 if (monotime_since(&lsa
->tv_recv
, NULL
)
521 >= retransmit_interval
* 1000000LL)
522 listnode_add(update
, rn
->info
);
527 if (listcount(update
) > 0)
528 ospf_ls_upd_send(nbr
, update
, OSPF_SEND_PACKET_DIRECT
,
530 list_delete(&update
);
533 /* Set LS Update retransmission timer. */
534 OSPF_NSM_TIMER_ON(nbr
->t_ls_upd
, ospf_ls_upd_timer
, nbr
->v_ls_upd
);
539 int ospf_ls_ack_timer(struct thread
*thread
)
541 struct ospf_interface
*oi
;
543 oi
= THREAD_ARG(thread
);
546 /* Send Link State Acknowledgment. */
547 if (listcount(oi
->ls_ack
) > 0)
548 ospf_ls_ack_send_delayed(oi
);
550 /* Set LS Ack timer. */
551 OSPF_ISM_TIMER_ON(oi
->t_ls_ack
, ospf_ls_ack_timer
, oi
->v_ls_ack
);
556 #ifdef WANT_OSPF_WRITE_FRAGMENT
557 static void ospf_write_frags(int fd
, struct ospf_packet
*op
, struct ip
*iph
,
558 struct msghdr
*msg
, unsigned int maxdatasize
,
559 unsigned int mtu
, int flags
, uint8_t type
)
561 #define OSPF_WRITE_FRAG_SHIFT 3
566 assert(op
->length
== stream_get_endp(op
->s
));
567 assert(msg
->msg_iovlen
== 2);
571 * SunOS, BSD and BSD derived kernels likely will clear ip_id, as
572 * well as the IP_MF flag, making this all quite pointless.
574 * However, for a system on which IP_MF is left alone, and ip_id left
575 * alone or else which sets same ip_id for each fragment this might
578 * XXX-TODO: It would be much nicer to have the kernel's use their
579 * existing fragmentation support to do this for us. Bugs/RFEs need to
580 * be raised against the various kernels.
584 iph
->ip_off
|= IP_MF
;
586 /* ip frag offset is expressed in units of 8byte words */
587 offset
= maxdatasize
>> OSPF_WRITE_FRAG_SHIFT
;
589 iovp
= &msg
->msg_iov
[1];
591 while ((stream_get_endp(op
->s
) - stream_get_getp(op
->s
))
593 /* data length of this frag is to next offset value */
594 iovp
->iov_len
= offset
<< OSPF_WRITE_FRAG_SHIFT
;
595 iph
->ip_len
= iovp
->iov_len
+ sizeof(struct ip
);
596 assert(iph
->ip_len
<= mtu
);
598 sockopt_iphdrincl_swab_htosys(iph
);
600 ret
= sendmsg(fd
, msg
, flags
);
602 sockopt_iphdrincl_swab_systoh(iph
);
607 "*** ospf_write_frags: sendmsg failed to %s,"
608 " id %d, off %d, len %d, mtu %u failed with %s",
609 inet_ntoa(iph
->ip_dst
), iph
->ip_id
, iph
->ip_off
,
610 iph
->ip_len
, mtu
, safe_strerror(errno
));
612 if (IS_DEBUG_OSPF_PACKET(type
- 1, SEND
)) {
614 "ospf_write_frags: sent id %d, off %d, len %d to %s\n",
615 iph
->ip_id
, iph
->ip_off
, iph
->ip_len
,
616 inet_ntoa(iph
->ip_dst
));
617 if (IS_DEBUG_OSPF_PACKET(type
- 1, DETAIL
)) {
619 "-----------------IP Header Dump----------------------");
620 ospf_ip_header_dump(iph
);
622 "-----------------------------------------------------");
626 iph
->ip_off
+= offset
;
627 stream_forward_getp(op
->s
, iovp
->iov_len
);
628 iovp
->iov_base
= stream_pnt(op
->s
);
631 /* setup for final fragment */
632 iovp
->iov_len
= stream_get_endp(op
->s
) - stream_get_getp(op
->s
);
633 iph
->ip_len
= iovp
->iov_len
+ sizeof(struct ip
);
634 iph
->ip_off
&= (~IP_MF
);
636 #endif /* WANT_OSPF_WRITE_FRAGMENT */
638 static int ospf_write(struct thread
*thread
)
640 struct ospf
*ospf
= THREAD_ARG(thread
);
641 struct ospf_interface
*oi
;
642 struct ospf_interface
*last_serviced_oi
= NULL
;
643 struct ospf_packet
*op
;
644 struct sockaddr_in sa_dst
;
651 struct listnode
*node
;
652 #ifdef WANT_OSPF_WRITE_FRAGMENT
653 static uint16_t ipid
= 0;
654 uint16_t maxdatasize
;
655 #endif /* WANT_OSPF_WRITE_FRAGMENT */
656 #define OSPF_WRITE_IPHL_SHIFT 2
660 unsigned char cmsgbuf
[64] = {};
661 struct cmsghdr
*cm
= (struct cmsghdr
*)cmsgbuf
;
662 struct in_pktinfo
*pi
;
665 if (ospf
->fd
< 0 || ospf
->oi_running
== 0) {
666 if (IS_DEBUG_OSPF_EVENT
)
668 "ospf_write failed to send, fd %d, instance %u"
669 ,ospf
->fd
, ospf
->oi_running
);
673 node
= listhead(ospf
->oi_write_q
);
675 oi
= listgetdata(node
);
677 #ifdef WANT_OSPF_WRITE_FRAGMENT
678 /* seed ipid static with low order bits of time */
680 ipid
= (time(NULL
) & 0xffff);
681 #endif /* WANT_OSPF_WRITE_FRAGMENT */
683 while ((pkt_count
< ospf
->write_oi_count
) && oi
684 && (last_serviced_oi
!= oi
)) {
685 /* If there is only packet in the queue, the oi is removed from
686 write-q, so fix up the last interface that was serviced */
687 if (last_serviced_oi
== NULL
) {
688 last_serviced_oi
= oi
;
691 #ifdef WANT_OSPF_WRITE_FRAGMENT
692 /* convenience - max OSPF data per packet */
693 maxdatasize
= oi
->ifp
->mtu
- sizeof(struct ip
);
694 #endif /* WANT_OSPF_WRITE_FRAGMENT */
695 /* Get one packet from queue. */
696 op
= ospf_fifo_head(oi
->obuf
);
698 assert(op
->length
>= OSPF_HEADER_SIZE
);
700 if (op
->dst
.s_addr
== htonl(OSPF_ALLSPFROUTERS
)
701 || op
->dst
.s_addr
== htonl(OSPF_ALLDROUTERS
))
702 ospf_if_ipmulticast(ospf
, oi
->address
,
705 /* Rewrite the md5 signature & update the seq */
706 ospf_make_md5_digest(oi
, op
);
708 /* Retrieve OSPF packet type. */
709 stream_set_getp(op
->s
, 1);
710 type
= stream_getc(op
->s
);
712 /* reset get pointer */
713 stream_set_getp(op
->s
, 0);
715 memset(&iph
, 0, sizeof(struct ip
));
716 memset(&sa_dst
, 0, sizeof(sa_dst
));
718 sa_dst
.sin_family
= AF_INET
;
719 #ifdef HAVE_STRUCT_SOCKADDR_IN_SIN_LEN
720 sa_dst
.sin_len
= sizeof(sa_dst
);
721 #endif /* HAVE_STRUCT_SOCKADDR_IN_SIN_LEN */
722 sa_dst
.sin_addr
= op
->dst
;
723 sa_dst
.sin_port
= htons(0);
725 /* Set DONTROUTE flag if dst is unicast. */
726 if (oi
->type
!= OSPF_IFTYPE_VIRTUALLINK
)
727 if (!IN_MULTICAST(htonl(op
->dst
.s_addr
)))
728 flags
= MSG_DONTROUTE
;
730 iph
.ip_hl
= sizeof(struct ip
) >> OSPF_WRITE_IPHL_SHIFT
;
731 /* it'd be very strange for header to not be 4byte-word aligned
733 if (sizeof(struct ip
)
734 > (unsigned int)(iph
.ip_hl
<< OSPF_WRITE_IPHL_SHIFT
))
735 iph
.ip_hl
++; /* we presume sizeof struct ip cant
738 iph
.ip_v
= IPVERSION
;
739 iph
.ip_tos
= IPTOS_PREC_INTERNETCONTROL
;
740 iph
.ip_len
= (iph
.ip_hl
<< OSPF_WRITE_IPHL_SHIFT
) + op
->length
;
742 #if defined(__DragonFly__)
744 * DragonFly's raw socket expects ip_len/ip_off in network byte
747 iph
.ip_len
= htons(iph
.ip_len
);
750 #ifdef WANT_OSPF_WRITE_FRAGMENT
751 /* XXX-MT: not thread-safe at all..
752 * XXX: this presumes this is only programme sending OSPF
754 * otherwise, no guarantee ipid will be unique
757 #endif /* WANT_OSPF_WRITE_FRAGMENT */
760 if (oi
->type
== OSPF_IFTYPE_VIRTUALLINK
)
761 iph
.ip_ttl
= OSPF_VL_IP_TTL
;
763 iph
.ip_ttl
= OSPF_IP_TTL
;
764 iph
.ip_p
= IPPROTO_OSPFIGP
;
766 iph
.ip_src
.s_addr
= oi
->address
->u
.prefix4
.s_addr
;
767 iph
.ip_dst
.s_addr
= op
->dst
.s_addr
;
769 memset(&msg
, 0, sizeof(msg
));
770 msg
.msg_name
= (caddr_t
)&sa_dst
;
771 msg
.msg_namelen
= sizeof(sa_dst
);
775 iov
[0].iov_base
= (char *)&iph
;
776 iov
[0].iov_len
= iph
.ip_hl
<< OSPF_WRITE_IPHL_SHIFT
;
777 iov
[1].iov_base
= stream_pnt(op
->s
);
778 iov
[1].iov_len
= op
->length
;
781 msg
.msg_control
= (caddr_t
)cm
;
782 cm
->cmsg_level
= SOL_IP
;
783 cm
->cmsg_type
= IP_PKTINFO
;
784 cm
->cmsg_len
= CMSG_LEN(sizeof(struct in_pktinfo
));
785 pi
= (struct in_pktinfo
*)CMSG_DATA(cm
);
786 pi
->ipi_ifindex
= oi
->ifp
->ifindex
;
788 msg
.msg_controllen
= cm
->cmsg_len
;
791 /* Sadly we can not rely on kernels to fragment packets
792 * because of either IP_HDRINCL and/or multicast
793 * destination being set.
796 #ifdef WANT_OSPF_WRITE_FRAGMENT
797 if (op
->length
> maxdatasize
)
798 ospf_write_frags(ospf
->fd
, op
, &iph
, &msg
, maxdatasize
,
799 oi
->ifp
->mtu
, flags
, type
);
800 #endif /* WANT_OSPF_WRITE_FRAGMENT */
802 /* send final fragment (could be first) */
803 sockopt_iphdrincl_swab_htosys(&iph
);
804 ret
= sendmsg(ospf
->fd
, &msg
, flags
);
805 sockopt_iphdrincl_swab_systoh(&iph
);
806 if (IS_DEBUG_OSPF_EVENT
)
809 "id %d, off %d, len %d, interface %s, mtu %u:",
810 inet_ntoa(iph
.ip_dst
), iph
.ip_id
, iph
.ip_off
,
811 iph
.ip_len
, oi
->ifp
->name
, oi
->ifp
->mtu
);
816 "*** sendmsg in ospf_write failed to %s, "
817 "id %d, off %d, len %d, interface %s, mtu %u: %s",
818 inet_ntoa(iph
.ip_dst
), iph
.ip_id
, iph
.ip_off
,
819 iph
.ip_len
, oi
->ifp
->name
, oi
->ifp
->mtu
,
820 safe_strerror(errno
));
822 /* Show debug sending packet. */
823 if (IS_DEBUG_OSPF_PACKET(type
- 1, SEND
)) {
824 if (IS_DEBUG_OSPF_PACKET(type
- 1, DETAIL
)) {
826 "-----------------------------------------------------");
827 ospf_ip_header_dump(&iph
);
828 stream_set_getp(op
->s
, 0);
829 ospf_packet_dump(op
->s
);
832 zlog_debug("%s sent to [%s] via [%s].",
833 lookup_msg(ospf_packet_type_str
, type
, NULL
),
834 inet_ntoa(op
->dst
), IF_NAME(oi
));
836 if (IS_DEBUG_OSPF_PACKET(type
- 1, DETAIL
))
838 "-----------------------------------------------------");
845 case OSPF_MSG_DB_DESC
:
848 case OSPF_MSG_LS_REQ
:
851 case OSPF_MSG_LS_UPD
:
854 case OSPF_MSG_LS_ACK
:
861 /* Now delete packet from queue. */
862 ospf_packet_delete(oi
);
864 /* Move this interface to the tail of write_q to
865 serve everyone in a round robin fashion */
866 list_delete_node(ospf
->oi_write_q
, node
);
867 if (ospf_fifo_head(oi
->obuf
) == NULL
) {
869 last_serviced_oi
= NULL
;
872 listnode_add(ospf
->oi_write_q
, oi
);
875 /* Setup to service from the head of the queue again */
876 if (!list_isempty(ospf
->oi_write_q
)) {
877 node
= listhead(ospf
->oi_write_q
);
878 oi
= listgetdata(node
);
882 /* If packets still remain in queue, call write thread. */
883 if (!list_isempty(ospf
->oi_write_q
))
884 thread_add_write(master
, ospf_write
, ospf
, ospf
->fd
,
890 /* OSPF Hello message read -- RFC2328 Section 10.5. */
891 static void ospf_hello(struct ip
*iph
, struct ospf_header
*ospfh
,
892 struct stream
*s
, struct ospf_interface
*oi
, int size
)
894 struct ospf_hello
*hello
;
895 struct ospf_neighbor
*nbr
;
899 /* increment statistics. */
902 hello
= (struct ospf_hello
*)stream_pnt(s
);
904 /* If Hello is myself, silently discard. */
905 if (IPV4_ADDR_SAME(&ospfh
->router_id
, &oi
->ospf
->router_id
)) {
906 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, RECV
)) {
908 "ospf_header[%s/%s]: selforiginated, "
910 lookup_msg(ospf_packet_type_str
, ospfh
->type
,
912 inet_ntoa(iph
->ip_src
));
917 /* get neighbor prefix. */
919 p
.prefixlen
= ip_masklen(hello
->network_mask
);
920 p
.u
.prefix4
= iph
->ip_src
;
922 /* Compare network mask. */
923 /* Checking is ignored for Point-to-Point and Virtual link. */
924 if (oi
->type
!= OSPF_IFTYPE_POINTOPOINT
925 && oi
->type
!= OSPF_IFTYPE_VIRTUALLINK
)
926 if (oi
->address
->prefixlen
!= p
.prefixlen
) {
929 "Packet %s [Hello:RECV]: NetworkMask mismatch on %s (configured prefix length is %d, but hello packet indicates %d).",
930 inet_ntoa(ospfh
->router_id
), IF_NAME(oi
),
931 (int)oi
->address
->prefixlen
, (int)p
.prefixlen
);
935 /* Compare Router Dead Interval. */
936 if (OSPF_IF_PARAM(oi
, v_wait
) != ntohl(hello
->dead_interval
)) {
937 flog_warn(EC_OSPF_PACKET
,
938 "Packet %s [Hello:RECV]: RouterDeadInterval mismatch "
939 "(expected %u, but received %u).",
940 inet_ntoa(ospfh
->router_id
),
941 OSPF_IF_PARAM(oi
, v_wait
),
942 ntohl(hello
->dead_interval
));
946 /* Compare Hello Interval - ignored if fast-hellos are set. */
947 if (OSPF_IF_PARAM(oi
, fast_hello
) == 0) {
948 if (OSPF_IF_PARAM(oi
, v_hello
)
949 != ntohs(hello
->hello_interval
)) {
952 "Packet %s [Hello:RECV]: HelloInterval mismatch "
953 "(expected %u, but received %u).",
954 inet_ntoa(ospfh
->router_id
),
955 OSPF_IF_PARAM(oi
, v_hello
),
956 ntohs(hello
->hello_interval
));
961 if (IS_DEBUG_OSPF_EVENT
)
962 zlog_debug("Packet %s [Hello:RECV]: Options %s vrf %s",
963 inet_ntoa(ospfh
->router_id
),
964 ospf_options_dump(hello
->options
),
965 ospf_vrf_id_to_name(oi
->ospf
->vrf_id
));
967 /* Compare options. */
968 #define REJECT_IF_TBIT_ON 1 /* XXX */
969 #ifdef REJECT_IF_TBIT_ON
970 if (CHECK_FLAG(hello
->options
, OSPF_OPTION_MT
)) {
972 * This router does not support non-zero TOS.
973 * Drop this Hello packet not to establish neighbor
976 flog_warn(EC_OSPF_PACKET
,
977 "Packet %s [Hello:RECV]: T-bit on, drop it.",
978 inet_ntoa(ospfh
->router_id
));
981 #endif /* REJECT_IF_TBIT_ON */
983 if (CHECK_FLAG(oi
->ospf
->config
, OSPF_OPAQUE_CAPABLE
)
984 && CHECK_FLAG(hello
->options
, OSPF_OPTION_O
)) {
986 * This router does know the correct usage of O-bit
987 * the bit should be set in DD packet only.
989 flog_warn(EC_OSPF_PACKET
,
990 "Packet %s [Hello:RECV]: O-bit abuse?",
991 inet_ntoa(ospfh
->router_id
));
992 #ifdef STRICT_OBIT_USAGE_CHECK
993 return; /* Reject this packet. */
994 #else /* STRICT_OBIT_USAGE_CHECK */
995 UNSET_FLAG(hello
->options
, OSPF_OPTION_O
); /* Ignore O-bit. */
996 #endif /* STRICT_OBIT_USAGE_CHECK */
999 /* new for NSSA is to ensure that NP is on and E is off */
1001 if (oi
->area
->external_routing
== OSPF_AREA_NSSA
) {
1002 if (!(CHECK_FLAG(OPTIONS(oi
), OSPF_OPTION_NP
)
1003 && CHECK_FLAG(hello
->options
, OSPF_OPTION_NP
)
1004 && !CHECK_FLAG(OPTIONS(oi
), OSPF_OPTION_E
)
1005 && !CHECK_FLAG(hello
->options
, OSPF_OPTION_E
))) {
1008 "NSSA-Packet-%s[Hello:RECV]: my options: %x, his options %x",
1009 inet_ntoa(ospfh
->router_id
), OPTIONS(oi
),
1013 if (IS_DEBUG_OSPF_NSSA
)
1014 zlog_debug("NSSA-Hello:RECV:Packet from %s:",
1015 inet_ntoa(ospfh
->router_id
));
1017 /* The setting of the E-bit found in the Hello Packet's Options
1018 field must match this area's ExternalRoutingCapability A
1019 mismatch causes processing to stop and the packet to be
1020 dropped. The setting of the rest of the bits in the Hello
1021 Packet's Options field should be ignored. */
1022 if (CHECK_FLAG(OPTIONS(oi
), OSPF_OPTION_E
)
1023 != CHECK_FLAG(hello
->options
, OSPF_OPTION_E
)) {
1026 "Packet %s [Hello:RECV]: my options: %x, his options %x",
1027 inet_ntoa(ospfh
->router_id
), OPTIONS(oi
),
1032 /* get neighbour struct */
1033 nbr
= ospf_nbr_get(oi
, ospfh
, iph
, &p
);
1035 /* neighbour must be valid, ospf_nbr_get creates if none existed */
1038 old_state
= nbr
->state
;
1040 /* Add event to thread. */
1041 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_PacketReceived
);
1043 /* RFC2328 Section 9.5.1
1044 If the router is not eligible to become Designated Router,
1045 (snip) It must also send an Hello Packet in reply to an
1046 Hello Packet received from any eligible neighbor (other than
1047 the current Designated Router and Backup Designated Router). */
1048 if (oi
->type
== OSPF_IFTYPE_NBMA
)
1049 if (PRIORITY(oi
) == 0 && hello
->priority
> 0
1050 && IPV4_ADDR_CMP(&DR(oi
), &iph
->ip_src
)
1051 && IPV4_ADDR_CMP(&BDR(oi
), &iph
->ip_src
))
1052 OSPF_NSM_TIMER_ON(nbr
->t_hello_reply
,
1053 ospf_hello_reply_timer
,
1054 OSPF_HELLO_REPLY_DELAY
);
1056 /* on NBMA network type, it happens to receive bidirectional Hello
1058 without advance 1-Way Received event.
1059 To avoid incorrect DR-seletion, raise 1-Way Received event.*/
1060 if (oi
->type
== OSPF_IFTYPE_NBMA
1061 && (old_state
== NSM_Down
|| old_state
== NSM_Attempt
)) {
1062 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_OneWayReceived
);
1063 nbr
->priority
= hello
->priority
;
1064 nbr
->d_router
= hello
->d_router
;
1065 nbr
->bd_router
= hello
->bd_router
;
1069 if (ospf_nbr_bidirectional(&oi
->ospf
->router_id
, hello
->neighbors
,
1070 size
- OSPF_HELLO_MIN_SIZE
)) {
1071 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_TwoWayReceived
);
1072 nbr
->options
|= hello
->options
;
1074 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_OneWayReceived
);
1075 /* Set neighbor information. */
1076 nbr
->priority
= hello
->priority
;
1077 nbr
->d_router
= hello
->d_router
;
1078 nbr
->bd_router
= hello
->bd_router
;
1082 /* If neighbor itself declares DR and no BDR exists,
1083 cause event BackupSeen */
1084 if (IPV4_ADDR_SAME(&nbr
->address
.u
.prefix4
, &hello
->d_router
))
1085 if (hello
->bd_router
.s_addr
== 0 && oi
->state
== ISM_Waiting
)
1086 OSPF_ISM_EVENT_SCHEDULE(oi
, ISM_BackupSeen
);
1088 /* neighbor itself declares BDR. */
1089 if (oi
->state
== ISM_Waiting
1090 && IPV4_ADDR_SAME(&nbr
->address
.u
.prefix4
, &hello
->bd_router
))
1091 OSPF_ISM_EVENT_SCHEDULE(oi
, ISM_BackupSeen
);
1093 /* had not previously. */
1094 if ((IPV4_ADDR_SAME(&nbr
->address
.u
.prefix4
, &hello
->d_router
)
1095 && IPV4_ADDR_CMP(&nbr
->address
.u
.prefix4
, &nbr
->d_router
))
1096 || (IPV4_ADDR_CMP(&nbr
->address
.u
.prefix4
, &hello
->d_router
)
1097 && IPV4_ADDR_SAME(&nbr
->address
.u
.prefix4
, &nbr
->d_router
)))
1098 OSPF_ISM_EVENT_SCHEDULE(oi
, ISM_NeighborChange
);
1100 /* had not previously. */
1101 if ((IPV4_ADDR_SAME(&nbr
->address
.u
.prefix4
, &hello
->bd_router
)
1102 && IPV4_ADDR_CMP(&nbr
->address
.u
.prefix4
, &nbr
->bd_router
))
1103 || (IPV4_ADDR_CMP(&nbr
->address
.u
.prefix4
, &hello
->bd_router
)
1104 && IPV4_ADDR_SAME(&nbr
->address
.u
.prefix4
, &nbr
->bd_router
)))
1105 OSPF_ISM_EVENT_SCHEDULE(oi
, ISM_NeighborChange
);
1107 /* Neighbor priority check. */
1108 if (nbr
->priority
>= 0 && nbr
->priority
!= hello
->priority
)
1109 OSPF_ISM_EVENT_SCHEDULE(oi
, ISM_NeighborChange
);
1111 /* Set neighbor information. */
1112 nbr
->priority
= hello
->priority
;
1113 nbr
->d_router
= hello
->d_router
;
1114 nbr
->bd_router
= hello
->bd_router
;
1117 /* Save DD flags/options/Seqnum received. */
1118 static void ospf_db_desc_save_current(struct ospf_neighbor
*nbr
,
1119 struct ospf_db_desc
*dd
)
1121 nbr
->last_recv
.flags
= dd
->flags
;
1122 nbr
->last_recv
.options
= dd
->options
;
1123 nbr
->last_recv
.dd_seqnum
= ntohl(dd
->dd_seqnum
);
1126 /* Process rest of DD packet. */
1127 static void ospf_db_desc_proc(struct stream
*s
, struct ospf_interface
*oi
,
1128 struct ospf_neighbor
*nbr
,
1129 struct ospf_db_desc
*dd
, uint16_t size
)
1131 struct ospf_lsa
*new, *find
;
1132 struct lsa_header
*lsah
;
1134 stream_forward_getp(s
, OSPF_DB_DESC_MIN_SIZE
);
1135 for (size
-= OSPF_DB_DESC_MIN_SIZE
; size
>= OSPF_LSA_HEADER_SIZE
;
1136 size
-= OSPF_LSA_HEADER_SIZE
) {
1137 lsah
= (struct lsa_header
*)stream_pnt(s
);
1138 stream_forward_getp(s
, OSPF_LSA_HEADER_SIZE
);
1140 /* Unknown LS type. */
1141 if (lsah
->type
< OSPF_MIN_LSA
|| lsah
->type
>= OSPF_MAX_LSA
) {
1142 flog_warn(EC_OSPF_PACKET
,
1143 "Packet [DD:RECV]: Unknown LS type %d.",
1145 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_SeqNumberMismatch
);
1149 if (IS_OPAQUE_LSA(lsah
->type
)
1150 && !CHECK_FLAG(nbr
->options
, OSPF_OPTION_O
)) {
1151 flog_warn(EC_OSPF_PACKET
,
1152 "LSA[Type%d:%s]: Opaque capability mismatch?",
1153 lsah
->type
, inet_ntoa(lsah
->id
));
1154 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_SeqNumberMismatch
);
1158 switch (lsah
->type
) {
1159 case OSPF_AS_EXTERNAL_LSA
:
1160 case OSPF_OPAQUE_AS_LSA
:
1161 /* Check for stub area. Reject if AS-External from stub
1163 allow if from NSSA. */
1164 if (oi
->area
->external_routing
== OSPF_AREA_STUB
) {
1167 "Packet [DD:RECV]: LSA[Type%d:%s] from %s area.",
1168 lsah
->type
, inet_ntoa(lsah
->id
),
1169 (oi
->area
->external_routing
1173 OSPF_NSM_EVENT_SCHEDULE(nbr
,
1174 NSM_SeqNumberMismatch
);
1182 /* Create LS-request object. */
1183 new = ospf_ls_request_new(lsah
);
1185 /* Lookup received LSA, then add LS request list. */
1186 find
= ospf_lsa_lookup_by_header(oi
->area
, lsah
);
1188 /* ospf_lsa_more_recent is fine with NULL pointers */
1189 switch (ospf_lsa_more_recent(find
, new)) {
1191 /* Neighbour has a more recent LSA, we must request it
1193 ospf_ls_request_add(nbr
, new);
1196 /* If we have a copy of this LSA, it's either less
1198 * and we're requesting it from neighbour (the case
1200 * it's as recent and we both have same copy (this
1203 * In neither of these two cases is there any point in
1204 * describing our copy of the LSA to the neighbour in a
1205 * DB-Summary packet, if we're still intending to do so.
1207 * See: draft-ogier-ospf-dbex-opt-00.txt, describing the
1208 * backward compatible optimisation to OSPF DB Exchange
1210 * DB Description process implemented here.
1213 ospf_lsdb_delete(&nbr
->db_sum
, find
);
1214 ospf_lsa_discard(new);
1217 /* We have the more recent copy, nothing specific to do:
1218 * - no need to request neighbours stale copy
1219 * - must leave DB summary list copy alone
1221 if (IS_DEBUG_OSPF_EVENT
)
1223 "Packet [DD:RECV]: LSA received Type %d, "
1224 "ID %s is not recent.",
1225 lsah
->type
, inet_ntoa(lsah
->id
));
1226 ospf_lsa_discard(new);
1231 if (IS_SET_DD_MS(nbr
->dd_flags
)) {
1234 /* Both sides have no More, then we're done with Exchange */
1235 if (!IS_SET_DD_M(dd
->flags
) && !IS_SET_DD_M(nbr
->dd_flags
))
1236 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_ExchangeDone
);
1238 ospf_db_desc_send(nbr
);
1242 nbr
->dd_seqnum
= ntohl(dd
->dd_seqnum
);
1244 /* Send DD packet in reply.
1246 * Must be done to acknowledge the Master's DD, regardless of
1247 * whether we have more LSAs ourselves to describe.
1249 * This function will clear the 'More' bit, if after this DD
1250 * we have no more LSAs to describe to the master..
1252 ospf_db_desc_send(nbr
);
1254 /* Slave can raise ExchangeDone now, if master is also done */
1255 if (!IS_SET_DD_M(dd
->flags
) && !IS_SET_DD_M(nbr
->dd_flags
))
1256 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_ExchangeDone
);
1259 /* Save received neighbor values from DD. */
1260 ospf_db_desc_save_current(nbr
, dd
);
1263 ospf_ls_req_send(nbr
);
1266 static int ospf_db_desc_is_dup(struct ospf_db_desc
*dd
,
1267 struct ospf_neighbor
*nbr
)
1269 /* Is DD duplicated? */
1270 if (dd
->options
== nbr
->last_recv
.options
1271 && dd
->flags
== nbr
->last_recv
.flags
1272 && dd
->dd_seqnum
== htonl(nbr
->last_recv
.dd_seqnum
))
1278 /* OSPF Database Description message read -- RFC2328 Section 10.6. */
1279 static void ospf_db_desc(struct ip
*iph
, struct ospf_header
*ospfh
,
1280 struct stream
*s
, struct ospf_interface
*oi
,
1283 struct ospf_db_desc
*dd
;
1284 struct ospf_neighbor
*nbr
;
1286 /* Increment statistics. */
1289 dd
= (struct ospf_db_desc
*)stream_pnt(s
);
1291 nbr
= ospf_nbr_lookup(oi
, iph
, ospfh
);
1293 flog_warn(EC_OSPF_PACKET
, "Packet[DD]: Unknown Neighbor %s",
1294 inet_ntoa(ospfh
->router_id
));
1299 if ((OSPF_IF_PARAM(oi
, mtu_ignore
) == 0)
1300 && (ntohs(dd
->mtu
) > oi
->ifp
->mtu
)) {
1303 "Packet[DD]: Neighbor %s MTU %u is larger than [%s]'s MTU %u",
1304 inet_ntoa(nbr
->router_id
), ntohs(dd
->mtu
), IF_NAME(oi
),
1310 * XXX HACK by Hasso Tepper. Setting N/P bit in NSSA area DD packets is
1312 * required. In fact at least JunOS sends DD packets with P bit clear.
1313 * Until proper solution is developped, this hack should help.
1315 * Update: According to the RFCs, N bit is specified /only/ for Hello
1316 * options, unfortunately its use in DD options is not specified. Hence
1318 * implementations follow E-bit semantics and set it in DD options, and
1320 * treat it as unspecified and hence follow the directive "default for
1321 * options is clear", ie unset.
1323 * Reset the flag, as ospfd follows E-bit semantics.
1325 if ((oi
->area
->external_routing
== OSPF_AREA_NSSA
)
1326 && (CHECK_FLAG(nbr
->options
, OSPF_OPTION_NP
))
1327 && (!CHECK_FLAG(dd
->options
, OSPF_OPTION_NP
))) {
1328 if (IS_DEBUG_OSPF_EVENT
)
1330 "Packet[DD]: Neighbour %s: Has NSSA capability, sends with N bit clear in DD options",
1331 inet_ntoa(nbr
->router_id
));
1332 SET_FLAG(dd
->options
, OSPF_OPTION_NP
);
1335 #ifdef REJECT_IF_TBIT_ON
1336 if (CHECK_FLAG(dd
->options
, OSPF_OPTION_MT
)) {
1338 * In Hello protocol, optional capability must have checked
1339 * to prevent this T-bit enabled router be my neighbor.
1341 flog_warn(EC_OSPF_PACKET
, "Packet[DD]: Neighbor %s: T-bit on?",
1342 inet_ntoa(nbr
->router_id
));
1345 #endif /* REJECT_IF_TBIT_ON */
1347 if (CHECK_FLAG(dd
->options
, OSPF_OPTION_O
)
1348 && !CHECK_FLAG(oi
->ospf
->config
, OSPF_OPAQUE_CAPABLE
)) {
1350 * This node is not configured to handle O-bit, for now.
1351 * Clear it to ignore unsupported capability proposed by
1354 UNSET_FLAG(dd
->options
, OSPF_OPTION_O
);
1357 /* Add event to thread. */
1358 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_PacketReceived
);
1360 if (CHECK_FLAG(oi
->ospf
->config
, OSPF_LOG_ADJACENCY_DETAIL
))
1362 "%s:Packet[DD]: Neighbor %s state is %s, seq_num:0x%x, local:0x%x",
1363 (oi
->ospf
->name
) ? oi
->ospf
->name
: VRF_DEFAULT_NAME
,
1364 inet_ntoa(nbr
->router_id
),
1365 lookup_msg(ospf_nsm_state_msg
, nbr
->state
, NULL
),
1366 ntohl(dd
->dd_seqnum
), nbr
->dd_seqnum
);
1368 /* Process DD packet by neighbor status. */
1369 switch (nbr
->state
) {
1373 if (CHECK_FLAG(oi
->ospf
->config
, OSPF_LOG_ADJACENCY_DETAIL
))
1375 "Packet[DD]: Neighbor %s state is %s, packet discarded.",
1376 inet_ntoa(nbr
->router_id
),
1377 lookup_msg(ospf_nsm_state_msg
, nbr
->state
,
1381 OSPF_NSM_EVENT_EXECUTE(nbr
, NSM_TwoWayReceived
);
1382 /* If the new state is ExStart, the processing of the current
1383 packet should then continue in this new state by falling
1384 through to case ExStart below. */
1385 if (nbr
->state
!= NSM_ExStart
)
1390 if ((IS_SET_DD_ALL(dd
->flags
) == OSPF_DD_FLAG_ALL
)
1391 && (size
== OSPF_DB_DESC_MIN_SIZE
)) {
1392 if (IPV4_ADDR_CMP(&nbr
->router_id
, &oi
->ospf
->router_id
)
1394 /* We're Slave---obey */
1395 if (CHECK_FLAG(oi
->ospf
->config
,
1396 OSPF_LOG_ADJACENCY_DETAIL
))
1398 "Packet[DD]: Neighbor %s Negotiation done (Slave).",
1399 inet_ntoa(nbr
->router_id
));
1401 nbr
->dd_seqnum
= ntohl(dd
->dd_seqnum
);
1404 UNSET_FLAG(nbr
->dd_flags
,
1405 (OSPF_DD_FLAG_MS
| OSPF_DD_FLAG_I
));
1407 /* We're Master, ignore the initial DBD from
1409 if (CHECK_FLAG(oi
->ospf
->config
,
1410 OSPF_LOG_ADJACENCY_DETAIL
))
1412 "Packet[DD]: Neighbor %s: Initial DBD from Slave, "
1414 inet_ntoa(nbr
->router_id
));
1418 /* Ack from the Slave */
1419 else if (!IS_SET_DD_MS(dd
->flags
) && !IS_SET_DD_I(dd
->flags
)
1420 && ntohl(dd
->dd_seqnum
) == nbr
->dd_seqnum
1421 && IPV4_ADDR_CMP(&nbr
->router_id
, &oi
->ospf
->router_id
)
1424 "Packet[DD]: Neighbor %s Negotiation done (Master).",
1425 inet_ntoa(nbr
->router_id
));
1426 /* Reset I, leaving MS */
1427 UNSET_FLAG(nbr
->dd_flags
, OSPF_DD_FLAG_I
);
1429 flog_warn(EC_OSPF_PACKET
,
1430 "Packet[DD]: Neighbor %s Negotiation fails.",
1431 inet_ntoa(nbr
->router_id
));
1435 /* This is where the real Options are saved */
1436 nbr
->options
= dd
->options
;
1438 if (CHECK_FLAG(oi
->ospf
->config
, OSPF_OPAQUE_CAPABLE
)) {
1439 if (IS_DEBUG_OSPF_EVENT
)
1441 "Neighbor[%s] is %sOpaque-capable.",
1442 inet_ntoa(nbr
->router_id
),
1443 CHECK_FLAG(nbr
->options
, OSPF_OPTION_O
)
1447 if (!CHECK_FLAG(nbr
->options
, OSPF_OPTION_O
)
1448 && IPV4_ADDR_SAME(&DR(oi
),
1449 &nbr
->address
.u
.prefix4
)) {
1452 "DR-neighbor[%s] is NOT opaque-capable; Opaque-LSAs cannot be reliably advertised in this network.",
1453 inet_ntoa(nbr
->router_id
));
1454 /* This situation is undesirable, but not a real
1459 OSPF_NSM_EVENT_EXECUTE(nbr
, NSM_NegotiationDone
);
1461 /* continue processing rest of packet. */
1462 ospf_db_desc_proc(s
, oi
, nbr
, dd
, size
);
1465 if (ospf_db_desc_is_dup(dd
, nbr
)) {
1466 if (IS_SET_DD_MS(nbr
->dd_flags
))
1467 /* Master: discard duplicated DD packet. */
1469 "Packet[DD] (Master): Neighbor %s packet duplicated.",
1470 inet_ntoa(nbr
->router_id
));
1472 /* Slave: cause to retransmit the last Database
1476 "Packet[DD] [Slave]: Neighbor %s packet duplicated.",
1477 inet_ntoa(nbr
->router_id
));
1478 ospf_db_desc_resend(nbr
);
1483 /* Otherwise DD packet should be checked. */
1484 /* Check Master/Slave bit mismatch */
1485 if (IS_SET_DD_MS(dd
->flags
)
1486 != IS_SET_DD_MS(nbr
->last_recv
.flags
)) {
1487 flog_warn(EC_OSPF_PACKET
,
1488 "Packet[DD]: Neighbor %s MS-bit mismatch.",
1489 inet_ntoa(nbr
->router_id
));
1490 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_SeqNumberMismatch
);
1491 if (IS_DEBUG_OSPF_EVENT
)
1493 "Packet[DD]: dd->flags=%d, nbr->dd_flags=%d",
1494 dd
->flags
, nbr
->dd_flags
);
1498 /* Check initialize bit is set. */
1499 if (IS_SET_DD_I(dd
->flags
)) {
1500 zlog_info("Packet[DD]: Neighbor %s I-bit set.",
1501 inet_ntoa(nbr
->router_id
));
1502 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_SeqNumberMismatch
);
1506 /* Check DD Options. */
1507 if (dd
->options
!= nbr
->options
) {
1508 flog_warn(EC_OSPF_PACKET
,
1509 "Packet[DD]: Neighbor %s options mismatch.",
1510 inet_ntoa(nbr
->router_id
));
1511 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_SeqNumberMismatch
);
1515 /* Check DD sequence number. */
1516 if ((IS_SET_DD_MS(nbr
->dd_flags
)
1517 && ntohl(dd
->dd_seqnum
) != nbr
->dd_seqnum
)
1518 || (!IS_SET_DD_MS(nbr
->dd_flags
)
1519 && ntohl(dd
->dd_seqnum
) != nbr
->dd_seqnum
+ 1)) {
1522 "Packet[DD]: Neighbor %s sequence number mismatch.",
1523 inet_ntoa(nbr
->router_id
));
1524 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_SeqNumberMismatch
);
1528 /* Continue processing rest of packet. */
1529 ospf_db_desc_proc(s
, oi
, nbr
, dd
, size
);
1533 if (ospf_db_desc_is_dup(dd
, nbr
)) {
1534 if (IS_SET_DD_MS(nbr
->dd_flags
)) {
1535 /* Master should discard duplicate DD packet. */
1537 "Packet[DD]: Neighbor %s duplicated, "
1538 "packet discarded.",
1539 inet_ntoa(nbr
->router_id
));
1542 if (monotime_since(&nbr
->last_send_ts
, NULL
)
1543 < nbr
->v_inactivity
* 1000000LL) {
1544 /* In states Loading and Full the slave
1546 its last Database Description packet
1548 duplicate Database Description
1550 from the master. For this reason the
1552 wait RouterDeadInterval seconds
1554 last Database Description packet.
1556 Database Description packet from the
1558 this interval will generate a
1560 neighbor event. RFC2328 Section 10.8
1562 ospf_db_desc_resend(nbr
);
1568 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_SeqNumberMismatch
);
1571 flog_warn(EC_OSPF_PACKET
,
1572 "Packet[DD]: Neighbor %s NSM illegal status %u.",
1573 inet_ntoa(nbr
->router_id
), nbr
->state
);
1578 #define OSPF_LSA_KEY_SIZE 12 /* type(4) + id(4) + ar(4) */
1580 /* OSPF Link State Request Read -- RFC2328 Section 10.7. */
1581 static void ospf_ls_req(struct ip
*iph
, struct ospf_header
*ospfh
,
1582 struct stream
*s
, struct ospf_interface
*oi
,
1585 struct ospf_neighbor
*nbr
;
1587 struct in_addr ls_id
;
1588 struct in_addr adv_router
;
1589 struct ospf_lsa
*find
;
1590 struct list
*ls_upd
;
1591 unsigned int length
;
1593 /* Increment statistics. */
1596 nbr
= ospf_nbr_lookup(oi
, iph
, ospfh
);
1598 flog_warn(EC_OSPF_PACKET
,
1599 "Link State Request: Unknown Neighbor %s.",
1600 inet_ntoa(ospfh
->router_id
));
1604 /* Add event to thread. */
1605 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_PacketReceived
);
1607 /* Neighbor State should be Exchange or later. */
1608 if (nbr
->state
!= NSM_Exchange
&& nbr
->state
!= NSM_Loading
1609 && nbr
->state
!= NSM_Full
) {
1612 "Link State Request received from %s: Neighbor state is %s, packet discarded.",
1613 inet_ntoa(ospfh
->router_id
),
1614 lookup_msg(ospf_nsm_state_msg
, nbr
->state
, NULL
));
1618 /* Send Link State Update for ALL requested LSAs. */
1619 ls_upd
= list_new();
1620 length
= OSPF_HEADER_SIZE
+ OSPF_LS_UPD_MIN_SIZE
;
1622 while (size
>= OSPF_LSA_KEY_SIZE
) {
1623 /* Get one slice of Link State Request. */
1624 ls_type
= stream_getl(s
);
1625 ls_id
.s_addr
= stream_get_ipv4(s
);
1626 adv_router
.s_addr
= stream_get_ipv4(s
);
1628 /* Verify LSA type. */
1629 if (ls_type
< OSPF_MIN_LSA
|| ls_type
>= OSPF_MAX_LSA
) {
1630 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_BadLSReq
);
1631 list_delete(&ls_upd
);
1635 /* Search proper LSA in LSDB. */
1636 find
= ospf_lsa_lookup(oi
->ospf
, oi
->area
, ls_type
, ls_id
,
1639 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_BadLSReq
);
1640 list_delete(&ls_upd
);
1644 /* Packet overflows MTU size, send immediately. */
1645 if (length
+ ntohs(find
->data
->length
) > ospf_packet_max(oi
)) {
1646 if (oi
->type
== OSPF_IFTYPE_NBMA
)
1647 ospf_ls_upd_send(nbr
, ls_upd
,
1648 OSPF_SEND_PACKET_DIRECT
, 0);
1650 ospf_ls_upd_send(nbr
, ls_upd
,
1651 OSPF_SEND_PACKET_INDIRECT
, 0);
1653 /* Only remove list contents. Keep ls_upd. */
1654 list_delete_all_node(ls_upd
);
1656 length
= OSPF_HEADER_SIZE
+ OSPF_LS_UPD_MIN_SIZE
;
1659 /* Append LSA to update list. */
1660 listnode_add(ls_upd
, find
);
1661 length
+= ntohs(find
->data
->length
);
1663 size
-= OSPF_LSA_KEY_SIZE
;
1666 /* Send rest of Link State Update. */
1667 if (listcount(ls_upd
) > 0) {
1668 if (oi
->type
== OSPF_IFTYPE_NBMA
)
1669 ospf_ls_upd_send(nbr
, ls_upd
, OSPF_SEND_PACKET_DIRECT
,
1672 ospf_ls_upd_send(nbr
, ls_upd
, OSPF_SEND_PACKET_INDIRECT
,
1675 list_delete(&ls_upd
);
1677 list_delete(&ls_upd
);
1680 /* Get the list of LSAs from Link State Update packet.
1681 And process some validation -- RFC2328 Section 13. (1)-(2). */
1682 static struct list
*ospf_ls_upd_list_lsa(struct ospf_neighbor
*nbr
,
1684 struct ospf_interface
*oi
, size_t size
)
1686 uint16_t count
, sum
;
1688 struct lsa_header
*lsah
;
1689 struct ospf_lsa
*lsa
;
1694 count
= stream_getl(s
);
1695 size
-= OSPF_LS_UPD_MIN_SIZE
; /* # LSAs */
1697 for (; size
>= OSPF_LSA_HEADER_SIZE
&& count
> 0;
1698 size
-= length
, stream_forward_getp(s
, length
), count
--) {
1699 lsah
= (struct lsa_header
*)stream_pnt(s
);
1700 length
= ntohs(lsah
->length
);
1702 if (length
> size
) {
1705 "Link State Update: LSA length exceeds packet size.");
1709 /* Validate the LSA's LS checksum. */
1710 sum
= lsah
->checksum
;
1711 if (!ospf_lsa_checksum_valid(lsah
)) {
1712 /* (bug #685) more details in a one-line message make it
1714 * to identify problem source on the one hand and to
1716 * chance to compress repeated messages in syslog on the
1720 "Link State Update: LSA checksum error %x/%x, ID=%s from: nbr %s, router ID %s, adv router %s",
1721 sum
, lsah
->checksum
, inet_ntoa(lsah
->id
),
1722 inet_ntoa(nbr
->src
), inet_ntoa(nbr
->router_id
),
1723 inet_ntoa(lsah
->adv_router
));
1727 /* Examine the LSA's LS type. */
1728 if (lsah
->type
< OSPF_MIN_LSA
|| lsah
->type
>= OSPF_MAX_LSA
) {
1729 flog_warn(EC_OSPF_PACKET
,
1730 "Link State Update: Unknown LS type %d",
1736 * What if the received LSA's age is greater than MaxAge?
1737 * Treat it as a MaxAge case -- endo.
1739 if (ntohs(lsah
->ls_age
) > OSPF_LSA_MAXAGE
)
1740 lsah
->ls_age
= htons(OSPF_LSA_MAXAGE
);
1742 if (CHECK_FLAG(nbr
->options
, OSPF_OPTION_O
)) {
1743 #ifdef STRICT_OBIT_USAGE_CHECK
1744 if ((IS_OPAQUE_LSA(lsah
->type
)
1745 && !CHECK_FLAG(lsah
->options
, OSPF_OPTION_O
))
1746 || (!IS_OPAQUE_LSA(lsah
->type
)
1747 && CHECK_FLAG(lsah
->options
, OSPF_OPTION_O
))) {
1749 * This neighbor must know the exact usage of
1751 * the bit will be set in Type-9,10,11 LSAs
1754 flog_warn(EC_OSPF_PACKET
,
1755 "LSA[Type%d:%s]: O-bit abuse?",
1756 lsah
->type
, inet_ntoa(lsah
->id
));
1759 #endif /* STRICT_OBIT_USAGE_CHECK */
1761 /* Do not take in AS External Opaque-LSAs if we are a
1763 if (lsah
->type
== OSPF_OPAQUE_AS_LSA
1764 && nbr
->oi
->area
->external_routing
1765 != OSPF_AREA_DEFAULT
) {
1766 if (IS_DEBUG_OSPF_EVENT
)
1768 "LSA[Type%d:%s]: We are a stub, don't take this LSA.",
1770 inet_ntoa(lsah
->id
));
1773 } else if (IS_OPAQUE_LSA(lsah
->type
)) {
1774 flog_warn(EC_OSPF_PACKET
,
1775 "LSA[Type%d:%s]: Opaque capability mismatch?",
1776 lsah
->type
, inet_ntoa(lsah
->id
));
1780 /* Create OSPF LSA instance. */
1781 lsa
= ospf_lsa_new_and_data(length
);
1783 lsa
->vrf_id
= oi
->ospf
->vrf_id
;
1784 /* We may wish to put some error checking if type NSSA comes in
1785 and area not in NSSA mode */
1786 switch (lsah
->type
) {
1787 case OSPF_AS_EXTERNAL_LSA
:
1788 case OSPF_OPAQUE_AS_LSA
:
1791 case OSPF_OPAQUE_LINK_LSA
:
1792 lsa
->oi
= oi
; /* Remember incoming interface for
1793 flooding control. */
1796 lsa
->area
= oi
->area
;
1800 memcpy(lsa
->data
, lsah
, length
);
1802 if (IS_DEBUG_OSPF_EVENT
)
1804 "LSA[Type%d:%s]: %p new LSA created with Link State Update",
1805 lsa
->data
->type
, inet_ntoa(lsa
->data
->id
),
1807 listnode_add(lsas
, lsa
);
1813 /* Cleanup Update list. */
1814 static void ospf_upd_list_clean(struct list
*lsas
)
1816 struct listnode
*node
, *nnode
;
1817 struct ospf_lsa
*lsa
;
1819 for (ALL_LIST_ELEMENTS(lsas
, node
, nnode
, lsa
))
1820 ospf_lsa_discard(lsa
);
1825 /* OSPF Link State Update message read -- RFC2328 Section 13. */
1826 static void ospf_ls_upd(struct ospf
*ospf
, struct ip
*iph
,
1827 struct ospf_header
*ospfh
, struct stream
*s
,
1828 struct ospf_interface
*oi
, uint16_t size
)
1830 struct ospf_neighbor
*nbr
;
1832 struct listnode
*node
, *nnode
;
1833 struct ospf_lsa
*lsa
= NULL
;
1834 /* unsigned long ls_req_found = 0; */
1836 /* Dis-assemble the stream, update each entry, re-encapsulate for
1839 /* Increment statistics. */
1842 /* Check neighbor. */
1843 nbr
= ospf_nbr_lookup(oi
, iph
, ospfh
);
1845 flog_warn(EC_OSPF_PACKET
,
1846 "Link State Update: Unknown Neighbor %s on int: %s",
1847 inet_ntoa(ospfh
->router_id
), IF_NAME(oi
));
1851 /* Add event to thread. */
1852 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_PacketReceived
);
1854 /* Check neighbor state. */
1855 if (nbr
->state
< NSM_Exchange
) {
1856 if (IS_DEBUG_OSPF(nsm
, NSM_EVENTS
))
1858 "Link State Update: "
1859 "Neighbor[%s] state %s is less than Exchange",
1860 inet_ntoa(ospfh
->router_id
),
1861 lookup_msg(ospf_nsm_state_msg
, nbr
->state
,
1866 /* Get list of LSAs from Link State Update packet. - Also perorms Stages
1867 * 1 (validate LSA checksum) and 2 (check for LSA consistent type)
1870 lsas
= ospf_ls_upd_list_lsa(nbr
, s
, oi
, size
);
1874 #define DISCARD_LSA(L, N) \
1876 if (IS_DEBUG_OSPF_EVENT) \
1878 "ospf_lsa_discard() in ospf_ls_upd() point %d: lsa %p" \
1880 N, (void *)lsa, (int)lsa->data->type); \
1881 ospf_lsa_discard(L); \
1885 /* Process each LSA received in the one packet.
1887 * Numbers in parentheses, e.g. (1), (2), etc., and the corresponding
1888 * text below are from the steps in RFC 2328, Section 13.
1890 for (ALL_LIST_ELEMENTS(lsas
, node
, nnode
, lsa
)) {
1891 struct ospf_lsa
*ls_ret
, *current
;
1894 if (IS_DEBUG_OSPF_NSSA
) {
1895 char buf1
[INET_ADDRSTRLEN
];
1896 char buf2
[INET_ADDRSTRLEN
];
1897 char buf3
[INET_ADDRSTRLEN
];
1899 zlog_debug("LSA Type-%d from %s, ID: %s, ADV: %s",
1901 inet_ntop(AF_INET
, &ospfh
->router_id
, buf1
,
1903 inet_ntop(AF_INET
, &lsa
->data
->id
, buf2
,
1905 inet_ntop(AF_INET
, &lsa
->data
->adv_router
,
1906 buf3
, INET_ADDRSTRLEN
));
1909 listnode_delete(lsas
,
1910 lsa
); /* We don't need it in list anymore */
1912 /* (1) Validate Checksum - Done above by ospf_ls_upd_list_lsa()
1915 /* (2) LSA Type - Done above by ospf_ls_upd_list_lsa() */
1917 /* (3) Do not take in AS External LSAs if we are a stub or NSSA.
1920 /* Do not take in AS NSSA if this neighbor and we are not NSSA
1923 /* Do take in Type-7's if we are an NSSA */
1925 /* If we are also an ABR, later translate them to a Type-5
1928 /* Later, an NSSA Re-fresh can Re-fresh Type-7's and an ABR will
1929 translate them to a separate Type-5 packet. */
1931 if (lsa
->data
->type
== OSPF_AS_EXTERNAL_LSA
)
1932 /* Reject from STUB or NSSA */
1933 if (nbr
->oi
->area
->external_routing
1934 != OSPF_AREA_DEFAULT
) {
1935 if (IS_DEBUG_OSPF_NSSA
)
1937 "Incoming External LSA Discarded: We are NSSA/STUB Area");
1938 DISCARD_LSA(lsa
, 1);
1941 if (lsa
->data
->type
== OSPF_AS_NSSA_LSA
)
1942 if (nbr
->oi
->area
->external_routing
!= OSPF_AREA_NSSA
) {
1943 if (IS_DEBUG_OSPF_NSSA
)
1945 "Incoming NSSA LSA Discarded: Not NSSA Area");
1946 DISCARD_LSA(lsa
, 2);
1949 /* VU229804: Router-LSA Adv-ID must be equal to LS-ID */
1950 if (lsa
->data
->type
== OSPF_ROUTER_LSA
)
1951 if (!IPV4_ADDR_SAME(&lsa
->data
->id
,
1952 &lsa
->data
->adv_router
)) {
1953 char buf1
[INET_ADDRSTRLEN
];
1954 char buf2
[INET_ADDRSTRLEN
];
1955 char buf3
[INET_ADDRSTRLEN
];
1957 flog_err(EC_OSPF_ROUTER_LSA_MISMATCH
,
1958 "Incoming Router-LSA from %s with "
1959 "Adv-ID[%s] != LS-ID[%s]",
1960 inet_ntop(AF_INET
, &ospfh
->router_id
,
1961 buf1
, INET_ADDRSTRLEN
),
1962 inet_ntop(AF_INET
, &lsa
->data
->id
,
1963 buf2
, INET_ADDRSTRLEN
),
1965 &lsa
->data
->adv_router
, buf3
,
1968 EC_OSPF_DOMAIN_CORRUPT
,
1969 "OSPF domain compromised by attack or corruption. "
1970 "Verify correct operation of -ALL- OSPF routers.");
1971 DISCARD_LSA(lsa
, 0);
1974 /* Find the LSA in the current database. */
1976 current
= ospf_lsa_lookup_by_header(oi
->area
, lsa
->data
);
1978 /* (4) If the LSA's LS age is equal to MaxAge, and there is
1980 no instance of the LSA in the router's link state database,
1981 and none of router's neighbors are in states Exchange or
1983 then take the following actions: */
1985 if (IS_LSA_MAXAGE(lsa
) && !current
1986 && ospf_check_nbr_status(oi
->ospf
)) {
1987 /* (4a) Response Link State Acknowledgment. */
1988 ospf_ls_ack_send(nbr
, lsa
);
1990 /* (4b) Discard LSA. */
1991 if (IS_DEBUG_OSPF(lsa
, LSA
)) {
1993 "Link State Update[%s]: LS age is equal to MaxAge.",
1996 DISCARD_LSA(lsa
, 3);
1999 if (IS_OPAQUE_LSA(lsa
->data
->type
)
2000 && IPV4_ADDR_SAME(&lsa
->data
->adv_router
,
2001 &oi
->ospf
->router_id
)) {
2003 * Even if initial flushing seems to be completed, there
2005 * be a case that self-originated LSA with MaxAge still
2007 * in the routing domain.
2008 * Just send an LSAck message to cease retransmission.
2010 if (IS_LSA_MAXAGE(lsa
)) {
2011 zlog_info("LSA[%s]: Boomerang effect?",
2013 ospf_ls_ack_send(nbr
, lsa
);
2014 ospf_lsa_discard(lsa
);
2016 if (current
!= NULL
&& !IS_LSA_MAXAGE(current
))
2017 ospf_opaque_lsa_refresh_schedule(
2023 * If an instance of self-originated Opaque-LSA is not
2025 * in the LSDB, there are some possible cases here.
2027 * 1) This node lost opaque-capability after restart.
2028 * 2) Else, a part of opaque-type is no more supported.
2029 * 3) Else, a part of opaque-id is no more supported.
2031 * Anyway, it is still this node's responsibility to
2033 * Otherwise, the LSA instance remains in the routing
2035 * until its age reaches to MaxAge.
2037 /* XXX: We should deal with this for *ALL* LSAs, not
2039 if (current
== NULL
) {
2040 if (IS_DEBUG_OSPF_EVENT
)
2042 "LSA[%s]: Previously originated Opaque-LSA,"
2043 "not found in the LSDB.",
2046 SET_FLAG(lsa
->flags
, OSPF_LSA_SELF
);
2048 ospf_opaque_self_originated_lsa_received(nbr
,
2050 ospf_ls_ack_send(nbr
, lsa
);
2056 /* It might be happen that received LSA is self-originated
2058 * router ID is changed. So, we should check if LSA is a
2060 * Link State ID is one of the router's own IP interface
2061 * addresses but whose
2062 * Advertising Router is not equal to the router's own Router ID
2063 * According to RFC 2328 12.4.2 and 13.4 this LSA should be
2067 if (lsa
->data
->type
== OSPF_NETWORK_LSA
) {
2068 struct listnode
*oinode
, *oinnode
;
2069 struct ospf_interface
*out_if
;
2072 for (ALL_LIST_ELEMENTS(oi
->ospf
->oiflist
, oinode
,
2077 if ((IPV4_ADDR_SAME(&out_if
->address
->u
.prefix4
,
2079 && (!(IPV4_ADDR_SAME(
2080 &oi
->ospf
->router_id
,
2081 &lsa
->data
->adv_router
)))) {
2082 if (out_if
->network_lsa_self
) {
2083 ospf_lsa_flush_area(
2085 if (IS_DEBUG_OSPF_EVENT
)
2087 "ospf_lsa_discard() in ospf_ls_upd() point 9: lsa %p Type-%d",
2091 ospf_lsa_discard(lsa
);
2101 /* (5) Find the instance of this LSA that is currently contained
2102 in the router's link state database. If there is no
2103 database copy, or the received LSA is more recent than
2104 the database copy the following steps must be performed.
2105 (The sub steps from RFC 2328 section 13 step (5) will be
2110 || (ret
= ospf_lsa_more_recent(current
, lsa
)) < 0) {
2112 if (current
&& (lsa
->data
->ls_seqnum
==
2113 htonl(OSPF_MAX_SEQUENCE_NUMBER
)
2114 && !IS_LSA_MAXAGE(lsa
))) {
2116 "Link State Update[%s]: has Max Seq but not MaxAge. Dropping it",
2119 DISCARD_LSA(lsa
, 4);
2122 /* Actual flooding procedure. */
2123 if (ospf_flood(oi
->ospf
, nbr
, current
, lsa
)
2124 < 0) /* Trap NSSA later. */
2125 DISCARD_LSA(lsa
, 5);
2129 /* (6) Else, If there is an instance of the LSA on the sending
2130 neighbor's Link state request list, an error has occurred in
2131 the Database Exchange process. In this case, restart the
2132 Database Exchange process by generating the neighbor event
2133 BadLSReq for the sending neighbor and stop processing the
2134 Link State Update packet. */
2136 if (ospf_ls_request_lookup(nbr
, lsa
)) {
2137 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_BadLSReq
);
2140 "LSA[%s] instance exists on Link state request list",
2143 /* Clean list of LSAs. */
2144 ospf_upd_list_clean(lsas
);
2145 /* this lsa is not on lsas list already. */
2146 ospf_lsa_discard(lsa
);
2150 /* If the received LSA is the same instance as the database copy
2151 (i.e., neither one is more recent) the following two steps
2152 should be performed: */
2155 /* If the LSA is listed in the Link state retransmission
2157 for the receiving adjacency, the router itself is
2159 an acknowledgment for this LSA. The router should
2161 received LSA as an acknowledgment by removing the LSA
2163 the Link state retransmission list. This is termed
2165 "implied acknowledgment". */
2167 ls_ret
= ospf_ls_retransmit_lookup(nbr
, lsa
);
2169 if (ls_ret
!= NULL
) {
2170 ospf_ls_retransmit_delete(nbr
, ls_ret
);
2172 /* Delayed acknowledgment sent if advertisement
2174 from Designated Router, otherwise do nothing.
2176 if (oi
->state
== ISM_Backup
)
2180 ospf_lsa_lock(lsa
));
2182 DISCARD_LSA(lsa
, 6);
2184 /* Acknowledge the receipt of the LSA by sending a
2185 Link State Acknowledgment packet back out the
2189 ospf_ls_ack_send(nbr
, lsa
);
2190 DISCARD_LSA(lsa
, 7);
2194 /* The database copy is more recent. If the database copy
2195 has LS age equal to MaxAge and LS sequence number equal to
2196 MaxSequenceNumber, simply discard the received LSA without
2197 acknowledging it. (In this case, the LSA's LS sequence number
2199 wrapping, and the MaxSequenceNumber LSA must be completely
2200 flushed before any new LSA instance can be introduced). */
2202 else if (ret
> 0) /* Database copy is more recent */
2204 if (IS_LSA_MAXAGE(current
)
2205 && current
->data
->ls_seqnum
2206 == htonl(OSPF_MAX_SEQUENCE_NUMBER
)) {
2207 DISCARD_LSA(lsa
, 8);
2209 /* Otherwise, as long as the database copy has not been
2211 Link State Update within the last MinLSArrival
2213 database copy back to the sending neighbor,
2215 a Link State Update Packet. The Link State Update
2217 be sent directly to the neighbor. In so doing, do not
2219 database copy of the LSA on the neighbor's link state
2220 retransmission list, and do not acknowledge the
2222 recent) LSA instance. */
2224 if (monotime_since(¤t
->tv_orig
, NULL
)
2225 >= ospf
->min_ls_arrival
* 1000LL)
2226 /* Trap NSSA type later.*/
2227 ospf_ls_upd_send_lsa(
2229 OSPF_SEND_PACKET_DIRECT
);
2230 DISCARD_LSA(lsa
, 9);
2236 assert(listcount(lsas
) == 0);
2240 /* OSPF Link State Acknowledgment message read -- RFC2328 Section 13.7. */
2241 static void ospf_ls_ack(struct ip
*iph
, struct ospf_header
*ospfh
,
2242 struct stream
*s
, struct ospf_interface
*oi
,
2245 struct ospf_neighbor
*nbr
;
2247 /* increment statistics. */
2250 nbr
= ospf_nbr_lookup(oi
, iph
, ospfh
);
2252 flog_warn(EC_OSPF_PACKET
,
2253 "Link State Acknowledgment: Unknown Neighbor %s.",
2254 inet_ntoa(ospfh
->router_id
));
2258 /* Add event to thread. */
2259 OSPF_NSM_EVENT_SCHEDULE(nbr
, NSM_PacketReceived
);
2261 if (nbr
->state
< NSM_Exchange
) {
2262 if (IS_DEBUG_OSPF(nsm
, NSM_EVENTS
))
2264 "Link State Acknowledgment: "
2265 "Neighbor[%s] state %s is less than Exchange",
2266 inet_ntoa(ospfh
->router_id
),
2267 lookup_msg(ospf_nsm_state_msg
, nbr
->state
,
2272 while (size
>= OSPF_LSA_HEADER_SIZE
) {
2273 struct ospf_lsa
*lsa
, *lsr
;
2275 lsa
= ospf_lsa_new();
2276 lsa
->data
= (struct lsa_header
*)stream_pnt(s
);
2277 lsa
->vrf_id
= oi
->ospf
->vrf_id
;
2279 /* lsah = (struct lsa_header *) stream_pnt (s); */
2280 size
-= OSPF_LSA_HEADER_SIZE
;
2281 stream_forward_getp(s
, OSPF_LSA_HEADER_SIZE
);
2283 if (lsa
->data
->type
< OSPF_MIN_LSA
2284 || lsa
->data
->type
>= OSPF_MAX_LSA
) {
2286 ospf_lsa_discard(lsa
);
2290 lsr
= ospf_ls_retransmit_lookup(nbr
, lsa
);
2292 if (lsr
!= NULL
&& ospf_lsa_more_recent(lsr
, lsa
) == 0)
2293 ospf_ls_retransmit_delete(nbr
, lsr
);
2296 ospf_lsa_discard(lsa
);
2302 static struct stream
*ospf_recv_packet(struct ospf
*ospf
, int fd
,
2303 struct interface
**ifp
,
2304 struct stream
*ibuf
)
2309 ifindex_t ifindex
= 0;
2311 /* Header and data both require alignment. */
2312 char buff
[CMSG_SPACE(SOPT_SIZE_CMSG_IFINDEX_IPV4())];
2315 memset(&msgh
, 0, sizeof(struct msghdr
));
2316 msgh
.msg_iov
= &iov
;
2317 msgh
.msg_iovlen
= 1;
2318 msgh
.msg_control
= (caddr_t
)buff
;
2319 msgh
.msg_controllen
= sizeof(buff
);
2321 ret
= stream_recvmsg(ibuf
, fd
, &msgh
, 0, OSPF_MAX_PACKET_SIZE
+ 1);
2323 flog_warn(EC_OSPF_PACKET
, "stream_recvmsg failed: %s",
2324 safe_strerror(errno
));
2327 if ((unsigned int)ret
< sizeof(iph
)) /* ret must be > 0 now */
2331 "ospf_recv_packet: discarding runt packet of length %d "
2332 "(ip header size is %u)",
2333 ret
, (unsigned int)sizeof(iph
));
2337 /* Note that there should not be alignment problems with this assignment
2338 because this is at the beginning of the stream data buffer. */
2339 iph
= (struct ip
*)STREAM_DATA(ibuf
);
2340 sockopt_iphdrincl_swab_systoh(iph
);
2342 ip_len
= iph
->ip_len
;
2344 #if !defined(GNU_LINUX) && (OpenBSD < 200311) && (__FreeBSD_version < 1000000)
2346 * Kernel network code touches incoming IP header parameters,
2347 * before protocol specific processing.
2349 * 1) Convert byteorder to host representation.
2350 * --> ip_len, ip_id, ip_off
2352 * 2) Adjust ip_len to strip IP header size!
2353 * --> If user process receives entire IP packet via RAW
2354 * socket, it must consider adding IP header size to
2355 * the "ip_len" field of "ip" structure.
2357 * For more details, see <netinet/ip_input.c>.
2359 ip_len
= ip_len
+ (iph
->ip_hl
<< 2);
2362 #if defined(__DragonFly__)
2364 * in DragonFly's raw socket, ip_len/ip_off are read
2365 * in network byte order.
2366 * As OpenBSD < 200311 adjust ip_len to strip IP header size!
2368 ip_len
= ntohs(iph
->ip_len
) + (iph
->ip_hl
<< 2);
2371 ifindex
= getsockopt_ifindex(AF_INET
, &msgh
);
2373 *ifp
= if_lookup_by_index(ifindex
, ospf
->vrf_id
);
2375 if (ret
!= ip_len
) {
2378 "ospf_recv_packet read length mismatch: ip_len is %d, "
2379 "but recvmsg returned %d",
2384 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2385 zlog_debug("%s: fd %d(%s) on interface %d(%s)",
2386 __PRETTY_FUNCTION__
, fd
, ospf_get_name(ospf
),
2387 ifindex
, *ifp
? (*ifp
)->name
: "Unknown");
2391 static struct ospf_interface
*
2392 ospf_associate_packet_vl(struct ospf
*ospf
, struct interface
*ifp
,
2393 struct ip
*iph
, struct ospf_header
*ospfh
)
2395 struct ospf_interface
*rcv_oi
;
2396 struct ospf_vl_data
*vl_data
;
2397 struct ospf_area
*vl_area
;
2398 struct listnode
*node
;
2400 if (IN_MULTICAST(ntohl(iph
->ip_dst
.s_addr
))
2401 || !OSPF_IS_AREA_BACKBONE(ospfh
))
2404 /* look for local OSPF interface matching the destination
2405 * to determine Area ID. We presume therefore the destination address
2406 * is unique, or at least (for "unnumbered" links), not used in other
2409 if ((rcv_oi
= ospf_if_lookup_by_local_addr(ospf
, NULL
, iph
->ip_dst
))
2413 for (ALL_LIST_ELEMENTS_RO(ospf
->vlinks
, node
, vl_data
)) {
2415 ospf_area_lookup_by_area_id(ospf
, vl_data
->vl_area_id
);
2419 if (OSPF_AREA_SAME(&vl_area
, &rcv_oi
->area
)
2420 && IPV4_ADDR_SAME(&vl_data
->vl_peer
, &ospfh
->router_id
)) {
2421 if (IS_DEBUG_OSPF_EVENT
)
2422 zlog_debug("associating packet with %s",
2423 IF_NAME(vl_data
->vl_oi
));
2424 if (!CHECK_FLAG(vl_data
->vl_oi
->ifp
->flags
, IFF_UP
)) {
2425 if (IS_DEBUG_OSPF_EVENT
)
2427 "This VL is not up yet, sorry");
2431 return vl_data
->vl_oi
;
2435 if (IS_DEBUG_OSPF_EVENT
)
2436 zlog_debug("couldn't find any VL to associate the packet with");
2441 static int ospf_check_area_id(struct ospf_interface
*oi
,
2442 struct ospf_header
*ospfh
)
2444 /* Check match the Area ID of the receiving interface. */
2445 if (OSPF_AREA_SAME(&oi
->area
, &ospfh
))
2451 /* Unbound socket will accept any Raw IP packets if proto is matched.
2452 To prevent it, compare src IP address and i/f address with masking
2453 i/f network mask. */
2454 static int ospf_check_network_mask(struct ospf_interface
*oi
,
2455 struct in_addr ip_src
)
2457 struct in_addr mask
, me
, him
;
2459 if (oi
->type
== OSPF_IFTYPE_POINTOPOINT
2460 || oi
->type
== OSPF_IFTYPE_VIRTUALLINK
)
2463 masklen2ip(oi
->address
->prefixlen
, &mask
);
2465 me
.s_addr
= oi
->address
->u
.prefix4
.s_addr
& mask
.s_addr
;
2466 him
.s_addr
= ip_src
.s_addr
& mask
.s_addr
;
2468 if (IPV4_ADDR_SAME(&me
, &him
))
2474 /* Return 1, if the packet is properly authenticated and checksummed,
2475 0 otherwise. In particular, check that AuType header field is valid and
2476 matches the locally configured AuType, and that D.5 requirements are met. */
2477 static int ospf_check_auth(struct ospf_interface
*oi
, struct ospf_header
*ospfh
)
2479 struct crypt_key
*ck
;
2480 uint16_t iface_auth_type
;
2481 uint16_t pkt_auth_type
= ntohs(ospfh
->auth_type
);
2483 switch (pkt_auth_type
) {
2484 case OSPF_AUTH_NULL
: /* RFC2328 D.5.1 */
2485 if (OSPF_AUTH_NULL
!= (iface_auth_type
= ospf_auth_type(oi
))) {
2486 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, RECV
))
2489 "interface %s: auth-type mismatch, local %s, rcvd Null",
2491 lookup_msg(ospf_auth_type_str
,
2492 iface_auth_type
, NULL
));
2495 if (!ospf_check_sum(ospfh
)) {
2496 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, RECV
))
2499 "interface %s: Null auth OK, but checksum error, Router-ID %s",
2501 inet_ntoa(ospfh
->router_id
));
2505 case OSPF_AUTH_SIMPLE
: /* RFC2328 D.5.2 */
2506 if (OSPF_AUTH_SIMPLE
2507 != (iface_auth_type
= ospf_auth_type(oi
))) {
2508 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, RECV
))
2511 "interface %s: auth-type mismatch, local %s, rcvd Simple",
2513 lookup_msg(ospf_auth_type_str
,
2514 iface_auth_type
, NULL
));
2517 if (memcmp(OSPF_IF_PARAM(oi
, auth_simple
), ospfh
->u
.auth_data
,
2518 OSPF_AUTH_SIMPLE_SIZE
)) {
2519 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, RECV
))
2520 flog_warn(EC_OSPF_PACKET
,
2521 "interface %s: Simple auth failed",
2525 if (!ospf_check_sum(ospfh
)) {
2526 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, RECV
))
2529 "interface %s: Simple auth OK, checksum error, Router-ID %s",
2531 inet_ntoa(ospfh
->router_id
));
2535 case OSPF_AUTH_CRYPTOGRAPHIC
: /* RFC2328 D.5.3 */
2536 if (OSPF_AUTH_CRYPTOGRAPHIC
2537 != (iface_auth_type
= ospf_auth_type(oi
))) {
2538 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, RECV
))
2541 "interface %s: auth-type mismatch, local %s, rcvd Cryptographic",
2543 lookup_msg(ospf_auth_type_str
,
2544 iface_auth_type
, NULL
));
2547 if (ospfh
->checksum
) {
2548 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, RECV
))
2551 "interface %s: OSPF header checksum is not 0",
2555 /* only MD5 crypto method can pass ospf_packet_examin() */
2556 if (NULL
== (ck
= listgetdata(
2557 listtail(OSPF_IF_PARAM(oi
, auth_crypt
))))
2558 || ospfh
->u
.crypt
.key_id
!= ck
->key_id
||
2559 /* Condition above uses the last key ID on the list,
2561 different from what ospf_crypt_key_lookup() does. A
2563 !ospf_check_md5_digest(oi
, ospfh
)) {
2564 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, RECV
))
2565 flog_warn(EC_OSPF_MD5
,
2566 "interface %s: MD5 auth failed",
2572 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, RECV
))
2575 "interface %s: invalid packet auth-type (%02x)",
2576 IF_NAME(oi
), pkt_auth_type
);
2581 static int ospf_check_sum(struct ospf_header
*ospfh
)
2586 /* clear auth_data for checksum. */
2587 memset(ospfh
->u
.auth_data
, 0, OSPF_AUTH_SIMPLE_SIZE
);
2589 /* keep checksum and clear. */
2590 sum
= ospfh
->checksum
;
2591 memset(&ospfh
->checksum
, 0, sizeof(uint16_t));
2593 /* calculate checksum. */
2594 ret
= in_cksum(ospfh
, ntohs(ospfh
->length
));
2597 zlog_info("ospf_check_sum(): checksum mismatch, my %X, his %X",
2605 /* Verify, that given link/TOS records are properly sized/aligned and match
2606 Router-LSA "# links" and "# TOS" fields as specified in RFC2328 A.4.2. */
2607 static unsigned ospf_router_lsa_links_examin(struct router_lsa_link
*link
,
2609 const uint16_t num_links
)
2611 unsigned counted_links
= 0, thislinklen
;
2615 OSPF_ROUTER_LSA_LINK_SIZE
+ 4 * link
->m
[0].tos_count
;
2616 if (thislinklen
> linkbytes
) {
2617 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2618 zlog_debug("%s: length error in link block #%u",
2619 __func__
, counted_links
);
2622 link
= (struct router_lsa_link
*)((caddr_t
)link
+ thislinklen
);
2623 linkbytes
-= thislinklen
;
2626 if (counted_links
!= num_links
) {
2627 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2628 zlog_debug("%s: %u link blocks declared, %u present",
2629 __func__
, num_links
, counted_links
);
2635 /* Verify, that the given LSA is properly sized/aligned (including type-specific
2636 minimum length constraint). */
2637 static unsigned ospf_lsa_examin(struct lsa_header
*lsah
, const uint16_t lsalen
,
2638 const uint8_t headeronly
)
2641 struct router_lsa
*rlsa
;
2642 if (lsah
->type
< OSPF_MAX_LSA
&& ospf_lsa_minlen
[lsah
->type
]
2643 && lsalen
< OSPF_LSA_HEADER_SIZE
+ ospf_lsa_minlen
[lsah
->type
]) {
2644 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2645 zlog_debug("%s: undersized (%u B) %s", __func__
, lsalen
,
2646 lookup_msg(ospf_lsa_type_msg
, lsah
->type
,
2650 switch (lsah
->type
) {
2651 case OSPF_ROUTER_LSA
:
2652 /* RFC2328 A.4.2, LSA header + 4 bytes followed by N>=1
2653 * (12+)-byte link blocks */
2655 ret
= (lsalen
- OSPF_LSA_HEADER_SIZE
2656 - OSPF_ROUTER_LSA_MIN_SIZE
)
2662 rlsa
= (struct router_lsa
*)lsah
;
2663 ret
= ospf_router_lsa_links_examin(
2664 (struct router_lsa_link
*)rlsa
->link
,
2665 lsalen
- OSPF_LSA_HEADER_SIZE
- 4, /* skip: basic
2668 ntohs(rlsa
->links
) /* 16 bits */
2671 case OSPF_AS_EXTERNAL_LSA
:
2672 /* RFC2328 A.4.5, LSA header + 4 bytes followed by N>=1 12-bytes long
2674 case OSPF_AS_NSSA_LSA
:
2675 /* RFC3101 C, idem */
2676 ret
= (lsalen
- OSPF_LSA_HEADER_SIZE
2677 - OSPF_AS_EXTERNAL_LSA_MIN_SIZE
)
2682 /* Following LSA types are considered OK length-wise as soon as their
2684 * length constraint is met and length of the whole LSA is a multiple of
2686 * (basic LSA header size is already a multiple of 4). */
2687 case OSPF_NETWORK_LSA
:
2688 /* RFC2328 A.4.3, LSA header + 4 bytes followed by N>=1 router-IDs */
2689 case OSPF_SUMMARY_LSA
:
2690 case OSPF_ASBR_SUMMARY_LSA
:
2691 /* RFC2328 A.4.4, LSA header + 4 bytes followed by N>=1 4-bytes TOS
2693 case OSPF_OPAQUE_LINK_LSA
:
2694 case OSPF_OPAQUE_AREA_LSA
:
2695 case OSPF_OPAQUE_AS_LSA
:
2696 /* RFC5250 A.2, "some number of octets (of application-specific
2697 * data) padded to 32-bit alignment." This is considered
2699 * to 4-byte alignment of all other LSA types, see
2700 * OSPF-ALIGNMENT.txt
2701 * file for the detailed analysis of this passage. */
2702 ret
= lsalen
% 4 ? MSG_NG
: MSG_OK
;
2705 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2706 zlog_debug("%s: unsupported LSA type 0x%02x", __func__
,
2710 if (ret
!= MSG_OK
&& IS_DEBUG_OSPF_PACKET(0, RECV
))
2711 zlog_debug("%s: alignment error in %s", __func__
,
2712 lookup_msg(ospf_lsa_type_msg
, lsah
->type
, NULL
));
2716 /* Verify if the provided input buffer is a valid sequence of LSAs. This
2717 includes verification of LSA blocks length/alignment and dispatching
2718 of deeper-level checks. */
2720 ospf_lsaseq_examin(struct lsa_header
*lsah
, /* start of buffered data */
2721 size_t length
, const uint8_t headeronly
,
2722 /* When declared_num_lsas is not 0, compare it to the real
2724 and treat the difference as an error. */
2725 const uint32_t declared_num_lsas
)
2727 uint32_t counted_lsas
= 0;
2731 if (length
< OSPF_LSA_HEADER_SIZE
) {
2732 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2734 "%s: undersized (%zu B) trailing (#%u) LSA header",
2735 __func__
, length
, counted_lsas
);
2738 /* save on ntohs() calls here and in the LSA validator */
2739 lsalen
= ntohs(lsah
->length
);
2740 if (lsalen
< OSPF_LSA_HEADER_SIZE
) {
2741 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2743 "%s: malformed LSA header #%u, declared length is %u B",
2744 __func__
, counted_lsas
, lsalen
);
2748 /* less checks here and in ospf_lsa_examin() */
2749 if (MSG_OK
!= ospf_lsa_examin(lsah
, lsalen
, 1)) {
2750 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2752 "%s: malformed header-only LSA #%u",
2753 __func__
, counted_lsas
);
2756 lsah
= (struct lsa_header
*)((caddr_t
)lsah
2757 + OSPF_LSA_HEADER_SIZE
);
2758 length
-= OSPF_LSA_HEADER_SIZE
;
2760 /* make sure the input buffer is deep enough before
2762 if (lsalen
> length
) {
2763 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2765 "%s: anomaly in LSA #%u: declared length is %u B, buffered length is %zu B",
2766 __func__
, counted_lsas
, lsalen
,
2770 if (MSG_OK
!= ospf_lsa_examin(lsah
, lsalen
, 0)) {
2771 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2772 zlog_debug("%s: malformed LSA #%u",
2773 __func__
, counted_lsas
);
2776 lsah
= (struct lsa_header
*)((caddr_t
)lsah
+ lsalen
);
2782 if (declared_num_lsas
&& counted_lsas
!= declared_num_lsas
) {
2783 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2785 "%s: #LSAs declared (%u) does not match actual (%u)",
2786 __func__
, declared_num_lsas
, counted_lsas
);
2792 /* Verify a complete OSPF packet for proper sizing/alignment. */
2793 static unsigned ospf_packet_examin(struct ospf_header
*oh
,
2794 const unsigned bytesonwire
)
2796 uint16_t bytesdeclared
, bytesauth
;
2798 struct ospf_ls_update
*lsupd
;
2800 /* Length, 1st approximation. */
2801 if (bytesonwire
< OSPF_HEADER_SIZE
) {
2802 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2803 zlog_debug("%s: undersized (%u B) packet", __func__
,
2807 /* Now it is safe to access header fields. Performing length check,
2809 * for possible extra bytes of crypto auth/padding, which are not
2811 * in the OSPF header "length" field. */
2812 if (oh
->version
!= OSPF_VERSION
) {
2813 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2814 zlog_debug("%s: invalid (%u) protocol version",
2815 __func__
, oh
->version
);
2818 bytesdeclared
= ntohs(oh
->length
);
2819 if (ntohs(oh
->auth_type
) != OSPF_AUTH_CRYPTOGRAPHIC
)
2822 if (oh
->u
.crypt
.auth_data_len
!= OSPF_AUTH_MD5_SIZE
) {
2823 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2825 "%s: unsupported crypto auth length (%u B)",
2826 __func__
, oh
->u
.crypt
.auth_data_len
);
2829 bytesauth
= OSPF_AUTH_MD5_SIZE
;
2831 if (bytesdeclared
+ bytesauth
> bytesonwire
) {
2832 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2834 "%s: packet length error (%u real, %u+%u declared)",
2835 __func__
, bytesonwire
, bytesdeclared
,
2839 /* Length, 2nd approximation. The type-specific constraint is checked
2840 against declared length, not amount of bytes on wire. */
2841 if (oh
->type
>= OSPF_MSG_HELLO
&& oh
->type
<= OSPF_MSG_LS_ACK
2843 < OSPF_HEADER_SIZE
+ ospf_packet_minlen
[oh
->type
]) {
2844 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2845 zlog_debug("%s: undersized (%u B) %s packet", __func__
,
2847 lookup_msg(ospf_packet_type_str
, oh
->type
,
2852 case OSPF_MSG_HELLO
:
2853 /* RFC2328 A.3.2, packet header + OSPF_HELLO_MIN_SIZE bytes
2855 by N>=0 router-IDs. */
2856 ret
= (bytesdeclared
- OSPF_HEADER_SIZE
- OSPF_HELLO_MIN_SIZE
)
2861 case OSPF_MSG_DB_DESC
:
2862 /* RFC2328 A.3.3, packet header + OSPF_DB_DESC_MIN_SIZE bytes
2864 by N>=0 header-only LSAs. */
2865 ret
= ospf_lsaseq_examin(
2866 (struct lsa_header
*)((caddr_t
)oh
+ OSPF_HEADER_SIZE
2867 + OSPF_DB_DESC_MIN_SIZE
),
2868 bytesdeclared
- OSPF_HEADER_SIZE
2869 - OSPF_DB_DESC_MIN_SIZE
,
2870 1, /* header-only LSAs */
2873 case OSPF_MSG_LS_REQ
:
2874 /* RFC2328 A.3.4, packet header followed by N>=0 12-bytes
2875 * request blocks. */
2876 ret
= (bytesdeclared
- OSPF_HEADER_SIZE
- OSPF_LS_REQ_MIN_SIZE
)
2881 case OSPF_MSG_LS_UPD
:
2882 /* RFC2328 A.3.5, packet header + OSPF_LS_UPD_MIN_SIZE bytes
2884 by N>=0 full LSAs (with N declared beforehand). */
2885 lsupd
= (struct ospf_ls_update
*)((caddr_t
)oh
2886 + OSPF_HEADER_SIZE
);
2887 ret
= ospf_lsaseq_examin(
2888 (struct lsa_header
*)((caddr_t
)lsupd
2889 + OSPF_LS_UPD_MIN_SIZE
),
2890 bytesdeclared
- OSPF_HEADER_SIZE
- OSPF_LS_UPD_MIN_SIZE
,
2892 ntohl(lsupd
->num_lsas
) /* 32 bits */
2895 case OSPF_MSG_LS_ACK
:
2896 /* RFC2328 A.3.6, packet header followed by N>=0 header-only
2898 ret
= ospf_lsaseq_examin(
2899 (struct lsa_header
*)((caddr_t
)oh
+ OSPF_HEADER_SIZE
2900 + OSPF_LS_ACK_MIN_SIZE
),
2901 bytesdeclared
- OSPF_HEADER_SIZE
- OSPF_LS_ACK_MIN_SIZE
,
2902 1, /* header-only LSAs */
2906 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2907 zlog_debug("%s: invalid packet type 0x%02x", __func__
,
2911 if (ret
!= MSG_OK
&& IS_DEBUG_OSPF_PACKET(0, RECV
))
2912 zlog_debug("%s: malformed %s packet", __func__
,
2913 lookup_msg(ospf_packet_type_str
, oh
->type
, NULL
));
2917 /* OSPF Header verification. */
2918 static int ospf_verify_header(struct stream
*ibuf
, struct ospf_interface
*oi
,
2919 struct ip
*iph
, struct ospf_header
*ospfh
)
2921 /* Check Area ID. */
2922 if (!ospf_check_area_id(oi
, ospfh
)) {
2923 flog_warn(EC_OSPF_PACKET
,
2924 "interface %s: ospf_read invalid Area ID %s.",
2925 IF_NAME(oi
), inet_ntoa(ospfh
->area_id
));
2929 /* Check network mask, Silently discarded. */
2930 if (!ospf_check_network_mask(oi
, iph
->ip_src
)) {
2933 "interface %s: ospf_read network address is not same [%s]",
2934 IF_NAME(oi
), inet_ntoa(iph
->ip_src
));
2938 /* Check authentication. The function handles logging actions, where
2940 if (!ospf_check_auth(oi
, ospfh
))
2946 /* Starting point of packet process function. */
2947 int ospf_read(struct thread
*thread
)
2950 struct stream
*ibuf
;
2952 struct ospf_interface
*oi
;
2954 struct ospf_header
*ospfh
;
2956 struct interface
*ifp
= NULL
;
2957 struct connected
*c
;
2959 /* first of all get interface pointer. */
2960 ospf
= THREAD_ARG(thread
);
2962 /* prepare for next packet. */
2963 ospf
->t_read
= NULL
;
2964 thread_add_read(master
, ospf_read
, ospf
, ospf
->fd
, &ospf
->t_read
);
2966 stream_reset(ospf
->ibuf
);
2967 ibuf
= ospf_recv_packet(ospf
, ospf
->fd
, &ifp
, ospf
->ibuf
);
2970 /* This raw packet is known to be at least as big as its IP header. */
2972 /* Note that there should not be alignment problems with this assignment
2973 because this is at the beginning of the stream data buffer. */
2974 iph
= (struct ip
*)STREAM_DATA(ibuf
);
2975 /* Note that sockopt_iphdrincl_swab_systoh was called in
2976 * ospf_recv_packet. */
2979 /* Handle cases where the platform does not support retrieving
2981 and also platforms (such as Solaris 8) that claim to support
2983 retrieval but do not. */
2984 c
= if_lookup_address((void *)&iph
->ip_src
, AF_INET
,
2989 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
2991 "%s: Unable to determine incoming interface from: %s(%s)",
2992 __PRETTY_FUNCTION__
,
2993 inet_ntoa(iph
->ip_src
),
2994 ospf_get_name(ospf
));
2999 /* IP Header dump. */
3000 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
3001 ospf_ip_header_dump(iph
);
3003 /* Self-originated packet should be discarded silently. */
3004 if (ospf_if_lookup_by_local_addr(ospf
, NULL
, iph
->ip_src
)) {
3005 if (IS_DEBUG_OSPF_PACKET(0, RECV
)) {
3007 "ospf_read[%s]: Dropping self-originated packet",
3008 inet_ntoa(iph
->ip_src
));
3013 /* Advance from IP header to OSPF header (iph->ip_hl has been verified
3014 by ospf_recv_packet() to be correct). */
3015 stream_forward_getp(ibuf
, iph
->ip_hl
* 4);
3017 ospfh
= (struct ospf_header
*)stream_pnt(ibuf
);
3019 != ospf_packet_examin(
3020 ospfh
, stream_get_endp(ibuf
) - stream_get_getp(ibuf
)))
3022 /* Now it is safe to access all fields of OSPF packet header. */
3024 /* associate packet with ospf interface */
3025 oi
= ospf_if_lookup_recv_if(ospf
, iph
->ip_src
, ifp
);
3027 /* ospf_verify_header() relies on a valid "oi" and thus can be called
3029 after the passive/backbone/other checks below are passed. These
3031 in turn access the fields of unverified "ospfh" structure for their
3033 purposes and must remain very accurate in doing this. */
3035 /* If incoming interface is passive one, ignore it. */
3036 if (oi
&& OSPF_IF_PASSIVE_STATUS(oi
) == OSPF_IF_PASSIVE
) {
3037 char buf
[3][INET_ADDRSTRLEN
];
3039 if (IS_DEBUG_OSPF_EVENT
)
3041 "ignoring packet from router %s sent to %s, "
3042 "received on a passive interface, %s",
3043 inet_ntop(AF_INET
, &ospfh
->router_id
, buf
[0],
3045 inet_ntop(AF_INET
, &iph
->ip_dst
, buf
[1],
3047 inet_ntop(AF_INET
, &oi
->address
->u
.prefix4
,
3048 buf
[2], sizeof(buf
[2])));
3050 if (iph
->ip_dst
.s_addr
== htonl(OSPF_ALLSPFROUTERS
)) {
3051 /* Try to fix multicast membership.
3052 * Some OS:es may have problems in this area,
3053 * make sure it is removed.
3055 OI_MEMBER_JOINED(oi
, MEMBER_ALLROUTERS
);
3056 ospf_if_set_multicast(oi
);
3062 /* if no local ospf_interface,
3063 * or header area is backbone but ospf_interface is not
3064 * check for VLINK interface
3066 if ((oi
== NULL
) || (OSPF_IS_AREA_ID_BACKBONE(ospfh
->area_id
)
3067 && !OSPF_IS_AREA_ID_BACKBONE(oi
->area
->area_id
))) {
3068 if ((oi
= ospf_associate_packet_vl(ospf
, ifp
, iph
, ospfh
))
3070 if (!ospf
->instance
&& IS_DEBUG_OSPF_EVENT
)
3072 "Packet from [%s] received on link %s"
3073 " but no ospf_interface",
3074 inet_ntoa(iph
->ip_src
), ifp
->name
);
3079 /* else it must be a local ospf interface, check it was received on
3082 else if (oi
->ifp
!= ifp
) {
3083 if (IS_DEBUG_OSPF_EVENT
)
3084 flog_warn(EC_OSPF_PACKET
,
3085 "Packet from [%s] received on wrong link %s",
3086 inet_ntoa(iph
->ip_src
), ifp
->name
);
3088 } else if (oi
->state
== ISM_Down
) {
3089 char buf
[2][INET_ADDRSTRLEN
];
3092 "Ignoring packet from %s to %s received on interface that is "
3093 "down [%s]; interface flags are %s",
3094 inet_ntop(AF_INET
, &iph
->ip_src
, buf
[0],
3096 inet_ntop(AF_INET
, &iph
->ip_dst
, buf
[1],
3098 ifp
->name
, if_flag_dump(ifp
->flags
));
3099 /* Fix multicast memberships? */
3100 if (iph
->ip_dst
.s_addr
== htonl(OSPF_ALLSPFROUTERS
))
3101 OI_MEMBER_JOINED(oi
, MEMBER_ALLROUTERS
);
3102 else if (iph
->ip_dst
.s_addr
== htonl(OSPF_ALLDROUTERS
))
3103 OI_MEMBER_JOINED(oi
, MEMBER_DROUTERS
);
3104 if (oi
->multicast_memberships
)
3105 ospf_if_set_multicast(oi
);
3110 * If the received packet is destined for AllDRouters, the packet
3111 * should be accepted only if the received ospf interface state is
3112 * either DR or Backup -- endo.
3114 if (iph
->ip_dst
.s_addr
== htonl(OSPF_ALLDROUTERS
)
3115 && (oi
->state
!= ISM_DR
&& oi
->state
!= ISM_Backup
)) {
3118 "Dropping packet for AllDRouters from [%s] via [%s] (ISM: %s)",
3119 inet_ntoa(iph
->ip_src
), IF_NAME(oi
),
3120 lookup_msg(ospf_ism_state_msg
, oi
->state
, NULL
));
3121 /* Try to fix multicast membership. */
3122 SET_FLAG(oi
->multicast_memberships
, MEMBER_DROUTERS
);
3123 ospf_if_set_multicast(oi
);
3127 /* Verify more OSPF header fields. */
3128 ret
= ospf_verify_header(ibuf
, oi
, iph
, ospfh
);
3130 if (IS_DEBUG_OSPF_PACKET(0, RECV
))
3132 "ospf_read[%s]: Header check failed, "
3134 inet_ntoa(iph
->ip_src
));
3138 /* Show debug receiving packet. */
3139 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, RECV
)) {
3140 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, DETAIL
)) {
3142 "-----------------------------------------------------");
3143 ospf_packet_dump(ibuf
);
3146 zlog_debug("%s received from [%s] via [%s]",
3147 lookup_msg(ospf_packet_type_str
, ospfh
->type
, NULL
),
3148 inet_ntoa(ospfh
->router_id
), IF_NAME(oi
));
3149 zlog_debug(" src [%s],", inet_ntoa(iph
->ip_src
));
3150 zlog_debug(" dst [%s]", inet_ntoa(iph
->ip_dst
));
3152 if (IS_DEBUG_OSPF_PACKET(ospfh
->type
- 1, DETAIL
))
3154 "-----------------------------------------------------");
3157 stream_forward_getp(ibuf
, OSPF_HEADER_SIZE
);
3159 /* Adjust size to message length. */
3160 length
= ntohs(ospfh
->length
) - OSPF_HEADER_SIZE
;
3162 /* Read rest of the packet and call each sort of packet routine. */
3163 switch (ospfh
->type
) {
3164 case OSPF_MSG_HELLO
:
3165 ospf_hello(iph
, ospfh
, ibuf
, oi
, length
);
3167 case OSPF_MSG_DB_DESC
:
3168 ospf_db_desc(iph
, ospfh
, ibuf
, oi
, length
);
3170 case OSPF_MSG_LS_REQ
:
3171 ospf_ls_req(iph
, ospfh
, ibuf
, oi
, length
);
3173 case OSPF_MSG_LS_UPD
:
3174 ospf_ls_upd(ospf
, iph
, ospfh
, ibuf
, oi
, length
);
3176 case OSPF_MSG_LS_ACK
:
3177 ospf_ls_ack(iph
, ospfh
, ibuf
, oi
, length
);
3180 flog_warn(EC_OSPF_PACKET
,
3181 "interface %s: OSPF packet header type %d is illegal",
3182 IF_NAME(oi
), ospfh
->type
);
3189 /* Make OSPF header. */
3190 static void ospf_make_header(int type
, struct ospf_interface
*oi
,
3193 struct ospf_header
*ospfh
;
3195 ospfh
= (struct ospf_header
*)STREAM_DATA(s
);
3197 ospfh
->version
= (uint8_t)OSPF_VERSION
;
3198 ospfh
->type
= (uint8_t)type
;
3200 ospfh
->router_id
= oi
->ospf
->router_id
;
3202 ospfh
->checksum
= 0;
3203 ospfh
->area_id
= oi
->area
->area_id
;
3204 ospfh
->auth_type
= htons(ospf_auth_type(oi
));
3206 memset(ospfh
->u
.auth_data
, 0, OSPF_AUTH_SIMPLE_SIZE
);
3208 stream_forward_endp(s
, OSPF_HEADER_SIZE
);
3211 /* Make Authentication Data. */
3212 static int ospf_make_auth(struct ospf_interface
*oi
, struct ospf_header
*ospfh
)
3214 struct crypt_key
*ck
;
3216 switch (ospf_auth_type(oi
)) {
3217 case OSPF_AUTH_NULL
:
3218 /* memset (ospfh->u.auth_data, 0, sizeof (ospfh->u.auth_data));
3221 case OSPF_AUTH_SIMPLE
:
3222 memcpy(ospfh
->u
.auth_data
, OSPF_IF_PARAM(oi
, auth_simple
),
3223 OSPF_AUTH_SIMPLE_SIZE
);
3225 case OSPF_AUTH_CRYPTOGRAPHIC
:
3226 /* If key is not set, then set 0. */
3227 if (list_isempty(OSPF_IF_PARAM(oi
, auth_crypt
))) {
3228 ospfh
->u
.crypt
.zero
= 0;
3229 ospfh
->u
.crypt
.key_id
= 0;
3230 ospfh
->u
.crypt
.auth_data_len
= OSPF_AUTH_MD5_SIZE
;
3233 listtail(OSPF_IF_PARAM(oi
, auth_crypt
)));
3234 ospfh
->u
.crypt
.zero
= 0;
3235 ospfh
->u
.crypt
.key_id
= ck
->key_id
;
3236 ospfh
->u
.crypt
.auth_data_len
= OSPF_AUTH_MD5_SIZE
;
3238 /* note: the seq is done in ospf_make_md5_digest() */
3241 /* memset (ospfh->u.auth_data, 0, sizeof (ospfh->u.auth_data));
3249 /* Fill rest of OSPF header. */
3250 static void ospf_fill_header(struct ospf_interface
*oi
, struct stream
*s
,
3253 struct ospf_header
*ospfh
;
3255 ospfh
= (struct ospf_header
*)STREAM_DATA(s
);
3258 ospfh
->length
= htons(length
);
3260 /* Calculate checksum. */
3261 if (ntohs(ospfh
->auth_type
) != OSPF_AUTH_CRYPTOGRAPHIC
)
3262 ospfh
->checksum
= in_cksum(ospfh
, length
);
3264 ospfh
->checksum
= 0;
3266 /* Add Authentication Data. */
3267 ospf_make_auth(oi
, ospfh
);
3270 static int ospf_make_hello(struct ospf_interface
*oi
, struct stream
*s
)
3272 struct ospf_neighbor
*nbr
;
3273 struct route_node
*rn
;
3274 uint16_t length
= OSPF_HELLO_MIN_SIZE
;
3275 struct in_addr mask
;
3279 /* Set netmask of interface. */
3280 if (!(CHECK_FLAG(oi
->connected
->flags
, ZEBRA_IFA_UNNUMBERED
)
3281 && oi
->type
== OSPF_IFTYPE_POINTOPOINT
)
3282 && oi
->type
!= OSPF_IFTYPE_VIRTUALLINK
)
3283 masklen2ip(oi
->address
->prefixlen
, &mask
);
3285 memset((char *)&mask
, 0, sizeof(struct in_addr
));
3286 stream_put_ipv4(s
, mask
.s_addr
);
3288 /* Set Hello Interval. */
3289 if (OSPF_IF_PARAM(oi
, fast_hello
) == 0)
3290 stream_putw(s
, OSPF_IF_PARAM(oi
, v_hello
));
3292 stream_putw(s
, 0); /* hello-interval of 0 for fast-hellos */
3294 if (IS_DEBUG_OSPF_EVENT
)
3295 zlog_debug("make_hello: options: %x, int: %s", OPTIONS(oi
),
3299 stream_putc(s
, OPTIONS(oi
));
3301 /* Set Router Priority. */
3302 stream_putc(s
, PRIORITY(oi
));
3304 /* Set Router Dead Interval. */
3305 stream_putl(s
, OSPF_IF_PARAM(oi
, v_wait
));
3307 /* Set Designated Router. */
3308 stream_put_ipv4(s
, DR(oi
).s_addr
);
3310 p
= stream_get_endp(s
);
3312 /* Set Backup Designated Router. */
3313 stream_put_ipv4(s
, BDR(oi
).s_addr
);
3315 /* Add neighbor seen. */
3316 for (rn
= route_top(oi
->nbrs
); rn
; rn
= route_next(rn
))
3317 if ((nbr
= rn
->info
))
3318 if (nbr
->router_id
.s_addr
3319 != 0) /* Ignore 0.0.0.0 node. */
3321 != NSM_Attempt
) /* Ignore Down neighbor. */
3323 != NSM_Down
) /* This is myself for
3325 if (!IPV4_ADDR_SAME(
3327 &oi
->ospf
->router_id
)) {
3328 /* Check neighbor is
3330 if (nbr
->d_router
.s_addr
3344 /* Hello packet overflows interface MTU. */
3345 if (length
+ sizeof(uint32_t)
3346 > ospf_packet_max(oi
)) {
3348 EC_OSPF_LARGE_HELLO
,
3349 "Oversized Hello packet! Larger than MTU. Not sending it out");
3360 /* Let neighbor generate BackupSeen. */
3362 stream_putl_at(s
, p
, 0); /* ipv4 address, normally */
3367 static int ospf_make_db_desc(struct ospf_interface
*oi
,
3368 struct ospf_neighbor
*nbr
, struct stream
*s
)
3370 struct ospf_lsa
*lsa
;
3371 uint16_t length
= OSPF_DB_DESC_MIN_SIZE
;
3375 struct ospf_lsdb
*lsdb
;
3377 /* Set Interface MTU. */
3378 if (oi
->type
== OSPF_IFTYPE_VIRTUALLINK
)
3381 stream_putw(s
, oi
->ifp
->mtu
);
3384 options
= OPTIONS(oi
);
3385 if (CHECK_FLAG(oi
->ospf
->config
, OSPF_OPAQUE_CAPABLE
))
3386 SET_FLAG(options
, OSPF_OPTION_O
);
3387 stream_putc(s
, options
);
3390 pp
= stream_get_endp(s
);
3391 stream_putc(s
, nbr
->dd_flags
);
3393 /* Set DD Sequence Number. */
3394 stream_putl(s
, nbr
->dd_seqnum
);
3396 /* shortcut unneeded walk of (empty) summary LSDBs */
3397 if (ospf_db_summary_isempty(nbr
))
3400 /* Describe LSA Header from Database Summary List. */
3401 lsdb
= &nbr
->db_sum
;
3403 for (i
= OSPF_MIN_LSA
; i
< OSPF_MAX_LSA
; i
++) {
3404 struct route_table
*table
= lsdb
->type
[i
].db
;
3405 struct route_node
*rn
;
3407 for (rn
= route_top(table
); rn
; rn
= route_next(rn
))
3408 if ((lsa
= rn
->info
) != NULL
) {
3409 if (IS_OPAQUE_LSA(lsa
->data
->type
)
3410 && (!CHECK_FLAG(options
, OSPF_OPTION_O
))) {
3411 /* Suppress advertising
3412 * opaque-information. */
3413 /* Remove LSA from DB summary list. */
3414 ospf_lsdb_delete(lsdb
, lsa
);
3418 if (!CHECK_FLAG(lsa
->flags
, OSPF_LSA_DISCARD
)) {
3419 struct lsa_header
*lsah
;
3422 /* DD packet overflows interface MTU. */
3423 if (length
+ OSPF_LSA_HEADER_SIZE
3424 > ospf_packet_max(oi
))
3427 /* Keep pointer to LS age. */
3428 lsah
= (struct lsa_header
3433 /* Proceed stream pointer. */
3434 stream_put(s
, lsa
->data
,
3435 OSPF_LSA_HEADER_SIZE
);
3436 length
+= OSPF_LSA_HEADER_SIZE
;
3439 ls_age
= LS_AGE(lsa
);
3440 lsah
->ls_age
= htons(ls_age
);
3443 /* Remove LSA from DB summary list. */
3444 ospf_lsdb_delete(lsdb
, lsa
);
3448 /* Update 'More' bit */
3449 if (ospf_db_summary_isempty(nbr
)) {
3451 if (nbr
->state
>= NSM_Exchange
) {
3452 UNSET_FLAG(nbr
->dd_flags
, OSPF_DD_FLAG_M
);
3453 /* Rewrite DD flags */
3454 stream_putc_at(s
, pp
, nbr
->dd_flags
);
3456 assert(IS_SET_DD_M(nbr
->dd_flags
));
3462 static int ospf_make_ls_req_func(struct stream
*s
, uint16_t *length
,
3463 unsigned long delta
, struct ospf_neighbor
*nbr
,
3464 struct ospf_lsa
*lsa
)
3466 struct ospf_interface
*oi
;
3470 /* LS Request packet overflows interface MTU
3471 * delta is just number of bytes required for 1 LS Req
3472 * ospf_packet_max will return the number of bytes can
3473 * be accomodated without ospf header. So length+delta
3474 * can be compared to ospf_packet_max
3475 * to check if it can fit another lsreq in the same packet.
3478 if (*length
+ delta
> ospf_packet_max(oi
))
3481 stream_putl(s
, lsa
->data
->type
);
3482 stream_put_ipv4(s
, lsa
->data
->id
.s_addr
);
3483 stream_put_ipv4(s
, lsa
->data
->adv_router
.s_addr
);
3485 ospf_lsa_unlock(&nbr
->ls_req_last
);
3486 nbr
->ls_req_last
= ospf_lsa_lock(lsa
);
3492 static int ospf_make_ls_req(struct ospf_neighbor
*nbr
, struct stream
*s
)
3494 struct ospf_lsa
*lsa
;
3495 uint16_t length
= OSPF_LS_REQ_MIN_SIZE
;
3496 unsigned long delta
= 12;
3497 struct route_table
*table
;
3498 struct route_node
*rn
;
3500 struct ospf_lsdb
*lsdb
;
3502 lsdb
= &nbr
->ls_req
;
3504 for (i
= OSPF_MIN_LSA
; i
< OSPF_MAX_LSA
; i
++) {
3505 table
= lsdb
->type
[i
].db
;
3506 for (rn
= route_top(table
); rn
; rn
= route_next(rn
))
3507 if ((lsa
= (rn
->info
)) != NULL
)
3508 if (ospf_make_ls_req_func(s
, &length
, delta
,
3511 route_unlock_node(rn
);
3518 static int ls_age_increment(struct ospf_lsa
*lsa
, int delay
)
3522 age
= IS_LSA_MAXAGE(lsa
) ? OSPF_LSA_MAXAGE
: LS_AGE(lsa
) + delay
;
3524 return (age
> OSPF_LSA_MAXAGE
? OSPF_LSA_MAXAGE
: age
);
3527 static int ospf_make_ls_upd(struct ospf_interface
*oi
, struct list
*update
,
3530 struct ospf_lsa
*lsa
;
3531 struct listnode
*node
;
3532 uint16_t length
= 0;
3533 unsigned int size_noauth
;
3534 unsigned long delta
= stream_get_endp(s
);
3538 if (IS_DEBUG_OSPF_EVENT
)
3539 zlog_debug("ospf_make_ls_upd: Start");
3541 pp
= stream_get_endp(s
);
3542 stream_forward_endp(s
, OSPF_LS_UPD_MIN_SIZE
);
3543 length
+= OSPF_LS_UPD_MIN_SIZE
;
3545 /* Calculate amount of packet usable for data. */
3546 size_noauth
= stream_get_size(s
) - ospf_packet_authspace(oi
);
3548 while ((node
= listhead(update
)) != NULL
) {
3549 struct lsa_header
*lsah
;
3552 if (IS_DEBUG_OSPF_EVENT
)
3553 zlog_debug("ospf_make_ls_upd: List Iteration %d",
3556 lsa
= listgetdata(node
);
3560 /* Will it fit? Minimum it has to fit atleast one */
3561 if ((length
+ delta
+ ntohs(lsa
->data
->length
) > size_noauth
) &&
3565 /* Keep pointer to LS age. */
3566 lsah
= (struct lsa_header
*)(STREAM_DATA(s
)
3567 + stream_get_endp(s
));
3569 /* Put LSA to Link State Request. */
3570 stream_put(s
, lsa
->data
, ntohs(lsa
->data
->length
));
3573 /* each hop must increment an lsa_age by transmit_delay
3574 of OSPF interface */
3575 ls_age
= ls_age_increment(lsa
,
3576 OSPF_IF_PARAM(oi
, transmit_delay
));
3577 lsah
->ls_age
= htons(ls_age
);
3579 length
+= ntohs(lsa
->data
->length
);
3582 list_delete_node(update
, node
);
3583 ospf_lsa_unlock(&lsa
); /* oi->ls_upd_queue */
3586 /* Now set #LSAs. */
3587 stream_putl_at(s
, pp
, count
);
3589 if (IS_DEBUG_OSPF_EVENT
)
3590 zlog_debug("ospf_make_ls_upd: Stop");
3594 static int ospf_make_ls_ack(struct ospf_interface
*oi
, struct list
*ack
,
3597 struct listnode
*node
, *nnode
;
3598 uint16_t length
= OSPF_LS_ACK_MIN_SIZE
;
3599 unsigned long delta
= OSPF_LSA_HEADER_SIZE
;
3600 struct ospf_lsa
*lsa
;
3602 for (ALL_LIST_ELEMENTS(ack
, node
, nnode
, lsa
)) {
3605 /* LS Ack packet overflows interface MTU
3606 * delta is just number of bytes required for
3607 * 1 LS Ack(1 LS Hdr) ospf_packet_max will return
3608 * the number of bytes can be accomodated without
3609 * ospf header. So length+delta can be compared
3610 * against ospf_packet_max to check if it can fit
3611 * another ls header in the same packet.
3613 if ((length
+ delta
) > ospf_packet_max(oi
))
3616 stream_put(s
, lsa
->data
, OSPF_LSA_HEADER_SIZE
);
3617 length
+= OSPF_LSA_HEADER_SIZE
;
3619 listnode_delete(ack
, lsa
);
3620 ospf_lsa_unlock(&lsa
); /* oi->ls_ack_direct.ls_ack */
3626 static void ospf_hello_send_sub(struct ospf_interface
*oi
, in_addr_t addr
)
3628 struct ospf_packet
*op
;
3629 uint16_t length
= OSPF_HEADER_SIZE
;
3631 op
= ospf_packet_new(oi
->ifp
->mtu
);
3633 /* Prepare OSPF common header. */
3634 ospf_make_header(OSPF_MSG_HELLO
, oi
, op
->s
);
3636 /* Prepare OSPF Hello body. */
3637 length
+= ospf_make_hello(oi
, op
->s
);
3638 if (length
== OSPF_HEADER_SIZE
) {
3639 /* Hello overshooting MTU */
3640 ospf_packet_free(op
);
3644 /* Fill OSPF header. */
3645 ospf_fill_header(oi
, op
->s
, length
);
3647 /* Set packet length. */
3648 op
->length
= length
;
3650 op
->dst
.s_addr
= addr
;
3652 if (IS_DEBUG_OSPF_EVENT
) {
3653 if (oi
->ospf
->vrf_id
)
3655 "%s: Hello Tx interface %s ospf vrf %s id %u",
3656 __PRETTY_FUNCTION__
, oi
->ifp
->name
,
3657 ospf_vrf_id_to_name(oi
->ospf
->vrf_id
),
3660 /* Add packet to the top of the interface output queue, so that they
3661 * can't get delayed by things like long queues of LS Update packets
3663 ospf_packet_add_top(oi
, op
);
3665 /* Hook thread to write packet. */
3666 OSPF_ISM_WRITE_ON(oi
->ospf
);
3669 static void ospf_poll_send(struct ospf_nbr_nbma
*nbr_nbma
)
3671 struct ospf_interface
*oi
;
3676 /* If this is passive interface, do not send OSPF Hello. */
3677 if (OSPF_IF_PASSIVE_STATUS(oi
) == OSPF_IF_PASSIVE
)
3680 if (oi
->type
!= OSPF_IFTYPE_NBMA
)
3683 if (nbr_nbma
->nbr
!= NULL
&& nbr_nbma
->nbr
->state
!= NSM_Down
)
3686 if (PRIORITY(oi
) == 0)
3689 if (nbr_nbma
->priority
== 0 && oi
->state
!= ISM_DR
3690 && oi
->state
!= ISM_Backup
)
3693 ospf_hello_send_sub(oi
, nbr_nbma
->addr
.s_addr
);
3696 int ospf_poll_timer(struct thread
*thread
)
3698 struct ospf_nbr_nbma
*nbr_nbma
;
3700 nbr_nbma
= THREAD_ARG(thread
);
3701 nbr_nbma
->t_poll
= NULL
;
3703 if (IS_DEBUG_OSPF(nsm
, NSM_TIMERS
))
3704 zlog_debug("NSM[%s:%s]: Timer (Poll timer expire)",
3705 IF_NAME(nbr_nbma
->oi
), inet_ntoa(nbr_nbma
->addr
));
3707 ospf_poll_send(nbr_nbma
);
3709 if (nbr_nbma
->v_poll
> 0)
3710 OSPF_POLL_TIMER_ON(nbr_nbma
->t_poll
, ospf_poll_timer
,
3717 int ospf_hello_reply_timer(struct thread
*thread
)
3719 struct ospf_neighbor
*nbr
;
3721 nbr
= THREAD_ARG(thread
);
3722 nbr
->t_hello_reply
= NULL
;
3726 if (IS_DEBUG_OSPF(nsm
, NSM_TIMERS
))
3727 zlog_debug("NSM[%s:%s]: Timer (hello-reply timer expire)",
3728 IF_NAME(nbr
->oi
), inet_ntoa(nbr
->router_id
));
3730 ospf_hello_send_sub(nbr
->oi
, nbr
->address
.u
.prefix4
.s_addr
);
3735 /* Send OSPF Hello. */
3736 void ospf_hello_send(struct ospf_interface
*oi
)
3738 /* If this is passive interface, do not send OSPF Hello. */
3739 if (OSPF_IF_PASSIVE_STATUS(oi
) == OSPF_IF_PASSIVE
)
3742 if (oi
->type
== OSPF_IFTYPE_NBMA
) {
3743 struct ospf_neighbor
*nbr
;
3744 struct route_node
*rn
;
3746 for (rn
= route_top(oi
->nbrs
); rn
; rn
= route_next(rn
))
3747 if ((nbr
= rn
->info
))
3748 if (nbr
!= oi
->nbr_self
)
3749 if (nbr
->state
!= NSM_Down
) {
3750 /* RFC 2328 Section 9.5.1
3751 If the router is not
3752 eligible to become Designated
3754 it must periodically send
3755 Hello Packets to both the
3756 Designated Router and the
3757 Backup Designated Router (if
3760 if (PRIORITY(oi
) == 0
3771 /* If the router is eligible to
3772 become Designated Router, it
3773 must periodically send Hello
3774 Packets to all neighbors that
3775 are also eligible. In
3776 addition, if the router is
3778 Designated Router or Backup
3779 Designated Router, it must
3781 send periodic Hello Packets
3782 to all other neighbors. */
3784 if (nbr
->priority
== 0
3785 && oi
->state
== ISM_DROther
)
3787 /* if oi->state == Waiting, send
3788 * hello to all neighbors */
3789 ospf_hello_send_sub(
3791 nbr
->address
.u
.prefix4
3795 /* Decide destination address. */
3796 if (oi
->type
== OSPF_IFTYPE_VIRTUALLINK
)
3797 ospf_hello_send_sub(oi
, oi
->vl_data
->peer_addr
.s_addr
);
3799 ospf_hello_send_sub(oi
, htonl(OSPF_ALLSPFROUTERS
));
3803 /* Send OSPF Database Description. */
3804 void ospf_db_desc_send(struct ospf_neighbor
*nbr
)
3806 struct ospf_interface
*oi
;
3807 struct ospf_packet
*op
;
3808 uint16_t length
= OSPF_HEADER_SIZE
;
3811 op
= ospf_packet_new(oi
->ifp
->mtu
);
3813 /* Prepare OSPF common header. */
3814 ospf_make_header(OSPF_MSG_DB_DESC
, oi
, op
->s
);
3816 /* Prepare OSPF Database Description body. */
3817 length
+= ospf_make_db_desc(oi
, nbr
, op
->s
);
3819 /* Fill OSPF header. */
3820 ospf_fill_header(oi
, op
->s
, length
);
3822 /* Set packet length. */
3823 op
->length
= length
;
3825 /* Decide destination address. */
3826 if (oi
->type
== OSPF_IFTYPE_POINTOPOINT
)
3827 op
->dst
.s_addr
= htonl(OSPF_ALLSPFROUTERS
);
3829 op
->dst
= nbr
->address
.u
.prefix4
;
3831 /* Add packet to the interface output queue. */
3832 ospf_packet_add(oi
, op
);
3834 /* Hook thread to write packet. */
3835 OSPF_ISM_WRITE_ON(oi
->ospf
);
3837 /* Remove old DD packet, then copy new one and keep in neighbor
3840 ospf_packet_free(nbr
->last_send
);
3841 nbr
->last_send
= ospf_packet_dup(op
);
3842 monotime(&nbr
->last_send_ts
);
3843 if (CHECK_FLAG(oi
->ospf
->config
, OSPF_LOG_ADJACENCY_DETAIL
))
3845 "%s:Packet[DD]: %s DB Desc send with seqnum:%x , flags:%x",
3846 (oi
->ospf
->name
) ? oi
->ospf
->name
: VRF_DEFAULT_NAME
,
3847 inet_ntoa(nbr
->router_id
), nbr
->dd_seqnum
,
3851 /* Re-send Database Description. */
3852 void ospf_db_desc_resend(struct ospf_neighbor
*nbr
)
3854 struct ospf_interface
*oi
;
3858 /* Add packet to the interface output queue. */
3859 ospf_packet_add(oi
, ospf_packet_dup(nbr
->last_send
));
3861 /* Hook thread to write packet. */
3862 OSPF_ISM_WRITE_ON(oi
->ospf
);
3863 if (CHECK_FLAG(oi
->ospf
->config
, OSPF_LOG_ADJACENCY_DETAIL
))
3865 "%s:Packet[DD]: %s DB Desc resend with seqnum:%x , flags:%x",
3866 (oi
->ospf
->name
) ? oi
->ospf
->name
: VRF_DEFAULT_NAME
,
3867 inet_ntoa(nbr
->router_id
), nbr
->dd_seqnum
,
3871 /* Send Link State Request. */
3872 void ospf_ls_req_send(struct ospf_neighbor
*nbr
)
3874 struct ospf_interface
*oi
;
3875 struct ospf_packet
*op
;
3876 uint16_t length
= OSPF_HEADER_SIZE
;
3879 op
= ospf_packet_new(oi
->ifp
->mtu
);
3881 /* Prepare OSPF common header. */
3882 ospf_make_header(OSPF_MSG_LS_REQ
, oi
, op
->s
);
3884 /* Prepare OSPF Link State Request body. */
3885 length
+= ospf_make_ls_req(nbr
, op
->s
);
3886 if (length
== OSPF_HEADER_SIZE
) {
3887 ospf_packet_free(op
);
3891 /* Fill OSPF header. */
3892 ospf_fill_header(oi
, op
->s
, length
);
3894 /* Set packet length. */
3895 op
->length
= length
;
3897 /* Decide destination address. */
3898 if (oi
->type
== OSPF_IFTYPE_POINTOPOINT
)
3899 op
->dst
.s_addr
= htonl(OSPF_ALLSPFROUTERS
);
3901 op
->dst
= nbr
->address
.u
.prefix4
;
3903 /* Add packet to the interface output queue. */
3904 ospf_packet_add(oi
, op
);
3906 /* Hook thread to write packet. */
3907 OSPF_ISM_WRITE_ON(oi
->ospf
);
3909 /* Add Link State Request Retransmission Timer. */
3910 OSPF_NSM_TIMER_ON(nbr
->t_ls_req
, ospf_ls_req_timer
, nbr
->v_ls_req
);
3913 /* Send Link State Update with an LSA. */
3914 void ospf_ls_upd_send_lsa(struct ospf_neighbor
*nbr
, struct ospf_lsa
*lsa
,
3917 struct list
*update
;
3919 update
= list_new();
3921 listnode_add(update
, lsa
);
3923 /*ospf instance is going down, send self originated
3924 * MAXAGE LSA update to neighbors to remove from LSDB */
3925 if (nbr
->oi
->ospf
->inst_shutdown
&& IS_LSA_MAXAGE(lsa
))
3926 ospf_ls_upd_send(nbr
, update
, flag
, 1);
3928 ospf_ls_upd_send(nbr
, update
, flag
, 0);
3930 list_delete(&update
);
3933 /* Determine size for packet. Must be at least big enough to accomodate next
3934 * LSA on list, which may be bigger than MTU size.
3936 * Return pointer to new ospf_packet
3937 * NULL if we can not allocate, eg because LSA is bigger than imposed limit
3938 * on packet sizes (in which case offending LSA is deleted from update list)
3940 static struct ospf_packet
*ospf_ls_upd_packet_new(struct list
*update
,
3941 struct ospf_interface
*oi
)
3943 struct ospf_lsa
*lsa
;
3944 struct listnode
*ln
;
3946 static char warned
= 0;
3948 lsa
= listgetdata((ln
= listhead(update
)));
3951 if ((OSPF_LS_UPD_MIN_SIZE
+ ntohs(lsa
->data
->length
))
3952 > ospf_packet_max(oi
)) {
3956 "ospf_ls_upd_packet_new: oversized LSA encountered!"
3957 "will need to fragment. Not optimal. Try divide up"
3958 " your network with areas. Use 'debug ospf packet send'"
3959 " to see details, or look at 'show ip ospf database ..'");
3963 if (IS_DEBUG_OSPF_PACKET(0, SEND
))
3965 "ospf_ls_upd_packet_new: oversized LSA id:%s,"
3966 " %d bytes originated by %s, will be fragmented!",
3967 inet_ntoa(lsa
->data
->id
),
3968 ntohs(lsa
->data
->length
),
3969 inet_ntoa(lsa
->data
->adv_router
));
3972 * Allocate just enough to fit this LSA only, to avoid including
3974 * LSAs in fragmented LSA Updates.
3976 size
= ntohs(lsa
->data
->length
)
3977 + (oi
->ifp
->mtu
- ospf_packet_max(oi
))
3978 + OSPF_LS_UPD_MIN_SIZE
;
3980 size
= oi
->ifp
->mtu
;
3982 if (size
> OSPF_MAX_PACKET_SIZE
) {
3983 flog_warn(EC_OSPF_LARGE_LSA
,
3984 "ospf_ls_upd_packet_new: oversized LSA id:%s too big,"
3985 " %d bytes, packet size %ld, dropping it completely."
3986 " OSPF routing is broken!",
3987 inet_ntoa(lsa
->data
->id
), ntohs(lsa
->data
->length
),
3989 list_delete_node(update
, ln
);
3993 /* IP header is built up separately by ospf_write(). This means, that we
3995 * reduce the "affordable" size just calculated by length of an IP
3997 * This makes sure, that even if we manage to fill the payload with LSA
3999 * completely, the final packet (our data plus IP header) still fits
4001 * outgoing interface MTU. This correction isn't really meaningful for
4003 * oversized LSA, but for consistency the correction is done for both
4006 * P.S. OSPF_MAX_PACKET_SIZE above already includes IP header size
4008 return ospf_packet_new(size
- sizeof(struct ip
));
4011 static void ospf_ls_upd_queue_send(struct ospf_interface
*oi
,
4012 struct list
*update
, struct in_addr addr
,
4015 struct ospf_packet
*op
;
4016 uint16_t length
= OSPF_HEADER_SIZE
;
4018 if (IS_DEBUG_OSPF_EVENT
)
4019 zlog_debug("listcount = %d, [%s]dst %s", listcount(update
),
4020 IF_NAME(oi
), inet_ntoa(addr
));
4022 /* Check that we have really something to process */
4023 if (listcount(update
) == 0)
4026 op
= ospf_ls_upd_packet_new(update
, oi
);
4028 /* Prepare OSPF common header. */
4029 ospf_make_header(OSPF_MSG_LS_UPD
, oi
, op
->s
);
4031 /* Prepare OSPF Link State Update body.
4032 * Includes Type-7 translation.
4034 length
+= ospf_make_ls_upd(oi
, update
, op
->s
);
4036 /* Fill OSPF header. */
4037 ospf_fill_header(oi
, op
->s
, length
);
4039 /* Set packet length. */
4040 op
->length
= length
;
4042 /* Decide destination address. */
4043 if (oi
->type
== OSPF_IFTYPE_POINTOPOINT
)
4044 op
->dst
.s_addr
= htonl(OSPF_ALLSPFROUTERS
);
4046 op
->dst
.s_addr
= addr
.s_addr
;
4048 /* Add packet to the interface output queue. */
4049 ospf_packet_add(oi
, op
);
4050 /* Call ospf_write() right away to send ospf packets to neighbors */
4051 if (send_lsupd_now
) {
4052 struct thread os_packet_thd
;
4054 os_packet_thd
.arg
= (void *)oi
->ospf
;
4055 if (oi
->on_write_q
== 0) {
4056 listnode_add(oi
->ospf
->oi_write_q
, oi
);
4059 ospf_write(&os_packet_thd
);
4061 * We are fake calling ospf_write with a fake
4062 * thread. Imagine that we have oi_a already
4063 * enqueued and we have turned on the write
4065 * Now this function calls this for oi_b
4066 * so the on_write_q has oi_a and oi_b on
4067 * it, ospf_write runs and clears the packets
4068 * for both oi_a and oi_b. Removing them from
4069 * the on_write_q. After this thread of execution
4070 * finishes we will execute the t_write thread
4071 * with nothing in the on_write_q causing an
4072 * assert. So just make sure that the t_write
4073 * is actually turned off.
4075 if (list_isempty(oi
->ospf
->oi_write_q
))
4076 OSPF_TIMER_OFF(oi
->ospf
->t_write
);
4078 /* Hook thread to write packet. */
4079 OSPF_ISM_WRITE_ON(oi
->ospf
);
4083 static int ospf_ls_upd_send_queue_event(struct thread
*thread
)
4085 struct ospf_interface
*oi
= THREAD_ARG(thread
);
4086 struct route_node
*rn
;
4087 struct route_node
*rnext
;
4088 struct list
*update
;
4091 oi
->t_ls_upd_event
= NULL
;
4093 if (IS_DEBUG_OSPF_EVENT
)
4094 zlog_debug("ospf_ls_upd_send_queue start");
4096 for (rn
= route_top(oi
->ls_upd_queue
); rn
; rn
= rnext
) {
4097 rnext
= route_next(rn
);
4099 if (rn
->info
== NULL
)
4102 update
= (struct list
*)rn
->info
;
4104 ospf_ls_upd_queue_send(oi
, update
, rn
->p
.u
.prefix4
, 0);
4106 /* list might not be empty. */
4107 if (listcount(update
) == 0) {
4108 list_delete((struct list
**)&rn
->info
);
4109 route_unlock_node(rn
);
4115 if (IS_DEBUG_OSPF_EVENT
)
4117 "ospf_ls_upd_send_queue: update lists not cleared,"
4118 " %d nodes to try again, raising new event",
4120 oi
->t_ls_upd_event
= NULL
;
4121 thread_add_event(master
, ospf_ls_upd_send_queue_event
, oi
, 0,
4122 &oi
->t_ls_upd_event
);
4125 if (IS_DEBUG_OSPF_EVENT
)
4126 zlog_debug("ospf_ls_upd_send_queue stop");
4131 void ospf_ls_upd_send(struct ospf_neighbor
*nbr
, struct list
*update
, int flag
,
4134 struct ospf_interface
*oi
;
4135 struct ospf_lsa
*lsa
;
4136 struct prefix_ipv4 p
;
4137 struct route_node
*rn
;
4138 struct listnode
*node
;
4143 p
.prefixlen
= IPV4_MAX_BITLEN
;
4145 /* Decide destination address. */
4146 if (oi
->type
== OSPF_IFTYPE_VIRTUALLINK
)
4147 p
.prefix
= oi
->vl_data
->peer_addr
;
4148 else if (oi
->type
== OSPF_IFTYPE_POINTOPOINT
)
4149 p
.prefix
.s_addr
= htonl(OSPF_ALLSPFROUTERS
);
4150 else if (flag
== OSPF_SEND_PACKET_DIRECT
)
4151 p
.prefix
= nbr
->address
.u
.prefix4
;
4152 else if (oi
->state
== ISM_DR
|| oi
->state
== ISM_Backup
)
4153 p
.prefix
.s_addr
= htonl(OSPF_ALLSPFROUTERS
);
4154 else if (oi
->type
== OSPF_IFTYPE_POINTOMULTIPOINT
)
4155 p
.prefix
.s_addr
= htonl(OSPF_ALLSPFROUTERS
);
4157 p
.prefix
.s_addr
= htonl(OSPF_ALLDROUTERS
);
4159 if (oi
->type
== OSPF_IFTYPE_NBMA
) {
4160 if (flag
== OSPF_SEND_PACKET_INDIRECT
)
4163 "* LS-Update is directly sent on NBMA network.");
4164 if (IPV4_ADDR_SAME(&oi
->address
->u
.prefix4
, &p
.prefix
))
4165 flog_warn(EC_OSPF_PACKET
,
4166 "* LS-Update is sent to myself.");
4169 rn
= route_node_get(oi
->ls_upd_queue
, (struct prefix
*)&p
);
4171 if (rn
->info
== NULL
)
4172 rn
->info
= list_new();
4174 route_unlock_node(rn
);
4176 for (ALL_LIST_ELEMENTS_RO(update
, node
, lsa
))
4177 listnode_add(rn
->info
,
4178 ospf_lsa_lock(lsa
)); /* oi->ls_upd_queue */
4179 if (send_lsupd_now
) {
4180 struct list
*send_update_list
;
4181 struct route_node
*rnext
;
4183 for (rn
= route_top(oi
->ls_upd_queue
); rn
; rn
= rnext
) {
4184 rnext
= route_next(rn
);
4186 if (rn
->info
== NULL
)
4189 send_update_list
= (struct list
*)rn
->info
;
4191 ospf_ls_upd_queue_send(oi
, send_update_list
,
4192 rn
->p
.u
.prefix4
, 1);
4195 thread_add_event(master
, ospf_ls_upd_send_queue_event
, oi
, 0,
4196 &oi
->t_ls_upd_event
);
4199 static void ospf_ls_ack_send_list(struct ospf_interface
*oi
, struct list
*ack
,
4202 struct ospf_packet
*op
;
4203 uint16_t length
= OSPF_HEADER_SIZE
;
4205 op
= ospf_packet_new(oi
->ifp
->mtu
);
4207 /* Prepare OSPF common header. */
4208 ospf_make_header(OSPF_MSG_LS_ACK
, oi
, op
->s
);
4210 /* Prepare OSPF Link State Acknowledgment body. */
4211 length
+= ospf_make_ls_ack(oi
, ack
, op
->s
);
4213 /* Fill OSPF header. */
4214 ospf_fill_header(oi
, op
->s
, length
);
4216 /* Set packet length. */
4217 op
->length
= length
;
4219 /* Decide destination address. */
4220 if (oi
->type
== OSPF_IFTYPE_POINTOPOINT
)
4221 op
->dst
.s_addr
= htonl(OSPF_ALLSPFROUTERS
);
4223 op
->dst
.s_addr
= dst
.s_addr
;
4225 /* Add packet to the interface output queue. */
4226 ospf_packet_add(oi
, op
);
4228 /* Hook thread to write packet. */
4229 OSPF_ISM_WRITE_ON(oi
->ospf
);
4232 static int ospf_ls_ack_send_event(struct thread
*thread
)
4234 struct ospf_interface
*oi
= THREAD_ARG(thread
);
4236 oi
->t_ls_ack_direct
= NULL
;
4238 while (listcount(oi
->ls_ack_direct
.ls_ack
))
4239 ospf_ls_ack_send_list(oi
, oi
->ls_ack_direct
.ls_ack
,
4240 oi
->ls_ack_direct
.dst
);
4245 void ospf_ls_ack_send(struct ospf_neighbor
*nbr
, struct ospf_lsa
*lsa
)
4247 struct ospf_interface
*oi
= nbr
->oi
;
4249 if (listcount(oi
->ls_ack_direct
.ls_ack
) == 0)
4250 oi
->ls_ack_direct
.dst
= nbr
->address
.u
.prefix4
;
4252 listnode_add(oi
->ls_ack_direct
.ls_ack
, ospf_lsa_lock(lsa
));
4254 thread_add_event(master
, ospf_ls_ack_send_event
, oi
, 0,
4255 &oi
->t_ls_ack_direct
);
4258 /* Send Link State Acknowledgment delayed. */
4259 void ospf_ls_ack_send_delayed(struct ospf_interface
*oi
)
4263 /* Decide destination address. */
4264 /* RFC2328 Section 13.5 On non-broadcast
4265 networks, delayed Link State Acknowledgment packets must be
4266 unicast separately over each adjacency (i.e., neighbor whose
4267 state is >= Exchange). */
4268 if (oi
->type
== OSPF_IFTYPE_NBMA
) {
4269 struct ospf_neighbor
*nbr
;
4270 struct route_node
*rn
;
4272 for (rn
= route_top(oi
->nbrs
); rn
; rn
= route_next(rn
))
4273 if ((nbr
= rn
->info
) != NULL
)
4274 if (nbr
!= oi
->nbr_self
4275 && nbr
->state
>= NSM_Exchange
)
4276 while (listcount(oi
->ls_ack
))
4277 ospf_ls_ack_send_list(
4279 nbr
->address
.u
.prefix4
);
4282 if (oi
->type
== OSPF_IFTYPE_VIRTUALLINK
)
4283 dst
.s_addr
= oi
->vl_data
->peer_addr
.s_addr
;
4284 else if (oi
->state
== ISM_DR
|| oi
->state
== ISM_Backup
)
4285 dst
.s_addr
= htonl(OSPF_ALLSPFROUTERS
);
4286 else if (oi
->type
== OSPF_IFTYPE_POINTOPOINT
)
4287 dst
.s_addr
= htonl(OSPF_ALLSPFROUTERS
);
4288 else if (oi
->type
== OSPF_IFTYPE_POINTOMULTIPOINT
)
4289 dst
.s_addr
= htonl(OSPF_ALLSPFROUTERS
);
4291 dst
.s_addr
= htonl(OSPF_ALLDROUTERS
);
4293 while (listcount(oi
->ls_ack
))
4294 ospf_ls_ack_send_list(oi
, oi
->ls_ack
, dst
);
4298 * On pt-to-pt links, all OSPF control packets are sent to the multicast
4299 * address. As a result, the kernel does not need to learn the interface
4300 * MAC of the OSPF neighbor. However, in our world, this will delay
4301 * convergence. Take the case when due to a link flap, all routes now
4302 * want to use an interface which was deemed to be costlier prior to this
4303 * event. For routes that will be installed, the missing MAC will have
4304 * punt-to-CPU set on them. This may overload the CPU control path that
4305 * can be avoided if the MAC was known apriori.
4307 #define OSPF_PING_NBR_STR_MAX (BUFSIZ)
4308 void ospf_proactively_arp(struct ospf_neighbor
*nbr
)
4310 char ping_nbr
[OSPF_PING_NBR_STR_MAX
];
4313 if (!nbr
|| !nbr
->oi
|| !nbr
->oi
->ifp
)
4316 snprintf(ping_nbr
, sizeof(ping_nbr
),
4317 "ping -c 1 -I %s %s > /dev/null 2>&1 &", nbr
->oi
->ifp
->name
,
4318 inet_ntoa(nbr
->address
.u
.prefix4
));
4320 ret
= system(ping_nbr
);
4321 if (IS_DEBUG_OSPF_EVENT
)
4322 zlog_debug("Executed %s %s", ping_nbr
,
4323 ((ret
== 0) ? "successfully" : "but failed"));