6/usr.sbin/trpt/trpt.c

   1 /*
   2  * Copyright (c) 1983, 1988, 1993
   3  *      The Regents of the University of California.  All rights reserved.
   4  *
   5  * Redistribution and use in source and binary forms, with or without
   6  * modification, are permitted provided that the following conditions
   7  * are met:
   8  * 1. Redistributions of source code must retain the above copyright
   9  *    notice, this list of conditions and the following disclaimer.
  10  * 2. Redistributions in binary form must reproduce the above copyright
  11  *    notice, this list of conditions and the following disclaimer in the
  12  *    documentation and/or other materials provided with the distribution.
  13  * 4. Neither the name of the University nor the names of its contributors
  14  *    may be used to endorse or promote products derived from this software
  15  *    without specific prior written permission.
  16  *
  17  * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
  18  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  19  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  20  * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
  21  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  22  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  23  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  24  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  25  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  26  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  27  * SUCH DAMAGE.
  28  */
  29
  30 #if 0
  31 #ifndef lint
  32 static const char copyright[] =
  33 "@(#) Copyright (c) 1983, 1988, 1993\n\
  34         The Regents of the University of California.  All rights reserved.\n";
  35 #endif /* not lint */
  36
  37 #ifndef lint
  38 static char sccsid[] = "@(#)trpt.c      8.1 (Berkeley) 6/6/93";
  39 #endif /* not lint */
  40 #endif
  41 #include <sys/cdefs.h>
  42 __FBSDID("$FreeBSD$");
  43
  44 #include <sys/param.h>
  45 #include <sys/queue.h>
  46 #include <sys/socket.h>
  47 #include <sys/socketvar.h>
  48 #define PRUREQUESTS
  49 #include <sys/protosw.h>
  50 #include <sys/file.h>
  51 #include <sys/time.h>
  52
  53 #include <net/route.h>
  54 #include <net/if.h>
  55
  56 #include <netinet/in.h>
  57 #include <netinet/in_systm.h>
  58 #include <netinet/ip.h>
  59 #ifdef INET6
  60 #include <netinet/ip6.h>
  61 #endif
  62 #include <netinet/ip_var.h>
  63 #include <netinet/tcp.h>
  64 #define TCPSTATES
  65 #include <netinet/tcp_fsm.h>
  66 #include <netinet/tcp_seq.h>
  67 #define TCPTIMERS
  68 #include <netinet/tcp_timer.h>
  69 #include <netinet/tcp_var.h>
  70 #include <netinet/tcpip.h>
  71 #define TANAMES
  72 #include <netinet/tcp_debug.h>
  73
  74 #include <arpa/inet.h>
  75
  76 #include <err.h>
  77 #include <nlist.h>
  78 #include <paths.h>
  79 #include <stdio.h>
  80 #include <stdlib.h>
  81 #include <string.h>
  82 #include <unistd.h>
  83
  84 struct nlist nl[3];
  85 #define N_TCP_DEBUG     0
  86 #define N_TCP_DEBX      1
  87
  88 static caddr_t tcp_pcbs[TCP_NDEBUG];
  89 static n_time ntime;
  90 static int aflag, kflag, memf, follow, sflag, tflag;
  91
  92 void dotrace(caddr_t);
  93 void klseek(int, off_t, int);
  94 int numeric(const void *, const void *);
  95 void tcp_trace(short, short, struct tcpcb *, int, void *, struct tcphdr *, int);
  96 static void usage(void);
  97
  98 int
  99 main(int argc, char **argv)
 100 {
 101         int ch, i, jflag, npcbs;
 102         const char *core, *syst;
 103
 104         nl[0].n_name = strdup("_tcp_debug");
 105         nl[1].n_name = strdup("_tcp_debx");
 106
 107         jflag = npcbs = 0;
 108         while ((ch = getopt(argc, argv, "afjp:st")) != -1)
 109                 switch (ch) {
 110                 case 'a':
 111                         ++aflag;
 112                         break;
 113                 case 'f':
 114                         ++follow;
 115                         setlinebuf(stdout);
 116                         break;
 117                 case 'j':
 118                         ++jflag;
 119                         break;
 120                 case 'p':
 121                         if (npcbs >= TCP_NDEBUG)
 122                                 errx(1, "too many pcb's specified");
 123                         (void)sscanf(optarg, "%x", (int *)&tcp_pcbs[npcbs++]);
 124                         break;
 125                 case 's':
 126                         ++sflag;
 127                         break;
 128                 case 't':
 129                         ++tflag;
 130                         break;
 131                 case '?':
 132                 default:
 133                         usage();
 134                 }
 135         argc -= optind;
 136         argv += optind;
 137
 138         core = _PATH_KMEM;
 139         if (argc > 0) {
 140                 syst = *argv;
 141                 argc--, argv++;
 142                 if (argc > 0) {
 143                         core = *argv;
 144                         argc--, argv++;
 145                         ++kflag;
 146                 }
 147                 /*
 148                  * Discard setgid privileges if not the running kernel so that
 149                  * bad guys can't print interesting stuff from kernel memory.
 150                  */
 151                 setgid(getgid());
 152         }
 153         else
 154                 syst = getbootfile();
 155
 156         if (nlist(syst, nl) < 0 || !nl[0].n_value)
 157                 errx(1, "%s: no namelist", syst);
 158         if ((memf = open(core, O_RDONLY)) < 0)
 159                 err(2, "%s", core);
 160         setgid(getgid());
 161         if (kflag)
 162                 errx(1, "can't do core files yet");
 163         (void)klseek(memf, (off_t)nl[N_TCP_DEBX].n_value, L_SET);
 164         if (read(memf, (char *)&tcp_debx, sizeof(tcp_debx)) !=
 165             sizeof(tcp_debx))
 166                 err(3, "tcp_debx");
 167         (void)klseek(memf, (off_t)nl[N_TCP_DEBUG].n_value, L_SET);
 168         if (read(memf, (char *)tcp_debug, sizeof(tcp_debug)) !=
 169             sizeof(tcp_debug))
 170                 err(3, "tcp_debug");
 171         /*
 172          * If no control blocks have been specified, figure
 173          * out how many distinct one we have and summarize
 174          * them in tcp_pcbs for sorting the trace records
 175          * below.
 176          */
 177         if (!npcbs) {
 178                 for (i = 0; i < TCP_NDEBUG; i++) {
 179                         register struct tcp_debug *td = &tcp_debug[i];
 180                         register int j;
 181
 182                         if (td->td_tcb == 0)
 183                                 continue;
 184                         for (j = 0; j < npcbs; j++)
 185                                 if (tcp_pcbs[j] == td->td_tcb)
 186                                         break;
 187                         if (j >= npcbs)
 188                                 tcp_pcbs[npcbs++] = td->td_tcb;
 189                 }
 190                 if (!npcbs)
 191                         exit(0);
 192         }
 193         qsort(tcp_pcbs, npcbs, sizeof(caddr_t), numeric);
 194         if (jflag) {
 195                 for (i = 0;;) {
 196                         printf("%p", (void *)tcp_pcbs[i]);
 197                         if (++i == npcbs)
 198                                 break;
 199                         fputs(", ", stdout);
 200                 }
 201                 putchar('\n');
 202         }
 203         else for (i = 0; i < npcbs; i++) {
 204                 printf("\n%p:\n", tcp_pcbs[i]);
 205                 dotrace(tcp_pcbs[i]);
 206         }
 207         exit(0);
 208 }
 209
 210 static void
 211 usage()
 212 {
 213         (void)fprintf(stderr,
 214                 "usage: trpt [-afjst] [-p hex-address] [system [core]]\n");
 215         exit(1);
 216 }
 217
 218 void
 219 dotrace(tcpcb)
 220         register caddr_t tcpcb;
 221 {
 222         register struct tcp_debug *td;
 223         register int i;
 224         int prev_debx = tcp_debx, family;
 225
 226 again:  if (--tcp_debx < 0)
 227                 tcp_debx = TCP_NDEBUG - 1;
 228         for (i = prev_debx % TCP_NDEBUG; i < TCP_NDEBUG; i++) {
 229                 td = &tcp_debug[i];
 230                 if (tcpcb && td->td_tcb != tcpcb)
 231                         continue;
 232                 ntime = ntohl(td->td_time);
 233 #ifdef INET6
 234                 family = td->td_family;
 235 #else
 236                 family = AF_INET;
 237 #endif
 238                 switch(family) {
 239                 case AF_INET:
 240                         tcp_trace(td->td_act, td->td_ostate,
 241                                   &td->td_cb, td->td_family, &td->td_ti.ti_i,
 242                                   &td->td_ti.ti_t, td->td_req);
 243                         break;
 244 #ifdef INET6
 245                 case AF_INET6:
 246                         tcp_trace(td->td_act, td->td_ostate,
 247                                   &td->td_cb, td->td_family, &td->td_ti6.ip6,
 248                                   &td->td_ti6.th, td->td_req);
 249                         break;
 250 #endif
 251                 }
 252                 if (i == tcp_debx)
 253                         goto done;
 254         }
 255         for (i = 0; i <= tcp_debx % TCP_NDEBUG; i++) {
 256                 td = &tcp_debug[i];
 257                 if (tcpcb && td->td_tcb != tcpcb)
 258                         continue;
 259                 ntime = ntohl(td->td_time);
 260 #ifdef INET6
 261                 family = td->td_family;
 262 #else
 263                 family = AF_INET;
 264 #endif
 265                 switch(family) {
 266                 case AF_INET:
 267                         tcp_trace(td->td_act, td->td_ostate,
 268                                   &td->td_cb, td->td_family, &td->td_ti.ti_i,
 269                                   &td->td_ti.ti_t, td->td_req);
 270                         break;
 271 #ifdef INET6
 272                 case AF_INET6:
 273                         tcp_trace(td->td_act, td->td_ostate,
 274                                   &td->td_cb, td->td_family, &td->td_ti6.ip6,
 275                                   &td->td_ti6.th, td->td_req);
 276                         break;
 277 #endif
 278                 }
 279         }
 280 done:   if (follow) {
 281                 prev_debx = tcp_debx + 1;
 282                 if (prev_debx >= TCP_NDEBUG)
 283                         prev_debx = 0;
 284                 do {
 285                         sleep(1);
 286                         (void)klseek(memf, (off_t)nl[N_TCP_DEBX].n_value, L_SET);
 287                         if (read(memf, (char *)&tcp_debx, sizeof(tcp_debx)) !=
 288                             sizeof(tcp_debx))
 289                                 err(3, "tcp_debx");
 290                 } while (tcp_debx == prev_debx);
 291                 (void)klseek(memf, (off_t)nl[N_TCP_DEBUG].n_value, L_SET);
 292                 if (read(memf, (char *)tcp_debug, sizeof(tcp_debug)) !=
 293                     sizeof(tcp_debug))
 294                         err(3, "tcp_debug");
 295                 goto again;
 296         }
 297 }
 298
 299 /*
 300  * Tcp debug routines
 301  */
 302 /*ARGSUSED*/
 303 void
 304 tcp_trace(act, ostate, tp, family, ip, th, req)
 305         short act, ostate;
 306         struct tcpcb *tp;
 307         int family;
 308         void *ip;
 309         struct tcphdr *th;
 310         int req;
 311 {
 312         tcp_seq seq, ack;
 313         int flags, len, win, timer;
 314         struct ip *ip4;
 315 #ifdef INET6
 316         int isipv6, nopkt = 1;
 317         struct ip6_hdr *ip6;
 318         char ntop_buf[INET6_ADDRSTRLEN];
 319 #endif
 320
 321 #ifdef INET6
 322         switch (family) {
 323         case AF_INET:
 324                 nopkt = 0;
 325                 isipv6 = 0;
 326                 ip4 = (struct ip *)ip;
 327                 break;
 328         case AF_INET6:
 329                 nopkt = 0;
 330                 isipv6 = 1;
 331                 ip6 = (struct ip6_hdr *)ip;
 332         case 0:
 333         default:
 334                 break;
 335         }
 336 #else
 337         ip4 = (struct ip *)ip;
 338 #endif
 339         printf("%03ld %s:%s ", (long)((ntime/10) % 1000), tcpstates[ostate],
 340             tanames[act]);
 341         switch (act) {
 342         case TA_INPUT:
 343         case TA_OUTPUT:
 344         case TA_DROP:
 345 #ifdef INET6
 346                 if (nopkt != 0)
 347                         break;
 348 #endif
 349                 if (aflag) {
 350                         printf("(src=%s,%u, ",
 351
 352 #ifdef INET6
 353                                isipv6
 354                                ? inet_ntop(AF_INET6, &ip6->ip6_src, ntop_buf,
 355                                            sizeof(ntop_buf)) :
 356 #endif
 357                                inet_ntoa(ip4->ip_src),
 358                                ntohs(th->th_sport));
 359                         printf("dst=%s,%u)",
 360 #ifdef INET6
 361                                isipv6
 362                                ? inet_ntop(AF_INET6, &ip6->ip6_dst, ntop_buf,
 363                                            sizeof(ntop_buf)) :
 364 #endif
 365                                inet_ntoa(ip4->ip_dst),
 366                                ntohs(th->th_dport));
 367                 }
 368                 seq = th->th_seq;
 369                 ack = th->th_ack;
 370
 371                 len =
 372 #ifdef INET6
 373                         isipv6 ? ip6->ip6_plen :
 374 #endif
 375                         ip4->ip_len;
 376                 win = th->th_win;
 377                 if (act == TA_OUTPUT) {
 378                         seq = ntohl(seq);
 379                         ack = ntohl(ack);
 380                         len = ntohs(len);
 381                         win = ntohs(win);
 382                 }
 383                 if (act == TA_OUTPUT)
 384                         len -= sizeof(struct tcphdr);
 385                 if (len)
 386                         printf("[%lx..%lx)", (u_long)seq, (u_long)(seq + len));
 387                 else
 388                         printf("%lx", (u_long)seq);
 389                 printf("@%lx", (u_long)ack);
 390                 if (win)
 391                         printf("(win=%x)", win);
 392                 flags = th->th_flags;
 393                 if (flags) {
 394                         const char *cp = "<";
 395 #define pf(flag, string) { \
 396         if (th->th_flags&flag) { \
 397                 (void)printf("%s%s", cp, string); \
 398                 cp = ","; \
 399         } \
 400 }
 401                         pf(TH_SYN, "SYN");
 402                         pf(TH_ACK, "ACK");
 403                         pf(TH_FIN, "FIN");
 404                         pf(TH_RST, "RST");
 405                         pf(TH_PUSH, "PUSH");
 406                         pf(TH_URG, "URG");
 407                         printf(">");
 408                 }
 409                 break;
 410         case TA_USER:
 411                 timer = req >> 8;
 412                 req &= 0xff;
 413                 printf("%s", prurequests[req]);
 414                 if (req == PRU_SLOWTIMO || req == PRU_FASTTIMO)
 415                         printf("<%s>", tcptimers[timer]);
 416                 break;
 417         }
 418         printf(" -> %s", tcpstates[tp->t_state]);
 419         /* print out internal state of tp !?! */
 420         printf("\n");
 421         if (sflag) {
 422                 printf("\trcv_nxt %lx rcv_wnd %lx snd_una %lx snd_nxt %lx snd_max %lx\n",
 423                     (u_long)tp->rcv_nxt, tp->rcv_wnd,
 424                     (u_long)tp->snd_una, (u_long)tp->snd_nxt,
 425                     (u_long)tp->snd_max);
 426                 printf("\tsnd_wl1 %lx snd_wl2 %lx snd_wnd %lx\n",
 427                     (u_long)tp->snd_wl1,
 428                     (u_long)tp->snd_wl2, tp->snd_wnd);
 429         }
 430         /* print out timers? */
 431 #if 0
 432         /*
 433          * XXX
 434          * kernel now uses callouts, not integer time values.
 435          */
 436         if (tflag) {
 437                 register char *cp = "\t";
 438                 register int i;
 439
 440                 for (i = 0; i < TCPT_NTIMERS; i++) {
 441                         if (tp->t_timer[i] == 0)
 442                                 continue;
 443                         printf("%s%s=%d", cp, tcptimers[i], tp->t_timer[i]);
 444                         if (i == TCPT_REXMT)
 445                                 printf(" (t_rxtshft=%d)", tp->t_rxtshift);
 446                         cp = ", ";
 447                 }
 448                 if (*cp != '\t')
 449                         putchar('\n');
 450         }
 451 #endif
 452 }
 453
 454 int
 455 numeric(v1, v2)
 456         const void *v1, *v2;
 457 {
 458         const caddr_t *c1 = v1, *c2 = v2;
 459         return(*c1 - *c2);
 460 }
 461
 462 void
 463 klseek(fd, base, off)
 464         int fd, off;
 465         off_t base;
 466 {
 467         (void)lseek(fd, base, off);
 468 }