2 * Copyright (c) 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
21 * This code contributed by Atanu Ghosh (atanu@cs.ucl.ac.uk),
22 * University College London.
26 * Packet capture routine for dlpi under SunOS 5
30 * - Apparently the DLIOCRAW ioctl() is specific to SunOS.
32 * - There is a bug in bufmod(7) such that setting the snapshot
33 * length results in data being left of the front of the packet.
35 * - It might be desirable to use pfmod(7) to filter packets in the
40 static const char rcsid[] =
41 "@(#) $Header: /tcpdump/master/libpcap/pcap-dlpi.c,v 1.74 2001/12/10 07:14:15 guy Exp $ (LBL)";
48 #include <sys/types.h>
50 #ifdef HAVE_SYS_BUFMOD_H
51 #include <sys/bufmod.h>
54 #ifdef HAVE_SYS_DLPI_EXT_H
55 #include <sys/dlpi_ext.h>
58 #include <sys/socket.h>
60 #ifdef DL_HP_PPA_ACK_OBS
63 #include <sys/stream.h>
64 #if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H)
65 #include <sys/systeminfo.h>
87 #ifdef HAVE_OS_PROTO_H
91 #ifndef PCAP_DEV_PREFIX
93 #define PCAP_DEV_PREFIX "/dev/dlpi"
95 #define PCAP_DEV_PREFIX "/dev"
102 static char *split_dname(char *, int *, char *);
103 static int dlattachreq(int, bpf_u_int32, char *);
104 static int dlbindack(int, char *, char *);
105 static int dlbindreq(int, bpf_u_int32, char *);
106 static int dlinfoack(int, char *, char *);
107 static int dlinforeq(int, char *);
108 static int dlokack(int, const char *, char *, char *);
109 static int recv_ack(int, int, const char *, char *, char *);
110 static char *dlstrerror(bpf_u_int32);
111 static char *dlprim(bpf_u_int32);
112 static int dlpromisconreq(int, bpf_u_int32, char *);
113 #if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H)
114 static char *get_release(bpf_u_int32 *, bpf_u_int32 *, bpf_u_int32 *);
116 static int send_request(int, char *, int, char *, char *);
117 #ifdef HAVE_SYS_BUFMOD_H
118 static int strioctl(int, int, int, char *);
121 static int dlpi_kread(int, off_t, void *, u_int, char *);
124 static int get_dlpi_ppa(int, const char *, int, char *);
128 pcap_stats(pcap_t *p, struct pcap_stat *ps)
132 * "ps_recv" counts packets handed to the filter, not packets
133 * that passed the filter. As filtering is done in userland,
134 * this does not include packets dropped because we ran out
137 * "ps_drop" counts packets dropped inside the DLPI service
138 * provider device device because of flow control requirements
139 * or resource exhaustion; it doesn't count packets dropped by
140 * the interface driver, or packets dropped upstream. As
141 * filtering is done in userland, it counts packets regardless
142 * of whether they would've passed the filter.
144 * These statistics don't include packets not yet read from
145 * the kernel by libpcap, but they may include packets not
146 * yet read from libpcap by the application.
152 /* XXX Needed by HP-UX (at least) */
153 static bpf_u_int32 ctlbuf[MAXDLBUF];
154 static struct strbuf ctl = {
161 pcap_read(pcap_t *p, int cnt, pcap_handler callback, u_char *user)
163 register int cc, n, caplen, origlen;
164 register u_char *bp, *ep, *pk;
165 register struct bpf_insn *fcode;
166 #ifdef HAVE_SYS_BUFMOD_H
167 register struct sb_hdr *sbp;
174 struct pcap_pkthdr pkthdr;
179 data.buf = (char *)p->buffer + p->offset;
180 data.maxlen = MAXDLBUF;
183 if (getmsg(p->fd, &ctl, &data, &flags) < 0) {
184 /* Don't choke when we get ptraced */
185 if (errno == EINTR) {
189 strlcpy(p->errbuf, pcap_strerror(errno),
195 bp = p->buffer + p->offset;
199 /* Loop through packets */
200 fcode = p->fcode.bf_insns;
203 #ifdef HAVE_SYS_BUFMOD_H
208 memcpy(sbp, bp, sizeof(*sbp));
211 sbp = (struct sb_hdr *)bp;
212 p->md.stat.ps_drop += sbp->sbh_drops;
213 pk = bp + sizeof(*sbp);
214 bp += sbp->sbh_totlen;
215 origlen = sbp->sbh_origlen;
216 caplen = sbp->sbh_msglen;
219 caplen = min(p->snapshot, cc);
223 ++p->md.stat.ps_recv;
224 if (bpf_filter(fcode, pk, origlen, caplen)) {
225 #ifdef HAVE_SYS_BUFMOD_H
226 pkthdr.ts = sbp->sbh_timestamp;
228 (void)gettimeofday(&pkthdr.ts, NULL);
230 pkthdr.len = origlen;
231 pkthdr.caplen = caplen;
232 /* Insure caplen does not exceed snapshot */
233 if (pkthdr.caplen > p->snapshot)
234 pkthdr.caplen = p->snapshot;
235 (*callback)(user, &pkthdr, pk);
236 if (++n >= cnt && cnt >= 0) {
242 #ifdef HAVE_SYS_BUFMOD_H
250 pcap_open_live(char *device, int snaplen, int promisc, int to_ms, char *ebuf)
255 register dl_info_ack_t *infop;
256 #ifdef HAVE_SYS_BUFMOD_H
257 bpf_u_int32 ss, flag;
259 register char *release;
260 bpf_u_int32 osmajor, osminor, osmicro;
263 bpf_u_int32 buf[MAXDLBUF];
265 #ifndef HAVE_DEV_DLPI
269 p = (pcap_t *)malloc(sizeof(*p));
271 strlcpy(ebuf, pcap_strerror(errno), PCAP_ERRBUF_SIZE);
274 memset(p, 0, sizeof(*p));
275 p->fd = -1; /* indicate that it hasn't been opened yet */
279 ** Remove any "/dev/" on the front of the device.
281 cp = strrchr(device, '/');
286 strlcpy(dname, cp, sizeof(dname));
289 * Split the device name into a device type name and a unit number;
290 * chop off the unit number, so "dname" is just a device type name.
292 cp = split_dname(dname, &ppa, ebuf);
298 * Use "/dev/dlpi" as the device.
300 * XXX - HP's DLPI Programmer's Guide for HP-UX 11.00 says that
301 * the "dl_mjr_num" field is for the "major number of interface
302 * driver"; that's the major of "/dev/dlpi" on the system on
303 * which I tried this, but there may be DLPI devices that
304 * use a different driver, in which case we may need to
305 * search "/dev" for the appropriate device with that major
306 * device number, rather than hardwiring "/dev/dlpi".
309 if ((p->fd = open(cp, O_RDWR)) < 0) {
310 snprintf(ebuf, PCAP_ERRBUF_SIZE,
311 "%s: %s", cp, pcap_strerror(errno));
316 * Get a table of all PPAs for that device, and search that
317 * table for the specified device type name and unit number.
319 ppa = get_dlpi_ppa(p->fd, dname, ppa, ebuf);
324 * Get the unit number, and a pointer to the end of the device
327 cp = split_dname(device, &ppa, ebuf);
332 * If the device name begins with "/", assume it begins with
333 * the pathname of the directory containing the device to open;
334 * otherwise, concatenate the device directory name and the
338 strlcpy(dname, device, sizeof(dname));
340 snprintf(dname, sizeof(dname), "%s/%s", PCAP_DEV_PREFIX,
344 * Make a copy of the device pathname, and then remove the unit
345 * number from the device pathname.
347 strlcpy(dname2, dname, sizeof(dname));
348 *(dname + strlen(dname) - strlen(cp)) = '\0';
350 /* Try device without unit number */
351 if ((p->fd = open(dname, O_RDWR)) < 0) {
352 if (errno != ENOENT) {
353 snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s: %s", dname,
354 pcap_strerror(errno));
358 /* Try again with unit number */
359 if ((p->fd = open(dname2, O_RDWR)) < 0) {
360 snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s: %s", dname2,
361 pcap_strerror(errno));
364 /* XXX Assume unit zero */
369 p->snapshot = snaplen;
372 ** Attach if "style 2" provider
374 if (dlinforeq(p->fd, ebuf) < 0 ||
375 dlinfoack(p->fd, (char *)buf, ebuf) < 0)
377 infop = &((union DL_primitives *)buf)->info_ack;
378 if (infop->dl_provider_style == DL_STYLE2 &&
379 (dlattachreq(p->fd, ppa, ebuf) < 0 ||
380 dlokack(p->fd, "attach", (char *)buf, ebuf) < 0))
383 ** Bind (defer if using HP-UX 9 or HP-UX 10.20, totally skip if
386 #if !defined(HAVE_HPUX9) && !defined(HAVE_HPUX10_20) && !defined(sinix)
388 /* According to IBM's AIX Support Line, the dl_sap value
389 ** should not be less than 0x600 (1536) for standard Ethernet.
390 ** However, we seem to get DL_BADADDR - "DLSAP addr in improper
391 ** format or invalid" - errors if we use 1537 on the "tr0"
392 ** device, which, given that its name starts with "tr" and that
393 ** it's IBM, probably means a Token Ring device. (Perhaps we
394 ** need to use 1537 on "/dev/dlpi/en" because that device is for
395 ** D/I/X Ethernet, the "SAP" is actually an Ethernet type, and
396 ** it rejects invalid Ethernet types.)
398 ** So if 1537 fails, we try 2, as Hyung Sik Yoon of IBM Korea
399 ** says that works on Token Ring (he says that 0 does *not*
400 ** work; perhaps that's considered an invalid LLC SAP value - I
401 ** assume the SAP value in a DLPI bind is an LLC SAP for network
402 ** types that use 802.2 LLC).
404 if ((dlbindreq(p->fd, 1537, ebuf) < 0 &&
405 dlbindreq(p->fd, 2, ebuf) < 0) ||
407 if (dlbindreq(p->fd, 0, ebuf) < 0 ||
409 dlbindack(p->fd, (char *)buf, ebuf) < 0)
415 ** Enable promiscuous
417 if (dlpromisconreq(p->fd, DL_PROMISC_PHYS, ebuf) < 0 ||
418 dlokack(p->fd, "promisc_phys", (char *)buf, ebuf) < 0)
422 ** Try to enable multicast (you would have thought
423 ** promiscuous would be sufficient). (Skip if using
426 #if !defined(__hpux) && !defined(sinix)
427 if (dlpromisconreq(p->fd, DL_PROMISC_MULTI, ebuf) < 0 ||
428 dlokack(p->fd, "promisc_multi", (char *)buf, ebuf) < 0)
430 "WARNING: DL_PROMISC_MULTI failed (%s)\n", ebuf);
434 ** Try to enable sap (when not in promiscuous mode when using
435 ** using HP-UX and never under SINIX)
442 (dlpromisconreq(p->fd, DL_PROMISC_SAP, ebuf) < 0 ||
443 dlokack(p->fd, "promisc_sap", (char *)buf, ebuf) < 0)) {
444 /* Not fatal if promisc since the DL_PROMISC_PHYS worked */
447 "WARNING: DL_PROMISC_SAP failed (%s)\n", ebuf);
454 ** HP-UX 9 and HP-UX 10.20 must bind after setting promiscuous
457 #if defined(HAVE_HPUX9) || defined(HAVE_HPUX10_20)
458 if (dlbindreq(p->fd, 0, ebuf) < 0 ||
459 dlbindack(p->fd, (char *)buf, ebuf) < 0)
464 ** Determine link type
466 if (dlinforeq(p->fd, ebuf) < 0 ||
467 dlinfoack(p->fd, (char *)buf, ebuf) < 0)
470 infop = &((union DL_primitives *)buf)->info_ack;
471 switch (infop->dl_mac_type) {
475 p->linktype = DLT_EN10MB;
480 p->linktype = DLT_FDDI;
485 p->linktype = DLT_IEEE802;
490 snprintf(ebuf, PCAP_ERRBUF_SIZE, "unknown mac type %lu",
497 ** This is a non standard SunOS hack to get the ethernet header.
499 if (strioctl(p->fd, DLIOCRAW, 0, NULL) < 0) {
500 snprintf(ebuf, PCAP_ERRBUF_SIZE, "DLIOCRAW: %s",
501 pcap_strerror(errno));
506 #ifdef HAVE_SYS_BUFMOD_H
508 ** Another non standard call to get the data nicely buffered
510 if (ioctl(p->fd, I_PUSH, "bufmod") != 0) {
511 snprintf(ebuf, PCAP_ERRBUF_SIZE, "I_PUSH bufmod: %s",
512 pcap_strerror(errno));
517 ** Now that the bufmod is pushed lets configure it.
519 ** There is a bug in bufmod(7). When dealing with messages of
520 ** less than snaplen size it strips data from the beginning not
523 ** This bug is supposed to be fixed in 5.3.2. Also, there is a
524 ** patch available. Ask for bugid 1149065.
528 release = get_release(&osmajor, &osminor, &osmicro);
529 if (osmajor == 5 && (osminor <= 2 || (osminor == 3 && osmicro < 2)) &&
530 getenv("BUFMOD_FIXED") == NULL) {
532 "WARNING: bufmod is broken in SunOS %s; ignoring snaplen.\n",
538 strioctl(p->fd, SBIOCSSNAP, sizeof(ss), (char *)&ss) != 0) {
539 snprintf(ebuf, PCAP_ERRBUF_SIZE, "SBIOCSSNAP: %s",
540 pcap_strerror(errno));
545 ** Set up the bufmod flags
547 if (strioctl(p->fd, SBIOCGFLAGS, sizeof(flag), (char *)&flag) < 0) {
548 snprintf(ebuf, PCAP_ERRBUF_SIZE, "SBIOCGFLAGS: %s",
549 pcap_strerror(errno));
553 if (strioctl(p->fd, SBIOCSFLAGS, sizeof(flag), (char *)&flag) != 0) {
554 snprintf(ebuf, PCAP_ERRBUF_SIZE, "SBIOCSFLAGS: %s",
555 pcap_strerror(errno));
559 ** Set up the bufmod timeout
564 to.tv_sec = to_ms / 1000;
565 to.tv_usec = (to_ms * 1000) % 1000000;
566 if (strioctl(p->fd, SBIOCSTIME, sizeof(to), (char *)&to) != 0) {
567 snprintf(ebuf, PCAP_ERRBUF_SIZE, "SBIOCSTIME: %s",
568 pcap_strerror(errno));
575 ** As the last operation flush the read side.
577 if (ioctl(p->fd, I_FLUSH, FLUSHR) != 0) {
578 snprintf(ebuf, PCAP_ERRBUF_SIZE, "FLUSHR: %s",
579 pcap_strerror(errno));
582 /* Allocate data buffer */
583 p->bufsize = MAXDLBUF * sizeof(bpf_u_int32);
584 p->buffer = (u_char *)malloc(p->bufsize + p->offset);
595 * Split a device name into a device type name and a unit number;
596 * return the a pointer to the beginning of the unit number, which
597 * is the end of the device type name, and set "*unitp" to the unit
600 * Returns NULL on error, and fills "ebuf" with an error message.
603 split_dname(char *device, int *unitp, char *ebuf)
610 * Look for a number at the end of the device name string.
612 cp = device + strlen(device) - 1;
613 if (*cp < '0' || *cp > '9') {
614 snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s missing unit number",
619 /* Digits at end of string are unit number */
620 while (cp-1 >= device && *(cp-1) >= '0' && *(cp-1) <= '9')
623 unit = strtol(cp, &eos, 10);
625 snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s bad unit number", device);
633 pcap_setfilter(pcap_t *p, struct bpf_program *fp)
636 if (install_bpf_program(p, fp) < 0)
642 send_request(int fd, char *ptr, int len, char *what, char *ebuf)
652 if (putmsg(fd, &ctl, (struct strbuf *) NULL, flags) < 0) {
653 snprintf(ebuf, PCAP_ERRBUF_SIZE,
654 "send_request: putmsg \"%s\": %s",
655 what, pcap_strerror(errno));
662 recv_ack(int fd, int size, const char *what, char *bufp, char *ebuf)
664 union DL_primitives *dlp;
668 ctl.maxlen = MAXDLBUF;
673 if (getmsg(fd, &ctl, (struct strbuf*)NULL, &flags) < 0) {
674 snprintf(ebuf, PCAP_ERRBUF_SIZE, "recv_ack: %s getmsg: %s",
675 what, pcap_strerror(errno));
679 dlp = (union DL_primitives *) ctl.buf;
680 switch (dlp->dl_primitive) {
692 switch (dlp->error_ack.dl_errno) {
695 snprintf(ebuf, PCAP_ERRBUF_SIZE,
696 "recv_ack: %s: UNIX error - %s",
697 what, pcap_strerror(dlp->error_ack.dl_unix_errno));
701 snprintf(ebuf, PCAP_ERRBUF_SIZE, "recv_ack: %s: %s",
702 what, dlstrerror(dlp->error_ack.dl_errno));
708 snprintf(ebuf, PCAP_ERRBUF_SIZE,
709 "recv_ack: %s: Unexpected primitive ack %s",
710 what, dlprim(dlp->dl_primitive));
714 if (ctl.len < size) {
715 snprintf(ebuf, PCAP_ERRBUF_SIZE,
716 "recv_ack: %s: Ack too small (%d < %d)",
717 what, ctl.len, size);
724 dlstrerror(bpf_u_int32 dl_errno)
726 static char errstring[6+2+8+1];
731 return ("Improper permissions for request");
734 return ("DLSAP addr in improper format or invalid");
737 return ("Seq number not from outstand DL_CONN_IND");
740 return ("User data exceeded provider limit");
745 * With a single "/dev/dlpi" device used for all
746 * DLPI providers, PPAs have nothing to do with
749 return ("Specified PPA was invalid");
752 * We have separate devices for separate devices;
753 * the PPA is just the unit number.
755 return ("Specified PPA (device unit) was invalid");
759 return ("Primitive received not known by provider");
762 return ("QOS parameters contained invalid values");
765 return ("QOS structure type is unknown/unsupported");
768 return ("Bad LSAP selector");
771 return ("Token used not an active stream");
774 return ("Attempted second bind with dl_max_conind");
777 return ("Physical link initialization failed");
780 return ("Provider couldn't allocate alternate address");
783 return ("Physical link not initialized");
786 return ("Primitive issued in improper state");
789 return ("UNIX system error occurred");
792 return ("Requested service not supplied by provider");
794 case DL_UNDELIVERABLE:
795 return ("Previous data unit could not be delivered");
797 case DL_NOTSUPPORTED:
798 return ("Primitive is known but not supported");
801 return ("Limit exceeded");
804 return ("Promiscuous mode not enabled");
807 return ("Other streams for PPA in post-attached");
810 return ("Automatic handling XID&TEST not supported");
813 return ("Automatic handling of XID not supported");
816 return ("Automatic handling of TEST not supported");
819 return ("Automatic handling of XID response");
822 return ("Automatic handling of TEST response");
825 return ("Pending outstanding connect indications");
828 sprintf(errstring, "Error %02x", dl_errno);
834 dlprim(bpf_u_int32 prim)
836 static char primbuf[80];
841 return ("DL_INFO_REQ");
844 return ("DL_INFO_ACK");
847 return ("DL_ATTACH_REQ");
850 return ("DL_DETACH_REQ");
853 return ("DL_BIND_REQ");
856 return ("DL_BIND_ACK");
859 return ("DL_UNBIND_REQ");
862 return ("DL_OK_ACK");
865 return ("DL_ERROR_ACK");
867 case DL_SUBS_BIND_REQ:
868 return ("DL_SUBS_BIND_REQ");
870 case DL_SUBS_BIND_ACK:
871 return ("DL_SUBS_BIND_ACK");
873 case DL_UNITDATA_REQ:
874 return ("DL_UNITDATA_REQ");
876 case DL_UNITDATA_IND:
877 return ("DL_UNITDATA_IND");
880 return ("DL_UDERROR_IND");
883 return ("DL_UDQOS_REQ");
886 return ("DL_CONNECT_REQ");
889 return ("DL_CONNECT_IND");
892 return ("DL_CONNECT_RES");
895 return ("DL_CONNECT_CON");
898 return ("DL_TOKEN_REQ");
901 return ("DL_TOKEN_ACK");
903 case DL_DISCONNECT_REQ:
904 return ("DL_DISCONNECT_REQ");
906 case DL_DISCONNECT_IND:
907 return ("DL_DISCONNECT_IND");
910 return ("DL_RESET_REQ");
913 return ("DL_RESET_IND");
916 return ("DL_RESET_RES");
919 return ("DL_RESET_CON");
922 (void) sprintf(primbuf, "unknown primitive 0x%x", prim);
928 dlattachreq(int fd, bpf_u_int32 ppa, char *ebuf)
932 req.dl_primitive = DL_ATTACH_REQ;
935 return (send_request(fd, (char *)&req, sizeof(req), "attach", ebuf));
939 dlbindreq(int fd, bpf_u_int32 sap, char *ebuf)
944 memset((char *)&req, 0, sizeof(req));
945 req.dl_primitive = DL_BIND_REQ;
947 req.dl_max_conind = 1; /* XXX magic number */
948 /* 22 is INSAP as per the HP-UX DLPI Programmer's Guide */
950 req.dl_service_mode = DL_HP_RAWDLS;
954 req.dl_service_mode = DL_CLDLS;
958 return (send_request(fd, (char *)&req, sizeof(req), "bind", ebuf));
962 dlbindack(int fd, char *bufp, char *ebuf)
965 return (recv_ack(fd, DL_BIND_ACK_SIZE, "bind", bufp, ebuf));
969 dlpromisconreq(int fd, bpf_u_int32 level, char *ebuf)
971 dl_promiscon_req_t req;
973 req.dl_primitive = DL_PROMISCON_REQ;
974 req.dl_level = level;
976 return (send_request(fd, (char *)&req, sizeof(req), "promiscon", ebuf));
980 dlokack(int fd, const char *what, char *bufp, char *ebuf)
983 return (recv_ack(fd, DL_OK_ACK_SIZE, what, bufp, ebuf));
988 dlinforeq(int fd, char *ebuf)
992 req.dl_primitive = DL_INFO_REQ;
994 return (send_request(fd, (char *)&req, sizeof(req), "info", ebuf));
998 dlinfoack(int fd, char *bufp, char *ebuf)
1001 return (recv_ack(fd, DL_INFO_ACK_SIZE, "info", bufp, ebuf));
1004 #ifdef HAVE_SYS_BUFMOD_H
1006 strioctl(int fd, int cmd, int len, char *dp)
1008 struct strioctl str;
1015 rc = ioctl(fd, I_STR, &str);
1020 return (str.ic_len);
1024 #if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H)
1026 get_release(bpf_u_int32 *majorp, bpf_u_int32 *minorp, bpf_u_int32 *microp)
1029 static char buf[32];
1034 if (sysinfo(SI_RELEASE, buf, sizeof(buf)) < 0)
1037 if (!isdigit((unsigned char)*cp))
1039 *majorp = strtol(cp, &cp, 10);
1042 *minorp = strtol(cp, &cp, 10);
1045 *microp = strtol(cp, &cp, 10);
1050 #ifdef DL_HP_PPA_ACK_OBS
1052 * Under HP-UX 10 and HP-UX 11, we can ask for the ppa
1057 * Determine ppa number that specifies ifname.
1059 * If the "dl_hp_ppa_info_t" doesn't have a "dl_module_id_1" member,
1060 * the code that's used here is the old code for HP-UX 10.x.
1062 * However, HP-UX 10.20, at least, appears to have such a member
1063 * in its "dl_hp_ppa_info_t" structure, so the new code is used.
1064 * The new code didn't work on an old 10.20 system on which Rick
1065 * Jones of HP tried it, but with later patches installed, it
1066 * worked - it appears that the older system had those members but
1067 * didn't put anything in them, so, if the search by name fails, we
1068 * do the old search.
1070 * Rick suggests that making sure your system is "up on the latest
1071 * lancommon/DLPI/driver patches" is probably a good idea; it'd fix
1072 * that problem, as well as allowing libpcap to see packets sent
1073 * from the system on which the libpcap application is being run.
1074 * (On 10.20, in addition to getting the latest patches, you need
1075 * to turn the kernel "lanc_outbound_promisc_flag" flag on with ADB;
1076 * a posting to "comp.sys.hp.hpux" at
1078 * http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=558092266
1080 * says that, to see the machine's outgoing traffic, you'd need to
1081 * apply the right patches to your system, and also set that variable
1084 echo 'lanc_outbound_promisc_flag/W1' | /usr/bin/adb -w /stand/vmunix /dev/kmem
1086 * which could be put in, for example, "/sbin/init.d/lan".
1088 * Setting the variable is not necessary on HP-UX 11.x.
1091 get_dlpi_ppa(register int fd, register const char *device, register int unit,
1092 register char *ebuf)
1094 register dl_hp_ppa_ack_t *ap;
1095 register dl_hp_ppa_info_t *ipstart, *ip;
1098 register u_long majdev;
1099 struct stat statbuf;
1100 dl_hp_ppa_req_t req;
1103 dl_hp_ppa_ack_t *dlp;
1108 memset((char *)&req, 0, sizeof(req));
1109 req.dl_primitive = DL_HP_PPA_REQ;
1111 memset((char *)buf, 0, sizeof(buf));
1112 if (send_request(fd, (char *)&req, sizeof(req), "hpppa", ebuf) < 0)
1115 ctl.maxlen = DL_HP_PPA_ACK_SIZE;
1117 ctl.buf = (char *)buf;
1121 * DLPI may return a big chunk of data for a DL_HP_PPA_REQ. The normal
1122 * recv_ack will fail because it set the maxlen to MAXDLBUF (8192)
1123 * which is NOT big enough for a DL_HP_PPA_REQ.
1125 * This causes libpcap applications to fail on a system with HP-APA
1128 * To figure out how big the returned data is, we first call getmsg
1129 * to get the small head and peek at the head to get the actual data
1130 * length, and then issue another getmsg to get the actual PPA data.
1132 /* get the head first */
1133 if (getmsg(fd, &ctl, (struct strbuf *)NULL, &flags) < 0) {
1134 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1135 "get_dlpi_ppa: hpppa getmsg: %s", pcap_strerror(errno));
1139 dlp = (dl_hp_ppa_ack_t *)ctl.buf;
1140 if (dlp->dl_primitive != DL_HP_PPA_ACK) {
1141 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1142 "get_dlpi_ppa: hpppa unexpected primitive ack 0x%x",
1143 (bpf_u_int32)dlp->dl_primitive);
1147 if (ctl.len < DL_HP_PPA_ACK_SIZE) {
1148 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1149 "get_dlpi_ppa: hpppa ack too small (%d < %d)",
1150 ctl.len, DL_HP_PPA_ACK_SIZE);
1154 /* allocate buffer */
1155 if ((ppa_data_buf = (char *)malloc(dlp->dl_length)) == NULL) {
1156 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1157 "get_dlpi_ppa: hpppa malloc: %s", pcap_strerror(errno));
1160 ctl.maxlen = dlp->dl_length;
1162 ctl.buf = (char *)ppa_data_buf;
1164 if (getmsg(fd, &ctl, (struct strbuf *)NULL, &flags) < 0) {
1165 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1166 "get_dlpi_ppa: hpppa getmsg: %s", pcap_strerror(errno));
1170 if (ctl.len < dlp->dl_length) {
1171 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1172 "get_dlpi_ppa: hpppa ack too small (%d < %d)",
1173 ctl.len, dlp->dl_length);
1178 ap = (dl_hp_ppa_ack_t *)buf;
1179 ipstart = (dl_hp_ppa_info_t *)ppa_data_buf;
1182 #ifdef HAVE_HP_PPA_INFO_T_DL_MODULE_ID_1
1184 * The "dl_hp_ppa_info_t" structure has a "dl_module_id_1"
1185 * member that should, in theory, contain the part of the
1186 * name for the device that comes before the unit number,
1187 * and should also have a "dl_module_id_2" member that may
1188 * contain an alternate name (e.g., I think Ethernet devices
1189 * have both "lan", for "lanN", and "snap", for "snapN", with
1190 * the former being for Ethernet packets and the latter being
1191 * for 802.3/802.2 packets).
1193 * Search for the device that has the specified name and
1196 for (i = 0; i < ap->dl_count; i++) {
1197 if ((strcmp((const char *)ip->dl_module_id_1, device) == 0 ||
1198 strcmp((const char *)ip->dl_module_id_2, device) == 0) &&
1199 ip->dl_instance_num == unit)
1202 ip = (dl_hp_ppa_info_t *)((u_char *)ipstart + ip->dl_next_offset);
1206 * We don't have that member, so the search is impossible; make it
1207 * look as if the search failed.
1212 if (i == ap->dl_count) {
1214 * Well, we didn't, or can't, find the device by name.
1216 * HP-UX 10.20, whilst it has "dl_module_id_1" and
1217 * "dl_module_id_2" fields in the "dl_hp_ppa_info_t",
1218 * doesn't seem to fill them in unless the system is
1219 * at a reasonably up-to-date patch level.
1221 * Older HP-UX 10.x systems might not have those fields
1224 * Therefore, we'll search for the entry with the major
1225 * device number of a device with the name "/dev/<dev><unit>",
1226 * if such a device exists, as the old code did.
1228 snprintf(dname, sizeof(dname), "/dev/%s%d", device, unit);
1229 if (stat(dname, &statbuf) < 0) {
1230 snprintf(ebuf, PCAP_ERRBUF_SIZE, "stat: %s: %s",
1231 dname, pcap_strerror(errno));
1234 majdev = major(statbuf.st_rdev);
1238 for (i = 0; i < ap->dl_count; i++) {
1239 if (ip->dl_mjr_num == majdev &&
1240 ip->dl_instance_num == unit)
1243 ip = (dl_hp_ppa_info_t *)((u_char *)ipstart + ip->dl_next_offset);
1246 if (i == ap->dl_count) {
1247 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1248 "can't find /dev/dlpi PPA for %s%d", device, unit);
1251 if (ip->dl_hdw_state == HDW_DEAD) {
1252 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1253 "%s%d: hardware state: DOWN\n", device, unit);
1265 * Under HP-UX 9, there is no good way to determine the ppa.
1266 * So punt and read it from /dev/kmem.
1268 static struct nlist nl[] = {
1274 static char path_vmunix[] = "/hp-ux";
1276 /* Determine ppa number that specifies ifname */
1278 get_dlpi_ppa(register int fd, register const char *ifname, register int unit,
1279 register char *ebuf)
1281 register const char *cp;
1285 char if_name[sizeof(ifnet.if_name) + 1];
1287 cp = strrchr(ifname, '/');
1290 if (nlist(path_vmunix, &nl) < 0) {
1291 snprintf(ebuf, PCAP_ERRBUF_SIZE, "nlist %s failed",
1295 if (nl[NL_IFNET].n_value == 0) {
1296 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1297 "could't find %s kernel symbol",
1298 nl[NL_IFNET].n_name);
1301 kd = open("/dev/kmem", O_RDONLY);
1303 snprintf(ebuf, PCAP_ERRBUF_SIZE, "kmem open: %s",
1304 pcap_strerror(errno));
1307 if (dlpi_kread(kd, nl[NL_IFNET].n_value,
1308 &addr, sizeof(addr), ebuf) < 0) {
1312 for (; addr != NULL; addr = ifnet.if_next) {
1313 if (dlpi_kread(kd, (off_t)addr,
1314 &ifnet, sizeof(ifnet), ebuf) < 0 ||
1315 dlpi_kread(kd, (off_t)ifnet.if_name,
1316 if_name, sizeof(ifnet.if_name), ebuf) < 0) {
1320 if_name[sizeof(ifnet.if_name)] = '\0';
1321 if (strcmp(if_name, ifname) == 0 && ifnet.if_unit == unit)
1322 return (ifnet.if_index);
1325 snprintf(ebuf, PCAP_ERRBUF_SIZE, "Can't find %s", ifname);
1330 dlpi_kread(register int fd, register off_t addr,
1331 register void *buf, register u_int len, register char *ebuf)
1335 if (lseek(fd, addr, SEEK_SET) < 0) {
1336 snprintf(ebuf, PCAP_ERRBUF_SIZE, "lseek: %s",
1337 pcap_strerror(errno));
1340 cc = read(fd, buf, len);
1342 snprintf(ebuf, PCAP_ERRBUF_SIZE, "read: %s",
1343 pcap_strerror(errno));
1345 } else if (cc != len) {
1346 snprintf(ebuf, PCAP_ERRBUF_SIZE, "short read (%d != %d)", cc,