2 * Copyright (c) 1993, 1994, 1995, 1996, 1997
3 * The Regents of the University of California. All rights reserved.
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that: (1) source code distributions
7 * retain the above copyright notice and this paragraph in its entirety, (2)
8 * distributions including binary code include the above copyright notice and
9 * this paragraph in its entirety in the documentation or other materials
10 * provided with the distribution, and (3) all advertising materials mentioning
11 * features or use of this software display the following acknowledgement:
12 * ``This product includes software developed by the University of California,
13 * Lawrence Berkeley Laboratory and its contributors.'' Neither the name of
14 * the University nor the names of its contributors may be used to endorse
15 * or promote products derived from this software without specific prior
17 * THIS SOFTWARE IS PROVIDED ``AS IS'' AND WITHOUT ANY EXPRESS OR IMPLIED
18 * WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF
19 * MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE.
21 * This code contributed by Atanu Ghosh (atanu@cs.ucl.ac.uk),
22 * University College London, and subsequently modified by
23 * Guy Harris (guy@alum.mit.edu), Mark Pizzolato
24 * <List-tcpdump-workers@subscriptions.pizzolato.net>,
25 * Mark C. Brown (mbrown@hp.com), and Sagun Shakya <Sagun.Shakya@Sun.COM>.
29 * Packet capture routine for DLPI under SunOS 5, HP-UX 9/10/11, and AIX.
33 * - The DLIOCRAW ioctl() is specific to SunOS.
35 * - There is a bug in bufmod(7) such that setting the snapshot
36 * length results in data being left of the front of the packet.
38 * - It might be desirable to use pfmod(7) to filter packets in the
39 * kernel when possible.
41 * - An older version of the HP-UX DLPI Programmer's Guide, which
42 * I think was advertised as the 10.20 version, used to be available
45 * http://docs.hp.com/hpux/onlinedocs/B2355-90093/B2355-90093.html
47 * but is no longer available; it can still be found at
49 * http://h21007.www2.hp.com/dspp/files/unprotected/Drivers/Docs/Refs/B2355-90093.pdf
53 * - The HP-UX 10.x, 11.0, and 11i v1.6 version of the HP-UX DLPI
54 * Programmer's Guide, which I think was once advertised as the
55 * 11.00 version is available at
57 * http://docs.hp.com/en/B2355-90139/index.html
59 * - The HP-UX 11i v2 version of the HP-UX DLPI Programmer's Guide
62 * http://docs.hp.com/en/B2355-90871/index.html
64 * - All of the HP documents describe raw-mode services, which are
65 * what we use if DL_HP_RAWDLS is defined. XXX - we use __hpux
66 * in some places to test for HP-UX, but use DL_HP_RAWDLS in
67 * other places; do we support any versions of HP-UX without
72 static const char rcsid[] _U_ =
73 "@(#) $Header: /tcpdump/master/libpcap/pcap-dlpi.c,v 1.128 2008-12-02 16:20:23 guy Exp $ (LBL)";
80 #include <sys/types.h>
82 #ifdef HAVE_SYS_BUFMOD_H
83 #include <sys/bufmod.h>
86 #ifdef HAVE_SYS_DLPI_EXT_H
87 #include <sys/dlpi_ext.h>
90 #include <sys/socket.h>
95 #include <sys/stream.h>
96 #if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H)
97 #include <sys/systeminfo.h>
120 #define INT_MAX 2147483647
123 #include "pcap-int.h"
124 #include "dlpisubs.h"
126 #ifdef HAVE_OS_PROTO_H
127 #include "os-proto.h"
130 #ifndef PCAP_DEV_PREFIX
132 #define PCAP_DEV_PREFIX "/dev/dlpi"
134 #define PCAP_DEV_PREFIX "/dev"
138 #define MAXDLBUF 8192
141 static char *split_dname(char *, int *, char *);
142 static int dl_doattach(int, int, char *);
144 static int dl_dohpuxbind(int, char *);
146 static int dlattachreq(int, bpf_u_int32, char *);
147 static int dlbindreq(int, bpf_u_int32, char *);
148 static int dlbindack(int, char *, char *, int *);
149 static int dlpromisconreq(int, bpf_u_int32, char *);
150 static int dlokack(int, const char *, char *, char *);
151 static int dlinforeq(int, char *);
152 static int dlinfoack(int, char *, char *);
154 #ifdef HAVE_DLPI_PASSIVE
155 static void dlpassive(int, char *);
159 static int dlrawdatareq(int, const u_char *, int);
161 static int recv_ack(int, int, const char *, char *, char *, int *);
162 static char *dlstrerror(bpf_u_int32);
163 static char *dlprim(bpf_u_int32);
164 #if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H)
165 static char *get_release(bpf_u_int32 *, bpf_u_int32 *, bpf_u_int32 *);
167 static int send_request(int, char *, int, char *, char *);
169 static int dlpi_kread(int, off_t, void *, u_int, char *);
172 static int get_dlpi_ppa(int, const char *, int, char *);
175 /* XXX Needed by HP-UX (at least) */
176 static bpf_u_int32 ctlbuf[MAXDLBUF];
177 static struct strbuf ctl = {
184 * Cast a buffer to "union DL_primitives" without provoking warnings
187 #define MAKE_DL_PRIMITIVES(ptr) ((union DL_primitives *)(void *)(ptr))
190 pcap_read_dlpi(pcap_t *p, int cnt, pcap_handler callback, u_char *user)
200 data.buf = (char *)p->buffer + p->offset;
201 data.maxlen = p->bufsize;
205 * Has "pcap_breakloop()" been called?
209 * Yes - clear the flag that indicates
210 * that it has, and return -2 to
211 * indicate that we were told to
212 * break out of the loop.
218 * XXX - check for the DLPI primitive, which
219 * would be DL_HP_RAWDATA_IND on HP-UX
220 * if we're in raw mode?
222 if (getmsg(p->fd, &ctl, &data, &flags) < 0) {
223 /* Don't choke when we get ptraced */
233 strlcpy(p->errbuf, pcap_strerror(errno),
239 bp = p->buffer + p->offset;
243 return (pcap_process_pkts(p, callback, user, cnt, bp, cc));
247 pcap_inject_dlpi(pcap_t *p, const void *buf, size_t size)
251 #if defined(DLIOCRAW)
252 ret = write(p->fd, buf, size);
254 snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "send: %s",
255 pcap_strerror(errno));
258 #elif defined(DL_HP_RAWDLS)
259 if (p->send_fd < 0) {
260 snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
261 "send: Output FD couldn't be opened");
264 ret = dlrawdatareq(p->send_fd, buf, size);
266 snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "send: %s",
267 pcap_strerror(errno));
271 * putmsg() returns either 0 or -1; it doesn't indicate how
272 * many bytes were written (presumably they were all written
273 * or none of them were written). OpenBSD's pcap_inject()
274 * returns the number of bytes written, so, for API compatibility,
275 * we return the number of bytes we were told to write.
278 #else /* no raw mode */
280 * XXX - this is a pain, because you might have to extract
281 * the address from the packet and use it in a DL_UNITDATA_REQ
282 * request. That would be dependent on the link-layer type.
284 * I also don't know what SAP you'd have to bind the descriptor
285 * to, or whether you'd need separate "receive" and "send" FDs,
286 * nor do I know whether you'd need different bindings for
287 * D/I/X Ethernet and 802.3, or for {FDDI,Token Ring} plus
288 * 802.2 and {FDDI,Token Ring} plus 802.2 plus SNAP.
290 * So, for now, we just return a "you can't send" indication,
291 * and leave it up to somebody with a DLPI-based system lacking
292 * both DLIOCRAW and DL_HP_RAWDLS to supply code to implement
293 * packet transmission on that system. If they do, they should
294 * send it to us - but should not send us code that assumes
295 * Ethernet; if the code doesn't work on non-Ethernet interfaces,
296 * it should check "p->linktype" and reject the send request if
297 * it's anything other than DLT_EN10MB.
299 strlcpy(p->errbuf, "send: Not supported on this version of this OS",
302 #endif /* raw mode */
307 #define DL_IPATM 0x12 /* ATM Classical IP interface */
315 #define A_GET_UNITS (('A'<<8)|118)
316 #endif /* A_GET_UNITS */
317 #ifndef A_PROMISCON_REQ
318 #define A_PROMISCON_REQ (('A'<<8)|121)
319 #endif /* A_PROMISCON_REQ */
320 #endif /* HAVE_SOLARIS */
323 pcap_cleanup_dlpi(pcap_t *p)
325 if (p->send_fd >= 0) {
329 pcap_cleanup_live_common(p);
333 pcap_activate_dlpi(pcap_t *p)
340 register dl_info_ack_t *infop;
341 #ifdef HAVE_SYS_BUFMOD_H
344 register char *release;
345 bpf_u_int32 osmajor, osminor, osmicro;
348 bpf_u_int32 buf[MAXDLBUF];
350 #ifndef HAVE_DEV_DLPI
353 int status = PCAP_ERROR;
357 ** Remove any "/dev/" on the front of the device.
359 cp = strrchr(p->opt.source, '/');
361 strlcpy(dname, p->opt.source, sizeof(dname));
363 strlcpy(dname, cp + 1, sizeof(dname));
366 * Split the device name into a device type name and a unit number;
367 * chop off the unit number, so "dname" is just a device type name.
369 cp = split_dname(dname, &ppa, p->errbuf);
371 status = PCAP_ERROR_NO_SUCH_DEVICE;
377 * Use "/dev/dlpi" as the device.
379 * XXX - HP's DLPI Programmer's Guide for HP-UX 11.00 says that
380 * the "dl_mjr_num" field is for the "major number of interface
381 * driver"; that's the major of "/dev/dlpi" on the system on
382 * which I tried this, but there may be DLPI devices that
383 * use a different driver, in which case we may need to
384 * search "/dev" for the appropriate device with that major
385 * device number, rather than hardwiring "/dev/dlpi".
388 if ((p->fd = open(cp, O_RDWR)) < 0) {
389 if (errno == EPERM || errno == EACCES)
390 status = PCAP_ERROR_PERM_DENIED;
391 snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
392 "%s: %s", cp, pcap_strerror(errno));
398 * XXX - HP-UX 10.20 and 11.xx don't appear to support sending and
399 * receiving packets on the same descriptor - you need separate
400 * descriptors for sending and receiving, bound to different SAPs.
402 * If the open fails, we just leave -1 in "p->send_fd" and reject
403 * attempts to send packets, just as if, in pcap-bpf.c, we fail
404 * to open the BPF device for reading and writing, we just try
405 * to open it for reading only and, if that succeeds, just let
406 * the send attempts fail.
408 p->send_fd = open(cp, O_RDWR);
412 * Get a table of all PPAs for that device, and search that
413 * table for the specified device type name and unit number.
415 ppa = get_dlpi_ppa(p->fd, dname, ppa, p->errbuf);
422 * If the device name begins with "/", assume it begins with
423 * the pathname of the directory containing the device to open;
424 * otherwise, concatenate the device directory name and the
427 if (*p->opt.source == '/')
428 strlcpy(dname, p->opt.source, sizeof(dname));
430 snprintf(dname, sizeof(dname), "%s/%s", PCAP_DEV_PREFIX,
434 * Get the unit number, and a pointer to the end of the device
437 cp = split_dname(dname, &ppa, p->errbuf);
439 status = PCAP_ERROR_NO_SUCH_DEVICE;
444 * Make a copy of the device pathname, and then remove the unit
445 * number from the device pathname.
447 strlcpy(dname2, dname, sizeof(dname));
450 /* Try device without unit number */
451 if ((p->fd = open(dname, O_RDWR)) < 0) {
452 if (errno != ENOENT) {
454 status = PCAP_ERROR_PERM_DENIED;
455 snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "%s: %s", dname,
456 pcap_strerror(errno));
460 /* Try again with unit number */
461 if ((p->fd = open(dname2, O_RDWR)) < 0) {
462 if (errno == ENOENT) {
463 status = PCAP_ERROR_NO_SUCH_DEVICE;
466 * We provide an error message even
467 * for this error, for diagnostic
468 * purposes (so that, for example,
469 * the app can show the message if the
472 * In it, we just report "No DLPI device
473 * found" with the device name, so people
474 * don't get confused and think, for example,
475 * that if they can't capture on "lo0"
476 * on Solaris the fix is to change libpcap
477 * (or the application that uses it) to
478 * look for something other than "/dev/lo0",
479 * as the fix is to look for an operating
480 * system other than Solaris - you just
481 * *can't* capture on a loopback interface
482 * on Solaris, the lack of a DLPI device
483 * for the loopback interface is just a
484 * symptom of that inability.
486 snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
487 "%s: No DLPI device found", p->opt.source);
490 status = PCAP_ERROR_PERM_DENIED;
491 snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "%s: %s",
492 dname2, pcap_strerror(errno));
496 /* XXX Assume unit zero */
502 ** Attach if "style 2" provider
504 if (dlinforeq(p->fd, p->errbuf) < 0 ||
505 dlinfoack(p->fd, (char *)buf, p->errbuf) < 0)
507 infop = &(MAKE_DL_PRIMITIVES(buf))->info_ack;
509 if (infop->dl_mac_type == DL_IPATM)
512 if (infop->dl_provider_style == DL_STYLE2) {
513 status = dl_doattach(p->fd, ppa, p->errbuf);
517 if (p->send_fd >= 0) {
518 if (dl_doattach(p->send_fd, ppa, p->errbuf) < 0)
526 * This device exists, but we don't support monitor mode
527 * any platforms that support DLPI.
529 status = PCAP_ERROR_RFMON_NOTSUP;
533 #ifdef HAVE_DLPI_PASSIVE
535 * Enable Passive mode to be able to capture on aggregated link.
536 * Not supported in all Solaris versions.
538 dlpassive(p->fd, p->errbuf);
541 ** Bind (defer if using HP-UX 9 or HP-UX 10.20 or later, totally
542 ** skip if using SINIX)
544 #if !defined(HAVE_HPUX9) && !defined(HAVE_HPUX10_20_OR_LATER) && !defined(sinix)
548 ** According to IBM's AIX Support Line, the dl_sap value
549 ** should not be less than 0x600 (1536) for standard Ethernet.
550 ** However, we seem to get DL_BADADDR - "DLSAP addr in improper
551 ** format or invalid" - errors if we use 1537 on the "tr0"
552 ** device, which, given that its name starts with "tr" and that
553 ** it's IBM, probably means a Token Ring device. (Perhaps we
554 ** need to use 1537 on "/dev/dlpi/en" because that device is for
555 ** D/I/X Ethernet, the "SAP" is actually an Ethernet type, and
556 ** it rejects invalid Ethernet types.)
558 ** So if 1537 fails, we try 2, as Hyung Sik Yoon of IBM Korea
559 ** says that works on Token Ring (he says that 0 does *not*
560 ** work; perhaps that's considered an invalid LLC SAP value - I
561 ** assume the SAP value in a DLPI bind is an LLC SAP for network
562 ** types that use 802.2 LLC).
564 if ((dlbindreq(p->fd, 1537, p->errbuf) < 0 &&
565 dlbindreq(p->fd, 2, p->errbuf) < 0) ||
566 dlbindack(p->fd, (char *)buf, p->errbuf, NULL) < 0)
568 #elif defined(DL_HP_RAWDLS)
570 ** HP-UX 10.0x and 10.1x.
572 if (dl_dohpuxbind(p->fd, p->errbuf) < 0)
574 if (p->send_fd >= 0) {
576 ** XXX - if this fails, just close send_fd and
577 ** set it to -1, so that you can't send but can
580 if (dl_dohpuxbind(p->send_fd, p->errbuf) < 0)
583 #else /* neither AIX nor HP-UX */
585 ** Not Sinix, and neither AIX nor HP-UX - Solaris, and any other
588 if (dlbindreq(p->fd, 0, p->errbuf) < 0 ||
589 dlbindack(p->fd, (char *)buf, p->errbuf, NULL) < 0)
591 #endif /* AIX vs. HP-UX vs. other */
592 #endif /* !HP-UX 9 and !HP-UX 10.20 or later and !SINIX */
597 ** Have to turn on some special ATM promiscuous mode
599 ** Do *NOT* turn regular promiscuous mode on; it doesn't
600 ** help, and may break things.
602 if (strioctl(p->fd, A_PROMISCON_REQ, 0, NULL) < 0) {
603 snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
604 "A_PROMISCON_REQ: %s", pcap_strerror(errno));
609 if (p->opt.promisc) {
611 ** Enable promiscuous (not necessary on send FD)
613 if (dlpromisconreq(p->fd, DL_PROMISC_PHYS, p->errbuf) < 0 ||
614 dlokack(p->fd, "promisc_phys", (char *)buf, p->errbuf) < 0)
618 ** Try to enable multicast (you would have thought
619 ** promiscuous would be sufficient). (Skip if using
620 ** HP-UX or SINIX) (Not necessary on send FD)
622 #if !defined(__hpux) && !defined(sinix)
623 if (dlpromisconreq(p->fd, DL_PROMISC_MULTI, p->errbuf) < 0 ||
624 dlokack(p->fd, "promisc_multi", (char *)buf, p->errbuf) < 0)
625 status = PCAP_WARNING;
629 ** Try to enable SAP promiscuity (when not in promiscuous mode
630 ** when using HP-UX, when not doing SunATM on Solaris, and never
631 ** under SINIX) (Not necessary on send FD)
641 (dlpromisconreq(p->fd, DL_PROMISC_SAP, p->errbuf) < 0 ||
642 dlokack(p->fd, "promisc_sap", (char *)buf, p->errbuf) < 0)) {
643 /* Not fatal if promisc since the DL_PROMISC_PHYS worked */
645 status = PCAP_WARNING;
652 ** HP-UX 9, and HP-UX 10.20 or later, must bind after setting
653 ** promiscuous options.
655 #if defined(HAVE_HPUX9) || defined(HAVE_HPUX10_20_OR_LATER)
656 if (dl_dohpuxbind(p->fd, p->errbuf) < 0)
659 ** We don't set promiscuous mode on the send FD, but we'll defer
660 ** binding it anyway, just to keep the HP-UX 9/10.20 or later
663 if (p->send_fd >= 0) {
665 ** XXX - if this fails, just close send_fd and
666 ** set it to -1, so that you can't send but can
669 if (dl_dohpuxbind(p->send_fd, p->errbuf) < 0)
675 ** Determine link type
676 ** XXX - get SAP length and address length as well, for use
677 ** when sending packets.
679 if (dlinforeq(p->fd, p->errbuf) < 0 ||
680 dlinfoack(p->fd, (char *)buf, p->errbuf) < 0)
683 infop = &(MAKE_DL_PRIMITIVES(buf))->info_ack;
684 if (pcap_process_mactype(p, infop->dl_mac_type) != 0)
689 ** This is a non standard SunOS hack to get the full raw link-layer
692 if (strioctl(p->fd, DLIOCRAW, 0, NULL) < 0) {
693 snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "DLIOCRAW: %s",
694 pcap_strerror(errno));
699 #ifdef HAVE_SYS_BUFMOD_H
703 ** There is a bug in bufmod(7). When dealing with messages of
704 ** less than snaplen size it strips data from the beginning not
707 ** This bug is fixed in 5.3.2. Also, there is a patch available.
708 ** Ask for bugid 1149065.
711 release = get_release(&osmajor, &osminor, &osmicro);
712 if (osmajor == 5 && (osminor <= 2 || (osminor == 3 && osmicro < 2)) &&
713 getenv("BUFMOD_FIXED") == NULL) {
714 snprintf(p->errbuf, PCAP_ERRBUF_SIZE,
715 "WARNING: bufmod is broken in SunOS %s; ignoring snaplen.",
718 status = PCAP_WARNING;
722 /* Push and configure bufmod. */
723 if (pcap_conf_bufmod(p, ss, p->md.timeout) != 0)
728 ** As the last operation flush the read side.
730 if (ioctl(p->fd, I_FLUSH, FLUSHR) != 0) {
731 snprintf(p->errbuf, PCAP_ERRBUF_SIZE, "FLUSHR: %s",
732 pcap_strerror(errno));
736 /* Allocate data buffer. */
737 if (pcap_alloc_databuf(p) != 0)
740 /* Success - but perhaps with a warning */
745 * "p->fd" is an FD for a STREAMS device, so "select()" and
746 * "poll()" should work on it.
748 p->selectable_fd = p->fd;
750 p->read_op = pcap_read_dlpi;
751 p->inject_op = pcap_inject_dlpi;
752 p->setfilter_op = install_bpf_program; /* no kernel filtering */
753 p->setdirection_op = NULL; /* Not implemented.*/
754 p->set_datalink_op = NULL; /* can't change data link type */
755 p->getnonblock_op = pcap_getnonblock_fd;
756 p->setnonblock_op = pcap_setnonblock_fd;
757 p->stats_op = pcap_stats_dlpi;
758 p->cleanup_op = pcap_cleanup_dlpi;
762 pcap_cleanup_dlpi(p);
767 * Split a device name into a device type name and a unit number;
768 * return the a pointer to the beginning of the unit number, which
769 * is the end of the device type name, and set "*unitp" to the unit
772 * Returns NULL on error, and fills "ebuf" with an error message.
775 split_dname(char *device, int *unitp, char *ebuf)
782 * Look for a number at the end of the device name string.
784 cp = device + strlen(device) - 1;
785 if (*cp < '0' || *cp > '9') {
786 snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s missing unit number",
791 /* Digits at end of string are unit number */
792 while (cp-1 >= device && *(cp-1) >= '0' && *(cp-1) <= '9')
796 unit = strtol(cp, &eos, 10);
798 snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s bad unit number", device);
801 if (errno == ERANGE || unit > INT_MAX) {
802 snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s unit number too large",
807 snprintf(ebuf, PCAP_ERRBUF_SIZE, "%s unit number is negative",
816 dl_doattach(int fd, int ppa, char *ebuf)
818 bpf_u_int32 buf[MAXDLBUF];
821 if (dlattachreq(fd, ppa, ebuf) < 0)
823 err = dlokack(fd, "attach", (char *)buf, ebuf);
831 dl_dohpuxbind(int fd, char *ebuf)
835 bpf_u_int32 buf[MAXDLBUF];
838 * XXX - we start at 22 because we used to use only 22, but
839 * that was just because that was the value used in some
840 * sample code from HP. With what value *should* we start?
841 * Does it matter, given that we're enabling SAP promiscuity
846 if (dlbindreq(fd, hpsap, ebuf) < 0)
848 if (dlbindack(fd, (char *)buf, ebuf, &uerror) >= 0)
851 * For any error other than a UNIX EBUSY, give up.
853 if (uerror != EBUSY) {
855 * dlbindack() has already filled in ebuf for
862 * For EBUSY, try the next SAP value; that means that
863 * somebody else is using that SAP. Clear ebuf so
864 * that application doesn't report the "Device busy"
865 * error as a warning.
871 "All SAPs from 22 through 100 are in use",
881 pcap_platform_finddevs(pcap_if_t **alldevsp, char *errbuf)
887 char pad[516]; /* XXX - must be at least 513; is 516
894 * We may have to do special magic to get ATM devices.
896 if ((fd = open("/dev/ba", O_RDWR)) < 0) {
898 * We couldn't open the "ba" device.
899 * For now, just give up; perhaps we should
900 * return an error if the problem is neither
901 * a "that device doesn't exist" error (ENOENT,
902 * ENXIO, etc.) or a "you're not allowed to do
903 * that" error (EPERM, EACCES).
908 if (strioctl(fd, A_GET_UNITS, sizeof(buf), (char *)&buf) < 0) {
909 snprintf(errbuf, PCAP_ERRBUF_SIZE, "A_GET_UNITS: %s",
910 pcap_strerror(errno));
913 for (i = 0; i < buf.nunits; i++) {
914 snprintf(baname, sizeof baname, "ba%u", i);
915 if (pcap_add_if(alldevsp, baname, 0, NULL, errbuf) < 0)
924 send_request(int fd, char *ptr, int len, char *what, char *ebuf)
934 if (putmsg(fd, &ctl, (struct strbuf *) NULL, flags) < 0) {
935 snprintf(ebuf, PCAP_ERRBUF_SIZE,
936 "send_request: putmsg \"%s\": %s",
937 what, pcap_strerror(errno));
944 recv_ack(int fd, int size, const char *what, char *bufp, char *ebuf, int *uerror)
946 union DL_primitives *dlp;
951 * Clear out "*uerror", so it's only set for DL_ERROR_ACK/DL_SYSERR,
952 * making that the only place where EBUSY is treated specially.
957 ctl.maxlen = MAXDLBUF;
962 if (getmsg(fd, &ctl, (struct strbuf*)NULL, &flags) < 0) {
963 snprintf(ebuf, PCAP_ERRBUF_SIZE, "recv_ack: %s getmsg: %s",
964 what, pcap_strerror(errno));
968 dlp = MAKE_DL_PRIMITIVES(ctl.buf);
969 switch (dlp->dl_primitive) {
981 switch (dlp->error_ack.dl_errno) {
985 *uerror = dlp->error_ack.dl_unix_errno;
986 snprintf(ebuf, PCAP_ERRBUF_SIZE,
987 "recv_ack: %s: UNIX error - %s",
988 what, pcap_strerror(dlp->error_ack.dl_unix_errno));
989 if (dlp->error_ack.dl_unix_errno == EACCES)
990 return (PCAP_ERROR_PERM_DENIED);
994 snprintf(ebuf, PCAP_ERRBUF_SIZE, "recv_ack: %s: %s",
995 what, dlstrerror(dlp->error_ack.dl_errno));
996 if (dlp->error_ack.dl_errno == DL_BADPPA)
997 return (PCAP_ERROR_NO_SUCH_DEVICE);
998 else if (dlp->error_ack.dl_errno == DL_ACCESS)
999 return (PCAP_ERROR_PERM_DENIED);
1002 return (PCAP_ERROR);
1005 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1006 "recv_ack: %s: Unexpected primitive ack %s",
1007 what, dlprim(dlp->dl_primitive));
1008 return (PCAP_ERROR);
1011 if (ctl.len < size) {
1012 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1013 "recv_ack: %s: Ack too small (%d < %d)",
1014 what, ctl.len, size);
1015 return (PCAP_ERROR);
1021 dlstrerror(bpf_u_int32 dl_errno)
1023 static char errstring[6+2+8+1];
1028 return ("Improper permissions for request");
1031 return ("DLSAP addr in improper format or invalid");
1034 return ("Seq number not from outstand DL_CONN_IND");
1037 return ("User data exceeded provider limit");
1040 #ifdef HAVE_DEV_DLPI
1042 * With a single "/dev/dlpi" device used for all
1043 * DLPI providers, PPAs have nothing to do with
1046 return ("Specified PPA was invalid");
1049 * We have separate devices for separate devices;
1050 * the PPA is just the unit number.
1052 return ("Specified PPA (device unit) was invalid");
1056 return ("Primitive received not known by provider");
1058 case DL_BADQOSPARAM:
1059 return ("QOS parameters contained invalid values");
1062 return ("QOS structure type is unknown/unsupported");
1065 return ("Bad LSAP selector");
1068 return ("Token used not an active stream");
1071 return ("Attempted second bind with dl_max_conind");
1074 return ("Physical link initialization failed");
1077 return ("Provider couldn't allocate alternate address");
1080 return ("Physical link not initialized");
1083 return ("Primitive issued in improper state");
1086 return ("UNIX system error occurred");
1088 case DL_UNSUPPORTED:
1089 return ("Requested service not supplied by provider");
1091 case DL_UNDELIVERABLE:
1092 return ("Previous data unit could not be delivered");
1094 case DL_NOTSUPPORTED:
1095 return ("Primitive is known but not supported");
1098 return ("Limit exceeded");
1101 return ("Promiscuous mode not enabled");
1104 return ("Other streams for PPA in post-attached");
1107 return ("Automatic handling XID&TEST not supported");
1110 return ("Automatic handling of XID not supported");
1113 return ("Automatic handling of TEST not supported");
1116 return ("Automatic handling of XID response");
1119 return ("Automatic handling of TEST response");
1122 return ("Pending outstanding connect indications");
1125 sprintf(errstring, "Error %02x", dl_errno);
1131 dlprim(bpf_u_int32 prim)
1133 static char primbuf[80];
1138 return ("DL_INFO_REQ");
1141 return ("DL_INFO_ACK");
1144 return ("DL_ATTACH_REQ");
1147 return ("DL_DETACH_REQ");
1150 return ("DL_BIND_REQ");
1153 return ("DL_BIND_ACK");
1156 return ("DL_UNBIND_REQ");
1159 return ("DL_OK_ACK");
1162 return ("DL_ERROR_ACK");
1164 case DL_SUBS_BIND_REQ:
1165 return ("DL_SUBS_BIND_REQ");
1167 case DL_SUBS_BIND_ACK:
1168 return ("DL_SUBS_BIND_ACK");
1170 case DL_UNITDATA_REQ:
1171 return ("DL_UNITDATA_REQ");
1173 case DL_UNITDATA_IND:
1174 return ("DL_UNITDATA_IND");
1176 case DL_UDERROR_IND:
1177 return ("DL_UDERROR_IND");
1180 return ("DL_UDQOS_REQ");
1182 case DL_CONNECT_REQ:
1183 return ("DL_CONNECT_REQ");
1185 case DL_CONNECT_IND:
1186 return ("DL_CONNECT_IND");
1188 case DL_CONNECT_RES:
1189 return ("DL_CONNECT_RES");
1191 case DL_CONNECT_CON:
1192 return ("DL_CONNECT_CON");
1195 return ("DL_TOKEN_REQ");
1198 return ("DL_TOKEN_ACK");
1200 case DL_DISCONNECT_REQ:
1201 return ("DL_DISCONNECT_REQ");
1203 case DL_DISCONNECT_IND:
1204 return ("DL_DISCONNECT_IND");
1207 return ("DL_RESET_REQ");
1210 return ("DL_RESET_IND");
1213 return ("DL_RESET_RES");
1216 return ("DL_RESET_CON");
1219 (void) sprintf(primbuf, "unknown primitive 0x%x", prim);
1225 dlattachreq(int fd, bpf_u_int32 ppa, char *ebuf)
1227 dl_attach_req_t req;
1229 req.dl_primitive = DL_ATTACH_REQ;
1232 return (send_request(fd, (char *)&req, sizeof(req), "attach", ebuf));
1236 dlbindreq(int fd, bpf_u_int32 sap, char *ebuf)
1241 memset((char *)&req, 0, sizeof(req));
1242 req.dl_primitive = DL_BIND_REQ;
1243 /* XXX - what if neither of these are defined? */
1244 #if defined(DL_HP_RAWDLS)
1245 req.dl_max_conind = 1; /* XXX magic number */
1246 req.dl_service_mode = DL_HP_RAWDLS;
1247 #elif defined(DL_CLDLS)
1248 req.dl_service_mode = DL_CLDLS;
1252 return (send_request(fd, (char *)&req, sizeof(req), "bind", ebuf));
1256 dlbindack(int fd, char *bufp, char *ebuf, int *uerror)
1259 return (recv_ack(fd, DL_BIND_ACK_SIZE, "bind", bufp, ebuf, uerror));
1263 dlpromisconreq(int fd, bpf_u_int32 level, char *ebuf)
1265 dl_promiscon_req_t req;
1267 req.dl_primitive = DL_PROMISCON_REQ;
1268 req.dl_level = level;
1270 return (send_request(fd, (char *)&req, sizeof(req), "promiscon", ebuf));
1274 dlokack(int fd, const char *what, char *bufp, char *ebuf)
1277 return (recv_ack(fd, DL_OK_ACK_SIZE, what, bufp, ebuf, NULL));
1282 dlinforeq(int fd, char *ebuf)
1286 req.dl_primitive = DL_INFO_REQ;
1288 return (send_request(fd, (char *)&req, sizeof(req), "info", ebuf));
1292 dlinfoack(int fd, char *bufp, char *ebuf)
1295 return (recv_ack(fd, DL_INFO_ACK_SIZE, "info", bufp, ebuf, NULL));
1298 #ifdef HAVE_DLPI_PASSIVE
1300 * Enable DLPI passive mode. We do not care if this request fails, as this
1301 * indicates the underlying DLPI device does not support link aggregation.
1304 dlpassive(int fd, char *ebuf)
1306 dl_passive_req_t req;
1307 bpf_u_int32 buf[MAXDLBUF];
1309 req.dl_primitive = DL_PASSIVE_REQ;
1311 if (send_request(fd, (char *)&req, sizeof(req), "dlpassive", ebuf) == 0)
1312 (void) dlokack(fd, "dlpassive", (char *)buf, ebuf);
1318 * There's an ack *if* there's an error.
1321 dlrawdatareq(int fd, const u_char *datap, int datalen)
1323 struct strbuf ctl, data;
1324 long buf[MAXDLBUF]; /* XXX - char? */
1325 union DL_primitives *dlp;
1328 dlp = MAKE_DL_PRIMITIVES(buf);
1330 dlp->dl_primitive = DL_HP_RAWDATA_REQ;
1331 dlen = DL_HP_RAWDATA_REQ_SIZE;
1334 * HP's documentation doesn't appear to show us supplying any
1335 * address pointed to by the control part of the message.
1336 * I think that's what raw mode means - you just send the raw
1337 * packet, you don't specify where to send it to, as that's
1338 * implied by the destination address.
1342 ctl.buf = (void *)buf;
1346 data.buf = (void *)datap;
1348 return (putmsg(fd, &ctl, &data, 0));
1350 #endif /* DL_HP_RAWDLS */
1352 #if defined(HAVE_SOLARIS) && defined(HAVE_SYS_BUFMOD_H)
1354 get_release(bpf_u_int32 *majorp, bpf_u_int32 *minorp, bpf_u_int32 *microp)
1357 static char buf[32];
1362 if (sysinfo(SI_RELEASE, buf, sizeof(buf)) < 0)
1365 if (!isdigit((unsigned char)*cp))
1367 *majorp = strtol(cp, &cp, 10);
1370 *minorp = strtol(cp, &cp, 10);
1373 *microp = strtol(cp, &cp, 10);
1378 #ifdef DL_HP_PPA_REQ
1380 * Under HP-UX 10 and HP-UX 11, we can ask for the ppa
1385 * Determine ppa number that specifies ifname.
1387 * If the "dl_hp_ppa_info_t" doesn't have a "dl_module_id_1" member,
1388 * the code that's used here is the old code for HP-UX 10.x.
1390 * However, HP-UX 10.20, at least, appears to have such a member
1391 * in its "dl_hp_ppa_info_t" structure, so the new code is used.
1392 * The new code didn't work on an old 10.20 system on which Rick
1393 * Jones of HP tried it, but with later patches installed, it
1394 * worked - it appears that the older system had those members but
1395 * didn't put anything in them, so, if the search by name fails, we
1396 * do the old search.
1398 * Rick suggests that making sure your system is "up on the latest
1399 * lancommon/DLPI/driver patches" is probably a good idea; it'd fix
1400 * that problem, as well as allowing libpcap to see packets sent
1401 * from the system on which the libpcap application is being run.
1402 * (On 10.20, in addition to getting the latest patches, you need
1403 * to turn the kernel "lanc_outbound_promisc_flag" flag on with ADB;
1404 * a posting to "comp.sys.hp.hpux" at
1406 * http://www.deja.com/[ST_rn=ps]/getdoc.xp?AN=558092266
1408 * says that, to see the machine's outgoing traffic, you'd need to
1409 * apply the right patches to your system, and also set that variable
1412 echo 'lanc_outbound_promisc_flag/W1' | /usr/bin/adb -w /stand/vmunix /dev/kmem
1414 * which could be put in, for example, "/sbin/init.d/lan".
1416 * Setting the variable is not necessary on HP-UX 11.x.
1419 get_dlpi_ppa(register int fd, register const char *device, register int unit,
1420 register char *ebuf)
1422 register dl_hp_ppa_ack_t *ap;
1423 register dl_hp_ppa_info_t *ipstart, *ip;
1426 register u_long majdev;
1427 struct stat statbuf;
1428 dl_hp_ppa_req_t req;
1431 dl_hp_ppa_ack_t *dlp;
1436 memset((char *)&req, 0, sizeof(req));
1437 req.dl_primitive = DL_HP_PPA_REQ;
1439 memset((char *)buf, 0, sizeof(buf));
1440 if (send_request(fd, (char *)&req, sizeof(req), "hpppa", ebuf) < 0)
1441 return (PCAP_ERROR);
1443 ctl.maxlen = DL_HP_PPA_ACK_SIZE;
1445 ctl.buf = (char *)buf;
1449 * DLPI may return a big chunk of data for a DL_HP_PPA_REQ. The normal
1450 * recv_ack will fail because it set the maxlen to MAXDLBUF (8192)
1451 * which is NOT big enough for a DL_HP_PPA_REQ.
1453 * This causes libpcap applications to fail on a system with HP-APA
1456 * To figure out how big the returned data is, we first call getmsg
1457 * to get the small head and peek at the head to get the actual data
1458 * length, and then issue another getmsg to get the actual PPA data.
1460 /* get the head first */
1461 if (getmsg(fd, &ctl, (struct strbuf *)NULL, &flags) < 0) {
1462 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1463 "get_dlpi_ppa: hpppa getmsg: %s", pcap_strerror(errno));
1464 return (PCAP_ERROR);
1467 dlp = (dl_hp_ppa_ack_t *)ctl.buf;
1468 if (dlp->dl_primitive != DL_HP_PPA_ACK) {
1469 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1470 "get_dlpi_ppa: hpppa unexpected primitive ack 0x%x",
1471 (bpf_u_int32)dlp->dl_primitive);
1472 return (PCAP_ERROR);
1475 if (ctl.len < DL_HP_PPA_ACK_SIZE) {
1476 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1477 "get_dlpi_ppa: hpppa ack too small (%d < %lu)",
1478 ctl.len, (unsigned long)DL_HP_PPA_ACK_SIZE);
1479 return (PCAP_ERROR);
1482 /* allocate buffer */
1483 if ((ppa_data_buf = (char *)malloc(dlp->dl_length)) == NULL) {
1484 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1485 "get_dlpi_ppa: hpppa malloc: %s", pcap_strerror(errno));
1486 return (PCAP_ERROR);
1488 ctl.maxlen = dlp->dl_length;
1490 ctl.buf = (char *)ppa_data_buf;
1492 if (getmsg(fd, &ctl, (struct strbuf *)NULL, &flags) < 0) {
1493 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1494 "get_dlpi_ppa: hpppa getmsg: %s", pcap_strerror(errno));
1496 return (PCAP_ERROR);
1498 if (ctl.len < dlp->dl_length) {
1499 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1500 "get_dlpi_ppa: hpppa ack too small (%d < %lu)",
1501 ctl.len, (unsigned long)dlp->dl_length);
1503 return (PCAP_ERROR);
1506 ap = (dl_hp_ppa_ack_t *)buf;
1507 ipstart = (dl_hp_ppa_info_t *)ppa_data_buf;
1510 #ifdef HAVE_HP_PPA_INFO_T_DL_MODULE_ID_1
1512 * The "dl_hp_ppa_info_t" structure has a "dl_module_id_1"
1513 * member that should, in theory, contain the part of the
1514 * name for the device that comes before the unit number,
1515 * and should also have a "dl_module_id_2" member that may
1516 * contain an alternate name (e.g., I think Ethernet devices
1517 * have both "lan", for "lanN", and "snap", for "snapN", with
1518 * the former being for Ethernet packets and the latter being
1519 * for 802.3/802.2 packets).
1521 * Search for the device that has the specified name and
1524 for (i = 0; i < ap->dl_count; i++) {
1525 if ((strcmp((const char *)ip->dl_module_id_1, device) == 0 ||
1526 strcmp((const char *)ip->dl_module_id_2, device) == 0) &&
1527 ip->dl_instance_num == unit)
1530 ip = (dl_hp_ppa_info_t *)((u_char *)ipstart + ip->dl_next_offset);
1534 * We don't have that member, so the search is impossible; make it
1535 * look as if the search failed.
1540 if (i == ap->dl_count) {
1542 * Well, we didn't, or can't, find the device by name.
1544 * HP-UX 10.20, whilst it has "dl_module_id_1" and
1545 * "dl_module_id_2" fields in the "dl_hp_ppa_info_t",
1546 * doesn't seem to fill them in unless the system is
1547 * at a reasonably up-to-date patch level.
1549 * Older HP-UX 10.x systems might not have those fields
1552 * Therefore, we'll search for the entry with the major
1553 * device number of a device with the name "/dev/<dev><unit>",
1554 * if such a device exists, as the old code did.
1556 snprintf(dname, sizeof(dname), "/dev/%s%d", device, unit);
1557 if (stat(dname, &statbuf) < 0) {
1558 snprintf(ebuf, PCAP_ERRBUF_SIZE, "stat: %s: %s",
1559 dname, pcap_strerror(errno));
1560 return (PCAP_ERROR);
1562 majdev = major(statbuf.st_rdev);
1566 for (i = 0; i < ap->dl_count; i++) {
1567 if (ip->dl_mjr_num == majdev &&
1568 ip->dl_instance_num == unit)
1571 ip = (dl_hp_ppa_info_t *)((u_char *)ipstart + ip->dl_next_offset);
1574 if (i == ap->dl_count) {
1575 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1576 "can't find /dev/dlpi PPA for %s%d", device, unit);
1577 return (PCAP_ERROR_NO_SUCH_DEVICE);
1579 if (ip->dl_hdw_state == HDW_DEAD) {
1580 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1581 "%s%d: hardware state: DOWN\n", device, unit);
1583 return (PCAP_ERROR);
1593 * Under HP-UX 9, there is no good way to determine the ppa.
1594 * So punt and read it from /dev/kmem.
1596 static struct nlist nl[] = {
1602 static char path_vmunix[] = "/hp-ux";
1604 /* Determine ppa number that specifies ifname */
1606 get_dlpi_ppa(register int fd, register const char *ifname, register int unit,
1607 register char *ebuf)
1609 register const char *cp;
1613 char if_name[sizeof(ifnet.if_name) + 1];
1615 cp = strrchr(ifname, '/');
1618 if (nlist(path_vmunix, &nl) < 0) {
1619 snprintf(ebuf, PCAP_ERRBUF_SIZE, "nlist %s failed",
1623 if (nl[NL_IFNET].n_value == 0) {
1624 snprintf(ebuf, PCAP_ERRBUF_SIZE,
1625 "could't find %s kernel symbol",
1626 nl[NL_IFNET].n_name);
1629 kd = open("/dev/kmem", O_RDONLY);
1631 snprintf(ebuf, PCAP_ERRBUF_SIZE, "kmem open: %s",
1632 pcap_strerror(errno));
1635 if (dlpi_kread(kd, nl[NL_IFNET].n_value,
1636 &addr, sizeof(addr), ebuf) < 0) {
1640 for (; addr != NULL; addr = ifnet.if_next) {
1641 if (dlpi_kread(kd, (off_t)addr,
1642 &ifnet, sizeof(ifnet), ebuf) < 0 ||
1643 dlpi_kread(kd, (off_t)ifnet.if_name,
1644 if_name, sizeof(ifnet.if_name), ebuf) < 0) {
1648 if_name[sizeof(ifnet.if_name)] = '\0';
1649 if (strcmp(if_name, ifname) == 0 && ifnet.if_unit == unit)
1650 return (ifnet.if_index);
1653 snprintf(ebuf, PCAP_ERRBUF_SIZE, "Can't find %s", ifname);
1658 dlpi_kread(register int fd, register off_t addr,
1659 register void *buf, register u_int len, register char *ebuf)
1663 if (lseek(fd, addr, SEEK_SET) < 0) {
1664 snprintf(ebuf, PCAP_ERRBUF_SIZE, "lseek: %s",
1665 pcap_strerror(errno));
1668 cc = read(fd, buf, len);
1670 snprintf(ebuf, PCAP_ERRBUF_SIZE, "read: %s",
1671 pcap_strerror(errno));
1673 } else if (cc != len) {
1674 snprintf(ebuf, PCAP_ERRBUF_SIZE, "short read (%d != %d)", cc,
1683 pcap_create(const char *device, char *ebuf)
1687 p = pcap_create_common(device, ebuf);
1691 p->send_fd = -1; /* it hasn't been opened yet */
1693 p->activate_op = pcap_activate_dlpi;