3 # SPDX-License-Identifier: BSD-2-Clause
5 # Copyright (c) 2019 Netflix, Inc.
7 # Redistribution and use in source and binary forms, with or without
8 # modification, are permitted provided that the following conditions
10 # 1. Redistributions of source code must retain the above copyright
11 # notice, this list of conditions and the following disclaimer.
12 # 2. Redistributions in binary form must reproduce the above copyright
13 # notice, this list of conditions and the following disclaimer in the
14 # documentation and/or other materials provided with the distribution.
16 # THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
17 # ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
18 # IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
19 # ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
20 # FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
21 # DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
22 # OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
23 # HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
24 # LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
25 # OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
29 . $(atf_get_srcdir)/frag6.subr
37 "") echo "ERROR: jname is empty"; return ;;
40 # Accept 3 fragments per fragmented packet.
41 jexec ${jname} sysctl net.inet6.ip6.maxfragsperpacket=3
45 frag6_15_check_stats() {
52 "") echo "ERROR: jname is empty"; return ;;
55 "") echo "ERROR: ifname is empty"; return ;;
58 # Defaults are: IPV6_FRAGTTL 120 slowtimo ticks.
59 # pfslowtimo() is run at hz/2. So this takes 60s.
60 # This is awefully long for a test case.
61 # The Python script has to wait for this already to get the ICMPv6
62 # hence we do not sleep here anymore.
64 nf=`jexec ${jname} sysctl -n net.inet6.ip6.frag6_nfragpackets`
67 *) atf_fail "VNET frag6_nfragpackets not 0 but: ${nf}" ;;
69 nf=`sysctl -n net.inet6.ip6.frag6_nfrags`
72 *) atf_fail "Global frag6_nfrags not 0 but: ${nf}" ;;
76 # Check that the sysctl is set to what we expect.
78 sn=`jexec ${jname} sysctl -n net.inet6.ip6.maxfragsperpacket`
81 *) atf_fail "Sysctl net.inet6.ip6.maxfragsperpacket is ${sn} and not 3" ;;
85 # Check selection of global UDP stats.
87 cat <<EOF > ${HOME}/filter-${jname}.txt
88 <received-datagrams>0</received-datagrams>
89 <dropped-incomplete-headers>0</dropped-incomplete-headers>
90 <dropped-bad-data-length>0</dropped-bad-data-length>
91 <dropped-bad-checksum>0</dropped-bad-checksum>
92 <dropped-no-checksum>0</dropped-no-checksum>
93 <dropped-no-socket>0</dropped-no-socket>
94 <dropped-broadcast-multicast>0</dropped-broadcast-multicast>
95 <dropped-full-socket-buffer>0</dropped-full-socket-buffer>
96 <not-for-hashed-pcb>0</not-for-hashed-pcb>
98 count=`jexec ${jname} netstat -s -p udp --libxo xml,pretty | grep -E -x -c -f ${HOME}/filter-${jname}.txt`
99 rm -f ${HOME}/filter-${jname}.txt
102 *) jexec ${jname} netstat -s -p udp --libxo xml,pretty
103 atf_fail "Global UDP statistics do not match: ${count} != 9" ;;
108 # Check selection of global IPv6 stats.
110 cat <<EOF > ${HOME}/filter-${jname}.txt
111 <dropped-below-minimum-size>0</dropped-below-minimum-size>
112 <dropped-short-packets>0</dropped-short-packets>
113 <dropped-bad-options>0</dropped-bad-options>
114 <dropped-bad-version>0</dropped-bad-version>
115 <received-fragments>8</received-fragments>
116 <dropped-fragment>8</dropped-fragment>
117 <dropped-fragment-after-timeout>0</dropped-fragment-after-timeout>
118 <dropped-fragments-overflow>0</dropped-fragments-overflow>
119 <atomic-fragments>0</atomic-fragments>
120 <reassembled-packets>0</reassembled-packets>
121 <forwarded-packets>0</forwarded-packets>
122 <packets-not-forwardable>0</packets-not-forwardable>
123 <sent-redirects>0</sent-redirects>
124 <send-packets-fabricated-header>0</send-packets-fabricated-header>
125 <discard-no-mbufs>0</discard-no-mbufs>
126 <discard-no-route>0</discard-no-route>
127 <sent-fragments>0</sent-fragments>
128 <fragments-created>0</fragments-created>
129 <discard-cannot-fragment>0</discard-cannot-fragment>
130 <discard-scope-violations>0</discard-scope-violations>
132 count=`jexec ${jname} netstat -s -p ip6 --libxo xml,pretty | grep -E -x -c -f ${HOME}/filter-${jname}.txt`
133 rm -f ${HOME}/filter-${jname}.txt
136 *) jexec ${jname} netstat -s -p ip6 --libxo xml,pretty
137 atf_fail "Global IPv6 statistics do not match: ${count} != 20" ;;
141 # Check selection of global ICMPv6 stats.
142 # XXX-TODO check output histogram (just too hard to parse [no multi-line-grep])
144 cat <<EOF > ${HOME}/filter-${jname}.txt
145 <icmp6-calls>1</icmp6-calls>
146 <no-route>0</no-route>
147 <admin-prohibited>0</admin-prohibited>
148 <beyond-scope>0</beyond-scope>
149 <address-unreachable>0</address-unreachable>
150 <port-unreachable>0</port-unreachable>
151 <packet-too-big>0</packet-too-big>
152 <time-exceed-transmit>0</time-exceed-transmit>
153 <time-exceed-reassembly>1</time-exceed-reassembly>
154 <bad-header>0</bad-header>
155 <bad-next-header>0</bad-next-header>
156 <bad-option>0</bad-option>
157 <redirects>0</redirects>
160 <too-many-nd-options>0</too-many-nd-options>
161 <bad-nd-options>0</bad-nd-options>
162 <bad-neighbor-solicitation>0</bad-neighbor-solicitation>
163 <bad-neighbor-advertisement>0</bad-neighbor-advertisement>
164 <bad-router-solicitation>0</bad-router-solicitation>
165 <bad-router-advertisement>0</bad-router-advertisement>
166 <bad-redirect>0</bad-redirect>
168 count=`jexec ${jname} netstat -s -p icmp6 --libxo xml,pretty | grep -E -x -c -f ${HOME}/filter-${jname}.txt`
169 rm -f ${HOME}/filter-${jname}.txt
172 *) jexec ${jname} netstat -s -p icmp6 --libxo xml,pretty
173 atf_fail "Global ICMPv6 statistics do not match: ${count} != 22" ;;
177 # Check selection of interface IPv6 stats.
178 # XXX-BZ no reassembly failed stats.#
180 cat <<EOF > ${HOME}/filter-${jname}.txt
181 <dropped-invalid-header>0</dropped-invalid-header>
182 <dropped-mtu-exceeded>0</dropped-mtu-exceeded>
183 <dropped-no-route>0</dropped-no-route>
184 <dropped-invalid-destination>0</dropped-invalid-destination>
185 <dropped-unknown-protocol>0</dropped-unknown-protocol>
186 <dropped-truncated>0</dropped-truncated>
187 <sent-forwarded>0</sent-forwarded>
188 <discard-packets>0</discard-packets>
189 <discard-fragments>0</discard-fragments>
190 <fragments-failed>0</fragments-failed>
191 <fragments-created>0</fragments-created>
192 <reassembly-required>8</reassembly-required>
193 <reassembled-packets>0</reassembled-packets>
194 <reassembly-failed>0</reassembly-failed>
196 count=`jexec ${jname} netstat -s -p ip6 -I ${ifname} --libxo xml,pretty | grep -E -x -c -f ${HOME}/filter-${jname}.txt`
197 rm -f ${HOME}/filter-${jname}.txt
200 *) jexec ${jname} netstat -s -p ip6 -I ${ifname} --libxo xml,pretty
201 atf_fail "Interface IPv6 statistics do not match: ${count} != 14" ;;
205 # Check selection of interface ICMPv6 stats.
207 cat <<EOF > ${HOME}/filter-${jname}.txt
208 <received-errors>0</received-errors>
209 <received-destination-unreachable>0</received-destination-unreachable>
210 <received-admin-prohibited>0</received-admin-prohibited>
211 <received-time-exceeded>0</received-time-exceeded>
212 <received-bad-parameter>0</received-bad-parameter>
213 <received-packet-too-big>0</received-packet-too-big>
214 <received-echo-requests>0</received-echo-requests>
215 <received-echo-replies>0</received-echo-replies>
216 <received-router-solicitation>0</received-router-solicitation>
217 <received-router-advertisement>0</received-router-advertisement>
218 <sent-errors>1</sent-errors>
219 <sent-destination-unreachable>0</sent-destination-unreachable>
220 <sent-admin-prohibited>0</sent-admin-prohibited>
221 <sent-time-exceeded>1</sent-time-exceeded>
222 <sent-bad-parameter>0</sent-bad-parameter>
223 <sent-packet-too-big>0</sent-packet-too-big>
224 <sent-echo-requests>0</sent-echo-requests>
225 <sent-echo-replies>0</sent-echo-replies>
226 <sent-router-solicitation>0</sent-router-solicitation>
227 <sent-router-advertisement>0</sent-router-advertisement>
228 <sent-redirects>0</sent-redirects>
230 count=`jexec ${jname} netstat -s -p icmp6 -I ${ifname} --libxo xml,pretty | grep -E -x -c -f ${HOME}/filter-${jname}.txt`
231 rm -f ${HOME}/filter-${jname}.txt
234 *) jexec ${jname} netstat -s -p icmp6 -I ${ifname} --libxo xml,pretty
235 atf_fail "Interface ICMPv6 statistics do not match: ${count} != 21" ;;
239 atf_test_case "frag6_15" "cleanup"
245 frag6_body 15 frag6_15_check_stats frag6_15_pre_test
251 # No need to restore the sysctl back to default as the jail is gone.
254 atf_init_test_cases()
256 atf_add_test_case "frag6_15"