2 * Copyright (c) 2002-2007 Sam Leffler, Errno Consulting
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
8 * 1. Redistributions of source code must retain the above copyright
9 * notice, this list of conditions and the following disclaimer,
10 * without modification.
11 * 2. Redistributions in binary form must reproduce at minimum a disclaimer
12 * similar to the "NO WARRANTY" disclaimer below ("Disclaimer") and any
13 * redistribution must be conditioned upon including a substantially
14 * similar Disclaimer requirement for further binary redistribution.
17 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
18 * ``AS IS'' AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
19 * LIMITED TO, THE IMPLIED WARRANTIES OF NONINFRINGEMENT, MERCHANTIBILITY
20 * AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL
21 * THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE FOR SPECIAL, EXEMPLARY,
22 * OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
23 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
24 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER
25 * IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
26 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF
27 * THE POSSIBILITY OF SUCH DAMAGES.
33 * Monitor 802.11 events using a routing socket.
34 * Code liberaly swiped from route(8).
36 #include <sys/param.h>
38 #include <sys/socket.h>
39 #include <sys/ioctl.h>
40 #include <sys/sysctl.h>
41 #include <sys/types.h>
44 #include <net/route.h>
45 #include <net/if_dl.h>
46 #include <netinet/in.h>
47 #include <netinet/if_ether.h>
49 #include <net80211/ieee80211_netbsd.h>
51 #include <net80211/ieee80211_freebsd.h>
53 #error "No support for your operating system!"
55 #include <arpa/inet.h>
70 enum ieee80211_notify_cac_event {
71 IEEE80211_NOTIFY_CAC_START = 0, /* CAC timer started */
72 IEEE80211_NOTIFY_CAC_STOP = 1, /* CAC intentionally stopped */
73 IEEE80211_NOTIFY_CAC_RADAR = 2, /* CAC stopped due to radar detectio */
74 IEEE80211_NOTIFY_CAC_EXPIRE = 3, /* CAC expired w/o radar */
77 static void print_rtmsg(struct rt_msghdr *rtm, int msglen);
82 main(int argc, char *argv[])
87 s = socket(PF_ROUTE, SOCK_RAW, 0);
89 err(EX_OSERR, "socket");
91 n = read(s, msg, 2048);
92 print_rtmsg((struct rt_msghdr *)msg, n);
98 bprintf(FILE *fp, int b, char *s)
105 while ((i = *s++) != 0) {
106 if (b & (1 << (i-1))) {
113 for (; (i = *s) > 32; s++)
124 "\011pksent\010rttvar\7rtt\6ssthresh\5sendpipe\4recvpipe\3expire\2hopcount"
127 "\1UP\2GATEWAY\3HOST\4REJECT\5DYNAMIC\6MODIFIED\7DONE\010MASK_PRESENT"
128 "\011CLONING\012XRESOLVE\013LLINFO\014STATIC\015BLACKHOLE\016b016"
129 "\017PROTO2\020PROTO1\021PRCLONING\022WASCLONED\023PROTO3\024CHAINDELETE"
130 "\025PINNED\026LOCAL\027BROADCAST\030MULTICAST";
132 "\1UP\2BROADCAST\3DEBUG\4LOOPBACK\5PTP\6b6\7RUNNING\010NOARP"
133 "\011PPROMISC\012ALLMULTI\013OACTIVE\014SIMPLEX\015LINK0\016LINK1"
134 "\017LINK2\020MULTICAST";
136 "\1DST\2GATEWAY\3NETMASK\4GENMASK\5IFP\6IFA\7AUTHOR\010BRD";
139 routename(struct sockaddr *sa)
142 static char line[MAXHOSTNAMELEN + 1];
144 static char domain[MAXHOSTNAMELEN + 1];
145 static int first = 1, n;
149 if (gethostname(domain, MAXHOSTNAMELEN) == 0 &&
150 (cp = strchr(domain, '.'))) {
151 domain[MAXHOSTNAMELEN] = '\0';
152 (void) strcpy(domain, cp + 1);
158 strcpy(line, "default");
159 else switch (sa->sa_family) {
163 in = ((struct sockaddr_in *)sa)->sin_addr;
166 if (in.s_addr == INADDR_ANY || sa->sa_len < 4)
168 if (cp == 0 && !nflag) {
169 hp = gethostbyaddr((char *)&in, sizeof (struct in_addr),
172 if ((cp = strchr(hp->h_name, '.')) &&
173 !strcmp(cp + 1, domain))
179 strncpy(line, cp, sizeof(line) - 1);
180 line[sizeof(line) - 1] = '\0';
182 (void) sprintf(line, "%s", inet_ntoa(in));
189 struct sockaddr_in6 sin6; /* use static var for safety */
191 #ifdef NI_WITHSCOPEID
192 niflags = NI_WITHSCOPEID;
195 memset(&sin6, 0, sizeof(sin6));
196 memcpy(&sin6, sa, sa->sa_len);
197 sin6.sin6_len = sizeof(struct sockaddr_in6);
198 sin6.sin6_family = AF_INET6;
200 if (sa->sa_len == sizeof(struct sockaddr_in6) &&
201 (IN6_IS_ADDR_LINKLOCAL(&sin6.sin6_addr) ||
202 IN6_IS_ADDR_MC_LINKLOCAL(&sin6.sin6_addr)) &&
203 sin6.sin6_scope_id == 0) {
205 ntohs(*(u_int16_t *)&sin6.sin6_addr.s6_addr[2]);
206 sin6.sin6_addr.s6_addr[2] = 0;
207 sin6.sin6_addr.s6_addr[3] = 0;
211 niflags |= NI_NUMERICHOST;
212 if (getnameinfo((struct sockaddr *)&sin6, sin6.sin6_len,
213 line, sizeof(line), NULL, 0, niflags) != 0)
214 strncpy(line, "invalid", sizeof(line));
221 return (link_ntoa((struct sockaddr_dl *)sa));
224 { u_short *s = (u_short *)sa;
225 u_short *slim = s + ((sa->sa_len + 1) >> 1);
226 char *cp = line + sprintf(line, "(%d)", sa->sa_family);
227 char *cpe = line + sizeof(line);
229 while (++s < slim && cp < cpe) /* start with sa->sa_data */
230 if ((n = snprintf(cp, cpe - cp, " %x", *s)) > 0)
242 * This macro returns the size of a struct sockaddr when passed
243 * through a routing socket. Basically we round up sa_len to
244 * a multiple of sizeof(long), with a minimum of sizeof(long).
245 * The check for a NULL pointer is just a convenience, probably never used.
246 * The case sa_len == 0 should only apply to empty structures.
248 #define SA_SIZE(sa) \
249 ( (!(sa) || ((struct sockaddr *)(sa))->sa_len == 0) ? \
251 1 + ( (((struct sockaddr *)(sa))->sa_len - 1) | (sizeof(long) - 1) ) )
255 pmsg_addrs(char *cp, int addrs)
261 (void) putchar('\n');
264 printf("\nsockaddrs: ");
265 bprintf(stdout, addrs, addrnames);
267 for (i = 1; i; i <<= 1)
269 sa = (struct sockaddr *)cp;
270 printf(" %s", routename(sa));
277 ether_sprintf(const uint8_t mac[6])
281 snprintf(buf, sizeof(buf), "%02x:%02x:%02x:%02x:%02x:%02x",
282 mac[0], mac[1], mac[2], mac[3], mac[4], mac[5]);
287 print_rtmsg(struct rt_msghdr *rtm, int msglen)
289 struct if_msghdr *ifm;
290 struct if_announcemsghdr *ifan;
291 time_t now = time(NULL);
292 char *cnow = ctime(&now);
294 if (rtm->rtm_version != RTM_VERSION) {
295 (void) printf("routing message version %d not understood\n",
299 switch (rtm->rtm_type) {
301 ifm = (struct if_msghdr *)rtm;
302 printf("%.19s RTM_IFINFO: if# %d, ",
303 cnow, ifm->ifm_index);
304 switch (ifm->ifm_data.ifi_link_state) {
305 case LINK_STATE_DOWN:
306 printf("link: down, flags:");
309 printf("link: up, flags:");
312 printf("link: unknown<%d>, flags:",
313 ifm->ifm_data.ifi_link_state);
316 bprintf(stdout, ifm->ifm_flags, ifnetflags);
317 pmsg_addrs((char *)(ifm + 1), ifm->ifm_addrs);
321 ifan = (struct if_announcemsghdr *)rtm;
322 printf("%.19s RTM_IFANNOUNCE: if# %d, what: ",
323 cnow, ifan->ifan_index);
324 switch (ifan->ifan_what) {
332 printf("#%d", ifan->ifan_what);
339 #define V(type) ((struct type *)(&ifan[1]))
340 ifan = (struct if_announcemsghdr *)rtm;
341 printf("%.19s RTM_IEEE80211: if# %d, ", cnow, ifan->ifan_index);
342 switch (ifan->ifan_what) {
343 case RTM_IEEE80211_ASSOC:
344 printf("associate with %s",
345 ether_sprintf(V(ieee80211_join_event)->iev_addr));
347 case RTM_IEEE80211_REASSOC:
348 printf("reassociate with %s",
349 ether_sprintf(V(ieee80211_join_event)->iev_addr));
351 case RTM_IEEE80211_DISASSOC:
352 printf("disassociate");
354 case RTM_IEEE80211_JOIN:
355 case RTM_IEEE80211_REJOIN:
356 printf("%s station %sjoin",
357 ether_sprintf(V(ieee80211_join_event)->iev_addr),
358 ifan->ifan_what == RTM_IEEE80211_REJOIN ? "re" : ""
361 case RTM_IEEE80211_LEAVE:
362 printf("%s station leave",
363 ether_sprintf(V(ieee80211_leave_event)->iev_addr));
365 case RTM_IEEE80211_SCAN:
366 printf("scan complete");
368 case RTM_IEEE80211_REPLAY:
369 printf("replay failure: src %s "
370 , ether_sprintf(V(ieee80211_replay_event)->iev_src)
372 printf("dst %s cipher %u keyix %u keyrsc %llu rsc %llu"
373 , ether_sprintf(V(ieee80211_replay_event)->iev_dst)
374 , V(ieee80211_replay_event)->iev_cipher
375 , V(ieee80211_replay_event)->iev_keyix
376 , V(ieee80211_replay_event)->iev_keyrsc
377 , V(ieee80211_replay_event)->iev_rsc
380 case RTM_IEEE80211_MICHAEL:
381 printf("michael failure: src %s "
382 , ether_sprintf(V(ieee80211_michael_event)->iev_src)
384 printf("dst %s cipher %u keyix %u"
385 , ether_sprintf(V(ieee80211_michael_event)->iev_dst)
386 , V(ieee80211_michael_event)->iev_cipher
387 , V(ieee80211_michael_event)->iev_keyix
390 case RTM_IEEE80211_WDS:
391 printf("%s wds discovery",
392 ether_sprintf(V(ieee80211_wds_event)->iev_addr));
394 case RTM_IEEE80211_CSA:
395 printf("channel switch announcement: channel %u (%u MHz flags 0x%x) mode %d count %d"
396 , V(ieee80211_csa_event)->iev_ieee
397 , V(ieee80211_csa_event)->iev_freq
398 , V(ieee80211_csa_event)->iev_flags
399 , V(ieee80211_csa_event)->iev_mode
400 , V(ieee80211_csa_event)->iev_count
403 case RTM_IEEE80211_CAC:
404 printf("channel availability check "
405 "(channel %u, %u MHz flags 0x%x) "
406 , V(ieee80211_cac_event)->iev_ieee
407 , V(ieee80211_cac_event)->iev_freq
408 , V(ieee80211_cac_event)->iev_flags
410 switch (V(ieee80211_cac_event)->iev_type) {
411 case IEEE80211_NOTIFY_CAC_START:
412 printf("start timer");
414 case IEEE80211_NOTIFY_CAC_STOP:
415 printf("stop timer");
417 case IEEE80211_NOTIFY_CAC_EXPIRE:
418 printf("timer expired");
420 case IEEE80211_NOTIFY_CAC_RADAR:
421 printf("radar detected");
424 printf("unknown type %d",
425 V(ieee80211_cac_event)->iev_type);
429 case RTM_IEEE80211_DEAUTH:
430 printf("%s wds deauth",
431 ether_sprintf(V(ieee80211_deauth_event)->iev_addr));
433 case RTM_IEEE80211_AUTH:
434 printf("%s node authenticate",
435 ether_sprintf(V(ieee80211_auth_event)->iev_addr));
437 case RTM_IEEE80211_COUNTRY:
438 printf("%s adopt country code '%c%c'",
439 ether_sprintf(V(ieee80211_country_event)->iev_addr),
440 V(ieee80211_country_event)->iev_cc[0],
441 V(ieee80211_country_event)->iev_cc[1]);
443 case RTM_IEEE80211_RADIO:
445 V(ieee80211_radio_event)->iev_state ? "ON" : "OFF");
448 printf("what: #%d", ifan->ifan_what);