1 /* $OpenBSD: tcpdrop.c,v 1.4 2004/05/22 23:55:22 deraadt Exp $ */
4 * Copyright (c) 2009 Juli Mallett <jmallett@FreeBSD.org>
5 * Copyright (c) 2004 Markus Friedl <markus@openbsd.org>
7 * Permission to use, copy, modify, and distribute this software for any
8 * purpose with or without fee is hereby granted, provided that the above
9 * copyright notice and this permission notice appear in all copies.
11 * THE SOFTWARE IS PROVIDED "AS IS" AND THE AUTHOR DISCLAIMS ALL WARRANTIES
12 * WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
13 * MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR
14 * ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES
15 * WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
16 * ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
17 * OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
20 #include <sys/cdefs.h>
21 #include <sys/param.h>
22 #include <sys/types.h>
23 #include <sys/socket.h>
24 #include <sys/socketvar.h>
25 #include <sys/sysctl.h>
27 #include <netinet/in.h>
28 #include <netinet/in_pcb.h>
30 #include <netinet/tcp_fsm.h>
31 #include <netinet/tcp_var.h>
41 #define TCPDROP_FOREIGN 0
42 #define TCPDROP_LOCAL 1
48 char hs_host[NI_MAXHOST];
49 char hs_service[NI_MAXSERV];
52 static bool tcpswitch_list_commands = false;
54 static char *findport(const char *);
55 static struct xinpgen *getxpcblist(const char *);
56 static void sockinfo(const struct sockaddr *, struct host_service *);
57 static bool tcpswitch(const struct sockaddr *, const struct sockaddr *, int);
58 static bool tcpswitchall(const char *, int);
59 static bool tcpswitchbyname(const char *, const char *, const char *,
61 static bool tcpswitchconn(const struct in_conninfo *, int);
62 static void usage(void) __dead2;
65 * Switch a tcp connection.
68 main(int argc, char *argv[])
70 char stack[TCP_FUNCTION_NAME_LEN_MAX];
72 bool switchall, switchallstack;
76 switchallstack = false;
80 while ((ch = getopt(argc, argv, "ailS:s")) != -1) {
89 tcpswitch_list_commands = true;
92 switchallstack = true;
93 strlcpy(stack, optarg, sizeof(stack));
105 if (switchall && switchallstack)
107 if (switchall || switchallstack) {
110 if (!tcpswitchall(stack, mode))
115 if ((argc != 2 && argc != 4) || tcpswitch_list_commands)
119 lport = findport(argv[0]);
120 fport = findport(argv[1]);
121 if (lport == NULL || lport[1] == '\0' || fport == NULL ||
126 if (!tcpswitchbyname(argv[0], lport, argv[1], fport, mode))
128 } else if (!tcpswitchbyname(argv[0], argv[1], argv[2], argv[3], mode))
135 findport(const char *arg)
139 /* A strrspn() or strrpbrk() would be nice. */
140 dot = strrchr(arg, '.');
141 colon = strrchr(arg, ':');
152 static struct xinpgen *
153 getxpcblist(const char *name)
155 struct xinpgen *xinp;
160 rv = sysctlbyname(name, NULL, &len, NULL, 0);
162 err(1, "sysctlbyname %s", name);
165 errx(1, "%s is empty", name);
169 errx(1, "malloc failed");
171 rv = sysctlbyname(name, xinp, &len, NULL, 0);
173 err(1, "sysctlbyname %s", name);
179 sockinfo(const struct sockaddr *sa, struct host_service *hs)
181 static const int flags = NI_NUMERICHOST | NI_NUMERICSERV;
184 rv = getnameinfo(sa, sa->sa_len, hs->hs_host, sizeof hs->hs_host,
185 hs->hs_service, sizeof hs->hs_service, flags);
187 err(1, "getnameinfo");
191 tcpswitch(const struct sockaddr *lsa, const struct sockaddr *fsa, int mode)
193 struct host_service local, foreign;
194 struct sockaddr_storage addrs[2];
197 memcpy(&addrs[TCPDROP_FOREIGN], fsa, fsa->sa_len);
198 memcpy(&addrs[TCPDROP_LOCAL], lsa, lsa->sa_len);
200 sockinfo(lsa, &local);
201 sockinfo(fsa, &foreign);
203 if (tcpswitch_list_commands) {
204 printf("switch_tls %s %s %s %s %s\n",
205 mode == SW_TLS ? "-s" : "-i",
206 local.hs_host, local.hs_service,
207 foreign.hs_host, foreign.hs_service);
211 rv = sysctlbyname(mode == SW_TLS ? "net.inet.tcp.switch_to_sw_tls" :
212 "net.inet.tcp.switch_to_ifnet_tls", NULL, NULL, &addrs,
215 warn("%s %s %s %s", local.hs_host, local.hs_service,
216 foreign.hs_host, foreign.hs_service);
219 printf("%s %s %s %s: switched\n", local.hs_host, local.hs_service,
220 foreign.hs_host, foreign.hs_service);
225 tcpswitchall(const char *stack, int mode)
227 struct xinpgen *head, *xinp;
234 head = getxpcblist("net.inet.tcp.pcblist");
236 #define XINP_NEXT(xinp) \
237 ((struct xinpgen *)(uintptr_t)((uintptr_t)(xinp) + (xinp)->xig_len))
239 for (xinp = XINP_NEXT(head); xinp->xig_len > sizeof *xinp;
240 xinp = XINP_NEXT(xinp)) {
241 xtp = (struct xtcpcb *)xinp;
246 * Check protocol, support just v4 or v6, etc.
249 /* Ignore PCBs which were freed during copyout. */
250 if (xip->inp_gencnt > head->xig_gen)
253 /* Skip listening sockets. */
254 if (xtp->t_state == TCPS_LISTEN)
257 /* If requested, skip sockets not having the requested stack. */
258 if (stack[0] != '\0' &&
259 strncmp(xtp->xt_stack, stack, TCP_FUNCTION_NAME_LEN_MAX))
262 if (!tcpswitchconn(&xip->inp_inc, mode))
271 tcpswitchbyname(const char *lhost, const char *lport, const char *fhost,
272 const char *fport, int mode)
274 static const struct addrinfo hints = {
276 * Look for streams in all domains.
278 .ai_family = AF_UNSPEC,
279 .ai_socktype = SOCK_STREAM,
281 struct addrinfo *ail, *local, *aif, *foreign;
285 error = getaddrinfo(lhost, lport, &hints, &local);
287 errx(1, "getaddrinfo: %s port %s: %s", lhost, lport,
288 gai_strerror(error));
290 error = getaddrinfo(fhost, fport, &hints, &foreign);
292 freeaddrinfo(local); /* XXX gratuitous */
293 errx(1, "getaddrinfo: %s port %s: %s", fhost, fport,
294 gai_strerror(error));
301 * Try every combination of local and foreign address pairs.
303 for (ail = local; ail != NULL; ail = ail->ai_next) {
304 for (aif = foreign; aif != NULL; aif = aif->ai_next) {
305 if (ail->ai_family != aif->ai_family)
308 if (!tcpswitch(ail->ai_addr, aif->ai_addr, mode))
314 warnx("%s %s %s %s: different address families", lhost, lport,
320 freeaddrinfo(foreign);
326 tcpswitchconn(const struct in_conninfo *inc, int mode)
328 struct sockaddr *local, *foreign;
329 struct sockaddr_in6 sin6[2];
330 struct sockaddr_in sin4[2];
332 if ((inc->inc_flags & INC_ISIPV6) != 0) {
333 memset(sin6, 0, sizeof sin6);
335 sin6[TCPDROP_LOCAL].sin6_len = sizeof sin6[TCPDROP_LOCAL];
336 sin6[TCPDROP_LOCAL].sin6_family = AF_INET6;
337 sin6[TCPDROP_LOCAL].sin6_port = inc->inc_lport;
338 memcpy(&sin6[TCPDROP_LOCAL].sin6_addr, &inc->inc6_laddr,
339 sizeof inc->inc6_laddr);
340 local = (struct sockaddr *)&sin6[TCPDROP_LOCAL];
342 sin6[TCPDROP_FOREIGN].sin6_len = sizeof sin6[TCPDROP_FOREIGN];
343 sin6[TCPDROP_FOREIGN].sin6_family = AF_INET6;
344 sin6[TCPDROP_FOREIGN].sin6_port = inc->inc_fport;
345 memcpy(&sin6[TCPDROP_FOREIGN].sin6_addr, &inc->inc6_faddr,
346 sizeof inc->inc6_faddr);
347 foreign = (struct sockaddr *)&sin6[TCPDROP_FOREIGN];
349 memset(sin4, 0, sizeof sin4);
351 sin4[TCPDROP_LOCAL].sin_len = sizeof sin4[TCPDROP_LOCAL];
352 sin4[TCPDROP_LOCAL].sin_family = AF_INET;
353 sin4[TCPDROP_LOCAL].sin_port = inc->inc_lport;
354 memcpy(&sin4[TCPDROP_LOCAL].sin_addr, &inc->inc_laddr,
355 sizeof inc->inc_laddr);
356 local = (struct sockaddr *)&sin4[TCPDROP_LOCAL];
358 sin4[TCPDROP_FOREIGN].sin_len = sizeof sin4[TCPDROP_FOREIGN];
359 sin4[TCPDROP_FOREIGN].sin_family = AF_INET;
360 sin4[TCPDROP_FOREIGN].sin_port = inc->inc_fport;
361 memcpy(&sin4[TCPDROP_FOREIGN].sin_addr, &inc->inc_faddr,
362 sizeof inc->inc_faddr);
363 foreign = (struct sockaddr *)&sin4[TCPDROP_FOREIGN];
366 return (tcpswitch(local, foreign, mode));
373 "usage: switch_tls [-i | -s] local-address local-port foreign-address foreign-port\n"
374 " switch_tls [-i | -s] local-address:local-port foreign-address:foreign-port\n"
375 " switch_tls [-i | -s] local-address.local-port foreign-address.foreign-port\n"
376 " switch_tls [-l | -i | -s] -a\n"
377 " switch_tls [-l | -i | -s] -S stack\n");