usr.sbin/flowctl/flowctl.c

   1 /*-
   2  * Copyright (c) 2004-2005 Gleb Smirnoff <glebius@FreeBSD.org>
   3  * Copyright (c) 2001-2003 Roman V. Palagin <romanp@unshadow.net>
   4  * All rights reserved.
   5  *
   6  * Redistribution and use in source and binary forms, with or without
   7  * modification, are permitted provided that the following conditions
   8  * are met:
   9  * 1. Redistributions of source code must retain the above copyright
  10  *    notice, this list of conditions and the following disclaimer.
  11  * 2. Redistributions in binary form must reproduce the above copyright
  12  *    notice, this list of conditions and the following disclaimer in the
  13  *    documentation and/or other materials provided with the distribution.
  14  *
  15  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
  16  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
  17  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
  18  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
  19  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
  20  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
  21  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
  22  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
  23  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
  24  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
  25  * SUCH DAMAGE.
  26  *
  27  * $SourceForge: flowctl.c,v 1.15 2004/08/31 20:24:58 glebius Exp $
  28  */
  29
  30 #ifndef lint
  31 static const char rcs_id[] =
  32     "@(#) $FreeBSD$";
  33 #endif
  34
  35 #include <sys/types.h>
  36 #include <sys/time.h>
  37 #include <sys/socket.h>
  38 #include <sys/queue.h>
  39
  40 #include <net/if.h>
  41 #include <netinet/in.h>
  42
  43 #include <arpa/inet.h>
  44
  45 #include <err.h>
  46 #include <stdio.h>
  47 #include <stdlib.h>
  48 #include <string.h>
  49 #include <sysexits.h>
  50 #include <unistd.h>
  51
  52 #include <netgraph.h>
  53 #include <netgraph/netflow/ng_netflow.h>
  54
  55 #define CISCO_SH_FLOW_HEADER    "SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP  Pkts\n"
  56 #define CISCO_SH_FLOW   "%-13s %-15s %-13s %-15s %2u %4.4x %4.4x %6lu\n"
  57
  58 #define CISCO_SH_FLOW6_HEADER   "SrcIf         SrcIPaddress                   DstIf         DstIPaddress                   Pr SrcP DstP  Pkts\n"
  59 #define CISCO_SH_FLOW6  "%-13s %-30s %-13s %-30s %2u %4.4x %4.4x %6lu\n"
  60
  61 #define CISCO_SH_VERB_FLOW_HEADER "SrcIf          SrcIPaddress    DstIf          DstIPaddress    Pr TOS Flgs  Pkts\n" \
  62 "Port Msk AS                    Port Msk AS    NextHop              B/Pk  Active\n"
  63
  64 #define CISCO_SH_VERB_FLOW "%-14s %-15s %-14s %-15s %2u %3x %4x %6lu\n" \
  65         "%4.4x /%-2u %-5u                 %4.4x /%-2u %-5u %-15s %9u %8u\n\n"
  66
  67 #define CISCO_SH_VERB_FLOW6_HEADER "SrcIf          SrcIPaddress                   DstIf          DstIPaddress                   Pr TOS Flgs  Pkts\n" \
  68 "Port Msk AS                    Port Msk AS    NextHop                             B/Pk  Active\n"
  69
  70 #define CISCO_SH_VERB_FLOW6 "%-14s %-30s %-14s %-30s %2u %3x %4x %6lu\n" \
  71         "%4.4x /%-2u %-5u                 %4.4x /%-2u %-5u %-30s %9u %8u\n\n"
  72 #ifdef INET
  73 static void flow_cache_print(struct ngnf_show_header *resp);
  74 static void flow_cache_print_verbose(struct ngnf_show_header *resp);
  75 #endif
  76 #ifdef INET6
  77 static void flow_cache_print6(struct ngnf_show_header *resp);
  78 static void flow_cache_print6_verbose(struct ngnf_show_header *resp);
  79 #endif
  80 static void ctl_show(int, char **);
  81 #if defined(INET) || defined(INET6)
  82 static void do_show(int, void (*func)(struct ngnf_show_header *));
  83 #endif
  84 static void help(void);
  85 static void execute_command(int, char **);
  86
  87 struct ip_ctl_cmd {
  88         char    *cmd_name;
  89         void    (*cmd_func)(int argc, char **argv);
  90 };
  91
  92 struct ip_ctl_cmd cmds[] = {
  93     {"show",    ctl_show},
  94     {NULL,      NULL},
  95 };
  96
  97 int     cs;
  98 char    *ng_path;
  99
 100 int
 101 main(int argc, char **argv)
 102 {
 103         int c;
 104         char sname[NG_NODESIZ];
 105         int rcvbuf = SORCVBUF_SIZE;
 106
 107         /* parse options */
 108         while ((c = getopt(argc, argv, "d:")) != -1) {
 109                 switch (c) {
 110                 case 'd':       /* set libnetgraph debug level. */
 111                         NgSetDebug(atoi(optarg));
 112                         break;
 113                 }
 114         }
 115
 116         argc -= optind;
 117         argv += optind;
 118         ng_path = argv[0];
 119         if (ng_path == NULL || (strlen(ng_path) > NG_PATHSIZ))
 120                 help();
 121         argc--;
 122         argv++;
 123
 124         /* create control socket. */
 125         snprintf(sname, sizeof(sname), "flowctl%i", getpid());
 126
 127         if (NgMkSockNode(sname, &cs, NULL) == -1)
 128                 err(1, "NgMkSockNode");
 129
 130         /* set receive buffer size */
 131         if (setsockopt(cs, SOL_SOCKET, SO_RCVBUF, &rcvbuf, sizeof(int)) == -1)
 132                 err(1, "setsockopt(SOL_SOCKET, SO_RCVBUF)");
 133
 134         /* parse and execute command */
 135         execute_command(argc, argv);
 136
 137         close(cs);
 138
 139         exit(0);
 140 }
 141
 142 static void
 143 execute_command(int argc, char **argv)
 144 {
 145         int cindex = -1;
 146         int i;
 147
 148         if (!argc)
 149                 help();
 150         for (i = 0; cmds[i].cmd_name != NULL; i++)
 151                 if (!strncmp(argv[0], cmds[i].cmd_name, strlen(argv[0]))) {
 152                         if (cindex != -1)
 153                                 errx(1, "ambiguous command: %s", argv[0]);
 154                         cindex = i;
 155                 }
 156         if (cindex == -1)
 157                 errx(1, "bad command: %s", argv[0]);
 158         argc--;
 159         argv++;
 160         (*cmds[cindex].cmd_func)(argc, argv);
 161 }
 162
 163 static void
 164 ctl_show(int argc, char **argv)
 165 {
 166         int ipv4, ipv6, verbose = 0;
 167
 168         ipv4 = feature_present("inet");
 169         ipv6 = feature_present("inet6");
 170
 171         if (argc > 0 && !strncmp(argv[0], "ipv4", 4)) {
 172                 ipv6 = 0;
 173                 argc--;
 174                 argv++;
 175         }
 176         if (argc > 0 && !strncmp(argv[0], "ipv6", 4)) {
 177                 ipv4 = 0;
 178                 argc--;
 179                 argv++;
 180         }
 181
 182         if (argc > 0 && !strncmp(argv[0], "verbose", strlen(argv[0])))
 183                 verbose = 1;
 184
 185 #ifdef INET
 186         if (ipv4) {
 187                 if (verbose)
 188                         do_show(4, &flow_cache_print_verbose);
 189                 else
 190                         do_show(4, &flow_cache_print);
 191         }
 192 #endif
 193
 194 #ifdef INET6
 195         if (ipv6) {
 196                 if (verbose)
 197                         do_show(6, &flow_cache_print6_verbose);
 198                 else
 199                         do_show(6, &flow_cache_print6);
 200         }
 201 #endif
 202 }
 203
 204 #if defined(INET) || defined(INET6)
 205 static void
 206 do_show(int version, void (*func)(struct ngnf_show_header *))
 207 {
 208         struct ng_mesg *ng_mesg;
 209         struct ngnf_show_header req, *resp;
 210         int token, nread;
 211
 212         ng_mesg = alloca(SORCVBUF_SIZE);
 213
 214         req.version = version;
 215         req.hash_id = req.list_id = 0;
 216
 217         for (;;) {
 218                 /* request set of accounting records */
 219                 token = NgSendMsg(cs, ng_path, NGM_NETFLOW_COOKIE,
 220                     NGM_NETFLOW_SHOW, (void *)&req, sizeof(req));
 221                 if (token == -1)
 222                         err(1, "NgSendMsg(NGM_NETFLOW_SHOW)");
 223
 224                 /* read reply */
 225                 nread = NgRecvMsg(cs, ng_mesg, SORCVBUF_SIZE, NULL);
 226                 if (nread == -1)
 227                         err(1, "NgRecvMsg() failed");
 228
 229                 if (ng_mesg->header.token != token)
 230                         err(1, "NgRecvMsg(NGM_NETFLOW_SHOW): token mismatch");
 231
 232                 resp = (struct ngnf_show_header *)ng_mesg->data;
 233                 if ((ng_mesg->header.arglen < (sizeof(*resp))) ||
 234                     (ng_mesg->header.arglen < (sizeof(*resp) +
 235                     (resp->nentries * sizeof(struct flow_entry_data)))))
 236                         err(1, "NgRecvMsg(NGM_NETFLOW_SHOW): arglen too small");
 237
 238                 (*func)(resp);
 239
 240                 if (resp->hash_id != 0)
 241                         req.hash_id = resp->hash_id;
 242                 else
 243                         break;
 244                 req.list_id = resp->list_id;
 245         }
 246 }
 247 #endif
 248
 249 #ifdef INET
 250 static void
 251 flow_cache_print(struct ngnf_show_header *resp)
 252 {
 253         struct flow_entry_data *fle;
 254         char src[INET_ADDRSTRLEN], dst[INET_ADDRSTRLEN];
 255         char src_if[IFNAMSIZ], dst_if[IFNAMSIZ];
 256         int i;
 257
 258         if (resp->version != 4)
 259                 errx(EX_SOFTWARE, "%s: version mismatch: %u",
 260                     __func__, resp->version);
 261
 262         printf(CISCO_SH_FLOW_HEADER);
 263
 264         fle = (struct flow_entry_data *)(resp + 1);
 265         for (i = 0; i < resp->nentries; i++, fle++) {
 266                 inet_ntop(AF_INET, &fle->r.r_src, src, sizeof(src));
 267                 inet_ntop(AF_INET, &fle->r.r_dst, dst, sizeof(dst));
 268                 printf(CISCO_SH_FLOW,
 269                         if_indextoname(fle->fle_i_ifx, src_if),
 270                         src,
 271                         if_indextoname(fle->fle_o_ifx, dst_if),
 272                         dst,
 273                         fle->r.r_ip_p,
 274                         ntohs(fle->r.r_sport),
 275                         ntohs(fle->r.r_dport),
 276                         fle->packets);
 277
 278         }
 279 }
 280 #endif
 281
 282 #ifdef INET6
 283 static void
 284 flow_cache_print6(struct ngnf_show_header *resp)
 285 {
 286         struct flow6_entry_data *fle6;
 287         char src6[INET6_ADDRSTRLEN], dst6[INET6_ADDRSTRLEN];
 288         char src_if[IFNAMSIZ], dst_if[IFNAMSIZ];
 289         int i;
 290
 291         if (resp->version != 6)
 292                 errx(EX_SOFTWARE, "%s: version mismatch: %u",
 293                     __func__, resp->version);
 294
 295         printf(CISCO_SH_FLOW6_HEADER);
 296
 297         fle6 = (struct flow6_entry_data *)(resp + 1);
 298         for (i = 0; i < resp->nentries; i++, fle6++) {
 299                 inet_ntop(AF_INET6, &fle6->r.src.r_src6, src6, sizeof(src6));
 300                 inet_ntop(AF_INET6, &fle6->r.dst.r_dst6, dst6, sizeof(dst6));
 301                 printf(CISCO_SH_FLOW6,
 302                         if_indextoname(fle6->fle_i_ifx, src_if),
 303                         src6,
 304                         if_indextoname(fle6->fle_o_ifx, dst_if),
 305                         dst6,
 306                         fle6->r.r_ip_p,
 307                         ntohs(fle6->r.r_sport),
 308                         ntohs(fle6->r.r_dport),
 309                         fle6->packets);
 310
 311         }
 312 }
 313 #endif
 314
 315 #ifdef INET
 316 static void
 317 flow_cache_print_verbose(struct ngnf_show_header *resp)
 318 {
 319         struct flow_entry_data *fle;
 320         char src[INET_ADDRSTRLEN], dst[INET_ADDRSTRLEN], next[INET_ADDRSTRLEN];
 321         char src_if[IFNAMSIZ], dst_if[IFNAMSIZ];
 322         int i;
 323
 324         if (resp->version != 4)
 325                 errx(EX_SOFTWARE, "%s: version mismatch: %u",
 326                     __func__, resp->version);
 327
 328         printf(CISCO_SH_VERB_FLOW_HEADER);
 329
 330         fle = (struct flow_entry_data *)(resp + 1);
 331         for (i = 0; i < resp->nentries; i++, fle++) {
 332                 inet_ntop(AF_INET, &fle->r.r_src, src, sizeof(src));
 333                 inet_ntop(AF_INET, &fle->r.r_dst, dst, sizeof(dst));
 334                 inet_ntop(AF_INET, &fle->next_hop, next, sizeof(next));
 335                 printf(CISCO_SH_VERB_FLOW,
 336                         if_indextoname(fle->fle_i_ifx, src_if),
 337                         src,
 338                         if_indextoname(fle->fle_o_ifx, dst_if),
 339                         dst,
 340                         fle->r.r_ip_p,
 341                         fle->r.r_tos,
 342                         fle->tcp_flags,
 343                         fle->packets,
 344                         ntohs(fle->r.r_sport),
 345                         fle->src_mask,
 346                         0,
 347                         ntohs(fle->r.r_dport),
 348                         fle->dst_mask,
 349                         0,
 350                         next,
 351                         (u_int)(fle->bytes / fle->packets),
 352                         0);
 353
 354         }
 355 }
 356 #endif
 357
 358 #ifdef INET6
 359 static void
 360 flow_cache_print6_verbose(struct ngnf_show_header *resp)
 361 {
 362         struct flow6_entry_data *fle6;
 363         char src6[INET6_ADDRSTRLEN], dst6[INET6_ADDRSTRLEN], next6[INET6_ADDRSTRLEN];
 364         char src_if[IFNAMSIZ], dst_if[IFNAMSIZ];
 365         int i;
 366
 367         if (resp->version != 6)
 368                 errx(EX_SOFTWARE, "%s: version mismatch: %u",
 369                     __func__, resp->version);
 370
 371         printf(CISCO_SH_VERB_FLOW6_HEADER);
 372
 373         fle6 = (struct flow6_entry_data *)(resp + 1);
 374         for (i = 0; i < resp->nentries; i++, fle6++) {
 375                 inet_ntop(AF_INET6, &fle6->r.src.r_src6, src6, sizeof(src6));
 376                 inet_ntop(AF_INET6, &fle6->r.dst.r_dst6, dst6, sizeof(dst6));
 377                 inet_ntop(AF_INET6, &fle6->n.next_hop6, next6, sizeof(next6));
 378                 printf(CISCO_SH_VERB_FLOW6,
 379                         if_indextoname(fle6->fle_i_ifx, src_if),
 380                         src6,
 381                         if_indextoname(fle6->fle_o_ifx, dst_if),
 382                         dst6,
 383                         fle6->r.r_ip_p,
 384                         fle6->r.r_tos,
 385                         fle6->tcp_flags,
 386                         fle6->packets,
 387                         ntohs(fle6->r.r_sport),
 388                         fle6->src_mask,
 389                         0,
 390                         ntohs(fle6->r.r_dport),
 391                         fle6->dst_mask,
 392                         0,
 393                         next6,
 394                         (u_int)(fle6->bytes / fle6->packets),
 395                         0);
 396         }
 397 }
 398 #endif
 399
 400 static void
 401 help(void)
 402 {
 403         extern char *__progname;
 404
 405         fprintf(stderr, "usage: %s [-d level] nodename command\n", __progname);
 406         exit (0);
 407 }