fstat.c revision 152105
1/*- 2 * Copyright (c) 1988, 1993 3 * The Regents of the University of California. All rights reserved. 4 * 5 * Redistribution and use in source and binary forms, with or without 6 * modification, are permitted provided that the following conditions 7 * are met: 8 * 1. Redistributions of source code must retain the above copyright 9 * notice, this list of conditions and the following disclaimer. 10 * 2. Redistributions in binary form must reproduce the above copyright 11 * notice, this list of conditions and the following disclaimer in the 12 * documentation and/or other materials provided with the distribution. 13 * 3. All advertising materials mentioning features or use of this software 14 * must display the following acknowledgement: 15 * This product includes software developed by the University of 16 * California, Berkeley and its contributors. 17 * 4. Neither the name of the University nor the names of its contributors 18 * may be used to endorse or promote products derived from this software 19 * without specific prior written permission. 20 * 21 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND 22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE 23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE 24 * ARE DISCLAIMED. IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE 25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL 26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS 27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) 28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT 29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY 30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF 31 * SUCH DAMAGE. 32 */ 33 34#ifndef lint 35static const char copyright[] = 36"@(#) Copyright (c) 1988, 1993\n\ 37 The Regents of the University of California. All rights reserved.\n"; 38#endif /* not lint */ 39 40#ifndef lint 41#if 0 42static char sccsid[] = "@(#)fstat.c 8.3 (Berkeley) 5/2/95"; 43#endif 44#endif /* not lint */ 45#include <sys/cdefs.h> 46__FBSDID("$FreeBSD: head/usr.bin/fstat/fstat.c 152105 2005-11-05 23:38:08Z csjp $"); 47 48#include <sys/param.h> 49#include <sys/time.h> 50#include <sys/proc.h> 51#include <sys/user.h> 52#include <sys/stat.h> 53#include <sys/vnode.h> 54#include <sys/socket.h> 55#include <sys/socketvar.h> 56#include <sys/domain.h> 57#include <sys/protosw.h> 58#include <sys/un.h> 59#include <sys/unpcb.h> 60#include <sys/sysctl.h> 61#include <sys/filedesc.h> 62#include <sys/queue.h> 63#define _KERNEL 64#include <sys/pipe.h> 65#include <sys/conf.h> 66#include <sys/file.h> 67#include <sys/mount.h> 68#include <ufs/ufs/quota.h> 69#include <ufs/ufs/inode.h> 70#include <fs/devfs/devfs.h> 71#include <fs/devfs/devfs_int.h> 72#undef _KERNEL 73#include <nfs/nfsproto.h> 74#include <nfs/rpcv2.h> 75#include <nfsclient/nfs.h> 76#include <nfsclient/nfsnode.h> 77 78 79#include <vm/vm.h> 80#include <vm/vm_map.h> 81#include <vm/vm_object.h> 82 83#include <net/route.h> 84#include <netinet/in.h> 85#include <netinet/in_systm.h> 86#include <netinet/ip.h> 87#include <netinet/in_pcb.h> 88 89#include <ctype.h> 90#include <err.h> 91#include <fcntl.h> 92#include <kvm.h> 93#include <limits.h> 94#include <nlist.h> 95#include <paths.h> 96#include <pwd.h> 97#include <stdio.h> 98#include <stdlib.h> 99#include <string.h> 100#include <unistd.h> 101#include <netdb.h> 102 103#include "fstat.h" 104 105#define TEXT -1 106#define CDIR -2 107#define RDIR -3 108#define TRACE -4 109#define MMAP -5 110#define JDIR -6 111 112DEVS *devs; 113 114#ifdef notdef 115struct nlist nl[] = { 116 { "" }, 117}; 118#endif 119 120int fsflg, /* show files on same filesystem as file(s) argument */ 121 pflg, /* show files open by a particular pid */ 122 uflg; /* show files open by a particular (effective) user */ 123int checkfile; /* true if restricting to particular files or filesystems */ 124int nflg; /* (numerical) display f.s. and rdev as dev_t */ 125int vflg; /* display errors in locating kernel data objects etc... */ 126int mflg; /* include memory-mapped files */ 127 128 129struct file **ofiles; /* buffer of pointers to file structures */ 130int maxfiles; 131#define ALLOC_OFILES(d) \ 132 if ((d) > maxfiles) { \ 133 free(ofiles); \ 134 ofiles = malloc((d) * sizeof(struct file *)); \ 135 if (ofiles == NULL) { \ 136 err(1, NULL); \ 137 } \ 138 maxfiles = (d); \ 139 } 140 141char *memf, *nlistf; 142kvm_t *kd; 143 144static void fstat_kvm(int, int); 145static void fstat_sysctl(int, int); 146void dofiles(struct kinfo_proc *kp); 147void dommap(struct kinfo_proc *kp); 148void vtrans(struct vnode *vp, int i, int flag); 149int ufs_filestat(struct vnode *vp, struct filestat *fsp); 150int nfs_filestat(struct vnode *vp, struct filestat *fsp); 151int devfs_filestat(struct vnode *vp, struct filestat *fsp); 152char *getmnton(struct mount *m); 153void pipetrans(struct pipe *pi, int i, int flag); 154void socktrans(struct socket *sock, int i); 155void getinetproto(int number); 156int getfname(const char *filename); 157void usage(void); 158char *kdevtoname(struct cdev *dev); 159 160int 161main(int argc, char **argv) 162{ 163 struct passwd *passwd; 164 int arg, ch, what; 165 166 arg = 0; 167 what = KERN_PROC_ALL; 168 nlistf = memf = NULL; 169 while ((ch = getopt(argc, argv, "fmnp:u:vN:M:")) != -1) 170 switch((char)ch) { 171 case 'f': 172 fsflg = 1; 173 break; 174 case 'M': 175 memf = optarg; 176 break; 177 case 'N': 178 nlistf = optarg; 179 break; 180 case 'm': 181 mflg = 1; 182 break; 183 case 'n': 184 nflg = 1; 185 break; 186 case 'p': 187 if (pflg++) 188 usage(); 189 if (!isdigit(*optarg)) { 190 warnx("-p requires a process id"); 191 usage(); 192 } 193 what = KERN_PROC_PID; 194 arg = atoi(optarg); 195 break; 196 case 'u': 197 if (uflg++) 198 usage(); 199 if (!(passwd = getpwnam(optarg))) 200 errx(1, "%s: unknown uid", optarg); 201 what = KERN_PROC_UID; 202 arg = passwd->pw_uid; 203 break; 204 case 'v': 205 vflg = 1; 206 break; 207 case '?': 208 default: 209 usage(); 210 } 211 212 if (*(argv += optind)) { 213 for (; *argv; ++argv) { 214 if (getfname(*argv)) 215 checkfile = 1; 216 } 217 if (!checkfile) /* file(s) specified, but none accessable */ 218 exit(1); 219 } 220 221 if (fsflg && !checkfile) { 222 /* -f with no files means use wd */ 223 if (getfname(".") == 0) 224 exit(1); 225 checkfile = 1; 226 } 227 228 if (memf != NULL) 229 fstat_kvm(what, arg); 230 else 231 fstat_sysctl(what, arg); 232 exit(0); 233} 234 235static void 236print_header(void) 237{ 238 239 if (nflg) 240 printf("%s", 241"USER CMD PID FD DEV INUM MODE SZ|DV R/W"); 242 else 243 printf("%s", 244"USER CMD PID FD MOUNT INUM MODE SZ|DV R/W"); 245 if (checkfile && fsflg == 0) 246 printf(" NAME\n"); 247 else 248 putchar('\n'); 249} 250 251static void 252fstat_kvm(int what, int arg) 253{ 254 struct kinfo_proc *p, *plast; 255 char buf[_POSIX2_LINE_MAX]; 256 int cnt; 257 258 ALLOC_OFILES(256); /* reserve space for file pointers */ 259 260 /* 261 * Discard setgid privileges if not the running kernel so that bad 262 * guys can't print interesting stuff from kernel memory. 263 */ 264 if (nlistf != NULL || memf != NULL) 265 setgid(getgid()); 266 267 if ((kd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, buf)) == NULL) 268 errx(1, "%s", buf); 269 setgid(getgid()); 270#ifdef notdef 271 if (kvm_nlist(kd, nl) != 0) 272 errx(1, "no namelist: %s", kvm_geterr(kd)); 273#endif 274 if ((p = kvm_getprocs(kd, what, arg, &cnt)) == NULL) 275 errx(1, "%s", kvm_geterr(kd)); 276 print_header(); 277 for (plast = &p[cnt]; p < plast; ++p) { 278 if (p->ki_stat == SZOMB) 279 continue; 280 dofiles(p); 281 if (mflg) 282 dommap(p); 283 } 284} 285 286static void 287fstat_sysctl(int what, int arg) 288{ 289 290 /* not yet implemented */ 291 fstat_kvm(what, arg); 292} 293 294const char *Uname, *Comm; 295int Pid; 296 297#define PREFIX(i) printf("%-8.8s %-10s %5d", Uname, Comm, Pid); \ 298 switch(i) { \ 299 case TEXT: \ 300 printf(" text"); \ 301 break; \ 302 case CDIR: \ 303 printf(" wd"); \ 304 break; \ 305 case RDIR: \ 306 printf(" root"); \ 307 break; \ 308 case TRACE: \ 309 printf(" tr"); \ 310 break; \ 311 case MMAP: \ 312 printf(" mmap"); \ 313 break; \ 314 case JDIR: \ 315 printf(" jail"); \ 316 break; \ 317 default: \ 318 printf(" %4d", i); \ 319 break; \ 320 } 321 322/* 323 * print open files attributed to this process 324 */ 325void 326dofiles(struct kinfo_proc *kp) 327{ 328 int i; 329 struct file file; 330 struct filedesc filed; 331 332 Uname = user_from_uid(kp->ki_uid, 0); 333 Pid = kp->ki_pid; 334 Comm = kp->ki_comm; 335 336 if (kp->ki_fd == NULL) 337 return; 338 if (!KVM_READ(kp->ki_fd, &filed, sizeof (filed))) { 339 dprintf(stderr, "can't read filedesc at %p for pid %d\n", 340 (void *)kp->ki_fd, Pid); 341 return; 342 } 343 /* 344 * root directory vnode, if one 345 */ 346 if (filed.fd_rdir) 347 vtrans(filed.fd_rdir, RDIR, FREAD); 348 /* 349 * current working directory vnode 350 */ 351 vtrans(filed.fd_cdir, CDIR, FREAD); 352 /* 353 * jail root, if any. 354 */ 355 if (filed.fd_jdir) 356 vtrans(filed.fd_jdir, JDIR, FREAD); 357 /* 358 * ktrace vnode, if one 359 */ 360 if (kp->ki_tracep) 361 vtrans(kp->ki_tracep, TRACE, FREAD|FWRITE); 362 /* 363 * text vnode, if one 364 */ 365 if (kp->ki_textvp) 366 vtrans(kp->ki_textvp, TEXT, FREAD); 367 /* 368 * open files 369 */ 370#define FPSIZE (sizeof (struct file *)) 371#define MAX_LASTFILE (0x1000000) 372 373 /* Sanity check on filed.fd_lastfile */ 374 if (filed.fd_lastfile <= -1 || filed.fd_lastfile > MAX_LASTFILE) 375 return; 376 377 ALLOC_OFILES(filed.fd_lastfile+1); 378 if (!KVM_READ(filed.fd_ofiles, ofiles, 379 (filed.fd_lastfile+1) * FPSIZE)) { 380 dprintf(stderr, 381 "can't read file structures at %p for pid %d\n", 382 (void *)filed.fd_ofiles, Pid); 383 return; 384 } 385 for (i = 0; i <= filed.fd_lastfile; i++) { 386 if (ofiles[i] == NULL) 387 continue; 388 if (!KVM_READ(ofiles[i], &file, sizeof (struct file))) { 389 dprintf(stderr, "can't read file %d at %p for pid %d\n", 390 i, (void *)ofiles[i], Pid); 391 continue; 392 } 393 if (file.f_type == DTYPE_VNODE) 394 vtrans(file.f_vnode, i, file.f_flag); 395 else if (file.f_type == DTYPE_SOCKET) { 396 if (checkfile == 0) 397 socktrans(file.f_data, i); 398 } 399#ifdef DTYPE_PIPE 400 else if (file.f_type == DTYPE_PIPE) { 401 if (checkfile == 0) 402 pipetrans(file.f_data, i, file.f_flag); 403 } 404#endif 405#ifdef DTYPE_FIFO 406 else if (file.f_type == DTYPE_FIFO) { 407 if (checkfile == 0) 408 vtrans(file.f_vnode, i, file.f_flag); 409 } 410#endif 411 else { 412 dprintf(stderr, 413 "unknown file type %d for file %d of pid %d\n", 414 file.f_type, i, Pid); 415 } 416 } 417} 418 419void 420dommap(struct kinfo_proc *kp) 421{ 422 vm_map_t map; 423 struct vmspace vmspace; 424 struct vm_map_entry entry; 425 vm_map_entry_t entryp; 426 struct vm_object object; 427 vm_object_t objp; 428 int prot, fflags; 429 430 if (!KVM_READ(kp->ki_vmspace, &vmspace, sizeof(vmspace))) { 431 dprintf(stderr, 432 "can't read vmspace at %p for pid %d\n", 433 (void *)kp->ki_vmspace, Pid); 434 return; 435 } 436 map = &vmspace.vm_map; 437 438 for (entryp = map->header.next; 439 entryp != &kp->ki_vmspace->vm_map.header; entryp = entry.next) { 440 if (!KVM_READ(entryp, &entry, sizeof(entry))) { 441 dprintf(stderr, 442 "can't read vm_map_entry at %p for pid %d\n", 443 (void *)entryp, Pid); 444 return; 445 } 446 447 if (entry.eflags & MAP_ENTRY_IS_SUB_MAP) 448 continue; 449 450 if ((objp = entry.object.vm_object) == NULL) 451 continue; 452 453 for (; objp; objp = object.backing_object) { 454 if (!KVM_READ(objp, &object, sizeof(object))) { 455 dprintf(stderr, 456 "can't read vm_object at %p for pid %d\n", 457 (void *)objp, Pid); 458 return; 459 } 460 } 461 462 prot = entry.protection; 463 fflags = (prot & VM_PROT_READ ? FREAD : 0) | 464 (prot & VM_PROT_WRITE ? FWRITE : 0); 465 466 switch (object.type) { 467 case OBJT_VNODE: 468 vtrans((struct vnode *)object.handle, MMAP, fflags); 469 break; 470 default: 471 break; 472 } 473 } 474} 475 476char * 477kdevtoname(struct cdev *dev) 478{ 479 struct cdev si; 480 481 if (!KVM_READ(dev, &si, sizeof si)) 482 return (NULL); 483 return (strdup(si.__si_namebuf)); 484} 485 486void 487vtrans(struct vnode *vp, int i, int flag) 488{ 489 struct vnode vn; 490 struct filestat fst; 491 char rw[3], mode[15], tagstr[12], *tagptr; 492 const char *badtype, *filename; 493 494 filename = badtype = NULL; 495 if (!KVM_READ(vp, &vn, sizeof (struct vnode))) { 496 dprintf(stderr, "can't read vnode at %p for pid %d\n", 497 (void *)vp, Pid); 498 return; 499 } 500 if (!KVM_READ(&vp->v_tag, &tagptr, sizeof tagptr) || 501 !KVM_READ(tagptr, tagstr, sizeof tagstr)) { 502 dprintf(stderr, "can't read v_tag at %p for pid %d\n", 503 (void *)vp, Pid); 504 return; 505 } 506 tagstr[sizeof(tagstr) - 1] = '\0'; 507 if (vn.v_type == VNON) 508 badtype = "none"; 509 else if (vn.v_type == VBAD) 510 badtype = "bad"; 511 else { 512 if (!strcmp("ufs", tagstr)) { 513 if (!ufs_filestat(&vn, &fst)) 514 badtype = "error"; 515 } else if (!strcmp("devfs", tagstr)) { 516 if (!devfs_filestat(&vn, &fst)) 517 badtype = "error"; 518 } else if (!strcmp("nfs", tagstr)) { 519 if (!nfs_filestat(&vn, &fst)) 520 badtype = "error"; 521 } else if (!strcmp("msdosfs", tagstr)) { 522 if (!msdosfs_filestat(&vn, &fst)) 523 badtype = "error"; 524 } else if (!strcmp("isofs", tagstr)) { 525 if (!isofs_filestat(&vn, &fst)) 526 badtype = "error"; 527 } else { 528 static char unknown[32]; 529 snprintf(unknown, sizeof unknown, "?(%s)", tagstr); 530 badtype = unknown; 531 } 532 } 533 if (checkfile) { 534 int fsmatch = 0; 535 DEVS *d; 536 537 if (badtype) 538 return; 539 for (d = devs; d != NULL; d = d->next) 540 if (d->fsid == fst.fsid) { 541 fsmatch = 1; 542 if (d->ino == fst.fileid) { 543 filename = d->name; 544 break; 545 } 546 } 547 if (fsmatch == 0 || (filename == NULL && fsflg == 0)) 548 return; 549 } 550 PREFIX(i); 551 if (badtype) { 552 (void)printf(" - - %10s -\n", badtype); 553 return; 554 } 555 if (nflg) 556 (void)printf(" %2d,%-2d", major(fst.fsid), minor(fst.fsid)); 557 else 558 (void)printf(" %-8s", getmnton(vn.v_mount)); 559 if (nflg) 560 (void)sprintf(mode, "%o", fst.mode); 561 else 562 strmode(fst.mode, mode); 563 (void)printf(" %6ld %10s", fst.fileid, mode); 564 switch (vn.v_type) { 565 case VBLK: 566 case VCHR: { 567 char *name; 568 569 name = kdevtoname(vn.v_rdev); 570 if (nflg || !name) 571 printf(" %2d,%-2d", major(fst.rdev), minor(fst.rdev)); 572 else { 573 printf(" %6s", name); 574 free(name); 575 } 576 break; 577 } 578 default: 579 printf(" %6lu", fst.size); 580 } 581 rw[0] = '\0'; 582 if (flag & FREAD) 583 strcat(rw, "r"); 584 if (flag & FWRITE) 585 strcat(rw, "w"); 586 printf(" %2s", rw); 587 if (filename && !fsflg) 588 printf(" %s", filename); 589 putchar('\n'); 590} 591 592int 593ufs_filestat(struct vnode *vp, struct filestat *fsp) 594{ 595 struct inode inode; 596 597 if (!KVM_READ(VTOI(vp), &inode, sizeof (inode))) { 598 dprintf(stderr, "can't read inode at %p for pid %d\n", 599 (void *)VTOI(vp), Pid); 600 return 0; 601 } 602 /* 603 * The st_dev from stat(2) is a dev_t. These kernel structures 604 * contain cdev pointers. We need to convert to dev_t to make 605 * comparisons 606 */ 607 fsp->fsid = dev2udev(inode.i_dev); 608 fsp->fileid = (long)inode.i_number; 609 fsp->mode = (mode_t)inode.i_mode; 610 fsp->size = (u_long)inode.i_size; 611#if should_be_but_is_hard 612 /* XXX - need to load i_ump and i_din[12] from kernel memory */ 613 if (inode.i_ump->um_fstype == UFS1) 614 fsp->rdev = inode.i_din1->di_rdev; 615 else 616 fsp->rdev = inode.i_din2->di_rdev; 617#else 618 fsp->rdev = 0; 619#endif 620 621 return 1; 622} 623 624int 625devfs_filestat(struct vnode *vp, struct filestat *fsp) 626{ 627 struct devfs_dirent devfs_dirent; 628 struct mount mount; 629 struct vnode vnode; 630 631 if (!KVM_READ(vp->v_data, &devfs_dirent, sizeof (devfs_dirent))) { 632 dprintf(stderr, "can't read devfs_dirent at %p for pid %d\n", 633 (void *)vp->v_data, Pid); 634 return 0; 635 } 636 if (!KVM_READ(vp->v_mount, &mount, sizeof (mount))) { 637 dprintf(stderr, "can't read mount at %p for pid %d\n", 638 (void *)vp->v_mount, Pid); 639 return 0; 640 } 641 if (!KVM_READ(devfs_dirent.de_vnode, &vnode, sizeof (vnode))) { 642 dprintf(stderr, "can't read vnode at %p for pid %d\n", 643 (void *)devfs_dirent.de_vnode, Pid); 644 return 0; 645 } 646 fsp->fsid = (long)mount.mnt_stat.f_fsid.val[0]; 647 fsp->fileid = devfs_dirent.de_inode; 648 fsp->mode = (devfs_dirent.de_mode & ~S_IFMT) | S_IFCHR; 649 fsp->size = 0; 650 fsp->rdev = dev2udev(vnode.v_rdev); 651 652 return 1; 653} 654 655int 656nfs_filestat(struct vnode *vp, struct filestat *fsp) 657{ 658 struct nfsnode nfsnode; 659 mode_t mode; 660 661 if (!KVM_READ(VTONFS(vp), &nfsnode, sizeof (nfsnode))) { 662 dprintf(stderr, "can't read nfsnode at %p for pid %d\n", 663 (void *)VTONFS(vp), Pid); 664 return 0; 665 } 666 fsp->fsid = nfsnode.n_vattr.va_fsid; 667 fsp->fileid = nfsnode.n_vattr.va_fileid; 668 fsp->size = nfsnode.n_size; 669 fsp->rdev = nfsnode.n_vattr.va_rdev; 670 mode = (mode_t)nfsnode.n_vattr.va_mode; 671 switch (vp->v_type) { 672 case VREG: 673 mode |= S_IFREG; 674 break; 675 case VDIR: 676 mode |= S_IFDIR; 677 break; 678 case VBLK: 679 mode |= S_IFBLK; 680 break; 681 case VCHR: 682 mode |= S_IFCHR; 683 break; 684 case VLNK: 685 mode |= S_IFLNK; 686 break; 687 case VSOCK: 688 mode |= S_IFSOCK; 689 break; 690 case VFIFO: 691 mode |= S_IFIFO; 692 break; 693 case VNON: 694 case VBAD: 695 return 0; 696 }; 697 fsp->mode = mode; 698 699 return 1; 700} 701 702 703char * 704getmnton(struct mount *m) 705{ 706 static struct mount mount; 707 static struct mtab { 708 struct mtab *next; 709 struct mount *m; 710 char mntonname[MNAMELEN]; 711 } *mhead = NULL; 712 struct mtab *mt; 713 714 for (mt = mhead; mt != NULL; mt = mt->next) 715 if (m == mt->m) 716 return (mt->mntonname); 717 if (!KVM_READ(m, &mount, sizeof(struct mount))) { 718 warnx("can't read mount table at %p", (void *)m); 719 return (NULL); 720 } 721 if ((mt = malloc(sizeof (struct mtab))) == NULL) 722 err(1, NULL); 723 mt->m = m; 724 bcopy(&mount.mnt_stat.f_mntonname[0], &mt->mntonname[0], MNAMELEN); 725 mt->next = mhead; 726 mhead = mt; 727 return (mt->mntonname); 728} 729 730void 731pipetrans(struct pipe *pi, int i, int flag) 732{ 733 struct pipe pip; 734 char rw[3]; 735 736 PREFIX(i); 737 738 /* fill in socket */ 739 if (!KVM_READ(pi, &pip, sizeof(struct pipe))) { 740 dprintf(stderr, "can't read pipe at %p\n", (void *)pi); 741 goto bad; 742 } 743 744 printf("* pipe %8lx <-> %8lx", (u_long)pi, (u_long)pip.pipe_peer); 745 printf(" %6d", (int)pip.pipe_buffer.cnt); 746 rw[0] = '\0'; 747 if (flag & FREAD) 748 strcat(rw, "r"); 749 if (flag & FWRITE) 750 strcat(rw, "w"); 751 printf(" %2s", rw); 752 putchar('\n'); 753 return; 754 755bad: 756 printf("* error\n"); 757} 758 759void 760socktrans(struct socket *sock, int i) 761{ 762 static const char *stypename[] = { 763 "unused", /* 0 */ 764 "stream", /* 1 */ 765 "dgram", /* 2 */ 766 "raw", /* 3 */ 767 "rdm", /* 4 */ 768 "seqpak" /* 5 */ 769 }; 770#define STYPEMAX 5 771 struct socket so; 772 struct protosw proto; 773 struct domain dom; 774 struct inpcb inpcb; 775 struct unpcb unpcb; 776 int len; 777 char dname[32]; 778 779 PREFIX(i); 780 781 /* fill in socket */ 782 if (!KVM_READ(sock, &so, sizeof(struct socket))) { 783 dprintf(stderr, "can't read sock at %p\n", (void *)sock); 784 goto bad; 785 } 786 787 /* fill in protosw entry */ 788 if (!KVM_READ(so.so_proto, &proto, sizeof(struct protosw))) { 789 dprintf(stderr, "can't read protosw at %p", 790 (void *)so.so_proto); 791 goto bad; 792 } 793 794 /* fill in domain */ 795 if (!KVM_READ(proto.pr_domain, &dom, sizeof(struct domain))) { 796 dprintf(stderr, "can't read domain at %p\n", 797 (void *)proto.pr_domain); 798 goto bad; 799 } 800 801 if ((len = kvm_read(kd, (u_long)dom.dom_name, dname, 802 sizeof(dname) - 1)) < 0) { 803 dprintf(stderr, "can't read domain name at %p\n", 804 (void *)dom.dom_name); 805 dname[0] = '\0'; 806 } 807 else 808 dname[len] = '\0'; 809 810 if ((u_short)so.so_type > STYPEMAX) 811 printf("* %s ?%d", dname, so.so_type); 812 else 813 printf("* %s %s", dname, stypename[so.so_type]); 814 815 /* 816 * protocol specific formatting 817 * 818 * Try to find interesting things to print. For tcp, the interesting 819 * thing is the address of the tcpcb, for udp and others, just the 820 * inpcb (socket pcb). For unix domain, its the address of the socket 821 * pcb and the address of the connected pcb (if connected). Otherwise 822 * just print the protocol number and address of the socket itself. 823 * The idea is not to duplicate netstat, but to make available enough 824 * information for further analysis. 825 */ 826 switch(dom.dom_family) { 827 case AF_INET: 828 case AF_INET6: 829 getinetproto(proto.pr_protocol); 830 if (proto.pr_protocol == IPPROTO_TCP ) { 831 if (so.so_pcb) { 832 if (kvm_read(kd, (u_long)so.so_pcb, 833 (char *)&inpcb, sizeof(struct inpcb)) 834 != sizeof(struct inpcb)) { 835 dprintf(stderr, 836 "can't read inpcb at %p\n", 837 (void *)so.so_pcb); 838 goto bad; 839 } 840 printf(" %lx", (u_long)inpcb.inp_ppcb); 841 } 842 } 843 else if (so.so_pcb) 844 printf(" %lx", (u_long)so.so_pcb); 845 break; 846 case AF_UNIX: 847 /* print address of pcb and connected pcb */ 848 if (so.so_pcb) { 849 printf(" %lx", (u_long)so.so_pcb); 850 if (kvm_read(kd, (u_long)so.so_pcb, (char *)&unpcb, 851 sizeof(struct unpcb)) != sizeof(struct unpcb)){ 852 dprintf(stderr, "can't read unpcb at %p\n", 853 (void *)so.so_pcb); 854 goto bad; 855 } 856 if (unpcb.unp_conn) { 857 char shoconn[4], *cp; 858 859 cp = shoconn; 860 if (!(so.so_rcv.sb_state & SBS_CANTRCVMORE)) 861 *cp++ = '<'; 862 *cp++ = '-'; 863 if (!(so.so_snd.sb_state & SBS_CANTSENDMORE)) 864 *cp++ = '>'; 865 *cp = '\0'; 866 printf(" %s %lx", shoconn, 867 (u_long)unpcb.unp_conn); 868 } 869 } 870 break; 871 default: 872 /* print protocol number and socket address */ 873 printf(" %d %lx", proto.pr_protocol, (u_long)sock); 874 } 875 printf("\n"); 876 return; 877bad: 878 printf("* error\n"); 879} 880 881 882/* 883 * Read the cdev structure in the kernel in order to work out the 884 * associated dev_t 885 */ 886dev_t 887dev2udev(struct cdev *dev) 888{ 889 struct cdev_priv priv; 890 struct cdev si; 891 892 if (KVM_READ(dev, &si, sizeof si) && 893 KVM_READ(si.si_priv, &priv, sizeof priv)) { 894 return ((dev_t)priv.cdp_inode); 895 } else { 896 dprintf(stderr, "can't convert cdev *%p to a dev_t\n", dev); 897 return -1; 898 } 899} 900 901/* 902 * getinetproto -- 903 * print name of protocol number 904 */ 905void 906getinetproto(int number) 907{ 908 static int isopen; 909 struct protoent *pe; 910 911 if (!isopen) 912 setprotoent(++isopen); 913 if ((pe = getprotobynumber(number)) != NULL) 914 printf(" %s", pe->p_name); 915 else 916 printf(" %d", number); 917} 918 919int 920getfname(const char *filename) 921{ 922 struct stat statbuf; 923 DEVS *cur; 924 925 if (stat(filename, &statbuf)) { 926 warn("%s", filename); 927 return(0); 928 } 929 if ((cur = malloc(sizeof(DEVS))) == NULL) 930 err(1, NULL); 931 cur->next = devs; 932 devs = cur; 933 934 cur->ino = statbuf.st_ino; 935 cur->fsid = statbuf.st_dev; 936 cur->name = filename; 937 return(1); 938} 939 940void 941usage(void) 942{ 943 (void)fprintf(stderr, 944 "usage: fstat [-fmnv] [-M core] [-N system] [-p pid] [-u user] [file ...]\n"); 945 exit(1); 946} 947