trpt.c revision 56801 
1/*
2 * Copyright (c) 1983, 1988, 1993
3 *	The Regents of the University of California.  All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 *    notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 *    notice, this list of conditions and the following disclaimer in the
12 *    documentation and/or other materials provided with the distribution.
13 * 3. All advertising materials mentioning features or use of this software
14 *    must display the following acknowledgement:
15 *	This product includes software developed by the University of
16 *	California, Berkeley and its contributors.
17 * 4. Neither the name of the University nor the names of its contributors
18 *    may be used to endorse or promote products derived from this software
19 *    without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34#ifndef lint
35static const char copyright[] =
36"@(#) Copyright (c) 1983, 1988, 1993\n\
37	The Regents of the University of California.  All rights reserved.\n";
38#endif /* not lint */
39
40#ifndef lint
41#if 0
42static char sccsid[] = "@(#)trpt.c	8.1 (Berkeley) 6/6/93";
43#endif
44static const char rcsid[] =
45  "$FreeBSD: head/usr.sbin/trpt/trpt.c 56801 2000-01-29 11:49:07Z shin $";
46#endif /* not lint */
47
48#include <sys/param.h>
49#include <sys/queue.h>
50#include <sys/socket.h>
51#include <sys/socketvar.h>
52#define PRUREQUESTS
53#include <sys/protosw.h>
54#include <sys/file.h>
55#include <sys/time.h>
56
57#include <net/route.h>
58#include <net/if.h>
59
60#include <netinet/in.h>
61#include <netinet/in_systm.h>
62#include <netinet/ip.h>
63#ifdef INET6
64#include <netinet/ip6.h>
65#endif
66#include <netinet/ip_var.h>
67#include <netinet/tcp.h>
68#define TCPSTATES
69#include <netinet/tcp_fsm.h>
70#include <netinet/tcp_seq.h>
71#define	TCPTIMERS
72#include <netinet/tcp_timer.h>
73#include <netinet/tcp_var.h>
74#include <netinet/tcpip.h>
75#define	TANAMES
76#include <netinet/tcp_debug.h>
77
78#include <arpa/inet.h>
79
80#include <err.h>
81#include <nlist.h>
82#include <paths.h>
83#include <stdio.h>
84#include <stdlib.h>
85#include <unistd.h>
86
87struct nlist nl[] = {
88#define	N_TCP_DEBUG	0
89	{ "_tcp_debug" },
90#define	N_TCP_DEBX	1
91	{ "_tcp_debx" },
92	{ "" },
93};
94
95static caddr_t tcp_pcbs[TCP_NDEBUG];
96static n_time ntime;
97static int aflag, kflag, memf, follow, sflag, tflag;
98
99void dotrace __P((caddr_t));
100void klseek __P((int, off_t, int));
101int numeric __P((caddr_t *, caddr_t *));
102void tcp_trace __P((short, short, struct tcpcb *, struct tcpcb *,
103			int, void *, struct tcphdr *, int));
104static void usage __P((void));
105
106int
107main(argc, argv)
108	int argc;
109	char **argv;
110{
111	int ch, i, jflag, npcbs;
112	char *system, *core;
113
114	jflag = npcbs = 0;
115	while ((ch = getopt(argc, argv, "afjp:st")) != -1)
116		switch (ch) {
117		case 'a':
118			++aflag;
119			break;
120		case 'f':
121			++follow;
122			setlinebuf(stdout);
123			break;
124		case 'j':
125			++jflag;
126			break;
127		case 'p':
128			if (npcbs >= TCP_NDEBUG)
129				errx(1, "too many pcb's specified");
130			(void)sscanf(optarg, "%x", (int *)&tcp_pcbs[npcbs++]);
131			break;
132		case 's':
133			++sflag;
134			break;
135		case 't':
136			++tflag;
137			break;
138		case '?':
139		default:
140			usage();
141		}
142	argc -= optind;
143	argv += optind;
144
145	core = _PATH_KMEM;
146	if (argc > 0) {
147		system = *argv;
148		argc--, argv++;
149		if (argc > 0) {
150			core = *argv;
151			argc--, argv++;
152			++kflag;
153		}
154		/*
155		 * Discard setgid privileges if not the running kernel so that
156		 * bad guys can't print interesting stuff from kernel memory.
157		 */
158		setgid(getgid());
159	}
160	else
161		system = (char *)getbootfile();
162
163	if (nlist(system, nl) < 0 || !nl[0].n_value)
164		errx(1, "%s: no namelist", system);
165	if ((memf = open(core, O_RDONLY)) < 0)
166		err(2, "%s", core);
167	if (kflag)
168		errx(1, "can't do core files yet");
169	(void)klseek(memf, (off_t)nl[N_TCP_DEBX].n_value, L_SET);
170	if (read(memf, (char *)&tcp_debx, sizeof(tcp_debx)) !=
171	    sizeof(tcp_debx))
172		err(3, "tcp_debx");
173	(void)klseek(memf, (off_t)nl[N_TCP_DEBUG].n_value, L_SET);
174	if (read(memf, (char *)tcp_debug, sizeof(tcp_debug)) !=
175	    sizeof(tcp_debug))
176		err(3, "tcp_debug");
177	/*
178	 * If no control blocks have been specified, figure
179	 * out how many distinct one we have and summarize
180	 * them in tcp_pcbs for sorting the trace records
181	 * below.
182	 */
183	if (!npcbs) {
184		for (i = 0; i < TCP_NDEBUG; i++) {
185			register struct tcp_debug *td = &tcp_debug[i];
186			register int j;
187
188			if (td->td_tcb == 0)
189				continue;
190			for (j = 0; j < npcbs; j++)
191				if (tcp_pcbs[j] == td->td_tcb)
192					break;
193			if (j >= npcbs)
194				tcp_pcbs[npcbs++] = td->td_tcb;
195		}
196		if (!npcbs)
197			exit(0);
198	}
199	qsort(tcp_pcbs, npcbs, sizeof(caddr_t), numeric);
200	if (jflag) {
201		for (i = 0;;) {
202			printf("%x", (int)tcp_pcbs[i]);
203			if (++i == npcbs)
204				break;
205			fputs(", ", stdout);
206		}
207		putchar('\n');
208	}
209	else for (i = 0; i < npcbs; i++) {
210		printf("\n%x:\n", (int)tcp_pcbs[i]);
211		dotrace(tcp_pcbs[i]);
212	}
213	exit(0);
214}
215
216static void
217usage()
218{
219	(void)fprintf(stderr,
220		"usage: trpt [-afjst] [-p hex-address] [system [core]]\n");
221	exit(1);
222}
223
224void
225dotrace(tcpcb)
226	register caddr_t tcpcb;
227{
228	register struct tcp_debug *td;
229	register int i;
230	int prev_debx = tcp_debx, family;
231
232again:	if (--tcp_debx < 0)
233		tcp_debx = TCP_NDEBUG - 1;
234	for (i = prev_debx % TCP_NDEBUG; i < TCP_NDEBUG; i++) {
235		td = &tcp_debug[i];
236		if (tcpcb && td->td_tcb != tcpcb)
237			continue;
238		ntime = ntohl(td->td_time);
239#ifdef INET6
240		family = td->td_family;
241#else
242		family = AF_INET;
243#endif
244		switch(family) {
245		case AF_INET:
246			tcp_trace(td->td_act, td->td_ostate,
247				  (struct tcpcb *)td->td_tcb,
248				  &td->td_cb, td->td_family, &td->td_ti.ti_i,
249				  &td->td_ti.ti_t, td->td_req);
250			break;
251#ifdef INET6
252		case AF_INET6:
253			tcp_trace(td->td_act, td->td_ostate,
254				  (struct tcpcb *)td->td_tcb,
255				  &td->td_cb, td->td_family, &td->td_ti6.ip6,
256				  &td->td_ti6.th, td->td_req);
257			break;
258#endif
259		}
260		if (i == tcp_debx)
261			goto done;
262	}
263	for (i = 0; i <= tcp_debx % TCP_NDEBUG; i++) {
264		td = &tcp_debug[i];
265		if (tcpcb && td->td_tcb != tcpcb)
266			continue;
267		ntime = ntohl(td->td_time);
268#ifdef INET6
269		family = td->td_family;
270#else
271		family = AF_INET;
272#endif
273		switch(family) {
274		case AF_INET:
275			tcp_trace(td->td_act, td->td_ostate,
276				  (struct tcpcb *)td->td_tcb,
277				  &td->td_cb, td->td_family, &td->td_ti.ti_i,
278				  &td->td_ti.ti_t, td->td_req);
279			break;
280#ifdef INET6
281		case AF_INET6:
282			tcp_trace(td->td_act, td->td_ostate,
283				  (struct tcpcb *)td->td_tcb,
284				  &td->td_cb, td->td_family, &td->td_ti6.ip6,
285				  &td->td_ti6.th, td->td_req);
286			break;
287#endif
288		}
289	}
290done:	if (follow) {
291		prev_debx = tcp_debx + 1;
292		if (prev_debx >= TCP_NDEBUG)
293			prev_debx = 0;
294		do {
295			sleep(1);
296			(void)klseek(memf, (off_t)nl[N_TCP_DEBX].n_value, L_SET);
297			if (read(memf, (char *)&tcp_debx, sizeof(tcp_debx)) !=
298			    sizeof(tcp_debx))
299				err(3, "tcp_debx");
300		} while (tcp_debx == prev_debx);
301		(void)klseek(memf, (off_t)nl[N_TCP_DEBUG].n_value, L_SET);
302		if (read(memf, (char *)tcp_debug, sizeof(tcp_debug)) !=
303		    sizeof(tcp_debug))
304			err(3, "tcp_debug");
305		goto again;
306	}
307}
308
309/*
310 * Tcp debug routines
311 */
312/*ARGSUSED*/
313void
314tcp_trace(act, ostate, atp, tp, family, ip, th, req)
315	short act, ostate;
316	struct tcpcb *atp, *tp;
317	int family;
318	void *ip;
319	struct tcphdr *th;
320	int req;
321{
322	tcp_seq seq, ack;
323	int flags, len, win, timer;
324	struct ip *ip4;
325#ifdef INET6
326	int isipv6, nopkt = 1;
327	struct ip6_hdr *ip6;
328	char ntop_buf[INET6_ADDRSTRLEN];
329#endif
330
331#ifdef INET6
332	switch (family) {
333	case AF_INET:
334		nopkt = 0;
335		isipv6 = 0;
336		ip4 = (struct ip *)ip;
337		break;
338	case AF_INET6:
339		nopkt = 0;
340		isipv6 = 1;
341		ip6 = (struct ip6_hdr *)ip;
342	case 0:
343	default:
344		break;
345	}
346#else
347	ip4 = (struct ip *)ip;
348#endif
349	printf("%03ld %s:%s ",(ntime/10) % 1000, tcpstates[ostate],
350	    tanames[act]);
351	switch (act) {
352	case TA_INPUT:
353	case TA_OUTPUT:
354	case TA_DROP:
355#ifdef INET6
356		if (nopkt != 0)
357			break;
358#endif
359		if (aflag) {
360			printf("(src=%s,%u, ",
361
362#ifdef INET6
363			       isipv6
364			       ? inet_ntop(AF_INET6, &ip6->ip6_src, ntop_buf,
365					   sizeof(ntop_buf)) :
366#endif
367			       inet_ntoa(ip4->ip_src),
368			       ntohs(th->th_sport));
369			printf("dst=%s,%u)",
370#ifdef INET6
371			       isipv6
372			       ? inet_ntop(AF_INET6, &ip6->ip6_dst, ntop_buf,
373					   sizeof(ntop_buf)) :
374#endif
375			       inet_ntoa(ip4->ip_dst),
376			       ntohs(th->th_dport));
377		}
378		seq = th->th_seq;
379		ack = th->th_ack;
380
381		len =
382#ifdef INET6
383			isipv6 ? ip6->ip6_plen :
384#endif
385			ip4->ip_len;
386		win = th->th_win;
387		if (act == TA_OUTPUT) {
388			seq = ntohl(seq);
389			ack = ntohl(ack);
390			len = ntohs(len);
391			win = ntohs(win);
392		}
393		if (act == TA_OUTPUT)
394			len -= sizeof(struct tcphdr);
395		if (len)
396			printf("[%lx..%lx)", seq, seq + len);
397		else
398			printf("%lx", seq);
399		printf("@%lx", ack);
400		if (win)
401			printf("(win=%x)", win);
402		flags = th->th_flags;
403		if (flags) {
404			register char *cp = "<";
405#define	pf(flag, string) { \
406	if (th->th_flags&flag) { \
407		(void)printf("%s%s", cp, string); \
408		cp = ","; \
409	} \
410}
411			pf(TH_SYN, "SYN");
412			pf(TH_ACK, "ACK");
413			pf(TH_FIN, "FIN");
414			pf(TH_RST, "RST");
415			pf(TH_PUSH, "PUSH");
416			pf(TH_URG, "URG");
417			printf(">");
418		}
419		break;
420	case TA_USER:
421		timer = req >> 8;
422		req &= 0xff;
423		printf("%s", prurequests[req]);
424		if (req == PRU_SLOWTIMO || req == PRU_FASTTIMO)
425			printf("<%s>", tcptimers[timer]);
426		break;
427	}
428	printf(" -> %s", tcpstates[tp->t_state]);
429	/* print out internal state of tp !?! */
430	printf("\n");
431	if (sflag) {
432		printf("\trcv_nxt %lx rcv_wnd %x snd_una %lx snd_nxt %lx snd_max %lx\n",
433		    tp->rcv_nxt, tp->rcv_wnd, tp->snd_una, tp->snd_nxt,
434		    tp->snd_max);
435		printf("\tsnd_wl1 %lx snd_wl2 %lx snd_wnd %x\n", tp->snd_wl1,
436		    tp->snd_wl2, tp->snd_wnd);
437	}
438	/* print out timers? */
439#if 0
440	/*
441	 * XXX
442	 * kernel now uses callouts, not integer time values.
443	 */
444	if (tflag) {
445		register char *cp = "\t";
446		register int i;
447
448		for (i = 0; i < TCPT_NTIMERS; i++) {
449			if (tp->t_timer[i] == 0)
450				continue;
451			printf("%s%s=%d", cp, tcptimers[i], tp->t_timer[i]);
452			if (i == TCPT_REXMT)
453				printf(" (t_rxtshft=%d)", tp->t_rxtshift);
454			cp = ", ";
455		}
456		if (*cp != '\t')
457			putchar('\n');
458	}
459#endif
460}
461
462int
463numeric(c1, c2)
464	caddr_t *c1, *c2;
465{
466	return(*c1 - *c2);
467}
468
469void
470klseek(fd, base, off)
471	int fd, off;
472	off_t base;
473{
474	(void)lseek(fd, base, off);
475}
476