kdump.c revision 226153
1/*-
2 * Copyright (c) 1988, 1993
3 *	The Regents of the University of California.  All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 *    notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 *    notice, this list of conditions and the following disclaimer in the
12 *    documentation and/or other materials provided with the distribution.
13 * 4. Neither the name of the University nor the names of its contributors
14 *    may be used to endorse or promote products derived from this software
15 *    without specific prior written permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 */
29
30#ifndef lint
31static const char copyright[] =
32"@(#) Copyright (c) 1988, 1993\n\
33	The Regents of the University of California.  All rights reserved.\n";
34#endif /* not lint */
35
36#ifndef lint
37#if 0
38static char sccsid[] = "@(#)kdump.c	8.1 (Berkeley) 6/6/93";
39#endif
40#endif /* not lint */
41#include <sys/cdefs.h>
42__FBSDID("$FreeBSD: head/usr.bin/kdump/kdump.c 226153 2011-10-08 12:28:06Z des $");
43
44#define _KERNEL
45extern int errno;
46#include <sys/errno.h>
47#undef _KERNEL
48#include <sys/param.h>
49#include <sys/errno.h>
50#define _KERNEL
51#include <sys/time.h>
52#undef _KERNEL
53#include <sys/uio.h>
54#include <sys/ktrace.h>
55#include <sys/ioctl.h>
56#include <sys/socket.h>
57#include <sys/stat.h>
58#include <sys/sysent.h>
59#include <sys/un.h>
60#include <sys/queue.h>
61#ifdef IPX
62#include <sys/types.h>
63#include <netipx/ipx.h>
64#endif
65#ifdef NETATALK
66#include <netatalk/at.h>
67#endif
68#include <arpa/inet.h>
69#include <netinet/in.h>
70#include <ctype.h>
71#include <dlfcn.h>
72#include <err.h>
73#include <grp.h>
74#include <inttypes.h>
75#include <locale.h>
76#include <pwd.h>
77#include <stdio.h>
78#include <stdlib.h>
79#include <string.h>
80#include <time.h>
81#include <unistd.h>
82#include <vis.h>
83#include "ktrace.h"
84#include "kdump_subr.h"
85
86u_int abidump(struct ktr_header *);
87int fetchprocinfo(struct ktr_header *, u_int *);
88int fread_tail(void *, int, int);
89void dumpheader(struct ktr_header *);
90void ktrsyscall(struct ktr_syscall *, u_int);
91void ktrsysret(struct ktr_sysret *, u_int);
92void ktrnamei(char *, int);
93void hexdump(char *, int, int);
94void visdump(char *, int, int);
95void ktrgenio(struct ktr_genio *, int);
96void ktrpsig(struct ktr_psig *);
97void ktrcsw(struct ktr_csw *);
98void ktruser(int, unsigned char *);
99void ktrsockaddr(struct sockaddr *);
100void ktrstat(struct stat *);
101void ktrstruct(char *, size_t);
102void usage(void);
103const char *ioctlname(u_long);
104
105int timestamp, decimal, fancy = 1, suppressdata, tail, threads, maxdata,
106    resolv = 0, abiflag = 0;
107const char *tracefile = DEF_TRACEFILE;
108struct ktr_header ktr_header;
109
110#define TIME_FORMAT	"%b %e %T %Y"
111#define eqs(s1, s2)	(strcmp((s1), (s2)) == 0)
112
113#define print_number(i,n,c)					\
114	do {							\
115		if (decimal)					\
116			printf("%c%jd", c, (intmax_t)*i);	\
117		else						\
118			printf("%c%#jx", c, (intmax_t)*i);	\
119		i++;						\
120		n--;						\
121		c = ',';					\
122	} while (0)
123
124#if defined(__amd64__) || defined(__i386__)
125
126void linux_ktrsyscall(struct ktr_syscall *);
127void linux_ktrsysret(struct ktr_sysret *);
128extern char *linux_syscallnames[];
129extern int nlinux_syscalls;
130
131/*
132 * from linux.h
133 * Linux syscalls return negative errno's, we do positive and map them
134 */
135static int bsd_to_linux_errno[ELAST + 1] = {
136	-0,  -1,  -2,  -3,  -4,  -5,  -6,  -7,  -8,  -9,
137	-10, -35, -12, -13, -14, -15, -16, -17, -18, -19,
138	-20, -21, -22, -23, -24, -25, -26, -27, -28, -29,
139	-30, -31, -32, -33, -34, -11,-115,-114, -88, -89,
140	-90, -91, -92, -93, -94, -95, -96, -97, -98, -99,
141	-100,-101,-102,-103,-104,-105,-106,-107,-108,-109,
142	-110,-111, -40, -36,-112,-113, -39, -11, -87,-122,
143	-116, -66,  -6,  -6,  -6,  -6,  -6, -37, -38,  -9,
144	-6,  -6, -43, -42, -75,-125, -84, -95, -16, -74,
145	-72, -67, -71
146};
147#endif
148
149struct proc_info
150{
151	TAILQ_ENTRY(proc_info)	info;
152	u_int			sv_flags;
153	pid_t			pid;
154};
155
156TAILQ_HEAD(trace_procs, proc_info) trace_procs;
157
158int
159main(int argc, char *argv[])
160{
161	int ch, ktrlen, size;
162	void *m;
163	int trpoints = ALL_POINTS;
164	int drop_logged;
165	pid_t pid = 0;
166	u_int sv_flags;
167
168	setlocale(LC_CTYPE, "");
169
170	while ((ch = getopt(argc,argv,"f:dElm:np:AHRrsTt:")) != -1)
171		switch (ch) {
172		case 'A':
173			abiflag = 1;
174			break;
175		case 'f':
176			tracefile = optarg;
177			break;
178		case 'd':
179			decimal = 1;
180			break;
181		case 'l':
182			tail = 1;
183			break;
184		case 'm':
185			maxdata = atoi(optarg);
186			break;
187		case 'n':
188			fancy = 0;
189			break;
190		case 'p':
191			pid = atoi(optarg);
192			break;
193		case 'r':
194			resolv = 1;
195			break;
196		case 's':
197			suppressdata = 1;
198			break;
199		case 'E':
200			timestamp = 3;	/* elapsed timestamp */
201			break;
202		case 'H':
203			threads = 1;
204			break;
205		case 'R':
206			timestamp = 2;	/* relative timestamp */
207			break;
208		case 'T':
209			timestamp = 1;
210			break;
211		case 't':
212			trpoints = getpoints(optarg);
213			if (trpoints < 0)
214				errx(1, "unknown trace point in %s", optarg);
215			break;
216		default:
217			usage();
218		}
219
220	if (argc > optind)
221		usage();
222
223	m = malloc(size = 1025);
224	if (m == NULL)
225		errx(1, "%s", strerror(ENOMEM));
226	if (!freopen(tracefile, "r", stdin))
227		err(1, "%s", tracefile);
228	TAILQ_INIT(&trace_procs);
229	drop_logged = 0;
230	while (fread_tail(&ktr_header, sizeof(struct ktr_header), 1)) {
231		if (ktr_header.ktr_type & KTR_DROP) {
232			ktr_header.ktr_type &= ~KTR_DROP;
233			if (!drop_logged && threads) {
234				printf(
235				    "%6jd %6jd %-8.*s Events dropped.\n",
236				    (intmax_t)ktr_header.ktr_pid,
237				    ktr_header.ktr_tid > 0 ?
238				    (intmax_t)ktr_header.ktr_tid : 0,
239				    MAXCOMLEN, ktr_header.ktr_comm);
240				drop_logged = 1;
241			} else if (!drop_logged) {
242				printf("%6jd %-8.*s Events dropped.\n",
243				    (intmax_t)ktr_header.ktr_pid, MAXCOMLEN,
244				    ktr_header.ktr_comm);
245				drop_logged = 1;
246			}
247		}
248		if (trpoints & (1<<ktr_header.ktr_type))
249			if (pid == 0 || ktr_header.ktr_pid == pid)
250				dumpheader(&ktr_header);
251		if ((ktrlen = ktr_header.ktr_len) < 0)
252			errx(1, "bogus length 0x%x", ktrlen);
253		if (ktrlen > size) {
254			m = realloc(m, ktrlen+1);
255			if (m == NULL)
256				errx(1, "%s", strerror(ENOMEM));
257			size = ktrlen;
258		}
259		if (ktrlen && fread_tail(m, ktrlen, 1) == 0)
260			errx(1, "data too short");
261		if (fetchprocinfo(&ktr_header, (u_int *)m) != 0)
262			continue;
263		sv_flags = abidump(&ktr_header);
264		if (pid && ktr_header.ktr_pid != pid)
265			continue;
266		if ((trpoints & (1<<ktr_header.ktr_type)) == 0)
267			continue;
268		drop_logged = 0;
269		switch (ktr_header.ktr_type) {
270		case KTR_SYSCALL:
271#if defined(__amd64__) || defined(__i386__)
272			if ((sv_flags & SV_ABI_MASK) == SV_ABI_LINUX)
273				linux_ktrsyscall((struct ktr_syscall *)m);
274			else
275#endif
276				ktrsyscall((struct ktr_syscall *)m, sv_flags);
277			break;
278		case KTR_SYSRET:
279#if defined(__amd64__) || defined(__i386__)
280			if ((sv_flags & SV_ABI_MASK) == SV_ABI_LINUX)
281				linux_ktrsysret((struct ktr_sysret *)m);
282			else
283#endif
284				ktrsysret((struct ktr_sysret *)m, sv_flags);
285			break;
286		case KTR_NAMEI:
287		case KTR_SYSCTL:
288			ktrnamei(m, ktrlen);
289			break;
290		case KTR_GENIO:
291			ktrgenio((struct ktr_genio *)m, ktrlen);
292			break;
293		case KTR_PSIG:
294			ktrpsig((struct ktr_psig *)m);
295			break;
296		case KTR_CSW:
297			ktrcsw((struct ktr_csw *)m);
298			break;
299		case KTR_USER:
300			ktruser(ktrlen, m);
301			break;
302		case KTR_STRUCT:
303			ktrstruct(m, ktrlen);
304			break;
305		default:
306			printf("\n");
307			break;
308		}
309		if (tail)
310			fflush(stdout);
311	}
312	return 0;
313}
314
315int
316fread_tail(void *buf, int size, int num)
317{
318	int i;
319
320	while ((i = fread(buf, size, num, stdin)) == 0 && tail) {
321		sleep(1);
322		clearerr(stdin);
323	}
324	return (i);
325}
326
327int
328fetchprocinfo(struct ktr_header *kth, u_int *flags)
329{
330	struct proc_info *pi;
331
332	switch (kth->ktr_type) {
333	case KTR_PROCCTOR:
334		TAILQ_FOREACH(pi, &trace_procs, info) {
335			if (pi->pid == kth->ktr_pid) {
336				TAILQ_REMOVE(&trace_procs, pi, info);
337				break;
338			}
339		}
340		pi = malloc(sizeof(struct proc_info));
341		if (pi == NULL)
342			errx(1, "%s", strerror(ENOMEM));
343		pi->sv_flags = *flags;
344		pi->pid = kth->ktr_pid;
345		TAILQ_INSERT_TAIL(&trace_procs, pi, info);
346		return (1);
347
348	case KTR_PROCDTOR:
349		TAILQ_FOREACH(pi, &trace_procs, info) {
350			if (pi->pid == kth->ktr_pid) {
351				TAILQ_REMOVE(&trace_procs, pi, info);
352				free(pi);
353				break;
354			}
355		}
356		return (1);
357	}
358
359	return (0);
360}
361
362u_int
363abidump(struct ktr_header *kth)
364{
365	struct proc_info *pi;
366	const char *abi;
367	const char *arch;
368	u_int flags = 0;
369
370	TAILQ_FOREACH(pi, &trace_procs, info) {
371		if (pi->pid == kth->ktr_pid) {
372			flags = pi->sv_flags;
373			break;
374		}
375	}
376
377	if (abiflag == 0)
378		return (flags);
379
380	switch (flags & SV_ABI_MASK) {
381	case SV_ABI_LINUX:
382		abi = "L";
383		break;
384	case SV_ABI_FREEBSD:
385		abi = "F";
386		break;
387	default:
388		abi = "U";
389		break;
390	}
391
392	if (flags != 0) {
393		if (flags & SV_LP64)
394			arch = "64";
395		else
396			arch = "32";
397	} else
398		arch = "00";
399
400	printf("%s%s  ", abi, arch);
401
402	return (flags);
403}
404
405void
406dumpheader(struct ktr_header *kth)
407{
408	static char unknown[64];
409	static struct timeval prevtime, temp;
410	const char *type;
411
412	switch (kth->ktr_type) {
413	case KTR_SYSCALL:
414		type = "CALL";
415		break;
416	case KTR_SYSRET:
417		type = "RET ";
418		break;
419	case KTR_NAMEI:
420		type = "NAMI";
421		break;
422	case KTR_GENIO:
423		type = "GIO ";
424		break;
425	case KTR_PSIG:
426		type = "PSIG";
427		break;
428	case KTR_CSW:
429		type = "CSW ";
430		break;
431	case KTR_USER:
432		type = "USER";
433		break;
434	case KTR_STRUCT:
435		type = "STRU";
436		break;
437	case KTR_SYSCTL:
438		type = "SCTL";
439		break;
440	case KTR_PROCCTOR:
441		/* FALLTHROUGH */
442	case KTR_PROCDTOR:
443		return;
444	default:
445		sprintf(unknown, "UNKNOWN(%d)", kth->ktr_type);
446		type = unknown;
447	}
448
449	/*
450	 * The ktr_tid field was previously the ktr_buffer field, which held
451	 * the kernel pointer value for the buffer associated with data
452	 * following the record header.  It now holds a threadid, but only
453	 * for trace files after the change.  Older trace files still contain
454	 * kernel pointers.  Detect this and suppress the results by printing
455	 * negative tid's as 0.
456	 */
457	if (threads)
458		printf("%6jd %6jd %-8.*s ", (intmax_t)kth->ktr_pid,
459		    kth->ktr_tid > 0 ? (intmax_t)kth->ktr_tid : 0,
460		    MAXCOMLEN, kth->ktr_comm);
461	else
462		printf("%6jd %-8.*s ", (intmax_t)kth->ktr_pid, MAXCOMLEN,
463		    kth->ktr_comm);
464	if (timestamp) {
465		if (timestamp == 3) {
466			if (prevtime.tv_sec == 0)
467				prevtime = kth->ktr_time;
468			timevalsub(&kth->ktr_time, &prevtime);
469		}
470		if (timestamp == 2) {
471			temp = kth->ktr_time;
472			timevalsub(&kth->ktr_time, &prevtime);
473			prevtime = temp;
474		}
475		printf("%jd.%06ld ", (intmax_t)kth->ktr_time.tv_sec,
476		    kth->ktr_time.tv_usec);
477	}
478	printf("%s  ", type);
479}
480
481#include <sys/syscall.h>
482#define KTRACE
483#include <sys/kern/syscalls.c>
484#undef KTRACE
485int nsyscalls = sizeof (syscallnames) / sizeof (syscallnames[0]);
486
487void
488ktrsyscall(struct ktr_syscall *ktr, u_int flags)
489{
490	int narg = ktr->ktr_narg;
491	register_t *ip;
492
493	if ((flags != 0 && ((flags & SV_ABI_MASK) != SV_ABI_FREEBSD)) ||
494	    (ktr->ktr_code >= nsyscalls || ktr->ktr_code < 0))
495		printf("[%d]", ktr->ktr_code);
496	else
497		printf("%s", syscallnames[ktr->ktr_code]);
498	ip = &ktr->ktr_args[0];
499	if (narg) {
500		char c = '(';
501		if (fancy &&
502		    (flags == 0 || (flags & SV_ABI_MASK) == SV_ABI_FREEBSD)) {
503			switch (ktr->ktr_code) {
504			case SYS_ioctl: {
505				const char *cp;
506				print_number(ip, narg, c);
507				if ((cp = ioctlname(*ip)) != NULL)
508					printf(",%s", cp);
509				else {
510					if (decimal)
511						printf(",%jd", (intmax_t)*ip);
512					else
513						printf(",%#jx ", (intmax_t)*ip);
514				}
515				c = ',';
516				ip++;
517				narg--;
518				break;
519			}
520			case SYS_ptrace:
521				putchar('(');
522				ptraceopname((intmax_t)*ip);
523				c = ',';
524				ip++;
525				narg--;
526				break;
527			case SYS_access:
528			case SYS_eaccess:
529				print_number(ip, narg, c);
530				putchar(',');
531				accessmodename((intmax_t)*ip);
532				ip++;
533				narg--;
534				break;
535			case SYS_open:
536				print_number(ip, narg, c);
537				putchar(',');
538				flagsandmodename((int)ip[0], (int)ip[1], decimal);
539				ip += 2;
540				narg -= 2;
541				break;
542			case SYS_wait4:
543				print_number(ip, narg, c);
544				print_number(ip, narg, c);
545				putchar(',');
546				wait4optname((intmax_t)*ip);
547				ip++;
548				narg--;
549				break;
550			case SYS_chmod:
551			case SYS_fchmod:
552			case SYS_lchmod:
553				print_number(ip, narg, c);
554				putchar(',');
555				modename((intmax_t)*ip);
556				ip++;
557				narg--;
558				break;
559			case SYS_mknod:
560				print_number(ip, narg, c);
561				putchar(',');
562				modename((intmax_t)*ip);
563				ip++;
564				narg--;
565				break;
566			case SYS_getfsstat:
567				print_number(ip, narg, c);
568				print_number(ip, narg, c);
569				putchar(',');
570				getfsstatflagsname((intmax_t)*ip);
571				ip++;
572				narg--;
573				break;
574			case SYS_mount:
575				print_number(ip, narg, c);
576				print_number(ip, narg, c);
577				putchar(',');
578				mountflagsname((intmax_t)*ip);
579				ip++;
580				narg--;
581				break;
582			case SYS_unmount:
583				print_number(ip, narg, c);
584				putchar(',');
585				mountflagsname((intmax_t)*ip);
586				ip++;
587				narg--;
588				break;
589			case SYS_recvmsg:
590			case SYS_sendmsg:
591				print_number(ip, narg, c);
592				print_number(ip, narg, c);
593				putchar(',');
594				sendrecvflagsname((int)*ip);
595				ip++;
596				narg--;
597				break;
598			case SYS_recvfrom:
599			case SYS_sendto:
600				print_number(ip, narg, c);
601				print_number(ip, narg, c);
602				print_number(ip, narg, c);
603				putchar(',');
604				sendrecvflagsname((int)*ip);
605				ip++;
606				narg--;
607				break;
608			case SYS_chflags:
609			case SYS_fchflags:
610			case SYS_lchflags:
611				print_number(ip, narg, c);
612				putchar(',');
613				modename((intmax_t)*ip);
614				ip++;
615				narg--;
616				break;
617			case SYS_kill:
618				print_number(ip, narg, c);
619				putchar(',');
620				signame((int)*ip);
621				ip++;
622				narg--;
623				break;
624			case SYS_reboot:
625				putchar('(');
626				rebootoptname((intmax_t)*ip);
627				ip++;
628				narg--;
629				break;
630			case SYS_umask:
631				putchar('(');
632				modename((intmax_t)*ip);
633				ip++;
634				narg--;
635				break;
636			case SYS_msync:
637				print_number(ip, narg, c);
638				print_number(ip, narg, c);
639				putchar(',');
640				msyncflagsname((intmax_t)*ip);
641				ip++;
642				narg--;
643				break;
644#ifdef SYS_freebsd6_mmap
645			case SYS_freebsd6_mmap:
646				print_number(ip, narg, c);
647				print_number(ip, narg, c);
648				putchar(',');
649				mmapprotname((intmax_t)*ip);
650				putchar(',');
651				ip++;
652				narg--;
653				mmapflagsname((intmax_t)*ip);
654				ip++;
655				narg--;
656				break;
657#endif
658			case SYS_mmap:
659				print_number(ip, narg, c);
660				print_number(ip, narg, c);
661				putchar(',');
662				mmapprotname((intmax_t)*ip);
663				putchar(',');
664				ip++;
665				narg--;
666				mmapflagsname((intmax_t)*ip);
667				ip++;
668				narg--;
669				break;
670			case SYS_mprotect:
671				print_number(ip, narg, c);
672				print_number(ip, narg, c);
673				putchar(',');
674				mmapprotname((intmax_t)*ip);
675				ip++;
676				narg--;
677				break;
678			case SYS_madvise:
679				print_number(ip, narg, c);
680				print_number(ip, narg, c);
681				putchar(',');
682				madvisebehavname((intmax_t)*ip);
683				ip++;
684				narg--;
685				break;
686			case SYS_setpriority:
687				print_number(ip, narg, c);
688				print_number(ip, narg, c);
689				putchar(',');
690				prioname((intmax_t)*ip);
691				ip++;
692				narg--;
693				break;
694			case SYS_fcntl:
695				print_number(ip, narg, c);
696				putchar(',');
697				fcntlcmdname((int)ip[0], (int)ip[1], decimal);
698				ip += 2;
699				narg -= 2;
700				break;
701			case SYS_socket: {
702				int sockdomain;
703				putchar('(');
704				sockdomain=(intmax_t)*ip;
705				sockdomainname(sockdomain);
706				ip++;
707				narg--;
708				putchar(',');
709				socktypename((intmax_t)*ip);
710				ip++;
711				narg--;
712				if (sockdomain == PF_INET ||
713				    sockdomain == PF_INET6) {
714					putchar(',');
715					sockipprotoname((intmax_t)*ip);
716					ip++;
717					narg--;
718				}
719				c = ',';
720				break;
721			}
722			case SYS_setsockopt:
723			case SYS_getsockopt:
724				print_number(ip, narg, c);
725				putchar(',');
726				sockoptlevelname((int)*ip, decimal);
727				if (*ip == SOL_SOCKET) {
728					ip++;
729					narg--;
730					putchar(',');
731					sockoptname((intmax_t)*ip);
732				}
733				ip++;
734				narg--;
735				break;
736#ifdef SYS_freebsd6_lseek
737			case SYS_freebsd6_lseek:
738				print_number(ip, narg, c);
739				/* Hidden 'pad' argument, not in lseek(2) */
740				print_number(ip, narg, c);
741				print_number(ip, narg, c);
742				putchar(',');
743				whencename((intmax_t)*ip);
744				ip++;
745				narg--;
746				break;
747#endif
748			case SYS_lseek:
749				print_number(ip, narg, c);
750				/* Hidden 'pad' argument, not in lseek(2) */
751				print_number(ip, narg, c);
752				putchar(',');
753				whencename((intmax_t)*ip);
754				ip++;
755				narg--;
756				break;
757			case SYS_flock:
758				print_number(ip, narg, c);
759				putchar(',');
760				flockname((intmax_t)*ip);
761				ip++;
762				narg--;
763				break;
764			case SYS_mkfifo:
765			case SYS_mkdir:
766				print_number(ip, narg, c);
767				putchar(',');
768				modename((intmax_t)*ip);
769				ip++;
770				narg--;
771				break;
772			case SYS_shutdown:
773				print_number(ip, narg, c);
774				putchar(',');
775				shutdownhowname((intmax_t)*ip);
776				ip++;
777				narg--;
778				break;
779			case SYS_socketpair:
780				putchar('(');
781				sockdomainname((intmax_t)*ip);
782				ip++;
783				narg--;
784				putchar(',');
785				socktypename((intmax_t)*ip);
786				ip++;
787				narg--;
788				c = ',';
789				break;
790			case SYS_getrlimit:
791			case SYS_setrlimit:
792				putchar('(');
793				rlimitname((intmax_t)*ip);
794				ip++;
795				narg--;
796				c = ',';
797				break;
798			case SYS_quotactl:
799				print_number(ip, narg, c);
800				putchar(',');
801				quotactlname((intmax_t)*ip);
802				ip++;
803				narg--;
804				c = ',';
805				break;
806			case SYS_nfssvc:
807				putchar('(');
808				nfssvcname((intmax_t)*ip);
809				ip++;
810				narg--;
811				c = ',';
812				break;
813			case SYS_rtprio:
814				putchar('(');
815				rtprioname((int)*ip);
816				ip++;
817				narg--;
818				c = ',';
819				break;
820			case SYS___semctl:
821				print_number(ip, narg, c);
822				print_number(ip, narg, c);
823				putchar(',');
824				semctlname((int)*ip);
825				ip++;
826				narg--;
827				break;
828			case SYS_semget:
829				print_number(ip, narg, c);
830				print_number(ip, narg, c);
831				putchar(',');
832				semgetname((int)*ip);
833				ip++;
834				narg--;
835				break;
836			case SYS_msgctl:
837				print_number(ip, narg, c);
838				putchar(',');
839				shmctlname((int)*ip);
840				ip++;
841				narg--;
842				break;
843			case SYS_shmat:
844				print_number(ip, narg, c);
845				print_number(ip, narg, c);
846				putchar(',');
847				shmatname((intmax_t)*ip);
848				ip++;
849				narg--;
850				break;
851			case SYS_shmctl:
852				print_number(ip, narg, c);
853				putchar(',');
854				shmctlname((int)*ip);
855				ip++;
856				narg--;
857				break;
858			case SYS_minherit:
859				print_number(ip, narg, c);
860				print_number(ip, narg, c);
861				putchar(',');
862				minheritname((intmax_t)*ip);
863				ip++;
864				narg--;
865				break;
866			case SYS_rfork:
867				putchar('(');
868				rforkname((intmax_t)*ip);
869				ip++;
870				narg--;
871				c = ',';
872				break;
873			case SYS_lio_listio:
874				putchar('(');
875				lio_listioname((intmax_t)*ip);
876				ip++;
877				narg--;
878				c = ',';
879				break;
880			case SYS_mlockall:
881				putchar('(');
882				mlockallname((intmax_t)*ip);
883				ip++;
884				narg--;
885				break;
886			case SYS_sched_setscheduler:
887				print_number(ip, narg, c);
888				putchar(',');
889				schedpolicyname((intmax_t)*ip);
890				ip++;
891				narg--;
892				break;
893			case SYS_sched_get_priority_max:
894			case SYS_sched_get_priority_min:
895				putchar('(');
896				schedpolicyname((intmax_t)*ip);
897				ip++;
898				narg--;
899				break;
900			case SYS_sendfile:
901				print_number(ip, narg, c);
902				print_number(ip, narg, c);
903				print_number(ip, narg, c);
904				print_number(ip, narg, c);
905				print_number(ip, narg, c);
906				print_number(ip, narg, c);
907				putchar(',');
908				sendfileflagsname((intmax_t)*ip);
909				ip++;
910				narg--;
911				break;
912			case SYS_kldsym:
913				print_number(ip, narg, c);
914				putchar(',');
915				kldsymcmdname((intmax_t)*ip);
916				ip++;
917				narg--;
918				break;
919			case SYS_sigprocmask:
920				putchar('(');
921				sigprocmaskhowname((intmax_t)*ip);
922				ip++;
923				narg--;
924				c = ',';
925				break;
926			case SYS___acl_get_file:
927			case SYS___acl_set_file:
928			case SYS___acl_get_fd:
929			case SYS___acl_set_fd:
930			case SYS___acl_delete_file:
931			case SYS___acl_delete_fd:
932			case SYS___acl_aclcheck_file:
933			case SYS___acl_aclcheck_fd:
934			case SYS___acl_get_link:
935			case SYS___acl_set_link:
936			case SYS___acl_delete_link:
937			case SYS___acl_aclcheck_link:
938				print_number(ip, narg, c);
939				putchar(',');
940				acltypename((intmax_t)*ip);
941				ip++;
942				narg--;
943				break;
944			case SYS_sigaction:
945				putchar('(');
946				signame((int)*ip);
947				ip++;
948				narg--;
949				c = ',';
950				break;
951			case SYS_extattrctl:
952				print_number(ip, narg, c);
953				putchar(',');
954				extattrctlname((intmax_t)*ip);
955				ip++;
956				narg--;
957				break;
958			case SYS_nmount:
959				print_number(ip, narg, c);
960				print_number(ip, narg, c);
961				putchar(',');
962				mountflagsname((intmax_t)*ip);
963				ip++;
964				narg--;
965				break;
966			case SYS_thr_create:
967				print_number(ip, narg, c);
968				print_number(ip, narg, c);
969				putchar(',');
970				thrcreateflagsname((intmax_t)*ip);
971				ip++;
972				narg--;
973				break;
974			case SYS_thr_kill:
975				print_number(ip, narg, c);
976				putchar(',');
977				signame((int)*ip);
978				ip++;
979				narg--;
980				break;
981			case SYS_kldunloadf:
982				print_number(ip, narg, c);
983				putchar(',');
984				kldunloadfflagsname((intmax_t)*ip);
985				ip++;
986				narg--;
987				break;
988			}
989		}
990		while (narg > 0) {
991			print_number(ip, narg, c);
992		}
993		putchar(')');
994	}
995	putchar('\n');
996}
997
998void
999ktrsysret(struct ktr_sysret *ktr, u_int flags)
1000{
1001	register_t ret = ktr->ktr_retval;
1002	int error = ktr->ktr_error;
1003	int code = ktr->ktr_code;
1004
1005	if ((flags != 0 && ((flags & SV_ABI_MASK) != SV_ABI_FREEBSD)) ||
1006	    (code >= nsyscalls || code < 0))
1007		printf("[%d] ", code);
1008	else
1009		printf("%s ", syscallnames[code]);
1010
1011	if (error == 0) {
1012		if (fancy) {
1013			printf("%ld", (long)ret);
1014			if (ret < 0 || ret > 9)
1015				printf("/%#lx", (unsigned long)ret);
1016		} else {
1017			if (decimal)
1018				printf("%ld", (long)ret);
1019			else
1020				printf("%#lx", (unsigned long)ret);
1021		}
1022	} else if (error == ERESTART)
1023		printf("RESTART");
1024	else if (error == EJUSTRETURN)
1025		printf("JUSTRETURN");
1026	else {
1027		printf("-1 errno %d", ktr->ktr_error);
1028		if (fancy)
1029			printf(" %s", strerror(ktr->ktr_error));
1030	}
1031	putchar('\n');
1032}
1033
1034void
1035ktrnamei(char *cp, int len)
1036{
1037	printf("\"%.*s\"\n", len, cp);
1038}
1039
1040void
1041hexdump(char *p, int len, int screenwidth)
1042{
1043	int n, i;
1044	int width;
1045
1046	width = 0;
1047	do {
1048		width += 2;
1049		i = 13;			/* base offset */
1050		i += (width / 2) + 1;	/* spaces every second byte */
1051		i += (width * 2);	/* width of bytes */
1052		i += 3;			/* "  |" */
1053		i += width;		/* each byte */
1054		i += 1;			/* "|" */
1055	} while (i < screenwidth);
1056	width -= 2;
1057
1058	for (n = 0; n < len; n += width) {
1059		for (i = n; i < n + width; i++) {
1060			if ((i % width) == 0) {	/* beginning of line */
1061				printf("       0x%04x", i);
1062			}
1063			if ((i % 2) == 0) {
1064				printf(" ");
1065			}
1066			if (i < len)
1067				printf("%02x", p[i] & 0xff);
1068			else
1069				printf("  ");
1070		}
1071		printf("  |");
1072		for (i = n; i < n + width; i++) {
1073			if (i >= len)
1074				break;
1075			if (p[i] >= ' ' && p[i] <= '~')
1076				printf("%c", p[i]);
1077			else
1078				printf(".");
1079		}
1080		printf("|\n");
1081	}
1082	if ((i % width) != 0)
1083		printf("\n");
1084}
1085
1086void
1087visdump(char *dp, int datalen, int screenwidth)
1088{
1089	int col = 0;
1090	char *cp;
1091	int width;
1092	char visbuf[5];
1093
1094	printf("       \"");
1095	col = 8;
1096	for (;datalen > 0; datalen--, dp++) {
1097		 vis(visbuf, *dp, VIS_CSTYLE, *(dp+1));
1098		cp = visbuf;
1099		/*
1100		 * Keep track of printables and
1101		 * space chars (like fold(1)).
1102		 */
1103		if (col == 0) {
1104			putchar('\t');
1105			col = 8;
1106		}
1107		switch(*cp) {
1108		case '\n':
1109			col = 0;
1110			putchar('\n');
1111			continue;
1112		case '\t':
1113			width = 8 - (col&07);
1114			break;
1115		default:
1116			width = strlen(cp);
1117		}
1118		if (col + width > (screenwidth-2)) {
1119			printf("\\\n\t");
1120			col = 8;
1121		}
1122		col += width;
1123		do {
1124			putchar(*cp++);
1125		} while (*cp);
1126	}
1127	if (col == 0)
1128		printf("       ");
1129	printf("\"\n");
1130}
1131
1132void
1133ktrgenio(struct ktr_genio *ktr, int len)
1134{
1135	int datalen = len - sizeof (struct ktr_genio);
1136	char *dp = (char *)ktr + sizeof (struct ktr_genio);
1137	static int screenwidth = 0;
1138	int i, binary;
1139
1140	if (screenwidth == 0) {
1141		struct winsize ws;
1142
1143		if (fancy && ioctl(fileno(stderr), TIOCGWINSZ, &ws) != -1 &&
1144		    ws.ws_col > 8)
1145			screenwidth = ws.ws_col;
1146		else
1147			screenwidth = 80;
1148	}
1149	printf("fd %d %s %d byte%s\n", ktr->ktr_fd,
1150		ktr->ktr_rw == UIO_READ ? "read" : "wrote", datalen,
1151		datalen == 1 ? "" : "s");
1152	if (suppressdata)
1153		return;
1154	if (maxdata && datalen > maxdata)
1155		datalen = maxdata;
1156
1157	for (i = 0, binary = 0; i < datalen && binary == 0; i++)  {
1158		if (dp[i] >= 32 && dp[i] < 127)
1159			continue;
1160		if (dp[i] == 10 || dp[i] == 13 || dp[i] == 0 || dp[i] == 9)
1161			continue;
1162		binary = 1;
1163	}
1164	if (binary)
1165		hexdump(dp, datalen, screenwidth);
1166	else
1167		visdump(dp, datalen, screenwidth);
1168}
1169
1170const char *signames[] = {
1171	"NULL", "HUP", "INT", "QUIT", "ILL", "TRAP", "IOT",	/*  1 - 6  */
1172	"EMT", "FPE", "KILL", "BUS", "SEGV", "SYS",		/*  7 - 12 */
1173	"PIPE", "ALRM",  "TERM", "URG", "STOP", "TSTP",		/* 13 - 18 */
1174	"CONT", "CHLD", "TTIN", "TTOU", "IO", "XCPU",		/* 19 - 24 */
1175	"XFSZ", "VTALRM", "PROF", "WINCH", "29", "USR1",	/* 25 - 30 */
1176	"USR2", NULL,						/* 31 - 32 */
1177};
1178
1179void
1180ktrpsig(struct ktr_psig *psig)
1181{
1182	if (psig->signo > 0 && psig->signo < NSIG)
1183		printf("SIG%s ", signames[psig->signo]);
1184	else
1185		printf("SIG %d ", psig->signo);
1186	if (psig->action == SIG_DFL)
1187		printf("SIG_DFL code=0x%x\n", psig->code);
1188	else {
1189		printf("caught handler=0x%lx mask=0x%x code=0x%x\n",
1190		    (u_long)psig->action, psig->mask.__bits[0], psig->code);
1191	}
1192}
1193
1194void
1195ktrcsw(struct ktr_csw *cs)
1196{
1197	printf("%s %s\n", cs->out ? "stop" : "resume",
1198		cs->user ? "user" : "kernel");
1199}
1200
1201#define	UTRACE_DLOPEN_START		1
1202#define	UTRACE_DLOPEN_STOP		2
1203#define	UTRACE_DLCLOSE_START		3
1204#define	UTRACE_DLCLOSE_STOP		4
1205#define	UTRACE_LOAD_OBJECT		5
1206#define	UTRACE_UNLOAD_OBJECT		6
1207#define	UTRACE_ADD_RUNDEP		7
1208#define	UTRACE_PRELOAD_FINISHED		8
1209#define	UTRACE_INIT_CALL		9
1210#define	UTRACE_FINI_CALL		10
1211
1212struct utrace_rtld {
1213	char sig[4];				/* 'RTLD' */
1214	int event;
1215	void *handle;
1216	void *mapbase;
1217	size_t mapsize;
1218	int refcnt;
1219	char name[MAXPATHLEN];
1220};
1221
1222void
1223ktruser_rtld(int len, unsigned char *p)
1224{
1225	struct utrace_rtld *ut = (struct utrace_rtld *)p;
1226	void *parent;
1227	int mode;
1228
1229	switch (ut->event) {
1230	case UTRACE_DLOPEN_START:
1231		mode = ut->refcnt;
1232		printf("dlopen(%s, ", ut->name);
1233		switch (mode & RTLD_MODEMASK) {
1234		case RTLD_NOW:
1235			printf("RTLD_NOW");
1236			break;
1237		case RTLD_LAZY:
1238			printf("RTLD_LAZY");
1239			break;
1240		default:
1241			printf("%#x", mode & RTLD_MODEMASK);
1242		}
1243		if (mode & RTLD_GLOBAL)
1244			printf(" | RTLD_GLOBAL");
1245		if (mode & RTLD_TRACE)
1246			printf(" | RTLD_TRACE");
1247		if (mode & ~(RTLD_MODEMASK | RTLD_GLOBAL | RTLD_TRACE))
1248			printf(" | %#x", mode &
1249			    ~(RTLD_MODEMASK | RTLD_GLOBAL | RTLD_TRACE));
1250		printf(")\n");
1251		break;
1252	case UTRACE_DLOPEN_STOP:
1253		printf("%p = dlopen(%s) ref %d\n", ut->handle, ut->name,
1254		    ut->refcnt);
1255		break;
1256	case UTRACE_DLCLOSE_START:
1257		printf("dlclose(%p) (%s, %d)\n", ut->handle, ut->name,
1258		    ut->refcnt);
1259		break;
1260	case UTRACE_DLCLOSE_STOP:
1261		printf("dlclose(%p) finished\n", ut->handle);
1262		break;
1263	case UTRACE_LOAD_OBJECT:
1264		printf("RTLD: loaded   %p @ %p - %p (%s)\n", ut->handle,
1265		    ut->mapbase, (char *)ut->mapbase + ut->mapsize - 1,
1266		    ut->name);
1267		break;
1268	case UTRACE_UNLOAD_OBJECT:
1269		printf("RTLD: unloaded %p @ %p - %p (%s)\n", ut->handle,
1270		    ut->mapbase, (char *)ut->mapbase + ut->mapsize - 1,
1271		    ut->name);
1272		break;
1273	case UTRACE_ADD_RUNDEP:
1274		parent = ut->mapbase;
1275		printf("RTLD: %p now depends on %p (%s, %d)\n", parent,
1276		    ut->handle, ut->name, ut->refcnt);
1277		break;
1278	case UTRACE_PRELOAD_FINISHED:
1279		printf("RTLD: LD_PRELOAD finished\n");
1280		break;
1281	case UTRACE_INIT_CALL:
1282		printf("RTLD: init %p for %p (%s)\n", ut->mapbase, ut->handle,
1283		    ut->name);
1284		break;
1285	case UTRACE_FINI_CALL:
1286		printf("RTLD: fini %p for %p (%s)\n", ut->mapbase, ut->handle,
1287		    ut->name);
1288		break;
1289	default:
1290		p += 4;
1291		len -= 4;
1292		printf("RTLD: %d ", len);
1293		while (len--)
1294			if (decimal)
1295				printf(" %d", *p++);
1296			else
1297				printf(" %02x", *p++);
1298		printf("\n");
1299	}
1300}
1301
1302struct utrace_malloc {
1303	void *p;
1304	size_t s;
1305	void *r;
1306};
1307
1308void
1309ktruser_malloc(int len, unsigned char *p)
1310{
1311	struct utrace_malloc *ut = (struct utrace_malloc *)p;
1312
1313	if (ut->p == (void *)(intptr_t)(-1))
1314		printf("malloc_init()\n");
1315	else if (ut->s == 0)
1316		printf("free(%p)\n", ut->p);
1317	else if (ut->p == NULL)
1318		printf("%p = malloc(%zu)\n", ut->r, ut->s);
1319	else
1320		printf("%p = realloc(%p, %zu)\n", ut->r, ut->p, ut->s);
1321}
1322
1323void
1324ktruser(int len, unsigned char *p)
1325{
1326
1327	if (len >= 8 && bcmp(p, "RTLD", 4) == 0) {
1328		ktruser_rtld(len, p);
1329		return;
1330	}
1331
1332	if (len == sizeof(struct utrace_malloc)) {
1333		ktruser_malloc(len, p);
1334		return;
1335	}
1336
1337	printf("%d ", len);
1338	while (len--)
1339		if (decimal)
1340			printf(" %d", *p++);
1341		else
1342			printf(" %02x", *p++);
1343	printf("\n");
1344}
1345
1346void
1347ktrsockaddr(struct sockaddr *sa)
1348{
1349/*
1350 TODO: Support additional address families
1351	#include <netnatm/natm.h>
1352	struct sockaddr_natm	*natm;
1353	#include <netsmb/netbios.h>
1354	struct sockaddr_nb	*nb;
1355*/
1356	char addr[64];
1357
1358	/*
1359	 * note: ktrstruct() has already verified that sa points to a
1360	 * buffer at least sizeof(struct sockaddr) bytes long and exactly
1361	 * sa->sa_len bytes long.
1362	 */
1363	printf("struct sockaddr { ");
1364	sockfamilyname(sa->sa_family);
1365	printf(", ");
1366
1367#define check_sockaddr_len(n)					\
1368	if (sa_##n->s##n##_len < sizeof(struct sockaddr_##n)) {	\
1369		printf("invalid");				\
1370		break;						\
1371	}
1372
1373	switch(sa->sa_family) {
1374	case AF_INET: {
1375		struct sockaddr_in	*sa_in;
1376
1377		sa_in = (struct sockaddr_in *)sa;
1378		check_sockaddr_len(in);
1379		inet_ntop(AF_INET, &sa_in->sin_addr, addr, sizeof addr);
1380		printf("%s:%u", addr, ntohs(sa_in->sin_port));
1381		break;
1382	}
1383#ifdef NETATALK
1384	case AF_APPLETALK: {
1385		struct sockaddr_at	*sa_at;
1386		struct netrange		*nr;
1387
1388		sa_at = (struct sockaddr_at *)sa;
1389		check_sockaddr_len(at);
1390		nr = &sa_at->sat_range.r_netrange;
1391		printf("%d.%d, %d-%d, %d", ntohs(sa_at->sat_addr.s_net),
1392			sa_at->sat_addr.s_node, ntohs(nr->nr_firstnet),
1393			ntohs(nr->nr_lastnet), nr->nr_phase);
1394		break;
1395	}
1396#endif
1397	case AF_INET6: {
1398		struct sockaddr_in6	*sa_in6;
1399
1400		sa_in6 = (struct sockaddr_in6 *)sa;
1401		check_sockaddr_len(in6);
1402		inet_ntop(AF_INET6, &sa_in6->sin6_addr, addr, sizeof addr);
1403		printf("[%s]:%u", addr, htons(sa_in6->sin6_port));
1404		break;
1405	}
1406#ifdef IPX
1407	case AF_IPX: {
1408		struct sockaddr_ipx	*sa_ipx;
1409
1410		sa_ipx = (struct sockaddr_ipx *)sa;
1411		check_sockaddr_len(ipx);
1412		/* XXX wish we had ipx_ntop */
1413		printf("%s", ipx_ntoa(sa_ipx->sipx_addr));
1414		break;
1415	}
1416#endif
1417	case AF_UNIX: {
1418		struct sockaddr_un *sa_un;
1419
1420		sa_un = (struct sockaddr_un *)sa;
1421		check_sockaddr_len(un);
1422		printf("%.*s", (int)sizeof(sa_un->sun_path), sa_un->sun_path);
1423		break;
1424	}
1425	default:
1426		printf("unknown address family");
1427	}
1428	printf(" }\n");
1429}
1430
1431void
1432ktrstat(struct stat *statp)
1433{
1434	char mode[12], timestr[PATH_MAX + 4];
1435	struct passwd *pwd;
1436	struct group  *grp;
1437	struct tm *tm;
1438
1439	/*
1440	 * note: ktrstruct() has already verified that statp points to a
1441	 * buffer exactly sizeof(struct stat) bytes long.
1442	 */
1443	printf("struct stat {");
1444	strmode(statp->st_mode, mode);
1445	printf("dev=%ju, ino=%ju, mode=%s, nlink=%ju, ",
1446		(uintmax_t)statp->st_dev, (uintmax_t)statp->st_ino, mode,
1447		(uintmax_t)statp->st_nlink);
1448	if (resolv == 0 || (pwd = getpwuid(statp->st_uid)) == NULL)
1449		printf("uid=%ju, ", (uintmax_t)statp->st_uid);
1450	else
1451		printf("uid=\"%s\", ", pwd->pw_name);
1452	if (resolv == 0 || (grp = getgrgid(statp->st_gid)) == NULL)
1453		printf("gid=%ju, ", (uintmax_t)statp->st_gid);
1454	else
1455		printf("gid=\"%s\", ", grp->gr_name);
1456	printf("rdev=%ju, ", (uintmax_t)statp->st_rdev);
1457	printf("atime=");
1458	if (resolv == 0)
1459		printf("%jd", (intmax_t)statp->st_atim.tv_sec);
1460	else {
1461		tm = localtime(&statp->st_atim.tv_sec);
1462		strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1463		printf("\"%s\"", timestr);
1464	}
1465	if (statp->st_atim.tv_nsec != 0)
1466		printf(".%09ld, ", statp->st_atim.tv_nsec);
1467	else
1468		printf(", ");
1469	printf("stime=");
1470	if (resolv == 0)
1471		printf("%jd", (intmax_t)statp->st_mtim.tv_sec);
1472	else {
1473		tm = localtime(&statp->st_mtim.tv_sec);
1474		strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1475		printf("\"%s\"", timestr);
1476	}
1477	if (statp->st_mtim.tv_nsec != 0)
1478		printf(".%09ld, ", statp->st_mtim.tv_nsec);
1479	else
1480		printf(", ");
1481	printf("ctime=");
1482	if (resolv == 0)
1483		printf("%jd", (intmax_t)statp->st_ctim.tv_sec);
1484	else {
1485		tm = localtime(&statp->st_ctim.tv_sec);
1486		strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1487		printf("\"%s\"", timestr);
1488	}
1489	if (statp->st_ctim.tv_nsec != 0)
1490		printf(".%09ld, ", statp->st_ctim.tv_nsec);
1491	else
1492		printf(", ");
1493	printf("birthtime=");
1494	if (resolv == 0)
1495		printf("%jd", (intmax_t)statp->st_birthtim.tv_sec);
1496	else {
1497		tm = localtime(&statp->st_birthtim.tv_sec);
1498		strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1499		printf("\"%s\"", timestr);
1500	}
1501	if (statp->st_birthtim.tv_nsec != 0)
1502		printf(".%09ld, ", statp->st_birthtim.tv_nsec);
1503	else
1504		printf(", ");
1505	printf("size=%jd, blksize=%ju, blocks=%jd, flags=0x%x",
1506		(uintmax_t)statp->st_size, (uintmax_t)statp->st_blksize,
1507		(intmax_t)statp->st_blocks, statp->st_flags);
1508	printf(" }\n");
1509}
1510
1511void
1512ktrstruct(char *buf, size_t buflen)
1513{
1514	char *name, *data;
1515	size_t namelen, datalen;
1516	int i;
1517	struct stat sb;
1518	struct sockaddr_storage ss;
1519
1520	for (name = buf, namelen = 0;
1521	     namelen < buflen && name[namelen] != '\0';
1522	     ++namelen)
1523		/* nothing */;
1524	if (namelen == buflen)
1525		goto invalid;
1526	if (name[namelen] != '\0')
1527		goto invalid;
1528	data = buf + namelen + 1;
1529	datalen = buflen - namelen - 1;
1530	if (datalen == 0)
1531		goto invalid;
1532	/* sanity check */
1533	for (i = 0; i < namelen; ++i)
1534		if (!isalpha((unsigned char)name[i]))
1535			goto invalid;
1536	if (strcmp(name, "stat") == 0) {
1537		if (datalen != sizeof(struct stat))
1538			goto invalid;
1539		memcpy(&sb, data, datalen);
1540		ktrstat(&sb);
1541	} else if (strcmp(name, "sockaddr") == 0) {
1542		if (datalen > sizeof(ss))
1543			goto invalid;
1544		memcpy(&ss, data, datalen);
1545		if (datalen < sizeof(struct sockaddr) ||
1546		    datalen != ss.ss_len)
1547			goto invalid;
1548		ktrsockaddr((struct sockaddr *)&ss);
1549	} else {
1550		printf("unknown structure\n");
1551	}
1552	return;
1553invalid:
1554	printf("invalid record\n");
1555}
1556
1557#if defined(__amd64__) || defined(__i386__)
1558void
1559linux_ktrsyscall(struct ktr_syscall *ktr)
1560{
1561	int narg = ktr->ktr_narg;
1562	register_t *ip;
1563
1564	if (ktr->ktr_code >= nlinux_syscalls || ktr->ktr_code < 0)
1565		printf("[%d]", ktr->ktr_code);
1566	else
1567		printf("%s", linux_syscallnames[ktr->ktr_code]);
1568	ip = &ktr->ktr_args[0];
1569	if (narg) {
1570		char c = '(';
1571		while (narg > 0)
1572			print_number(ip, narg, c);
1573		putchar(')');
1574	}
1575	putchar('\n');
1576}
1577
1578void
1579linux_ktrsysret(struct ktr_sysret *ktr)
1580{
1581	register_t ret = ktr->ktr_retval;
1582	int error = ktr->ktr_error;
1583	int code = ktr->ktr_code;
1584
1585	if (code >= nlinux_syscalls || code < 0)
1586		printf("[%d] ", code);
1587	else
1588		printf("%s ", linux_syscallnames[code]);
1589
1590	if (error == 0) {
1591		if (fancy) {
1592			printf("%ld", (long)ret);
1593			if (ret < 0 || ret > 9)
1594				printf("/%#lx", (unsigned long)ret);
1595		} else {
1596			if (decimal)
1597				printf("%ld", (long)ret);
1598			else
1599				printf("%#lx", (unsigned long)ret);
1600		}
1601	} else if (error == ERESTART)
1602		printf("RESTART");
1603	else if (error == EJUSTRETURN)
1604		printf("JUSTRETURN");
1605	else {
1606		if (ktr->ktr_error <= ELAST + 1)
1607			error = abs(bsd_to_linux_errno[ktr->ktr_error]);
1608		else
1609			error = 999;
1610		printf("-1 errno %d", error);
1611		if (fancy)
1612			printf(" %s", strerror(ktr->ktr_error));
1613	}
1614	putchar('\n');
1615}
1616#endif
1617
1618void
1619usage(void)
1620{
1621	fprintf(stderr, "usage: kdump [-dEnlHRrsTA] [-f trfile] "
1622	    "[-m maxdata] [-p pid] [-t trstr]\n");
1623	exit(1);
1624}
1625