kdump.c revision 226262
1/*-
2 * Copyright (c) 1988, 1993
3 *	The Regents of the University of California.  All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 *    notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 *    notice, this list of conditions and the following disclaimer in the
12 *    documentation and/or other materials provided with the distribution.
13 * 4. Neither the name of the University nor the names of its contributors
14 *    may be used to endorse or promote products derived from this software
15 *    without specific prior written permission.
16 *
17 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
18 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
19 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
20 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
21 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
22 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
23 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
24 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
25 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
26 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
27 * SUCH DAMAGE.
28 */
29
30#ifndef lint
31static const char copyright[] =
32"@(#) Copyright (c) 1988, 1993\n\
33	The Regents of the University of California.  All rights reserved.\n";
34#endif /* not lint */
35
36#ifndef lint
37#if 0
38static char sccsid[] = "@(#)kdump.c	8.1 (Berkeley) 6/6/93";
39#endif
40#endif /* not lint */
41#include <sys/cdefs.h>
42__FBSDID("$FreeBSD: head/usr.bin/kdump/kdump.c 226262 2011-10-11 15:04:58Z des $");
43
44#define _KERNEL
45extern int errno;
46#include <sys/errno.h>
47#undef _KERNEL
48#include <sys/param.h>
49#include <sys/errno.h>
50#define _KERNEL
51#include <sys/time.h>
52#undef _KERNEL
53#include <sys/uio.h>
54#include <sys/ktrace.h>
55#include <sys/ioctl.h>
56#include <sys/socket.h>
57#include <sys/stat.h>
58#include <sys/sysent.h>
59#include <sys/un.h>
60#include <sys/queue.h>
61#ifdef IPX
62#include <sys/types.h>
63#include <netipx/ipx.h>
64#endif
65#ifdef NETATALK
66#include <netatalk/at.h>
67#endif
68#include <arpa/inet.h>
69#include <netinet/in.h>
70#include <ctype.h>
71#include <dlfcn.h>
72#include <err.h>
73#include <grp.h>
74#include <inttypes.h>
75#include <locale.h>
76#include <pwd.h>
77#include <stdio.h>
78#include <stdlib.h>
79#include <string.h>
80#include <time.h>
81#include <unistd.h>
82#include <vis.h>
83#include "ktrace.h"
84#include "kdump_subr.h"
85
86u_int abidump(struct ktr_header *);
87int fetchprocinfo(struct ktr_header *, u_int *);
88int fread_tail(void *, int, int);
89void dumpheader(struct ktr_header *);
90void ktrsyscall(struct ktr_syscall *, u_int);
91void ktrsysret(struct ktr_sysret *, u_int);
92void ktrnamei(char *, int);
93void hexdump(char *, int, int);
94void visdump(char *, int, int);
95void ktrgenio(struct ktr_genio *, int);
96void ktrpsig(struct ktr_psig *);
97void ktrcsw(struct ktr_csw *);
98void ktruser(int, unsigned char *);
99void ktrsockaddr(struct sockaddr *);
100void ktrstat(struct stat *);
101void ktrstruct(char *, size_t);
102void usage(void);
103void ioctlname(unsigned long, int);
104
105int timestamp, decimal, fancy = 1, suppressdata, tail, threads, maxdata,
106    resolv = 0, abiflag = 0;
107const char *tracefile = DEF_TRACEFILE;
108struct ktr_header ktr_header;
109
110#define TIME_FORMAT	"%b %e %T %Y"
111#define eqs(s1, s2)	(strcmp((s1), (s2)) == 0)
112
113#define print_number(i,n,c) do {					\
114	if (decimal)							\
115		printf("%c%jd", c, (intmax_t)*i);			\
116	else								\
117		printf("%c%#jx", c, (uintmax_t)(u_register_t)*i);	\
118	i++;								\
119	n--;								\
120	c = ',';							\
121} while (0)
122
123#if defined(__amd64__) || defined(__i386__)
124
125void linux_ktrsyscall(struct ktr_syscall *);
126void linux_ktrsysret(struct ktr_sysret *);
127extern char *linux_syscallnames[];
128extern int nlinux_syscalls;
129
130/*
131 * from linux.h
132 * Linux syscalls return negative errno's, we do positive and map them
133 */
134static int bsd_to_linux_errno[ELAST + 1] = {
135	-0,  -1,  -2,  -3,  -4,  -5,  -6,  -7,  -8,  -9,
136	-10, -35, -12, -13, -14, -15, -16, -17, -18, -19,
137	-20, -21, -22, -23, -24, -25, -26, -27, -28, -29,
138	-30, -31, -32, -33, -34, -11,-115,-114, -88, -89,
139	-90, -91, -92, -93, -94, -95, -96, -97, -98, -99,
140	-100,-101,-102,-103,-104,-105,-106,-107,-108,-109,
141	-110,-111, -40, -36,-112,-113, -39, -11, -87,-122,
142	-116, -66,  -6,  -6,  -6,  -6,  -6, -37, -38,  -9,
143	-6,  -6, -43, -42, -75,-125, -84, -95, -16, -74,
144	-72, -67, -71
145};
146#endif
147
148struct proc_info
149{
150	TAILQ_ENTRY(proc_info)	info;
151	u_int			sv_flags;
152	pid_t			pid;
153};
154
155TAILQ_HEAD(trace_procs, proc_info) trace_procs;
156
157int
158main(int argc, char *argv[])
159{
160	int ch, ktrlen, size;
161	void *m;
162	int trpoints = ALL_POINTS;
163	int drop_logged;
164	pid_t pid = 0;
165	u_int sv_flags;
166
167	setlocale(LC_CTYPE, "");
168
169	while ((ch = getopt(argc,argv,"f:dElm:np:AHRrsTt:")) != -1)
170		switch (ch) {
171		case 'A':
172			abiflag = 1;
173			break;
174		case 'f':
175			tracefile = optarg;
176			break;
177		case 'd':
178			decimal = 1;
179			break;
180		case 'l':
181			tail = 1;
182			break;
183		case 'm':
184			maxdata = atoi(optarg);
185			break;
186		case 'n':
187			fancy = 0;
188			break;
189		case 'p':
190			pid = atoi(optarg);
191			break;
192		case 'r':
193			resolv = 1;
194			break;
195		case 's':
196			suppressdata = 1;
197			break;
198		case 'E':
199			timestamp = 3;	/* elapsed timestamp */
200			break;
201		case 'H':
202			threads = 1;
203			break;
204		case 'R':
205			timestamp = 2;	/* relative timestamp */
206			break;
207		case 'T':
208			timestamp = 1;
209			break;
210		case 't':
211			trpoints = getpoints(optarg);
212			if (trpoints < 0)
213				errx(1, "unknown trace point in %s", optarg);
214			break;
215		default:
216			usage();
217		}
218
219	if (argc > optind)
220		usage();
221
222	m = malloc(size = 1025);
223	if (m == NULL)
224		errx(1, "%s", strerror(ENOMEM));
225	if (!freopen(tracefile, "r", stdin))
226		err(1, "%s", tracefile);
227	TAILQ_INIT(&trace_procs);
228	drop_logged = 0;
229	while (fread_tail(&ktr_header, sizeof(struct ktr_header), 1)) {
230		if (ktr_header.ktr_type & KTR_DROP) {
231			ktr_header.ktr_type &= ~KTR_DROP;
232			if (!drop_logged && threads) {
233				printf(
234				    "%6jd %6jd %-8.*s Events dropped.\n",
235				    (intmax_t)ktr_header.ktr_pid,
236				    ktr_header.ktr_tid > 0 ?
237				    (intmax_t)ktr_header.ktr_tid : 0,
238				    MAXCOMLEN, ktr_header.ktr_comm);
239				drop_logged = 1;
240			} else if (!drop_logged) {
241				printf("%6jd %-8.*s Events dropped.\n",
242				    (intmax_t)ktr_header.ktr_pid, MAXCOMLEN,
243				    ktr_header.ktr_comm);
244				drop_logged = 1;
245			}
246		}
247		if (trpoints & (1<<ktr_header.ktr_type))
248			if (pid == 0 || ktr_header.ktr_pid == pid)
249				dumpheader(&ktr_header);
250		if ((ktrlen = ktr_header.ktr_len) < 0)
251			errx(1, "bogus length 0x%x", ktrlen);
252		if (ktrlen > size) {
253			m = realloc(m, ktrlen+1);
254			if (m == NULL)
255				errx(1, "%s", strerror(ENOMEM));
256			size = ktrlen;
257		}
258		if (ktrlen && fread_tail(m, ktrlen, 1) == 0)
259			errx(1, "data too short");
260		if (fetchprocinfo(&ktr_header, (u_int *)m) != 0)
261			continue;
262		sv_flags = abidump(&ktr_header);
263		if (pid && ktr_header.ktr_pid != pid)
264			continue;
265		if ((trpoints & (1<<ktr_header.ktr_type)) == 0)
266			continue;
267		drop_logged = 0;
268		switch (ktr_header.ktr_type) {
269		case KTR_SYSCALL:
270#if defined(__amd64__) || defined(__i386__)
271			if ((sv_flags & SV_ABI_MASK) == SV_ABI_LINUX)
272				linux_ktrsyscall((struct ktr_syscall *)m);
273			else
274#endif
275				ktrsyscall((struct ktr_syscall *)m, sv_flags);
276			break;
277		case KTR_SYSRET:
278#if defined(__amd64__) || defined(__i386__)
279			if ((sv_flags & SV_ABI_MASK) == SV_ABI_LINUX)
280				linux_ktrsysret((struct ktr_sysret *)m);
281			else
282#endif
283				ktrsysret((struct ktr_sysret *)m, sv_flags);
284			break;
285		case KTR_NAMEI:
286		case KTR_SYSCTL:
287			ktrnamei(m, ktrlen);
288			break;
289		case KTR_GENIO:
290			ktrgenio((struct ktr_genio *)m, ktrlen);
291			break;
292		case KTR_PSIG:
293			ktrpsig((struct ktr_psig *)m);
294			break;
295		case KTR_CSW:
296			ktrcsw((struct ktr_csw *)m);
297			break;
298		case KTR_USER:
299			ktruser(ktrlen, m);
300			break;
301		case KTR_STRUCT:
302			ktrstruct(m, ktrlen);
303			break;
304		default:
305			printf("\n");
306			break;
307		}
308		if (tail)
309			fflush(stdout);
310	}
311	return 0;
312}
313
314int
315fread_tail(void *buf, int size, int num)
316{
317	int i;
318
319	while ((i = fread(buf, size, num, stdin)) == 0 && tail) {
320		sleep(1);
321		clearerr(stdin);
322	}
323	return (i);
324}
325
326int
327fetchprocinfo(struct ktr_header *kth, u_int *flags)
328{
329	struct proc_info *pi;
330
331	switch (kth->ktr_type) {
332	case KTR_PROCCTOR:
333		TAILQ_FOREACH(pi, &trace_procs, info) {
334			if (pi->pid == kth->ktr_pid) {
335				TAILQ_REMOVE(&trace_procs, pi, info);
336				break;
337			}
338		}
339		pi = malloc(sizeof(struct proc_info));
340		if (pi == NULL)
341			errx(1, "%s", strerror(ENOMEM));
342		pi->sv_flags = *flags;
343		pi->pid = kth->ktr_pid;
344		TAILQ_INSERT_TAIL(&trace_procs, pi, info);
345		return (1);
346
347	case KTR_PROCDTOR:
348		TAILQ_FOREACH(pi, &trace_procs, info) {
349			if (pi->pid == kth->ktr_pid) {
350				TAILQ_REMOVE(&trace_procs, pi, info);
351				free(pi);
352				break;
353			}
354		}
355		return (1);
356	}
357
358	return (0);
359}
360
361u_int
362abidump(struct ktr_header *kth)
363{
364	struct proc_info *pi;
365	const char *abi;
366	const char *arch;
367	u_int flags = 0;
368
369	TAILQ_FOREACH(pi, &trace_procs, info) {
370		if (pi->pid == kth->ktr_pid) {
371			flags = pi->sv_flags;
372			break;
373		}
374	}
375
376	if (abiflag == 0)
377		return (flags);
378
379	switch (flags & SV_ABI_MASK) {
380	case SV_ABI_LINUX:
381		abi = "L";
382		break;
383	case SV_ABI_FREEBSD:
384		abi = "F";
385		break;
386	default:
387		abi = "U";
388		break;
389	}
390
391	if (flags != 0) {
392		if (flags & SV_LP64)
393			arch = "64";
394		else
395			arch = "32";
396	} else
397		arch = "00";
398
399	printf("%s%s  ", abi, arch);
400
401	return (flags);
402}
403
404void
405dumpheader(struct ktr_header *kth)
406{
407	static char unknown[64];
408	static struct timeval prevtime, temp;
409	const char *type;
410
411	switch (kth->ktr_type) {
412	case KTR_SYSCALL:
413		type = "CALL";
414		break;
415	case KTR_SYSRET:
416		type = "RET ";
417		break;
418	case KTR_NAMEI:
419		type = "NAMI";
420		break;
421	case KTR_GENIO:
422		type = "GIO ";
423		break;
424	case KTR_PSIG:
425		type = "PSIG";
426		break;
427	case KTR_CSW:
428		type = "CSW ";
429		break;
430	case KTR_USER:
431		type = "USER";
432		break;
433	case KTR_STRUCT:
434		type = "STRU";
435		break;
436	case KTR_SYSCTL:
437		type = "SCTL";
438		break;
439	case KTR_PROCCTOR:
440		/* FALLTHROUGH */
441	case KTR_PROCDTOR:
442		return;
443	default:
444		sprintf(unknown, "UNKNOWN(%d)", kth->ktr_type);
445		type = unknown;
446	}
447
448	/*
449	 * The ktr_tid field was previously the ktr_buffer field, which held
450	 * the kernel pointer value for the buffer associated with data
451	 * following the record header.  It now holds a threadid, but only
452	 * for trace files after the change.  Older trace files still contain
453	 * kernel pointers.  Detect this and suppress the results by printing
454	 * negative tid's as 0.
455	 */
456	if (threads)
457		printf("%6jd %6jd %-8.*s ", (intmax_t)kth->ktr_pid,
458		    kth->ktr_tid > 0 ? (intmax_t)kth->ktr_tid : 0,
459		    MAXCOMLEN, kth->ktr_comm);
460	else
461		printf("%6jd %-8.*s ", (intmax_t)kth->ktr_pid, MAXCOMLEN,
462		    kth->ktr_comm);
463	if (timestamp) {
464		if (timestamp == 3) {
465			if (prevtime.tv_sec == 0)
466				prevtime = kth->ktr_time;
467			timevalsub(&kth->ktr_time, &prevtime);
468		}
469		if (timestamp == 2) {
470			temp = kth->ktr_time;
471			timevalsub(&kth->ktr_time, &prevtime);
472			prevtime = temp;
473		}
474		printf("%jd.%06ld ", (intmax_t)kth->ktr_time.tv_sec,
475		    kth->ktr_time.tv_usec);
476	}
477	printf("%s  ", type);
478}
479
480#include <sys/syscall.h>
481#define KTRACE
482#include <sys/kern/syscalls.c>
483#undef KTRACE
484int nsyscalls = sizeof (syscallnames) / sizeof (syscallnames[0]);
485
486void
487ktrsyscall(struct ktr_syscall *ktr, u_int flags)
488{
489	int narg = ktr->ktr_narg;
490	register_t *ip;
491
492	if ((flags != 0 && ((flags & SV_ABI_MASK) != SV_ABI_FREEBSD)) ||
493	    (ktr->ktr_code >= nsyscalls || ktr->ktr_code < 0))
494		printf("[%d]", ktr->ktr_code);
495	else
496		printf("%s", syscallnames[ktr->ktr_code]);
497	ip = &ktr->ktr_args[0];
498	if (narg) {
499		char c = '(';
500		if (fancy &&
501		    (flags == 0 || (flags & SV_ABI_MASK) == SV_ABI_FREEBSD)) {
502			switch (ktr->ktr_code) {
503			case SYS_ioctl: {
504				const char *cp;
505				print_number(ip, narg, c);
506				putchar(c);
507				ioctlname(*ip, decimal);
508				c = ',';
509				ip++;
510				narg--;
511				break;
512			}
513			case SYS_ptrace:
514				putchar('(');
515				ptraceopname(*ip);
516				c = ',';
517				ip++;
518				narg--;
519				break;
520			case SYS_access:
521			case SYS_eaccess:
522				print_number(ip, narg, c);
523				putchar(',');
524				accessmodename(*ip);
525				ip++;
526				narg--;
527				break;
528			case SYS_open:
529				print_number(ip, narg, c);
530				putchar(',');
531				flagsandmodename(ip[0], ip[1], decimal);
532				ip += 2;
533				narg -= 2;
534				break;
535			case SYS_wait4:
536				print_number(ip, narg, c);
537				print_number(ip, narg, c);
538				putchar(',');
539				wait4optname(*ip);
540				ip++;
541				narg--;
542				break;
543			case SYS_chmod:
544			case SYS_fchmod:
545			case SYS_lchmod:
546				print_number(ip, narg, c);
547				putchar(',');
548				modename(*ip);
549				ip++;
550				narg--;
551				break;
552			case SYS_mknod:
553				print_number(ip, narg, c);
554				putchar(',');
555				modename(*ip);
556				ip++;
557				narg--;
558				break;
559			case SYS_getfsstat:
560				print_number(ip, narg, c);
561				print_number(ip, narg, c);
562				putchar(',');
563				getfsstatflagsname(*ip);
564				ip++;
565				narg--;
566				break;
567			case SYS_mount:
568				print_number(ip, narg, c);
569				print_number(ip, narg, c);
570				putchar(',');
571				mountflagsname(*ip);
572				ip++;
573				narg--;
574				break;
575			case SYS_unmount:
576				print_number(ip, narg, c);
577				putchar(',');
578				mountflagsname(*ip);
579				ip++;
580				narg--;
581				break;
582			case SYS_recvmsg:
583			case SYS_sendmsg:
584				print_number(ip, narg, c);
585				print_number(ip, narg, c);
586				putchar(',');
587				sendrecvflagsname(*ip);
588				ip++;
589				narg--;
590				break;
591			case SYS_recvfrom:
592			case SYS_sendto:
593				print_number(ip, narg, c);
594				print_number(ip, narg, c);
595				print_number(ip, narg, c);
596				putchar(',');
597				sendrecvflagsname(*ip);
598				ip++;
599				narg--;
600				break;
601			case SYS_chflags:
602			case SYS_fchflags:
603			case SYS_lchflags:
604				print_number(ip, narg, c);
605				putchar(',');
606				modename(*ip);
607				ip++;
608				narg--;
609				break;
610			case SYS_kill:
611				print_number(ip, narg, c);
612				putchar(',');
613				signame(*ip);
614				ip++;
615				narg--;
616				break;
617			case SYS_reboot:
618				putchar('(');
619				rebootoptname(*ip);
620				ip++;
621				narg--;
622				break;
623			case SYS_umask:
624				putchar('(');
625				modename(*ip);
626				ip++;
627				narg--;
628				break;
629			case SYS_msync:
630				print_number(ip, narg, c);
631				print_number(ip, narg, c);
632				putchar(',');
633				msyncflagsname(*ip);
634				ip++;
635				narg--;
636				break;
637#ifdef SYS_freebsd6_mmap
638			case SYS_freebsd6_mmap:
639				print_number(ip, narg, c);
640				print_number(ip, narg, c);
641				putchar(',');
642				mmapprotname(*ip);
643				putchar(',');
644				ip++;
645				narg--;
646				mmapflagsname(*ip);
647				ip++;
648				narg--;
649				break;
650#endif
651			case SYS_mmap:
652				print_number(ip, narg, c);
653				print_number(ip, narg, c);
654				putchar(',');
655				mmapprotname(*ip);
656				putchar(',');
657				ip++;
658				narg--;
659				mmapflagsname(*ip);
660				ip++;
661				narg--;
662				break;
663			case SYS_mprotect:
664				print_number(ip, narg, c);
665				print_number(ip, narg, c);
666				putchar(',');
667				mmapprotname(*ip);
668				ip++;
669				narg--;
670				break;
671			case SYS_madvise:
672				print_number(ip, narg, c);
673				print_number(ip, narg, c);
674				putchar(',');
675				madvisebehavname(*ip);
676				ip++;
677				narg--;
678				break;
679			case SYS_setpriority:
680				print_number(ip, narg, c);
681				print_number(ip, narg, c);
682				putchar(',');
683				prioname(*ip);
684				ip++;
685				narg--;
686				break;
687			case SYS_fcntl:
688				print_number(ip, narg, c);
689				putchar(',');
690				fcntlcmdname(ip[0], ip[1], decimal);
691				ip += 2;
692				narg -= 2;
693				break;
694			case SYS_socket: {
695				int sockdomain;
696				putchar('(');
697				sockdomain = *ip;
698				sockdomainname(sockdomain);
699				ip++;
700				narg--;
701				putchar(',');
702				socktypename(*ip);
703				ip++;
704				narg--;
705				if (sockdomain == PF_INET ||
706				    sockdomain == PF_INET6) {
707					putchar(',');
708					sockipprotoname(*ip);
709					ip++;
710					narg--;
711				}
712				c = ',';
713				break;
714			}
715			case SYS_setsockopt:
716			case SYS_getsockopt:
717				print_number(ip, narg, c);
718				putchar(',');
719				sockoptlevelname(*ip, decimal);
720				if (*ip == SOL_SOCKET) {
721					ip++;
722					narg--;
723					putchar(',');
724					sockoptname(*ip);
725				}
726				ip++;
727				narg--;
728				break;
729#ifdef SYS_freebsd6_lseek
730			case SYS_freebsd6_lseek:
731				print_number(ip, narg, c);
732				/* Hidden 'pad' argument, not in lseek(2) */
733				print_number(ip, narg, c);
734				print_number(ip, narg, c);
735				putchar(',');
736				whencename(*ip);
737				ip++;
738				narg--;
739				break;
740#endif
741			case SYS_lseek:
742				print_number(ip, narg, c);
743				/* Hidden 'pad' argument, not in lseek(2) */
744				print_number(ip, narg, c);
745				putchar(',');
746				whencename(*ip);
747				ip++;
748				narg--;
749				break;
750			case SYS_flock:
751				print_number(ip, narg, c);
752				putchar(',');
753				flockname(*ip);
754				ip++;
755				narg--;
756				break;
757			case SYS_mkfifo:
758			case SYS_mkdir:
759				print_number(ip, narg, c);
760				putchar(',');
761				modename(*ip);
762				ip++;
763				narg--;
764				break;
765			case SYS_shutdown:
766				print_number(ip, narg, c);
767				putchar(',');
768				shutdownhowname(*ip);
769				ip++;
770				narg--;
771				break;
772			case SYS_socketpair:
773				putchar('(');
774				sockdomainname(*ip);
775				ip++;
776				narg--;
777				putchar(',');
778				socktypename(*ip);
779				ip++;
780				narg--;
781				c = ',';
782				break;
783			case SYS_getrlimit:
784			case SYS_setrlimit:
785				putchar('(');
786				rlimitname(*ip);
787				ip++;
788				narg--;
789				c = ',';
790				break;
791			case SYS_quotactl:
792				print_number(ip, narg, c);
793				putchar(',');
794				quotactlname(*ip);
795				ip++;
796				narg--;
797				c = ',';
798				break;
799			case SYS_nfssvc:
800				putchar('(');
801				nfssvcname(*ip);
802				ip++;
803				narg--;
804				c = ',';
805				break;
806			case SYS_rtprio:
807				putchar('(');
808				rtprioname(*ip);
809				ip++;
810				narg--;
811				c = ',';
812				break;
813			case SYS___semctl:
814				print_number(ip, narg, c);
815				print_number(ip, narg, c);
816				putchar(',');
817				semctlname(*ip);
818				ip++;
819				narg--;
820				break;
821			case SYS_semget:
822				print_number(ip, narg, c);
823				print_number(ip, narg, c);
824				putchar(',');
825				semgetname(*ip);
826				ip++;
827				narg--;
828				break;
829			case SYS_msgctl:
830				print_number(ip, narg, c);
831				putchar(',');
832				shmctlname(*ip);
833				ip++;
834				narg--;
835				break;
836			case SYS_shmat:
837				print_number(ip, narg, c);
838				print_number(ip, narg, c);
839				putchar(',');
840				shmatname(*ip);
841				ip++;
842				narg--;
843				break;
844			case SYS_shmctl:
845				print_number(ip, narg, c);
846				putchar(',');
847				shmctlname(*ip);
848				ip++;
849				narg--;
850				break;
851			case SYS_minherit:
852				print_number(ip, narg, c);
853				print_number(ip, narg, c);
854				putchar(',');
855				minheritname(*ip);
856				ip++;
857				narg--;
858				break;
859			case SYS_rfork:
860				putchar('(');
861				rforkname(*ip);
862				ip++;
863				narg--;
864				c = ',';
865				break;
866			case SYS_lio_listio:
867				putchar('(');
868				lio_listioname(*ip);
869				ip++;
870				narg--;
871				c = ',';
872				break;
873			case SYS_mlockall:
874				putchar('(');
875				mlockallname(*ip);
876				ip++;
877				narg--;
878				break;
879			case SYS_sched_setscheduler:
880				print_number(ip, narg, c);
881				putchar(',');
882				schedpolicyname(*ip);
883				ip++;
884				narg--;
885				break;
886			case SYS_sched_get_priority_max:
887			case SYS_sched_get_priority_min:
888				putchar('(');
889				schedpolicyname(*ip);
890				ip++;
891				narg--;
892				break;
893			case SYS_sendfile:
894				print_number(ip, narg, c);
895				print_number(ip, narg, c);
896				print_number(ip, narg, c);
897				print_number(ip, narg, c);
898				print_number(ip, narg, c);
899				print_number(ip, narg, c);
900				putchar(',');
901				sendfileflagsname(*ip);
902				ip++;
903				narg--;
904				break;
905			case SYS_kldsym:
906				print_number(ip, narg, c);
907				putchar(',');
908				kldsymcmdname(*ip);
909				ip++;
910				narg--;
911				break;
912			case SYS_sigprocmask:
913				putchar('(');
914				sigprocmaskhowname(*ip);
915				ip++;
916				narg--;
917				c = ',';
918				break;
919			case SYS___acl_get_file:
920			case SYS___acl_set_file:
921			case SYS___acl_get_fd:
922			case SYS___acl_set_fd:
923			case SYS___acl_delete_file:
924			case SYS___acl_delete_fd:
925			case SYS___acl_aclcheck_file:
926			case SYS___acl_aclcheck_fd:
927			case SYS___acl_get_link:
928			case SYS___acl_set_link:
929			case SYS___acl_delete_link:
930			case SYS___acl_aclcheck_link:
931				print_number(ip, narg, c);
932				putchar(',');
933				acltypename(*ip);
934				ip++;
935				narg--;
936				break;
937			case SYS_sigaction:
938				putchar('(');
939				signame(*ip);
940				ip++;
941				narg--;
942				c = ',';
943				break;
944			case SYS_extattrctl:
945				print_number(ip, narg, c);
946				putchar(',');
947				extattrctlname(*ip);
948				ip++;
949				narg--;
950				break;
951			case SYS_nmount:
952				print_number(ip, narg, c);
953				print_number(ip, narg, c);
954				putchar(',');
955				mountflagsname(*ip);
956				ip++;
957				narg--;
958				break;
959			case SYS_thr_create:
960				print_number(ip, narg, c);
961				print_number(ip, narg, c);
962				putchar(',');
963				thrcreateflagsname(*ip);
964				ip++;
965				narg--;
966				break;
967			case SYS_thr_kill:
968				print_number(ip, narg, c);
969				putchar(',');
970				signame(*ip);
971				ip++;
972				narg--;
973				break;
974			case SYS_kldunloadf:
975				print_number(ip, narg, c);
976				putchar(',');
977				kldunloadfflagsname(*ip);
978				ip++;
979				narg--;
980				break;
981                        case SYS_cap_new:
982                                print_number(ip, narg, c);
983                                putchar(',');
984                                capname(*ip);
985                                ip++;
986                                narg--;
987				break;
988			}
989		}
990		while (narg > 0) {
991			print_number(ip, narg, c);
992		}
993		putchar(')');
994	}
995	putchar('\n');
996}
997
998void
999ktrsysret(struct ktr_sysret *ktr, u_int flags)
1000{
1001	register_t ret = ktr->ktr_retval;
1002	int error = ktr->ktr_error;
1003	int code = ktr->ktr_code;
1004
1005	if ((flags != 0 && ((flags & SV_ABI_MASK) != SV_ABI_FREEBSD)) ||
1006	    (code >= nsyscalls || code < 0))
1007		printf("[%d] ", code);
1008	else
1009		printf("%s ", syscallnames[code]);
1010
1011	if (error == 0) {
1012		if (fancy) {
1013			printf("%ld", (long)ret);
1014			if (ret < 0 || ret > 9)
1015				printf("/%#lx", (unsigned long)ret);
1016		} else {
1017			if (decimal)
1018				printf("%ld", (long)ret);
1019			else
1020				printf("%#lx", (unsigned long)ret);
1021		}
1022	} else if (error == ERESTART)
1023		printf("RESTART");
1024	else if (error == EJUSTRETURN)
1025		printf("JUSTRETURN");
1026	else {
1027		printf("-1 errno %d", ktr->ktr_error);
1028		if (fancy)
1029			printf(" %s", strerror(ktr->ktr_error));
1030	}
1031	putchar('\n');
1032}
1033
1034void
1035ktrnamei(char *cp, int len)
1036{
1037	printf("\"%.*s\"\n", len, cp);
1038}
1039
1040void
1041hexdump(char *p, int len, int screenwidth)
1042{
1043	int n, i;
1044	int width;
1045
1046	width = 0;
1047	do {
1048		width += 2;
1049		i = 13;			/* base offset */
1050		i += (width / 2) + 1;	/* spaces every second byte */
1051		i += (width * 2);	/* width of bytes */
1052		i += 3;			/* "  |" */
1053		i += width;		/* each byte */
1054		i += 1;			/* "|" */
1055	} while (i < screenwidth);
1056	width -= 2;
1057
1058	for (n = 0; n < len; n += width) {
1059		for (i = n; i < n + width; i++) {
1060			if ((i % width) == 0) {	/* beginning of line */
1061				printf("       0x%04x", i);
1062			}
1063			if ((i % 2) == 0) {
1064				printf(" ");
1065			}
1066			if (i < len)
1067				printf("%02x", p[i] & 0xff);
1068			else
1069				printf("  ");
1070		}
1071		printf("  |");
1072		for (i = n; i < n + width; i++) {
1073			if (i >= len)
1074				break;
1075			if (p[i] >= ' ' && p[i] <= '~')
1076				printf("%c", p[i]);
1077			else
1078				printf(".");
1079		}
1080		printf("|\n");
1081	}
1082	if ((i % width) != 0)
1083		printf("\n");
1084}
1085
1086void
1087visdump(char *dp, int datalen, int screenwidth)
1088{
1089	int col = 0;
1090	char *cp;
1091	int width;
1092	char visbuf[5];
1093
1094	printf("       \"");
1095	col = 8;
1096	for (;datalen > 0; datalen--, dp++) {
1097		 vis(visbuf, *dp, VIS_CSTYLE, *(dp+1));
1098		cp = visbuf;
1099		/*
1100		 * Keep track of printables and
1101		 * space chars (like fold(1)).
1102		 */
1103		if (col == 0) {
1104			putchar('\t');
1105			col = 8;
1106		}
1107		switch(*cp) {
1108		case '\n':
1109			col = 0;
1110			putchar('\n');
1111			continue;
1112		case '\t':
1113			width = 8 - (col&07);
1114			break;
1115		default:
1116			width = strlen(cp);
1117		}
1118		if (col + width > (screenwidth-2)) {
1119			printf("\\\n\t");
1120			col = 8;
1121		}
1122		col += width;
1123		do {
1124			putchar(*cp++);
1125		} while (*cp);
1126	}
1127	if (col == 0)
1128		printf("       ");
1129	printf("\"\n");
1130}
1131
1132void
1133ktrgenio(struct ktr_genio *ktr, int len)
1134{
1135	int datalen = len - sizeof (struct ktr_genio);
1136	char *dp = (char *)ktr + sizeof (struct ktr_genio);
1137	static int screenwidth = 0;
1138	int i, binary;
1139
1140	if (screenwidth == 0) {
1141		struct winsize ws;
1142
1143		if (fancy && ioctl(fileno(stderr), TIOCGWINSZ, &ws) != -1 &&
1144		    ws.ws_col > 8)
1145			screenwidth = ws.ws_col;
1146		else
1147			screenwidth = 80;
1148	}
1149	printf("fd %d %s %d byte%s\n", ktr->ktr_fd,
1150		ktr->ktr_rw == UIO_READ ? "read" : "wrote", datalen,
1151		datalen == 1 ? "" : "s");
1152	if (suppressdata)
1153		return;
1154	if (maxdata && datalen > maxdata)
1155		datalen = maxdata;
1156
1157	for (i = 0, binary = 0; i < datalen && binary == 0; i++)  {
1158		if (dp[i] >= 32 && dp[i] < 127)
1159			continue;
1160		if (dp[i] == 10 || dp[i] == 13 || dp[i] == 0 || dp[i] == 9)
1161			continue;
1162		binary = 1;
1163	}
1164	if (binary)
1165		hexdump(dp, datalen, screenwidth);
1166	else
1167		visdump(dp, datalen, screenwidth);
1168}
1169
1170const char *signames[] = {
1171	"NULL", "HUP", "INT", "QUIT", "ILL", "TRAP", "IOT",	/*  1 - 6  */
1172	"EMT", "FPE", "KILL", "BUS", "SEGV", "SYS",		/*  7 - 12 */
1173	"PIPE", "ALRM",  "TERM", "URG", "STOP", "TSTP",		/* 13 - 18 */
1174	"CONT", "CHLD", "TTIN", "TTOU", "IO", "XCPU",		/* 19 - 24 */
1175	"XFSZ", "VTALRM", "PROF", "WINCH", "29", "USR1",	/* 25 - 30 */
1176	"USR2", NULL,						/* 31 - 32 */
1177};
1178
1179void
1180ktrpsig(struct ktr_psig *psig)
1181{
1182	if (psig->signo > 0 && psig->signo < NSIG)
1183		printf("SIG%s ", signames[psig->signo]);
1184	else
1185		printf("SIG %d ", psig->signo);
1186	if (psig->action == SIG_DFL)
1187		printf("SIG_DFL code=0x%x\n", psig->code);
1188	else {
1189		printf("caught handler=0x%lx mask=0x%x code=0x%x\n",
1190		    (u_long)psig->action, psig->mask.__bits[0], psig->code);
1191	}
1192}
1193
1194void
1195ktrcsw(struct ktr_csw *cs)
1196{
1197	printf("%s %s\n", cs->out ? "stop" : "resume",
1198		cs->user ? "user" : "kernel");
1199}
1200
1201#define	UTRACE_DLOPEN_START		1
1202#define	UTRACE_DLOPEN_STOP		2
1203#define	UTRACE_DLCLOSE_START		3
1204#define	UTRACE_DLCLOSE_STOP		4
1205#define	UTRACE_LOAD_OBJECT		5
1206#define	UTRACE_UNLOAD_OBJECT		6
1207#define	UTRACE_ADD_RUNDEP		7
1208#define	UTRACE_PRELOAD_FINISHED		8
1209#define	UTRACE_INIT_CALL		9
1210#define	UTRACE_FINI_CALL		10
1211
1212struct utrace_rtld {
1213	char sig[4];				/* 'RTLD' */
1214	int event;
1215	void *handle;
1216	void *mapbase;
1217	size_t mapsize;
1218	int refcnt;
1219	char name[MAXPATHLEN];
1220};
1221
1222void
1223ktruser_rtld(int len, unsigned char *p)
1224{
1225	struct utrace_rtld *ut = (struct utrace_rtld *)p;
1226	void *parent;
1227	int mode;
1228
1229	switch (ut->event) {
1230	case UTRACE_DLOPEN_START:
1231		mode = ut->refcnt;
1232		printf("dlopen(%s, ", ut->name);
1233		switch (mode & RTLD_MODEMASK) {
1234		case RTLD_NOW:
1235			printf("RTLD_NOW");
1236			break;
1237		case RTLD_LAZY:
1238			printf("RTLD_LAZY");
1239			break;
1240		default:
1241			printf("%#x", mode & RTLD_MODEMASK);
1242		}
1243		if (mode & RTLD_GLOBAL)
1244			printf(" | RTLD_GLOBAL");
1245		if (mode & RTLD_TRACE)
1246			printf(" | RTLD_TRACE");
1247		if (mode & ~(RTLD_MODEMASK | RTLD_GLOBAL | RTLD_TRACE))
1248			printf(" | %#x", mode &
1249			    ~(RTLD_MODEMASK | RTLD_GLOBAL | RTLD_TRACE));
1250		printf(")\n");
1251		break;
1252	case UTRACE_DLOPEN_STOP:
1253		printf("%p = dlopen(%s) ref %d\n", ut->handle, ut->name,
1254		    ut->refcnt);
1255		break;
1256	case UTRACE_DLCLOSE_START:
1257		printf("dlclose(%p) (%s, %d)\n", ut->handle, ut->name,
1258		    ut->refcnt);
1259		break;
1260	case UTRACE_DLCLOSE_STOP:
1261		printf("dlclose(%p) finished\n", ut->handle);
1262		break;
1263	case UTRACE_LOAD_OBJECT:
1264		printf("RTLD: loaded   %p @ %p - %p (%s)\n", ut->handle,
1265		    ut->mapbase, (char *)ut->mapbase + ut->mapsize - 1,
1266		    ut->name);
1267		break;
1268	case UTRACE_UNLOAD_OBJECT:
1269		printf("RTLD: unloaded %p @ %p - %p (%s)\n", ut->handle,
1270		    ut->mapbase, (char *)ut->mapbase + ut->mapsize - 1,
1271		    ut->name);
1272		break;
1273	case UTRACE_ADD_RUNDEP:
1274		parent = ut->mapbase;
1275		printf("RTLD: %p now depends on %p (%s, %d)\n", parent,
1276		    ut->handle, ut->name, ut->refcnt);
1277		break;
1278	case UTRACE_PRELOAD_FINISHED:
1279		printf("RTLD: LD_PRELOAD finished\n");
1280		break;
1281	case UTRACE_INIT_CALL:
1282		printf("RTLD: init %p for %p (%s)\n", ut->mapbase, ut->handle,
1283		    ut->name);
1284		break;
1285	case UTRACE_FINI_CALL:
1286		printf("RTLD: fini %p for %p (%s)\n", ut->mapbase, ut->handle,
1287		    ut->name);
1288		break;
1289	default:
1290		p += 4;
1291		len -= 4;
1292		printf("RTLD: %d ", len);
1293		while (len--)
1294			if (decimal)
1295				printf(" %d", *p++);
1296			else
1297				printf(" %02x", *p++);
1298		printf("\n");
1299	}
1300}
1301
1302struct utrace_malloc {
1303	void *p;
1304	size_t s;
1305	void *r;
1306};
1307
1308void
1309ktruser_malloc(int len, unsigned char *p)
1310{
1311	struct utrace_malloc *ut = (struct utrace_malloc *)p;
1312
1313	if (ut->p == (void *)(intptr_t)(-1))
1314		printf("malloc_init()\n");
1315	else if (ut->s == 0)
1316		printf("free(%p)\n", ut->p);
1317	else if (ut->p == NULL)
1318		printf("%p = malloc(%zu)\n", ut->r, ut->s);
1319	else
1320		printf("%p = realloc(%p, %zu)\n", ut->r, ut->p, ut->s);
1321}
1322
1323void
1324ktruser(int len, unsigned char *p)
1325{
1326
1327	if (len >= 8 && bcmp(p, "RTLD", 4) == 0) {
1328		ktruser_rtld(len, p);
1329		return;
1330	}
1331
1332	if (len == sizeof(struct utrace_malloc)) {
1333		ktruser_malloc(len, p);
1334		return;
1335	}
1336
1337	printf("%d ", len);
1338	while (len--)
1339		if (decimal)
1340			printf(" %d", *p++);
1341		else
1342			printf(" %02x", *p++);
1343	printf("\n");
1344}
1345
1346void
1347ktrsockaddr(struct sockaddr *sa)
1348{
1349/*
1350 TODO: Support additional address families
1351	#include <netnatm/natm.h>
1352	struct sockaddr_natm	*natm;
1353	#include <netsmb/netbios.h>
1354	struct sockaddr_nb	*nb;
1355*/
1356	char addr[64];
1357
1358	/*
1359	 * note: ktrstruct() has already verified that sa points to a
1360	 * buffer at least sizeof(struct sockaddr) bytes long and exactly
1361	 * sa->sa_len bytes long.
1362	 */
1363	printf("struct sockaddr { ");
1364	sockfamilyname(sa->sa_family);
1365	printf(", ");
1366
1367#define check_sockaddr_len(n)					\
1368	if (sa_##n->s##n##_len < sizeof(struct sockaddr_##n)) {	\
1369		printf("invalid");				\
1370		break;						\
1371	}
1372
1373	switch(sa->sa_family) {
1374	case AF_INET: {
1375		struct sockaddr_in	*sa_in;
1376
1377		sa_in = (struct sockaddr_in *)sa;
1378		check_sockaddr_len(in);
1379		inet_ntop(AF_INET, &sa_in->sin_addr, addr, sizeof addr);
1380		printf("%s:%u", addr, ntohs(sa_in->sin_port));
1381		break;
1382	}
1383#ifdef NETATALK
1384	case AF_APPLETALK: {
1385		struct sockaddr_at	*sa_at;
1386		struct netrange		*nr;
1387
1388		sa_at = (struct sockaddr_at *)sa;
1389		check_sockaddr_len(at);
1390		nr = &sa_at->sat_range.r_netrange;
1391		printf("%d.%d, %d-%d, %d", ntohs(sa_at->sat_addr.s_net),
1392			sa_at->sat_addr.s_node, ntohs(nr->nr_firstnet),
1393			ntohs(nr->nr_lastnet), nr->nr_phase);
1394		break;
1395	}
1396#endif
1397	case AF_INET6: {
1398		struct sockaddr_in6	*sa_in6;
1399
1400		sa_in6 = (struct sockaddr_in6 *)sa;
1401		check_sockaddr_len(in6);
1402		inet_ntop(AF_INET6, &sa_in6->sin6_addr, addr, sizeof addr);
1403		printf("[%s]:%u", addr, htons(sa_in6->sin6_port));
1404		break;
1405	}
1406#ifdef IPX
1407	case AF_IPX: {
1408		struct sockaddr_ipx	*sa_ipx;
1409
1410		sa_ipx = (struct sockaddr_ipx *)sa;
1411		check_sockaddr_len(ipx);
1412		/* XXX wish we had ipx_ntop */
1413		printf("%s", ipx_ntoa(sa_ipx->sipx_addr));
1414		break;
1415	}
1416#endif
1417	case AF_UNIX: {
1418		struct sockaddr_un *sa_un;
1419
1420		sa_un = (struct sockaddr_un *)sa;
1421		check_sockaddr_len(un);
1422		printf("%.*s", (int)sizeof(sa_un->sun_path), sa_un->sun_path);
1423		break;
1424	}
1425	default:
1426		printf("unknown address family");
1427	}
1428	printf(" }\n");
1429}
1430
1431void
1432ktrstat(struct stat *statp)
1433{
1434	char mode[12], timestr[PATH_MAX + 4];
1435	struct passwd *pwd;
1436	struct group  *grp;
1437	struct tm *tm;
1438
1439	/*
1440	 * note: ktrstruct() has already verified that statp points to a
1441	 * buffer exactly sizeof(struct stat) bytes long.
1442	 */
1443	printf("struct stat {");
1444	strmode(statp->st_mode, mode);
1445	printf("dev=%ju, ino=%ju, mode=%s, nlink=%ju, ",
1446		(uintmax_t)statp->st_dev, (uintmax_t)statp->st_ino, mode,
1447		(uintmax_t)statp->st_nlink);
1448	if (resolv == 0 || (pwd = getpwuid(statp->st_uid)) == NULL)
1449		printf("uid=%ju, ", (uintmax_t)statp->st_uid);
1450	else
1451		printf("uid=\"%s\", ", pwd->pw_name);
1452	if (resolv == 0 || (grp = getgrgid(statp->st_gid)) == NULL)
1453		printf("gid=%ju, ", (uintmax_t)statp->st_gid);
1454	else
1455		printf("gid=\"%s\", ", grp->gr_name);
1456	printf("rdev=%ju, ", (uintmax_t)statp->st_rdev);
1457	printf("atime=");
1458	if (resolv == 0)
1459		printf("%jd", (intmax_t)statp->st_atim.tv_sec);
1460	else {
1461		tm = localtime(&statp->st_atim.tv_sec);
1462		strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1463		printf("\"%s\"", timestr);
1464	}
1465	if (statp->st_atim.tv_nsec != 0)
1466		printf(".%09ld, ", statp->st_atim.tv_nsec);
1467	else
1468		printf(", ");
1469	printf("stime=");
1470	if (resolv == 0)
1471		printf("%jd", (intmax_t)statp->st_mtim.tv_sec);
1472	else {
1473		tm = localtime(&statp->st_mtim.tv_sec);
1474		strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1475		printf("\"%s\"", timestr);
1476	}
1477	if (statp->st_mtim.tv_nsec != 0)
1478		printf(".%09ld, ", statp->st_mtim.tv_nsec);
1479	else
1480		printf(", ");
1481	printf("ctime=");
1482	if (resolv == 0)
1483		printf("%jd", (intmax_t)statp->st_ctim.tv_sec);
1484	else {
1485		tm = localtime(&statp->st_ctim.tv_sec);
1486		strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1487		printf("\"%s\"", timestr);
1488	}
1489	if (statp->st_ctim.tv_nsec != 0)
1490		printf(".%09ld, ", statp->st_ctim.tv_nsec);
1491	else
1492		printf(", ");
1493	printf("birthtime=");
1494	if (resolv == 0)
1495		printf("%jd", (intmax_t)statp->st_birthtim.tv_sec);
1496	else {
1497		tm = localtime(&statp->st_birthtim.tv_sec);
1498		strftime(timestr, sizeof(timestr), TIME_FORMAT, tm);
1499		printf("\"%s\"", timestr);
1500	}
1501	if (statp->st_birthtim.tv_nsec != 0)
1502		printf(".%09ld, ", statp->st_birthtim.tv_nsec);
1503	else
1504		printf(", ");
1505	printf("size=%jd, blksize=%ju, blocks=%jd, flags=0x%x",
1506		(uintmax_t)statp->st_size, (uintmax_t)statp->st_blksize,
1507		(intmax_t)statp->st_blocks, statp->st_flags);
1508	printf(" }\n");
1509}
1510
1511void
1512ktrstruct(char *buf, size_t buflen)
1513{
1514	char *name, *data;
1515	size_t namelen, datalen;
1516	int i;
1517	struct stat sb;
1518	struct sockaddr_storage ss;
1519
1520	for (name = buf, namelen = 0;
1521	     namelen < buflen && name[namelen] != '\0';
1522	     ++namelen)
1523		/* nothing */;
1524	if (namelen == buflen)
1525		goto invalid;
1526	if (name[namelen] != '\0')
1527		goto invalid;
1528	data = buf + namelen + 1;
1529	datalen = buflen - namelen - 1;
1530	if (datalen == 0)
1531		goto invalid;
1532	/* sanity check */
1533	for (i = 0; i < namelen; ++i)
1534		if (!isalpha((unsigned char)name[i]))
1535			goto invalid;
1536	if (strcmp(name, "stat") == 0) {
1537		if (datalen != sizeof(struct stat))
1538			goto invalid;
1539		memcpy(&sb, data, datalen);
1540		ktrstat(&sb);
1541	} else if (strcmp(name, "sockaddr") == 0) {
1542		if (datalen > sizeof(ss))
1543			goto invalid;
1544		memcpy(&ss, data, datalen);
1545		if (datalen < sizeof(struct sockaddr) ||
1546		    datalen != ss.ss_len)
1547			goto invalid;
1548		ktrsockaddr((struct sockaddr *)&ss);
1549	} else {
1550		printf("unknown structure\n");
1551	}
1552	return;
1553invalid:
1554	printf("invalid record\n");
1555}
1556
1557#if defined(__amd64__) || defined(__i386__)
1558void
1559linux_ktrsyscall(struct ktr_syscall *ktr)
1560{
1561	int narg = ktr->ktr_narg;
1562	register_t *ip;
1563
1564	if (ktr->ktr_code >= nlinux_syscalls || ktr->ktr_code < 0)
1565		printf("[%d]", ktr->ktr_code);
1566	else
1567		printf("%s", linux_syscallnames[ktr->ktr_code]);
1568	ip = &ktr->ktr_args[0];
1569	if (narg) {
1570		char c = '(';
1571		while (narg > 0)
1572			print_number(ip, narg, c);
1573		putchar(')');
1574	}
1575	putchar('\n');
1576}
1577
1578void
1579linux_ktrsysret(struct ktr_sysret *ktr)
1580{
1581	register_t ret = ktr->ktr_retval;
1582	int error = ktr->ktr_error;
1583	int code = ktr->ktr_code;
1584
1585	if (code >= nlinux_syscalls || code < 0)
1586		printf("[%d] ", code);
1587	else
1588		printf("%s ", linux_syscallnames[code]);
1589
1590	if (error == 0) {
1591		if (fancy) {
1592			printf("%ld", (long)ret);
1593			if (ret < 0 || ret > 9)
1594				printf("/%#lx", (unsigned long)ret);
1595		} else {
1596			if (decimal)
1597				printf("%ld", (long)ret);
1598			else
1599				printf("%#lx", (unsigned long)ret);
1600		}
1601	} else if (error == ERESTART)
1602		printf("RESTART");
1603	else if (error == EJUSTRETURN)
1604		printf("JUSTRETURN");
1605	else {
1606		if (ktr->ktr_error <= ELAST + 1)
1607			error = abs(bsd_to_linux_errno[ktr->ktr_error]);
1608		else
1609			error = 999;
1610		printf("-1 errno %d", error);
1611		if (fancy)
1612			printf(" %s", strerror(ktr->ktr_error));
1613	}
1614	putchar('\n');
1615}
1616#endif
1617
1618void
1619usage(void)
1620{
1621	fprintf(stderr, "usage: kdump [-dEnlHRrsTA] [-f trfile] "
1622	    "[-m maxdata] [-p pid] [-t trstr]\n");
1623	exit(1);
1624}
1625