main.c revision 129906 
1/*
2 * Copyright (c) 1983, 1988, 1993
3 *	Regents of the University of California.  All rights reserved.
4 *
5 * Redistribution and use in source and binary forms, with or without
6 * modification, are permitted provided that the following conditions
7 * are met:
8 * 1. Redistributions of source code must retain the above copyright
9 *    notice, this list of conditions and the following disclaimer.
10 * 2. Redistributions in binary form must reproduce the above copyright
11 *    notice, this list of conditions and the following disclaimer in the
12 *    documentation and/or other materials provided with the distribution.
13 * 3. All advertising materials mentioning features or use of this software
14 *    must display the following acknowledgement:
15 *	This product includes software developed by the University of
16 *	California, Berkeley and its contributors.
17 * 4. Neither the name of the University nor the names of its contributors
18 *    may be used to endorse or promote products derived from this software
19 *    without specific prior written permission.
20 *
21 * THIS SOFTWARE IS PROVIDED BY THE REGENTS AND CONTRIBUTORS ``AS IS'' AND
22 * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
23 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
24 * ARE DISCLAIMED.  IN NO EVENT SHALL THE REGENTS OR CONTRIBUTORS BE LIABLE
25 * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
26 * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
27 * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
28 * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
29 * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
30 * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
31 * SUCH DAMAGE.
32 */
33
34#ifndef lint
35char const copyright[] =
36"@(#) Copyright (c) 1983, 1988, 1993\n\
37	Regents of the University of California.  All rights reserved.\n";
38#endif /* not lint */
39
40#ifndef lint
41#if 0
42static char sccsid[] = "@(#)main.c	8.4 (Berkeley) 3/1/94";
43#endif
44static const char rcsid[] =
45  "$FreeBSD: head/usr.bin/netstat/main.c 129906 2004-05-31 21:46:06Z bmilekic $";
46#endif /* not lint */
47
48#include <sys/param.h>
49#include <sys/file.h>
50#include <sys/protosw.h>
51#include <sys/socket.h>
52
53#include <netinet/in.h>
54
55#include <netgraph/ng_socket.h>
56
57#include <ctype.h>
58#include <err.h>
59#include <errno.h>
60#include <kvm.h>
61#include <limits.h>
62#include <netdb.h>
63#include <nlist.h>
64#include <paths.h>
65#include <stdio.h>
66#include <stdlib.h>
67#include <string.h>
68#include <unistd.h>
69#include "netstat.h"
70
71static struct nlist nl[] = {
72#define	N_IFNET		0
73	{ "_ifnet" },
74#define	N_RTSTAT	1
75	{ "_rtstat" },
76#define N_RTREE		2
77	{ "_rt_tables"},
78#define N_MRTSTAT	3
79	{ "_mrtstat" },
80#define N_MFCTABLE	4
81	{ "_mfctable" },
82#define N_VIFTABLE	5
83	{ "_viftable" },
84#define N_IPX		6
85	{ "_ipxpcb"},
86#define N_IPXSTAT	7
87	{ "_ipxstat"},
88#define N_SPXSTAT	8
89	{ "_spx_istat"},
90#define N_DDPSTAT	9
91	{ "_ddpstat"},
92#define N_DDPCB		10
93	{ "_ddpcb"},
94#define N_NGSOCKS	11
95	{ "_ngsocklist"},
96#define N_IP6STAT	12
97	{ "_ip6stat" },
98#define N_ICMP6STAT	13
99	{ "_icmp6stat" },
100#define N_IPSECSTAT	14
101	{ "_ipsecstat" },
102#define N_IPSEC6STAT	15
103	{ "_ipsec6stat" },
104#define N_PIM6STAT	16
105	{ "_pim6stat" },
106#define N_MRT6STAT	17
107	{ "_mrt6stat" },
108#define N_MF6CTABLE	18
109	{ "_mf6ctable" },
110#define N_MIF6TABLE	19
111	{ "_mif6table" },
112#define N_PFKEYSTAT	20
113	{ "_pfkeystat" },
114#define N_MBSTAT	21
115	{ "_mbstat" },
116#define N_MBTYPES	22
117	{ "_mbtypes" },
118#define N_NMBCLUSTERS	23
119	{ "_nmbclusters" },
120#define N_NMBUFS	24
121	{ "_nmbufs" },
122#define	N_MBHI		25
123	{ "_mbuf_hiwm" },
124#define	N_CLHI		26
125	{ "_clust_hiwm" },
126#define	N_NCPUS		27
127	{ "_smp_cpus" },
128#define	N_PAGESZ	28
129	{ "_pagesize" },
130#define	N_MBPSTAT	29
131	{ "_mb_statpcpu" },
132#define	N_RTTRASH	30
133	{ "_rttrash" },
134#define	N_MBLO		31
135	{ "_mbuf_lowm" },
136#define	N_CLLO		32
137	{ "_clust_lowm" },
138	{ "" },
139};
140
141struct protox {
142	u_char	pr_index;		/* index into nlist of cb head */
143	u_char	pr_sindex;		/* index into nlist of stat block */
144	u_char	pr_wanted;		/* 1 if wanted, 0 otherwise */
145	void	(*pr_cblocks)(u_long, const char *, int);
146					/* control blocks printing routine */
147	void	(*pr_stats)(u_long, const char *, int);
148					/* statistics printing routine */
149	void	(*pr_istats)(char *);	/* per/if statistics printing routine */
150	const char	*pr_name;		/* well-known name */
151	u_long	pr_usesysctl;		/* non-zero if we use sysctl, not kvm */
152} protox[] = {
153	{ -1,		-1,		1,	protopr,
154	  tcp_stats,	NULL,		"tcp",	IPPROTO_TCP },
155	{ -1,		-1,		1,	protopr,
156	  udp_stats,	NULL,		"udp",	IPPROTO_UDP },
157	{ -1,		-1,		1,	protopr,
158	  NULL,		NULL,		"divert",IPPROTO_DIVERT },
159	{ -1,		-1,		1,	protopr,
160	  ip_stats,	NULL,		"ip",	IPPROTO_RAW },
161	{ -1,		-1,		1,	protopr,
162	  icmp_stats,	NULL,		"icmp",	IPPROTO_ICMP },
163	{ -1,		-1,		1,	protopr,
164	  igmp_stats,	NULL,		"igmp",	IPPROTO_IGMP },
165#ifdef IPSEC
166	{ -1,		N_IPSECSTAT,	1,	NULL,
167	  ipsec_stats,	NULL,		"ipsec",	0},
168#endif
169	{ -1,		-1,		1,	NULL,
170	  bdg_stats,	NULL,		"bdg",	1 /* bridging... */ },
171	{ -1,		-1,		1,	protopr,
172	  pim_stats,	NULL,		"pim",	IPPROTO_PIM },
173	{ -1,		-1,		0,	NULL,
174	  NULL,		NULL,		NULL,	0 }
175};
176
177#ifdef INET6
178struct protox ip6protox[] = {
179	{ -1,		-1,		1,	protopr,
180	  tcp_stats,	NULL,		"tcp",	IPPROTO_TCP },
181	{ -1,		-1,		1,	protopr,
182	  udp_stats,	NULL,		"udp",	IPPROTO_UDP },
183	{ -1,		N_IP6STAT,	1,	protopr,
184	  ip6_stats,	ip6_ifstats,	"ip6",	IPPROTO_RAW },
185	{ -1,		N_ICMP6STAT,	1,	protopr,
186	  icmp6_stats,	icmp6_ifstats,	"icmp6",IPPROTO_ICMPV6 },
187#ifdef IPSEC
188	{ -1,		N_IPSEC6STAT,	1,	NULL,
189	  ipsec_stats,	NULL,		"ipsec6",0 },
190#endif
191#ifdef notyet
192	{ -1,		N_PIM6STAT,	1,	NULL,
193	  pim6_stats,	NULL,		"pim6",	0 },
194#endif
195	{ -1,		-1,		1,	NULL,
196	  rip6_stats,	NULL,		"rip6",	0 },
197	{ -1,		-1,		1,	NULL,
198	  bdg_stats,	NULL,		"bdg",	1 /* bridging... */ },
199	{ -1,		-1,		0,	NULL,
200	  NULL,		NULL,		NULL,	0 }
201};
202#endif /*INET6*/
203
204#ifdef IPSEC
205struct protox pfkeyprotox[] = {
206	{ -1,		N_PFKEYSTAT,	1,	NULL,
207	  pfkey_stats,	NULL,		"pfkey", 0 },
208	{ -1,		-1,		0,	NULL,
209	  NULL,		NULL,		NULL,	0 }
210};
211#endif
212
213struct protox atalkprotox[] = {
214	{ N_DDPCB,	N_DDPSTAT,	1,	atalkprotopr,
215	  ddp_stats,	NULL,		"ddp",	0 },
216	{ -1,		-1,		0,	NULL,
217	  NULL,		NULL,		NULL,	0 }
218};
219
220struct protox netgraphprotox[] = {
221	{ N_NGSOCKS,	-1,		1,	netgraphprotopr,
222	  NULL,		NULL,		"ctrl",	0 },
223	{ N_NGSOCKS,	-1,		1,	netgraphprotopr,
224	  NULL,		NULL,		"data",	0 },
225	{ -1,		-1,		0,	NULL,
226	  NULL,		NULL,		NULL,	0 }
227};
228
229struct protox ipxprotox[] = {
230	{ N_IPX,	N_IPXSTAT,	1,	ipxprotopr,
231	  ipx_stats,	NULL,		"ipx",	0 },
232	{ N_IPX,	N_SPXSTAT,	1,	ipxprotopr,
233	  spx_stats,	NULL,		"spx",	0 },
234	{ -1,		-1,		0,	NULL,
235	  NULL,		NULL,		0,	0 }
236};
237
238struct protox *protoprotox[] = {
239					 protox,
240#ifdef INET6
241					 ip6protox,
242#endif
243#ifdef IPSEC
244					 pfkeyprotox,
245#endif
246					 ipxprotox, atalkprotox, NULL };
247
248static void printproto (struct protox *, const char *);
249static void usage (void);
250static struct protox *name2protox (char *);
251static struct protox *knownname (char *);
252
253static kvm_t *kvmd;
254static char *nlistf = NULL, *memf = NULL;
255
256int	Aflag;		/* show addresses of protocol control block */
257int	aflag;		/* show all sockets (including servers) */
258int	bflag;		/* show i/f total bytes in/out */
259int	dflag;		/* show i/f dropped packets */
260int	gflag;		/* show group (multicast) routing or stats */
261int	iflag;		/* show interfaces */
262int	Lflag;		/* show size of listen queues */
263int	mflag;		/* show memory stats */
264int	numeric_addr;	/* show addresses numerically */
265int	numeric_port;	/* show ports numerically */
266static int pflag;	/* show given protocol */
267int	rflag;		/* show routing tables (or routing stats) */
268int	sflag;		/* show protocol statistics */
269int	tflag;		/* show i/f watchdog timers */
270int	Wflag;		/* wide display */
271int	zflag;		/* zero stats */
272
273int	interval;	/* repeat interval for i/f stats */
274
275char	*interface;	/* desired i/f for stats, or NULL for all i/fs */
276int	unit;		/* unit number for above */
277
278int	af;		/* address family */
279
280int
281main(int argc, char *argv[])
282{
283	struct protox *tp = NULL;  /* for printing cblocks & stats */
284	int ch;
285
286	af = AF_UNSPEC;
287
288	while ((ch = getopt(argc, argv, "Aabcdf:gI:iLlM:mN:np:rSstuWw:z")) != -1)
289		switch(ch) {
290		case 'A':
291			Aflag = 1;
292			break;
293		case 'a':
294			aflag = 1;
295			break;
296		case 'b':
297			bflag = 1;
298			break;
299		case 'd':
300			dflag = 1;
301			break;
302		case 'f':
303			if (strcmp(optarg, "ipx") == 0)
304				af = AF_IPX;
305			else if (strcmp(optarg, "inet") == 0)
306				af = AF_INET;
307#ifdef INET6
308			else if (strcmp(optarg, "inet6") == 0)
309				af = AF_INET6;
310#endif /*INET6*/
311#ifdef INET6
312			else if (strcmp(optarg, "pfkey") == 0)
313				af = PF_KEY;
314#endif /*INET6*/
315			else if (strcmp(optarg, "unix") == 0)
316				af = AF_UNIX;
317			else if (strcmp(optarg, "atalk") == 0)
318				af = AF_APPLETALK;
319			else if (strcmp(optarg, "ng") == 0
320			    || strcmp(optarg, "netgraph") == 0)
321				af = AF_NETGRAPH;
322			else if (strcmp(optarg, "link") == 0)
323				af = AF_LINK;
324			else {
325				errx(1, "%s: unknown address family", optarg);
326			}
327			break;
328		case 'g':
329			gflag = 1;
330			break;
331		case 'I': {
332			char *cp;
333
334			iflag = 1;
335			for (cp = interface = optarg; isalpha(*cp); cp++)
336				continue;
337			unit = atoi(cp);
338			break;
339		}
340		case 'i':
341			iflag = 1;
342			break;
343		case 'L':
344			Lflag = 1;
345			break;
346		case 'M':
347			memf = optarg;
348			break;
349		case 'm':
350			mflag = 1;
351			break;
352		case 'N':
353			nlistf = optarg;
354			break;
355		case 'n':
356			numeric_addr = numeric_port = 1;
357			break;
358		case 'p':
359			if ((tp = name2protox(optarg)) == NULL) {
360				errx(1,
361				     "%s: unknown or uninstrumented protocol",
362				     optarg);
363			}
364			pflag = 1;
365			break;
366		case 'r':
367			rflag = 1;
368			break;
369		case 's':
370			++sflag;
371			break;
372		case 'S':
373			numeric_addr = 1;
374			break;
375		case 't':
376			tflag = 1;
377			break;
378		case 'u':
379			af = AF_UNIX;
380			break;
381		case 'W':
382		case 'l':
383			Wflag = 1;
384			break;
385		case 'w':
386			interval = atoi(optarg);
387			iflag = 1;
388			break;
389		case 'z':
390			zflag = 1;
391			break;
392		case '?':
393		default:
394			usage();
395		}
396	argv += optind;
397	argc -= optind;
398
399#define	BACKWARD_COMPATIBILITY
400#ifdef	BACKWARD_COMPATIBILITY
401	if (*argv) {
402		if (isdigit(**argv)) {
403			interval = atoi(*argv);
404			if (interval <= 0)
405				usage();
406			++argv;
407			iflag = 1;
408		}
409		if (*argv) {
410			nlistf = *argv;
411			if (*++argv)
412				memf = *argv;
413		}
414	}
415#endif
416
417	/*
418	 * Discard setgid privileges if not the running kernel so that bad
419	 * guys can't print interesting stuff from kernel memory.
420	 */
421	if (nlistf != NULL || memf != NULL)
422		setgid(getgid());
423
424	if (mflag) {
425		if (memf != NULL) {
426			if (kread(0, 0, 0) == 0)
427				mbpr(nl[N_MBSTAT].n_value,
428				    nl[N_MBTYPES].n_value,
429				    nl[N_NMBCLUSTERS].n_value,
430				    nl[N_NMBUFS].n_value,
431				    nl[N_MBHI].n_value,
432				    nl[N_CLHI].n_value,
433				    nl[N_MBLO].n_value,
434				    nl[N_CLLO].n_value,
435				    nl[N_NCPUS].n_value,
436				    nl[N_PAGESZ].n_value,
437				    nl[N_MBPSTAT].n_value);
438		} else
439			mbpr(0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0);
440		exit(0);
441	}
442#if 0
443	/*
444	 * Keep file descriptors open to avoid overhead
445	 * of open/close on each call to get* routines.
446	 */
447	sethostent(1);
448	setnetent(1);
449#else
450	/*
451	 * This does not make sense any more with DNS being default over
452	 * the files.  Doing a setXXXXent(1) causes a tcp connection to be
453	 * used for the queries, which is slower.
454	 */
455#endif
456	if (iflag && !sflag) {
457		kread(0, 0, 0);
458		intpr(interval, nl[N_IFNET].n_value, NULL);
459		exit(0);
460	}
461	if (rflag) {
462		kread(0, 0, 0);
463		if (sflag)
464			rt_stats(nl[N_RTSTAT].n_value, nl[N_RTTRASH].n_value);
465		else
466			routepr(nl[N_RTREE].n_value);
467		exit(0);
468	}
469	if (gflag) {
470		kread(0, 0, 0);
471		if (sflag) {
472			if (af == AF_INET || af == AF_UNSPEC)
473				mrt_stats(nl[N_MRTSTAT].n_value);
474#ifdef INET6
475			if (af == AF_INET6 || af == AF_UNSPEC)
476				mrt6_stats(nl[N_MRT6STAT].n_value);
477#endif
478		} else {
479			if (af == AF_INET || af == AF_UNSPEC)
480				mroutepr(nl[N_MFCTABLE].n_value,
481					 nl[N_VIFTABLE].n_value);
482#ifdef INET6
483			if (af == AF_INET6 || af == AF_UNSPEC)
484				mroute6pr(nl[N_MF6CTABLE].n_value,
485					  nl[N_MIF6TABLE].n_value);
486#endif
487		}
488		ifmalist_dump();
489		exit(0);
490	}
491
492	kread(0, 0, 0);
493	if (tp) {
494		printproto(tp, tp->pr_name);
495		exit(0);
496	}
497	if (af == AF_INET || af == AF_UNSPEC)
498		for (tp = protox; tp->pr_name; tp++)
499			printproto(tp, tp->pr_name);
500#ifdef INET6
501	if (af == AF_INET6 || af == AF_UNSPEC)
502		for (tp = ip6protox; tp->pr_name; tp++)
503			printproto(tp, tp->pr_name);
504#endif /*INET6*/
505#ifdef IPSEC
506	if (af == PF_KEY || af == AF_UNSPEC)
507		for (tp = pfkeyprotox; tp->pr_name; tp++)
508			printproto(tp, tp->pr_name);
509#endif /*IPSEC*/
510	if (af == AF_IPX || af == AF_UNSPEC) {
511		kread(0, 0, 0);
512		for (tp = ipxprotox; tp->pr_name; tp++)
513			printproto(tp, tp->pr_name);
514	}
515	if (af == AF_APPLETALK || af == AF_UNSPEC)
516		for (tp = atalkprotox; tp->pr_name; tp++)
517			printproto(tp, tp->pr_name);
518	if (af == AF_NETGRAPH || af == AF_UNSPEC)
519		for (tp = netgraphprotox; tp->pr_name; tp++)
520			printproto(tp, tp->pr_name);
521	if ((af == AF_UNIX || af == AF_UNSPEC) && !Lflag && !sflag)
522		unixpr();
523	exit(0);
524}
525
526/*
527 * Print out protocol statistics or control blocks (per sflag).
528 * If the interface was not specifically requested, and the symbol
529 * is not in the namelist, ignore this one.
530 */
531static void
532printproto(tp, name)
533	struct protox *tp;
534	const char *name;
535{
536	void (*pr)(u_long, const char *, int);
537	u_long off;
538
539	if (sflag) {
540		if (iflag) {
541			if (tp->pr_istats)
542				intpr(interval, nl[N_IFNET].n_value,
543				      tp->pr_istats);
544			else if (pflag)
545				printf("%s: no per-interface stats routine\n",
546				    tp->pr_name);
547			return;
548		}
549		else {
550			pr = tp->pr_stats;
551			if (!pr) {
552				if (pflag)
553					printf("%s: no stats routine\n",
554					    tp->pr_name);
555				return;
556			}
557			off = tp->pr_usesysctl ? tp->pr_usesysctl
558				: nl[tp->pr_sindex].n_value;
559		}
560	} else {
561		pr = tp->pr_cblocks;
562		if (!pr) {
563			if (pflag)
564				printf("%s: no PCB routine\n", tp->pr_name);
565			return;
566		}
567		off = tp->pr_usesysctl ? tp->pr_usesysctl
568			: nl[tp->pr_index].n_value;
569	}
570	if (pr != NULL && (off || af != AF_UNSPEC))
571		(*pr)(off, name, af);
572}
573
574/*
575 * Read kernel memory, return 0 on success.
576 */
577int
578kread(u_long addr, char *buf, int size)
579{
580	if (kvmd == 0) {
581		/*
582		 * XXX.
583		 */
584		kvmd = kvm_openfiles(nlistf, memf, NULL, O_RDONLY, buf);
585		setgid(getgid());
586		if (kvmd != NULL) {
587			if (kvm_nlist(kvmd, nl) < 0) {
588				if(nlistf)
589					errx(1, "%s: kvm_nlist: %s", nlistf,
590					     kvm_geterr(kvmd));
591				else
592					errx(1, "kvm_nlist: %s", kvm_geterr(kvmd));
593			}
594
595			if (nl[0].n_type == 0) {
596				if(nlistf)
597					errx(1, "%s: no namelist", nlistf);
598				else
599					errx(1, "no namelist");
600			}
601		} else {
602			warnx("kvm not available");
603			return(-1);
604		}
605	}
606	if (!buf)
607		return (0);
608	if (kvm_read(kvmd, addr, buf, size) != size) {
609		warnx("%s", kvm_geterr(kvmd));
610		return (-1);
611	}
612	return (0);
613}
614
615const char *
616plural(int n)
617{
618	return (n != 1 ? "s" : "");
619}
620
621const char *
622plurales(int n)
623{
624	return (n != 1 ? "es" : "");
625}
626
627const char *
628pluralies(int n)
629{
630	return (n != 1 ? "ies" : "y");
631}
632
633/*
634 * Find the protox for the given "well-known" name.
635 */
636static struct protox *
637knownname(char *name)
638{
639	struct protox **tpp, *tp;
640
641	for (tpp = protoprotox; *tpp; tpp++)
642		for (tp = *tpp; tp->pr_name; tp++)
643			if (strcmp(tp->pr_name, name) == 0)
644				return (tp);
645	return (NULL);
646}
647
648/*
649 * Find the protox corresponding to name.
650 */
651static struct protox *
652name2protox(char *name)
653{
654	struct protox *tp;
655	char **alias;			/* alias from p->aliases */
656	struct protoent *p;
657
658	/*
659	 * Try to find the name in the list of "well-known" names. If that
660	 * fails, check if name is an alias for an Internet protocol.
661	 */
662	if ((tp = knownname(name)) != NULL)
663		return (tp);
664
665	setprotoent(1);			/* make protocol lookup cheaper */
666	while ((p = getprotoent()) != NULL) {
667		/* assert: name not same as p->name */
668		for (alias = p->p_aliases; *alias; alias++)
669			if (strcmp(name, *alias) == 0) {
670				endprotoent();
671				return (knownname(p->p_name));
672			}
673	}
674	endprotoent();
675	return (NULL);
676}
677
678static void
679usage(void)
680{
681	(void)fprintf(stderr, "%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n%s\n",
682"usage: netstat [-AaLnSW] [-f protocol_family | -p protocol]\n"
683"               [-M core] [-N system]",
684"       netstat -i | -I interface [-abdnt] [-f address_family]\n"
685"               [-M core] [-N system]",
686"       netstat -w wait [-I interface] [-d] [-M core] [-N system]",
687"       netstat -s [-s] [-z] [-f protocol_family | -p protocol] [-M core]",
688"       netstat -i | -I interface -s [-f protocol_family | -p protocol]\n"
689"               [-M core] [-N system]",
690"       netstat -m [-c] [-M core] [-N system]",
691"       netstat -r [-AenW] [-f address_family] [-M core] [-N system]",
692"       netstat -rs [-s] [-M core] [-N system]",
693"       netstat -g [-W] [-f address_family] [-M core] [-N system]",
694"       netstat -gs [-s] [-f address_family] [-M core] [-N system]");
695	exit(1);
696}
697